last executing test programs: 18m59.437508638s ago: executing program 32 (id=4145): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) r3 = memfd_secret(0x0) fcntl$dupfd(r3, 0x406, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) syz_emit_ethernet(0x95, 0x0, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x709002) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fc77714e8a78e74ada6bd53ddbdf25036c4b00050006000500000004d719d40004000500050003000000050005000500000014000100fc020000000000000000000000000001dbe006fa8a2d72"], 0x44}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 18m45.180765496s ago: executing program 33 (id=4176): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f000000bb80)=0x7fff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f000000bc80), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c000000100003040000", @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000"], 0x9c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x405a51bc3e632e7c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x24, &(0x7f0000000080)={0x80, 0x0, 0x5, 0xffff, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x2, 0xdb, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) writev(r1, 0x0, 0x0) unshare(0x6a040000) fsopen(&(0x7f00000043c0)='devpts\x00', 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 15m59.013757145s ago: executing program 34 (id=4612): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x18, 0x6, 0x200000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newchain={0x2c, 0x64, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0xffe0}, {0xffe0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x1c, 0x5}}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = accept4(r1, &(0x7f00000003c0)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r1, &(0x7f00000016c0)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) open$dir(0x0, 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x6000) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14m15.62276712s ago: executing program 1 (id=4877): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r1}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000006687000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 14m14.463513993s ago: executing program 1 (id=4882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'geneve1\x00', {'rose0\x00'}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000008000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="0209000902000000fffffffffedbdf25e19ebada0a9357a2907174cae2b43c49b582a0bbcfbc1d4e35b784c2a0bf38b3d609c27e55"], 0x10}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)="00008aa70c000600", 0xfffffffffffffef5}], 0x1, 0x0, 0x0, 0x11000000}, 0x2008000) r5 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2d, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000001000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c797f8fff0ffffff1864000007000000000000000100000018260000", @ANYRES32=r5, @ANYBLOB="00000000090000004d3c6e0003000000186e0000100000000000000004000000186300000b000000000000009c00000085100000fcffffff85000000d100040018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbf", @ANYRES32, @ANYBLOB="0000000000000001b70500000800000085000000a5000000bf91070000000000b7020000020000008500000085000000b7000800000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x1007, &(0x7f0000001d40)=""/4103, 0x41100, 0x10, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000580)={0x20000006, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xc, 0x0, 0x800a4e}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r1, r1], &(0x7f0000000840), 0x10, 0x7}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r8, 0x5450) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000140)=0x8001, 0x4) 14m12.575821242s ago: executing program 1 (id=4886): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000040000000009030000000000"], 0x0, 0x26}, 0x28) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup(0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440), 0x1) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 14m11.396308218s ago: executing program 1 (id=4894): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 14m8.916827337s ago: executing program 1 (id=4897): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x48, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x10, 0x0, 0x1, [@nested={0x1a, 0xb, 0x0, 0x1, [@generic="ea16cd75d4b7fef9ae54f5768dd2ea9602911c206031"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) 14m8.308313857s ago: executing program 1 (id=4899): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10010, r0, 0x2d982000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = accept4(r2, &(0x7f0000000340)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 13m52.626279462s ago: executing program 35 (id=4899): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10010, r0, 0x2d982000) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = accept4(r2, &(0x7f0000000340)=@can, &(0x7f0000000440)=0x80, 0x0) sendmsg$nl_generic(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 10m34.452823388s ago: executing program 7 (id=5534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4040040) 10m31.280079709s ago: executing program 7 (id=5537): syz_usb_connect(0x5, 0x5f, &(0x7f0000000840)=ANY=[@ANYBLOB="12010003792e1dffd2196012b3820102030109024d00010203c0000904360601ffffff0d09090510100040030e320a3553e89468b87413d10c1a1c667d48a45f197881f0156360dc7c072844a5ccdd56625010c43051bdfc42cb8768b6bc1a"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m26.594297487s ago: executing program 7 (id=5550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4040040) 10m26.13332206s ago: executing program 7 (id=5554): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r5 = socket$inet6(0x10, 0x800, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000140008002abd7000fcdbdf25020100fe", @ANYRES32=r8, @ANYRES64=r4], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r9, &(0x7f0000001a40)=""/102392, 0x18ff8) 10m21.882386433s ago: executing program 7 (id=5556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 10m20.636682587s ago: executing program 8 (id=5557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x300) 10m19.568791011s ago: executing program 8 (id=5561): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x138, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x250}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004891) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 10m15.820361927s ago: executing program 7 (id=5564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x40, 0x4}, {0x80, 0x7ff}}]}}, 0x11) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000), &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 10m15.664133618s ago: executing program 8 (id=5565): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r2, 0x0, 0x0) 10m15.036581239s ago: executing program 8 (id=5568): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000200)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r4], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 10m14.29323478s ago: executing program 8 (id=5571): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net\x00') r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 10m14.044449343s ago: executing program 8 (id=5573): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x141) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="90000000240000000000000009000000000000008000c980f40dd46fcdd6472ec068cd73f440cc96ef10f025678d30410248f7183cc21eb3370cc12ef61797b6211d6c49dccc1121fcc948d68e4587ca591d66abb02a4d79da48c0066fb8c04500afd5073ec06c7e8c06229d3729d56c3c4783bf4e4558eb98f09fe838295a86323b41ece954f10543d9ab9971834cf6ec8885a8c3ed0000"], &(0x7f0000002300), 0x600) sendto$inet6(r2, 0x0, 0x0, 0x48010, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x3}, 0x1c) r4 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/357], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 9m57.914843583s ago: executing program 36 (id=5564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_info_rsp={{0xb, 0x40, 0x4}, {0x80, 0x7ff}}]}}, 0x11) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000000), &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) 9m56.509039888s ago: executing program 37 (id=5573): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x9, 0x100000000000008, 0xfffffffe, 0x3}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x141) name_to_handle_at(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000002240)=ANY=[@ANYBLOB="90000000240000000000000009000000000000008000c980f40dd46fcdd6472ec068cd73f440cc96ef10f025678d30410248f7183cc21eb3370cc12ef61797b6211d6c49dccc1121fcc948d68e4587ca591d66abb02a4d79da48c0066fb8c04500afd5073ec06c7e8c06229d3729d56c3c4783bf4e4558eb98f09fe838295a86323b41ece954f10543d9ab9971834cf6ec8885a8c3ed0000"], &(0x7f0000002300), 0x600) sendto$inet6(r2, 0x0, 0x0, 0x48010, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x3}, 0x1c) r4 = fsopen(&(0x7f0000000100)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4609035208070000000000000003003e00810000002701000038000000b00100c69280f2ea967f060007000000468320000100000400017f000000000000000070070000000000000058970000070000000b00000000040000000000805d5d93bd9aed8150be245eb57c20275df23dd4c0a790d184cb0fd06fc61360db201ff5e3b747d53373a968d5dff14ccac501f02fe320a27d63cbc8abbc8bee8130a4849dd5bf877e733c6917ea5757bda54eba462981a44f0e8100"/357], 0x1b2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc1485544, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 6m21.532364901s ago: executing program 3 (id=6090): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006000040180000", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010d57b90b013f41594"], 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m20.74425412s ago: executing program 3 (id=6094): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a050001000700"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 6m17.937910218s ago: executing program 3 (id=6103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 6m14.468600782s ago: executing program 3 (id=6115): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r0, 0x0) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x0, 0x0, 0x3}, 0x3}}, 0x18) 6m13.91223575s ago: executing program 3 (id=6117): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x8c, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x138, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0xfffffe14, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x264}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004891) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x48) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6m13.216575605s ago: executing program 3 (id=6118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000002900)=0x5, 0x2) 6m12.333214732s ago: executing program 38 (id=6118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000002900)=0x5, 0x2) 20.027168791s ago: executing program 6 (id=7384): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r1, 0x0, 0x4, &(0x7f0000000040)='GPL\x00'}, 0x30) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = syz_io_uring_setup(0x57a0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(r2, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 17.174287851s ago: executing program 6 (id=7402): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) r4 = fsmount(r1, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f000000080003001c20c0f47467c32cb11bdb7290ae189bfe5a0257102b36821c1fcae334924599da6a206fb00fdc13efa97e1257fac9e41826bb5b5150990d6419ef9450b8f3297c98861af0e245ce2d00c1720576", @ANYRES32=0x0, @ANYBLOB="14005e8008000100ffffffff0800060003000000"], 0x30}}, 0x80044) getsockopt(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000001080)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x8000) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840034000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fc378dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x880, 0x0, 0x0) 16.353788402s ago: executing program 6 (id=7405): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x200) sendto$inet(r0, &(0x7f00000002c0)="f0", 0x1, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 14.757504318s ago: executing program 6 (id=7410): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 14.438620785s ago: executing program 6 (id=7414): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) read(r0, &(0x7f0000001440)=""/4096, 0x1000) 13.864542376s ago: executing program 6 (id=7420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) 12.41987954s ago: executing program 39 (id=7420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) 11.964196065s ago: executing program 9 (id=7428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601020000000000000000010000090500010017"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 8.628704171s ago: executing program 9 (id=7441): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.495654437s ago: executing program 4 (id=7443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 7.457319522s ago: executing program 9 (id=7446): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.408176732s ago: executing program 4 (id=7447): r0 = socket(0x1e, 0x4, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x7fff, 0x3}, 0x2) write$binfmt_misc(r1, 0x0, 0x0) 7.001988594s ago: executing program 4 (id=7449): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0382f0"], 0xb) 6.920623974s ago: executing program 2 (id=7450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x48141, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) 6.680698632s ago: executing program 4 (id=7451): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x8003, 0x0, 0x0, 0x3, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24da1a5a0000000010e200", [0x1]}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 5.768806311s ago: executing program 2 (id=7452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 4.610951637s ago: executing program 9 (id=7453): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b80)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000500)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x34, &(0x7f00000001c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.923563912s ago: executing program 9 (id=7457): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000480)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 3.856292889s ago: executing program 0 (id=7458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 3.628299669s ago: executing program 4 (id=7459): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) close(0x3) 3.503061718s ago: executing program 2 (id=7460): r0 = socket(0x1e, 0x4, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x7fff, 0x3}, 0x2) write$binfmt_misc(r1, 0x0, 0x0) 2.812752399s ago: executing program 0 (id=7461): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x100, 0x8, 0x47, 0x7, 0xb, "8fb58cfbd7866e9176020dd4770fd7a22bdf26"}) 2.804886969s ago: executing program 5 (id=7462): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) 2.788801565s ago: executing program 2 (id=7463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x48141, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) 2.77458401s ago: executing program 4 (id=7464): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0), 0x0}, 0x0) 2.556713985s ago: executing program 0 (id=7465): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.440586574s ago: executing program 5 (id=7466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x80, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10fc}], 0x0, 0x0, 0x0}) 1.652150635s ago: executing program 5 (id=7467): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r0, &(0x7f0000000380)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r1 = dup(r0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000580)={0xf4, 0x3f, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x4, 0x122}, @nested={0xdd, 0xab, 0x0, 0x1, [@nested={0x4, 0x24}, @generic="3f9178c3e7aff6f312ca7cc013c8ba61d0c58d89a19d1b68987ed7856472a9c82275f48155aadb75df56ed1c03b57f7cab35f24266e6116bc5f77516dcbf1bcf2a941af6d0ba9fe6c0354c9cd1b9105f92fe4346b0f46fb55f17f156bf551e4d36239ede448c6f22cab083da0fa6c51878b9ca7d97be082f23ec218d0c355e2f2960c39545494c6340ca92596ea11fac181aaceb45814a7e782f6bbf7aa1833cb0d32195f497a9b02a8104a16402affd4ce73d81fca82879b7105e6827b18abff1dac146ee8fadc615c997770deba5c1ffa9c77dae"]}]}, 0xf4}], 0x1, 0x0, 0x0, 0x88020}, 0x80) 1.534895595s ago: executing program 2 (id=7468): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0x14}}, 0x0) 1.479916987s ago: executing program 0 (id=7469): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x3, 0x0, 0x0, &(0x7f0000000280)="b7", 0x1, 0x815}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x410}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0x0, &(0x7f0000000940)="1b", 0x1, 0x7ff}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f00000002c0)="9a", 0x1, 0x8000000000000001}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, 0x0, 0x3300, 0xffffffff}) 1.352376132s ago: executing program 5 (id=7470): openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x109502, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0xc0844123, 0x0) 1.351489612s ago: executing program 2 (id=7471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000003000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) 1.260958486s ago: executing program 0 (id=7472): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mount$nfs(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x801021, 0x0) chdir(&(0x7f0000000140)='./bus\x00') truncate(&(0x7f0000000040)='./file1\x00', 0x7) 1.01665255s ago: executing program 5 (id=7473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 820.685821ms ago: executing program 0 (id=7474): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xa8e, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xa58, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x11, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b"}, {0x1f}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0xf8, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x5, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) chmod(&(0x7f0000000200)='./cgroup\x00', 0x10) 197.180242ms ago: executing program 5 (id=7475): r0 = socket(0x1e, 0x4, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x7fff, 0x3}, 0x2) write$binfmt_misc(r1, 0x0, 0x0) 0s ago: executing program 9 (id=7476): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x100, 0x8, 0x47, 0x7, 0xb, "8fb58cfbd7866e9176020dd4770fd7a22bdf26"}) kernel console output (not intermixed with test programs): 28xxu failed with error -71 [ 1502.921217][T25322] usb 7-1: USB disconnect, device number 42 [ 1503.422476][T26460] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1503.629923][T25322] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1503.869872][ T1609] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1503.932238][T25322] usb 10-1: Using ep0 maxpacket: 32 [ 1504.112856][T25322] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1504.128592][T25322] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.172414][T25322] usb 10-1: config 0 descriptor?? [ 1504.195136][ T5919] usb 5-1: USB disconnect, device number 53 [ 1504.241912][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1504.264436][T25322] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1504.296308][ T1609] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1504.308985][ T5919] cp210x 5-1:0.0: device disconnected [ 1504.332938][ T1609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.406167][T25322] gspca_sq930x: reg_r 001f failed -32 [ 1504.411657][T25322] sq930x 10-1:0.0: probe with driver sq930x failed with error -32 [ 1504.432548][ T1609] usb 7-1: config 0 descriptor?? [ 1504.449772][ T5855] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1505.259760][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1505.414729][ T10] usb 5-1: device descriptor read/64, error -71 [ 1505.545548][ T1609] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1505.576225][ T1609] usb 7-1: USB disconnect, device number 43 [ 1505.613135][ T5941] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1505.698291][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1505.785078][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 1505.797646][ T5941] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1505.809213][ T5941] usb 3-1: config 0 has no interface number 0 [ 1505.818020][ T5941] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1505.829542][ T5941] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1505.841496][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.853216][ T5941] usb 3-1: Product: syz [ 1505.857396][ T5941] usb 3-1: Manufacturer: syz [ 1505.858931][ T10] usb 5-1: device descriptor read/64, error -71 [ 1505.864467][ T5941] usb 3-1: SerialNumber: syz [ 1505.898962][ T5941] usb 3-1: config 0 descriptor?? [ 1505.910742][ T5941] smsc75xx v1.0.0 [ 1506.019429][T25322] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1506.020933][ T10] usb usb5-port1: attempt power cycle [ 1506.193292][T25322] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.226613][T25322] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1506.240522][T25322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.261155][T25322] usb 6-1: Product: syz [ 1506.276715][T25322] usb 6-1: Manufacturer: syz [ 1506.281342][T25322] usb 6-1: SerialNumber: syz [ 1506.339855][T25322] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1506.403639][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1506.436837][ T10] usb 5-1: device descriptor read/8, error -71 [ 1506.575991][ T5941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1506.609100][ T5941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1506.623491][T18677] usb 10-1: USB disconnect, device number 36 [ 1506.638729][ T5919] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1506.714433][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1506.751094][ T10] usb 5-1: device descriptor read/8, error -71 [ 1506.753178][T27261] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6934'. [ 1507.524190][T27261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6934'. [ 1507.534522][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 1507.542931][ T5919] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 1507.554944][ T5919] usb 7-1: config 0 has no interface number 0 [ 1507.572954][ T5919] usb 7-1: config 0 interface 230 has no altsetting 0 [ 1507.591883][ T5919] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1507.615751][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.630886][T25322] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1507.637273][ T5919] usb 7-1: Product: syz [ 1507.661847][ T10] usb usb5-port1: unable to enumerate USB device [ 1507.670116][ T5919] usb 7-1: Manufacturer: syz [ 1507.674726][ T5919] usb 7-1: SerialNumber: syz [ 1507.714902][ T5919] usb 7-1: config 0 descriptor?? [ 1507.761842][ T5919] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 1507.849356][T27267] C: renamed from team_slave_0 (while UP) [ 1507.885246][ T5919] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1507.905737][T27267] netlink: 'syz.9.6935': attribute type 1 has an invalid length. [ 1507.914845][T27267] netlink: 152 bytes leftover after parsing attributes in process `syz.9.6935'. [ 1507.927816][T27267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1508.629057][ T5941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1508.661648][ T5941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1508.673503][ T5941] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1508.684969][ T5941] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1508.707660][ T5941] usb 3-1: USB disconnect, device number 28 [ 1508.905592][ T5947] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1509.090932][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.110264][ T5941] usb 6-1: USB disconnect, device number 19 [ 1509.159304][ T5947] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.198111][ T5947] usb 10-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1509.268693][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.352456][ T5947] usb 10-1: config 0 descriptor?? [ 1509.369166][T26460] Bluetooth: hci5: unexpected event 0x3e length: 283 > 260 [ 1509.369202][T26460] Bluetooth: hci5: unexpected subevent 0x0d length: 282 > 260 [ 1509.385752][T26460] Bluetooth: hci5: adv larger than maximum supported [ 1509.385811][T26460] Bluetooth: hci5: adv larger than maximum supported [ 1510.055235][ T5947] ortek 0003:1223:3F07.0012: unknown main item tag 0x6 [ 1510.153259][ T5947] ortek 0003:1223:3F07.0012: report_id 29495 is invalid [ 1510.210661][ T5947] ortek 0003:1223:3F07.0012: item 0 2 1 8 parsing failed [ 1510.268414][ T5947] ortek 0003:1223:3F07.0012: probe with driver ortek failed with error -22 [ 1510.445408][ T5947] usb 10-1: USB disconnect, device number 37 [ 1510.510680][ T5919] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 1510.694061][ T5919] usb 7-1: USB disconnect, device number 44 [ 1510.789559][ T5941] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1511.151477][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 1511.158691][ T5941] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1511.183193][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.953158][ T5941] usb 6-1: config 0 descriptor?? [ 1511.968003][ T5941] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1512.162949][T27320] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1512.169497][T27320] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1512.184753][ T5941] gspca_sq930x: reg_r 001f failed -32 [ 1512.227930][ T5941] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 1512.254763][T27320] vhci_hcd vhci_hcd.0: Device attached [ 1512.294502][T27321] vhci_hcd: connection closed [ 1512.295518][ T2965] vhci_hcd: stop threads [ 1512.306119][T25322] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1512.342986][ T2965] vhci_hcd: release socket [ 1512.354036][ T2965] vhci_hcd: disconnect device [ 1512.479156][T25322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.503100][T25322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.588776][T25322] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1512.615488][T25322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.644484][T25322] usb 7-1: config 0 descriptor?? [ 1512.828758][ T5919] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1513.002407][T27334] warn_alloc: 1 callbacks suppressed [ 1513.002428][T27334] syz.2.6957: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1513.026580][T27334] CPU: 0 UID: 0 PID: 27334 Comm: syz.2.6957 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1513.026614][T27334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1513.026629][T27334] Call Trace: [ 1513.026642][T27334] [ 1513.026653][T27334] dump_stack_lvl+0x189/0x250 [ 1513.026690][T27334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1513.026716][T27334] ? __pfx__printk+0x10/0x10 [ 1513.026749][T27334] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1513.026777][T27334] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1513.026807][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.026836][T27334] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1513.026868][T27334] warn_alloc+0x214/0x310 [ 1513.026893][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.026921][T27334] ? stack_depot_save_flags+0x40/0x900 [ 1513.026967][T27334] ? __pfx_warn_alloc+0x10/0x10 [ 1513.026995][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027024][T27334] ? kasan_save_track+0x4f/0x80 [ 1513.027060][T27334] ? xskq_create+0x56/0x170 [ 1513.027092][T27334] ? xsk_init_queue+0xb0/0x110 [ 1513.027123][T27334] ? xsk_setsockopt+0x4dc/0x8d0 [ 1513.027151][T27334] ? do_sock_setsockopt+0x17c/0x1b0 [ 1513.027175][T27334] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1513.027198][T27334] ? do_syscall_64+0xfa/0x3b0 [ 1513.027233][T27334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.027268][T27334] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1513.027329][T27334] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1513.027361][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027400][T27334] ? __kasan_kmalloc+0x93/0xb0 [ 1513.027440][T27334] vmalloc_user_noprof+0xad/0xf0 [ 1513.027464][T27334] ? xskq_create+0xbf/0x170 [ 1513.027499][T27334] xskq_create+0xbf/0x170 [ 1513.027535][T27334] xsk_init_queue+0xb0/0x110 [ 1513.027572][T27334] xsk_setsockopt+0x4dc/0x8d0 [ 1513.027607][T27334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1513.027638][T27334] ? __pfx_aa_sk_perm+0x10/0x10 [ 1513.027668][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027702][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027730][T27334] ? aa_sock_opt_perm+0x74/0x110 [ 1513.027764][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027791][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.027818][T27334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1513.027852][T27334] do_sock_setsockopt+0x17c/0x1b0 [ 1513.027883][T27334] __x64_sys_setsockopt+0x13f/0x1b0 [ 1513.027915][T27334] do_syscall_64+0xfa/0x3b0 [ 1513.027950][T27334] ? lockdep_hardirqs_on+0x9c/0x150 [ 1513.027986][T27334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.028010][T27334] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1513.028038][T27334] ? exc_page_fault+0x9f/0xf0 [ 1513.028075][T27334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.028100][T27334] RIP: 0033:0x7f446f38e9a9 [ 1513.028122][T27334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.028144][T27334] RSP: 002b:00007f4470154038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1513.028170][T27334] RAX: ffffffffffffffda RBX: 00007f446f5b5fa0 RCX: 00007f446f38e9a9 [ 1513.028190][T27334] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1513.028206][T27334] RBP: 00007f446f410d69 R08: 0000000000000004 R09: 0000000000000000 [ 1513.028222][T27334] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1513.028239][T27334] R13: 0000000000000000 R14: 00007f446f5b5fa0 R15: 00007ffe823b05d8 [ 1513.028277][T27334] [ 1513.029482][ T5919] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1513.110049][T27334] Mem-Info: [ 1513.115255][ T5919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1513.133970][T27334] active_anon:8870 inactive_anon:0 isolated_anon:0 [ 1513.133970][T27334] active_file:22370 inactive_file:40436 isolated_file:0 [ 1513.133970][T27334] unevictable:768 dirty:266 writeback:0 [ 1513.133970][T27334] slab_reclaimable:12182 slab_unreclaimable:114026 [ 1513.133970][T27334] mapped:37575 shmem:4284 pagetables:1363 [ 1513.133970][T27334] sec_pagetables:0 bounce:0 [ 1513.133970][T27334] kernel_misc_reclaimable:0 [ 1513.133970][T27334] free:1266503 free_pcp:8407 free_cma:0 [ 1513.137103][ T5919] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1513.169542][T27334] Node 0 active_anon:35480kB inactive_anon:0kB active_file:89480kB inactive_file:161544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150300kB dirty:1064kB writeback:0kB shmem:15600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12480kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1513.179845][ T5919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.221368][T27334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1513.264053][ T5919] usb 10-1: config 0 descriptor?? [ 1513.291043][T27334] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1513.394284][T27330] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1513.622258][T25322] usbhid 7-1:0.0: can't add hid device: -71 [ 1513.622379][T25322] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1513.635302][T25322] usb 7-1: USB disconnect, device number 45 [ 1513.636252][T27334] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1513.636343][T27334] Node 0 DMA32 free:1143964kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35632kB inactive_anon:0kB active_file:89480kB inactive_file:159728kB unevictable:1536kB writepending:1064kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:27428kB local_pcp:6420kB free_cma:0kB [ 1513.636431][T27334] lowmem_reserve[]: 0 0 1 1 1 [ 1513.636511][T27334] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1513.636607][T27334] lowmem_reserve[]: 0 0 0 0 0 [ 1513.636663][T27334] Node 1 Normal free:3906676kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5056kB local_pcp:5056kB free_cma:0kB [ 1513.636762][T27334] lowmem_reserve[]: 0 0 0 0 0 [ 1513.636819][T27334] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1513.637189][T27334] Node 0 DMA32: 904*4kB (UME) 941*8kB (UME) 676*16kB (UME) 471*32kB (UM) 303*64kB (UME) 192*128kB (UME) 84*256kB (UME) 70*512kB (UME) 40*1024kB (UM) 13*2048kB (UME) 229*4096kB (M) = 1143912kB [ 1513.637484][T27334] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 1513.637702][T27334] Node 1 Normal: 161*4kB (UME) 56*8kB (UME) 47*16kB (UME) 236*32kB (UME) 103*64kB (UME) 28*128kB (UME) 8*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (M) = 3906676kB [ 1513.637990][T27334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1513.638014][T27334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1513.638036][T27334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1513.638060][T27334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1513.638103][T27334] 67087 total pagecache pages [ 1513.638116][T27334] 0 pages in swap cache [ 1513.638127][T27334] Free swap = 124996kB [ 1513.638140][T27334] Total swap = 124996kB [ 1513.638153][T27334] 2097051 pages RAM [ 1513.638165][T27334] 0 pages HighMem/MovableOnly [ 1513.638176][T27334] 424872 pages reserved [ 1513.638188][T27334] 0 pages cma reserved [ 1513.686270][ T5941] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1513.731343][T27340] fuse: Invalid rootmode [ 1513.850514][ T1609] usb 6-1: USB disconnect, device number 20 [ 1514.006151][ T5941] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1514.006239][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.157701][ T5941] usb 5-1: config 0 descriptor?? [ 1514.299060][ T5919] hub 10-1:0.0: USB hub found [ 1514.299067][ T5941] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1514.346636][ T5919] hub 10-1:0.0: 2 ports detected [ 1514.465522][ T5941] gspca_spca508: reg_read err -32 [ 1514.824388][T27347] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1514.968743][T27348] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6962'. [ 1515.396519][ T5941] gspca_spca508: reg_read err -71 [ 1515.415898][ T5941] gspca_spca508: reg_read err -71 [ 1515.449274][ T5941] gspca_spca508: reg_read err -71 [ 1515.460157][ T5941] gspca_spca508: reg write: error -71 [ 1515.465611][ T5941] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1515.515115][ T5941] usb 5-1: USB disconnect, device number 58 [ 1516.122007][ T5919] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1516.324110][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.462306][ T5919] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1516.590962][ T5919] usb 7-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1516.656447][ T5947] usb 10-1: USB disconnect, device number 38 [ 1516.666734][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.749885][ T5919] usb 7-1: config 0 descriptor?? [ 1517.234243][ T5919] ortek 0003:1223:3F07.0013: unknown main item tag 0x6 [ 1517.255929][ T5919] ortek 0003:1223:3F07.0013: report_id 29495 is invalid [ 1517.284398][ T5919] ortek 0003:1223:3F07.0013: item 0 2 1 8 parsing failed [ 1517.299895][ T5919] ortek 0003:1223:3F07.0013: probe with driver ortek failed with error -22 [ 1517.451281][ T5947] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1517.462780][ T5941] usb 7-1: USB disconnect, device number 46 [ 1517.621180][T27384] fuse: Invalid rootmode [ 1518.537296][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 1518.624663][ T5947] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1518.677678][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.755855][ T5947] usb 6-1: config 0 descriptor?? [ 1518.808561][ T5947] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1518.856859][T27388] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 1518.982538][T27388] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6975'. [ 1519.021807][ T5947] gspca_sq930x: reg_r 001f failed -32 [ 1519.027298][ T5947] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 1521.165190][ T5947] usb 6-1: USB disconnect, device number 21 [ 1521.659156][ T5919] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1521.861682][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 1521.877381][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.889293][ T5947] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1521.897964][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1521.913021][ T5919] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1521.922806][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.931670][ T5919] usb 3-1: Product: syz [ 1522.418012][ T5919] usb 3-1: Manufacturer: syz [ 1522.422648][ T5919] usb 3-1: SerialNumber: syz [ 1522.460955][T23837] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1522.482293][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 1522.508624][ T5947] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1522.579147][ T5947] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1522.620346][ T5947] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1522.673083][ T5919] usb 3-1: 0:2 : does not exist [ 1522.698315][T23837] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1522.734471][ T5947] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1522.800786][ T5919] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1522.820309][T23837] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1522.831341][ T5947] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1522.864173][T23837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1522.909993][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.932545][T23837] usb 5-1: Product: syz [ 1522.946372][T23837] usb 5-1: Manufacturer: syz [ 1522.951009][T23837] usb 5-1: SerialNumber: syz [ 1522.979476][ T5947] usbtmc 6-1:16.0: bulk endpoints not found [ 1522.999936][ T5919] usb 3-1: USB disconnect, device number 29 [ 1523.256155][T23837] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1523.280848][T24985] udevd[24985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1523.837137][ C0] usblp0: nonzero write bulk status received: -71 [ 1523.850552][ T5919] usb 5-1: USB disconnect, device number 59 [ 1523.859879][ T5919] usblp0: removed [ 1524.019571][T23811] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1524.746517][T23837] usb 6-1: USB disconnect, device number 22 [ 1524.808667][T23811] usb 1-1: Using ep0 maxpacket: 32 [ 1524.846386][T23811] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1525.087630][T23811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.114723][T23811] usb 1-1: config 0 descriptor?? [ 1525.265833][T23811] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1525.359531][T23811] gspca_sq930x: reg_r 001f failed -32 [ 1525.381806][T23811] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 1526.769144][ T5919] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1526.775626][T25322] usb 1-1: USB disconnect, device number 26 [ 1527.068468][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 1527.122304][ T5919] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1527.130419][ T5919] usb 6-1: config 0 has no interface number 0 [ 1527.204748][ T5919] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1527.243729][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.289367][ T5919] usb 6-1: Product: syz [ 1527.317356][ T5919] usb 6-1: Manufacturer: syz [ 1527.327273][ T5919] usb 6-1: SerialNumber: syz [ 1527.363592][ T5919] usb 6-1: config 0 descriptor?? [ 1527.395786][ T5919] smsc95xx v2.0.0 [ 1527.412104][T25322] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1527.581723][T25322] usb 1-1: Using ep0 maxpacket: 32 [ 1527.647422][T25322] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1527.704500][T25322] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1527.733759][T25322] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1527.758982][T25322] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1527.828900][T25322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1527.846656][ T5919] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1527.854544][T25322] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1527.873930][T25322] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1527.891626][T25322] usb 1-1: Product: syz [ 1527.912845][ T5919] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1527.917582][T25322] usb 1-1: Manufacturer: syz [ 1527.975271][T25322] usb 1-1: SerialNumber: syz [ 1528.028742][T25322] usb 1-1: config 0 descriptor?? [ 1528.068861][T25322] ldusb 1-1:0.0: Interrupt in endpoint not found [ 1529.454150][T27499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1529.603277][T27499] 8021q: VLANs not supported on nlmon0 [ 1530.415230][T27509] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1530.423020][T27509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1530.434429][T27509] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1530.444042][T27509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1530.493264][ T5919] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 1530.718621][ T5919] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 1530.921714][ T5947] usb 1-1: USB disconnect, device number 27 [ 1530.933298][ T5919] usb 6-1: USB disconnect, device number 23 [ 1531.644545][ T5947] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1531.847239][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 1531.870299][ T5947] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1531.899583][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.061744][T27525] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1532.073482][T27524] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1532.729739][ T5947] usb 1-1: config 0 descriptor?? [ 1532.793543][ T5947] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1533.014254][ T5947] gspca_sq930x: reg_r 001f failed -32 [ 1533.047919][ T5947] sq930x 1-1:0.0: probe with driver sq930x failed with error -32 [ 1533.440270][ T5947] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1534.330889][T23837] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1534.475964][ T5947] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1534.499839][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.619487][T25322] usb 1-1: USB disconnect, device number 28 [ 1534.621734][ T5947] usb 6-1: Product: syz [ 1534.632246][ T5947] usb 6-1: Manufacturer: syz [ 1534.645956][ T5947] usb 6-1: SerialNumber: syz [ 1534.672721][ T5947] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1534.682375][T18677] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1534.715667][T23837] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1534.736100][T23837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.745646][ T5941] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1534.785482][T23762] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1534.845535][T23837] usb 5-1: config 0 descriptor?? [ 1534.861982][T18677] usb 7-1: Using ep0 maxpacket: 32 [ 1534.909912][ T5941] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1534.911059][T18677] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1534.944483][T23837] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1534.959558][T18677] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1534.992043][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.000207][T18677] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1535.000297][T18677] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1535.000325][T18677] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1535.000359][T18677] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1535.004627][T18677] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1535.049410][ T5941] usb 3-1: config 0 descriptor?? [ 1535.090822][ T5941] cp210x 3-1:0.0: cp210x converter detected [ 1535.200622][T23837] gspca_spca508: reg_read err -32 [ 1535.223157][T23837] gspca_spca508: reg_read err -71 [ 1535.247306][T23837] gspca_spca508: reg_read err -71 [ 1535.252532][T18677] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1535.279335][T23837] gspca_spca508: reg_read err -71 [ 1535.286244][T18677] usb 7-1: Product: syz [ 1535.291438][T23837] gspca_spca508: reg_read err -71 [ 1535.309267][T18677] usb 7-1: Manufacturer: syz [ 1535.316088][T23837] gspca_spca508: reg write: error -71 [ 1535.333429][T18677] usb 7-1: SerialNumber: syz [ 1535.344452][T23837] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 1535.368000][T18677] usb 7-1: config 0 descriptor?? [ 1535.382587][T23837] usb 5-1: USB disconnect, device number 60 [ 1535.396542][T18677] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1535.443846][T18677] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1535.534532][ T5941] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1535.573168][ T5941] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1535.618780][T27547] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1535.663990][ T5919] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1535.774249][ T5941] usb 3-1: USB disconnect, device number 30 [ 1535.790269][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1535.840980][ T5919] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1535.871944][ T5919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.916472][ T5941] cp210x 3-1:0.0: device disconnected [ 1535.916829][ T5919] usb 10-1: config 0 descriptor?? [ 1536.000426][ T5919] cp210x 10-1:0.0: cp210x converter detected [ 1536.189026][T23762] usb 6-1: Service connection timeout for: 256 [ 1536.196432][T23762] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1536.221446][T27565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1536.239266][T23762] ath9k_htc: Failed to initialize the device [ 1536.239918][T27565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.295466][T23762] usb 6-1: ath9k_htc: USB layer deinitialized [ 1536.313339][ T5919] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1536.427603][ T5941] usb 6-1: USB disconnect, device number 24 [ 1536.721258][T27584] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7039'. [ 1536.744142][T27583] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7039'. [ 1537.457825][ T5941] usb 7-1: USB disconnect, device number 47 [ 1537.477068][ T5941] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1537.855539][T23762] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1538.595734][T23762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.614273][T23762] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1538.623319][T23762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.735976][ T5941] usb 10-1: USB disconnect, device number 39 [ 1538.748426][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1538.751528][T23762] usb 1-1: config 0 descriptor?? [ 1538.769417][ T5941] cp210x 10-1:0.0: device disconnected [ 1538.863887][T23762] pwc: Askey VC010 type 2 USB webcam detected. [ 1539.374260][T23762] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1539.411875][T23762] pwc: recv_control_msg error -32 req 02 val 2700 [ 1539.434874][T23762] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1539.525280][T27631] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7053'. [ 1539.572787][T25322] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1539.690138][T27631] sd 0:0:1:0: PR command failed: 1026 [ 1539.696715][T27631] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1539.703829][T27631] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1540.187435][T25322] usb 5-1: Using ep0 maxpacket: 32 [ 1540.205983][T25322] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1540.237507][T25322] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1540.240554][T23762] pwc: recv_control_msg error -32 req 04 val 1000 [ 1540.312553][T25322] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1540.326700][ T5919] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1540.359739][T25322] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1540.376943][T23762] pwc: recv_control_msg error -32 req 04 val 1300 [ 1540.410149][T23762] pwc: recv_control_msg error -32 req 04 val 1400 [ 1540.424852][T27636] netlink: 'syz.6.7060': attribute type 4 has an invalid length. [ 1540.436836][T25322] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1540.465115][T25322] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1540.470073][T23762] pwc: recv_control_msg error -32 req 02 val 2000 [ 1540.490654][T25322] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1540.499175][T27636] netlink: 'syz.6.7060': attribute type 4 has an invalid length. [ 1540.518032][T23762] pwc: recv_control_msg error -32 req 02 val 2100 [ 1540.523313][T25322] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1540.534540][T23762] pwc: recv_control_msg error -32 req 04 val 1500 [ 1540.535463][T25322] usb 5-1: Product: syz [ 1540.555349][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1540.565598][T27638] 8021q: VLANs not supported on nlmon0 [ 1540.568579][T25322] usb 5-1: Manufacturer: syz [ 1540.582061][ T5919] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1540.601436][T25322] usb 5-1: SerialNumber: syz [ 1540.603120][ T5919] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.619215][T23762] pwc: recv_control_msg error -32 req 02 val 2500 [ 1540.625150][T25322] usb 5-1: config 0 descriptor?? [ 1540.667947][T23762] pwc: recv_control_msg error -32 req 02 val 2400 [ 1540.669493][T25322] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1540.691856][T23762] pwc: recv_control_msg error -32 req 02 val 2600 [ 1540.713948][ T5919] usb 10-1: config 0 descriptor?? [ 1540.732922][T23762] pwc: recv_control_msg error -32 req 02 val 2900 [ 1540.769590][T25322] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1540.770248][ T5919] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1541.032260][T23762] pwc: recv_control_msg error -71 req 04 val 1100 [ 1541.040073][T23762] pwc: recv_control_msg error -71 req 04 val 1200 [ 1542.201131][T23762] pwc: Registered as video103. [ 1542.394974][T23762] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 1542.450494][T23762] usb 1-1: USB disconnect, device number 29 [ 1542.575859][T23837] usb 5-1: USB disconnect, device number 61 [ 1542.590182][T23837] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1542.605779][ T5855] Bluetooth: hci5: hardware error 0x02 [ 1543.201637][T27660] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1543.209718][T27660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1543.221966][T27660] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1543.229839][T27660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1543.356184][ T5919] usb 10-1: USB disconnect, device number 40 [ 1544.326408][T27670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1544.492274][T27670] sd 0:0:1:0: PR command failed: 1026 [ 1544.500098][T27670] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1544.509099][T27670] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1544.816653][ T5855] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1545.201670][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7074'. [ 1545.243020][ T5919] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1545.255122][T27676] 8021q: VLANs not supported on nlmon0 [ 1545.263995][T23762] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1545.340433][T27680] vxcan1: entered allmulticast mode [ 1545.445706][T23762] usb 3-1: Using ep0 maxpacket: 8 [ 1545.454812][T23762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1545.508312][T23762] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1545.526630][T23762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.551318][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.564496][ T5919] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1545.585392][T23762] usb 3-1: config 0 descriptor?? [ 1545.614207][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.638144][T18677] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1545.662882][ T5919] usb 5-1: config 0 descriptor?? [ 1545.673980][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 1545.810825][T18677] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.822017][T18677] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1545.835975][T18677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.846462][T23762] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1545.866687][T23762] usb 3-1: USB disconnect, device number 31 [ 1545.884468][T18677] usb 10-1: config 0 descriptor?? [ 1545.899092][T18677] pwc: Askey VC010 type 2 USB webcam detected. [ 1545.908100][T25322] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1546.045932][T23811] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1546.071383][T27687] syz.0.7079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1546.077904][T25322] usb 7-1: Using ep0 maxpacket: 8 [ 1546.092393][T25322] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1546.122979][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1546.173905][ T5919] pwc: recv_control_msg error -32 req 02 val 2700 [ 1546.194584][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1546.204633][T25322] usb 7-1: config 0 has no interface number 0 [ 1546.210903][ T5919] pwc: recv_control_msg error -32 req 04 val 1000 [ 1546.213003][T25322] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1546.221747][ T5919] pwc: recv_control_msg error -32 req 04 val 1300 [ 1546.244305][T25322] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1546.255747][ T5919] pwc: recv_control_msg error -32 req 04 val 1400 [ 1546.264936][T23811] usb 6-1: Using ep0 maxpacket: 32 [ 1546.272818][T25322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.284813][T23811] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1546.295955][T23811] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1546.310436][T23811] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1546.325017][T25322] usb 7-1: config 0 descriptor?? [ 1546.345338][T25322] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1546.357965][T23811] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1546.382994][T23811] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1546.409658][T18677] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1546.417597][T18677] pwc: recv_control_msg error -32 req 02 val 2700 [ 1546.425618][T23811] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1546.435562][T18677] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1546.440958][T23811] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1546.452656][T23811] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1546.470610][T23811] usb 6-1: Product: syz [ 1546.472613][ T5919] pwc: recv_control_msg error -71 req 02 val 2100 [ 1546.478171][T23811] usb 6-1: Manufacturer: syz [ 1546.491354][T18677] pwc: recv_control_msg error -32 req 04 val 1000 [ 1546.500618][ T5919] pwc: recv_control_msg error -71 req 04 val 1500 [ 1546.509265][T18677] pwc: recv_control_msg error -32 req 04 val 1300 [ 1546.516930][T23811] usb 6-1: SerialNumber: syz [ 1546.519313][ T5919] pwc: recv_control_msg error -71 req 02 val 2500 [ 1546.532526][T18677] pwc: recv_control_msg error -32 req 04 val 1400 [ 1546.540534][ T5919] pwc: recv_control_msg error -71 req 02 val 2400 [ 1546.540933][T23811] usb 6-1: config 0 descriptor?? [ 1546.565814][T18677] pwc: recv_control_msg error -32 req 02 val 2000 [ 1546.576504][T23811] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1546.577477][ T5947] usb 7-1: USB disconnect, device number 48 [ 1546.594870][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 1546.602537][T18677] pwc: recv_control_msg error -32 req 02 val 2100 [ 1546.610026][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 1546.617916][T18677] pwc: recv_control_msg error -32 req 04 val 1500 [ 1546.630925][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 1546.639406][T18677] pwc: recv_control_msg error -32 req 02 val 2500 [ 1546.647833][T18677] pwc: recv_control_msg error -32 req 02 val 2400 [ 1546.657656][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 1546.666611][T18677] pwc: recv_control_msg error -32 req 02 val 2600 [ 1546.673631][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 1546.679439][T23811] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1546.693102][T18677] pwc: recv_control_msg error -32 req 02 val 2900 [ 1546.703058][ T5919] pwc: Registered as video103. [ 1546.713930][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 1546.734831][ T5919] usb 5-1: USB disconnect, device number 62 [ 1546.816965][T27685] ldusb 6-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1546.926213][T18677] pwc: recv_control_msg error -71 req 04 val 1100 [ 1546.940976][T18677] pwc: recv_control_msg error -71 req 04 val 1200 [ 1546.950935][T18677] pwc: Registered as video103. [ 1546.970738][T18677] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input29 [ 1547.010818][T18677] usb 10-1: USB disconnect, device number 41 [ 1547.690859][ T5947] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1547.862484][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 1548.053250][T27714] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1548.132039][T27715] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1548.315671][T27715] sd 0:0:1:0: PR command failed: 1026 [ 1548.323519][T27715] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1548.330527][T27715] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1548.857644][T27714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1548.869143][T27714] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1548.882972][T27714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1548.944324][ T5947] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1549.058128][ T5947] usb 1-1: config 0 has no interface number 0 [ 1549.319383][ T5947] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1549.420073][T27720] input: syz0 as /devices/virtual/input/input30 [ 1549.442379][ T5947] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1549.470786][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.497546][T23811] usb 6-1: USB disconnect, device number 25 [ 1549.519002][ T5947] usb 1-1: Product: syz [ 1549.519983][T26460] Bluetooth: hci3: command 0x1003 tx timeout [ 1549.532052][ T5855] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1549.540860][ T5947] usb 1-1: Manufacturer: syz [ 1549.556054][ T5947] usb 1-1: SerialNumber: syz [ 1549.563437][T23811] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1549.599361][ T5947] usb 1-1: config 0 descriptor?? [ 1549.695831][ T5947] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1549.757966][ T5947] em28xx 1-1:0.132: Video interface 132 found: [ 1550.142089][ T5947] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1550.251262][T27734] syzkaller1: entered promiscuous mode [ 1550.267792][T27734] syzkaller1: entered allmulticast mode [ 1550.634080][T27740] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1551.000775][ T5947] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1551.028733][ T5947] em28xx 1-1:0.132: board has no eeprom [ 1551.126992][ T5947] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1551.194666][ T5947] em28xx 1-1:0.132: analog set to bulk mode. [ 1551.205640][T27740] usb 10-1: Using ep0 maxpacket: 8 [ 1551.217102][T27740] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1551.236853][T27740] usb 10-1: config 0 has no interface number 0 [ 1551.276782][ T5947] usb 1-1: USB disconnect, device number 30 [ 1551.292693][T27740] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1551.328255][ T5947] em28xx 1-1:0.132: Disconnecting em28xx [ 1551.379163][T27740] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1551.397823][ T5919] em28xx 1-1:0.132: Registering V4L2 extension [ 1551.413517][T27740] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.455580][T27740] usb 10-1: config 0 descriptor?? [ 1551.488484][T27740] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 1551.703017][T27740] usb 10-1: USB disconnect, device number 42 [ 1551.861269][ T1609] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1551.937891][T27761] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7101'. [ 1552.114597][T27761] sd 0:0:1:0: PR command failed: 1026 [ 1552.122504][T27761] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1552.131029][T27761] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1552.272823][ T1609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.585412][ T5919] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1552.627624][ T5919] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1552.639181][T27767] binder_alloc: 27764: binder_alloc_buf, no vma [ 1552.676822][ T5919] em28xx 1-1:0.132: No AC97 audio processor [ 1552.699975][ T5919] usb 1-1: Decoder not found [ 1552.708640][ T5919] em28xx 1-1:0.132: failed to create media graph [ 1552.723839][ T5919] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1552.754074][ T5919] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1552.771460][ T5947] em28xx 1-1:0.132: Closing input extension [ 1552.795543][ T5947] em28xx 1-1:0.132: Freeing device [ 1552.856917][ T1609] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1552.869284][ T1609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.893428][ T1609] usb 3-1: config 0 descriptor?? [ 1552.911797][ T1609] pwc: Askey VC010 type 2 USB webcam detected. [ 1553.592408][T27775] input: syz0 as /devices/virtual/input/input31 [ 1553.796327][ T1609] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1553.824494][ T1609] pwc: recv_control_msg error -32 req 02 val 2700 [ 1553.837943][ T5919] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1553.861928][ T1609] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1553.881884][ T1609] pwc: recv_control_msg error -32 req 04 val 1000 [ 1553.924434][ T1609] pwc: recv_control_msg error -32 req 04 val 1300 [ 1553.961120][ T1609] pwc: recv_control_msg error -32 req 04 val 1400 [ 1553.989725][ T1609] pwc: recv_control_msg error -32 req 02 val 2000 [ 1553.997047][ T1609] pwc: recv_control_msg error -32 req 02 val 2100 [ 1554.005950][ T1609] pwc: recv_control_msg error -32 req 04 val 1500 [ 1554.015276][ T1609] pwc: recv_control_msg error -32 req 02 val 2500 [ 1554.031823][ T1609] pwc: recv_control_msg error -32 req 02 val 2400 [ 1554.054254][ T1609] pwc: recv_control_msg error -32 req 02 val 2600 [ 1554.061682][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 1554.063997][ T1609] pwc: recv_control_msg error -32 req 02 val 2900 [ 1554.083702][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1554.143096][ T5919] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1554.165902][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.206666][ T5919] usb 5-1: config 0 descriptor?? [ 1554.212809][T23811] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1554.295290][ T1609] pwc: recv_control_msg error -71 req 04 val 1100 [ 1554.309129][ T1609] pwc: recv_control_msg error -71 req 04 val 1200 [ 1554.406463][T23811] usb 7-1: Using ep0 maxpacket: 32 [ 1554.440325][T23811] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1554.469989][ T5919] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1554.471363][T23811] usb 7-1: config 0 has no interface number 0 [ 1554.505356][ T1609] pwc: Registered as video103. [ 1554.587712][T23811] usb 7-1: too many endpoints for config 0 interface 51 altsetting 17: 253, using maximum allowed: 30 [ 1554.695669][ T1609] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 1554.717826][T23811] usb 7-1: config 0 interface 51 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1554.819170][ T5941] usb 5-1: USB disconnect, device number 63 [ 1554.879063][T23811] usb 7-1: config 0 interface 51 has no altsetting 0 [ 1554.988937][T23811] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1555.087678][T23811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.118777][ T1609] usb 3-1: USB disconnect, device number 32 [ 1555.137934][T23811] usb 7-1: Product: syz [ 1555.167105][T23811] usb 7-1: Manufacturer: syz [ 1555.183027][T23811] usb 7-1: SerialNumber: syz [ 1555.215718][T23811] usb 7-1: config 0 descriptor?? [ 1555.268488][T23811] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1555.492788][T23811] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1555.553951][T23811] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1555.878663][T27801] syzkaller1: entered promiscuous mode [ 1555.895167][T27801] syzkaller1: entered allmulticast mode [ 1556.247692][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1556.252775][ T5919] usb 7-1: USB disconnect, device number 49 [ 1556.507265][T27813] sd 0:0:1:0: PR command failed: 1026 [ 1556.507583][T27813] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1556.507817][T27813] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1556.932022][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1556.934951][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1556.935765][ T5919] quatech2 7-1:0.51: device disconnected [ 1557.087697][ T5947] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1557.269459][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 1557.297573][ T5947] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1557.321194][ T5947] usb 6-1: config 0 has no interface number 0 [ 1557.346885][ T5947] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1557.373429][ T5947] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1557.405405][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.434507][ T5947] usb 6-1: config 0 descriptor?? [ 1557.452666][ T5947] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1558.099734][T23811] usb 6-1: USB disconnect, device number 26 [ 1558.426210][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7127'. [ 1558.457555][T27835] 8021q: VLANs not supported on nlmon0 [ 1558.564015][T27840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7128'. [ 1558.575054][T27840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7128'. [ 1558.606505][T27840] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7128'. [ 1558.648543][ T5947] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1559.158873][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.196146][ T5947] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1559.241885][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.324459][ T5947] usb 7-1: config 0 descriptor?? [ 1559.379808][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 1559.783824][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1559.812823][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 1559.847986][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1559.877020][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 1559.912233][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 1559.957733][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 1559.965746][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 1559.979634][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 1560.007871][ T5947] pwc: recv_control_msg error -32 req 04 val 1500 [ 1560.036981][ T5947] pwc: recv_control_msg error -32 req 02 val 2500 [ 1560.094769][ T5947] pwc: recv_control_msg error -32 req 02 val 2400 [ 1560.134937][ T5947] pwc: recv_control_msg error -32 req 02 val 2600 [ 1560.142777][ T5947] pwc: recv_control_msg error -32 req 02 val 2900 [ 1560.253744][ T5941] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1560.285775][T23811] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1560.381423][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 1560.419563][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 1560.424558][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 1560.457276][T23811] usb 6-1: Using ep0 maxpacket: 16 [ 1560.493742][T23811] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1560.551779][ T5947] pwc: Registered as video103. [ 1560.560558][ T5941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1560.597079][T23811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.603821][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35 [ 1560.610512][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.809995][T18677] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1560.816484][T23811] usb 6-1: config 0 descriptor?? [ 1561.050210][ T5941] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1561.174444][T23811] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1561.183569][ T5941] pvrusb2: ********** [ 1561.187657][ T5941] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1561.206097][ T5947] usb 7-1: USB disconnect, device number 50 [ 1561.216815][ T5941] pvrusb2: Important functionality might not be entirely working. [ 1561.290485][ T5941] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1561.330370][T18677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.344725][ T5941] pvrusb2: ********** [ 1561.352264][ T2335] pvrusb2: Invalid write control endpoint [ 1561.403982][T18677] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.447896][T18677] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1561.510463][T18677] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1561.543085][T18677] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.587243][T27869] pvrusb2: Invalid write control endpoint [ 1561.611151][T18677] usb 10-1: config 0 descriptor?? [ 1561.619205][T27885] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7143'. [ 1561.621531][ T5919] usb 3-1: USB disconnect, device number 33 [ 1561.633819][ T2335] pvrusb2: Invalid write control endpoint [ 1561.639853][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1561.652183][T27885] 8021q: VLANs not supported on nlmon0 [ 1561.724519][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1561.754488][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1561.782425][ T2335] pvrusb2: Device being rendered inoperable [ 1561.794331][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1561.824947][ T1609] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1561.854455][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1561.892138][ T2335] pvrusb2: Attached sub-driver cx25840 [ 1561.911849][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1561.948270][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1561.997163][ T1609] usb 1-1: Using ep0 maxpacket: 8 [ 1562.042527][ T1609] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1562.062132][ T1609] usb 1-1: config 0 has no interface number 0 [ 1562.066262][T18677] usbhid 10-1:0.0: can't add hid device: -71 [ 1562.079379][ T1609] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1562.119403][T18677] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1562.134908][ T1609] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1562.152302][T18677] usb 10-1: USB disconnect, device number 43 [ 1562.212198][ T1609] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1562.242865][T27892] binder: 27890:27892 unknown command 0 [ 1562.263706][ T1609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.286569][T27892] binder: 27890:27892 ioctl c0306201 200000000080 returned -22 [ 1562.307692][ T1609] usb 1-1: config 0 descriptor?? [ 1562.335859][ T1609] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1562.403903][T27895] 9pnet_fd: Insufficient options for proto=fd [ 1562.563889][T27886] iowarrior 1-1:0.1: Error -90 while submitting URB [ 1562.578024][ T5941] usb 1-1: USB disconnect, device number 31 [ 1562.755769][ T1609] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1562.979554][ T1609] usb 7-1: Using ep0 maxpacket: 8 [ 1563.022852][ T1609] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1563.068904][ T1609] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1563.097885][ T1609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.174599][ T1609] usb 7-1: config 0 descriptor?? [ 1563.322205][T25322] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1563.331458][T27924] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1563.339353][T27924] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1563.350968][T27924] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1563.360494][T27924] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1563.556930][T25322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.652175][T25322] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1563.668561][T25322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.707532][ T1609] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1563.912775][T23811] gspca_sonixj: reg_w1 err -71 [ 1563.922925][T23811] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1564.077565][T23811] usb 6-1: USB disconnect, device number 27 [ 1564.087120][T25322] usb 5-1: config 0 descriptor?? [ 1564.103322][ T1609] usb 7-1: USB disconnect, device number 51 [ 1564.118624][T25322] pwc: Askey VC010 type 2 USB webcam detected. [ 1564.786170][T25322] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1564.835443][T25322] pwc: recv_control_msg error -32 req 02 val 2700 [ 1565.669067][T25322] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1566.004052][T27931] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1566.012908][T27931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1566.024310][T27931] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1566.033759][T27931] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1566.036526][T25322] pwc: recv_control_msg error -32 req 04 val 1000 [ 1566.180380][T25322] pwc: recv_control_msg error -32 req 04 val 1300 [ 1566.327350][T25322] pwc: recv_control_msg error -32 req 04 val 1400 [ 1566.402277][T25322] pwc: recv_control_msg error -32 req 02 val 2000 [ 1566.493026][T25322] pwc: recv_control_msg error -32 req 02 val 2100 [ 1566.551039][T25322] pwc: recv_control_msg error -32 req 04 val 1500 [ 1566.564793][T25322] pwc: recv_control_msg error -32 req 02 val 2500 [ 1566.651018][T25322] pwc: recv_control_msg error -32 req 02 val 2400 [ 1566.659669][T25322] pwc: recv_control_msg error -32 req 02 val 2600 [ 1566.680976][T25322] pwc: recv_control_msg error -32 req 02 val 2900 [ 1566.706361][T27948] binder: BINDER_SET_CONTEXT_MGR already set [ 1566.747611][T27948] binder: 27946:27948 ioctl 4018620d 200000004a80 returned -16 [ 1566.904982][T27957] fuse: Unknown parameter '0x0000000000000006' [ 1566.921207][T25322] pwc: recv_control_msg error -71 req 04 val 1100 [ 1567.020788][T18677] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1567.231360][T18677] usb 6-1: Using ep0 maxpacket: 16 [ 1567.376227][T18677] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1567.555751][T18677] usb 6-1: config 0 has no interface number 0 [ 1567.720203][T25322] pwc: recv_control_msg error -71 req 04 val 1200 [ 1567.736742][T25322] pwc: Registered as video103. [ 1567.803237][T25322] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 1567.813599][T18677] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1567.813634][T18677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.813659][T18677] usb 6-1: Product: syz [ 1567.813685][T18677] usb 6-1: Manufacturer: syz [ 1567.813703][T18677] usb 6-1: SerialNumber: syz [ 1567.846347][T18677] usb 6-1: config 0 descriptor?? [ 1567.937642][T18677] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1567.951028][T25322] usb 5-1: USB disconnect, device number 64 [ 1568.463368][T27974] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1568.471405][T27974] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1568.487619][T27974] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1568.496717][T27974] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1568.632266][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.645563][T25322] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1568.680768][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1568.837531][T25322] usb 3-1: Using ep0 maxpacket: 16 [ 1568.969312][T25322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1568.974265][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.023369][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.043757][T25322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.123363][T25322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1569.198556][T25322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.228288][T25322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1569.271392][T25322] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.273429][T18677] gspca_spca1528: reg_w err -71 [ 1569.771255][T18677] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1569.898684][T18677] usb 6-1: USB disconnect, device number 28 [ 1569.960943][T25322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1570.006621][T25322] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1570.017897][T25322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.028123][T25322] usb 3-1: Product: syz [ 1570.032289][T25322] usb 3-1: Manufacturer: syz [ 1570.047134][T25322] usb 3-1: SerialNumber: syz [ 1570.320469][T18677] usb 3-1: USB disconnect, device number 34 [ 1570.327306][ T5947] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1570.462136][T28003] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.505480][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 1570.515116][T28003] binder: 28000:28003 ioctl 4018620d 200000004a80 returned -16 [ 1570.529168][ T5947] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.598214][ T5947] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1570.612217][T28007] fuse: Unknown parameter '0x0000000000000006' [ 1570.785928][ T5947] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1570.934028][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.056196][ T5947] usb 10-1: Product: syz [ 1571.152697][ T5947] usb 10-1: Manufacturer: syz [ 1571.246170][ T5947] usb 10-1: SerialNumber: syz [ 1571.723155][T25322] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1571.882326][ T5947] usb 10-1: 0:2 : does not exist [ 1571.908054][T28023] fuse: Bad value for 'fd' [ 1571.919697][ T5947] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1572.240988][T25322] usb 1-1: Using ep0 maxpacket: 32 [ 1572.259753][T25322] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1572.263710][ T5947] usb 10-1: USB disconnect, device number 44 [ 1572.292890][T25322] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1572.312692][T28025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7193'. [ 1572.322669][T28025] 8021q: VLANs not supported on nlmon0 [ 1572.392475][T24985] udevd[24985]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.437356][T28015] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1572.448095][T28015] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1572.457824][T28015] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1572.467014][T28015] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1572.490060][T25322] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1572.522089][T25322] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1572.815094][T25322] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1572.889862][ T5919] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1572.893971][T25322] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1573.067389][T25322] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1573.146372][T25322] usb 1-1: Product: syz [ 1573.153210][T25322] usb 1-1: Manufacturer: syz [ 1573.191295][T25322] usb 1-1: SerialNumber: syz [ 1573.250849][ T5919] usb 6-1: config 0 has an invalid interface number: 159 but max is 0 [ 1573.261302][T25322] usb 1-1: config 0 descriptor?? [ 1573.288378][T25322] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1573.338558][ T5919] usb 6-1: config 0 has no interface number 0 [ 1573.570871][T25322] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1573.969701][T23811] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1574.057933][ T5919] usb 6-1: New USB device found, idVendor=17ef, idProduct=3899, bcdDevice=71.0d [ 1574.073608][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.084478][ T5919] usb 6-1: config 0 descriptor?? [ 1574.092870][ T5919] usb-storage 6-1:0.159: USB Mass Storage device detected [ 1574.145389][ T5919] usb-storage 6-1:0.159: Quirks match for vid 17ef pid 3899: 800000 [ 1574.214280][T23811] usb 7-1: device descriptor read/64, error -71 [ 1574.317468][ T5919] usb 6-1: USB disconnect, device number 29 [ 1574.379271][T28055] binder: BINDER_SET_CONTEXT_MGR already set [ 1574.391642][T28055] binder: 28054:28055 ioctl 4018620d 200000004a80 returned -16 [ 1574.472138][T23811] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1574.621686][T23811] usb 7-1: device descriptor read/64, error -71 [ 1574.713879][T25322] usb 1-1: USB disconnect, device number 32 [ 1574.739122][T23811] usb usb7-port1: attempt power cycle [ 1574.760730][T25322] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1575.069882][ T5941] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1575.108713][T28071] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1575.118283][T28071] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1575.128777][T28071] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1575.138198][T28071] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1575.328779][T23811] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1575.713273][T23811] usb 7-1: device descriptor read/8, error -71 [ 1575.861856][ T5941] usb 10-1: Using ep0 maxpacket: 16 [ 1575.869008][ T5941] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.968765][T23811] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 1576.000437][ T5941] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1576.018586][T23811] usb 7-1: device descriptor read/8, error -71 [ 1576.049044][ T5941] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1576.096953][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.112749][ T5941] usb 10-1: Product: syz [ 1576.119367][ T5941] usb 10-1: Manufacturer: syz [ 1576.124558][ T5941] usb 10-1: SerialNumber: syz [ 1576.150793][T23811] usb usb7-port1: unable to enumerate USB device [ 1576.167867][T28081] binder: 28080:28081 ioctl 4018620d 0 returned -22 [ 1576.185962][T28081] binder: 28080:28081 ioctl c0306201 2000000003c0 returned -14 [ 1576.668752][ T5941] usb 10-1: 0:2 : does not exist [ 1577.127604][ T5941] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1577.173777][ T5941] usb 10-1: USB disconnect, device number 45 [ 1577.379033][T24985] udevd[24985]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.399023][T28091] binder: 28090:28091 unknown command 0 [ 1577.417540][T28091] binder: 28090:28091 ioctl c0306201 200000000080 returned -22 [ 1577.502600][T28096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1577.509156][T28096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1577.553200][T28096] vhci_hcd vhci_hcd.0: Device attached [ 1577.569767][T28097] vhci_hcd: connection closed [ 1577.570514][ T2965] vhci_hcd: stop threads [ 1577.579422][ T2965] vhci_hcd: release socket [ 1577.599964][ T2965] vhci_hcd: disconnect device [ 1578.162148][T28108] binder: BINDER_SET_CONTEXT_MGR already set [ 1578.181560][T28108] binder: 28107:28108 ioctl 4018620d 200000004a80 returned -16 [ 1578.410023][T28114] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1578.419622][T28114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1578.431779][T28114] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1578.441504][T28114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1579.433936][T28127] binder: 28126:28127 ioctl 4018620d 0 returned -22 [ 1579.442285][T18677] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 1579.507015][ T5947] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1579.679933][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 1579.737275][T18677] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1579.814021][T28127] binder: 28126:28127 ioctl c0306201 2000000003c0 returned -14 [ 1579.880458][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1579.995937][T18677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1580.044844][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.136012][T18677] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1580.145664][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1580.178173][T18677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.192351][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.255516][T18677] usb 3-1: config 0 descriptor?? [ 1580.271367][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1580.326720][T28120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1580.342726][T18677] hub 3-1:0.0: USB hub found [ 1580.362456][ T5941] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1580.369918][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.411562][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1580.443659][T28136] binder: 28134:28136 unknown command 0 [ 1580.445517][ T5947] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1580.452493][T28136] binder: 28134:28136 ioctl c0306201 200000000080 returned -22 [ 1580.489713][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.507025][ T5947] usb 5-1: Product: syz [ 1580.513650][ T5947] usb 5-1: Manufacturer: syz [ 1580.518357][ T5947] usb 5-1: SerialNumber: syz [ 1580.534783][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 1580.547957][ T5941] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1580.576318][ T5941] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1580.590331][T18677] hub 3-1:0.0: 2 ports detected [ 1580.625253][ T5941] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1580.652093][ T5941] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1580.667504][ T5941] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1580.679130][T18743] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1580.683879][ T30] audit: type=1326 audit(1753932301.147:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1580.689069][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.760656][ T30] audit: type=1326 audit(1753932301.193:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f752038d310 code=0x7ffc0000 [ 1580.832872][ T30] audit: type=1326 audit(1753932301.193:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f75203901d7 code=0x7ffc0000 [ 1580.840207][ T5947] usb 5-1: USB disconnect, device number 65 [ 1580.886664][T18743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.911854][T18743] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1580.925762][ T30] audit: type=1326 audit(1753932301.193:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1580.966874][T18743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.979040][ T5941] usb 6-1: usb_control_msg returned -32 [ 1580.995153][ T5941] usbtmc 6-1:16.0: can't read capabilities [ 1581.017011][T18743] usb 1-1: config 0 descriptor?? [ 1581.039351][ T5941] usb 6-1: USB disconnect, device number 30 [ 1581.048084][ T30] audit: type=1326 audit(1753932301.193:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f75203901d7 code=0x7ffc0000 [ 1581.090500][ T30] audit: type=1326 audit(1753932301.193:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f752038d60a code=0x7ffc0000 [ 1581.137983][T18743] pwc: Askey VC010 type 2 USB webcam detected. [ 1581.200291][ T30] audit: type=1326 audit(1753932301.193:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1581.236898][ T30] audit: type=1326 audit(1753932301.193:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1581.298062][ T30] audit: type=1326 audit(1753932301.193:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1581.341872][ T30] audit: type=1326 audit(1753932301.193:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28137 comm="syz.9.7234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f752038e9a9 code=0x7ffc0000 [ 1581.424501][T28144] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1581.431050][T28144] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1581.445070][T28144] vhci_hcd vhci_hcd.0: Device attached [ 1581.454475][T28145] vhci_hcd: connection closed [ 1581.455296][T18727] vhci_hcd: stop threads [ 1581.471795][T18727] vhci_hcd: release socket [ 1581.480116][T18727] vhci_hcd: disconnect device [ 1581.554308][T18743] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1581.563918][T18743] pwc: recv_control_msg error -32 req 02 val 2700 [ 1581.587244][T18743] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1581.608762][T18743] pwc: recv_control_msg error -32 req 04 val 1000 [ 1581.626034][T18743] pwc: recv_control_msg error -32 req 04 val 1300 [ 1581.648814][T18743] pwc: recv_control_msg error -32 req 04 val 1400 [ 1581.909168][T18743] pwc: recv_control_msg error -71 req 02 val 2100 [ 1581.934620][T18743] pwc: recv_control_msg error -71 req 04 val 1500 [ 1581.952169][T18743] pwc: recv_control_msg error -71 req 02 val 2500 [ 1581.979646][T18743] pwc: recv_control_msg error -71 req 02 val 2400 [ 1581.991572][T18743] pwc: recv_control_msg error -71 req 02 val 2600 [ 1582.062320][T18743] pwc: recv_control_msg error -71 req 02 val 2900 [ 1582.072011][T18743] pwc: recv_control_msg error -71 req 02 val 2800 [ 1582.149790][ T5919] usb 3-1: USB disconnect, device number 35 [ 1582.151613][T18743] pwc: recv_control_msg error -71 req 04 val 1100 [ 1582.413794][ T5947] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1582.474542][T18743] pwc: recv_control_msg error -71 req 04 val 1200 [ 1582.614067][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.421389][T18743] pwc: Registered as video103. [ 1583.507139][T18743] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 1583.527786][ T5947] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1583.623989][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.655217][T18743] usb 1-1: USB disconnect, device number 33 [ 1583.705586][ T5947] usb 5-1: config 0 descriptor?? [ 1583.825787][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 1583.915147][T28175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1584.187295][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1584.239194][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 1584.272087][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1584.307461][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 1584.330594][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 1584.360868][ T5941] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1584.365956][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 1584.398056][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 1584.450388][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 1584.471884][ T5947] pwc: recv_control_msg error -32 req 04 val 1500 [ 1584.529673][ T5947] pwc: recv_control_msg error -32 req 02 val 2500 [ 1584.531957][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 1584.569021][ T5941] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1584.578903][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.595610][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1584.617643][ T5941] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1584.629268][ T5947] pwc: recv_control_msg error -32 req 02 val 2400 [ 1584.634616][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.668176][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1584.688376][ T5941] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1584.709801][ T5947] pwc: recv_control_msg error -32 req 02 val 2600 [ 1584.727993][ T5947] pwc: recv_control_msg error -32 req 02 val 2900 [ 1584.745536][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.760592][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1584.819927][ T5941] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1584.901902][ T5941] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1584.913711][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.935399][ T5941] usb 7-1: Product: syz [ 1584.945779][ T5941] usb 7-1: Manufacturer: syz [ 1584.963130][ T5941] usb 7-1: SerialNumber: syz [ 1585.023093][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 1585.046477][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 1585.079075][ T5947] pwc: Registered as video103. [ 1585.162437][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 1585.230882][ T5919] usb 7-1: USB disconnect, device number 56 [ 1585.372327][ T5947] usb 5-1: USB disconnect, device number 66 [ 1585.470810][T23837] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1585.691985][T23837] usb 10-1: Using ep0 maxpacket: 32 [ 1585.816739][T23837] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1585.967015][T23837] usb 10-1: config 0 has no interface number 0 [ 1586.072389][T23837] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1586.290112][T23837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.474979][T23837] usb 10-1: Product: syz [ 1586.586546][T23837] usb 10-1: Manufacturer: syz [ 1586.686706][T23837] usb 10-1: SerialNumber: syz [ 1586.725901][T26460] Bluetooth: hci3: command 0x1003 tx timeout [ 1586.733091][ T5855] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1586.894281][T23837] usb 10-1: config 0 descriptor?? [ 1587.006148][T23837] smsc95xx v2.0.0 [ 1587.336929][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1587.336950][ T30] audit: type=1326 audit(1753932307.386:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1587.368860][T23811] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1587.388367][ T30] audit: type=1326 audit(1753932307.386:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcedf8d310 code=0x7ffc0000 [ 1587.444523][T23837] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1587.521305][T23837] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1587.647399][T23811] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.721645][T23811] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1587.728496][ T30] audit: type=1326 audit(1753932307.386:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efcedf901d7 code=0x7ffc0000 [ 1587.732691][T23811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.779165][ T30] audit: type=1326 audit(1753932307.386:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1587.810934][T23811] usb 3-1: config 0 descriptor?? [ 1587.819730][ T30] audit: type=1326 audit(1753932307.386:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efcedf901d7 code=0x7ffc0000 [ 1587.820263][T23837] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1587.849535][T23811] pwc: Askey VC010 type 2 USB webcam detected. [ 1587.862721][ T30] audit: type=1326 audit(1753932307.386:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7efcedf8d60a code=0x7ffc0000 [ 1587.913986][T23837] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32 [ 1587.920833][ T30] audit: type=1326 audit(1753932307.386:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1588.023663][ T30] audit: type=1326 audit(1753932307.386:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1588.067521][ T30] audit: type=1326 audit(1753932307.386:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1588.092237][ T30] audit: type=1326 audit(1753932307.386:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28215 comm="syz.6.7263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efcedf8e9a9 code=0x7ffc0000 [ 1588.330531][T23811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1588.336678][T23837] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1588.344911][T23811] pwc: recv_control_msg error -32 req 02 val 2700 [ 1588.382542][T23811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1588.407785][T23811] pwc: recv_control_msg error -32 req 04 val 1000 [ 1588.436748][T23811] pwc: recv_control_msg error -32 req 04 val 1300 [ 1588.461833][T23811] pwc: recv_control_msg error -32 req 04 val 1400 [ 1588.530963][T23837] usb 7-1: Using ep0 maxpacket: 32 [ 1588.563868][T23837] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1588.593076][T23837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.634668][T23837] usb 7-1: config 0 descriptor?? [ 1588.662734][T23837] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1588.702536][T23811] pwc: recv_control_msg error -71 req 02 val 2100 [ 1588.714463][T23811] pwc: recv_control_msg error -71 req 04 val 1500 [ 1588.730935][T23811] pwc: recv_control_msg error -71 req 02 val 2500 [ 1588.765719][T23811] pwc: recv_control_msg error -71 req 02 val 2400 [ 1588.777307][T23811] pwc: recv_control_msg error -71 req 02 val 2600 [ 1588.787032][T23811] pwc: recv_control_msg error -71 req 02 val 2900 [ 1588.799774][T23811] pwc: recv_control_msg error -71 req 02 val 2800 [ 1588.835603][T23811] pwc: recv_control_msg error -71 req 04 val 1100 [ 1588.968368][T23811] pwc: recv_control_msg error -71 req 04 val 1200 [ 1588.978786][T23811] pwc: Registered as video103. [ 1588.989786][T23811] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1589.045013][T23811] usb 3-1: USB disconnect, device number 36 [ 1589.936053][ T1609] usb 10-1: USB disconnect, device number 46 [ 1590.463884][ T5947] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1590.536826][T23837] gspca_sunplus: reg_w_riv err -71 [ 1591.071615][T23837] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1591.212717][T23837] usb 7-1: USB disconnect, device number 57 [ 1591.358745][ T5947] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.389403][ T5947] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1591.423968][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.502426][ T5947] usb 10-1: config 0 descriptor?? [ 1591.568480][ T5947] pwc: Askey VC010 type 2 USB webcam detected. [ 1591.807190][T28269] binder: BINDER_SET_CONTEXT_MGR already set [ 1591.834670][T28269] binder: 28267:28269 ioctl 4018620d 200000004a80 returned -16 [ 1592.006555][ T5947] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1592.251289][ T5947] pwc: recv_control_msg error -32 req 02 val 2700 [ 1592.261242][ T5947] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1592.281628][T27740] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1592.289338][T23837] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1592.342208][ T5947] pwc: recv_control_msg error -32 req 04 val 1000 [ 1592.354243][ T5947] pwc: recv_control_msg error -32 req 04 val 1300 [ 1592.391676][ T5947] pwc: recv_control_msg error -32 req 04 val 1400 [ 1592.432238][ T5947] pwc: recv_control_msg error -32 req 02 val 2000 [ 1592.455109][ T5947] pwc: recv_control_msg error -32 req 02 val 2100 [ 1592.472657][ T5947] pwc: recv_control_msg error -32 req 04 val 1500 [ 1592.485838][T23837] usb 5-1: device descriptor read/64, error -71 [ 1592.505773][T27740] usb 1-1: Using ep0 maxpacket: 32 [ 1592.523074][ T5947] pwc: recv_control_msg error -32 req 02 val 2500 [ 1592.531869][T27740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.575205][ T5947] pwc: recv_control_msg error -32 req 02 val 2400 [ 1592.585899][T27740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.607866][ T5947] pwc: recv_control_msg error -32 req 02 val 2600 [ 1592.624584][T27740] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1592.661047][ T5947] pwc: recv_control_msg error -32 req 02 val 2900 [ 1592.693721][T27740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.749268][T27740] usb 1-1: config 0 descriptor?? [ 1592.788139][T23837] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1592.920856][ T5947] pwc: recv_control_msg error -71 req 04 val 1100 [ 1592.938084][ T5947] pwc: recv_control_msg error -71 req 04 val 1200 [ 1592.972125][ T5947] pwc: Registered as video103. [ 1592.984990][T23837] usb 5-1: device descriptor read/64, error -71 [ 1593.011015][ T5947] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 1593.120252][T28287] fuse: Unknown parameter 'group_id00000000000000000000' [ 1593.144472][ T5947] usb 10-1: USB disconnect, device number 47 [ 1593.153254][T23837] usb usb5-port1: attempt power cycle [ 1593.227914][T27740] ft260 0003:0403:6030.0014: item fetching failed at offset 0/2 [ 1593.270068][T27740] ft260 0003:0403:6030.0014: failed to parse HID [ 1593.307747][T27740] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -22 [ 1593.431653][T27740] usb 1-1: USB disconnect, device number 34 [ 1593.545131][T23837] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1593.591638][T23837] usb 5-1: device descriptor read/8, error -71 [ 1593.863537][T23837] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1593.885213][T18677] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1593.912696][T23837] usb 5-1: device descriptor read/8, error -71 [ 1594.216177][T18677] usb 6-1: Using ep0 maxpacket: 8 [ 1594.789480][T23837] usb usb5-port1: unable to enumerate USB device [ 1594.837701][T18677] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1594.883103][T18677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.940177][T18677] usb 6-1: Product: syz [ 1595.037823][T18677] usb 6-1: Manufacturer: syz [ 1595.064525][T18677] usb 6-1: SerialNumber: syz [ 1595.088822][T18677] usb 6-1: config 0 descriptor?? [ 1595.347941][T18677] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1595.369272][T28311] binder: BINDER_SET_CONTEXT_MGR already set [ 1595.377354][T28311] binder: 28310:28311 ioctl 4018620d 200000004a80 returned -16 [ 1595.387479][ T5941] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1596.355637][ T5941] usb 10-1: Using ep0 maxpacket: 8 [ 1596.368110][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1596.405238][ T5941] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1596.549378][ T5941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.563428][ T5941] usb 10-1: config 0 descriptor?? [ 1596.880134][ T5941] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1597.291618][T23811] usb 10-1: USB disconnect, device number 48 [ 1597.310090][ T5941] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1597.521397][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 1597.536942][ T5941] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.548278][T18677] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1597.550814][T18677] usb 6-1: USB disconnect, device number 31 [ 1597.601802][ T5941] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1597.640988][ T5941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1597.663991][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.692702][ T5941] usb 7-1: Product: syz [ 1597.702114][ T5941] usb 7-1: Manufacturer: syz [ 1597.712630][ T5941] usb 7-1: SerialNumber: syz [ 1597.960515][ T5941] usb 7-1: 0:2 : does not exist [ 1597.994532][ T5941] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1598.285932][ T5941] usb 7-1: USB disconnect, device number 58 [ 1599.085131][T24985] udevd[24985]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1600.235679][ T5941] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1600.396535][T28360] binder: BINDER_SET_CONTEXT_MGR already set [ 1600.424736][ T5941] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.456533][T28360] binder: 28359:28360 ioctl 4018620d 200000004a80 returned -16 [ 1600.467476][ T5941] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1600.519255][ T5941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.590240][ T5941] usb 10-1: config 0 descriptor?? [ 1600.749040][T23811] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1600.826289][T28368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7311'. [ 1600.945353][T23811] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1600.964831][ T5941] usbhid 10-1:0.0: can't add hid device: -71 [ 1601.072087][ T5941] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1601.333501][T23811] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1601.545625][T23811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.562290][ T5941] usb 10-1: USB disconnect, device number 49 [ 1601.602549][T23811] usb 3-1: config 0 descriptor?? [ 1603.518481][ T5941] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1603.865155][T18743] usb 3-1: USB disconnect, device number 37 [ 1608.696231][T28417] binder: 28416:28417 ioctl c0306201 2000000003c0 returned -14 [ 1610.253022][T18743] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1610.438568][T18743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.483389][T18743] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1610.528963][T18743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.565922][T18743] usb 1-1: config 0 descriptor?? [ 1610.712797][T23837] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1610.886566][T18743] usbhid 1-1:0.0: can't add hid device: -71 [ 1610.892638][T18743] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1610.908867][T18743] usb 1-1: USB disconnect, device number 35 [ 1611.649182][T23811] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1611.836403][T23811] usb 3-1: Using ep0 maxpacket: 8 [ 1611.865226][T23811] usb 3-1: config 6 has an invalid interface number: 245 but max is 0 [ 1611.879846][T23811] usb 3-1: config 6 has no interface number 0 [ 1611.889431][T23811] usb 3-1: config 6 interface 245 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1611.900458][T23837] usb 10-1: Using ep0 maxpacket: 32 [ 1611.921970][T23837] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1611.953533][T23811] usb 3-1: config 6 interface 245 has no altsetting 0 [ 1611.962851][T23837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.971464][T23837] usb 10-1: Product: syz [ 1611.974606][T18743] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1611.994655][T23837] usb 10-1: Manufacturer: syz [ 1612.005364][T23837] usb 10-1: SerialNumber: syz [ 1612.011352][T23811] usb 3-1: New USB device found, idVendor=2040, idProduct=7502, bcdDevice=1a.b1 [ 1612.025411][T23811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.044741][T23811] usb 3-1: Product: syz [ 1612.049284][T23837] usb 10-1: config 0 descriptor?? [ 1612.065275][T23811] usb 3-1: Manufacturer: syz [ 1612.072981][T23811] usb 3-1: SerialNumber: syz [ 1612.351816][T18743] usb 1-1: Using ep0 maxpacket: 16 [ 1612.391593][T18743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.405155][T18743] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1612.416407][T18743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.148575][T23837] airspy 10-1:0.0: Board ID: 00 [ 1613.153474][T23837] airspy 10-1:0.0: Firmware version: [ 1613.216697][T23811] pvrusb2: Hardware description: WinTV HVR-1955 Model 160111 [ 1613.254845][T23811] usb 3-1: selecting invalid altsetting 0 [ 1613.285868][T18743] usb 1-1: config 0 descriptor?? [ 1613.293539][ T2335] pvrusb2: Invalid write control endpoint [ 1613.326974][T23811] usb 3-1: USB disconnect, device number 38 [ 1613.356892][ T2335] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 1613.380120][T18743] usb 1-1: can't set config #0, error -71 [ 1613.433316][T18743] usb 1-1: USB disconnect, device number 36 [ 1613.448673][ T2335] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 1613.958833][T23837] airspy 10-1:0.0: usb_control_msg() failed -71 request 10 [ 1613.994436][T23837] airspy 10-1:0.0: Registered as swradio24 [ 1614.831493][T23837] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1614.898138][T23837] usb 10-1: USB disconnect, device number 51 [ 1619.898996][T28515] fuse: Bad value for 'fd' [ 1621.490857][T28524] input: syz0 as /devices/virtual/input/input41 [ 1621.959271][T25322] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1622.162873][T25322] usb 7-1: Using ep0 maxpacket: 32 [ 1622.187038][T25322] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1622.237072][T25322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.279793][T25322] usb 7-1: Product: syz [ 1622.303433][T25322] usb 7-1: Manufacturer: syz [ 1622.308077][T25322] usb 7-1: SerialNumber: syz [ 1622.472649][T27740] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1622.674069][T27740] usb 6-1: Using ep0 maxpacket: 16 [ 1622.719844][T27740] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1622.803320][T27740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.281889][T25322] usb 7-1: config 0 descriptor?? [ 1623.298890][T27740] usb 6-1: config 0 descriptor?? [ 1623.371220][T28552] vxcan1: entered allmulticast mode [ 1623.407503][T27740] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1623.907789][T25322] airspy 7-1:0.0: Board ID: 00 [ 1623.920075][T25322] airspy 7-1:0.0: Firmware version: [ 1624.168777][T28563] fuse: Bad value for 'fd' [ 1625.530432][T28572] md2: using deprecated bitmap file support [ 1625.559109][T28572] md2: error: failed to get bitmap file [ 1625.574633][T25322] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 1625.608080][T25322] airspy 7-1:0.0: Registered as swradio24 [ 1625.629286][T25322] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1625.676658][T25322] usb 7-1: USB disconnect, device number 59 [ 1625.712993][T28577] input: syz0 as /devices/virtual/input/input42 [ 1625.955271][T28466] udevd[28466]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1626.229496][T27740] gspca_sonixj: reg_r err -32 [ 1626.247598][T27740] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1626.300055][T27740] usb 6-1: USB disconnect, device number 32 [ 1626.455778][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1626.455822][ T30] audit: type=1804 audit(1753932343.960:78): pid=28598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7379" name="/newroot/266/file0" dev="tmpfs" ino=1407 res=1 errno=0 [ 1627.118082][T28608] fuse: Bad value for 'fd' [ 1628.731130][T28628] fuse: Bad value for 'fd' [ 1628.763525][T28623] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1628.811681][T28623] tipc: Enabled bearer , priority 10 [ 1628.897804][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1629.132796][T28639] misc userio: Invalid payload size [ 1629.186518][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1629.242296][T27740] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1629.461077][T27740] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1629.503499][T27740] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.552181][T27740] usb 1-1: config 0 descriptor?? [ 1629.688536][T27740] cp210x 1-1:0.0: cp210x converter detected [ 1629.752487][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1630.170681][T28633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.252774][T28633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.512882][ T30] audit: type=1326 audit(1753932347.776:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1630.705035][ T30] audit: type=1326 audit(1753932347.795:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe38378d310 code=0x7ffc0000 [ 1630.713205][T27740] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1630.852220][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1631.267719][ T30] audit: type=1326 audit(1753932347.795:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3837901d7 code=0x7ffc0000 [ 1631.267773][T27740] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1631.672008][T28662] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1631.681774][T28662] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1631.692010][T28662] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1631.701722][T28662] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1631.729998][ T30] audit: type=1326 audit(1753932347.795:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1631.753606][T27740] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 1631.760178][ T30] audit: type=1326 audit(1753932347.795:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3837901d7 code=0x7ffc0000 [ 1631.804397][T27740] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1631.838066][T27740] usb 1-1: USB disconnect, device number 37 [ 1631.867442][T27740] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1631.905622][ T30] audit: type=1326 audit(1753932347.795:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe38378d60a code=0x7ffc0000 [ 1631.961617][T27740] cp210x 1-1:0.0: device disconnected [ 1631.964080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1632.080531][ T30] audit: type=1326 audit(1753932347.795:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1632.124287][T28672] fuse: Invalid rootmode [ 1632.176617][ T30] audit: type=1326 audit(1753932347.795:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1632.268850][ T30] audit: type=1326 audit(1753932347.795:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1632.365121][ T30] audit: type=1326 audit(1753932347.795:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1632.432279][ T30] audit: type=1326 audit(1753932347.795:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28659 comm="syz.4.7407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1633.075880][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1633.203434][T18743] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1633.473808][T18743] usb 1-1: device descriptor read/64, error -71 [ 1634.034686][ T30] audit: type=1326 audit(1753932351.060:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.2.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446f38e9a9 code=0x7ffc0000 [ 1634.104100][T18743] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1634.117921][ T30] audit: type=1326 audit(1753932351.060:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.2.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446f38e9a9 code=0x7ffc0000 [ 1634.148119][ T30] audit: type=1326 audit(1753932351.060:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.2.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f446f38d310 code=0x7ffc0000 [ 1634.187687][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1634.209950][ T30] audit: type=1326 audit(1753932351.060:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28694 comm="syz.2.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f446f3901d7 code=0x7ffc0000 [ 1634.245296][T26245] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.263634][T26245] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.296715][T18743] usb 1-1: device descriptor read/64, error -71 [ 1634.371552][T28698] fuse: Invalid rootmode [ 1634.452062][T18743] usb usb1-port1: attempt power cycle [ 1634.944762][T26245] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1634.959488][T18743] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1634.990927][T18743] usb 1-1: device descriptor read/8, error -71 [ 1635.031860][T26245] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.258736][T18743] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1635.304011][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1635.330394][T18743] usb 1-1: device descriptor read/8, error -71 [ 1635.463285][T18743] usb usb1-port1: unable to enumerate USB device [ 1635.496947][T26245] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1635.518942][T26245] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.605963][T26460] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1635.685500][T26460] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1635.694336][T26460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1635.764063][T26460] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1635.818664][T26460] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1635.920841][ C1] vkms_vblank_simulate: vblank timer overrun [ 1635.974247][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1636.022324][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1636.036089][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1636.063461][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1636.092317][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1636.203548][T26245] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.224845][T28726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1636.252231][T26245] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.411348][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1637.523144][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1638.294577][T26460] Bluetooth: hci3: command tx timeout [ 1638.369035][T28743] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1638.376859][T28743] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1638.390519][T28743] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1638.398386][T28743] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1638.574294][ T5947] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1638.634964][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1639.138234][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 1639.182396][ T5947] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1639.235799][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.296153][ T5947] usb 1-1: config 0 descriptor?? [ 1639.429650][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1639.429672][ T30] audit: type=1326 audit(1753932356.111:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.510991][T26245] bridge_slave_1: left allmulticast mode [ 1639.519997][ T30] audit: type=1326 audit(1753932356.111:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.536151][T26245] bridge_slave_1: left promiscuous mode [ 1639.543985][ T30] audit: type=1326 audit(1753932356.158:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe38378d310 code=0x7ffc0000 [ 1639.571320][ T30] audit: type=1326 audit(1753932356.167:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3837901d7 code=0x7ffc0000 [ 1639.611452][ T30] audit: type=1326 audit(1753932356.167:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.616335][T26245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.634916][ T30] audit: type=1326 audit(1753932356.167:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe3837901d7 code=0x7ffc0000 [ 1639.663960][ T5941] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1639.674252][ T1609] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1639.698850][ T30] audit: type=1326 audit(1753932356.167:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe38378d60a code=0x7ffc0000 [ 1639.739426][T26245] bridge_slave_0: left allmulticast mode [ 1639.745229][T26245] bridge_slave_0: left promiscuous mode [ 1639.750932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1639.774540][T26245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.784917][ T30] audit: type=1326 audit(1753932356.167:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.818906][ T30] audit: type=1326 audit(1753932356.167:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.841332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.852834][ T30] audit: type=1326 audit(1753932356.167:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28759 comm="syz.4.7447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe38378e9a9 code=0x7ffc0000 [ 1639.875158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.883626][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 1639.895704][ T5941] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1639.909558][ T1609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.933109][ T5941] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1639.946941][ T1609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.959576][ T5941] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1639.974343][ T1609] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1639.989691][ T5941] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1640.063704][ T1609] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1640.104912][ T5941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1640.118025][ T1609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.132681][T28771] loop6: detected capacity change from 0 to 64 [ 1640.134509][ T5941] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1640.243052][T28397] Buffer I/O error on dev loop6, logical block 0, async page read [ 1640.282693][T28397] Buffer I/O error on dev loop6, logical block 0, async page read [ 1640.400510][T28397] Buffer I/O error on dev loop6, logical block 0, async page read [ 1640.496835][T28397] Buffer I/O error on dev loop6, logical block 0, async page read [ 1640.580724][T26460] Bluetooth: hci3: command tx timeout [ 1640.633395][T28397] Buffer I/O error on dev loop6, logical block 0, async page read [ 1640.858757][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1640.920274][ T5941] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1640.931327][ T5941] usb 6-1: Product: syz [ 1640.938642][ T1609] usb 10-1: config 0 descriptor?? [ 1640.947744][ T5941] usb 6-1: Manufacturer: syz [ 1640.952416][ T5941] usb 6-1: SerialNumber: syz [ 1640.982876][ T5941] usb 6-1: config 0 descriptor?? [ 1641.024709][ T5941] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1641.341517][ T5941] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1641.425107][ C1] raw-gadget.1 gadget.9: ignoring, device is not running [ 1641.466932][ T1609] usbhid 10-1:0.0: can't add hid device: -71 [ 1641.503912][ T1609] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1641.970444][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1642.025653][ T1609] usb 10-1: USB disconnect, device number 52 [ 1642.238835][ T5947] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 1642.259264][ T5947] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1642.283960][ T5947] usb 1-1: USB disconnect, device number 42 [ 1642.371907][T26245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.385331][T26245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.397293][T26245] bond0 (unregistering): Released all slaves [ 1642.549711][ T5947] usb 6-1: USB disconnect, device number 33 [ 1642.573298][ T5947] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1642.732375][T26245] bond1 (unregistering): Released all slaves [ 1642.742715][T26460] Bluetooth: hci3: command tx timeout [ 1642.948146][T28786] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1642.956208][T28786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1642.965681][T28786] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1642.973470][T28786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1643.082265][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1643.271066][T26245] tipc: Disabling bearer [ 1643.288877][T26245] tipc: Left network mode [ 1643.318995][T18743] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1643.564095][T18743] usb 10-1: Using ep0 maxpacket: 8 [ 1643.743424][T18743] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1643.778942][T18743] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1643.810998][T18743] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1643.838290][T28719] chnl_net:caif_netlink_parms(): no params data found [ 1643.853597][T18743] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1643.929636][T18743] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1643.982789][T18743] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1644.018959][T18743] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.194092][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1644.248945][ T5947] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1644.325004][T28810] binder: 28809:28810 ioctl 4018620d 0 returned -22 [ 1644.345997][T28810] binder: 28809:28810 ioctl c0306201 2000000003c0 returned -14 [ 1644.548701][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.706821][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.971264][T26460] Bluetooth: hci3: command tx timeout [ 1644.995408][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1645.061477][ T5947] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1645.114551][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.140301][T18743] usb 10-1: usb_control_msg returned -32 [ 1645.147993][T18743] usbtmc 10-1:16.0: can't read capabilities [ 1645.221615][ T5947] usb 5-1: config 0 descriptor?? [ 1645.290135][T28719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.299640][T28719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.305919][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1645.322195][T28719] bridge_slave_0: entered allmulticast mode [ 1645.350060][T28719] bridge_slave_0: entered promiscuous mode [ 1645.410156][T26245] hsr_slave_0: left promiscuous mode [ 1645.438754][T28824] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 1645.497047][T26245] hsr_slave_1: left promiscuous mode [ 1645.519517][T26245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1645.559963][T26245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1645.585064][T28831] overlayfs: missing 'lowerdir' [ 1645.601847][T26245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1645.645512][T26245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1645.681691][T18677] usb 10-1: USB disconnect, device number 53 [ 1645.739466][T26245] veth1_macvtap: left promiscuous mode [ 1645.746094][T26245] veth0_macvtap: left promiscuous mode [ 1645.751997][T26245] veth1_vlan: left promiscuous mode [ 1645.818320][T26245] veth0_vlan: left promiscuous mode [ 1646.415398][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 1646.417764][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1646.470986][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1646.645726][T28840] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1646.654988][T28840] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1646.664308][T28840] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1646.672227][T28840] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1646.708495][ T5947] usb 5-1: USB disconnect, device number 71 [ 1646.714714][T26245] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 1646.726796][T26245] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 1646.736340][T26245] CPU: 1 UID: 0 PID: 26245 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 1646.748243][T26245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1646.758311][T26245] Workqueue: netns cleanup_net [ 1646.763099][T26245] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 1646.768735][T26245] Code: ff ff ff e8 a3 b7 41 01 89 c5 31 ff 89 c6 e8 f8 95 91 f7 85 ed 74 45 e8 af 91 91 f7 eb 05 e8 a8 91 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 72 b3 f4 f7 49 8b 2c 24 49 8d 7c [ 1646.788344][T26245] RSP: 0018:ffffc900000e7098 EFLAGS: 00010216 [ 1646.794409][T26245] RAX: 000000001fffe000 RBX: 1ffff1100fc27982 RCX: ffff88802eeb1e00 [ 1646.802375][T26245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1646.810337][T26245] RBP: 0000000000000001 R08: ffffffff8fa08df7 R09: 1ffffffff1f411be [ 1646.818297][T26245] R10: dffffc0000000000 R11: fffffbfff1f411bf R12: 00000000ffff0000 [ 1646.826257][T26245] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88807e13cc10 [ 1646.834218][T26245] FS: 0000000000000000(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000 [ 1646.843135][T26245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1646.849703][T26245] CR2: 000020000003c000 CR3: 0000000024b83000 CR4: 0000000000350ef0 [ 1646.857679][T26245] Call Trace: [ 1646.860945][T26245] [ 1646.863867][T26245] __ipv6_dev_mc_dec+0x2e4/0x330 [ 1646.868811][T26245] __ipv6_ifa_notify+0x43d/0xac0 [ 1646.873781][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.879411][T26245] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 1646.884868][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.890500][T26245] ? __lock_acquire+0xab9/0xd20 [ 1646.895352][T26245] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1646.900724][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.906382][T26245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1646.911577][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.917199][T26245] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1646.922570][T26245] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1646.928301][T26245] addrconf_ifdown+0xe69/0x1880 [ 1646.933150][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.938780][T26245] ? tls_dev_event+0x717/0xec0 [ 1646.943537][T26245] ? __pfx_addrconf_ifdown+0x10/0x10 [ 1646.948830][T26245] addrconf_notify+0x1bc/0x1010 [ 1646.953684][T26245] notifier_call_chain+0x1b6/0x3e0 [ 1646.958791][T26245] netif_close_many+0x29c/0x410 [ 1646.963645][T26245] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1646.969633][T26245] ? __pfx_netif_close_many+0x10/0x10 [ 1646.975040][T26245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1646.980409][T26245] unregister_netdevice_many_notify+0x7b9/0x1ff0 [ 1646.986731][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1646.992357][T26245] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1646.997730][T26245] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1647.003449][T26245] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1647.010207][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.015833][T26245] ? unregister_netdevice_queue+0x1b3/0x380 [ 1647.021724][T26245] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1647.027961][T26245] ? batadv_meshif_destroy_netlink+0x1b0/0x250 [ 1647.034100][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.039724][T26245] default_device_exit_batch+0x819/0x890 [ 1647.045364][T26245] ? __pfx___might_resched+0x10/0x10 [ 1647.050650][T26245] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1647.056803][T26245] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1647.062253][T26245] ? net_generic+0x1e/0x240 [ 1647.066746][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.072367][T26245] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1647.078527][T26245] ops_undo_list+0x525/0x990 [ 1647.083130][T26245] ? __pfx_ops_undo_list+0x10/0x10 [ 1647.088237][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.093861][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.099482][T26245] ? do_raw_spin_unlock+0x122/0x240 [ 1647.104677][T26245] cleanup_net+0x4c5/0x800 [ 1647.109097][T26245] ? __pfx_cleanup_net+0x10/0x10 [ 1647.114031][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.119660][T26245] ? _raw_spin_unlock_irq+0x23/0x50 [ 1647.124863][T26245] ? process_scheduled_works+0x9ef/0x17b0 [ 1647.130606][T26245] ? process_scheduled_works+0x9ef/0x17b0 [ 1647.136327][T26245] process_scheduled_works+0xae1/0x17b0 [ 1647.141887][T26245] ? __pfx_process_scheduled_works+0x10/0x10 [ 1647.147871][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.153500][T26245] worker_thread+0x8a0/0xda0 [ 1647.158094][T26245] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1647.164450][T26245] ? __kthread_parkme+0x7b/0x200 [ 1647.169377][T26245] kthread+0x711/0x8a0 [ 1647.173441][T26245] ? __pfx_worker_thread+0x10/0x10 [ 1647.178553][T26245] ? __pfx_kthread+0x10/0x10 [ 1647.183133][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.188761][T26245] ? _raw_spin_unlock_irq+0x23/0x50 [ 1647.193952][T26245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1647.199576][T26245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1647.204773][T26245] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1647.209352][T26245] ret_from_fork+0x3fc/0x770 [ 1647.213943][T26245] ? __pfx_ret_from_fork+0x10/0x10 [ 1647.219055][T26245] ? __switch_to_asm+0x39/0x70 [ 1647.223810][T26245] ? __switch_to_asm+0x33/0x70 [ 1647.228563][T26245] ? __pfx_kthread+0x10/0x10 [ 1647.233142][T26245] ret_from_fork_asm+0x1a/0x30 [ 1647.237903][T26245] [ 1647.240903][T26245] Modules linked in: [ 1647.244811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.252808][T26245] ---[ end trace 0000000000000000 ]--- [ 1647.317237][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1647.317261][ T30] audit: type=1326 audit(1753932363.454:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1647.329308][T26245] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 1647.529560][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1647.570067][ T30] audit: type=1326 audit(1753932363.454:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1647.655711][ T30] audit: type=1326 audit(1753932363.454:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcffc38d310 code=0x7ffc0000 [ 1647.716369][ T30] audit: type=1326 audit(1753932363.454:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcffc3901d7 code=0x7ffc0000 [ 1647.819833][T26245] Code: ff ff ff e8 a3 b7 41 01 89 c5 31 ff 89 c6 e8 f8 95 91 f7 85 ed 74 45 e8 af 91 91 f7 eb 05 e8 a8 91 91 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 72 b3 f4 f7 49 8b 2c 24 49 8d 7c [ 1647.828949][ T30] audit: type=1326 audit(1753932363.454:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1647.839473][ C1] vkms_vblank_simulate: vblank timer overrun [ 1647.890609][ T30] audit: type=1326 audit(1753932363.454:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fcffc3901d7 code=0x7ffc0000 [ 1647.925809][ T30] audit: type=1326 audit(1753932363.454:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcffc38d60a code=0x7ffc0000 [ 1647.951200][T26245] RSP: 0018:ffffc900000e7098 EFLAGS: 00010216 [ 1647.957737][T26245] RAX: 000000001fffe000 RBX: 1ffff1100fc27982 RCX: ffff88802eeb1e00 [ 1647.965763][T26245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1647.976856][T26245] RBP: 0000000000000001 R08: ffffffff8fa08df7 R09: 1ffffffff1f411be [ 1648.001085][ T30] audit: type=1326 audit(1753932363.454:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1648.032636][T26245] R10: dffffc0000000000 R11: fffffbfff1f411bf R12: 00000000ffff0000 [ 1648.040633][T26245] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff88807e13cc10 [ 1648.064793][ T30] audit: type=1326 audit(1753932363.454:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1648.096800][T26245] FS: 0000000000000000(0000) GS:ffff888125c7e000(0000) knlGS:0000000000000000 [ 1648.105809][T26245] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1648.142633][T26245] CR2: 000000110c333952 CR3: 00000000276f0000 CR4: 0000000000350ef0 [ 1648.150972][ T30] audit: type=1326 audit(1753932363.454:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28841 comm="syz.5.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcffc38e9a9 code=0x7ffc0000 [ 1648.238501][T26245] Kernel panic - not syncing: Fatal exception [ 1648.244854][T26245] Kernel Offset: disabled [ 1648.249175][T26245] Rebooting in 86400 seconds..