last executing test programs: 42m4.341238834s ago: executing program 0 (id=2227): syz_open_dev$loop(0x0, 0x1, 0x400000) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1) r3 = fsmount(r2, 0x0, 0x8) getdents(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093, 0x2000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x58}}, 0x20000000) 42m2.550985074s ago: executing program 0 (id=2232): r0 = epoll_create1(0x80000) r1 = userfaultfd(0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e50107000000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r0, @ANYBLOB="010080000a8100000000000000000000000000bb86"], 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000040)={@loopback, @loopback, @multicast1}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe0001002}) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) 42m2.359751975s ago: executing program 0 (id=2234): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1}]}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000240), &(0x7f0000000280)=0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/189, 0xbd}], 0x1) socket$kcm(0x21, 0x2, 0x2) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3, @private}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000c0c9036225e904415f132b16b3961d680cf1572fd197965a3601df955c7075732bc92fef2a974c71f3e71e9c6b9cd19cc4e4e68e0b4ccde54e68fbe2f5854a0b6f6bbd"], 0x10}, 0x8000) close_range(r3, 0xffffffffffffffff, 0x0) 42m1.855488099s ago: executing program 0 (id=2237): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) socket(0xb, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) inotify_init1(0x0) 42m0.099524727s ago: executing program 0 (id=2243): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000100), 0x24, 0x0) llistxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000200)=""/131, 0x83) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r3, 0x303, 0x70bd28, 0x0, {0xa}}, 0x14}}, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x8, 0x7, 0x3, 0x1ff, 'syz0\x00', 0x7f}, 0x0, [0x8, 0x8, 0x1000, 0x0, 0xb3d, 0xffffffff, 0x1000005, 0x901, 0xbbf, 0x7, 0x15b, 0x7, 0x5944, 0x9, 0x7, 0x4a7, 0x9, 0x5, 0xd, 0x3, 0x2c, 0x400, 0x40, 0x10000000, 0x6, 0x0, 0xffffffff, 0x800, 0x3, 0x3, 0x4, 0x6, 0x6, 0xfff, 0x3ff, 0x1, 0x5, 0x40000003, 0x5, 0x9, 0x7, 0x7fff, 0xffff8000, 0x80000001, 0x53f2806a, 0x0, 0x3, 0x0, 0xe, 0x4, 0x9, 0x5, 0x400, 0x3, 0x9, 0xfffff647, 0x8, 0x4, 0x5, 0x0, 0x9, 0x9, 0x5, 0x8, 0x98, 0xbe, 0x6, 0xa, 0x7, 0x80000000, 0x81, 0x10001, 0x2, 0x80000001, 0x69d, 0xb, 0x3, 0x1, 0x8, 0x9, 0x7, 0x9, 0x1, 0x3, 0x1, 0xffff, 0x6, 0x8, 0x7ff, 0x4, 0xef, 0xff, 0x6, 0x3, 0xf86, 0x589f, 0x3, 0x9, 0x895, 0xfff, 0x9, 0x89, 0x0, 0x1, 0xe0b2, 0x9, 0xfffff561, 0xe, 0x3, 0x3, 0xfffffffa, 0x3, 0x2, 0x1, 0x2ba, 0x1, 0xe, 0x0, 0xf, 0x2, 0xf2, 0x4, 0x0, 0x7, 0x2, 0x7, 0x6, 0x100]}) 41m57.462502782s ago: executing program 0 (id=2250): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x10a, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x16, 0xfc, 0x66, 0x0, 0xa, 0x6, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x13}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xd, 0x8, 0xac0, 0x0, 0x400, {[@generic={0x13, 0xe, "fd5e9db82817b2c15823d92f"}, @mss={0x2, 0x4, 0x9ec}, @exp_fastopen={0xfe, 0x9, 0xf989, "90df9c5f4e"}, @sack={0x5, 0x2}]}}, {"1de55e87d105d6d16997deb40ed1c49316b7ed5f83b2ec9371cdddcf2ac696402588e51856845dadac02101a3079fff6435b24cd3654334ca48f84c40a205849e8d8b6081f352f01ccff7029dee3f7b77359f2c9d8b08b2d78e494ada17c582f2295d01eda8b3af87d11e729507e18b5126ca8e69061fe9f96e26e396f1212a0fd459782c8c2d2f1dac540fa0a29e124342aca626ba581aed301fd2e7f614a96d2998bd3017da372c8e699c8"}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 41m42.326267003s ago: executing program 32 (id=2250): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x10a, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x3, 0x16, 0xfc, 0x66, 0x0, 0xa, 0x6, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x13}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xd, 0x8, 0xac0, 0x0, 0x400, {[@generic={0x13, 0xe, "fd5e9db82817b2c15823d92f"}, @mss={0x2, 0x4, 0x9ec}, @exp_fastopen={0xfe, 0x9, 0xf989, "90df9c5f4e"}, @sack={0x5, 0x2}]}}, {"1de55e87d105d6d16997deb40ed1c49316b7ed5f83b2ec9371cdddcf2ac696402588e51856845dadac02101a3079fff6435b24cd3654334ca48f84c40a205849e8d8b6081f352f01ccff7029dee3f7b77359f2c9d8b08b2d78e494ada17c582f2295d01eda8b3af87d11e729507e18b5126ca8e69061fe9f96e26e396f1212a0fd459782c8c2d2f1dac540fa0a29e124342aca626ba581aed301fd2e7f614a96d2998bd3017da372c8e699c8"}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 55.131496738s ago: executing program 3 (id=6721): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000600)) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 52.808562265s ago: executing program 3 (id=6725): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) dup(r1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r6, 0x4) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 48.900039174s ago: executing program 3 (id=6731): r0 = getpgid(0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r6 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000001f80)=r11, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) sendmmsg$unix(r9, &(0x7f0000000040), 0x0, 0x80880) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)={0xa0000001}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 47.733813459s ago: executing program 3 (id=6733): setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x401}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x9, 0x4]}, 0x8, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x27) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x4, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x46) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "e7d0f7878432ac64", "422ceff8f8b38f092f9da79faaab5e11a9d4cc8980ffe18c70e3ffffad64f869", "22100220", "8921512bd1740cab"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f0000000700)=@overlay={0xda, 0x7, 0x4, 0x800, 0x4, {}, {0x0, 0x8, 0x81, 0x9, 0x2, 0xf, "9bb7082a"}, 0x20000005, 0x3, {}, 0xfffffeff}) 44.073628049s ago: executing program 3 (id=6738): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) close_range(r4, r7, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56", 0xc0}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c57040000000000140003006e657464657673696d3000000000000014001680100001"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 40.675716013s ago: executing program 3 (id=6744): socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000200)=@l2={0x1f, 0x9, @none, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {0x0}, {&(0x7f00000015c0)="3fc0c58479b438d0817b045e45bebeedccc29c77449a5fb8408ad74e9859a03bb03770a6b259014bd1e2e9e4d9eccfa9f833dfebbe11552e4c1abd3d973238c9ac38c344eb109f6dacf3396a13ea12cabc126c5c05dfc24d63a48ff620e6d962356cce3fe3990631d31fb5c307c8e365b07732a16ea879ee5c3072eeafbf5969d39dfed302cc8fca99dc8381483ccb55", 0x90}], 0x3}, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) r7 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000440), 0x40000, 0x0) close_range(r4, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 40.128257015s ago: executing program 1 (id=6745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x40187014) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000240), 0xd06438d30b78908f, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) open(0x0, 0x200, 0x1e6) 36.368774851s ago: executing program 1 (id=6748): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 34.641520407s ago: executing program 2 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) close_range(r4, r7, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c57040000000000140003006e657464657673696d3000000000000014001680100001"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 32.896926032s ago: executing program 2 (id=6751): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x80000000}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x80, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_int(r5, 0x1, 0x31, &(0x7f0000000000)=0x8, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r6, r6, 0x0, 0x6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x1}}, 0x20) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x2) write$P9_RSTATu(r9, &(0x7f00000006c0)={0x50d, 0x7d, 0x0, {{0x500, 0x1f7, 0x0, 0x0, {}, 0x1000000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50d) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 32.895885351s ago: executing program 5 (id=6761): fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_submit(0x0, 0x0, &(0x7f0000002900)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x40187014) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000240), 0xd06438d30b78908f, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x1, 0x1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) open(0x0, 0x200, 0x1e6) 31.992985446s ago: executing program 4 (id=6752): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x844) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(0x0, 0x2, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40046602, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x28, 0x0, 0xfffffffd, 0x0, 0x101, 0x0, 0x12e, 0xffffffffffffffff}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x7e, &(0x7f0000002300)={@local, @local, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @loopback={0x300000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000640), &(0x7f0000000000)=0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 31.234011547s ago: executing program 5 (id=6753): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 31.115185876s ago: executing program 1 (id=6754): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) close_range(r4, r7, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d55d0ab9f8820efaeb3f8e965501aef3a2a22ed60f1b777b3af0df007039e022af0306693b3d25d65a55b864a61403e9744f56", 0xc0}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb", 0xc7}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c57040000000000140003006e657464657673696d3000000000000014001680100001"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 30.62986345s ago: executing program 2 (id=6755): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$media(0x0, 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(r4, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x3, 0x20, 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r7 = dup(r6) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r7, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 28.207654214s ago: executing program 4 (id=6756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000b95000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) unshare(0x20000400) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x2a8, 0x1b4, 0xac, 0x3a0, 0x1b4, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x3, 0x1, 0x7, 0x0, 0x3], 0x6, 0xa}}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x50c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r5, r5, 0xaf06, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000240)=0x14) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 27.759730882s ago: executing program 1 (id=6757): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 27.014506646s ago: executing program 5 (id=6758): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 26.682013069s ago: executing program 2 (id=6759): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x38}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000001e40)=""/4096, 0x0, 0x8, '\x00', r6, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000b60000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x7, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 25.424838617s ago: executing program 33 (id=6744): socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) clock_gettime(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x20000000) r4 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r5, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg(r2, &(0x7f00000002c0)={&(0x7f0000000200)=@l2={0x1f, 0x9, @none, 0x6}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000500)="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", 0x1000}, {0x0}, {&(0x7f00000015c0)="3fc0c58479b438d0817b045e45bebeedccc29c77449a5fb8408ad74e9859a03bb03770a6b259014bd1e2e9e4d9eccfa9f833dfebbe11552e4c1abd3d973238c9ac38c344eb109f6dacf3396a13ea12cabc126c5c05dfc24d63a48ff620e6d962356cce3fe3990631d31fb5c307c8e365b07732a16ea879ee5c3072eeafbf5969d39dfed302cc8fca99dc8381483ccb55", 0x90}], 0x3}, 0x50) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000100)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) r7 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000440), 0x40000, 0x0) close_range(r4, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 24.924927892s ago: executing program 4 (id=6762): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7}) close_range(r4, r7, 0x0) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {&(0x7f0000000580)="b0e1591e8b024f6c43d140ff6d19afdf0fe19cffb6e0b7dbc3d1026ecc8d55a498615034548a3579f9bd7697e6b74cc32ea3d6cd6579b720e5253fda4ef2e350c2b2f49c6f1e52bbd5fcf0", 0x4b}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c57040000000000140003006e657464657673696d3000000000000014001680100001"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 23.362269348s ago: executing program 4 (id=6763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000000)={0x8, 0x6, 0x4, 0x400, 0x1, {0x77359400}, {0x4, 0xc, 0xb, 0x4, 0x6, 0x91, "7ceff579"}, 0x3, 0x4, {}, 0x5}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 22.595395284s ago: executing program 1 (id=6764): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "20891c746dd9b4ef870a6dc7b72e054ddb85a64a37f6a780d9d9bb30"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000140)={0x3, r8, 0x1}) socket(0x10, 0x3, 0x0) 21.54165001s ago: executing program 4 (id=6765): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020054) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 21.490556727s ago: executing program 5 (id=6766): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) fanotify_init(0x200, 0x8000) dup(r1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x4) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 21.403178028s ago: executing program 2 (id=6767): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x844) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(0x0, 0x2, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40046602, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x28, 0x0, 0xfffffffd, 0x0, 0x101, 0x0, 0x12e, 0xffffffffffffffff}}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x7e, &(0x7f0000002300)={@local, @local, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @loopback={0x300000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000640), &(0x7f0000000000)=0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 20.875444695s ago: executing program 5 (id=6768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) r10 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x0, 0x3, 0x2b0}) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r11, 0x114, 0x3, &(0x7f00000007c0), 0x10) r12 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r11, 0x891b, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @broadcast}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r12, 0xc0285700, &(0x7f0000000180)={0x80000001, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) dup3(r13, r12, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1e, 0x3, "6c6f089a9b6209326f1965d77743bc85e638308456fa83a040a9"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 19.216750171s ago: executing program 5 (id=6769): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) r6 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) ptrace(0x10, r7) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x10, 0x803, 0x0) 17.820506772s ago: executing program 1 (id=6770): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 17.702954188s ago: executing program 4 (id=6771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000b95000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) unshare(0x20000400) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x2a8, 0x1b4, 0xac, 0x3a0, 0x1b4, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x3, 0x1, 0x7, 0x0, 0x3], 0x6, 0xa}}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x50c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r5, r5, 0xaf06, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000240)=0x14) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 15.607326481s ago: executing program 2 (id=6772): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 3.496326339s ago: executing program 34 (id=6769): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) r6 = fsopen(&(0x7f0000000240)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r7 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0xd) ptrace(0x10, r7) mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x10, 0x803, 0x0) 2.505369601s ago: executing program 35 (id=6770): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3c0, 0x3d8, 0x3d8, 0x3c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2b0, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x6, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 2.455703275s ago: executing program 36 (id=6771): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000b95000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) unshare(0x20000400) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x2a8, 0x1b4, 0xac, 0x3a0, 0x1b4, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x3, 0x1, 0x7, 0x0, 0x3], 0x6, 0xa}}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x50c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r5, r5, 0xaf06, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000240)=0x14) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 37 (id=6772): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000001100)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000080)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x24}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r10, 0x50009403, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) kernel console output (not intermixed with test programs): gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.506511][ T30] audit: type=1326 audit(1748507429.807:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.532481][ T30] audit: type=1326 audit(1748507429.837:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.559727][ T30] audit: type=1326 audit(1748507429.837:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.584119][ T30] audit: type=1326 audit(1748507429.837:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.648714][ T30] audit: type=1326 audit(1748507429.837:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.692695][T32509] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 3280.704796][ T30] audit: type=1326 audit(1748507429.837:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.766285][ T30] audit: type=1326 audit(1748507429.837:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.792314][ T30] audit: type=1326 audit(1748507429.837:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3165 comm="syz.4.6515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3280.902059][T32509] usb 4-1: Using ep0 maxpacket: 8 [ 3280.970651][T25243] usb 3-1: USB disconnect, device number 20 [ 3282.070331][ T3183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6516'. [ 3282.643404][T25243] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3282.822280][T25243] usb 2-1: Using ep0 maxpacket: 32 [ 3282.866664][T25243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3282.897933][T25243] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3282.929083][T25243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3282.959843][T25243] usb 2-1: Product: syz [ 3282.976693][T25243] usb 2-1: Manufacturer: syz [ 3283.000794][T25243] usb 2-1: SerialNumber: syz [ 3283.060809][T25243] usb 2-1: config 0 descriptor?? [ 3284.192353][T25243] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 3284.209759][T25243] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 3284.679575][T32509] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3284.687493][T32509] usb 4-1: no configurations [ 3284.695891][T32509] usb 4-1: can't read configurations, error -22 [ 3284.841392][T25243] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3285.032298][ T3211] netlink: 'syz.2.6521': attribute type 10 has an invalid length. [ 3285.058067][ T3212] netlink: 'syz.3.6522': attribute type 10 has an invalid length. [ 3285.085310][T25243] usb 6-1: config 0 has no interfaces? [ 3285.147924][T25243] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3285.202276][T25243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3285.245232][T25243] usb 6-1: Product: syz [ 3285.261225][T25243] usb 6-1: Manufacturer: syz [ 3285.275043][T25243] usb 6-1: SerialNumber: syz [ 3285.313597][T25243] usb 6-1: config 0 descriptor?? [ 3286.700745][T25243] usb 2-1: USB disconnect, device number 96 [ 3287.694017][ T3227] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[3227] [ 3288.395477][ T3232] bridge0: port 1(netdevsim0) entered blocking state [ 3288.411161][ T3232] bridge0: port 1(netdevsim0) entered disabled state [ 3288.792148][T32509] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 3288.912234][T21684] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 3288.952253][T32509] usb 3-1: Using ep0 maxpacket: 8 [ 3288.962511][T32509] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3288.978272][T32509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 3288.991555][T32509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3289.001553][T29808] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3289.013910][T32509] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3289.027622][T32509] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3289.043519][T32509] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3289.062019][T32509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3289.085093][T32509] usb 3-1: config 0 descriptor?? [ 3289.094645][T21684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3289.120944][T21684] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3289.141005][T21684] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3289.151047][T21684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3289.163414][T21684] usb 4-1: Product: syz [ 3289.167625][T21684] usb 4-1: Manufacturer: syz [ 3289.174755][T21684] usb 4-1: SerialNumber: syz [ 3289.181468][T21684] usb 4-1: config 0 descriptor?? [ 3289.191945][ T3237] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3289.202503][T21684] usb 4-1: ucan: probing device on interface #0 [ 3289.209195][T21684] usb 4-1: ucan: invalid EP count (1) [ 3289.215112][T21684] usb 4-1: ucan: probe failed; try to update the device firmware [ 3289.251589][T21684] usb 6-1: USB disconnect, device number 54 [ 3289.400063][T29808] usb 5-1: config 0 has no interfaces? [ 3289.498191][ T3237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3289.519314][ T3237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3289.766729][ T3243] netlink: 'syz.5.6529': attribute type 10 has an invalid length. [ 3290.267191][T29808] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3290.281111][T29808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3290.301374][T29808] usb 5-1: Product: syz [ 3290.308949][T29808] usb 5-1: Manufacturer: syz [ 3290.320272][T29808] usb 5-1: SerialNumber: syz [ 3290.391511][T29808] usb 5-1: config 0 descriptor?? [ 3291.204004][T29808] usb 5-1: USB disconnect, device number 42 [ 3291.218651][T22150] usb 3-1: USB disconnect, device number 21 [ 3291.962125][T29808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 3292.087669][T21684] usb 4-1: USB disconnect, device number 32 [ 3292.132084][T29808] usb 3-1: Using ep0 maxpacket: 32 [ 3292.139015][T29808] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 3292.151893][T29808] usb 3-1: config 0 has no interface number 0 [ 3292.162793][T29808] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3292.175784][T29808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3292.184392][T29808] usb 3-1: Product: syz [ 3292.191517][T29808] usb 3-1: Manufacturer: syz [ 3292.206274][T29808] usb 3-1: SerialNumber: syz [ 3292.228971][T29808] usb 3-1: config 0 descriptor?? [ 3292.246001][T29808] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3292.505213][T29808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3292.541294][ T3262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 3292.563695][ T3262] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 3292.572884][T29808] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3292.832366][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 113 [ 3293.053149][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3293.054198][T22150] usb 3-1: USB disconnect, device number 22 [ 3293.087900][T22150] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3293.106834][T22150] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3293.120280][T22150] quatech2 3-1:0.51: device disconnected [ 3294.242342][T22150] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3294.344253][ T3285] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3294.393760][T22150] usb 6-1: Using ep0 maxpacket: 32 [ 3294.527744][T22150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3294.550052][T22150] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3294.574570][T22150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3294.601051][T22150] usb 6-1: Product: syz [ 3294.610353][T22150] usb 6-1: Manufacturer: syz [ 3294.635484][T22150] usb 6-1: SerialNumber: syz [ 3294.703730][T22150] usb 6-1: config 0 descriptor?? [ 3295.169455][ T30] audit: type=1326 audit(1748507444.517:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.6536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 3295.220517][ T30] audit: type=1326 audit(1748507444.517:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.6536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 3295.276835][ T30] audit: type=1326 audit(1748507444.517:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.6536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb3558 code=0x7ffc0000 [ 3295.315775][ T30] audit: type=1326 audit(1748507444.517:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3274 comm="syz.3.6536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000 [ 3296.573447][T22150] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 3296.580506][T22150] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 3296.960724][T22150] usb 6-1: USB disconnect, device number 55 [ 3297.150054][ T3295] : (slave dummy0): Releasing backup interface [ 3297.158583][ T3295] dummy0: left promiscuous mode [ 3297.170870][ T3295] dummy0: left allmulticast mode [ 3297.252232][T25243] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3297.470759][T25243] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3297.503356][T25243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.526101][T25243] usb 4-1: config 0 descriptor?? [ 3297.542511][T22150] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3297.552350][T29808] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 3297.778360][T22150] usb 5-1: Using ep0 maxpacket: 32 [ 3297.778394][T29808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3297.815821][T22150] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 3297.832121][T25243] kaweth 4-1:0.0: Firmware present in device. [ 3297.839686][T22150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3297.862540][T22150] usb 5-1: config 0 descriptor?? [ 3297.878446][T22150] as10x_usb: device has been detected [ 3297.894726][T29808] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3297.912170][T21684] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 3297.941556][T29808] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3297.967206][T29808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3297.983531][T29808] usb 6-1: Product: syz [ 3297.989658][T29808] usb 6-1: Manufacturer: syz [ 3297.999678][T29808] usb 6-1: SerialNumber: syz [ 3298.034633][T25243] kaweth 4-1:0.0: Statistics collection: 0 [ 3298.041072][T22150] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 3298.052291][T25243] kaweth 4-1:0.0: Multicast filter limit: 0 [ 3298.062125][T25243] kaweth 4-1:0.0: MTU: 0 [ 3298.066417][T25243] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3298.100592][T21684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3298.135341][T29808] usb 6-1: config 0 descriptor?? [ 3298.137557][T22150] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 3298.152818][ T3301] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3298.175831][T21684] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3298.193561][T29808] usb 6-1: ucan: probing device on interface #0 [ 3298.213272][T29808] usb 6-1: ucan: invalid EP count (1) [ 3298.228896][T21684] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3298.244837][T29808] usb 6-1: ucan: probe failed; try to update the device firmware [ 3298.265584][T21684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3298.305603][T21684] usb 3-1: Product: syz [ 3298.321094][T21684] usb 3-1: Manufacturer: syz [ 3298.337733][T21684] usb 3-1: SerialNumber: syz [ 3298.360055][T21684] usb 3-1: config 0 descriptor?? [ 3298.379069][ T3295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3298.400280][T22150] as10x_usb: error during firmware upload part1 [ 3298.411467][ T3295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3298.430588][ T3301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3298.439632][ T3301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3298.448235][T22150] Registered device nBox DVB-T Dongle [ 3298.538542][ T3305] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3298.561707][T22150] usb 5-1: USB disconnect, device number 43 [ 3298.638338][T21684] usb 3-1: ucan: probing device on interface #0 [ 3298.675925][T21684] usb 3-1: ucan: invalid EP count (1) [ 3298.687558][T21684] usb 3-1: ucan: probe failed; try to update the device firmware [ 3298.709802][T22150] Unregistered device nBox DVB-T Dongle [ 3298.749503][T22150] as10x_usb: device has been disconnected [ 3298.973732][ T3305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3299.014821][ T3305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3299.204586][T10861] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 3299.446223][T10861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3299.484478][T10861] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3299.672225][T10861] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3299.731101][T10861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.759372][T10861] usb 2-1: Product: syz [ 3299.768820][T10861] usb 2-1: Manufacturer: syz [ 3299.780045][T10861] usb 2-1: SerialNumber: syz [ 3299.815211][T10861] usb 2-1: config 0 descriptor?? [ 3299.908550][ T3310] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3300.121915][T10861] usb 2-1: ucan: probing device on interface #0 [ 3300.159166][T10861] usb 2-1: ucan: invalid EP count (1) [ 3300.179788][T10861] usb 2-1: ucan: probe failed; try to update the device firmware [ 3300.408849][T10861] usb 6-1: USB disconnect, device number 56 [ 3300.477976][ T3310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3300.490824][ T3310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3300.575927][ T3314] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[3314] [ 3300.791882][ T3318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6543'. [ 3300.890321][T25243] kaweth 4-1:0.0: Error setting SOFS wait [ 3300.897022][T25243] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 3300.942738][T25243] usb 4-1: USB disconnect, device number 33 [ 3301.116153][ T3321] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6544'. [ 3301.510174][T25243] usb 3-1: USB disconnect, device number 23 [ 3302.734518][ T3342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6546'. [ 3303.093951][ T3323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 3303.342159][ T3323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 3303.376573][ T3325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6545'. [ 3303.887784][T21684] usb 2-1: USB disconnect, device number 97 [ 3304.601522][ T3354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6550'. [ 3304.995404][ T3361] netlink: 'syz.2.6552': attribute type 1 has an invalid length. [ 3305.240902][ T3361] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3305.586548][T21684] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 3305.992773][ T3373] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3306.028560][T21684] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3306.069971][T21684] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3306.163499][ T3373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6554'. [ 3306.179664][T21684] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3306.226017][T21684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.243227][T21684] usb 3-1: Product: syz [ 3306.252536][T21684] usb 3-1: Manufacturer: syz [ 3306.262035][T21684] usb 3-1: SerialNumber: syz [ 3306.292186][T21684] usb 3-1: config 0 descriptor?? [ 3306.308562][T21684] usb 3-1: selecting invalid altsetting 0 [ 3306.502064][T29808] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 3306.552719][T32509] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3306.811140][T32509] usb 2-1: Using ep0 maxpacket: 32 [ 3306.838341][T32509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3306.922872][T32509] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3306.932202][T32509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.940548][T32509] usb 2-1: Product: syz [ 3306.945415][T32509] usb 2-1: Manufacturer: syz [ 3306.950259][T32509] usb 2-1: SerialNumber: syz [ 3306.988520][T32509] usb 2-1: config 0 descriptor?? [ 3307.104997][T29808] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3307.155882][T29808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3307.233223][T29808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3307.299755][T29808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3307.338447][T29808] usb 5-1: Product: syz [ 3307.356144][T29808] usb 5-1: Manufacturer: syz [ 3307.379376][T29808] usb 5-1: SerialNumber: syz [ 3307.402303][T29808] usb 5-1: config 0 descriptor?? [ 3307.436688][T21684] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3307.495093][T29808] usb 5-1: selecting invalid altsetting 0 [ 3307.992021][T21684] usb 4-1: config 0 has no interfaces? [ 3308.012621][T32509] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 3308.023757][T32509] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 3308.214281][T21684] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3308.227952][T21684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3308.296221][T21684] usb 4-1: Product: syz [ 3308.316091][T10861] usb 3-1: USB disconnect, device number 24 [ 3308.327444][T21684] usb 4-1: Manufacturer: syz [ 3308.359201][T21684] usb 4-1: SerialNumber: syz [ 3308.429148][T21684] usb 4-1: config 0 descriptor?? [ 3309.797035][T10861] usb 2-1: USB disconnect, device number 98 [ 3310.387697][T10861] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3310.442296][T21684] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3310.659175][T22150] usb 5-1: USB disconnect, device number 44 [ 3310.891452][T10861] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3310.906066][T10861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3310.933307][T10861] usb 2-1: config 0 descriptor?? [ 3310.959618][T21684] usb 6-1: config 0 has no interfaces? [ 3310.973810][ T30] audit: type=1804 audit(1748507460.327:5491): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6560" name="/newroot/1432/bus" dev="tmpfs" ino=7486 res=1 errno=0 [ 3311.961867][T10861] kaweth 2-1:0.0: Firmware present in device. [ 3312.107081][T21684] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3312.123776][T21684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3312.135883][T10861] kaweth 2-1:0.0: Statistics collection: 0 [ 3312.144810][T10861] kaweth 2-1:0.0: Multicast filter limit: 0 [ 3312.173753][T10861] kaweth 2-1:0.0: MTU: 0 [ 3312.182499][T10861] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3312.183060][T21684] usb 6-1: Product: syz [ 3312.229872][T21684] usb 6-1: Manufacturer: syz [ 3312.237260][T21684] usb 6-1: SerialNumber: syz [ 3312.503284][T21684] usb 6-1: config 0 descriptor?? [ 3312.803822][T22150] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3313.006487][ T3422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6562'. [ 3313.098157][T21684] usb 6-1: can't set config #0, error -71 [ 3313.109391][T22150] usb 3-1: config 0 has no interfaces? [ 3313.130834][T22150] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3313.140630][T22150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.149349][T22150] usb 3-1: Product: syz [ 3313.155024][T22150] usb 3-1: Manufacturer: syz [ 3313.159742][T22150] usb 3-1: SerialNumber: syz [ 3313.178271][T22150] usb 3-1: config 0 descriptor?? [ 3313.200829][T21684] usb 6-1: USB disconnect, device number 57 [ 3314.292242][T22150] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3314.447968][T22150] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3314.482477][T22150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3314.507163][T22150] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3314.525356][T22150] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3314.552077][T22150] usb 6-1: Product: syz [ 3314.563027][T22150] usb 6-1: Manufacturer: syz [ 3314.577896][T22150] usb 6-1: SerialNumber: syz [ 3314.646774][T22150] usb 6-1: config 0 descriptor?? [ 3314.725696][T22150] usb 6-1: selecting invalid altsetting 0 [ 3315.306937][T21684] usb 4-1: USB disconnect, device number 34 [ 3315.937722][T10861] kaweth 2-1:0.0: Error setting SOFS wait [ 3315.951412][T10861] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3315.991483][T10861] usb 2-1: USB disconnect, device number 99 [ 3316.067686][T21684] usb 3-1: USB disconnect, device number 25 [ 3316.428353][T22150] usb 6-1: USB disconnect, device number 58 [ 3316.865762][T10861] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3317.305510][ T3454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6565'. [ 3317.335626][T10861] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3317.428224][T10861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3317.482694][T10861] usb 3-1: config 0 descriptor?? [ 3317.862449][T21684] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3318.091802][T21684] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3318.126937][T21684] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3318.189874][T21684] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3318.212487][T21684] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3318.239054][T21684] usb 4-1: Product: syz [ 3318.245127][T21684] usb 4-1: Manufacturer: syz [ 3318.259750][T21684] usb 4-1: SerialNumber: syz [ 3318.321152][T21684] usb 4-1: config 0 descriptor?? [ 3318.346219][T21684] usb 4-1: selecting invalid altsetting 0 [ 3318.363576][T10861] kaweth 3-1:0.0: Firmware present in device. [ 3318.381329][T10861] kaweth 3-1:0.0: Statistics collection: 0 [ 3318.397687][T10861] kaweth 3-1:0.0: Multicast filter limit: 0 [ 3318.415598][T10861] kaweth 3-1:0.0: MTU: 0 [ 3318.440468][T10861] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3318.742093][T29808] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 3319.070582][T29808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3319.134637][T29808] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3319.175925][T29808] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3319.203164][T29808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.238304][ T3463] ptrace attach of "./syz-executor exec"[14939] was attempted by "./syz-executor exec"[3463] [ 3319.335639][T29808] usb 5-1: Product: syz [ 3319.349185][T29808] usb 5-1: Manufacturer: syz [ 3319.376299][T29808] usb 5-1: SerialNumber: syz [ 3319.450633][T29808] usb 5-1: config 0 descriptor?? [ 3319.463097][ T3460] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3319.492986][T29808] usb 5-1: ucan: probing device on interface #0 [ 3319.499319][T29808] usb 5-1: ucan: invalid EP count (1) [ 3319.521882][ T3465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6569'. [ 3319.546833][T29808] usb 5-1: ucan: probe failed; try to update the device firmware [ 3319.795869][ T3460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3319.844933][ T3460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3320.801100][T10861] kaweth 3-1:0.0: Error setting SOFS wait [ 3320.827704][T10861] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 3320.949931][T10861] usb 3-1: USB disconnect, device number 26 [ 3321.229275][T29808] usb 4-1: USB disconnect, device number 35 [ 3321.534999][T10861] usb 5-1: USB disconnect, device number 45 [ 3322.138383][ T3485] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3322.499776][ T30] audit: type=1326 audit(1748507471.847:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3472 comm="syz.4.6572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3322.612556][ T30] audit: type=1326 audit(1748507471.847:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3472 comm="syz.4.6572" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 3322.655108][ T3488] netlink: 'syz.2.6582': attribute type 10 has an invalid length. [ 3324.512081][T29808] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 3324.772529][T21684] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3324.780760][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 3324.922319][T21684] usb 2-1: device descriptor read/64, error -32 [ 3325.157564][T29808] usb 6-1: config 0 has no interfaces? [ 3325.185820][T21684] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3325.194620][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 3325.332243][T21684] usb 2-1: device descriptor read/64, error -32 [ 3325.404660][T29808] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3325.414277][T29808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.426698][T29808] usb 6-1: Product: syz [ 3325.441207][T29808] usb 6-1: Manufacturer: syz [ 3325.446222][T21684] usb usb2-port1: attempt power cycle [ 3325.459563][T29808] usb 6-1: SerialNumber: syz [ 3325.462152][T10861] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3325.491513][T29808] usb 6-1: config 0 descriptor?? [ 3325.822584][T21684] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3325.861849][T21684] usb 2-1: Using ep0 maxpacket: 8 [ 3325.894552][T21684] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 3325.906010][T21684] usb 2-1: config 2 has no interface number 0 [ 3325.913567][T21684] usb 2-1: config 2 interface 31 has no altsetting 0 [ 3325.946780][T21684] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3325.956255][T21684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.968442][T21684] usb 2-1: Product: syz [ 3325.973719][T21684] usb 2-1: Manufacturer: syz [ 3325.978846][T21684] usb 2-1: SerialNumber: syz [ 3326.025256][T21684] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 3326.392546][T21684] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3326.640547][T10861] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3326.687894][T10861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.721781][T21684] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3326.735643][T21684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.755464][T10861] usb 5-1: config 0 descriptor?? [ 3326.781007][T21684] usb 4-1: config 0 descriptor?? [ 3327.103620][T10861] kaweth 5-1:0.0: Firmware present in device. [ 3327.119040][T10861] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 3327.147354][T10861] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3327.175384][T10861] usb 5-1: USB disconnect, device number 46 [ 3327.205518][T21684] kaweth 4-1:0.0: Firmware present in device. [ 3327.399391][T21684] kaweth 4-1:0.0: Statistics collection: 0 [ 3327.417331][T22150] usb 6-1: USB disconnect, device number 59 [ 3327.453129][T21684] kaweth 4-1:0.0: Multicast filter limit: 0 [ 3327.483558][T21684] kaweth 4-1:0.0: MTU: 0 [ 3327.487892][T21684] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3327.802672][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.809160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3330.322099][T10861] usb 2-1: USB disconnect, device number 102 [ 3331.102281][T10861] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 3331.334368][T10861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3331.352060][T10861] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3331.522146][T10861] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3331.535590][T10861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3331.614693][T10861] usb 2-1: Product: syz [ 3331.631876][T10861] usb 2-1: Manufacturer: syz [ 3331.650633][T10861] usb 2-1: SerialNumber: syz [ 3331.737023][T10861] usb 2-1: config 0 descriptor?? [ 3331.764718][ T3549] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3331.781582][ T3549] netlink: 'syz.2.6585': attribute type 1 has an invalid length. [ 3331.866812][ T3540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3331.953141][T10861] usb 2-1: ucan: probing device on interface #0 [ 3331.962006][T10861] usb 2-1: ucan: invalid EP count (1) [ 3331.976575][T10861] usb 2-1: ucan: probe failed; try to update the device firmware [ 3332.277470][ T3539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3332.326837][ T3539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3332.367348][T22150] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 3332.853915][T22150] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3332.886142][T22150] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3332.959005][T22150] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3333.007567][T32509] usb 2-1: USB disconnect, device number 103 [ 3333.122445][T22150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3333.189619][T22150] usb 3-1: Product: syz [ 3333.289897][T22150] usb 3-1: Manufacturer: syz [ 3333.320255][T22150] usb 3-1: SerialNumber: syz [ 3333.473087][T22150] usb 3-1: config 0 descriptor?? [ 3333.666730][T22150] usb 3-1: selecting invalid altsetting 0 [ 3334.046617][T21684] kaweth 4-1:0.0: Error setting SOFS wait [ 3334.056250][T21684] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 3334.101396][T21684] usb 4-1: USB disconnect, device number 36 [ 3334.273380][ T3561] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3334.582385][T21684] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3334.743609][T21684] usb 4-1: Using ep0 maxpacket: 16 [ 3334.842104][ T30] audit: type=1326 audit(1748507484.127:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3557 comm="syz.1.6587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 3334.870509][ T30] audit: type=1326 audit(1748507484.127:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3557 comm="syz.1.6587" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 3334.920305][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6588'. [ 3335.329703][T32509] usb 3-1: USB disconnect, device number 27 [ 3336.402143][T22150] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 3336.550608][T10861] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 3336.562501][T22150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3336.715102][T10861] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3336.724918][T22150] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3336.781454][T22150] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3336.793295][T22150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.801369][T22150] usb 5-1: Product: syz [ 3336.895227][T22150] usb 5-1: Manufacturer: syz [ 3336.914992][T22150] usb 5-1: SerialNumber: syz [ 3337.008698][T22150] usb 5-1: config 0 descriptor?? [ 3337.049950][ T3585] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3337.069268][T22150] usb 5-1: ucan: probing device on interface #0 [ 3337.103447][T22150] usb 5-1: ucan: invalid EP count (1) [ 3337.118070][T22150] usb 5-1: ucan: probe failed; try to update the device firmware [ 3337.131273][ T3589] fido_id[3589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3337.406569][ T3585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3337.415697][ T3585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3338.013208][T21684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3338.081682][T21684] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 3338.089656][T21684] usb 4-1: can't read configurations, error -71 [ 3339.264199][T32509] usb 5-1: USB disconnect, device number 47 [ 3339.382210][T22150] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3339.972282][T21684] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3340.416022][ T3630] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3340.626460][ T3632] netlink: 'syz.3.6600': attribute type 1 has an invalid length. [ 3340.779009][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6600'. [ 3340.808998][T21684] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3340.829380][T21684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3340.846624][T21684] usb 5-1: config 0 descriptor?? [ 3341.152548][T22150] usb 3-1: config 0 has no interfaces? [ 3341.212364][T32509] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 3341.243984][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 3341.255617][T22150] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3341.262584][T21684] kaweth 5-1:0.0: Firmware present in device. [ 3341.266977][T22150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3341.296572][T22150] usb 3-1: Product: syz [ 3341.300942][T22150] usb 3-1: Manufacturer: syz [ 3341.312750][T22150] usb 3-1: SerialNumber: syz [ 3341.392255][T32509] usb 4-1: device descriptor read/64, error -32 [ 3341.490469][T21684] kaweth 5-1:0.0: Statistics collection: 0 [ 3341.513130][T21684] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3341.531291][T21684] kaweth 5-1:0.0: MTU: 0 [ 3341.551150][T21684] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3341.662650][T32509] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 3341.673028][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 3341.721393][T22150] usb 3-1: config 0 descriptor?? [ 3341.822215][T32509] usb 4-1: device descriptor read/64, error -32 [ 3341.932559][T32509] usb usb4-port1: attempt power cycle [ 3342.282135][T32509] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 3342.315289][ C0] raw-gadget.2 gadget.3: failed to queue control event [ 3342.334556][T32509] usb 4-1: device descriptor read/8, error -32 [ 3342.463385][T32509] raw-gadget.2 gadget.3: failed to queue suspend event [ 3342.490364][T32509] raw-gadget.2 gadget.3: failed to queue reset event [ 3342.581576][T32509] raw-gadget.2 gadget.3: failed to queue resume event [ 3342.682071][T32509] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 3342.702874][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 3342.713218][T32509] usb 4-1: device descriptor read/8, error -32 [ 3342.822277][T32509] raw-gadget.2 gadget.3: failed to queue suspend event [ 3342.830844][T32509] usb usb4-port1: unable to enumerate USB device [ 3343.782092][T32509] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3343.802674][ T3629] raw-gadget.2 gadget.3: failed to queue disconnect event [ 3344.382051][T32509] usb 2-1: Using ep0 maxpacket: 8 [ 3345.814014][T29808] usb 3-1: USB disconnect, device number 28 [ 3345.950841][ T3663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6606'. [ 3346.131721][T21684] kaweth 5-1:0.0: Error setting SOFS wait [ 3346.141520][T21684] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3346.254208][T21684] usb 5-1: USB disconnect, device number 48 [ 3346.558431][T21684] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 3346.588642][T21684] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3346.866176][ T3675] fido_id[3675]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3348.162340][T10861] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 3348.331905][T10861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3348.358022][T10861] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3348.382506][T10861] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3348.396038][T10861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.406835][T10861] usb 4-1: Product: syz [ 3348.411039][T10861] usb 4-1: Manufacturer: syz [ 3348.422844][T10861] usb 4-1: SerialNumber: syz [ 3348.437587][T10861] usb 4-1: config 0 descriptor?? [ 3348.454034][ T3682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3348.475193][T10861] usb 4-1: ucan: probing device on interface #0 [ 3348.481514][T10861] usb 4-1: ucan: invalid EP count (1) [ 3348.496404][T10861] usb 4-1: ucan: probe failed; try to update the device firmware [ 3348.886096][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3348.909090][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3349.486260][T10861] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 3349.612436][T32509] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3349.632150][T32509] usb 2-1: no configurations [ 3349.636834][T32509] usb 2-1: can't read configurations, error -22 [ 3349.645070][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3349.658272][T10861] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3349.710559][T10861] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3349.772440][T10861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3349.791116][T10861] usb 5-1: Product: syz [ 3349.799024][T10861] usb 5-1: Manufacturer: syz [ 3349.808045][T10861] usb 5-1: SerialNumber: syz [ 3349.825224][T10861] usb 5-1: config 0 descriptor?? [ 3349.838770][ T3684] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3349.857734][T10861] usb 5-1: ucan: probing device on interface #0 [ 3349.864182][T10861] usb 5-1: ucan: invalid EP count (1) [ 3349.869711][T10861] usb 5-1: ucan: probe failed; try to update the device firmware [ 3350.076263][ T3684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3350.093451][ T3684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3350.282686][T32509] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 3350.368786][ T3695] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 3350.443028][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6611'. [ 3350.533820][T32509] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 3350.550025][T32509] usb 2-1: config 0 has no interface number 0 [ 3350.566988][T32509] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3350.592005][T32509] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 3350.616459][T32509] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 3350.641528][T32509] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3350.692234][T32509] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 3350.722333][T10861] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 3350.757222][T21684] usb 5-1: USB disconnect, device number 49 [ 3350.765666][T32509] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 3350.844401][T32509] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 3350.884487][T10861] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3350.895625][T32509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3350.908149][T10861] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3350.928800][T10861] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3350.953259][T10861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3350.961537][T10861] usb 3-1: Product: syz [ 3350.967990][T10861] usb 3-1: Manufacturer: syz [ 3350.992132][T10861] usb 3-1: SerialNumber: syz [ 3351.049020][T10861] usb 3-1: config 0 descriptor?? [ 3351.049078][T32509] usb 2-1: config 0 descriptor?? [ 3351.076855][T10861] usb 3-1: selecting invalid altsetting 0 [ 3351.134850][ T3689] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 3351.152656][ T3689] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 3351.173344][T32509] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 3353.213118][T32509] usb 2-1: USB disconnect, device number 105 [ 3353.237825][T32509] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 3353.301016][T29808] usb 3-1: USB disconnect, device number 29 [ 3353.546445][ T3715] netlink: 'syz.2.6615': attribute type 3 has an invalid length. [ 3353.763790][ T3720] netlink: 'syz.1.6614': attribute type 13 has an invalid length. [ 3354.428933][T32509] usb 4-1: USB disconnect, device number 43 [ 3354.672375][T29808] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3354.709777][ T3720] gretap0: refused to change device tx_queue_len [ 3354.716699][ T3720] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 3354.839463][ T3721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3354.855528][T29808] usb 3-1: Using ep0 maxpacket: 16 [ 3354.870005][T29808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 3354.883794][T29808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3354.906289][T29808] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 3354.918823][T29808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.921245][ T3721] 8021q: adding VLAN 0 to HW filter on device team0 [ 3354.927781][T29808] usb 3-1: Product: syz [ 3354.945160][T29808] usb 3-1: Manufacturer: syz [ 3354.952387][T29808] usb 3-1: SerialNumber: syz [ 3354.974469][T29808] usb 3-1: config 0 descriptor?? [ 3354.983745][ T3724] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3354.991364][ T3724] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3355.050553][ T3721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3355.122066][T32509] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3355.447985][T32509] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3355.502572][T32509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.547546][T32509] usb 4-1: config 0 descriptor?? [ 3355.903794][T10861] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3355.975121][T32509] kaweth 4-1:0.0: Firmware present in device. [ 3356.042102][T22150] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3356.065322][T10861] usb 5-1: Using ep0 maxpacket: 32 [ 3356.092359][T10861] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 3356.100888][T10861] usb 5-1: config 0 has no interface number 0 [ 3356.115044][T10861] usb 5-1: config 0 interface 184 has no altsetting 0 [ 3356.152291][T10861] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3356.177114][T10861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3356.195476][T10861] usb 5-1: Product: syz [ 3356.199948][T10861] usb 5-1: Manufacturer: syz [ 3356.206744][T10861] usb 5-1: SerialNumber: syz [ 3356.216183][T22150] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3356.228152][T22150] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3356.257847][T10861] usb 5-1: config 0 descriptor?? [ 3356.273507][T22150] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3356.299249][T32509] kaweth 4-1:0.0: Statistics collection: 0 [ 3356.300907][T10861] smsc75xx v1.0.0 [ 3356.314571][T22150] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3356.327301][T22150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3356.374545][T22150] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3356.391468][T22150] usb 2-1: invalid MIDI out EP 0 [ 3356.570608][T22150] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3356.603098][ T2800] udevd[2800]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3356.837961][T32509] kaweth 4-1:0.0: Multicast filter limit: 0 [ 3356.846318][T32509] kaweth 4-1:0.0: MTU: 0 [ 3356.850724][T32509] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3356.870385][ T3741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6620'. [ 3356.917143][ T3741] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3356.926694][T29808] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3356.927019][T29808] asix 3-1:0.0: probe with driver asix failed with error -71 [ 3357.033455][T29808] usb 3-1: USB disconnect, device number 30 [ 3358.600755][T10861] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 3358.631634][T10861] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 3358.675442][T10861] usb 5-1: USB disconnect, device number 50 [ 3358.947599][ T3757] bridge0: port 1(netdevsim0) entered blocking state [ 3358.956180][T32509] kaweth 4-1:0.0: Error setting SOFS wait [ 3358.962602][T32509] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 3358.971728][ T3757] bridge0: port 1(netdevsim0) entered disabled state [ 3358.987747][T32509] usb 4-1: USB disconnect, device number 44 [ 3359.012851][T22150] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3359.234426][T22150] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3359.254674][T22150] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3359.276548][T22150] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3359.299427][T22150] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3359.307838][T22150] usb 3-1: Product: syz [ 3359.315751][T22150] usb 3-1: Manufacturer: syz [ 3359.320374][T22150] usb 3-1: SerialNumber: syz [ 3359.334936][T22150] usb 3-1: config 0 descriptor?? [ 3359.359005][T22150] usb 3-1: selecting invalid altsetting 0 [ 3359.392177][T25243] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3359.564636][T25243] usb 5-1: Using ep0 maxpacket: 8 [ 3359.616843][T25243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3359.630010][T25243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 3359.654763][T25243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3359.664965][T25243] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3359.688459][T25243] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3359.714154][T25243] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3359.736740][T25243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3359.754129][T25243] usb 5-1: config 0 descriptor?? [ 3359.837191][T25243] usb 2-1: USB disconnect, device number 106 [ 3361.083898][T25243] usb 3-1: USB disconnect, device number 31 [ 3361.761237][ T3782] netlink: 'syz.2.6626': attribute type 1 has an invalid length. [ 3361.775045][T21684] usb 5-1: USB disconnect, device number 51 [ 3362.033153][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6626'. [ 3362.452485][T21684] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 3363.017658][T21684] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3363.070043][T21684] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3363.098602][T21684] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3363.111170][T21684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3363.119937][T21684] usb 3-1: Product: syz [ 3363.127702][T21684] usb 3-1: Manufacturer: syz [ 3363.133388][T21684] usb 3-1: SerialNumber: syz [ 3363.146219][T21684] usb 3-1: config 0 descriptor?? [ 3363.165669][T21684] usb 3-1: selecting invalid altsetting 0 [ 3363.798266][ T3797] netlink: 'syz.4.6630': attribute type 10 has an invalid length. [ 3363.842233][T21684] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 3364.014876][T21684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3364.032137][T21684] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3364.095197][ T3797] dummy0: entered promiscuous mode [ 3364.106711][T21684] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3364.119656][T21684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3364.135819][T21684] usb 2-1: Product: syz [ 3364.147443][T21684] usb 2-1: Manufacturer: syz [ 3364.173149][T21684] usb 2-1: SerialNumber: syz [ 3364.181775][ T3797] dummy0: entered allmulticast mode [ 3364.192549][T21684] usb 2-1: config 0 descriptor?? [ 3364.201565][ T3794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3364.313760][ T3797] : (slave dummy0): Enslaving as an active interface with a down link [ 3364.383363][T21684] usb 2-1: ucan: probing device on interface #0 [ 3364.575857][T21684] usb 2-1: ucan: invalid EP count (1) [ 3364.597774][T21684] usb 2-1: ucan: probe failed; try to update the device firmware [ 3364.669757][ T3794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3364.730012][ T3794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3365.095366][T25243] usb 3-1: USB disconnect, device number 32 [ 3365.552179][T25243] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3366.092814][T32509] usb 2-1: USB disconnect, device number 107 [ 3366.117930][T25243] usb 3-1: config 0 has no interfaces? [ 3366.139426][T25243] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3366.153579][T25243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3366.163423][T25243] usb 3-1: Product: syz [ 3366.167698][T25243] usb 3-1: Manufacturer: syz [ 3366.175292][T25243] usb 3-1: SerialNumber: syz [ 3366.186279][T25243] usb 3-1: config 0 descriptor?? [ 3366.702078][T32509] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3366.819734][T21684] usb 3-1: USB disconnect, device number 33 [ 3366.844380][ T3818] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3366.882413][T32509] usb 2-1: Using ep0 maxpacket: 8 [ 3366.902805][ T3818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6635'. [ 3366.940546][T32509] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 3366.950140][T32509] usb 2-1: config 2 has no interface number 0 [ 3366.961066][T32509] usb 2-1: config 2 interface 31 has no altsetting 0 [ 3367.033762][ T3817] netlink: 'syz.5.6636': attribute type 10 has an invalid length. [ 3367.082393][T32509] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3367.122355][T32509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3367.140335][T32509] usb 2-1: Product: syz [ 3367.151284][T32509] usb 2-1: Manufacturer: syz [ 3367.160994][T32509] usb 2-1: SerialNumber: syz [ 3367.172180][T29808] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 3367.256315][T32509] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 3367.838754][T29808] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3367.859356][T29808] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3367.893228][T29808] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3367.908589][T29808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3367.927172][T29808] usb 5-1: Product: syz [ 3367.931376][T29808] usb 5-1: Manufacturer: syz [ 3367.949953][T29808] usb 5-1: SerialNumber: syz [ 3367.967387][T29808] usb 5-1: config 0 descriptor?? [ 3367.972280][T25243] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3367.987397][T29808] usb 5-1: selecting invalid altsetting 0 [ 3368.392677][T25243] usb 4-1: Using ep0 maxpacket: 32 [ 3368.432366][T25243] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 3368.460817][T25243] usb 4-1: config 0 has no interface number 0 [ 3368.482446][T25243] usb 4-1: config 0 interface 184 has no altsetting 0 [ 3368.539382][T25243] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3368.554440][T25243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.569571][T25243] usb 4-1: Product: syz [ 3368.576963][T25243] usb 4-1: Manufacturer: syz [ 3368.583378][T25243] usb 4-1: SerialNumber: syz [ 3368.618426][T25243] usb 4-1: config 0 descriptor?? [ 3368.645717][T25243] smsc75xx v1.0.0 [ 3368.655729][T25243] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3368.677053][T25243] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 3369.610063][ T3837] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3369.638998][ T3837] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 3369.877578][ T3840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6639'. [ 3370.030223][T29808] usb 2-1: USB disconnect, device number 108 [ 3370.322039][T32509] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 3370.431304][T29808] usb 5-1: USB disconnect, device number 52 [ 3370.518589][ T3837] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3370.533587][T32509] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3370.556667][T32509] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3370.569027][T32509] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3370.579338][T32509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3370.595837][T32509] usb 3-1: Product: syz [ 3370.600265][T32509] usb 3-1: Manufacturer: syz [ 3370.605407][T32509] usb 3-1: SerialNumber: syz [ 3370.612679][T32509] usb 3-1: config 0 descriptor?? [ 3370.630985][T32509] usb 3-1: selecting invalid altsetting 0 [ 3370.986882][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6642'. [ 3371.132540][T32509] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3371.607928][T32509] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3371.629891][T32509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.664810][T32509] usb 2-1: config 0 descriptor?? [ 3371.820444][ T3840] bond10 (unregistering): Released all slaves [ 3372.096497][T32509] kaweth 2-1:0.0: Firmware present in device. [ 3372.279511][T32509] kaweth 2-1:0.0: Statistics collection: 0 [ 3372.288142][T32509] kaweth 2-1:0.0: Multicast filter limit: 0 [ 3372.317224][T32509] kaweth 2-1:0.0: MTU: 0 [ 3372.326843][T32509] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3373.142389][T29808] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 3373.155580][ T3853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6642'. [ 3373.374767][T29808] usb 6-1: config 0 has no interfaces? [ 3373.385194][T29808] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3373.395481][T29808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.404347][T29808] usb 6-1: Product: syz [ 3373.408645][T29808] usb 6-1: Manufacturer: syz [ 3373.413360][T29808] usb 6-1: SerialNumber: syz [ 3373.429713][T29808] usb 6-1: config 0 descriptor?? [ 3373.472061][T29808] usb 4-1: USB disconnect, device number 45 [ 3373.811278][ T3864] netlink: 'syz.4.6645': attribute type 10 has an invalid length. [ 3373.901847][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 3374.103988][T29808] usb 3-1: USB disconnect, device number 34 [ 3375.056748][T32509] kaweth 2-1:0.0: Error setting SOFS wait [ 3375.062987][T32509] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3375.102231][T29808] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3375.112824][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 3375.242218][T29808] usb 3-1: device descriptor read/64, error -32 [ 3375.294791][T32509] usb 2-1: USB disconnect, device number 109 [ 3375.482107][T29808] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3375.951816][T10861] usb 6-1: USB disconnect, device number 60 [ 3376.142383][T25243] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3376.372011][T25243] usb 2-1: Using ep0 maxpacket: 16 [ 3376.655850][T29808] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3376.672145][T29808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3376.702798][T29808] usb 3-1: config 0 descriptor?? [ 3376.802741][T25243] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 3376.880632][ T3880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6649'. [ 3376.900432][ T3880] input: syz1 as /devices/virtual/input/input116 [ 3377.195462][T29808] kaweth 3-1:0.0: Firmware present in device. [ 3377.261697][T25243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3377.457708][T29808] kaweth 3-1:0.0: Statistics collection: 0 [ 3377.526740][T25243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3377.562447][T25243] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 3377.570685][T25243] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3377.591398][T25243] usb 2-1: config 0 has no interface number 0 [ 3377.618680][T29808] kaweth 3-1:0.0: Multicast filter limit: 0 [ 3377.629439][T29808] kaweth 3-1:0.0: MTU: 0 [ 3377.636519][T29808] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3377.649640][ T3874] syz.3.6647 (3874): drop_caches: 2 [ 3377.812152][T25243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 3377.852992][T25243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 3377.869554][T25243] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3377.893002][T25243] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3377.923596][T25243] usb 2-1: config 0 interface 125 has no altsetting 0 [ 3377.935667][T25243] usb 2-1: config 0 interface 125 has no altsetting 2 [ 3377.960803][T25243] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 3377.970402][T25243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.981726][T25243] usb 2-1: Product: syz [ 3378.014193][T25243] usb 2-1: Manufacturer: syz [ 3378.061312][T25243] usb 2-1: SerialNumber: syz [ 3378.125966][T25243] usb 2-1: config 0 descriptor?? [ 3378.155915][T25243] usb 2-1: selecting invalid altsetting 2 [ 3378.282685][T32509] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 3378.555676][T32509] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3378.599033][T32509] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3378.669024][ T3894] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3378.688596][ T3896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6652'. [ 3378.743025][T32509] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3378.866944][T32509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3378.907581][T32509] usb 6-1: Product: syz [ 3378.934642][T32509] usb 6-1: Manufacturer: syz [ 3378.946090][T32509] usb 6-1: SerialNumber: syz [ 3378.964665][T10861] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 3379.011176][T32509] usb 6-1: config 0 descriptor?? [ 3379.028257][ T3890] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3379.071383][T32509] usb 6-1: ucan: probing device on interface #0 [ 3379.104787][ C1] usb 2-1: async_complete: urb error -71 [ 3379.110602][ C1] usb 2-1: async_complete: urb error -71 [ 3379.116373][ C1] usb 2-1: async_complete: urb error -71 [ 3379.127765][T25243] get_1284_register: usb error -71 [ 3379.133184][T25243] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 3379.157984][T10861] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3379.169955][T25243] usb 2-1: USB disconnect, device number 110 [ 3379.188970][T10861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3379.210472][T32509] usb 6-1: ucan: invalid EP count (1) [ 3379.271341][T10861] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3379.308432][T10861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.322079][T32509] usb 6-1: ucan: probe failed; try to update the device firmware [ 3379.328614][T10861] usb 4-1: Product: syz [ 3379.349978][T10861] usb 4-1: Manufacturer: syz [ 3379.402735][T10861] usb 4-1: SerialNumber: syz [ 3379.478400][T10861] usb 4-1: config 0 descriptor?? [ 3379.520382][T10861] usb 4-1: selecting invalid altsetting 0 [ 3380.643368][T10861] usb 6-1: USB disconnect, device number 61 [ 3381.123438][T29808] kaweth 3-1:0.0: Error setting SOFS wait [ 3381.156657][T29808] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 3381.192361][T10861] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 3381.242677][T29808] usb 3-1: USB disconnect, device number 36 [ 3381.426020][T10861] usb 6-1: config 0 has no interfaces? [ 3381.996628][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6656'. [ 3382.007813][T29808] usb 4-1: USB disconnect, device number 46 [ 3382.082264][ T3913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6656'. [ 3382.524678][T10861] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3382.534240][T10861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.553731][T10861] usb 6-1: Product: syz [ 3382.564154][T10861] usb 6-1: Manufacturer: syz [ 3382.582105][T10861] usb 6-1: SerialNumber: syz [ 3382.738818][T10861] usb 6-1: config 0 descriptor?? [ 3383.798835][T29808] usb 6-1: USB disconnect, device number 62 [ 3383.835867][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6658'. [ 3384.880036][ T3940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6661'. [ 3384.904801][ T3940] trusted_key: encrypted_key: insufficient parameters specified [ 3385.375674][T10861] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3386.552333][T32509] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 3386.706727][T32509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3386.725465][T32509] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3386.759172][T32509] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3386.769587][T32509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.787055][T32509] usb 3-1: Product: syz [ 3386.795971][T32509] usb 3-1: Manufacturer: syz [ 3386.800621][T32509] usb 3-1: SerialNumber: syz [ 3386.821323][T32509] usb 3-1: config 0 descriptor?? [ 3386.838338][ T3951] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3386.849168][T10861] usb 4-1: config 0 has no interfaces? [ 3386.858785][T32509] usb 3-1: ucan: probing device on interface #0 [ 3386.870061][T32509] usb 3-1: ucan: invalid EP count (1) [ 3386.879599][T32509] usb 3-1: ucan: probe failed; try to update the device firmware [ 3387.007800][T10861] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3387.017192][T10861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.025626][T10861] usb 4-1: Product: syz [ 3387.029945][T10861] usb 4-1: Manufacturer: syz [ 3387.034708][T10861] usb 4-1: SerialNumber: syz [ 3387.045124][T10861] usb 4-1: config 0 descriptor?? [ 3387.512647][T10861] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 3387.665724][ T3960] netlink: 'syz.4.6666': attribute type 1 has an invalid length. [ 3387.677861][T10861] usb 6-1: config 0 has no interfaces? [ 3387.718855][T10861] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3387.728223][T10861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3387.736599][T10861] usb 6-1: Product: syz [ 3387.740973][T10861] usb 6-1: Manufacturer: syz [ 3387.746073][T10861] usb 6-1: SerialNumber: syz [ 3387.766225][T10861] usb 6-1: config 0 descriptor?? [ 3388.432029][ T3960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3389.210191][T25243] usb 3-1: USB disconnect, device number 37 [ 3389.227161][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.233885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.272189][T10861] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3389.422345][T10861] usb 5-1: Using ep0 maxpacket: 32 [ 3389.444952][T10861] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3389.464212][T10861] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3389.474035][T10861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3389.484062][T10861] usb 5-1: Product: syz [ 3389.492081][T10861] usb 5-1: Manufacturer: syz [ 3389.506226][T10861] usb 5-1: SerialNumber: syz [ 3389.534056][T10861] usb 5-1: config 0 descriptor?? [ 3390.678107][T10861] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 3390.697453][T10861] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 3390.914750][T25243] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3391.406033][T32509] usb 4-1: USB disconnect, device number 47 [ 3391.482228][T25243] usb 2-1: Using ep0 maxpacket: 32 [ 3391.526302][T25243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3391.538208][T25243] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3391.560602][T25243] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3391.580176][T25243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3391.600678][T25243] usb 2-1: config 0 descriptor?? [ 3391.786887][ T3994] bridge6: entered promiscuous mode [ 3391.932915][T32509] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3392.112599][T32509] usb 4-1: config 0 has no interfaces? [ 3392.126616][T32509] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3392.136029][T32509] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3392.144775][T32509] usb 4-1: Product: syz [ 3392.152321][T32509] usb 4-1: Manufacturer: syz [ 3392.156972][T32509] usb 4-1: SerialNumber: syz [ 3392.175698][T32509] usb 4-1: config 0 descriptor?? [ 3392.971444][T32509] usb 5-1: USB disconnect, device number 53 [ 3393.712247][T32509] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 3393.918449][T25243] usbhid 2-1:0.0: can't add hid device: -71 [ 3393.926016][T25243] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3393.926526][T32509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3393.965288][T25243] usb 2-1: USB disconnect, device number 111 [ 3393.997627][T10861] usb 6-1: USB disconnect, device number 63 [ 3394.091350][T32509] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3394.127715][T32509] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3394.147587][T32509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3394.157625][ T4004] netlink: 'syz.5.6675': attribute type 10 has an invalid length. [ 3394.167601][T32509] usb 5-1: Product: syz [ 3394.176286][T32509] usb 5-1: Manufacturer: syz [ 3394.185206][T32509] usb 5-1: SerialNumber: syz [ 3394.200214][T32509] usb 5-1: config 0 descriptor?? [ 3394.207122][ T4000] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3394.255090][T32509] usb 5-1: ucan: probing device on interface #0 [ 3394.263729][T32509] usb 5-1: ucan: invalid EP count (1) [ 3394.271423][T32509] usb 5-1: ucan: probe failed; try to update the device firmware [ 3394.485341][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3394.495201][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3394.855308][T32509] usb 4-1: USB disconnect, device number 48 [ 3395.032236][T10861] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3395.759981][T10861] usb 2-1: config 0 has no interfaces? [ 3396.002127][T10861] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3396.034729][T10861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3396.065287][T10861] usb 2-1: Product: syz [ 3396.075475][T10861] usb 2-1: Manufacturer: syz [ 3396.122255][T10861] usb 2-1: SerialNumber: syz [ 3396.212003][T10861] usb 2-1: config 0 descriptor?? [ 3397.206303][T10861] usb 5-1: USB disconnect, device number 54 [ 3397.233890][T25243] usb 2-1: USB disconnect, device number 112 [ 3398.132146][T25243] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3398.376306][T25243] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3398.415019][T25243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3398.533961][T25243] usb 5-1: config 0 descriptor?? [ 3398.779881][T25243] kaweth 5-1:0.0: Firmware present in device. [ 3399.002092][T25243] kaweth 5-1:0.0: Statistics collection: 0 [ 3399.028762][T25243] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3399.054654][T25243] kaweth 5-1:0.0: MTU: 0 [ 3399.060108][T25243] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3400.685728][T25243] kaweth 5-1:0.0: Error setting SOFS wait [ 3400.694107][T25243] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3400.722399][T10861] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 3400.746035][T25243] usb 5-1: USB disconnect, device number 55 [ 3401.555123][T10861] usb 6-1: config 0 has no interfaces? [ 3401.667808][T10861] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3401.684810][T10861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3401.697202][T10861] usb 6-1: Product: syz [ 3401.701518][T10861] usb 6-1: Manufacturer: syz [ 3401.708183][T10861] usb 6-1: SerialNumber: syz [ 3401.733234][T10861] usb 6-1: config 0 descriptor?? [ 3401.952163][T25243] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3401.963472][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 3402.092375][T25243] usb 2-1: device descriptor read/64, error -32 [ 3402.332319][T25243] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3402.350661][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 3402.482423][T25243] usb 2-1: device descriptor read/64, error -32 [ 3402.642125][T25243] usb usb2-port1: attempt power cycle [ 3403.000885][T25243] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3403.155929][T25243] usb 2-1: Using ep0 maxpacket: 32 [ 3403.310586][T25243] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3403.450911][T25243] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3403.495873][T25243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.523510][T25243] usb 2-1: Product: syz [ 3403.535397][T25243] usb 2-1: Manufacturer: syz [ 3403.552502][T25243] usb 2-1: SerialNumber: syz [ 3403.618963][T25243] usb 2-1: config 0 descriptor?? [ 3404.072815][T10861] usb 6-1: USB disconnect, device number 64 [ 3404.200036][ T4086] netlink: 'syz.5.6687': attribute type 10 has an invalid length. [ 3404.439691][T25243] usb 2-1: can't set config #0, error -71 [ 3404.450837][T25243] usb 2-1: USB disconnect, device number 115 [ 3404.543469][T10861] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3404.704434][T10861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3404.736190][T10861] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3404.796388][T10861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3404.815461][T10861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3404.838405][T10861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3404.922088][T25243] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 3404.940629][T10861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3404.960610][T10861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3404.981466][T10861] usb 4-1: Product: syz [ 3404.990902][T10861] usb 4-1: Manufacturer: syz [ 3405.086946][T10861] cdc_wdm 4-1:1.0: skipping garbage [ 3405.092549][T32509] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3405.113529][T10861] cdc_wdm 4-1:1.0: skipping garbage [ 3405.131162][T10861] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 3405.146093][T10861] cdc_wdm 4-1:1.0: Unknown control protocol [ 3405.158682][T25243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3405.169752][T22150] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 3405.256060][T25243] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3405.272285][T32509] usb 5-1: Using ep0 maxpacket: 8 [ 3405.358414][T25243] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3405.372346][T22150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3405.399689][T25243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.420529][T22150] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3405.436740][T25243] usb 3-1: Product: syz [ 3405.446867][T25243] usb 3-1: Manufacturer: syz [ 3405.459629][T25243] usb 3-1: SerialNumber: syz [ 3405.464583][T10861] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3405.472652][T32509] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 3405.493141][T25243] usb 3-1: config 0 descriptor?? [ 3405.499638][ T4099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3405.526221][T25243] usb 3-1: ucan: probing device on interface #0 [ 3405.538340][T22150] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3405.560498][T32509] usb 5-1: config 2 has no interface number 0 [ 3405.572551][T32509] usb 5-1: config 2 interface 31 has no altsetting 0 [ 3405.661370][T22150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.670198][T25243] usb 3-1: ucan: invalid EP count (1) [ 3405.690278][T25243] usb 3-1: ucan: probe failed; try to update the device firmware [ 3405.721796][T32509] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3405.731622][T32509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3405.742047][T32509] usb 5-1: Product: syz [ 3405.746286][T32509] usb 5-1: Manufacturer: syz [ 3405.751059][T32509] usb 5-1: SerialNumber: syz [ 3405.759741][T22150] usb 2-1: Product: syz [ 3405.784509][ T4099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3405.794568][ T4099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3405.813821][T22150] usb 2-1: Manufacturer: syz [ 3405.837311][T22150] usb 2-1: SerialNumber: syz [ 3405.911591][T22150] usb 2-1: config 0 descriptor?? [ 3405.922900][T10861] usb 6-1: config 0 has no interfaces? [ 3406.134183][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 3406.196621][ T4100] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 3406.206529][T22150] usb 2-1: ucan: probing device on interface #0 [ 3406.213027][T22150] usb 2-1: ucan: invalid EP count (1) [ 3406.219373][T22150] usb 2-1: ucan: probe failed; try to update the device firmware [ 3406.278846][T10861] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3406.318947][T10861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.320728][T32509] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 3406.366224][T10861] usb 6-1: Product: syz [ 3406.419967][T10861] usb 6-1: Manufacturer: syz [ 3406.425420][T10861] usb 6-1: SerialNumber: syz [ 3406.443343][T10861] usb 6-1: config 0 descriptor?? [ 3406.534208][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.540901][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.549230][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.555904][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.562322][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.568977][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.575587][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.582226][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.588662][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.595301][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.601777][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.608434][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.614884][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.621547][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.628352][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.635079][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.641447][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.648085][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.654473][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 3406.661121][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 3406.685219][T32509] usb 4-1: USB disconnect, device number 49 [ 3406.691627][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3408.264621][T32509] usb 3-1: USB disconnect, device number 38 [ 3408.797189][T29808] usb 5-1: USB disconnect, device number 56 [ 3408.882368][T32509] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3409.218755][T10861] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3409.219353][T29808] usb 6-1: USB disconnect, device number 65 [ 3409.481875][T10861] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3409.490744][T10861] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3409.502144][T22150] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3409.518526][T10861] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3409.548772][T10861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3409.582645][T10861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3409.629869][T10861] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3409.649843][T10861] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3409.666147][T10861] usb 4-1: Product: syz [ 3409.682285][T10861] usb 4-1: Manufacturer: syz [ 3409.700446][T22150] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3409.721989][T32509] usb 3-1: config 0 has no interfaces? [ 3409.739185][T10861] cdc_wdm 4-1:1.0: skipping garbage [ 3409.745528][T22150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3409.778415][T10861] cdc_wdm 4-1:1.0: skipping garbage [ 3409.789554][T22150] usb 5-1: config 0 descriptor?? [ 3409.812808][T10861] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 3409.818759][T10861] cdc_wdm 4-1:1.0: Unknown control protocol [ 3409.862090][T29808] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 3409.874728][T32509] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3409.982354][T32509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.992667][T32509] usb 3-1: Product: syz [ 3409.996878][T32509] usb 3-1: Manufacturer: syz [ 3410.007606][T32509] usb 3-1: SerialNumber: syz [ 3410.024839][T21684] usb 4-1: USB disconnect, device number 50 [ 3410.068366][T32509] usb 3-1: config 0 descriptor?? [ 3410.104828][T29808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3410.122096][T29808] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3410.149598][T29808] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3410.167024][T29808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.177194][T29808] usb 6-1: Product: syz [ 3410.185433][T29808] usb 6-1: Manufacturer: syz [ 3410.186386][T22150] kaweth 5-1:0.0: Firmware present in device. [ 3410.190054][T29808] usb 6-1: SerialNumber: syz [ 3410.207789][T29808] usb 6-1: config 0 descriptor?? [ 3410.224048][ T4133] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 3410.236634][T29808] usb 6-1: ucan: probing device on interface #0 [ 3410.244103][T29808] usb 6-1: ucan: invalid EP count (1) [ 3410.249554][T29808] usb 6-1: ucan: probe failed; try to update the device firmware [ 3410.310399][ T4123] netlink: 'syz.3.6693': attribute type 10 has an invalid length. [ 3410.329566][T22150] kaweth 5-1:0.0: Statistics collection: 0 [ 3410.341240][T22150] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3410.362867][T22150] kaweth 5-1:0.0: MTU: 0 [ 3410.367185][T22150] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3410.437230][T29808] usb 2-1: USB disconnect, device number 116 [ 3411.380659][T25243] usb 6-1: USB disconnect, device number 66 [ 3411.700465][ T4143] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3411.715090][T25243] usb 3-1: USB disconnect, device number 39 [ 3411.908062][ T4143] netlink: 'syz.5.6698': attribute type 1 has an invalid length. [ 3411.953169][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6698'. [ 3412.330783][ T4151] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3412.355257][T21684] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 3412.379471][ T4151] netlink: 'syz.2.6699': attribute type 1 has an invalid length. [ 3412.431281][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6699'. [ 3412.450599][ T4143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3412.526469][T21684] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3412.607968][T21684] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3412.714282][T21684] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3412.750340][T21684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3412.769312][T21684] usb 6-1: Product: syz [ 3412.800868][T21684] usb 6-1: Manufacturer: syz [ 3412.814385][T21684] usb 6-1: SerialNumber: syz [ 3412.829687][T21684] usb 6-1: config 0 descriptor?? [ 3412.902112][T29808] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 3412.955471][T21684] usb 6-1: selecting invalid altsetting 0 [ 3413.211225][T29808] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3413.253953][T29808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3413.308290][T29808] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3413.356896][T29808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3413.401390][T29808] usb 3-1: Product: syz [ 3413.408255][T29808] usb 3-1: Manufacturer: syz [ 3413.423466][T29808] usb 3-1: SerialNumber: syz [ 3413.443593][T29808] usb 3-1: config 0 descriptor?? [ 3413.493903][T29808] usb 3-1: selecting invalid altsetting 0 [ 3413.751592][ T4145] bond7 (unregistering): Released all slaves [ 3413.783609][T21684] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3413.964264][T21684] usb 4-1: config 0 has no interfaces? [ 3413.978193][T21684] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3413.996317][T21684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3414.010404][T21684] usb 4-1: Product: syz [ 3414.017692][T21684] usb 4-1: Manufacturer: syz [ 3414.032185][T21684] usb 4-1: SerialNumber: syz [ 3414.046465][T21684] usb 4-1: config 0 descriptor?? [ 3414.129964][ T4151] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3414.818061][ T5889] kworker/0:6 (5889) used greatest stack depth: 13592 bytes left [ 3415.210182][T21684] usb 6-1: USB disconnect, device number 67 [ 3415.792067][T21684] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3415.922055][T29808] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 3415.962077][T21684] usb 6-1: Using ep0 maxpacket: 32 [ 3415.974188][T21684] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3415.994506][T21684] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3416.022305][T21684] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.026825][ T4152] bond10 (unregistering): Released all slaves [ 3416.051445][T21684] usb 6-1: Product: syz [ 3416.060497][T21684] usb 6-1: Manufacturer: syz [ 3416.188563][T21684] usb 6-1: SerialNumber: syz [ 3416.200240][T29808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3416.214273][T21684] usb 6-1: config 0 descriptor?? [ 3416.231424][T29808] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3416.419776][T29808] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3416.500796][T29808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3416.603443][T29808] usb 2-1: Product: syz [ 3416.610926][T29808] usb 2-1: Manufacturer: syz [ 3416.621061][T29808] usb 2-1: SerialNumber: syz [ 3417.049438][T29808] usb 2-1: config 0 descriptor?? [ 3417.061385][ T4169] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 3417.074024][T29808] usb 2-1: ucan: probing device on interface #0 [ 3417.080650][T29808] usb 2-1: ucan: invalid EP count (1) [ 3417.086497][T29808] usb 2-1: ucan: probe failed; try to update the device firmware [ 3417.100547][T22150] kaweth 5-1:0.0: Error setting SOFS wait [ 3417.110947][T22150] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3417.215284][T22150] usb 5-1: USB disconnect, device number 57 [ 3417.303652][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3417.318938][T21684] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 3417.328234][T21684] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 3417.403494][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.710999][T25243] usb 3-1: USB disconnect, device number 40 [ 3417.812766][T21684] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3417.969572][T25243] usb 4-1: USB disconnect, device number 51 [ 3418.036360][T21684] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3418.056536][T21684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.145136][T21684] usb 5-1: config 0 descriptor?? [ 3418.397079][ T4186] netlink: 'syz.3.6704': attribute type 3 has an invalid length. [ 3418.431275][ T4184] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 3418.479242][T21684] kaweth 5-1:0.0: Firmware present in device. [ 3418.564818][T29808] usb 6-1: USB disconnect, device number 68 [ 3418.643015][ T4185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 3418.668685][T21684] kaweth 5-1:0.0: Statistics collection: 0 [ 3418.687082][T21684] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3418.707508][T21684] kaweth 5-1:0.0: MTU: 0 [ 3418.778047][ T4186] lo: left promiscuous mode [ 3418.791057][ T4186] tunl0: left promiscuous mode [ 3418.802395][T21684] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3418.827926][ T4186] tunl0: left allmulticast mode [ 3418.845066][ T4186] gre0: left promiscuous mode [ 3418.868005][ T4186] gre0: left allmulticast mode [ 3418.974199][ T4186] gretap0: left promiscuous mode [ 3418.979269][ T4186] gretap0: left allmulticast mode [ 3419.028239][ T4186] erspan0: left promiscuous mode [ 3419.048857][T22150] usb 2-1: USB disconnect, device number 117 [ 3419.092408][ T4186] erspan0: left allmulticast mode [ 3419.112360][ T4186] ip_vti0: left promiscuous mode [ 3419.117493][ T4186] ip_vti0: left allmulticast mode [ 3419.126701][ T4186] ip6_vti0: left promiscuous mode [ 3419.134049][ T4186] ip6_vti0: left allmulticast mode [ 3419.162100][T25243] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3419.210756][ T4194] netlink: 'syz.5.6706': attribute type 10 has an invalid length. [ 3419.337707][ T4186] ip6tnl0: left promiscuous mode [ 3419.343145][ T4186] ip6tnl0: left allmulticast mode [ 3419.352134][T25243] usb 4-1: Using ep0 maxpacket: 16 [ 3419.379175][T25243] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 3419.383175][ T4186] ip6gre0: left promiscuous mode [ 3419.395066][ T4186] ip6gre0: left allmulticast mode [ 3419.402046][T25243] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3419.462614][T25243] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 3419.492243][T25243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3419.508798][ T4186] vcan0: left promiscuous mode [ 3419.516221][T25243] usb 4-1: Product: syz [ 3419.523985][T25243] usb 4-1: Manufacturer: syz [ 3419.532720][ T4186] vcan0: left allmulticast mode [ 3419.539143][T25243] usb 4-1: SerialNumber: syz [ 3419.563731][T25243] usb 4-1: config 0 descriptor?? [ 3419.576860][ T4191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3419.605576][ T4191] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3419.624222][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3419.634403][ T4186] team0: left promiscuous mode [ 3419.639480][ T4186] bridge3: left promiscuous mode [ 3419.649231][ T4186] team0: left allmulticast mode [ 3419.656454][ T4186] bridge3: left allmulticast mode [ 3419.717776][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 3419.868074][ T4186] nlmon0: left promiscuous mode [ 3419.873628][ T4186] nlmon0: left allmulticast mode [ 3419.905828][ T4186] caif0: left promiscuous mode [ 3419.916559][ T4186] caif0: left allmulticast mode [ 3419.929633][ T4186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3420.456966][T21684] kaweth 5-1:0.0: Error setting SOFS wait [ 3420.565936][T21684] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3420.590457][T21684] usb 5-1: USB disconnect, device number 58 [ 3420.892115][T32509] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 3421.070633][T21684] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 3421.234304][T21684] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3421.360870][T21684] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3421.383440][T21684] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3421.394099][T21684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3421.412754][T21684] usb 5-1: Product: syz [ 3421.421673][T21684] usb 5-1: Manufacturer: syz [ 3421.430599][T21684] usb 5-1: SerialNumber: syz [ 3421.446033][T21684] usb 5-1: config 0 descriptor?? [ 3421.460248][ T4202] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3421.484530][T21684] usb 5-1: ucan: probing device on interface #0 [ 3421.493849][T21684] usb 5-1: ucan: invalid EP count (1) [ 3421.502829][T21684] usb 5-1: ucan: probe failed; try to update the device firmware [ 3421.654414][T32509] usb 2-1: config 0 has no interfaces? [ 3421.733666][ T4202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3421.768416][T32509] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3421.786708][T32509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3421.802220][T32509] usb 2-1: Product: syz [ 3421.806591][T32509] usb 2-1: Manufacturer: syz [ 3421.811872][T32509] usb 2-1: SerialNumber: syz [ 3421.834399][T32509] usb 2-1: config 0 descriptor?? [ 3421.859010][T25243] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3421.881725][ T4202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3421.916220][T25243] asix 4-1:0.0: probe with driver asix failed with error -71 [ 3421.945876][T25243] usb 4-1: USB disconnect, device number 52 [ 3422.542054][T32509] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 3422.652420][T25243] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3422.783058][T32509] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3422.809725][T32509] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3422.845991][T32509] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3422.855390][T32509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3422.863600][T32509] usb 3-1: Product: syz [ 3422.868449][T32509] usb 3-1: Manufacturer: syz [ 3422.879767][T32509] usb 3-1: SerialNumber: syz [ 3422.903508][T32509] usb 3-1: config 0 descriptor?? [ 3422.929099][T25243] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3422.929937][ T4211] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3422.986158][T32509] usb 3-1: ucan: probing device on interface #0 [ 3422.997778][T32509] usb 3-1: ucan: invalid EP count (1) [ 3423.005383][T32509] usb 3-1: ucan: probe failed; try to update the device firmware [ 3423.187939][T25243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.299993][ T4211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3423.319080][ T4211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3423.353258][T25243] usb 4-1: config 0 descriptor?? [ 3423.755945][T32509] usb 5-1: USB disconnect, device number 59 [ 3423.880317][T25243] kaweth 4-1:0.0: Firmware present in device. [ 3424.082106][T25243] kaweth 4-1:0.0: Statistics collection: 0 [ 3424.089136][T25243] kaweth 4-1:0.0: Multicast filter limit: 0 [ 3424.115347][T25243] kaweth 4-1:0.0: MTU: 0 [ 3424.186233][T25243] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3424.395860][T32509] usb 2-1: USB disconnect, device number 118 [ 3424.898367][ T4221] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3425.072343][ T4221] netlink: 'syz.1.6712': attribute type 1 has an invalid length. [ 3425.117239][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6712'. [ 3425.488442][ T4221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3425.535984][T22150] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 3425.729393][T22150] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3425.744561][T22150] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3425.762988][T25243] kaweth 4-1:0.0: Error setting SOFS wait [ 3425.769003][T25243] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 3425.782741][T25243] usb 4-1: USB disconnect, device number 53 [ 3425.827364][T22150] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3425.836849][T22150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.845693][T22150] usb 2-1: Product: syz [ 3425.850022][T22150] usb 2-1: Manufacturer: syz [ 3425.869062][T22150] usb 2-1: SerialNumber: syz [ 3425.891733][T22150] usb 2-1: config 0 descriptor?? [ 3425.907338][T22150] usb 2-1: selecting invalid altsetting 0 [ 3426.001587][T22150] usb 3-1: USB disconnect, device number 41 [ 3426.307264][ T4233] netlink: 'syz.4.6713': attribute type 10 has an invalid length. [ 3426.554904][ T4223] bond8 (unregistering): Released all slaves [ 3428.149913][T25243] usb 2-1: USB disconnect, device number 119 [ 3428.544688][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6719'. [ 3428.561719][ T4254] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6719'. [ 3428.723237][T32509] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3428.949887][T32509] usb 2-1: config 0 has no interfaces? [ 3429.113637][T32509] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3429.220048][T32509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.232436][T32509] usb 2-1: Product: syz [ 3429.236648][T32509] usb 2-1: Manufacturer: syz [ 3429.249091][T32509] usb 2-1: SerialNumber: syz [ 3429.260192][T32509] usb 2-1: config 0 descriptor?? [ 3429.662253][T25243] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3429.846900][T25243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3429.902479][T25243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3429.939235][T25243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3429.956628][T25243] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3429.972335][T25243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3429.987441][T25243] usb 5-1: config 0 descriptor?? [ 3430.635590][T25243] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 3430.713099][T25243] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 3430.797054][T25243] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 3431.312034][T32509] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3431.493606][T32509] usb 3-1: Using ep0 maxpacket: 32 [ 3431.539429][T32509] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 3431.560465][T32509] usb 3-1: config 0 has no interface number 0 [ 3431.606997][T32509] usb 3-1: config 0 interface 184 has no altsetting 0 [ 3431.645576][T25243] usb 2-1: USB disconnect, device number 120 [ 3431.660293][T32509] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3431.678071][T32509] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3431.733867][T32509] usb 3-1: Product: syz [ 3431.748500][T32509] usb 3-1: Manufacturer: syz [ 3431.755740][T32509] usb 3-1: SerialNumber: syz [ 3431.777618][T32509] usb 3-1: config 0 descriptor?? [ 3431.795725][T32509] smsc75xx v1.0.0 [ 3431.799911][T32509] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3431.814768][T32509] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 3431.880709][ T4283] netlink: 'syz.3.6725': attribute type 10 has an invalid length. [ 3432.298590][T32509] usb 5-1: USB disconnect, device number 60 [ 3432.562494][T25243] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3432.570736][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 3432.702081][T25243] usb 2-1: device descriptor read/64, error -32 [ 3432.942818][T25243] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3432.982032][T32509] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 3433.055946][T29808] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 3433.145184][T32509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3433.279374][T32509] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3433.309973][T32509] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3433.347491][T25243] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3433.358581][T25243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3433.370227][T32509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.391766][T32509] usb 5-1: Product: syz [ 3433.414541][T25243] usb 2-1: config 0 descriptor?? [ 3433.415947][T32509] usb 5-1: Manufacturer: syz [ 3433.459168][T32509] usb 5-1: SerialNumber: syz [ 3433.475193][T29808] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3433.509492][T32509] usb 5-1: config 0 descriptor?? [ 3433.528740][T29808] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3433.573021][ T4295] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3433.614792][T32509] usb 5-1: ucan: probing device on interface #0 [ 3433.631166][T29808] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3433.677608][T32509] usb 5-1: ucan: invalid EP count (1) [ 3433.689266][T32509] usb 5-1: ucan: probe failed; try to update the device firmware [ 3433.707308][T29808] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3433.739386][T29808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3433.909466][T32509] usb 3-1: USB disconnect, device number 42 [ 3434.042648][T29808] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3434.055498][T25243] kaweth 2-1:0.0: Firmware present in device. [ 3434.134079][T29808] usb 6-1: invalid MIDI out EP 0 [ 3434.155717][T25243] kaweth 2-1:0.0: Statistics collection: 0 [ 3434.161661][T25243] kaweth 2-1:0.0: Multicast filter limit: 0 [ 3434.192181][T25243] kaweth 2-1:0.0: MTU: 0 [ 3434.246209][T25243] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3434.317683][T29808] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3434.507487][ T4297] CIFS: VFS: Malformed UNC in devname [ 3434.771098][T29808] usb 5-1: USB disconnect, device number 61 [ 3435.572724][T29808] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3435.676252][ T4312] syzkaller0: entered promiscuous mode [ 3435.701335][ T4312] syzkaller0: entered allmulticast mode [ 3435.732384][T29808] usb 3-1: Using ep0 maxpacket: 8 [ 3435.758291][T29808] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 3435.809412][T29808] usb 3-1: config 2 has no interface number 0 [ 3436.172806][T29808] usb 3-1: config 2 interface 31 has no altsetting 0 [ 3436.237422][T29808] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3436.249606][T29808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.262447][T29808] usb 3-1: Product: syz [ 3436.268339][T29808] usb 3-1: Manufacturer: syz [ 3436.275892][T29808] usb 3-1: SerialNumber: syz [ 3436.386520][T29808] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 3436.565914][T29808] usb 6-1: USB disconnect, device number 69 [ 3437.112004][T29808] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3437.137570][T25243] kaweth 2-1:0.0: Error setting SOFS wait [ 3437.147265][T25243] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3437.159100][T25243] usb 2-1: USB disconnect, device number 122 [ 3437.444572][T29808] usb 6-1: config 0 has no interfaces? [ 3437.460468][T29808] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3437.469828][T29808] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.478018][T32509] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 3437.495299][T29808] usb 6-1: Product: syz [ 3437.500615][T29808] usb 6-1: Manufacturer: syz [ 3437.507733][T29808] usb 6-1: SerialNumber: syz [ 3437.519845][T29808] usb 6-1: config 0 descriptor?? [ 3437.635030][T32509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3437.649355][T32509] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3437.663874][T32509] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3437.679509][T32509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.692184][T32509] usb 5-1: Product: syz [ 3437.696511][T32509] usb 5-1: Manufacturer: syz [ 3437.701415][T32509] usb 5-1: SerialNumber: syz [ 3437.719814][T32509] usb 5-1: config 0 descriptor?? [ 3437.738231][ T4324] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3437.779311][T32509] usb 5-1: ucan: probing device on interface #0 [ 3437.792971][T32509] usb 5-1: ucan: invalid EP count (1) [ 3437.807177][T32509] usb 5-1: ucan: probe failed; try to update the device firmware [ 3438.562020][T32509] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3438.602918][T25243] usb 5-1: USB disconnect, device number 62 [ 3438.869264][T29808] usb 3-1: USB disconnect, device number 43 [ 3438.945132][T32509] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3438.954512][T32509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3438.979836][T32509] usb 2-1: config 0 descriptor?? [ 3439.210595][T32509] kaweth 2-1:0.0: Firmware present in device. [ 3439.402237][T25243] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3439.432526][T32509] kaweth 2-1:0.0: Statistics collection: 0 [ 3439.438536][T32509] kaweth 2-1:0.0: Multicast filter limit: 0 [ 3439.458675][T32509] kaweth 2-1:0.0: MTU: 0 [ 3439.501420][T32509] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3439.567240][T25243] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3439.580776][T25243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3439.604165][T25243] usb 5-1: config 0 descriptor?? [ 3439.742520][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6737'. [ 3439.756569][ T4343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6737'. [ 3439.828258][T25243] kaweth 5-1:0.0: Firmware present in device. [ 3440.070647][T25243] kaweth 5-1:0.0: Statistics collection: 0 [ 3440.076836][T25243] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3440.089386][T25243] kaweth 5-1:0.0: MTU: 0 [ 3440.097262][T25243] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3441.227627][ T4349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6738'. [ 3441.911036][T25243] kaweth 5-1:0.0: Error setting SOFS wait [ 3441.917295][T25243] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3441.967201][T25243] usb 5-1: USB disconnect, device number 63 [ 3442.615598][T25243] usb 6-1: USB disconnect, device number 70 [ 3442.708821][T32509] kaweth 2-1:0.0: Error setting SOFS wait [ 3442.716540][T32509] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 3442.752671][T32509] usb 2-1: USB disconnect, device number 123 [ 3443.085062][ T4362] netlink: 'syz.1.6741': attribute type 10 has an invalid length. [ 3443.242153][T25243] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3443.527163][T25243] usb 3-1: config 0 has no interfaces? [ 3443.599000][T25243] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3443.608412][T25243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.612039][T32509] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 3443.637655][T25243] usb 3-1: Product: syz [ 3443.665072][T25243] usb 3-1: Manufacturer: syz [ 3443.675818][T25243] usb 3-1: SerialNumber: syz [ 3443.693097][T25243] usb 3-1: config 0 descriptor?? [ 3443.782847][T10861] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 3444.005465][T10861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3444.052025][T10861] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3444.085648][T10861] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3444.111858][T10861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.134060][T10861] usb 5-1: Product: syz [ 3444.144332][T10861] usb 5-1: Manufacturer: syz [ 3444.157113][T10861] usb 5-1: SerialNumber: syz [ 3444.189258][T10861] usb 5-1: config 0 descriptor?? [ 3444.201203][ T4370] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3444.215508][T10861] usb 5-1: ucan: probing device on interface #0 [ 3444.231516][T10861] usb 5-1: ucan: invalid EP count (1) [ 3444.246629][T10861] usb 5-1: ucan: probe failed; try to update the device firmware [ 3444.512050][T32509] usb 6-1: Using ep0 maxpacket: 32 [ 3444.918661][ T4369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3444.952839][ T4369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3445.307570][T32509] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3445.864263][T32509] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3445.917022][T32509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.970025][T32509] usb 6-1: Product: syz [ 3445.980509][T32509] usb 6-1: Manufacturer: syz [ 3446.065845][T32509] usb 6-1: SerialNumber: syz [ 3446.153970][T32509] usb 6-1: config 0 descriptor?? [ 3446.170812][T32509] usb 6-1: can't set config #0, error -71 [ 3446.201190][T32509] usb 6-1: USB disconnect, device number 71 [ 3446.337605][T22150] usb 3-1: USB disconnect, device number 44 [ 3446.587607][ T4396] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3446.907515][ T4397] netlink: 'syz.2.6747': attribute type 1 has an invalid length. [ 3446.922014][T29808] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3446.959430][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6747'. [ 3446.986117][ T4397] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3447.332083][ T2273] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 3447.353092][T29808] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3447.374503][T29808] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3447.407060][T29808] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3447.442745][T29808] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3447.493460][T29808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3447.552123][ T2273] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3447.562426][ T2273] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3447.585763][ T2273] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3447.596279][ T2273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3447.605374][ T2273] usb 3-1: Product: syz [ 3447.620229][T29808] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3447.641557][ T2273] usb 3-1: Manufacturer: syz [ 3447.652255][ T2273] usb 3-1: SerialNumber: syz [ 3447.660186][ T2273] usb 3-1: config 0 descriptor?? [ 3447.674743][T29808] usb 6-1: invalid MIDI out EP 0 [ 3447.948567][T29808] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3447.950243][ T2273] usb 3-1: selecting invalid altsetting 0 [ 3447.968360][T29808] usb 6-1: USB disconnect, device number 72 [ 3447.981163][ T2798] udevd[2798]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3448.664914][ T4391] delete_channel: no stack [ 3448.804028][ T4404] netlink: 'syz.1.6748': attribute type 1 has an invalid length. [ 3448.843850][ T2273] usb 5-1: USB disconnect, device number 64 [ 3448.863383][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6748'. [ 3448.888556][ T4404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3449.235528][T22150] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 3449.629210][T32509] usb 3-1: USB disconnect, device number 45 [ 3449.682603][T29808] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3449.837857][T22150] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3449.847921][T22150] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3449.857787][T22150] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3449.868304][T22150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.876643][T22150] usb 2-1: Product: syz [ 3449.880812][T22150] usb 2-1: Manufacturer: syz [ 3449.885962][T22150] usb 2-1: SerialNumber: syz [ 3449.895493][T22150] usb 2-1: config 0 descriptor?? [ 3449.923265][T22150] usb 2-1: selecting invalid altsetting 0 [ 3449.986750][T29808] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3449.995986][T29808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3450.009882][T29808] usb 5-1: config 0 descriptor?? [ 3450.263200][T29808] kaweth 5-1:0.0: Firmware present in device. [ 3450.273085][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6750'. [ 3450.439212][T29808] kaweth 5-1:0.0: Statistics collection: 0 [ 3450.446163][T29808] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3450.454801][T29808] kaweth 5-1:0.0: MTU: 0 [ 3450.459386][T29808] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3450.665946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.672648][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.038270][ T4403] bond8 (unregistering): Released all slaves [ 3451.308772][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'. [ 3452.436503][T29808] kaweth 5-1:0.0: Error setting SOFS wait [ 3452.459190][T29808] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3452.480122][T29808] usb 5-1: USB disconnect, device number 65 [ 3453.279725][T22150] usb 2-1: USB disconnect, device number 124 [ 3453.646050][ T4440] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3453.680122][T29808] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3453.801178][ T4440] netlink: 'syz.5.6753': attribute type 1 has an invalid length. [ 3453.851267][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6753'. [ 3453.891855][T29808] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3453.901019][T29808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3453.914996][T29808] usb 5-1: config 0 descriptor?? [ 3454.100363][ T4440] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3454.350715][T29808] kaweth 5-1:0.0: Firmware present in device. [ 3454.430513][T32509] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 3454.557041][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6754'. [ 3454.582521][T29808] kaweth 5-1:0.0: Statistics collection: 0 [ 3454.588594][T29808] kaweth 5-1:0.0: Multicast filter limit: 0 [ 3454.594903][T29808] kaweth 5-1:0.0: MTU: 0 [ 3454.599359][T29808] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3454.621338][ T4441] bond7 (unregistering): Released all slaves [ 3454.829814][T32509] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3454.840825][T32509] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3454.867321][T32509] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3454.892377][T32509] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3454.900801][T32509] usb 6-1: Product: syz [ 3454.906085][T32509] usb 6-1: Manufacturer: syz [ 3454.927476][T32509] usb 6-1: SerialNumber: syz [ 3455.016770][T32509] usb 6-1: config 0 descriptor?? [ 3455.035689][T32509] usb 6-1: selecting invalid altsetting 0 [ 3456.166627][T29808] kaweth 5-1:0.0: Error setting SOFS wait [ 3456.172870][T29808] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 3456.217778][T29808] usb 5-1: USB disconnect, device number 66 [ 3456.692162][T29808] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 3456.868131][T29808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 3456.880185][T29808] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3456.898394][T29808] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3456.912764][T29808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3456.921103][T29808] usb 5-1: Product: syz [ 3456.928109][T29808] usb 5-1: Manufacturer: syz [ 3456.933767][T29808] usb 5-1: SerialNumber: syz [ 3456.945053][T29808] usb 5-1: config 0 descriptor?? [ 3456.951004][ T4459] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3456.965138][T29808] usb 5-1: ucan: probing device on interface #0 [ 3456.971525][T29808] usb 5-1: ucan: invalid EP count (1) [ 3456.979543][T29808] usb 5-1: ucan: probe failed; try to update the device firmware [ 3457.181587][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3457.203478][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3457.319526][T32509] usb 6-1: USB disconnect, device number 73 [ 3457.326002][T29808] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 3457.495403][T29808] usb 2-1: Using ep0 maxpacket: 32 [ 3457.506342][T29808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3457.520410][T29808] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3457.544960][T29808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3457.553574][T29808] usb 2-1: Product: syz [ 3457.561352][T29808] usb 2-1: Manufacturer: syz [ 3457.590870][T29808] usb 2-1: SerialNumber: syz [ 3457.608693][ T4469] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3457.635707][T29808] usb 2-1: config 0 descriptor?? [ 3457.656224][ T4469] netlink: 'syz.5.6758': attribute type 1 has an invalid length. [ 3457.702963][ T4469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 3457.764986][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6758'. [ 3458.484808][T22150] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 3458.637644][ T4471] bond7 (unregistering): Released all slaves [ 3458.685177][ T2273] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3458.908209][T29808] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 3458.948597][T29808] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 3459.178300][T22150] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3459.189782][T22150] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3459.203913][T22150] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3459.216130][T22150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.224416][T22150] usb 6-1: Product: syz [ 3459.228642][T22150] usb 6-1: Manufacturer: syz [ 3459.235854][T22150] usb 6-1: SerialNumber: syz [ 3459.268035][T22150] usb 6-1: config 0 descriptor?? [ 3459.301784][T22150] usb 6-1: selecting invalid altsetting 0 [ 3459.466609][T22150] usb 5-1: USB disconnect, device number 67 [ 3459.578803][ T2273] usb 3-1: config 0 has no interfaces? [ 3459.669316][ T2273] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3459.725380][ T2273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.745458][ T2273] usb 3-1: Product: syz [ 3459.782024][ T2273] usb 3-1: Manufacturer: syz [ 3459.812306][ T2273] usb 3-1: SerialNumber: syz [ 3459.823321][ T2273] usb 3-1: config 0 descriptor?? [ 3460.115940][ T4487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'. [ 3460.137207][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6762'. [ 3461.756570][ T2273] usb 2-1: USB disconnect, device number 125 [ 3462.215287][ T4500] bridge6: entered promiscuous mode [ 3462.464879][ T2273] usb 6-1: USB disconnect, device number 74 [ 3462.863539][T29808] usb 3-1: USB disconnect, device number 46 [ 3462.973845][ T4504] netlink: 'syz.5.6766': attribute type 10 has an invalid length. [ 3463.372493][T32509] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3463.552127][T32509] usb 5-1: Using ep0 maxpacket: 32 [ 3463.579201][T32509] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3463.642081][T29808] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3463.656773][T32509] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3463.666398][T32509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.675535][T32509] usb 5-1: Product: syz [ 3463.680057][T32509] usb 5-1: Manufacturer: syz [ 3463.687000][T32509] usb 5-1: SerialNumber: syz [ 3463.707245][T32509] usb 5-1: config 0 descriptor?? [ 3464.398124][T29808] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3464.602687][T29808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3464.734141][T32509] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 3464.847506][T32509] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 3464.868678][T29808] usb 3-1: config 0 descriptor?? [ 3466.041841][T29808] kaweth 3-1:0.0: Firmware present in device. [ 3466.394298][T29808] kaweth 3-1:0.0: Statistics collection: 0 [ 3466.562504][T29808] kaweth 3-1:0.0: Multicast filter limit: 0 [ 3466.568491][T29808] kaweth 3-1:0.0: MTU: 0 [ 3466.574572][T29808] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 3466.688142][ T2273] usb 5-1: USB disconnect, device number 68 [ 3467.396476][ T4536] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3467.841681][ T4537] netlink: 'syz.1.6770': attribute type 1 has an invalid length. [ 3468.024795][ T4539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6770'. [ 3468.185775][ T4537] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3468.629243][ T4539] bond8 (unregistering): Released all slaves [ 3468.713604][T29808] kaweth 3-1:0.0: Error setting SOFS wait [ 3468.719835][T29808] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 3468.761199][T29808] usb 3-1: USB disconnect, device number 47 [ 3512.097056][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.103780][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.535857][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.542550][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3604.252284][ T31] INFO: task kworker/1:8:10861 blocked for more than 143 seconds. [ 3604.260181][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 3604.267678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3604.276723][ T31] task:kworker/1:8 state:D stack:20712 pid:10861 tgid:10861 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 3604.288917][ T31] Workqueue: events rfkill_sync_work [ 3604.294344][ T31] Call Trace: [ 3604.297656][ T31] [ 3604.300631][ T31] __schedule+0x16f5/0x4d00 [ 3604.306138][ T31] ? schedule+0x165/0x360 [ 3604.310510][ T31] ? __pfx___schedule+0x10/0x10 [ 3604.315525][ T31] ? schedule+0x91/0x360 [ 3604.319801][ T31] schedule+0x165/0x360 [ 3604.324271][ T31] schedule_preempt_disabled+0x13/0x30 [ 3604.329761][ T31] __mutex_lock+0x724/0xe80 [ 3604.334599][ T31] ? __lock_acquire+0xab9/0xd20 [ 3604.339488][ T31] ? __mutex_lock+0x51b/0xe80 [ 3604.344837][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 3604.350180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3604.355857][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3604.361102][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3604.367096][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3604.373545][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3604.379317][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 3604.384799][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3604.390581][ T31] rfkill_set_block+0x1d2/0x440 [ 3604.395510][ T31] rfkill_sync_work+0x114/0x200 [ 3604.400398][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3604.406232][ T31] process_scheduled_works+0xae1/0x17b0 [ 3604.412189][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3604.418228][ T31] worker_thread+0x8a0/0xda0 [ 3604.423189][ T31] kthread+0x70e/0x8a0 [ 3604.427333][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3604.432901][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.437516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3604.442850][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3604.448082][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.452793][ T31] ret_from_fork+0x3fc/0x770 [ 3604.457433][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3604.462923][ T31] ? __switch_to_asm+0x39/0x70 [ 3604.467752][ T31] ? __switch_to_asm+0x33/0x70 [ 3604.472615][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.477247][ T31] ret_from_fork_asm+0x1a/0x30 [ 3604.482215][ T31] [ 3604.485301][ T31] INFO: task kworker/1:1:25243 blocked for more than 143 seconds. [ 3604.493554][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 3604.500856][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3604.509840][ T31] task:kworker/1:1 state:D stack:20712 pid:25243 tgid:25243 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 3604.522306][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 3604.529096][ T31] Call Trace: [ 3604.532475][ T31] [ 3604.535447][ T31] __schedule+0x16f5/0x4d00 [ 3604.539994][ T31] ? schedule+0x165/0x360 [ 3604.544673][ T31] ? __pfx___schedule+0x10/0x10 [ 3604.549644][ T31] ? schedule+0x91/0x360 [ 3604.554410][ T31] schedule+0x165/0x360 [ 3604.558627][ T31] schedule_preempt_disabled+0x13/0x30 [ 3604.564299][ T31] __mutex_lock+0x724/0xe80 [ 3604.568841][ T31] ? look_up_lock_class+0x74/0x170 [ 3604.574321][ T31] ? __mutex_lock+0x51b/0xe80 [ 3604.579022][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 3604.585637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3604.590713][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3604.596551][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3604.602399][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 3604.608518][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 3604.614342][ T31] process_scheduled_works+0xae1/0x17b0 [ 3604.619949][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3604.626329][ T31] worker_thread+0x8a0/0xda0 [ 3604.630963][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3604.637800][ T31] ? __kthread_parkme+0x7b/0x200 [ 3604.642896][ T31] kthread+0x70e/0x8a0 [ 3604.646996][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3604.652223][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.656846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3604.662294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3604.667528][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.672320][ T31] ret_from_fork+0x3fc/0x770 [ 3604.676955][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3604.682181][ T31] ? __switch_to_asm+0x39/0x70 [ 3604.686973][ T31] ? __switch_to_asm+0x33/0x70 [ 3604.691745][ T31] ? __pfx_kthread+0x10/0x10 [ 3604.696426][ T31] ret_from_fork_asm+0x1a/0x30 [ 3604.701230][ T31] [ 3604.704404][ T31] INFO: task syz.3.6744:4379 blocked for more than 143 seconds. [ 3604.712387][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 3604.719704][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3604.728470][ T31] task:syz.3.6744 state:D stack:27240 pid:4379 tgid:4371 ppid:5850 task_flags:0x400040 flags:0x20004004 [ 3604.740578][ T31] Call Trace: [ 3604.744234][ T31] [ 3604.747202][ T31] __schedule+0x16f5/0x4d00 [ 3604.751772][ T31] ? schedule+0x165/0x360 [ 3604.756471][ T31] ? __pfx___schedule+0x10/0x10 [ 3604.761381][ T31] ? schedule+0x91/0x360 [ 3604.765736][ T31] schedule+0x165/0x360 [ 3604.769929][ T31] schedule_timeout+0x9a/0x270 [ 3604.774814][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 3604.780238][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3604.785583][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3604.790827][ T31] ? wait_for_completion+0x267/0x5d0 [ 3604.796426][ T31] wait_for_completion+0x2bf/0x5d0 [ 3604.801576][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 3604.807328][ T31] ? __flush_work+0xd2/0xbc0 [ 3604.812000][ T31] ? __flush_work+0xd2/0xbc0 [ 3604.816629][ T31] __flush_work+0x9b9/0xbc0 [ 3604.821137][ T31] ? __flush_work+0xd2/0xbc0 [ 3604.825823][ T31] ? __pfx___flush_work+0x10/0x10 [ 3604.830876][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 3604.836526][ T31] ? __pfx___cancel_work+0x10/0x10 [ 3604.841670][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 3604.847418][ T31] __cancel_work_sync+0xbe/0x110 [ 3604.852616][ T31] rfkill_unregister+0x92/0x220 [ 3604.857490][ T31] nfc_unregister_device+0x96/0x2a0 [ 3604.862894][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 3604.868646][ T31] virtual_ncidev_close+0x56/0x90 [ 3604.873991][ T31] __fput+0x44c/0xa70 [ 3604.878029][ T31] task_work_run+0x1d1/0x260 [ 3604.882719][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3604.887868][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 3604.893743][ T31] exit_to_user_mode_loop+0xec/0x110 [ 3604.899080][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 3604.904413][ T31] do_fast_syscall_32+0x34/0x80 [ 3604.909300][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3604.915936][ T31] RIP: 0023:0xf7fb3539 [ 3604.920053][ T31] RSP: 002b:00000000f484e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 3604.928555][ T31] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 000000000000000c [ 3604.936586][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3604.944656][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3604.952970][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3604.960969][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3604.969286][ T31] [ 3604.972624][ T31] INFO: task syz-executor:4481 blocked for more than 144 seconds. [ 3604.980444][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 3604.987821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3604.996716][ T31] task:syz-executor state:D stack:24232 pid:4481 tgid:4481 ppid:5818 task_flags:0x400000 flags:0x20004004 [ 3605.008785][ T31] Call Trace: [ 3605.012139][ T31] [ 3605.015105][ T31] __schedule+0x16f5/0x4d00 [ 3605.019667][ T31] ? schedule+0x165/0x360 [ 3605.024217][ T31] ? __pfx___schedule+0x10/0x10 [ 3605.029115][ T31] ? schedule+0x91/0x360 [ 3605.033698][ T31] schedule+0x165/0x360 [ 3605.037887][ T31] schedule_preempt_disabled+0x13/0x30 [ 3605.043485][ T31] __mutex_lock+0x724/0xe80 [ 3605.048029][ T31] ? __mutex_lock+0x51b/0xe80 [ 3605.052873][ T31] ? rfkill_register+0x37/0x8e0 [ 3605.057763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3605.062973][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 3605.068382][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 3605.074240][ T31] ? device_initialize+0x24b/0x440 [ 3605.079371][ T31] rfkill_register+0x37/0x8e0 [ 3605.084200][ T31] hci_register_dev+0x3f5/0x890 [ 3605.089105][ T31] vhci_create_device+0x39c/0x6e0 [ 3605.094282][ T31] vhci_write+0x3ce/0x4a0 [ 3605.098655][ T31] vfs_write+0x54b/0xa90 [ 3605.103063][ T31] ? __pfx_vhci_write+0x10/0x10 [ 3605.107951][ T31] ? __pfx_vfs_write+0x10/0x10 [ 3605.113067][ T31] ? expand_files+0x6c8/0x7f0 [ 3605.117782][ T31] ? __lock_acquire+0xab9/0xd20 [ 3605.122794][ T31] ksys_write+0x145/0x250 [ 3605.127171][ T31] ? __pfx_ksys_write+0x10/0x10 [ 3605.132204][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 3605.138854][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3605.144300][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 3605.149464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3605.155052][ T31] do_fast_syscall_32+0x34/0x80 [ 3605.159942][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3605.166423][ T31] RIP: 0023:0xf7f12539 [ 3605.170517][ T31] RSP: 002b:00000000ffa68fb0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3605.179064][ T31] RAX: ffffffffffffffda RBX: 00000000000000ca RCX: 00000000ffa6900a [ 3605.187359][ T31] RDX: 0000000000000002 RSI: 00000000f73a2ff4 RDI: 00000000f73d5468 [ 3605.195654][ T31] RBP: 00000000ffa69198 R08: 0000000000000000 R09: 0000000000000000 [ 3605.203713][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3605.211713][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3605.219829][ T31] [ 3605.222995][ T31] [ 3605.222995][ T31] Showing all locks held in the system: [ 3605.230729][ T31] 1 lock held by khungtaskd/31: [ 3605.235913][ T31] #0: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3605.245930][ T31] 2 locks held by getty/5595: [ 3605.250607][ T31] #0: ffff888034baa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3605.260530][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 3605.270781][ T31] 4 locks held by kworker/1:8/10861: [ 3605.276391][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3605.287530][ T31] #1: ffffc90003ddfbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3605.300683][ T31] #2: ffffffff8f7e5408 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 3605.310853][ T31] #3: ffff88805bce5100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 3605.320882][ T31] 3 locks held by kworker/1:1/25243: [ 3605.326296][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 3605.337423][ T31] #1: ffffc900131afbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 3605.351040][ T31] #2: ffffffff8f7e5408 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 3605.362712][ T31] 1 lock held by syz.3.6744/4379: [ 3605.367764][ T31] #0: ffff88805bce5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 3605.379338][ T31] 2 locks held by syz-executor/4481: [ 3605.384724][ T31] #0: ffff88805d7db918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 3605.395232][ T31] #1: ffffffff8f7e5408 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 3605.405397][ T31] 2 locks held by syz.5.6769/4523: [ 3605.410579][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.419326][ T31] #1: ffffffff8f7e5408 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 3605.429500][ T31] 1 lock held by syz.4.6771/4532: [ 3605.434710][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.443369][ T31] 1 lock held by syz.1.6770/4541: [ 3605.448413][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.457058][ T31] 1 lock held by syz.2.6772/4545: [ 3605.462187][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.470698][ T31] 1 lock held by syz-executor/4548: [ 3605.476046][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.484799][ T31] 1 lock held by syz-executor/4549: [ 3605.490033][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.498640][ T31] 1 lock held by syz-executor/4550: [ 3605.504059][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.512706][ T31] 1 lock held by syz-executor/4551: [ 3605.517943][ T31] #0: ffffffff8e9bfd88 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 3605.526525][ T31] [ 3605.528880][ T31] ============================================= [ 3605.528880][ T31] [ 3605.537750][ T31] NMI backtrace for cpu 0 [ 3605.537780][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 3605.537812][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3605.537825][ T31] Call Trace: [ 3605.537834][ T31] [ 3605.537844][ T31] dump_stack_lvl+0x189/0x250 [ 3605.537880][ T31] ? __wake_up_klogd+0xd9/0x110 [ 3605.537907][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3605.537939][ T31] ? __pfx__printk+0x10/0x10 [ 3605.537977][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3605.538003][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3605.538022][ T31] ? _printk+0xcf/0x120 [ 3605.538050][ T31] ? __pfx__printk+0x10/0x10 [ 3605.538075][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3605.538106][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3605.538132][ T31] watchdog+0xfee/0x1030 [ 3605.538161][ T31] ? watchdog+0x1de/0x1030 [ 3605.538195][ T31] kthread+0x70e/0x8a0 [ 3605.538222][ T31] ? __pfx_watchdog+0x10/0x10 [ 3605.538246][ T31] ? __pfx_kthread+0x10/0x10 [ 3605.538271][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3605.538294][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3605.538318][ T31] ? __pfx_kthread+0x10/0x10 [ 3605.538341][ T31] ret_from_fork+0x3fc/0x770 [ 3605.538373][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3605.538408][ T31] ? __switch_to_asm+0x39/0x70 [ 3605.538429][ T31] ? __switch_to_asm+0x33/0x70 [ 3605.538461][ T31] ? __pfx_kthread+0x10/0x10 [ 3605.538485][ T31] ret_from_fork_asm+0x1a/0x30 [ 3605.538522][ T31] [ 3605.538531][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3605.695763][ C1] NMI backtrace for cpu 1 [ 3605.695782][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 3605.695804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3605.695816][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 3605.695843][ C1] Code: 43 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 92 24 00 f3 0f 1e fa fb f4 18 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 3605.695860][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 3605.695877][ C1] RAX: 0db0d66e7f39cf00 RBX: ffffffff819710c8 RCX: 0db0d66e7f39cf00 [ 3605.695892][ C1] RDX: 0000000000000001 RSI: ffffffff8d96be2f RDI: ffffffff8be26400 [ 3605.695905][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 3605.695918][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b1b0 [ 3605.695932][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad2b40 [ 3605.695945][ C1] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 3605.695960][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3605.695973][ C1] CR2: 0000556cb172e660 CR3: 000000000df36000 CR4: 00000000003526f0 [ 3605.695989][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3605.696000][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3605.696012][ C1] Call Trace: [ 3605.696019][ C1] [ 3605.696027][ C1] default_idle+0x13/0x20 [ 3605.696052][ C1] default_idle_call+0x74/0xb0 [ 3605.696079][ C1] do_idle+0x1e8/0x510 [ 3605.696108][ C1] ? __pfx_do_idle+0x10/0x10 [ 3605.696132][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 3605.696162][ C1] cpu_startup_entry+0x44/0x60 [ 3605.696189][ C1] start_secondary+0x101/0x110 [ 3605.696210][ C1] common_startup_64+0x13e/0x147 [ 3605.696238][ C1] [ 3605.696749][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3605.886402][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 3605.897869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3605.907934][ T31] Call Trace: [ 3605.911219][ T31] [ 3605.914156][ T31] dump_stack_lvl+0x99/0x250 [ 3605.918784][ T31] ? __asan_memcpy+0x40/0x70 [ 3605.923417][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3605.928671][ T31] ? __pfx__printk+0x10/0x10 [ 3605.933300][ T31] panic+0x2db/0x790 [ 3605.937221][ T31] ? __pfx_panic+0x10/0x10 [ 3605.941656][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 3605.947487][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3605.952882][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 3605.959072][ T31] watchdog+0x102d/0x1030 [ 3605.963434][ T31] ? watchdog+0x1de/0x1030 [ 3605.967904][ T31] kthread+0x70e/0x8a0 [ 3605.971993][ T31] ? __pfx_watchdog+0x10/0x10 [ 3605.976685][ T31] ? __pfx_kthread+0x10/0x10 [ 3605.981289][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3605.986498][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 3605.991708][ T31] ? __pfx_kthread+0x10/0x10 [ 3605.996315][ T31] ret_from_fork+0x3fc/0x770 [ 3606.000950][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3606.006083][ T31] ? __switch_to_asm+0x39/0x70 [ 3606.010856][ T31] ? __switch_to_asm+0x33/0x70 [ 3606.015627][ T31] ? __pfx_kthread+0x10/0x10 [ 3606.020230][ T31] ret_from_fork_asm+0x1a/0x30 [ 3606.025019][ T31] [ 3606.028363][ T31] Kernel Offset: disabled [ 3606.032706][ T31] Rebooting in 86400 seconds..