last executing test programs: 29m31.508745431s ago: executing program 1 (id=890): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000001140), 0x4, 0x1e3002) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x48031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={0x0, 0x1c}}, 0x80) recvmmsg$unix(r5, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x11) 29m28.572560715s ago: executing program 1 (id=897): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x18, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 29m27.040205277s ago: executing program 1 (id=899): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x10001, 0x240000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, 0x0}) mkdir(0x0, 0x136) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2, 0x9], [0x0, 0x0, 0x1, 0x1]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000200)) sendmsg(r8, 0x0, 0x4) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r10, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) 29m25.472455083s ago: executing program 1 (id=901): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db2ab9040a1d080211000000040000a118000280ff05af2800000e1208000f0100810401", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) 29m21.771300998s ago: executing program 1 (id=907): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 29m19.274641257s ago: executing program 1 (id=911): syz_emit_ethernet(0x29, &(0x7f0000000140)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "98", "054000", 0xf5, "ef7cea0b7f3c84f37cbbae351cba394d56bbbc"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xea400, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) listen(r4, 0x3) r6 = accept4(r4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x20000001) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r7 = syz_io_uring_setup(0x7075, &(0x7f0000000340)={0x0, 0xe4ae, 0x40, 0x0, 0x1ac, 0x0, r3}, &(0x7f0000000180), &(0x7f00000003c0)) syz_io_uring_setup(0x4b56, &(0x7f0000000400)={0x0, 0x7252, 0x2, 0x6, 0x205, 0x0, r7}, &(0x7f0000000480), 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 29m3.702081689s ago: executing program 32 (id=911): syz_emit_ethernet(0x29, &(0x7f0000000140)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "98", "054000", 0xf5, "ef7cea0b7f3c84f37cbbae351cba394d56bbbc"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xea400, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) listen(r4, 0x3) r6 = accept4(r4, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x20000001) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r7 = syz_io_uring_setup(0x7075, &(0x7f0000000340)={0x0, 0xe4ae, 0x40, 0x0, 0x1ac, 0x0, r3}, &(0x7f0000000180), &(0x7f00000003c0)) syz_io_uring_setup(0x4b56, &(0x7f0000000400)={0x0, 0x7252, 0x2, 0x6, 0x205, 0x0, r7}, &(0x7f0000000480), 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 26m17.699643613s ago: executing program 3 (id=1212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r1 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @const={0x1}, @const={0xa}]}, {0x0, [0x30, 0x0, 0x61, 0x2e]}}, &(0x7f00000005c0), 0x42, 0x0, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000007c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x5, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x9, 0x7}, 0x10, 0x0, r0, 0x1, &(0x7f0000000ac0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x2, 0x1, 0x2, 0x1}], 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x18, 0x40, 0x70a, 0x7638, 0x4a00, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001010000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0xfffffffb, 0xdb, &(0x7f0000000400)=""/219, 0x41000, 0xc, '\x00', r3, @fallback=0x8, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x1, 0xcb, 0x3c08}, 0x10, r5, r6, 0x1, &(0x7f0000000c80)=[r7], &(0x7f0000000cc0)=[{0x0, 0x3, 0xc}], 0x10, 0x4}, 0x94) 26m15.702588082s ago: executing program 3 (id=1213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r1 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @const={0x1}, @const={0xa}]}, {0x0, [0x30, 0x0, 0x61, 0x2e]}}, &(0x7f00000005c0), 0x42, 0x0, 0x0, 0x9, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000007c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x5, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x9, 0x7}, 0x10, 0x0, r0, 0x1, &(0x7f0000000ac0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x2, 0x1, 0x2, 0x1}], 0x10, 0x8}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x18, 0x40, 0x70a, 0x7638, 0x4a00, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001010000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0xfffffffb, 0xdb, &(0x7f0000000400)=""/219, 0x41000, 0xc, '\x00', r3, @fallback=0x8, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x1, 0xcb, 0x3c08}, 0x10, r5, r6, 0x1, &(0x7f0000000c80)=[r7], &(0x7f0000000cc0)=[{0x0, 0x3, 0xc}], 0x10, 0x4}, 0x94) 26m15.332848181s ago: executing program 3 (id=1216): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) 26m14.241556459s ago: executing program 3 (id=1218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 26m14.115462629s ago: executing program 3 (id=1219): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x3000812, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESOCT], 0x11, 0x2f5, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) 26m11.043468764s ago: executing program 3 (id=1222): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x6, "08000000f28f00"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x2f, 0x2, @thr={0x0, &(0x7f0000000240)="62a971cee42149b7ee6ae59ab31a5a25dbf9de9ffc604453d61b2506ae55304536dceab5d1587d6d442ca1e84f98f11a6bc0fea48cf6af12b7a1a030716e90f7e82d041e01ce117e68c3c5e2f33f478b00ab21239aafc59167e0de6a"}}, &(0x7f0000000300)) 25m55.398004012s ago: executing program 33 (id=1222): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x6, "08000000f28f00"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x2f, 0x2, @thr={0x0, &(0x7f0000000240)="62a971cee42149b7ee6ae59ab31a5a25dbf9de9ffc604453d61b2506ae55304536dceab5d1587d6d442ca1e84f98f11a6bc0fea48cf6af12b7a1a030716e90f7e82d041e01ce117e68c3c5e2f33f478b00ab21239aafc59167e0de6a"}}, &(0x7f0000000300)) 25m54.034122311s ago: executing program 2 (id=1249): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000280)=0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x7edcaa70, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0xbe) read(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100)={0x2, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfc}, 0x2) 25m39.406269978s ago: executing program 2 (id=1264): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x18, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) 25m38.768572369s ago: executing program 4 (id=1265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/150, 0x96, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000fd40df6b3619896100000000000000000000000000ac1f3c78cd6ff2c5d8b67e64f0dedd2d2011ac1962d270d95091c695fcb5b3b022e902da57d8909f550e979186e1d440bfdd129f0f2d90466d0436853b77fa1078c29bb3859c0aa04b594684613b5689874926982928cfe23802d2fb923112390b8f8fcd9427a6e614a670e30c9b80ed5dfc75d910b1a0c1edae24fbca490800000000000000000000000000000c9129e8ad165968f12a8de5240185d7d3daef1c13fe89a048cf2ab9471a87f925cf6a50517001c133440e3fad7a3975da3d6198495ad2aee3aeff24d559580791ac12cd3e2fd842f7a008c920167b939687f3f10eab6a05523510244ec9de7b"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendmmsg$inet(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd65cc55f6cd20ca40e9f671d415246f7ac04b7b9612df49608cc4758bebf84b3b875f4e3469dafb8456ca0855c46b29e1bad9a6227cb162e7ab938871e5a6cd782a5a27f03eaf5803928a18d", 0x51}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 25m37.87689593s ago: executing program 2 (id=1266): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) io_setup(0x30, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x20000000000002b0, &(0x7f00000001c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x60e, r2, 0x0}]) timer_settime(0x0, 0x0, 0x0, 0x0) 25m37.37530103s ago: executing program 4 (id=1267): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "b6d194a2", ["1a0500", '\x00', "000000000009f6df1000", "9b3842fc56849f1c0300"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1167d6664e261326ac71ae771bf61", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x80}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 25m36.109906681s ago: executing program 4 (id=1270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) 25m34.253842039s ago: executing program 2 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 25m34.002408709s ago: executing program 2 (id=1275): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000180), 0x72, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000340)={@broadcast, @multicast1}, 0x8) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000008440), 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000008400), 0x4, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0x20, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x4, 0xfffffffd}, {0xffffff78, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$packet(0x11, 0x1, 0x300) shutdown(r4, 0x0) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 25m32.786674756s ago: executing program 2 (id=1276): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) 25m31.757488308s ago: executing program 4 (id=1277): setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x803}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x121140, 0x200) open(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x2008, 0x400007, 0x1]}) 25m30.130579948s ago: executing program 4 (id=1281): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x10001, 0x240000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, 0x0}) mkdir(0x0, 0x136) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2, 0x9], [0x0, 0x0, 0x1, 0x1]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg(0xffffffffffffffff, 0x0, 0x4) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) 25m27.941473312s ago: executing program 4 (id=1284): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) 25m15.698670699s ago: executing program 34 (id=1276): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) 25m12.739588025s ago: executing program 35 (id=1284): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa01000000"], 0x18) 22m27.216036686s ago: executing program 0 (id=1499): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, 0x0, 0x0, 0x12}) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f00000003c0)='./file2\x00', 0x2010088, &(0x7f00000000c0)=ANY=[], 0x2, 0x160, &(0x7f0000000440)="$eJzs0M+LEmEcx/H3/EitNAcysA4VdWhIzHHEbhEZSUI2UHTtkhMFmqIXb/2iW4f+gDmUQifxEB0jdt29uKuwuP/EXoQ9LOzR5ZlndmGve35el4HP8+H5zvd58mBuY4GB9Ljd6nT9Xs9v3Hzh1asv//z9d0nkcSwSYaPV6YpyQ/bXHsE78TVh+VnGGyl4+77p33vTbjbAFD2b/3uViyLXcZDdC0AlI7talNm3YXJFZm6Y6aeyUtS7ZkIlLTNx3+oX3AF0ZFYEDrgVbfV8Nq3l7/5+bfCtlrtxWYN+kBuPtowwv+5/d6tXh8nsV2BzEK7ZD3YL0/xOYTxazGf1Z17dm5dc937JKTpOeeFtz2rlTz8wnybPAyf3yTmxGPAKvmgQaDAKz5frWgqY/BxEP8X+Bwu0frBcSR8PIR3PHJ8kxDNnzw0fZiwdwxZTFEVRFEVRFEVRFOVsjgIAAP//YeFmYQ==") 22m25.18382985s ago: executing program 0 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) io_setup(0xc, &(0x7f0000000100)=0x0) r4 = timerfd_create(0x0, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES8, @ANYRESHEX=r1, @ANYRESOCT=r0, @ANYRES8, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES32=r3, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="ec0a0ad3bdcd0ab13af1386e824f5fc63c77c219c5d4fae9580c6108351e13690c7c1febb9b3f9efad46d155d1ecf480391c704a3240d20ad726383a7f46ad26e750643c6f", @ANYRES64=0x0, @ANYRES16=r4], 0x5, 0x1514, &(0x7f0000004280)="$eJzs3Au4TtXWOPAx5pyLTdKb5JY55li85DJJklwSckmS5EiSW0KSJElIbHJLQhJyT3JPkltI7vdb7klyJEkSEpLM/6PL3zlf9XXO853v+J6zx+955rPn2GuN8c61x373u9ba+91fdRhUpV7VinWYGf5H8OcPqQCQAgB9AeAqAIgAoESWElkubs+gMfV/9iDiX+u+qZd7BeJykv6nbdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0X4i0bMu0nFfL+FeMfOkv/xr++SH3/9Myef3/D3KoyOjP1hW5tuM/kSL9T9uk/2mb9D9tk/6nbdL/tE36/5+vwn+zTfqftkn/hUjLLvf9Zxn/lpHuj7Zd7u8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBpw9lwiQGAX+eXe11CCCGEEEIIIYT41wnpL/cKhBBCCCGEEEII8b8PQYEGAxGkg/SQAhkgI1wBmeBKyAxXQQKuhixwDWSFayEbZIcckBNywXWQGywQOGCIIQ/khSTkg/xwPRSAglAICoOHIlAUboBicCMUh5ugBNwMJeEWKAWloQyUhVuhHNwG5aECVITboRJUhipQFe6AanAnVIe7oAbcDTXhHqgF90Jt+AvUgfugLtwP9eABqA8PQgNoCI2gMTT5p/MhtT48C13gOegK3SAVukMPeB56Qi/oDX2gL7wA/eBF6A8vwQAYCIPgZRgMr8AQeBWGwjAYDq/BCBgJo2A0jIGxMA5eh/HwBkyAN2EiTILJMAWmwjSYDm/BDHgbZsI7MAvehdkwB+bCPJgP78ECWAiL4H1YDB/AElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW+BC2wjbYDjtgJ+yC3fAR7IGPYS98Avvg038y/8x/ye+IgIAKFRo0mA7TYQqmYEbMiJkwE2bGzJjABGbBLJgVs2I2zIY5MAfmwlyYG3MjISEjYx7Mg0lMYn7MjwWwABbCQujRY1EsisXwRiyOxbEElsCSWBJLYWksjWWxLJbDclgey2NFrIiVsBJWwSp4B96Bd2J1rI41sAbWxJpYC2thbayNdbAO1sW6WA/rYX2sjw2wATbCRtgEm2BTbIrNsBm2wBbYEltiK2yFrbE1tsE22BbbYjtsh+2xPXbADtgRO2EnfBafxefwOeyGlVR37IE9sCf2xN7YB/vgC9gPX8QX8SUcgANxEL6ML+MrOARP41AchsNxOJZTI3EUjkZWY3EcjsPxOB4n4ASciJNwEk7BqTgNp+N0nIFv49v4Ds7Cd/FdnINzcB7Ox/m4ABfiIlyEi/EMLsGluAyX4wpciStwNa7B1bgO1+M63IgbcTNuxg/xQ9yG23AH7sBduAs/wo/wY/wYB+A+3If7cT8ewAN4EA/iITyEh/EwHsEjeBSP4jE8hsfxBJ7EE3gK8Zen+1k8h+fwPD6d64u6uwquHQDqIqOMSqfSqRSVojKqjCqTyqQyq8wGAFQWlUVlVVlVNpVN5VA5VC6VS+VWuRUpUqxilUflUUmVVPlVflVAFVCFVCHllVdFVVFVTBVTxVVxVULdrEqqW1QpVVo192VVWVVOtfDlVQVVUVVUlVRlVUVVVVVVNVVNVVfVVQ1VQ9VUNVUtda+qrbpjb7xPXexMPTUQ66tB2EA1VI1UY/UKPqSaqiHYTDVXLdQjahgOxVaqqW+tHldt1Chsq55Uo/Ep1V6NxQ7qGdVRdVKd1bOqi2rmu6puaiJ2Vz3UFOypeqneqo+agZXVxY5VUS+pAWqgGqReVvPwFTVEvaqGqmFquHpNjVAj1Sg1Wo1RY9U49boar95QE9SbaqKapCarKWqqmqamq7fUDPW2mqneUbPUu2q2mqPmqnlqvnpPLVAL1SL1vlqsPlBL1FK1TC1XK9RKtUqtVmvUWrVOrVcb1Ea1SW1WW9SHaqvaprarHWqn2qV2q4/UHvWx2qs+UfvUp2q/+qs6oD5TB9Xn6pD6Qh1WX6oj6it1VH2tjqlv1HF1Qp1U36pT6jt1Wp1RZ9X36pz6QZ1XP6oLKijQqJXW2uhIp9PpdYrOoDPqK3QmfaXOrK/SCX21zqKv0Vn1tTqbzq5z6Jw6l75O59ZWk3aadazz6Lw6qfPp/Pp6XUAX1IV0Ye11EV1U36CL6Rt1cX2TLqFv1iX1LbqULq3L6LL6Vl1O36bL6wq6or5dV9KVdRVdVd+hq+k7dXV9l66h79Y19T26lr5X19Z/0XX0fbquvl/X0w/o+vpB3UA31I10Y91EP6Sb6od1M91ct9CP6Jb6Ud1KP6Zb68d1G/2Ebquf1O30U7q9flp30M/ojrqT7qx/1Bd00F11N52qu+se+nndU/fSvXUf3Ve/oPvpF3V//ZIeoAfqQfplPVi/oofoV/VQPUwP16/pEXqkHqVH6zF6rB6nX9fj9Rt6gn5TT9ST9GQ9RU/V03TvXyrN/Afy3/id/P4/PfpmvUV/qLfqbXq73qF36l16t96t9+g9eq/eq/fpfXq/3q8P6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6hv9ff6lP6O31an9Fn9Pf6nD6nz//yNQCDRhltjIlMOpPepJgMJqO5wmQyV5rM5iqTMFebLOYak9Vca7KZ7CaHyWlymetMbmMNGWfYxCaPyWuSJp/Jb643BUxBU8gUNt4UMUXNDX+cD+Yfyv+z9TUxTUxT09Q0M81MC9PCtDQtTSvTyrQ2rU0b08a0NW1NO9POtDftTQfTwXQ0HU1n09l0MV1MV9PVpJpU08M8b3qaXqa36WP6mhdMP9PP9Df9zQAzwAwyg8xgM9gMMUPMUDPUDDfDzQgzwowyo8wYM8aMM+PMeDPeTDATzEQz0Uw2k81UM9VMN9PNDDPDzDQzzSwzy8w2s81cM9fMN/PNArPALDKLzGKz2CwxS81Ss9wsNyvNSrParDZrzVqz3qw3GyMAMFvMFrPVbDXbzXaz0+w0u81us8fsMXvNXrPP7DP7zX5zwBwwB81Bc8gcMofNYXPEHDFHzVFzzBwzx81xc9KcNKfMKXPanDZnzVlzzpwz5815c8FcuHjaF6lIRSYyUbooXZQSpUQZo4xRpihTlDnKHCWiRJQlyhJlja6NskXZoxxRzihXdF2UO7IRRS7iKI7yRHmjZJQvyh9dHxWICkaFosKRj4pERaMbomLRjVHx6KaMABCVjG6JSkWlozJR2ejWqFx0W1Q+qhBVjG6PKkWVoypR1eiOqFp0Z1Q9uiuqEd0d1YzuiWpF90a1o79EdaL7orrR/VG96IGofvRg1CBqGDWKGkdNfq4flYhu/hfUD+F09od9V9vNptrutod93va0vWxv28f2tS/YfvZF29++ZAfYgXaQfdkOtq/YIfZVO9QOs8Pta3aEHWlH2dF2jB1rx9nX7Xj7hp1g37QT7SQ72U6xU+00O92+ZWfYt+1M+46dZd+1s+0cO9fOs/Pte3aBXWgX2fftYvuBXWKX2mV2uV1hV9pVdrVdY9fadXa93WA32k12s91iP7Rb7Ta73e6wO+0uu9t+ZPfYj+1e+4ndZz+1++1f7QH7mT1oP7eH7Bf2sP3SHrFf2aP2a3vMfmOP2xP2pP3WnrLf2dP2jD1rv7fn7A/2vP3RXrDh4sn9xZd3MmQoHaWjFEqhjJSRMlEmykyZKUEJykJZKCtlpWyUjXJQDspFuSg35aaLmJjyUB5KUpLyU34qQAWoEBUiT56KUlEqRsWoOBWnElSCSlJJKkWlqAyVoVvpVrqNbqMKVIFup9upMlWmqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWgRtSImlATakpNqRk1oxbUglpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kydqQt1oa7UlVIplXpQD+pJPak39aa+1Jf6UT/qT/1pAA2gQTSIBtNgGkJDaCgNo+H0Go2gkTSKRtMYGkvjaByNp/E0gSbQRJpIk2kyTaWpNJ2m0wyaQTNpJs2iWTSbZtNcmkvzaT4toAW0iBbRYlpMS2gJLaNltIJW0CpaRWtoDa2jdbSBNtAm2kRbaAttpa20nbbTTtpJu2k37aE9tJf20j7aR/tpPx2gA3SQDtIhOkSH6TAdoSN0lI7SMTpGx+k4naSTdIpO0Wk6TWfpLJ2jH+g8/UgXKFCKU5DRXeEyuStdZneVS3EZ3N/GOVxOl8td53I767K57H8Xk3OugCvoCrnCzrsirqi74TdxKVfalXFl3a2unLvNlf9NXM3d6aq7u1wNd7er6u74u7imu8fVcg+42u5BV8c1dHVdY1fPPeDquwddA9fQNXKNXUv3qGvlHnOt3eOujXviN/ECt9CtcWvdOrfe7XEfu7Pue3fEfeXOuR9cV9fN9XUvuH7uRdffveQGuIG/iYe719wIN9KNcqPdGDf2N/FkN8VNddPcdPeWm+He/k08373nZrlFbrab4+a6eT/FF9e0yL3vFrsP3BK31C1zy90Kt9Ktcqv//1qXu41uk9vsdruP3Fa3zW13O9xOt+un+OJx7HWfuH3uU3fYfekOuM/cQXfUHXJf/BRfPL6j7mt3zH3jjrsT7qT71p1y37nT7sxPx3/x2L91P7oLLjhgZMWaDUecjtNzCmfgjHwFZ+IrOTNfxQm+mrPwNZyVr+VsnJ1zcE7OxddxbrZM7Jg55jycl5Ocj/Pz9VyAC3IhLsyei3BRvoGL8Y1cnG/iEnwzl+RbuBSX5jJclm/lcnwbl+cKXJFv50pcmatwVb6Dq/GdXJ3v4hp8N9fke7gW38u1+S9ch+/junw/1+MHuD4/yA24ITfixtyEH+Km/DA34+bcgh/hlvwot+LHuDU/zm34CW7LT3I7forb89PcgZ/hjtyJO/Oz3IWf467cjVO5O/fg57kn9+Le3If78gvcj1/k/vwSD+CBPIhf5sH8Cg/hV3koD+Ph/BqP4JE8ikfzGB7L4/h1Hs9v8AR+kyfyJJ7MU3gqT+Pp/BbP4Ld5Jr/Ds/hdns1zeC7P4/n8Hi/ghbyI3+fF/AEv4aW8jJfzCl7Jq3g1r+G1vI7X8wbeyJt4M2/hD3krb+PtvIN38i7ezR/xHv6Y9/InvI8/5f38Vz7An/FB/pwP8Rd8mL/kIwb4KH/Nx/gbPs4n+CR/y6f4Oz7NZ/gsf8/n+Ac+zz/yBdanIcZYxTo2cRSni9PHKXGGOGN8RZwpvjLOHF8VJ+Kr4yzxNXHW+No4W5w9zhHnjHPF18W5YxtT7GKO4zhPnDdOxvni/PH1cYG4YFwoLhz7uEhcNL4hLhbfGBePb4pLxDfHJeNb4lJx6fiBu8vGt8bl4tvi8nGFuGJ8e1wprhxXiavGd8TV4jvj6vFdcY347rh4fE9cK743rv3Le1W6xffH9eIH4vrxg3GDuGHcKG4cN4kfipvGD8fN4uZxi/iRuGX8aNwqfixuHT8et4mf+NPtqXH3uEf8fPx8HMJdem5yXnJ+8r3kguTC5KLk+8nFyQ+SS5JLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5MhVE0PHr3y2hsf+XQ+vU/xGXxGf4XP5K/0mf1VPuGv9ln8NT6rv9Zn89l9Dp/T5/LX+dzeevLOs499Hp/XJ30+n99f7wv4gr6QL+y9L+KL+sa+iW/im/qHfTPf3Lfwj/hH/KP+Uf+Yf8w/7tv4J3xb/6Rv55/y7f3T/mn/jO/oO/nO/lnfxT/nu/puPtWn+h6+h+/pe/revrfv6/v6fr6f7+/7+wF+gB/kB/nBfrAf4of4oX6oH+6H+xF+hB/lR/kxfowf58f58X68n+An+Il+op+cYbKf6qf66X66n+Fn+Jl+pp9VYJaf7Wf7uX6un+/n+wV+gV/kF/nFfrFf4pf4ZX6ZX+FX+FV+lV/j1/h1fp3f4Df4TX6T3+K3eAVb/Xa/3e/0O/1uv9vv8Xv8Xr/X7/P7/H6/3x/wB/xB/7k/5L/wh/2X/oj/yh/1X/tj/ht/3J/wJ/23/pT/zp/2Z/xZ/70/53/w5/2P/oIPflzi9cT4xBuJCYk3ExMTkxKTE1MSUxPTEtMTbyVmJN5OzEy8k5iVeDcxOzEnMTcxLzE/8V5iQWJhYlHi/cTixAeJJYmliWWJ5YkVCUiEcN3WOOQJeUMy5Av5w/WhQCgYCoXCwYcioWi4IRQLN4bi4aZQItwcSoZbQqlQOpQJD4YGoWFoFBqHJuGh0DQ8HJqF5qFFeCS0DI+GVuGx0Do8HtqEJ0Lb8GRoF54K7cPToUN4JnQMnULn8GzoEp4LXUO3kBq6hx7h+dAz9Aq9Q5/QN7wQ+oUXQ//wUhgQBoZB4eUwOLwShoRXw9AwLAwPr4URYWQYFUaHMWFsGBdeD+PDG2FCeDNMDJPC5DAlTA3TwvTw1q9/JRZmhXfD7DAnzA3zwvzwXlgQFoZF4f2wOHwQloSlYVlYHlaElWFVWB3WhLVhXVgfNoSNYVPYHLaED8PWsC1sDzvCzrAr7P65ZkYIn4R94dOwP/w1HAifhYPh83AofBEOhy/DkfBVOBq+DsfCN+F4OBFOhm/DqfBdOB3OhLPh+3Au/BDOhx/D08flPWtCCCGEEP8I/Sfbu//O59Qv46IeAHDltpyH/mvNDdl+nvdSuVomAODxbh3u+3VUqpSamvrLvks0RHnnAEDiUn46+Js4tQU8Cq2hORT73fX1Up3O8Z/UT9588STzkhS4FC+FX+vf+Af1H3pk+IKS8dks/039OQAF8l7KyQCX4kv1i/9B/exN/2T9GT4bB9Dsb3IywaX4Uv2i8DA8Aa3/bk8hhBBCCCGEEOJnvVSZdn9//al/9/o8l7mUkx5+in/6ndCl68/fvz4XQgghhBBCCCHE5fdUp86PPdS6dfN2/zcmv95l+MN9Un7Z4fIvVSb/0RP8v/kE+fdNLtMPJCGEEEIIIcT/mksn/Zd7JUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRNr17/h3Ypf7GIUQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQojL7f8FAAD//1vDHyA=") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0xfffffffc, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x1000, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x4, 0x0, 0x20000, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, 0x0, 0x0) 22m20.759438068s ago: executing program 0 (id=1507): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db2ab9040a1d080211000000040000a118000280ff05af2800000e1208000f0100810401a80016ea1f00084004a17386b89788112e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f", 0x5f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e"]) 22m16.596137855s ago: executing program 0 (id=1514): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYRES32], 0x26c0}}, 0x4004004) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r1 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffffffff, 0x8, 0x2, 0xa00, 0xffffffffffffffff, 0x39, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @const={0x1}, @const={0xa}]}, {0x0, [0x30, 0x0, 0x61, 0x2e]}}, &(0x7f00000005c0), 0x42, 0x0, 0x0, 0x9, 0x10000}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000007c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x5, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ff, 0x0, 0x0, 0x0, 0xe3a}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2a571fe07d12e8cc, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f00000009c0)='syzkaller\x00', 0x4e, 0x3, &(0x7f0000000a00)=""/3, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x3, 0x7, 0x9, 0x7}, 0x10, 0x0, r0, 0x1, &(0x7f0000000ac0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x2, 0x1, 0x2, 0x1}], 0x10, 0x8}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x18, 0x40, 0x70a, 0x7638, 0x4a00, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x14, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001010000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0xfffffffb, 0xdb, &(0x7f0000000400)=""/219, 0x41000, 0xc, '\x00', r4, @fallback=0x8, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x1, 0xcb, 0x3c08}, 0x10, r10, r11, 0x1, &(0x7f0000000c80)=[r12], &(0x7f0000000cc0)=[{0x0, 0x3, 0xc}], 0x10, 0x4}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r13, 0x8b22, &(0x7f0000000040)) 22m15.22611425s ago: executing program 0 (id=1517): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f00000003c0)='./file2\x00', 0x2010088, &(0x7f00000000c0)=ANY=[], 0x2, 0x160, &(0x7f0000000440)="$eJzs0M+LEmEcx/H3/EitNAcysA4VdWhIzHHEbhEZSUI2UHTtkhMFmqIXb/2iW4f+gDmUQifxEB0jdt29uKuwuP/EXoQ9LOzR5ZlndmGve35el4HP8+H5zvd58mBuY4GB9Ljd6nT9Xs9v3Hzh1asv//z9d0nkcSwSYaPV6YpyQ/bXHsE78TVh+VnGGyl4+77p33vTbjbAFD2b/3uViyLXcZDdC0AlI7talNm3YXJFZm6Y6aeyUtS7ZkIlLTNx3+oX3AF0ZFYEDrgVbfV8Nq3l7/5+bfCtlrtxWYN+kBuPtowwv+5/d6tXh8nsV2BzEK7ZD3YL0/xOYTxazGf1Z17dm5dc937JKTpOeeFtz2rlTz8wnybPAyf3yTmxGPAKvmgQaDAKz5frWgqY/BxEP8X+Bwu0frBcSR8PIR3PHJ8kxDNnzw0fZiwdwxZTFEVRFEVRFEVRFOVsjgIAAP//YeFmYQ==") 22m13.284173107s ago: executing program 0 (id=1518): syz_emit_ethernet(0x29, &(0x7f0000000140)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "98", "054000", 0xf5, "ef7cea0b7f3c84f37cbbae351cba394d56bbbc"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x20000001) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r5 = syz_io_uring_setup(0x7075, &(0x7f0000000340)={0x0, 0xe4ae, 0x40, 0x0, 0x1ac}, &(0x7f0000000180), &(0x7f00000003c0)) syz_io_uring_setup(0x4b56, &(0x7f0000000400)={0x0, 0x7252, 0x2, 0x6, 0x205, 0x0, r5}, &(0x7f0000000480), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 21m58.118456233s ago: executing program 36 (id=1518): syz_emit_ethernet(0x29, &(0x7f0000000140)={@multicast, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "98", "054000", 0xf5, "ef7cea0b7f3c84f37cbbae351cba394d56bbbc"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) listen(r3, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x20000001) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r5 = syz_io_uring_setup(0x7075, &(0x7f0000000340)={0x0, 0xe4ae, 0x40, 0x0, 0x1ac}, &(0x7f0000000180), &(0x7f00000003c0)) syz_io_uring_setup(0x4b56, &(0x7f0000000400)={0x0, 0x7252, 0x2, 0x6, 0x205, 0x0, r5}, &(0x7f0000000480), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 27.187966361s ago: executing program 6 (id=4513): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/100, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32, @ANYBLOB="1e00000000000000000000000000000000000000420774dfcaa8b2913e8d1bdc926372c87be532716cd8cdf67cfbf764d776b6ccd361e3ff3fd1da4353df80acd12288aaeb6f866f99ce2022952ab448bb83f033227d5687143634ea23f5575d9d9e34f0275325709b177cafa45a5fa67bd721241a3ff2946523cea48914a5bcdbde962759b07a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001100"/28], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001400000227bd7000fddbdf250a384000", @ANYRES32=0x0, @ANYBLOB="08000a0003e00000080008000124ff010000000400000000"], 0x30}, 0x1, 0x0, 0x0, 0x8815}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080005"], 0x5c}}, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') 21.077302126s ago: executing program 6 (id=4521): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbb", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.363364452s ago: executing program 6 (id=4524): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x101000) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B') close_range(r0, 0xffffffffffffffff, 0x0) 16.770284148s ago: executing program 6 (id=4533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.279150907s ago: executing program 6 (id=4535): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15.755244078s ago: executing program 6 (id=4538): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x549200, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 13.673865124s ago: executing program 5 (id=4541): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001c180)=@newtaction={0xbc0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xbac, 0x1, [@m_ipt={0x130, 0x1a, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbe, 0x6, {0x3, 'filter\x00', 0x5, 0xd, "8df27bf52614b7e9f8ed9cb637b81e532c54a964584ee1549af2fc8bcd18003cb1a881810fec9c6668e919a56d888a1d3084b851d9bc372c68d603cdf9de7a343c35384505f1f0f0b77719d4611fa9a5f68222bf2a025f091531f49602a2b769bd2754dbfbd0520930cd71e265bebeb8e77715fccff319c9ca40f84c26e4fea3e30841cf6b62b1bfbeebae48a9f9c9abf7739f6a"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x36, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cdbf16723a0e7bd140c3b76527d792db1845904574e4eb7cabb351"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xa78, 0x12, 0x0, 0x0, {{0x8}, {0x994, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xca, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816ba4915ce2c751dd2d6c485410b40295d0216984262d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'raw\x00', 0xc, 0x0, "fdab49e9eada13ffe711afe67a3890e03d3113"}}, @TCA_IPT_TARG={0x82a, 0x6, {0x4, 'security\x00', 0x1, 0x0, "b09dd993e7d4f98385bda70de393551875b4a7d12ce23ca6c3aa7d113f0f58d58f50846602b7d8d3ae47222a7d3ae20375fa2ff3deef751616fad4fe5b7e98553ebd73eaf4686fa9c5d62fde02ad371210f22ec021817b997736bbddebbf59899b296ae37701c56094c9dfc80bdc22f5d603c83e2c3000f18b3dab4cb1d9717e53e6700be1901d684e8edc79fe0d6f8f4576c4b8eca9dd4880a48fa9afd0b3b430761f825b93d4e2130ffdf57cf0a5f12be0488c65ecea717d74846e5c9dda1378c12b0f2b5c52836df881e1276fd575a43e4bfc50b9c3e873c2511ef04892d20828830906979e9fd7345b7d5253d1de996c94295e1344cac27dfd72e2000138693073c11f492f273dcbec145e5116fa776fb44bcdf650cac448750d35bb263131bb44ed4611ceb85177fb04fa090ffaadca5f5063217b1613d8e621a849d816324036c8fa1f3b841abb44cecc359f6434ecfa1eed16e443ea8511d11692c6665fefeaa18dd99fe60315d2b6940c6fe6708f93a005c775313d713a7d18abd1d26d35123623e03029c6b616e041f81439f4a04de6ff9530dfdf43989c145ae6a89fb16bf18a21c7c52109f55c06ad9ec41dd73c78c63a17b12675b2f0fecc59202f4ddcf4d4059e6be69dbd86dc0cf6e1094f6787f44da5ee6ef73e1637e3522c90b83472b6d80e6518135df0dd0d76663a22c5ef890eafde4ac3807fb16119f4686dea09fed3c0c535670f5954a952de65d678c8d2d34bc5f75f34703a8b4d5a7cc8c7f9704cf1a4e5f559731cbaeb6911b95c763aabf1e2b6fcc0e5eed51d0fe2bf7946ca9cb25c5445eca4b25944d79e57718bba66b25908b773c52b70df4f020d7fe2f3e69a6a009293f5646cab3b1b06c11784ca7f6391812611c5ede1ff37f4f59658dd9b24785f9cb8b7fbae46cd9c29f12599f647249ab4725fda4d53f6678b414f6e3ff6b50e219a494b6df79acd718d7205ba3ffbdde7e01b60363aee87bab37a8c9aab7b053dbdcd20c23024f88c0925d4f72aa892e96e604d8a4ac87a5b491712b5f47d4b713c24a77298a25470211b94218e0aa8bc0cc091c2a6dc59a420825df0c3ed48b8fd6f565344d4b0f950f5e9453e3ab9d56bf62ebdcba091e6a4242557b9bd79405cdf1000f199c8c418b23334656736144abbaf8cf49194c3630dd94bc817127a1338c0b4b67b76e8d8590e6674d951b7cfa4b392ae08111990d4ea8ef025f4cbd117426a57beb6594dd843b05eb3769fc9b08a9ddcf760f407295283d1db8c85211bd4e78fc9974559b7d4f4affd5f8145029012e08603652310611d1103686881a8fe3f813ff186785833b22a7bc7e0382d0fb2cce7856eff6612ecbe54cd937bec8a46a6c98127c07befbdd81db68355699ef32f66362fb0e956fdbde0bf732b6675877fea15615adf47f1953715e785960b4f12490e46fa42e35943980004c2ba5e56df7d18d26b5a990e1638a039b6c9c9778292b1a4ce5594552bdbf740b178ed10c71b0718daf2ca13c6b0fb90783f323c91a9cd3b7bf1c1994d78c426f1583215c61657844c71bdb7958b97912b7552b41c236580e6ab19d49cdbe9ab0b79f792f78581d9eb6320af864f5965065d649de71f86b0c999c9e896540ce9bc839bf4af9654d62fb31a3539cd9b7274f638e3ca4e43dd0ff5693049f4e904339f4768b038f88e208ac3bb25c8762e94f1884e418fbfd3795ff29eb2bc0fbc44a4d84bcdd3a99cf3c9e6767d3f7adf5969ce897e9bbf17809e17133638ba6e3b5118e4c0cc8f275549e09d22589532d206b4c87ee67557b0c91e3da6a459b030d10402eadfbb9bb900fc22542080e02022f099446638cc4cf7f545891c765e06d68cf99b7b1ebacaa24dbefdbec566a1ff0337d842765130eda8be91112138b41fb2cadfe61aee560f124fa4f534d1e7831ad9f120bb7806a96281a5de43950182c89689cc1db576cff1580e56b154a13a36c232886b26fe10bbda6cff90b644165e5636b0e39e62fcce2f4fcd6857a56b0f8f85435ab7e408fee24c4b48afab35aaef5f40361b361e5cde0a9bacb8a8e731f570c25188630a19b3e01a944845d65cdf0cf8e80dabbd105151285bd86ccf41b5422dc7b0c5454cb7510ac59cfa2e505d5315e018cf5493c61096b9ff70cb63f96bc331b338b766f2a08ac116dad14535086f6deeafe47b48b96d8492dd4083d0ea6f4ebb02ccecba7622b4fccdaa699762c68ef9473bb5ce633f9fccc7a4c9bb60d2aacea421a00b9ebd31f0cd16868222eea3d13077de3ef6a7f8a7cfbf6fc414ed2c15303a6956e8a4faf78b46d9f9560af226d3a0b878ba4617fa5ecaf94b293b71eb0b0a241d33069763cd8f4afedd3aa04618c924818a688f09f57753ef0003eb5f8f23961ba714f459afd780d6a5dcc8a729a2c0946de4dc7424fde9c612c5c11cc750f2f8baf346b831a079297af29c3cec83ba9f033a7f9aa6aa7444fe93a8b2a775a5a7a55e12175c08c4f04c9704f664df7b8585ed7c399233121aac96f3f00d3984ddbbfa9aed9fb73313316351513dfb728cba17b95507621f87c5c842e64da2822e04c92ac936b68c51a3930c4184e8426afaf1010d659c34e83322de0e985f4feb061dadda1ddf898a87effa001784bec26333ef04f781df05689745549a4eb585e250572978d3c25aa3d088e6152d5cbe7668851a197cdf1e608fd63e1ec8e6419430a41dd1ebc494c647f53b8e58c822dbf86c3862d0c72340548bd033c188b692aca04328a74132d51af2426ea2733a11dce6dbdccab072f76055ce518b236672b179ddf6ec947393307a37ecb8a8014f6b47e8f26862acb1e6189b4da75d279e93f0c4b10400aaf4e2320baf76a4f5740db6b7826c974934"}}]}, {0xc0, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3ec6da63"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xbc0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 13.171053094s ago: executing program 8 (id=4542): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 12.582148951s ago: executing program 7 (id=4543): syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRES8]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) 12.550052613s ago: executing program 5 (id=4544): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x2, 0x2d, &(0x7f0000000340)=""/45}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001c180)=@newtaction={0x2ae4, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x2ad0, 0x1, [@m_ipt={0x130, 0x1a, 0x0, 0x0, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xbe, 0x6, {0x3, 'filter\x00', 0x5, 0xd, "8df27bf52614b7e9f8ed9cb637b81e532c54a964584ee1549af2fc8bcd18003cb1a881810fec9c6668e919a56d888a1d3084b851d9bc372c68d603cdf9de7a343c35384505f1f0f0b77719d4611fa9a5f68222bf2a025f091531f49602a2b769bd2754dbfbd0520930cd71e265bebeb8e77715fccff319c9ca40f84c26e4fea3e30841cf6b62b1bfbeebae48a9f9c9abf7739f6a"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x36, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cdbf16723a0e7bd140c3b76527d792db1845904574e4eb7cabb351"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1280, 0x12, 0x0, 0x0, {{0x8}, {0x119c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xca, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816ba4915ce2c751dd2d6c485410b40295d0216984262d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0x8, 'raw\x00', 0xc, 0x0, "fdab49e9eada13ffe711afe67a3890e03d3113"}}, @TCA_IPT_TARG={0x102a, 0x6, {0x4, 'security\x00', 0x1, 0x0, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f4f}]}, {0xc0, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3ec6da63"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x88, 0xc, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x23, 0x6, "8edf36e333ee6a16e03e51a5776b7643b7c14337fee27ec5de0051eeaf616b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xdc, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0xb1, 0x6, "78eecaa209275119972ece92d2e88234b9706d227b2a1990c2f992e5abc79d597fc027585b2a522cbba2bbfd70572af8567f1ac5a6e5481a81de72a4d3833341dd6471dd4c2e672e8897a728399ac8a74c6279db2979b2a6718d193ae48042161bb00344ee79f3bef993b0ebcfa56777889cafa2e9d829ae9a3c3afaaaf9f70a7d5fa46e3ad32738204d8e94f4c600a9d25e0c6833c38c0006fc1e734d570fb527472e74ec609728be5be73b24"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x170, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5c, 0x6, {0x7, 'nat\x00', 0xdd, 0x9180, "7aaa39b5f9f156b237a257c1b33e0b76fa6eb2f1231c8a5186f36ea5a1b14988e5e3443f669e60942fd176e0e08f3459fbce"}}]}, {0xeb, 0x6, "08e513e17425af38163a9f1ccafa061d54e5c0b4a1a6b5d4b190d56ff405f6bac55a3509ecf8ea774c59935faac7b676cc06ef274a818050cd12e687a8a0fad4cc7864a1c6846897f7b5bf420d68d359959ad3356c4ffc6096eaf577f650bb361e916f2ac62eed2b78bd06cb7638f40cf5c15c1fc1cd307550355fd65664441a6cce0b8e0152db6a3839de055f1cb77bbd30943b7b24fe0b98bcf6eca575db9962a2538d01661f78fc50c55907d11a22e0b845157ca0a4d4de660310e6188ff3c084654dca2f626d3078ab2962dfbd15646c4798774f3c139bc06b8967f6aa5bbed89fea5e9955"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x1120, 0x8, 0x0, 0x0, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x5e, 0x6, {0x7, 'filter\x00', 0x9, 0x8, "94a7a0c7bebf11c242d0971dda9826081a7bbb0c22b58018d52d4140e1af4ee3a0fb68bb621168f748a27d31887dfa7ca27c5d9c"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x6c, 0x6, {0x3, 'security\x00', 0x2, 0x4, "efc44d4a65d79e8ad0277ea2c7bdf69648bd3473dff5a41cba201c7bccbbbfaca987f974b7aef667615d632e118a3b4b7a7c3c9ba25973a649bd648430be911a8c6d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7df5}, @TCA_IPT_HOOK={0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x328, 0x14, 0x0, 0x0, {{0x8}, {0x240, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xf7, 0x6, {0xb8, 'raw\x00', 0x1f, 0x26, "374cf76660b32ef74cf77b9ffe7f6bfbf5178692237ffdfcb310b13da6b966c705e4ab4efe4a16c41962f45abf219e56c0297164ac536ffe18646a20a5f435784b1b3d66afd04d36ea4652e27a3628172b775da660a4cba9e2ddb665131e60deeb4a6e08d7ae033bd8215e509168aa9c98394c35b1f50e4937acf63936bb56f899677e43e0121e94a1a72a6528ccbe569d1b4d3de7622278e2f24ae3381ef20661f9b123819a210636813247ab709b695624850c699cc1b0b62edbe23ec301da4cfd241548fa5de319a45e77ba"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xa5, 0x6, {0x40, 'security\x00', 0xf9, 0x9, "daa83da9056964fe43e90458029b0619a6390b2305fd184386d353cb67747200542070ab7f6c4d4de2866a0883e07c2156e2b0443ab2224969df4135452b8f1e7e0dbf4dd47a1cabbe958568d6650d6797df3e82fd97686c2f5251be2c24437f5305606eeb070d518714d1f0ebe5d01ae90a7d103cd82aa6929a8b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x65, 0x6, {0x8, 'nat\x00', 0x1, 0x1, "c8dbc730108406c23620d5542b2e7bf552dba05427f0992604d39ba4183595ffaa8dec55c0c86bc704a64babc34a938fafaa84dbfac9c3547d912c"}}]}, {0xc1, 0x6, "6fca8a236a3932d0ec4a44fc16cf3cf1a0a90ef0a5b1e0c3ea864b11cb277c58c880fad0740dc662ba19d7bdd865ced6d620bab74fb0377bc5fe0104e8c5dc3b16b4863f2093bb7782547653550ecf8e167fb2fac451b9e604266fb468cbdfc21a9e7fa45a2ea537fe73b13a42c93ce2616f1869767905535fbcca1197871b3794f4dc3f3ae12a05d318ab2e2aada1b5b530fdb48d9f881765ccd59544aab0b492e8f889a966725ac61bdd34b469c746fcc12273b9c1331cd34f1d5be4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2ae4}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 11.862413958s ago: executing program 7 (id=4546): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c92012000e0005001406"], 0x17) 11.563280791s ago: executing program 7 (id=4547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) open(0x0, 0x60840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0xb, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r1, 0xffffffffffffffff, 0x0) 10.339741579s ago: executing program 7 (id=4549): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x702e, 0x41e3, 0x0, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x1e3) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000190c0)='big_key\x00', &(0x7f0000019100)) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f0000000440)=""/104, 0x68}], 0x3, 0x2, 0x4) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 10.103268487s ago: executing program 9 (id=4550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0x101001a, 0x0, 0xfb, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, 0x0, 0x0) write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10.099972107s ago: executing program 8 (id=4551): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x549200, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 8.474324677s ago: executing program 5 (id=4552): openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x6, "08000000f28f00"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x42400) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000140)={0x0, 0x2f, 0x2, @thr={0x0, &(0x7f0000000240)="62a971cee42149b7ee6ae59ab31a5a25dbf9de9ffc604453d61b2506ae55304536dceab5d1587d6d442ca1e84f98f11a6bc0fea48cf6af12b7a1a030716e90f7e82d041e01ce117e68c3c5e2f33f478b00ab21239aafc5"}}, 0x0) 7.641173753s ago: executing program 5 (id=4553): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x101000) close_range(r0, 0xffffffffffffffff, 0x0) 6.372733274s ago: executing program 8 (id=4554): socket$inet6(0xa, 0x3, 0xff) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, 0x0, 0x0, 0x1) 6.311421968s ago: executing program 7 (id=4555): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x2, 0x2d, &(0x7f0000000340)=""/45}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 5.994668443s ago: executing program 8 (id=4556): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c92012000e0005001406"], 0x17) 5.911666751s ago: executing program 9 (id=4557): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c92012000e00050014060a00f6ff"], 0x17) 5.857973634s ago: executing program 8 (id=4558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) open(0x0, 0x60840, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0xb, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r1, 0xffffffffffffffff, 0x0) 5.794483169s ago: executing program 9 (id=4559): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.16384602s ago: executing program 9 (id=4560): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbbbc", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.849717155s ago: executing program 9 (id=4561): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000021, 0x400000, 0x101, 0x100}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) 4.395196441s ago: executing program 5 (id=4562): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/51, 0x33}], 0x1, 0x8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000000040)) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffc6f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xcc06}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 3.256324701s ago: executing program 9 (id=4563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/51, 0x33}], 0x1, 0x8, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000), &(0x7f0000000040)) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffc6f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xcc06}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 2.205111195s ago: executing program 8 (id=4564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) write$apparmor_current(r2, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c60ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 2.079086265s ago: executing program 7 (id=4565): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x20000000, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000001c0)) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \''], 0x86) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, r7, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf4) socket$inet6_udplite(0xa, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 0s ago: executing program 5 (id=4566): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x549200, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) kernel console output (not intermixed with test programs): 4313] usb 7-1: config 0 has no interface number 0 [ 2049.353527][T21870] bridge0: port 2(macsec0) entered disabled state [ 2049.401688][ T4313] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2049.460250][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2049.484937][ T4313] usb 7-1: Product: syz [ 2049.511280][ T4313] usb 7-1: Manufacturer: syz [ 2049.519457][ T4313] usb 7-1: SerialNumber: syz [ 2049.570036][ T4313] usb 7-1: config 0 descriptor?? [ 2049.595439][ T4313] smsc95xx v2.0.0 [ 2049.776380][T21875] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3953'. [ 2049.846567][T21877] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3954'. [ 2050.125075][ T26] audit: type=1326 audit(1756302100.109:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3cb8ebe9 code=0x7ffc0000 [ 2050.162875][ T26] audit: type=1326 audit(1756302100.119:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3cb8e7eb code=0x7ffc0000 [ 2050.215007][T14643] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 2050.295079][ T26] audit: type=1326 audit(1756302100.119:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3cb8e7eb code=0x7ffc0000 [ 2050.398102][ T26] audit: type=1326 audit(1756302100.129:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc3cbc14a5 code=0x7ffc0000 [ 2050.414680][T14643] usb 8-1: Using ep0 maxpacket: 16 [ 2050.449618][T14643] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2050.480645][T14643] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2050.514154][T14643] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2050.553538][ T26] audit: type=1326 audit(1756302100.399:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3cb8ebe9 code=0x7ffc0000 [ 2050.598830][T14643] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2050.633682][ T26] audit: type=1326 audit(1756302100.399:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3cb8ebe9 code=0x7ffc0000 [ 2050.691313][T14643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2050.743181][T14643] usb 8-1: config 0 descriptor?? [ 2050.780238][ T26] audit: type=1326 audit(1756302100.419:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3cb8e7eb code=0x7ffc0000 [ 2050.941118][ T26] audit: type=1326 audit(1756302100.449:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc3cb8e7eb code=0x7ffc0000 [ 2051.090570][ T26] audit: type=1326 audit(1756302100.449:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc3cbc14a5 code=0x7ffc0000 [ 2051.175425][T14643] HID 045e:07da: Invalid code 65791 type 1 [ 2051.203973][T14643] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0026/input/input93 [ 2051.220172][ T26] audit: type=1326 audit(1756302100.649:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.6.3950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3cb8ebe9 code=0x7ffc0000 [ 2051.243577][ C1] vkms_vblank_simulate: vblank timer overrun [ 2051.314901][T14643] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 2051.437837][T14643] usb 8-1: USB disconnect, device number 72 [ 2051.843275][T21901] fido_id[21901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 2052.744474][T14643] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 2052.840675][ T4313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2052.874660][ T4313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2052.944525][ T4313] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2052.944615][ T4313] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 2052.953606][ T4313] usb 7-1: USB disconnect, device number 50 [ 2052.984710][T14643] usb 8-1: Using ep0 maxpacket: 16 [ 2053.006973][T14643] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2053.071811][T14643] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2053.095346][T21916] device batadv_slave_1 entered promiscuous mode [ 2053.114576][T14643] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2053.155943][T14643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.182467][T14643] usb 8-1: config 0 descriptor?? [ 2053.205184][T15023] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 2053.214654][T14643] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2053.404714][T15023] usb 10-1: Using ep0 maxpacket: 16 [ 2053.429695][T15023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.469053][T15023] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2053.486963][T15023] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2053.497050][T15023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.524215][T15023] usb 10-1: config 0 descriptor?? [ 2053.604549][T14643] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2053.817069][T14643] usb 6-1: config 0 has no interfaces? [ 2053.823779][T14643] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2053.858094][T14643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.893408][T14643] usb 6-1: config 0 descriptor?? [ 2053.934214][T21907] device batadv_slave_1 left promiscuous mode [ 2053.937987][T15023] HID 045e:07da: Invalid code 65791 type 1 [ 2053.999083][T15023] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0027/input/input94 [ 2054.031034][T15023] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 2054.187855][T15023] usb 6-1: USB disconnect, device number 60 [ 2054.474657][T14643] usb 10-1: USB disconnect, device number 57 [ 2055.095644][T21935] netlink: 'syz.5.3969': attribute type 10 has an invalid length. [ 2055.110243][T21935] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3969'. [ 2055.301076][T14643] usb 8-1: USB disconnect, device number 73 [ 2055.614414][T21952] device batadv_slave_1 entered promiscuous mode [ 2055.639860][T21951] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3974'. [ 2056.741649][T21933] device batadv_slave_1 left promiscuous mode [ 2057.306929][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 2057.306943][ T26] audit: type=1400 audit(1756302107.289:222): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=21948 comm="syz.7.3973" [ 2057.339855][T21967] usb usb8: usbfs: process 21967 (syz.7.3973) did not claim interface 0 before use [ 2057.350092][T15023] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2057.574880][T15023] usb 7-1: Using ep0 maxpacket: 16 [ 2058.244756][T15023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.276110][T15023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2058.307630][T15023] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2058.329421][T15023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.390323][T15023] usb 7-1: config 0 descriptor?? [ 2058.859837][T15023] HID 045e:07da: Invalid code 65791 type 1 [ 2058.893004][T15023] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0028/input/input95 [ 2058.913370][T15023] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2058.994475][T10676] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2059.194455][T10676] usb 6-1: Using ep0 maxpacket: 16 [ 2059.223960][T10676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.288168][T10676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2059.351387][T10676] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2059.406879][T10676] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 2059.433796][T10676] usb 6-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 2059.455450][T10676] usb 6-1: Manufacturer: syz [ 2059.477300][T10676] usb 6-1: config 0 descriptor?? [ 2059.494121][T15023] usb 7-1: USB disconnect, device number 51 [ 2059.679954][T21991] netlink: 'syz.9.3982': attribute type 10 has an invalid length. [ 2059.735883][T21991] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3982'. [ 2059.749072][T21991] bridge0: port 1(team0) entered blocking state [ 2059.786827][T21991] bridge0: port 1(team0) entered disabled state [ 2059.992825][T10676] usbhid 6-1:0.0: can't add hid device: -71 [ 2060.025825][T10676] usbhid: probe of 6-1:0.0 failed with error -71 [ 2060.090710][T10676] usb 6-1: USB disconnect, device number 61 [ 2060.768863][T22005] tipc: Enabling of bearer rejected, failed to enable media [ 2060.818554][T22005] device syzkaller0 entered promiscuous mode [ 2060.923876][T22005] sch_fq: defrate 257 ignored. [ 2061.604803][T15195] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 2061.617910][T22019] device batadv_slave_1 entered promiscuous mode [ 2061.785115][ T26] audit: type=1326 audit(1756302111.769:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2061.810386][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 2061.819685][T15195] usb 9-1: Using ep0 maxpacket: 32 [ 2061.826908][T15195] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2061.854728][T15195] usb 9-1: config 0 has no interface number 0 [ 2061.871138][ T26] audit: type=1326 audit(1756302111.769:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2061.880223][T15195] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2061.962613][T15195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.001606][T15195] usb 9-1: Product: syz [ 2062.014100][T15195] usb 9-1: Manufacturer: syz [ 2062.032759][ T26] audit: type=1326 audit(1756302111.819:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfeef8d550 code=0x7ffc0000 [ 2062.088022][T15195] usb 9-1: SerialNumber: syz [ 2062.120195][ T26] audit: type=1326 audit(1756302111.829:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2062.126502][T15195] usb 9-1: config 0 descriptor?? [ 2062.215954][T15195] smsc95xx v2.0.0 [ 2062.573789][ T26] audit: type=1326 audit(1756302111.829:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2062.620333][T15195] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2062.654548][T15195] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2062.690605][T15195] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2062.736476][T15195] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 2062.793957][T15195] usb 9-1: USB disconnect, device number 69 [ 2063.140692][ T26] audit: type=1326 audit(1756302111.829:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.294161][ T26] audit: type=1326 audit(1756302111.829:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.578930][ T26] audit: type=1326 audit(1756302111.829:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.627086][T22012] device batadv_slave_1 left promiscuous mode [ 2063.679062][ T26] audit: type=1326 audit(1756302111.829:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.724164][ T26] audit: type=1326 audit(1756302111.829:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.771666][ T26] audit: type=1326 audit(1756302111.829:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.805142][ T26] audit: type=1326 audit(1756302111.829:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2063.909934][ T26] audit: type=1326 audit(1756302111.829:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2064.117669][ T26] audit: type=1326 audit(1756302111.829:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22024 comm="syz.5.3991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeef8ebe9 code=0x7ffc0000 [ 2064.875890][T22051] tipc: Started in network mode [ 2064.881512][T22051] tipc: Node identity 76696e1cd0f2, cluster identity 4711 [ 2064.897562][T22051] tipc: Enabled bearer , priority 0 [ 2065.113693][T22071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 2065.137805][T22060] usb usb8: usbfs: process 22060 (syz.7.3996) did not claim interface 0 before use [ 2065.254668][ T4334] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 2065.456093][ T4334] usb 9-1: config 0 has no interfaces? [ 2065.461762][ T4334] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2065.530901][ T4334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.675611][ T4334] usb 9-1: config 0 descriptor?? [ 2065.682178][T22047] tipc: Disabling bearer [ 2065.864549][T15023] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 2065.942741][T15195] usb 9-1: USB disconnect, device number 70 [ 2066.064549][T15023] usb 10-1: Using ep0 maxpacket: 16 [ 2066.071642][T15023] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2066.119099][T15023] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2066.162063][T15023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.235525][T15023] usb 10-1: config 0 descriptor?? [ 2066.259922][T15023] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2066.275722][T22087] netlink: 'syz.6.4006': attribute type 10 has an invalid length. [ 2066.362192][T22087] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4006'. [ 2066.802417][T22094] tipc: Enabling of bearer rejected, failed to enable media [ 2066.848359][T22094] device syzkaller0 entered promiscuous mode [ 2067.128453][T22103] sch_fq: defrate 257 ignored. [ 2068.590933][ T4334] usb 10-1: USB disconnect, device number 58 [ 2068.604472][T15195] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 2068.826577][T15195] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2068.857223][T15195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.889126][T15195] usb 9-1: Product: syz [ 2068.893626][T15195] usb 9-1: Manufacturer: syz [ 2068.906362][T15195] usb 9-1: SerialNumber: syz [ 2068.927117][T15195] usb 9-1: config 0 descriptor?? [ 2069.149011][T15195] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2069.744600][T15023] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2069.934692][T15023] usb 6-1: Using ep0 maxpacket: 16 [ 2069.948838][T15023] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.023473][T15023] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2070.033531][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 2070.033540][ T26] audit: type=1400 audit(1756302119.999:268): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22124 comm="syz.6.4016" [ 2070.085688][T15023] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2070.098217][T22136] usb usb8: usbfs: process 22136 (syz.6.4016) did not claim interface 0 before use [ 2070.129989][T15023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.187604][T15023] usb 6-1: config 0 descriptor?? [ 2070.579308][T15195] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 2070.615256][T15195] usb 9-1: USB disconnect, device number 71 [ 2071.761682][T22157] device batadv_slave_1 entered promiscuous mode [ 2072.471928][T15023] usb 6-1: USB disconnect, device number 62 [ 2073.029654][T22176] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4024'. [ 2073.275043][T22151] device batadv_slave_1 left promiscuous mode [ 2074.325052][T10676] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 2074.534645][T10676] usb 10-1: Using ep0 maxpacket: 16 [ 2074.553711][T10676] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2074.613931][T10676] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2074.662767][T10676] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.723368][T10676] usb 10-1: config 0 descriptor?? [ 2074.738365][T10676] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2075.508864][T22199] usb usb8: usbfs: process 22199 (syz.6.4028) did not claim interface 0 before use [ 2076.704524][T10676] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 2076.894633][T10676] usb 9-1: Using ep0 maxpacket: 16 [ 2076.910841][T10676] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.949487][T10676] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2076.996981][T10676] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2077.076630][T10676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.154488][T10676] usb 9-1: config 0 descriptor?? [ 2077.183228][ T4341] usb 10-1: USB disconnect, device number 59 [ 2077.517931][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4033'. [ 2077.790276][T10676] usbhid 9-1:0.0: can't add hid device: -71 [ 2077.799077][T10676] usbhid: probe of 9-1:0.0 failed with error -71 [ 2077.828398][T10676] usb 9-1: USB disconnect, device number 72 [ 2077.843015][T22222] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4035'. [ 2077.892624][T22222] bridge0: port 2(macsec0) entered blocking state [ 2077.900536][T22222] bridge0: port 2(macsec0) entered disabled state [ 2077.938814][T22222] device macsec0 entered promiscuous mode [ 2077.948708][T22222] bridge0: port 2(macsec0) entered blocking state [ 2077.956730][T22222] bridge0: port 2(macsec0) entered forwarding state [ 2078.194582][T15023] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2078.420623][T15023] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2078.437840][T15023] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2078.463770][T15023] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 2078.478701][T15023] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2078.492571][T15023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.679990][T15023] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 2078.756852][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2079.117121][ T4341] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2079.178204][T15023] usb 6-1: USB disconnect, device number 63 [ 2079.292230][T22240] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4041'. [ 2079.327280][ T4341] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2079.351251][ T4341] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2079.389757][ T4341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.417897][ T4341] usb 7-1: Product: syz [ 2079.428958][ T4341] usb 7-1: Manufacturer: syz [ 2079.445685][ T4341] usb 7-1: SerialNumber: syz [ 2079.466825][ T4341] usb 7-1: config 0 descriptor?? [ 2079.692619][T22234] fuse: Bad value for 'group_id' [ 2079.735299][ T4334] usb 7-1: USB disconnect, device number 52 [ 2080.596947][ T4334] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 2080.804487][ T4334] usb 9-1: Using ep0 maxpacket: 16 [ 2080.821755][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2080.884505][T20906] Bluetooth: hci2: command 0x0406 tx timeout [ 2080.918315][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2080.987767][ T4334] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2081.054051][ T4334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.238069][ T4334] usb 9-1: config 0 descriptor?? [ 2081.282408][ T4334] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2081.858661][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4047'. [ 2082.393420][T22277] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4050'. [ 2082.439067][T22277] bridge0: port 2(macsec0) entered blocking state [ 2082.446399][T22277] bridge0: port 2(macsec0) entered disabled state [ 2082.461620][T22277] device macsec0 entered promiscuous mode [ 2082.472134][T22277] bridge0: port 2(macsec0) entered blocking state [ 2082.479101][T22277] bridge0: port 2(macsec0) entered forwarding state [ 2083.310604][T15195] usb 9-1: USB disconnect, device number 73 [ 2083.867303][T15195] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2084.070600][T15195] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2084.104035][T15195] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2084.120553][T15195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.138959][T15195] usb 9-1: Product: syz [ 2084.143525][T15195] usb 9-1: Manufacturer: syz [ 2084.148841][T15195] usb 9-1: SerialNumber: syz [ 2084.158897][T15195] usb 9-1: config 0 descriptor?? [ 2084.268908][T22288] device batadv_slave_1 entered promiscuous mode [ 2084.371483][ T4341] usb 9-1: USB disconnect, device number 74 [ 2085.132460][ T26] audit: type=1326 audit(1756302135.109:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22302 comm="syz.8.4058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52f378ebe9 code=0x0 [ 2085.215239][T22284] device batadv_slave_1 left promiscuous mode [ 2086.504600][ T4334] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2086.730084][ T4334] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2086.782178][ T4334] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2086.831096][ T4334] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2086.876366][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.921030][T22316] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2087.574477][ T4334] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 2087.794476][ T4334] usb 10-1: Using ep0 maxpacket: 16 [ 2087.808582][ T4334] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2087.855935][ T4334] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2087.884460][ T4334] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2087.893808][ T4334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2087.923853][ T4334] usb 10-1: config 0 descriptor?? [ 2087.968366][ T4334] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2088.026378][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4065'. [ 2088.384125][T22338] tipc: Enabled bearer , priority 0 [ 2089.199315][T22330] tipc: Disabling bearer [ 2089.224133][ T4341] usb 6-1: USB disconnect, device number 64 [ 2090.238979][ T4341] usb 10-1: USB disconnect, device number 60 [ 2092.179738][T22381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4075'. [ 2092.244636][ T4341] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2092.359691][T22382] tipc: Enabled bearer , priority 0 [ 2092.444466][ T4341] usb 6-1: Using ep0 maxpacket: 8 [ 2092.462898][ T4341] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.527155][ T4341] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2092.606212][ T4341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.092798][T22378] tipc: Disabling bearer [ 2093.308524][ T4341] usb 6-1: USB disconnect, device number 65 [ 2093.404462][T10676] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2093.618276][T10676] usb 7-1: config 0 has no interfaces? [ 2093.649279][T10676] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2093.675731][T10676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.755067][T10676] usb 7-1: Product: syz [ 2093.814548][T10676] usb 7-1: Manufacturer: syz [ 2093.819349][T10676] usb 7-1: SerialNumber: syz [ 2094.065554][T10676] usb 7-1: config 0 descriptor?? [ 2094.225208][T14643] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2094.328898][T22399] usb usb8: usbfs: process 22399 (syz.7.4078) did not claim interface 0 before use [ 2094.454443][T14643] usb 6-1: Using ep0 maxpacket: 16 [ 2094.459924][ T4334] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 2094.477020][T14643] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.532331][T14643] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2094.586723][T14643] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2094.628207][T14643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.676220][T14643] usb 6-1: config 0 descriptor?? [ 2094.684679][ T4334] usb 9-1: Using ep0 maxpacket: 16 [ 2094.696877][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2094.757801][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2094.813305][ T4334] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2094.853144][ T4334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.896361][ T4334] usb 9-1: config 0 descriptor?? [ 2094.961481][ T4334] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2095.325337][T14643] usbhid 6-1:0.0: can't add hid device: -71 [ 2095.332499][T14643] usbhid: probe of 6-1:0.0 failed with error -71 [ 2095.410190][T14643] usb 6-1: USB disconnect, device number 66 [ 2096.508771][T10676] usb 7-1: USB disconnect, device number 53 [ 2097.121748][T14643] usb 9-1: USB disconnect, device number 75 [ 2098.331967][ T26] audit: type=1326 audit(1756302148.309:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22433 comm="syz.9.4090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cdb8ebe9 code=0x0 [ 2098.555204][ T26] audit: type=1400 audit(1756302148.539:271): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22423 comm="syz.6.4087" [ 2098.597358][T22438] usb usb8: usbfs: process 22438 (syz.6.4087) did not claim interface 0 before use [ 2099.105617][T22442] usb usb8: usbfs: process 22442 (syz.8.4089) did not claim interface 0 before use [ 2099.288788][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.295283][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.808986][T22456] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4094'. [ 2100.023559][T22459] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4095'. [ 2101.029284][T10676] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2101.104448][ T4341] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2101.214450][T10676] usb 7-1: Using ep0 maxpacket: 16 [ 2101.223652][T10676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2101.243101][T10676] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2101.258803][T10676] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2101.269404][T10676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.288771][T10676] usb 7-1: config 0 descriptor?? [ 2101.296571][ T4341] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2101.318563][ T4341] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2101.329978][ T4341] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2101.345482][ T4341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.383613][T22464] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2101.424583][T15023] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 2101.634464][T15023] usb 9-1: Using ep0 maxpacket: 16 [ 2101.647814][T15023] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2101.677644][T15023] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2101.710816][T15023] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2101.737182][T15023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2101.773714][T15023] usb 9-1: config 0 descriptor?? [ 2101.797835][T15023] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2101.843402][T14643] usb 10-1: USB disconnect, device number 61 [ 2101.903365][T10676] usbhid 7-1:0.0: can't add hid device: -71 [ 2101.924995][T10676] usbhid: probe of 7-1:0.0 failed with error -71 [ 2101.951623][T10676] usb 7-1: USB disconnect, device number 54 [ 2103.232103][ T26] audit: type=1326 audit(1756302153.209:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.9.4101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cdb8ebe9 code=0x0 [ 2104.039828][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4103'. [ 2104.101808][T14643] usb 9-1: USB disconnect, device number 76 [ 2104.322005][T22494] tipc: Enabled bearer , priority 0 [ 2104.857664][T10676] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2105.066411][T22488] tipc: Disabling bearer [ 2105.180210][T10676] usb 6-1: config 0 has no interfaces? [ 2105.220897][T10676] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2105.265897][T10676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.327033][T10676] usb 6-1: Product: syz [ 2105.331266][T10676] usb 6-1: Manufacturer: syz [ 2105.336311][ T26] audit: type=1400 audit(1756302155.319:273): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22495 comm="syz.8.4105" [ 2105.401277][T10676] usb 6-1: SerialNumber: syz [ 2105.428885][T22506] usb usb8: usbfs: process 22506 (syz.8.4105) did not claim interface 0 before use [ 2105.462404][T10676] usb 6-1: config 0 descriptor?? [ 2107.034587][T14643] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 2107.265922][T14643] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2107.320224][T14643] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2107.377339][T14643] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2107.485355][T14643] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2107.505345][T14643] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.520670][T14643] usb 8-1: Product: syz [ 2107.533128][T14643] usb 8-1: Manufacturer: syz [ 2107.544554][T14643] usb 8-1: SerialNumber: syz [ 2107.588871][T14643] hub 8-1:1.0: bad descriptor, ignoring hub [ 2107.609294][T14643] hub: probe of 8-1:1.0 failed with error -5 [ 2107.787534][T14643] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2108.038887][T14643] usb 6-1: USB disconnect, device number 67 [ 2108.239841][T22526] tipc: Enabled bearer , priority 0 [ 2108.296681][T15023] usb 8-1: USB disconnect, device number 74 [ 2108.338426][T22526] sch_fq: defrate 257 ignored. [ 2108.443735][T15023] usblp0: removed [ 2108.488424][T22536] tipc: Resetting bearer [ 2108.875613][T22525] tipc: Disabling bearer [ 2108.993321][T22539] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4114'. [ 2109.314475][T15195] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 2109.524685][T15195] usb 8-1: Using ep0 maxpacket: 16 [ 2109.532647][T15195] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2109.596618][T15195] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2109.669382][T15195] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2109.709620][T15195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.756716][T15195] usb 8-1: config 0 descriptor?? [ 2109.791104][T15195] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2111.274440][T10676] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2111.484473][T10676] usb 9-1: Using ep0 maxpacket: 16 [ 2111.492287][T10676] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.530173][T10676] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2111.582733][T10676] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2111.624563][T10676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.672395][T10676] usb 9-1: config 0 descriptor?? [ 2111.992776][T15023] usb 8-1: USB disconnect, device number 75 [ 2112.508800][T10676] usbhid 9-1:0.0: can't add hid device: -71 [ 2112.516201][T10676] usbhid: probe of 9-1:0.0 failed with error -71 [ 2112.544764][T10676] usb 9-1: USB disconnect, device number 77 [ 2112.554579][ T4341] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2112.634506][T15023] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 2112.747571][ T4341] usb 6-1: Using ep0 maxpacket: 32 [ 2112.761895][ T4341] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11 [ 2112.775477][ T4341] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2112.791451][ T4341] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2112.811661][ T4341] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 2112.822263][ T4341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.834628][T15023] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2112.846305][T15023] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2112.858148][ T4341] usb 6-1: config 0 descriptor?? [ 2112.872658][T15023] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2112.919457][T15023] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2112.929193][T15023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.937852][T15023] usb 8-1: Product: syz [ 2112.944813][T15023] usb 8-1: Manufacturer: syz [ 2112.949855][T15023] usb 8-1: SerialNumber: syz [ 2112.962291][T15023] hub 8-1:1.0: bad descriptor, ignoring hub [ 2112.969609][T15023] hub: probe of 8-1:1.0 failed with error -5 [ 2113.252336][T15023] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 76 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2113.308822][ T4341] usbhid 6-1:0.0: can't add hid device: -71 [ 2113.360185][ T4341] usbhid: probe of 6-1:0.0 failed with error -71 [ 2113.377948][ T4341] usb 6-1: USB disconnect, device number 68 [ 2113.877890][T15023] usb 8-1: USB disconnect, device number 76 [ 2113.889812][T15023] usblp0: removed [ 2115.019069][ T26] audit: type=1326 audit(1756302164.999:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22603 comm="syz.6.4131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3cb8ebe9 code=0x0 [ 2116.514481][ T4334] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 2116.651782][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4134'. [ 2116.704531][ T4334] usb 8-1: Using ep0 maxpacket: 16 [ 2116.714291][ T4334] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2116.748624][ T4334] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2116.807661][ T4334] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2116.834243][ T4334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.882865][ T4334] usb 8-1: config 0 descriptor?? [ 2116.914037][ T4334] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2117.894637][ T4341] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2118.094589][ T4341] usb 9-1: Using ep0 maxpacket: 16 [ 2118.102192][ T4341] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.154029][ T4341] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2118.227759][ T4341] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2118.277161][ T4341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.330700][ T4341] usb 9-1: config 0 descriptor?? [ 2118.370791][ T4341] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2119.222194][ T4334] usb 8-1: USB disconnect, device number 77 [ 2119.895984][T22643] netlink: 308 bytes leftover after parsing attributes in process `syz.7.4140'. [ 2120.217340][ T4341] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 2120.424591][ T4341] usb 8-1: Using ep0 maxpacket: 16 [ 2120.433466][ T4341] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2120.524694][ T4341] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2120.561595][ T4341] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2120.599988][ T4341] usb 8-1: Product: syz [ 2120.633433][ T4341] usb 8-1: Manufacturer: syz [ 2120.637484][T15195] usb 9-1: USB disconnect, device number 78 [ 2120.670280][ T4341] usb 8-1: SerialNumber: syz [ 2120.705586][ T4341] usb 8-1: config 0 descriptor?? [ 2121.050038][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4140'. [ 2121.071627][ T4341] usb 8-1: USB disconnect, device number 78 [ 2121.740879][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4148'. [ 2122.428979][ T26] audit: type=1400 audit(1756302172.409:275): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22671 comm="syz.5.4147" [ 2122.492379][T22678] usb usb8: usbfs: process 22678 (syz.5.4147) did not claim interface 0 before use [ 2123.014503][T14643] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2123.214547][T14643] usb 9-1: Using ep0 maxpacket: 16 [ 2123.229371][T14643] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2123.418460][T14643] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2123.481223][T14643] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2123.519046][T14643] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2123.561366][T14643] usb 9-1: config 0 descriptor?? [ 2123.589833][T14643] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2123.752252][T22699] device batadv_slave_1 entered promiscuous mode [ 2124.484592][T14643] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 2124.665389][T22694] device batadv_slave_1 left promiscuous mode [ 2124.694674][T14643] usb 8-1: Using ep0 maxpacket: 16 [ 2124.703275][T14643] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.722612][T14643] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2124.768436][T14643] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2124.780008][T14643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.797200][T14643] usb 8-1: config 0 descriptor?? [ 2124.813420][T14643] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2125.352220][ T26] audit: type=1326 audit(1756302175.329:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.416716][ T26] audit: type=1326 audit(1756302175.329:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77cdb8d550 code=0x7ffc0000 [ 2125.509825][ T26] audit: type=1326 audit(1756302175.329:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.568265][ T26] audit: type=1326 audit(1756302175.329:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.620663][ T26] audit: type=1326 audit(1756302175.339:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.692283][ T26] audit: type=1326 audit(1756302175.339:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.743649][ T4334] usb 9-1: USB disconnect, device number 79 [ 2125.805488][ T26] audit: type=1326 audit(1756302175.339:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.916931][ T26] audit: type=1326 audit(1756302175.339:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2125.983182][ T26] audit: type=1326 audit(1756302175.339:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22717 comm="syz.9.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cdb8ebe9 code=0x7ffc0000 [ 2127.190180][ T4334] usb 8-1: USB disconnect, device number 79 [ 2127.471529][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 2127.471542][ T26] audit: type=1400 audit(1756302177.449:303): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22732 comm="syz.9.4161" [ 2127.524240][T22747] usb usb8: usbfs: process 22747 (syz.9.4161) did not claim interface 0 before use [ 2128.919648][ T26] audit: type=1400 audit(1756302178.899:304): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=22745 comm="syz.7.4163" [ 2128.954655][T15023] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2129.009789][T22750] usb usb8: usbfs: process 22750 (syz.7.4163) did not claim interface 0 before use [ 2129.175295][T15023] usb 9-1: Using ep0 maxpacket: 16 [ 2129.183248][T15023] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.232346][T15023] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2129.283420][T15023] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2129.312493][T15023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.389020][T15023] usb 9-1: config 0 descriptor?? [ 2130.015580][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4167'. [ 2130.133922][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4168'. [ 2130.231830][T15023] usbhid 9-1:0.0: can't add hid device: -71 [ 2130.239856][T15023] usbhid: probe of 9-1:0.0 failed with error -71 [ 2130.341125][T15023] usb 9-1: USB disconnect, device number 80 [ 2130.468726][T22774] tipc: Enabled bearer , priority 0 [ 2130.674721][T14643] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2130.894440][T14643] usb 6-1: Using ep0 maxpacket: 16 [ 2130.904960][T14643] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2130.974739][T14643] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2131.082909][T14643] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2131.149784][T14643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.262408][T14643] usb 6-1: config 0 descriptor?? [ 2131.284604][T15023] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2131.300929][T22764] tipc: Disabling bearer [ 2131.308410][T14643] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2131.500868][T15023] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.530687][T15023] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 2131.560592][T15023] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2131.620001][T15023] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.271349][T14643] usb 9-1: USB disconnect, device number 81 [ 2132.449032][ T26] audit: type=1326 audit(1756302182.429:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22801 comm="syz.9.4176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cdb8ebe9 code=0x0 [ 2133.339666][T14643] usb 6-1: USB disconnect, device number 69 [ 2133.905324][T10676] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2134.106912][T10676] usb 6-1: config 0 has no interfaces? [ 2134.123045][T10676] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2134.182277][T10676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.263225][T10676] usb 6-1: config 0 descriptor?? [ 2134.502072][T22821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4179'. [ 2134.665280][T15195] usb 6-1: USB disconnect, device number 70 [ 2134.921576][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4181'. [ 2136.566531][T15195] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2136.814657][T15195] usb 7-1: Using ep0 maxpacket: 32 [ 2136.833289][T15195] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 2136.844772][T15195] usb 7-1: config 0 has no interface number 0 [ 2136.928537][T15195] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2136.938790][T15195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.950633][T15195] usb 7-1: Product: syz [ 2136.961229][T15195] usb 7-1: Manufacturer: syz [ 2136.971513][T15195] usb 7-1: SerialNumber: syz [ 2137.107689][T15195] usb 7-1: config 0 descriptor?? [ 2137.145211][T15195] smsc95xx v2.0.0 [ 2137.803583][T22867] bridge0: port 2(macsec0) entered blocking state [ 2137.831813][T22867] bridge0: port 2(macsec0) entered disabled state [ 2137.902255][T22867] device macsec0 entered promiscuous mode [ 2137.923003][T22867] bridge0: port 2(macsec0) entered blocking state [ 2137.930201][T22867] bridge0: port 2(macsec0) entered forwarding state [ 2137.941984][T15195] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2137.957379][T15195] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2137.978342][T15195] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2138.017126][T15195] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 2138.096999][T15195] usb 7-1: USB disconnect, device number 55 [ 2138.562471][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4195'. [ 2138.636508][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4196'. [ 2138.689963][ T26] audit: type=1326 audit(1756302188.669:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22890 comm="syz.6.4197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3cb8ebe9 code=0x0 [ 2139.159395][T22896] tipc: Enabled bearer , priority 0 [ 2139.274788][T15023] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 2139.474586][T15023] usb 8-1: Using ep0 maxpacket: 32 [ 2139.482013][T15023] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 2139.534616][T15023] usb 8-1: config 0 has no interface number 0 [ 2139.592563][T15023] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2139.700157][T15023] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.741083][T15023] usb 8-1: Product: syz [ 2139.759377][T15023] usb 8-1: Manufacturer: syz [ 2139.786514][T15023] usb 8-1: SerialNumber: syz [ 2139.815644][T15023] usb 8-1: config 0 descriptor?? [ 2139.850272][T15023] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2139.967098][T22882] tipc: Disabling bearer [ 2140.054306][T15023] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2140.113484][T15023] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2140.290430][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2140.300925][T15023] usb 8-1: USB disconnect, device number 80 [ 2140.325180][T15023] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2140.374177][T15023] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2140.418776][T15023] quatech2 8-1:0.51: device disconnected [ 2141.394567][T14643] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 2141.616258][T14643] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2141.644782][T14643] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2141.683151][T14643] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.733892][T14643] usb 10-1: Product: syz [ 2141.760741][T14643] usb 10-1: Manufacturer: syz [ 2141.789235][T14643] usb 10-1: SerialNumber: syz [ 2141.828579][T14643] usb 10-1: config 0 descriptor?? [ 2142.077104][T22910] fuse: Unknown parameter 'group_i00000000000000000000' [ 2142.129484][T14643] usb 10-1: USB disconnect, device number 62 [ 2143.126149][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4205'. [ 2144.227609][ T26] audit: type=1326 audit(1756302194.209:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22954 comm="syz.5.4210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfeef8ebe9 code=0x0 [ 2145.004886][T14643] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 2145.224668][T14643] usb 8-1: Using ep0 maxpacket: 16 [ 2145.232342][T14643] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2145.299715][T14643] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2145.394050][T14643] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2145.420724][ T4439] tipc: Left network mode [ 2145.461604][T14643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.512875][T14643] usb 8-1: config 0 descriptor?? [ 2145.639236][T15023] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2145.855295][T15023] usb 10-1: config 0 has no interfaces? [ 2145.870893][T15023] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2145.931910][T15023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2145.969271][T15023] usb 10-1: config 0 descriptor?? [ 2146.227556][ T4334] usb 10-1: USB disconnect, device number 63 [ 2146.368265][T14643] usbhid 8-1:0.0: can't add hid device: -71 [ 2146.376969][T14643] usbhid: probe of 8-1:0.0 failed with error -71 [ 2146.411569][T14643] usb 8-1: USB disconnect, device number 81 [ 2146.985285][T15023] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2147.598406][T15023] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2147.632199][T15023] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2147.706715][T15023] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.748393][T15023] usb 9-1: Product: syz [ 2147.752629][T15023] usb 9-1: Manufacturer: syz [ 2147.784813][T15023] usb 9-1: SerialNumber: syz [ 2147.843428][T15023] usb 9-1: config 0 descriptor?? [ 2148.082134][T22975] fuse: Unknown parameter 'group_i00000000000000000000' [ 2148.104853][ T4439] device hsr_slave_0 left promiscuous mode [ 2148.126683][ T4439] device hsr_slave_1 left promiscuous mode [ 2148.142879][ T4334] usb 9-1: USB disconnect, device number 82 [ 2148.183879][ T4439] bridge0: port 1(team0) entered disabled state [ 2148.300127][ T4439] device veth1_macvtap left promiscuous mode [ 2148.306689][ T4439] device veth0_macvtap left promiscuous mode [ 2148.314858][ T4439] device veth1_vlan left promiscuous mode [ 2148.324681][ T4439] device veth0_vlan left promiscuous mode [ 2148.483886][ T4439] bond1 (unregistering): Released all slaves [ 2148.494709][T15023] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2148.704513][T15023] usb 10-1: Using ep0 maxpacket: 8 [ 2148.736006][T15023] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2148.802377][T23001] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4221'. [ 2148.813669][T15023] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2148.829742][T15023] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2148.863677][T15023] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2148.882678][T15023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.929340][T15023] usbtmc 10-1:16.0: bulk endpoints not found [ 2149.174493][ T4334] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2149.404524][ T4334] usb 9-1: Using ep0 maxpacket: 16 [ 2149.412683][ T4334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2149.454169][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2149.512607][ T4334] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2149.548994][ T4334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.601960][ T4334] usb 9-1: config 0 descriptor?? [ 2149.621259][ T5093] usb 10-1: USB disconnect, device number 64 [ 2150.071583][ T26] audit: type=1400 audit(1756302200.029:308): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23007 comm="syz.7.4224" [ 2150.116641][T23012] usb usb8: usbfs: process 23012 (syz.7.4224) did not claim interface 0 before use [ 2150.458134][ T4334] usbhid 9-1:0.0: can't add hid device: -71 [ 2150.523490][ T4334] usbhid: probe of 9-1:0.0 failed with error -71 [ 2150.541773][ T4334] usb 9-1: USB disconnect, device number 83 [ 2151.744532][T15195] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2151.909710][ T26] audit: type=1400 audit(1756302201.889:309): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23017 comm="syz.9.4226" [ 2151.919844][T23022] usb usb8: usbfs: process 23022 (syz.9.4226) did not claim interface 0 before use [ 2151.980870][T15195] usb 9-1: config 0 has no interfaces? [ 2151.986745][T15195] usb 9-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2152.024441][T15195] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.068192][T15195] usb 9-1: config 0 descriptor?? [ 2153.220332][ T4439] bond0 (unregistering): Released all slaves [ 2153.370250][ T4341] usb 9-1: USB disconnect, device number 84 [ 2153.424535][T15195] usb 8-1: new full-speed USB device number 82 using dummy_hcd [ 2153.639429][T15195] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2153.679089][T15195] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.711669][T15195] usb 8-1: Product: syz [ 2153.720544][T15195] usb 8-1: Manufacturer: syz [ 2153.727271][T15195] usb 8-1: SerialNumber: syz [ 2153.742034][T15195] usb 8-1: config 0 descriptor?? [ 2153.967492][T15195] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2154.294505][ T4341] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2154.484451][ T4341] usb 9-1: Using ep0 maxpacket: 8 [ 2154.493215][ T4341] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2154.554493][ T4341] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2154.581249][ T4341] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2154.594451][ T4341] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2154.605029][ T4341] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2154.619064][ T4341] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2154.661311][ T4341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.686200][ T26] audit: type=1400 audit(1756302204.669:310): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23028 comm="syz.6.4230" [ 2154.926678][ T4341] usb 9-1: GET_CAPABILITIES returned 0 [ 2154.932832][ T4341] usbtmc 9-1:16.0: can't read capabilities [ 2154.974499][T15023] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 2155.176821][T15023] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2155.224996][T15023] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2155.255995][T15023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.280147][T15023] usb 10-1: Product: syz [ 2155.290573][T15023] usb 10-1: Manufacturer: syz [ 2155.308138][T15023] usb 10-1: SerialNumber: syz [ 2155.324300][ T4341] usb 9-1: USB disconnect, device number 85 [ 2155.341547][T15023] usb 10-1: config 0 descriptor?? [ 2155.402270][T15195] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 2155.443777][T15195] usb 8-1: USB disconnect, device number 82 [ 2155.600272][T23040] fuse: Unknown parameter 'group_id00000000000000000000' [ 2155.623566][ T4341] usb 10-1: USB disconnect, device number 65 [ 2156.573006][T23060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4237'. [ 2156.635872][T23065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4240'. [ 2156.711557][T23060] tipc: Enabled bearer , priority 0 [ 2156.911090][T23075] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4241'. [ 2156.989972][T23073] device batadv_slave_1 entered promiscuous mode [ 2157.323695][T23055] tipc: Disabling bearer [ 2158.215106][T23059] device batadv_slave_1 left promiscuous mode [ 2159.416129][ T4334] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2159.636619][ T4334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.688210][ T4334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2159.713973][T23100] netlink: 'syz.7.4247': attribute type 10 has an invalid length. [ 2159.727774][T23100] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4247'. [ 2159.824456][ T4334] usb 9-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 2159.833922][ T4334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.852771][ T4334] usb 9-1: config 0 descriptor?? [ 2160.273881][ T4334] usbhid 9-1:0.0: can't add hid device: -71 [ 2160.289638][ T4334] usbhid: probe of 9-1:0.0 failed with error -71 [ 2160.522135][ T4334] usb 9-1: USB disconnect, device number 86 [ 2160.737463][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.747506][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.344601][ T4334] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2161.546255][ T4334] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2161.619816][ T4334] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2161.658503][ T4334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.667447][ T4334] usb 7-1: Product: syz [ 2161.674626][ T4334] usb 7-1: Manufacturer: syz [ 2161.789993][ T4334] usb 7-1: SerialNumber: syz [ 2161.946566][ T4334] usb 7-1: config 0 descriptor?? [ 2162.161663][T23111] fuse: Unknown parameter 'group_id00000000000000000000' [ 2162.199719][ T4334] usb 7-1: USB disconnect, device number 56 [ 2162.649302][T23129] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.659121][T23129] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.668958][T23129] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.678556][T23129] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2162.875395][T23129] device vxlan0 entered promiscuous mode [ 2162.932302][T23129] team0: Port device vxlan0 added [ 2164.504511][ T4341] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2164.693656][T23156] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4263'. [ 2164.712777][ T4341] usb 6-1: config 0 has no interfaces? [ 2164.740367][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2164.753765][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2164.765429][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2164.778534][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2164.791660][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2164.801016][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2164.859386][ T4341] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2164.958749][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.974449][T15023] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 2165.005994][ T4341] usb 6-1: Product: syz [ 2165.047410][ T4341] usb 6-1: Manufacturer: syz [ 2165.101594][ T4341] usb 6-1: SerialNumber: syz [ 2165.164574][T15023] usb 8-1: Using ep0 maxpacket: 8 [ 2165.180077][ T4341] usb 6-1: config 0 descriptor?? [ 2165.181352][T23160] chnl_net:caif_netlink_parms(): no params data found [ 2165.193388][T15023] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2165.259032][T15023] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2165.300463][T15023] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2165.342417][T15023] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2165.374335][T15023] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.420616][T23160] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.457343][T23160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.457731][T15023] usbtmc 8-1:16.0: bulk endpoints not found [ 2165.492733][T23160] device bridge_slave_0 entered promiscuous mode [ 2165.512121][T23160] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.533213][T23160] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.566951][T23160] device bridge_slave_1 entered promiscuous mode [ 2165.693736][T23160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.752719][T23160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2165.851704][T23160] team0: Port device team_slave_0 added [ 2165.878886][T23160] team0: Port device team_slave_1 added [ 2165.924548][T23160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2165.936720][T23160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2165.983099][T23160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2166.016259][T23160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2166.023571][T23160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2166.054431][T15023] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 2166.073528][T23160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2166.147212][T23155] usb 8-1: USB disconnect, device number 83 [ 2166.164062][T23160] device hsr_slave_0 entered promiscuous mode [ 2166.203422][T23160] device hsr_slave_1 entered promiscuous mode [ 2166.221833][T23160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2166.248135][T23160] Cannot create hsr debugfs directory [ 2166.256257][T15023] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2166.277380][T15023] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2166.290565][T15023] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.299699][T15023] usb 10-1: Product: syz [ 2166.307438][T15023] usb 10-1: Manufacturer: syz [ 2166.312996][T15023] usb 10-1: SerialNumber: syz [ 2166.336907][T15023] usb 10-1: config 0 descriptor?? [ 2166.553129][T23172] fuse: Unknown parameter 'group_id00000000000000000000' [ 2166.588640][T23155] usb 10-1: USB disconnect, device number 66 [ 2166.684730][T23160] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.874035][T23160] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2166.885479][T20906] Bluetooth: hci3: command 0x0409 tx timeout [ 2167.028934][T23160] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.054464][T14643] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 2167.138899][T23160] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.182437][T15195] usb 6-1: USB disconnect, device number 71 [ 2167.264624][T14643] usb 8-1: Using ep0 maxpacket: 8 [ 2167.274579][T14643] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2167.325689][T14643] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.380418][T14643] usb 8-1: Product: syz [ 2167.398448][T14643] usb 8-1: Manufacturer: syz [ 2167.403487][T14643] usb 8-1: SerialNumber: syz [ 2167.439954][T14643] usb 8-1: config 0 descriptor?? [ 2167.505986][T23160] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2167.549819][T23160] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2167.664903][T14643] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2167.706315][T23160] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2167.762920][T23184] netlink: 'syz.5.4269': attribute type 10 has an invalid length. [ 2167.772292][T23184] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4269'. [ 2167.798529][T23160] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2168.324040][T23160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2168.383867][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2168.422450][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2168.452950][T23160] 8021q: adding VLAN 0 to HW filter on device team0 [ 2168.509357][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2168.536661][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2168.564162][T21764] bridge0: port 1(bridge_slave_0) entered blocking state [ 2168.572177][T21764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2168.642088][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2168.668795][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2168.733647][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2168.807788][T21764] bridge0: port 2(bridge_slave_1) entered blocking state [ 2168.815657][T21764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2168.891296][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2168.964481][T20906] Bluetooth: hci3: command 0x041b tx timeout [ 2169.003264][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2169.035318][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2169.092897][T14643] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 2169.106998][T14643] usb 8-1: USB disconnect, device number 84 [ 2169.157991][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2169.525986][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2169.580747][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2169.717624][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2169.735392][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2169.835307][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2169.880937][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4272'. [ 2169.945732][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2170.006768][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2170.015162][ T4341] usb 8-1: new full-speed USB device number 85 using dummy_hcd [ 2170.069212][T23160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2170.229353][ T4341] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2170.366730][ T4341] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.462051][ T4341] usb 8-1: Product: syz [ 2170.472164][ T4341] usb 8-1: Manufacturer: syz [ 2170.491260][ T4341] usb 8-1: SerialNumber: syz [ 2170.528030][ T4341] usb 8-1: config 0 descriptor?? [ 2170.749155][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2170.757513][ T4341] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2170.785733][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2170.809542][T23160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2171.044578][T20906] Bluetooth: hci3: command 0x040f tx timeout [ 2171.564740][T14643] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2171.734672][T14643] usb 6-1: device descriptor read/64, error -71 [ 2171.798941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2171.837816][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2171.893925][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2171.909811][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2171.921870][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2171.938625][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2171.958190][T23160] device veth0_vlan entered promiscuous mode [ 2171.992824][T23160] device veth1_vlan entered promiscuous mode [ 2172.004598][T14643] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2172.053076][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2172.069553][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2172.083694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2172.094811][T15023] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2172.115352][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2172.148557][T23160] device veth0_macvtap entered promiscuous mode [ 2172.174642][T14643] usb 6-1: device descriptor read/64, error -71 [ 2172.184574][ T4341] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 2172.191658][T23160] device veth1_macvtap entered promiscuous mode [ 2172.218614][ T4341] usb 8-1: USB disconnect, device number 85 [ 2172.225401][T23160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.225424][T23160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.226702][T23160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2172.294107][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2172.305948][T15023] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2172.320798][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2172.325175][T14643] usb usb6-port1: attempt power cycle [ 2172.343238][T15023] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2172.365383][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2172.386293][T15023] usb 10-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 2172.403661][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2172.413317][T15023] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.437009][T23160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.460454][T23160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.477352][T15023] usb 10-1: config 0 descriptor?? [ 2172.492152][T23160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2172.511953][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2172.525511][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2172.548333][T23160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.564509][T23160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.574250][T23160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.598243][T23160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.754034][ T4661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.794691][T14643] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2172.829945][ T4661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.855128][T14643] usb 6-1: device descriptor read/8, error -71 [ 2172.865550][T21764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.881378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2172.893622][T21764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.911559][T15023] usbhid 10-1:0.0: can't add hid device: -71 [ 2172.930000][T15023] usbhid: probe of 10-1:0.0 failed with error -71 [ 2172.966656][T15023] usb 10-1: USB disconnect, device number 67 [ 2172.977722][T21764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2173.124851][T20906] Bluetooth: hci3: command 0x0419 tx timeout [ 2173.155111][T14643] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2173.234642][ T4334] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 2173.330275][T14643] usb 6-1: device descriptor read/8, error -71 [ 2173.434546][ T4334] usb 8-1: Using ep0 maxpacket: 8 [ 2173.455156][ T4334] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2173.793267][ T4334] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2173.841069][ T4334] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2173.884592][T14643] usb usb6-port1: unable to enumerate USB device [ 2173.892059][ T4334] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2173.921621][ T4334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.972919][ T4334] usbtmc 8-1:16.0: bulk endpoints not found [ 2174.095048][T23255] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4280'. [ 2174.129310][T23254] netlink: 'syz.9.4279': attribute type 10 has an invalid length. [ 2174.139522][T23254] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4279'. [ 2174.326624][T23255] bridge0: port 3(macsec0) entered blocking state [ 2174.353700][T23255] bridge0: port 3(macsec0) entered disabled state [ 2174.442457][T23255] device macsec0 entered promiscuous mode [ 2174.532913][T23255] bridge0: port 3(macsec0) entered blocking state [ 2174.539811][T23255] bridge0: port 3(macsec0) entered forwarding state [ 2174.585253][T14643] usb 8-1: USB disconnect, device number 86 [ 2176.445967][T23279] netlink: 'syz.5.4286': attribute type 10 has an invalid length. [ 2176.565874][T23279] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4286'. [ 2177.014662][ T9317] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 2177.240076][ T9317] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2177.273938][ T9317] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.334529][ T9317] usb 10-1: Product: syz [ 2177.340579][ T9317] usb 10-1: Manufacturer: syz [ 2177.350701][ T9317] usb 10-1: SerialNumber: syz [ 2177.372844][ T9317] usb 10-1: config 0 descriptor?? [ 2177.564578][T14643] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 2177.600469][ T9317] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2177.849237][T14643] usb 8-1: config 0 has no interfaces? [ 2177.876048][T14643] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2177.933836][T14643] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.004540][T14643] usb 8-1: Product: syz [ 2178.021493][T14643] usb 8-1: Manufacturer: syz [ 2178.049632][T14643] usb 8-1: SerialNumber: syz [ 2178.093769][T14643] usb 8-1: config 0 descriptor?? [ 2178.122155][T23292] netlink: 'syz.8.4289': attribute type 10 has an invalid length. [ 2178.172248][T23292] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4289'. [ 2178.193869][T23292] device team0 entered promiscuous mode [ 2178.213038][T23292] device team_slave_0 entered promiscuous mode [ 2178.231719][T23292] device team_slave_1 entered promiscuous mode [ 2178.250671][T23292] bridge0: port 4(team0) entered blocking state [ 2178.302255][T23292] bridge0: port 4(team0) entered disabled state [ 2178.377558][T23292] bridge0: port 4(team0) entered blocking state [ 2178.385163][T23292] bridge0: port 4(team0) entered forwarding state [ 2179.391068][ T9317] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 2179.419904][ T9317] usb 10-1: USB disconnect, device number 68 [ 2179.774477][T23238] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2179.804545][ T4313] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2179.954539][T23238] usb 6-1: Using ep0 maxpacket: 32 [ 2179.962705][T23238] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2179.964757][ T4313] usb 9-1: device descriptor read/64, error -71 [ 2179.979341][T23238] usb 6-1: config 0 has no interface number 0 [ 2179.994257][T23238] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2180.013741][T23238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.023040][T23238] usb 6-1: Product: syz [ 2180.033189][T23238] usb 6-1: Manufacturer: syz [ 2180.039370][T23238] usb 6-1: SerialNumber: syz [ 2180.063031][T23238] usb 6-1: config 0 descriptor?? [ 2180.083138][T23238] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2180.254673][ T4313] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2180.414711][ T4313] usb 9-1: device descriptor read/64, error -71 [ 2180.504393][T23238] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2180.522706][T23238] quatech2: probe of 6-1:0.51 failed with error -71 [ 2180.545353][ T4313] usb usb9-port1: attempt power cycle [ 2180.571774][T23238] usb 6-1: USB disconnect, device number 76 [ 2180.729832][T14643] usb 8-1: USB disconnect, device number 87 [ 2180.954500][ T4313] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 2181.028124][ T4313] usb 9-1: device descriptor read/8, error -71 [ 2181.316671][ T4313] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 2181.369555][ T4313] usb 9-1: device descriptor read/8, error -71 [ 2181.505786][ T4313] usb usb9-port1: unable to enumerate USB device [ 2183.145528][ T4313] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 2183.712067][ T4313] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.811694][ T4313] usb 9-1: config 0 has no interfaces? [ 2183.832262][ T4313] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2183.894618][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.954184][ T4313] usb 9-1: config 0 descriptor?? [ 2185.094679][T23238] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2185.294559][T23238] usb 10-1: Using ep0 maxpacket: 32 [ 2185.302356][T23238] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2185.359430][T23238] usb 10-1: config 0 has no interface number 0 [ 2185.410227][T23238] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2185.476286][T23238] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.536898][T23238] usb 10-1: Product: syz [ 2185.570021][T23238] usb 10-1: Manufacturer: syz [ 2185.602529][T23238] usb 10-1: SerialNumber: syz [ 2185.646680][T23238] usb 10-1: config 0 descriptor?? [ 2185.724884][T23238] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2186.124657][T23238] usb 10-1: qt2_attach - failed to power on unit: -71 [ 2186.144608][T23238] quatech2: probe of 10-1:0.51 failed with error -71 [ 2186.207743][T23238] usb 10-1: USB disconnect, device number 69 [ 2186.264451][T14643] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 2186.586717][T23238] usb 9-1: USB disconnect, device number 91 [ 2186.597448][T14643] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2186.682276][T14643] usb 8-1: config 0 has no interfaces? [ 2186.757939][T14643] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2186.808866][T14643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.886216][T14643] usb 8-1: config 0 descriptor?? [ 2187.432051][T23401] netlink: 'syz.8.4315': attribute type 10 has an invalid length. [ 2187.462139][T23401] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4315'. [ 2187.532614][T14643] usb 8-1: USB disconnect, device number 88 [ 2191.676650][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4325'. [ 2191.734482][ T4341] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 2191.793395][T23438] device batadv_slave_1 entered promiscuous mode [ 2191.989772][ T4341] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2192.060930][ T4341] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2192.083222][ T4341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.104485][ T4341] usb 9-1: Product: syz [ 2192.110654][ T4341] usb 9-1: Manufacturer: syz [ 2192.122388][ T4341] usb 9-1: SerialNumber: syz [ 2192.143198][ T4341] usb 9-1: config 0 descriptor?? [ 2192.354245][T23436] fuse: Bad value for 'fd' [ 2192.371246][T10676] usb 9-1: USB disconnect, device number 92 [ 2192.554978][T23433] device batadv_slave_1 left promiscuous mode [ 2192.594540][ T4341] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2192.692136][ T26] audit: type=1326 audit(1756302242.669:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23462 comm="syz.7.4330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75f6f8ebe9 code=0x0 [ 2192.836485][ T4341] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.877788][ T4341] usb 10-1: config 0 has no interfaces? [ 2192.888659][ T4341] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2192.904610][ T4341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2192.953637][ T4341] usb 10-1: config 0 descriptor?? [ 2193.484858][ T4341] usb 10-1: USB disconnect, device number 70 [ 2194.174320][T23480] netlink: 'syz.5.4332': attribute type 10 has an invalid length. [ 2194.187420][T23480] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4332'. [ 2194.270411][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4333'. [ 2194.316096][ T4280] Bluetooth: Wrong link type (-71) [ 2194.510376][T23482] tipc: Enabled bearer , priority 0 [ 2194.734621][ T4341] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 2194.944580][ T4341] usb 9-1: Using ep0 maxpacket: 32 [ 2194.952345][ T4341] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 2194.982025][ T4341] usb 9-1: config 0 has no interface number 0 [ 2195.004417][ T4341] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2195.031207][ T4341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.054325][ T4341] usb 9-1: Product: syz [ 2195.071664][ T4341] usb 9-1: Manufacturer: syz [ 2195.092422][ T4341] usb 9-1: SerialNumber: syz [ 2195.121967][ T4341] usb 9-1: config 0 descriptor?? [ 2195.157678][ T4341] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2195.254461][T10676] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2195.331946][T23478] tipc: Disabling bearer [ 2195.414504][T10676] usb 6-1: device descriptor read/64, error -71 [ 2195.555476][ T4341] usb 9-1: qt2_attach - failed to power on unit: -71 [ 2195.583033][ T4341] quatech2: probe of 9-1:0.51 failed with error -71 [ 2195.689181][ T4341] usb 9-1: USB disconnect, device number 93 [ 2195.695858][T10676] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2195.864524][T10676] usb 6-1: device descriptor read/64, error -71 [ 2195.995153][T10676] usb usb6-port1: attempt power cycle [ 2196.404520][T10676] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2196.904971][T10676] usb 6-1: device descriptor read/8, error -71 [ 2197.154564][T14643] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2197.208724][T10676] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2197.226982][ T26] audit: type=1400 audit(1756302247.199:312): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23495 comm="syz.9.4337" [ 2197.266222][T23516] usb usb8: usbfs: process 23516 (syz.9.4337) did not claim interface 0 before use [ 2197.288487][T10676] usb 6-1: device descriptor read/8, error -71 [ 2197.369150][T14643] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.396484][T14643] usb 7-1: config 0 has no interfaces? [ 2197.417801][T14643] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2197.446618][T14643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.464789][T10676] usb usb6-port1: unable to enumerate USB device [ 2197.489556][T14643] usb 7-1: config 0 descriptor?? [ 2197.684472][T23238] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2198.003251][T10676] usb 7-1: USB disconnect, device number 57 [ 2198.018462][T23238] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.063028][T23238] usb 8-1: config 0 has no interfaces? [ 2198.104604][T23238] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2198.170889][T23238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2198.232330][T23238] usb 8-1: config 0 descriptor?? [ 2198.771055][T23537] netlink: 308 bytes leftover after parsing attributes in process `syz.8.4346'. [ 2198.872691][T14643] usb 8-1: USB disconnect, device number 89 [ 2199.104469][T23238] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 2199.307583][T23238] usb 9-1: Using ep0 maxpacket: 16 [ 2199.333863][T23238] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2199.416770][T23238] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2199.453235][T23238] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2199.490434][T23238] usb 9-1: Product: syz [ 2199.518301][T23238] usb 9-1: Manufacturer: syz [ 2199.527635][T23238] usb 9-1: SerialNumber: syz [ 2199.550931][T23238] usb 9-1: config 0 descriptor?? [ 2200.196721][ T9317] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 2200.242485][T23546] device batadv_slave_1 entered promiscuous mode [ 2200.357128][T23537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4346'. [ 2200.428475][ T9317] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2200.472877][ T9317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.512701][ T9317] usb 6-1: Product: syz [ 2200.524443][ T9317] usb 6-1: Manufacturer: syz [ 2200.532097][ T9317] usb 6-1: SerialNumber: syz [ 2200.568807][ T9317] usb 6-1: config 0 descriptor?? [ 2200.817137][ T9317] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2200.957820][T23540] device batadv_slave_1 left promiscuous mode [ 2202.248430][ T9317] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 2202.290192][ T9317] usb 6-1: USB disconnect, device number 81 [ 2202.550529][ T4341] usb 9-1: USB disconnect, device number 94 [ 2202.610342][T23561] netlink: 'syz.9.4351': attribute type 10 has an invalid length. [ 2202.668346][T23561] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4351'. [ 2203.494430][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4357'. [ 2203.860435][T23598] tipc: Enabling of bearer rejected, failed to enable media [ 2203.891229][T20906] Bluetooth: Wrong link type (-71) [ 2205.405738][ T26] audit: type=1400 audit(1756302255.389:313): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23602 comm="syz.7.4361" [ 2205.483738][T23611] usb usb8: usbfs: process 23611 (syz.7.4361) did not claim interface 0 before use [ 2207.064646][T10676] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2207.264536][T10676] usb 10-1: Using ep0 maxpacket: 32 [ 2207.272714][T10676] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2207.314057][T10676] usb 10-1: config 0 has no interface number 0 [ 2207.343101][T10676] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2207.386978][T10676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.405707][T10676] usb 10-1: Product: syz [ 2207.410887][T10676] usb 10-1: Manufacturer: syz [ 2207.422478][T10676] usb 10-1: SerialNumber: syz [ 2207.449033][T10676] usb 10-1: config 0 descriptor?? [ 2207.472596][T10676] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2207.679218][T10676] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2207.749233][T10676] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2207.912226][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 2208.113271][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2208.114587][T14643] usb 10-1: USB disconnect, device number 71 [ 2208.229742][T14643] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2208.353674][T14643] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2208.386684][T14643] quatech2 10-1:0.51: device disconnected [ 2208.424268][ T26] audit: type=1400 audit(1756302258.399:314): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23627 comm="syz.8.4368" [ 2208.460760][T23648] netlink: 'syz.6.4370': attribute type 10 has an invalid length. [ 2208.474121][T23639] usb usb8: usbfs: process 23639 (syz.8.4368) did not claim interface 0 before use [ 2208.494556][T23648] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4370'. [ 2209.573335][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4374'. [ 2209.768564][T23664] tipc: Enabling of bearer rejected, failed to enable media [ 2211.383431][T23687] netlink: 'syz.6.4378': attribute type 10 has an invalid length. [ 2211.403060][T23687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4378'. [ 2212.184624][T23697] netlink: 'syz.9.4380': attribute type 10 has an invalid length. [ 2212.213504][T23697] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4380'. [ 2212.711170][T23702] device batadv_slave_1 entered promiscuous mode [ 2212.964062][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4383'. [ 2213.010026][ T26] audit: type=1400 audit(1756302262.989:315): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23703 comm="syz.7.4382" [ 2213.053277][T23711] usb usb8: usbfs: process 23711 (syz.7.4382) did not claim interface 0 before use [ 2213.665091][T23698] device batadv_slave_1 left promiscuous mode [ 2213.803731][T23712] tipc: Enabled bearer , priority 0 [ 2213.914284][T23719] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4384'. [ 2214.808406][T23708] tipc: Disabling bearer [ 2215.194055][T23729] netlink: 'syz.6.4386': attribute type 10 has an invalid length. [ 2215.286539][T23729] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4386'. [ 2216.855535][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 2217.264505][T23749] tipc: Enabling of bearer rejected, failed to enable media [ 2217.966999][T23761] netlink: 'syz.7.4394': attribute type 10 has an invalid length. [ 2217.976008][T23761] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4394'. [ 2218.249084][T23766] netlink: 'syz.6.4395': attribute type 10 has an invalid length. [ 2218.301364][T23766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4395'. [ 2218.318321][T23767] netlink: 'syz.9.4393': attribute type 10 has an invalid length. [ 2218.337143][T23767] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4393'. [ 2219.705144][T23238] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2219.924538][T23238] usb 7-1: Using ep0 maxpacket: 32 [ 2219.933748][T23238] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2220.004718][T23238] usb 7-1: config 0 has no interface number 0 [ 2220.025180][T23238] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2220.055441][T23238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.090091][T23238] usb 7-1: Product: syz [ 2220.112715][T23238] usb 7-1: Manufacturer: syz [ 2220.131568][T23238] usb 7-1: SerialNumber: syz [ 2220.220336][T23238] usb 7-1: config 0 descriptor?? [ 2220.261121][T23238] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2220.405502][ T4313] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2220.458972][T23238] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2220.508308][T23238] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2220.614782][ T4313] usb 8-1: Using ep0 maxpacket: 8 [ 2220.639511][ T4313] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2220.709196][ T4313] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.709781][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2220.735229][T23238] usb 7-1: USB disconnect, device number 58 [ 2220.758829][ T4313] usb 8-1: Product: syz [ 2220.763571][ T4313] usb 8-1: Manufacturer: syz [ 2220.773529][T23238] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2220.827198][ T4313] usb 8-1: SerialNumber: syz [ 2220.846525][T23238] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2220.892844][ T4313] usb 8-1: config 0 descriptor?? [ 2220.917319][T23238] quatech2 7-1:0.51: device disconnected [ 2221.115869][ T4313] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2221.225625][ T26] audit: type=1326 audit(1756302271.209:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23788 comm="syz.9.4401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77cdb8ebe9 code=0x0 [ 2222.094460][T23238] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2222.167682][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.175372][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.302521][T23238] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.329066][T23238] usb 7-1: config 0 has no interfaces? [ 2222.350729][T23238] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2222.384700][T23238] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.450947][T23238] usb 7-1: config 0 descriptor?? [ 2222.541693][ T4313] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 2222.629838][ T4313] usb 8-1: USB disconnect, device number 90 [ 2223.028250][ T4313] usb 7-1: USB disconnect, device number 59 [ 2223.834514][ T4313] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 2224.052636][ T4313] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.093217][ T4313] usb 9-1: config 0 has no interfaces? [ 2224.114613][ T4313] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2224.155323][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.209720][ T4313] usb 9-1: config 0 descriptor?? [ 2224.877867][T14643] usb 9-1: USB disconnect, device number 95 [ 2226.128719][T23838] netlink: 'syz.6.4411': attribute type 10 has an invalid length. [ 2226.149190][T23838] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4411'. [ 2227.970287][ T26] audit: type=1326 audit(1756302277.949:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23847 comm="syz.7.4414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75f6f8ebe9 code=0x0 [ 2228.334847][ T4313] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 2228.548372][ T4313] usb 10-1: Using ep0 maxpacket: 16 [ 2228.558173][ T4313] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2228.626167][ T4313] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2228.669139][T23859] netlink: 'syz.5.4416': attribute type 10 has an invalid length. [ 2228.689087][T23859] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4416'. [ 2228.704198][ T4313] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2228.746155][ T4313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.825362][ T4313] usb 10-1: config 0 descriptor?? [ 2228.863828][ T4313] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2228.958179][ T26] audit: type=1400 audit(1756302278.939:318): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23844 comm="syz.8.4413" [ 2229.003697][T23861] usb usb8: usbfs: process 23861 (syz.8.4413) did not claim interface 0 before use [ 2230.657914][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4418'. [ 2231.000912][T23882] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4421'. [ 2231.031034][T23871] tipc: Enabling of bearer rejected, failed to enable media [ 2231.049789][T14643] usb 10-1: USB disconnect, device number 72 [ 2232.420235][ T26] audit: type=1400 audit(1756302282.399:319): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23887 comm="syz.9.4423" [ 2232.475068][T23896] usb usb8: usbfs: process 23896 (syz.9.4423) did not claim interface 0 before use [ 2233.354827][T23901] device batadv_slave_1 entered promiscuous mode [ 2233.781541][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4427'. [ 2233.892885][T23917] tipc: Enabled bearer , priority 0 [ 2234.295014][T23897] device batadv_slave_1 left promiscuous mode [ 2234.999274][T23913] tipc: Disabling bearer [ 2235.006554][ T4341] tipc: Node number set to 2795204124 [ 2236.335874][T23238] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2236.554430][T23238] usb 8-1: Using ep0 maxpacket: 16 [ 2236.570962][T23238] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2236.613844][T23238] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2236.655708][T23238] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2236.696177][T23238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.714618][T14643] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2236.737423][T23238] usb 8-1: config 0 descriptor?? [ 2236.754726][T23238] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2236.911080][T14643] usb 6-1: config 0 has no interfaces? [ 2236.933253][T14643] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2236.971781][T14643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.997742][T14643] usb 6-1: Product: syz [ 2237.019256][T14643] usb 6-1: Manufacturer: syz [ 2237.036193][T14643] usb 6-1: SerialNumber: syz [ 2237.072512][T14643] usb 6-1: config 0 descriptor?? [ 2239.034816][ T4313] usb 8-1: USB disconnect, device number 91 [ 2239.852965][T15023] usb 6-1: USB disconnect, device number 82 [ 2240.104560][ T4313] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2240.232821][ T26] audit: type=1400 audit(1756302290.209:320): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=23956 comm="syz.8.4436" [ 2240.428764][ T4313] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.548379][ T4313] usb 8-1: config 0 has no interfaces? [ 2240.588074][ T4313] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2240.634498][ T4313] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.688828][ T4313] usb 8-1: config 0 descriptor?? [ 2241.013152][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4445'. [ 2241.044531][T23238] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 2241.234474][T23238] usb 10-1: Using ep0 maxpacket: 32 [ 2241.254861][T23238] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2241.280388][T23238] usb 10-1: config 0 has no interface number 0 [ 2241.312104][T23238] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2241.337778][T23238] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.378469][T23238] usb 10-1: Product: syz [ 2241.389683][T23238] usb 10-1: Manufacturer: syz [ 2241.409843][T23238] usb 10-1: SerialNumber: syz [ 2241.442277][T23238] usb 10-1: config 0 descriptor?? [ 2241.481197][T23238] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2241.684237][T23238] usb 10-1: qt2_setup_urbs - submit read urb failed -8 [ 2241.707560][T23238] quatech2: probe of 10-1:0.51 failed with error -8 [ 2241.718694][T23998] netlink: 'syz.6.4447': attribute type 10 has an invalid length. [ 2241.732174][T23998] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4447'. [ 2241.897765][ T4313] usb 10-1: USB disconnect, device number 73 [ 2242.014122][T24005] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4449'. [ 2242.564749][T23238] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 2242.774765][T23238] usb 9-1: Using ep0 maxpacket: 16 [ 2242.804694][T23238] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.847397][T23238] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2242.969891][T23238] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2242.991479][T23238] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.037143][T23238] usb 9-1: config 0 descriptor?? [ 2243.217695][ T9317] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 2243.437436][ T9317] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.462246][ T9317] usb 10-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2243.508745][ T9317] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2243.588574][ T9317] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2243.619712][ T9317] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2243.781549][ T9317] snd-usb-audio: probe of 10-1:27.0 failed with error -2 [ 2243.823372][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2243.889998][T23238] usbhid 9-1:0.0: can't add hid device: -71 [ 2243.905281][T23238] usbhid: probe of 9-1:0.0 failed with error -71 [ 2243.943399][T23238] usb 9-1: USB disconnect, device number 96 [ 2244.056419][T15023] usb 8-1: USB disconnect, device number 92 [ 2244.944053][ T26] audit: type=1326 audit(1756302294.919:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.6.4456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3cb8ebe9 code=0x0 [ 2245.494465][ T9317] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2245.697630][ T9317] usb 8-1: Using ep0 maxpacket: 32 [ 2245.706688][ T9317] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 2245.744863][ T9317] usb 8-1: config 0 has no interface number 0 [ 2245.863398][ T9317] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2245.904764][ T9317] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.935877][ T9317] usb 8-1: Product: syz [ 2245.953031][ T9317] usb 8-1: Manufacturer: syz [ 2245.973236][ T9317] usb 8-1: SerialNumber: syz [ 2246.044649][ T9317] usb 8-1: config 0 descriptor?? [ 2246.100413][ T9317] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2246.280870][ T9317] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2246.292390][ T4313] usb 10-1: USB disconnect, device number 74 [ 2246.402363][ T9317] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2246.752777][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2246.779184][ T9317] usb 8-1: USB disconnect, device number 93 [ 2246.826300][ T9317] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2246.937473][ T9317] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2247.063241][ T9317] quatech2 8-1:0.51: device disconnected [ 2249.677130][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4464'. [ 2249.956780][T24070] tipc: Enabled bearer , priority 0 [ 2250.349006][T24063] tipc: Disabling bearer [ 2251.418169][T20906] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2251.437819][T20906] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2251.451171][T20906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2251.475637][T20906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2251.485580][T20906] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2251.498231][T20906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2251.858562][ T8431] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.188043][ T8431] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.464872][ T8431] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.805529][ T8431] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.895502][ T9317] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2253.054582][ T4313] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2253.114770][ T9317] usb 6-1: Using ep0 maxpacket: 32 [ 2253.129689][ T9317] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2253.217628][ T9317] usb 6-1: config 0 has no interface number 0 [ 2253.264586][ T4313] usb 7-1: Using ep0 maxpacket: 8 [ 2253.286426][ T4313] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2253.310718][ T9317] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2253.358325][ T9317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.389858][ T9317] usb 6-1: Product: syz [ 2253.416334][ T4313] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2253.424506][ T9317] usb 6-1: Manufacturer: syz [ 2253.477523][ T4313] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2253.518522][ T9317] usb 6-1: SerialNumber: syz [ 2253.533229][T24095] chnl_net:caif_netlink_parms(): no params data found [ 2253.534744][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 2253.563954][ T9317] usb 6-1: config 0 descriptor?? [ 2253.599094][ T9317] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2253.624845][ T4313] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2253.746968][ T4313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.798821][ T9317] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2253.878847][ T4313] usbtmc 7-1:16.0: bulk endpoints not found [ 2254.017489][ T9317] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2254.032668][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2254.118503][ T9317] usb 6-1: USB disconnect, device number 83 [ 2254.172717][ T9317] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2254.303720][ T9317] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2254.318833][ T9317] quatech2 6-1:0.51: device disconnected [ 2254.380640][T24095] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.422375][T24095] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.445292][T24095] device bridge_slave_0 entered promiscuous mode [ 2254.471579][T10676] usb 7-1: USB disconnect, device number 60 [ 2254.527396][ T8431] tipc: Left network mode [ 2254.572853][T24095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2254.619742][T24095] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.701290][T24095] device bridge_slave_1 entered promiscuous mode [ 2255.177925][T24095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2255.216642][T24133] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4480'. [ 2255.443172][T24095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2255.604831][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 2255.644759][T15195] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2255.760862][T24095] team0: Port device team_slave_0 added [ 2255.822287][T24147] netlink: 308 bytes leftover after parsing attributes in process `syz.7.4482'. [ 2255.872519][T15195] usb 7-1: Using ep0 maxpacket: 32 [ 2255.885922][T15195] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2255.905518][T24095] team0: Port device team_slave_1 added [ 2255.934933][T15195] usb 7-1: config 0 has no interface number 0 [ 2255.958448][T15195] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2256.032049][T15195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.064920][T15195] usb 7-1: Product: syz [ 2256.069507][T15195] usb 7-1: Manufacturer: syz [ 2256.101735][T15195] usb 7-1: SerialNumber: syz [ 2256.127223][T24095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2256.143951][T15195] usb 7-1: config 0 descriptor?? [ 2256.185037][T15195] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2256.223274][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2256.345167][ T9317] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 2256.385620][T15195] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2256.468675][T15195] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2256.490762][T24095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2256.616130][ T9317] usb 8-1: Using ep0 maxpacket: 16 [ 2256.650427][ T9317] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2256.819126][ T9317] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2256.900923][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2256.901261][T24095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2256.945012][ T9317] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2256.993739][ T9317] usb 8-1: Product: syz [ 2257.010722][T24095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2257.057065][ T9317] usb 8-1: Manufacturer: syz [ 2257.084740][ T9317] usb 8-1: SerialNumber: syz [ 2257.174310][ T9317] usb 8-1: config 0 descriptor?? [ 2257.199868][T15195] usb 7-1: USB disconnect, device number 61 [ 2257.244766][T24095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2257.258540][T15195] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2257.350212][T15195] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2257.429925][T15195] quatech2 7-1:0.51: device disconnected [ 2257.548911][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4482'. [ 2257.684612][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 2258.171942][T24095] device hsr_slave_0 entered promiscuous mode [ 2258.246328][T24095] device hsr_slave_1 entered promiscuous mode [ 2258.305355][T24095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2258.365654][T24095] Cannot create hsr debugfs directory [ 2259.125029][ T26] audit: type=1400 audit(1756302309.109:322): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24154 comm="syz.6.4483" [ 2259.221731][T24156] usb usb8: usbfs: process 24156 (syz.6.4483) did not claim interface 0 before use [ 2259.777196][T20906] Bluetooth: hci4: command 0x0419 tx timeout [ 2260.780834][T10676] usb 8-1: USB disconnect, device number 94 [ 2261.224522][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4485'. [ 2262.924977][ T4341] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 2263.158219][ T4341] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2263.209749][ T4341] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.235573][ T4341] usb 7-1: Product: syz [ 2263.257146][ T4341] usb 7-1: Manufacturer: syz [ 2263.264256][ T4341] usb 7-1: SerialNumber: syz [ 2263.331321][ T4341] usb 7-1: config 0 descriptor?? [ 2263.363939][T24170] tipc: Started in network mode [ 2263.408372][T24170] tipc: Node identity c2782f6bf011, cluster identity 4711 [ 2263.497321][T24170] tipc: Enabled bearer , priority 0 [ 2263.620892][ T4341] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2263.661113][T24166] tipc: Disabling bearer [ 2264.527527][ T8431] device hsr_slave_0 left promiscuous mode [ 2264.576877][ T8431] device hsr_slave_1 left promiscuous mode [ 2264.753325][ T8431] device macsec0 left promiscuous mode [ 2264.781797][ T8431] bridge0: port 2(macsec0) entered disabled state [ 2264.877240][ T8431] bridge0: port 1(team0) entered disabled state [ 2265.053751][ T8431] device veth1_macvtap left promiscuous mode [ 2265.115152][T23238] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2265.142235][ T8431] device veth0_macvtap left promiscuous mode [ 2265.181946][ T8431] device veth1_vlan left promiscuous mode [ 2265.230360][ T8431] device veth0_vlan left promiscuous mode [ 2265.296878][ T4341] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 2265.337072][ T4341] usb 7-1: USB disconnect, device number 62 [ 2265.354782][T23238] usb 8-1: Using ep0 maxpacket: 32 [ 2265.390718][T23238] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 2265.456246][T23238] usb 8-1: config 0 has no interface number 0 [ 2265.515492][T23238] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2265.590253][T23238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.626316][T23238] usb 8-1: Product: syz [ 2265.651921][T23238] usb 8-1: Manufacturer: syz [ 2265.679582][T23238] usb 8-1: SerialNumber: syz [ 2265.711238][T23238] usb 8-1: config 0 descriptor?? [ 2265.730935][ T8431] bond2 (unregistering): Released all slaves [ 2265.750686][T23238] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2265.785999][ T8431] bond1 (unregistering): Released all slaves [ 2265.953096][T23238] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2266.031365][T23238] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2266.173908][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2266.197582][T23238] usb 8-1: USB disconnect, device number 95 [ 2266.238667][T23238] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2266.333156][T23238] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2266.444827][T23238] quatech2 8-1:0.51: device disconnected [ 2266.784571][T14643] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2267.047212][T14643] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.117864][T14643] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2267.139211][T14643] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2267.223480][T14643] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2267.279781][T14643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.333284][T14643] usb 7-1: invalid MIDI out EP 0 [ 2267.462368][T14643] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 2267.492026][ T5126] udevd[5126]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2269.600715][T23238] usb 7-1: USB disconnect, device number 63 [ 2271.263746][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.402988][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.462872][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.597180][ C0] vkms_vblank_simulate: vblank timer overrun [ 2271.800322][T14643] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2272.045162][T14643] usb 7-1: Using ep0 maxpacket: 16 [ 2272.076009][T14643] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2272.095200][ C0] vkms_vblank_simulate: vblank timer overrun [ 2272.115794][T14643] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2272.139104][T14643] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2272.153533][T14643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.178592][T14643] usb 7-1: config 0 descriptor?? [ 2272.510401][ C0] vkms_vblank_simulate: vblank timer overrun [ 2272.548206][ C0] vkms_vblank_simulate: vblank timer overrun [ 2272.684864][T10676] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2272.919062][T10676] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2272.933189][T10676] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2272.950748][T10676] usb 9-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 2272.965950][T10676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2272.987200][T10676] usb 9-1: config 0 descriptor?? [ 2273.050925][T14643] usbhid 7-1:0.0: can't add hid device: -71 [ 2273.066882][ C0] vkms_vblank_simulate: vblank timer overrun [ 2273.073919][T14643] usbhid: probe of 7-1:0.0 failed with error -71 [ 2273.099465][T14643] usb 7-1: USB disconnect, device number 64 [ 2273.349565][ T8431] bond0 (unregistering): Released all slaves [ 2273.488327][T24198] netlink: 'syz.5.4489': attribute type 10 has an invalid length. [ 2273.508415][T24198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4489'. [ 2273.630719][T10676] usbhid 9-1:0.0: can't add hid device: -71 [ 2273.660120][T10676] usbhid: probe of 9-1:0.0 failed with error -71 [ 2273.704635][T10676] usb 9-1: USB disconnect, device number 97 [ 2274.248491][T24095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2274.298324][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2274.322976][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2274.361942][T24095] 8021q: adding VLAN 0 to HW filter on device team0 [ 2274.394625][T23238] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2274.485218][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2274.528127][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2274.595621][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.604627][ T8819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2274.701556][T23238] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.790304][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2274.819469][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2274.831191][T23238] usb 8-1: config 0 has no interfaces? [ 2274.860724][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2274.901107][T23238] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2274.929342][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.938187][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2274.998395][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2275.039828][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2275.119910][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2275.131245][T23238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.193784][T23238] usb 8-1: config 0 descriptor?? [ 2275.284195][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2275.373696][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2275.459566][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2275.578944][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2275.610741][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2275.661034][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2275.729943][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2275.769053][ T9317] usb 8-1: USB disconnect, device number 96 [ 2275.813158][ T8819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2275.880363][T24095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2276.283779][ T8431] tipc: Left network mode [ 2277.409694][ T26] audit: type=1400 audit(1756302327.389:323): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24286 comm="syz.5.4507" [ 2277.504690][T24294] usb usb8: usbfs: process 24294 (syz.5.4507) did not claim interface 0 before use [ 2277.661042][T24095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2277.685353][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2277.698765][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2277.712230][ T4280] Bluetooth: Wrong link type (-71) [ 2277.870482][ T26] audit: type=1326 audit(1756302327.849:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24313 comm="syz.7.4509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75f6f8ebe9 code=0x0 [ 2278.072817][T24320] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4511'. [ 2278.118049][T24320] device batadv1 entered promiscuous mode [ 2278.902340][T24328] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2278.915589][T24328] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2278.925147][T24328] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2278.935473][T24328] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2279.247501][T24328] device vxlan0 entered promiscuous mode [ 2279.290123][T24328] team0: Port device vxlan0 added [ 2279.792273][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2279.810931][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2280.202396][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2280.288906][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2280.336810][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2280.380807][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2280.459439][T24095] device veth0_vlan entered promiscuous mode [ 2280.464673][T24344] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4513'. [ 2280.540880][T24095] device veth1_vlan entered promiscuous mode [ 2280.588256][ T8431] device hsr_slave_0 left promiscuous mode [ 2280.614290][ T8431] device hsr_slave_1 left promiscuous mode [ 2280.655196][ T8431] device macsec0 left promiscuous mode [ 2280.675224][ T8431] bridge0: port 2(macsec0) entered disabled state [ 2280.719954][ T8431] bridge0: port 1(team0) entered disabled state [ 2280.863164][ T8431] device veth1_macvtap left promiscuous mode [ 2280.933860][ T8431] device veth0_macvtap left promiscuous mode [ 2280.995204][ T8431] device veth1_vlan left promiscuous mode [ 2281.074738][ T8431] device veth0_vlan left promiscuous mode [ 2281.234514][T23238] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2281.274505][T14643] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 2281.399678][ T8431] bond1 (unregistering): Released all slaves [ 2281.444480][T23238] usb 6-1: Using ep0 maxpacket: 16 [ 2281.514583][T14643] usb 9-1: Using ep0 maxpacket: 16 [ 2281.532990][T14643] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2281.586117][T14643] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2281.604437][T23238] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2281.618943][T14643] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2281.640004][T23238] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2281.655322][T14643] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.665325][T23238] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2281.682440][T14643] usb 9-1: config 0 descriptor?? [ 2281.688475][T23238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.712607][T23238] usb 6-1: config 0 descriptor?? [ 2282.116106][T14643] HID 045e:07da: Invalid code 65791 type 1 [ 2282.137843][T14643] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0029/input/input96 [ 2282.162613][T14643] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 2282.542614][T23238] usbhid 6-1:0.0: can't add hid device: -71 [ 2282.602491][T23238] usbhid: probe of 6-1:0.0 failed with error -71 [ 2282.609258][T23155] usb 9-1: USB disconnect, device number 98 [ 2282.633423][T23238] usb 6-1: USB disconnect, device number 84 [ 2283.444982][T23155] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2283.618028][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.625673][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.654552][T23155] usb 6-1: Using ep0 maxpacket: 32 [ 2283.676609][T23155] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2283.788566][T23155] usb 6-1: config 0 has no interface number 0 [ 2283.979813][T23155] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2284.041829][T23155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.072355][T23155] usb 6-1: Product: syz [ 2284.078873][T23155] usb 6-1: Manufacturer: syz [ 2284.090655][T23155] usb 6-1: SerialNumber: syz [ 2284.138663][T23155] usb 6-1: config 0 descriptor?? [ 2284.190216][T23155] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2284.456024][T23155] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2284.486081][T23155] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2284.818315][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2284.837199][T15023] usb 6-1: USB disconnect, device number 85 [ 2284.901756][T15023] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2284.997203][T15023] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2285.077065][T15023] quatech2 6-1:0.51: device disconnected [ 2285.576357][ T8431] bond0 (unregistering): Released all slaves [ 2285.700547][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2285.725817][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2285.745055][T15023] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2285.826191][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2285.857397][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2285.896103][T24095] device veth0_macvtap entered promiscuous mode [ 2285.962427][T24095] device veth1_macvtap entered promiscuous mode [ 2285.984440][T15023] usb 6-1: Using ep0 maxpacket: 16 [ 2286.045636][T15023] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2286.076423][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2286.090652][T15023] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2286.114449][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.127232][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2286.139321][T15023] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2286.151376][T15023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.160785][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.194448][T15023] usb 6-1: config 0 descriptor?? [ 2286.206721][T24095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2286.220572][T15023] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2286.229388][T24373] netlink: 'syz.8.4522': attribute type 10 has an invalid length. [ 2286.313088][T24373] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4522'. [ 2286.427335][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2286.461297][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2286.519509][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2286.543902][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2286.584831][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.617839][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.653669][T24095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2286.672710][T24095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2286.717819][T24095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2286.746515][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2286.771122][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2287.286914][ T4652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2287.332009][ T4652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2287.498974][ T8819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2287.524580][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2287.629506][ T8819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2287.711171][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2287.924522][T15023] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2288.134537][T15023] usb 7-1: Using ep0 maxpacket: 16 [ 2288.146667][T15023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.222100][T15023] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2288.285253][T15023] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2288.336535][T15023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.419630][T15023] usb 7-1: config 0 descriptor?? [ 2288.476524][T23155] usb 6-1: USB disconnect, device number 86 [ 2288.860294][T15023] HID 045e:07da: Invalid code 65791 type 1 [ 2288.901927][T15023] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.002A/input/input97 [ 2288.962879][ T26] audit: type=1326 audit(1756302338.939:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24408 comm="syz.5.4529" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfeef8ebe9 code=0x0 [ 2289.004737][T15023] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 2289.023140][T24411] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4528'. [ 2289.102748][T24411] device batadv1 entered promiscuous mode [ 2289.396454][T24384] usb 7-1: USB disconnect, device number 65 [ 2289.551584][T24415] fido_id[24415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2290.012886][T24429] netlink: 'syz.8.4531': attribute type 10 has an invalid length. [ 2290.030035][T24429] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4531'. [ 2290.804642][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 2291.241841][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4538'. [ 2291.360387][T24457] tipc: Enabled bearer , priority 0 [ 2291.454917][T23155] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2291.654475][T23155] usb 8-1: Using ep0 maxpacket: 16 [ 2291.667472][T23155] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2291.772535][T23155] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2291.874557][T23155] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2291.902702][T24469] netlink: 'syz.9.4539': attribute type 10 has an invalid length. [ 2291.942004][T24469] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4539'. [ 2291.975078][T24469] device team0 entered promiscuous mode [ 2291.984176][T23155] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.998417][T24469] device team_slave_0 entered promiscuous mode [ 2292.062709][T24469] device team_slave_1 entered promiscuous mode [ 2292.108749][T23155] usb 8-1: config 0 descriptor?? [ 2292.121562][T24469] bridge0: port 3(team0) entered blocking state [ 2292.149561][T24469] bridge0: port 3(team0) entered disabled state [ 2292.172066][T24469] bridge0: port 3(team0) entered blocking state [ 2292.179228][T24469] bridge0: port 3(team0) entered forwarding state [ 2292.197386][T24452] tipc: Disabling bearer [ 2292.206795][T23155] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2293.310491][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2293.328417][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2293.344122][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2293.375475][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2293.391696][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2293.404086][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2293.958043][ T4380] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.102573][ T4380] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.166635][T23238] usb 9-1: new full-speed USB device number 99 using dummy_hcd [ 2294.188861][T24386] usb 8-1: USB disconnect, device number 97 [ 2294.250822][ T4380] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.371203][T23238] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2294.435481][T23238] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.476670][T23238] usb 9-1: Product: syz [ 2294.484894][T23238] usb 9-1: Manufacturer: syz [ 2294.511542][T23238] usb 9-1: SerialNumber: syz [ 2294.544921][T23238] usb 9-1: config 0 descriptor?? [ 2294.578441][ T4380] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.678000][T24482] chnl_net:caif_netlink_parms(): no params data found [ 2294.778425][T23238] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2294.931910][T24509] netlink: 'syz.5.4544': attribute type 10 has an invalid length. [ 2295.094637][T24509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4544'. [ 2295.108678][T24482] bridge0: port 1(bridge_slave_0) entered blocking state [ 2295.126163][T24482] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.150955][T24482] device bridge_slave_0 entered promiscuous mode [ 2295.192104][T24482] bridge0: port 2(bridge_slave_1) entered blocking state [ 2295.216465][T24482] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.246277][T24482] device bridge_slave_1 entered promiscuous mode [ 2295.444760][T20906] Bluetooth: hci5: command 0x0409 tx timeout [ 2295.612397][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4547'. [ 2295.712245][T24482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2295.873714][T24482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2296.030081][ T4380] tipc: Left network mode [ 2296.139105][T24482] team0: Port device team_slave_0 added [ 2296.198474][T23238] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 2296.283588][T23238] usb 9-1: USB disconnect, device number 99 [ 2296.499013][T24482] team0: Port device team_slave_1 added [ 2296.668553][T24482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2296.683513][T24482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2296.848308][T24482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2296.983849][T24482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2297.004090][T24482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2297.170551][T24482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2297.282240][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4551'. [ 2297.384729][T23238] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2297.524828][T20906] Bluetooth: hci5: command 0x041b tx timeout [ 2297.583221][T24551] tipc: Enabled bearer , priority 0 [ 2297.682615][T23238] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2297.704844][T23238] usb 10-1: config 0 has no interfaces? [ 2297.722580][T23238] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2297.783615][T23238] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.817475][T23238] usb 10-1: config 0 descriptor?? [ 2297.922200][T24482] device hsr_slave_0 entered promiscuous mode [ 2298.010158][T24482] device hsr_slave_1 entered promiscuous mode [ 2298.075302][T24482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2298.097977][T24482] Cannot create hsr debugfs directory [ 2298.226059][T24542] tipc: Disabling bearer [ 2298.633708][T23238] usb 10-1: USB disconnect, device number 75 [ 2299.604909][ T4280] Bluetooth: hci5: command 0x040f tx timeout [ 2299.773350][T24386] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2299.964459][T24386] usb 6-1: Using ep0 maxpacket: 16 [ 2299.971857][T24386] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2300.043343][T24386] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2300.224709][T24386] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2300.269440][T24386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2300.336027][T24386] usb 6-1: config 0 descriptor?? [ 2300.350793][T24386] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2300.615940][ T4380] device hsr_slave_0 left promiscuous mode [ 2300.680695][ T4380] device hsr_slave_1 left promiscuous mode [ 2300.728718][ T4380] device macsec0 left promiscuous mode [ 2300.794780][ T4380] bridge0: port 2(macsec0) entered disabled state [ 2300.803375][ T4380] bridge0: port 1(team0) entered disabled state [ 2300.852195][ T4380] device veth1_macvtap left promiscuous mode [ 2300.895083][ T4380] device veth0_macvtap left promiscuous mode [ 2300.901448][ T4380] device veth1_vlan left promiscuous mode [ 2300.931576][ T4380] device veth0_vlan left promiscuous mode [ 2301.051241][ T4280] Bluetooth: Wrong link type (-71) [ 2301.685367][ T4280] Bluetooth: hci5: command 0x0419 tx timeout [ 2302.091839][ C0] vkms_vblank_simulate: vblank timer overrun [ 2302.372518][ C0] vkms_vblank_simulate: vblank timer overrun [ 2302.391639][ T9317] usb 6-1: USB disconnect, device number 87 [ 2302.414451][T24386] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2302.518336][ T26] audit: type=1326 audit(1756302352.489:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24611 comm="syz.5.4562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfeef8ebe9 code=0x0 [ 2302.639200][ C0] vkms_vblank_simulate: vblank timer overrun [ 2302.675925][T24386] usb 10-1: config 0 has no interfaces? [ 2302.708251][T24386] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2302.722304][T24386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.748705][T24386] usb 10-1: config 0 descriptor?? [ 2302.973906][T24386] usb 10-1: USB disconnect, device number 76 [ 2303.690683][ T26] audit: type=1326 audit(1756302353.669:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24617 comm="syz.9.4563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec4938ebe9 code=0x0 [ 2304.189255][ T4380] bond0 (unregistering): Released all slaves [ 2304.439275][T24589] netlink: 'syz.7.4555': attribute type 10 has an invalid length. [ 2304.468741][T24589] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4555'. [ 2304.552879][T24600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4558'. [ 2304.902150][T24482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2304.971849][T24482] 8021q: adding VLAN 0 to HW filter on device team0 [ 2305.002655][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2305.021977][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2305.087639][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2305.170904][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2305.198083][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 2305.205527][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2305.302108][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2305.368270][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2305.386032][ T4454] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.394106][ T4454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2305.462791][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2305.524061][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2305.560849][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2305.590436][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2305.654116][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2305.689310][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2305.725888][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2305.782959][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2305.813299][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2305.885124][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2305.934095][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2305.963427][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2306.000908][T24482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2306.462791][ T26] audit: type=1400 audit(1756302356.439:328): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=24633 comm="syz.8.4564" [ 2306.551375][T24641] usb usb8: usbfs: process 24641 (syz.8.4564) did not claim interface 0 before use [ 2306.754012][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2306.851811][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2306.920419][T24482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2307.337544][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4566'. [ 2307.744247][T24661] tipc: Enabled bearer , priority 0 [ 2308.137836][T24656] tipc: Disabling bearer [ 2308.417011][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2308.461979][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2308.537890][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2308.552287][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2308.588800][T24482] device veth0_vlan entered promiscuous mode [ 2308.602962][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2308.614514][T15195] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 2308.639844][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2308.671633][T24482] device veth1_vlan entered promiscuous mode [ 2308.769302][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2308.783726][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2308.820485][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2308.830212][T15195] usb 10-1: Using ep0 maxpacket: 16 [ 2308.841838][T15195] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2308.905665][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2308.909587][T15195] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2309.425257][T15195] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2309.435543][T15195] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.442132][T24482] device veth0_macvtap entered promiscuous mode [ 2309.473061][T15195] usb 10-1: config 0 descriptor?? [ 2309.503580][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2309.532033][T15195] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2309.565639][T24482] device veth1_macvtap entered promiscuous mode [ 2309.603563][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.655175][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.676844][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.742842][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.817535][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.860626][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.919318][T24482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.951545][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4573'. [ 2309.978748][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2310.004284][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2310.045936][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.103474][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.144131][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.216643][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.250917][T24482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2310.263114][T24482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2310.286371][T24482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2310.317080][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2310.345251][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2310.399027][T24710] netlink: 'syz.5.4574': attribute type 10 has an invalid length. [ 2310.436434][T24710] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4574'. [ 2310.633515][ T8819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.659421][ T8819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.777288][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2310.802373][ T4454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2310.833075][ T4454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.905837][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2311.461060][ T9317] usb 10-1: USB disconnect, device number 77 [ 2345.050249][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.057155][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2377.844654][T20906] Bluetooth: hci4: command 0x0406 tx timeout [ 2406.498981][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.505552][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2418.804812][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 2467.927565][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.934679][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.367077][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.373825][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.807041][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.813736][ T1278] ieee802154 phy1 wpan1: encryption failed: -22