last executing test programs: 14.617707222s ago: executing program 3 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, 0x9, 0x0, 0x8}, 0x10) 14.522140103s ago: executing program 3 (id=240): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$FE_DISEQC_SEND_MASTER_CMD(r0, 0x40076f3f, &(0x7f00000000c0)={"67dec283a6f9", 0x6}) r3 = socket(0x5, 0x4, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) syz_usb_ep_write(r5, 0x81, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002", @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r0, @ANYRESDEC=r1], 0xe8}, 0x1, 0x0, 0x0, 0x20040011}, 0x200000d0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x0, 0xc7, 0x9, 0x73f7128, 0x16e, r8}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e20, 0x4, @remote, 0x9}}, [0x9, 0x5, 0x10000, 0xaab, 0x4, 0x2, 0xfffffffffffffc1b, 0xfffffffffffffffe, 0x7fffffff, 0x1, 0x80000000, 0x8, 0x45, 0x3, 0x9]}, &(0x7f0000000180)=0x100) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5eb0, 0xb, 0x0, 0xffffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff8100000000020000000000000800010000000000", 0x24) 13.556478186s ago: executing program 3 (id=250): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.415150012s ago: executing program 3 (id=253): modify_ldt$write(0x1, &(0x7f0000000a40)={0x1, 0x100000, 0x2000, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) 13.239546386s ago: executing program 3 (id=256): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1, 0x2}}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$can_raw(r2, &(0x7f0000000580)={&(0x7f0000000200), 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/83, 0x53}], 0x4, &(0x7f00000004c0)=""/157, 0x9d}, 0x40) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x10000007}, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0x0, 0x44094}], 0x1, 0x404c018) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r3, r5) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000019c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0xfc1, @rand_addr=' \x01\x00', 0xc09}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000005c0)="ae2060e7d179e0cf00d0b46437f99e9cbeb2f21d0ce0c33fbbc8de5a73c058e71ab9e6421741a23c1cd805d40c1a90b76a2e2c23697be349a8295ed5fdc93da09e56418e059c671f0553184db55155f95c046ef812117c01abee4ba46b3f937e532dd9c2085c6d851a7c11f942d7472281eb6870ae68dd26c946b707f727aca394d4c671ee80f6dd585b7165be2d", 0x8e}, {&(0x7f0000000680)="2822081d3d1838818f258f8740f9cb719b3c87a1b2d30e02524f241cac62c107e034a86e0003a53d0cdd37ecaddf17d4f18fba58bd46cdd67c6af32e04f1f05751cd77a506117162d49e88c1053c4ab36febaf65f0544278ef5269025bfd", 0x5e}, {&(0x7f0000000700)="38988eb69a4ee594ae5fe0611d22deba079cf3b25ce193e8d7b3111b5c99b42604e3f01a5ef96090648fa2d92f2c7517e7a54450b67d0266e6a588693e7ab5620436244acfc7f8cf4b77b030d66ea7e93b2b2bb40f1d2c7a3dcb52aa", 0x5c}], 0x3, &(0x7f0000001800)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x3a, 0xe, 0x1, 0xb7, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}, @hopopts={{0x110, 0x29, 0x36, {0x0, 0x1e, '\x00', [@generic={0x7, 0xcc, "c29aa410dff7dbc37cf0ac5138d5d2f82d3cb72b15d0e1a2fc926409e7dfc792a66173c1de4d1c316d188bbc0b4580aa0da2715a39be407805df7dc3de302a456ba28acfe40d805596b2999b96a9f9b46f3080c24f1795b36d2650ab54b19264bbab2cc3fe914d3bad1187b0f66a5dfd14833da82df5a245b7c81ac810aa01b58ba9e5c4464cd1f76af594433d47c1d9f0161321db9c4e378b1fe416d2a6ee81fe6a4f898468b32974905decbadd417a9de861b580006d113989898b382853599e4dba278f8c9b8a150f1537"}, @calipso={0x7, 0x10, {0x0, 0x2, 0xfa, 0x1, [0x6]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}]}}}], 0x198}}], 0x2, 0x5) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[], 0x9) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg(r2, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x2125) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) write(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001108010026bd7000fbdbdf25fe8800000000000000275c14441dee339b6c801398e50000000001000004d303403200"], 0x28}}, 0x0) 10.044531496s ago: executing program 3 (id=267): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) tkill(r0, 0x2c) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000000180)=@ethtool_channels={0x3d, 0xad, 0x6, 0x80, 0x8000, 0x2, 0x4f, 0x9, 0x9}}) socket$netlink(0x10, 0x3, 0x8000000004) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x107a03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r3, @ANYRESHEX=r4], 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[], 0x0) 6.142878043s ago: executing program 1 (id=280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x20004800) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@migrate={0x50, 0x27, 0x1, 0x4, 0x25dfdbfc, {{@in6=@private0, @in6=@remote, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x4}}}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.003833455s ago: executing program 0 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) timer_create(0x0, &(0x7f0000000240)={0x0, 0x10, 0x2}, &(0x7f00000003c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000440)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010700000000fedbdf2567"], 0x24}, 0x1, 0x0, 0x0, 0xc881}, 0x40) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@private1, 0x0}, &(0x7f0000000280)=0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={@empty, 0x57, r10}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0xd8, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0xd}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffffffff}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xd8}}, 0x0) 5.738089156s ago: executing program 1 (id=284): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x9, 0x202) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000080)={0x9e7a, 0x3, 0xd}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa8840, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x31, 0x0, "85756a7117d7cc4ed20f392c658eb7ab2864ad2c2ce46d3a3eca86c49306af40e62b11eac0af09d7d1101573523e1b43520c9f2eb375cbcc5fad2953d5e107d992c9140bcd6db24a96ad769102cde4a6"}, 0xd8) 5.572725827s ago: executing program 1 (id=285): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000bc0)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x73, {0x73, 0xa, "5e6f8f2121ce5a3b47d502c2f98f17b0da95d53a5b5136b7e769e8fe67fbe81a309062bd6d4d9e651ddbda06cfa2e333fd8eddfee898ceb788a576ae0b36c56a9fbfbde086cbe69c85b555ba3fe9f958c4f47dc92a46e45c74be94eb7d48ad91d157f5673349466e83e65ffc7069802314"}}, &(0x7f00000009c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, &(0x7f0000000b00)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x62, 0x6, 0xb}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x4, 0x27, 0x5, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x1, 0x9, 0xb}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1a, 0x0, 0x6, '-^nD', "14a97a91"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x9, 0x80, 0x0, 0x3, 0x5}}}, &(0x7f0000001100)={0x84, &(0x7f0000000c00)={0x40, 0x17, 0x4a, "061712186a36d2c25e2aed8a44e1c8c6ab0aefb29d902266ed821b6d72e30fc984f1816f9e3250244dc8cf2520b3ae9fa7d5ff31785a596a23c842331fa1c9d1dcb15a978e99851ec344"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x68}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x140, 0x10, [0x77]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x3000}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "98aa"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xa70}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, &(0x7f0000000f80)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000fc0)={0x40, 0x19, 0x2, "3285"}, &(0x7f0000001000)={0x40, 0x1a, 0x2, 0x8c0d}, &(0x7f0000001040)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000001080)={0x40, 0x1e, 0x1, 0x57}, &(0x7f00000010c0)={0x40, 0x21, 0x1, 0xe}}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x2, "06f5"}, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="421202"], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x0, 0x12, 0x2, 'C='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.570239069s ago: executing program 0 (id=286): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x8}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, r5, 0xb97534d5fe9704cf, 0x70bd2d, 0x25dfdbfc, {{0x12}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x8818) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000700)={&(0x7f0000000080)=@phonet={0x23, 0x8, 0x0, 0x4}, 0x80, 0x0}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r8) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x88) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000980)={0x30, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x77}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x60, 0x6c}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 4.96405904s ago: executing program 0 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x20000840) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000540)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000005c0)={r9, @in={{0x2, 0x4e21, @multicast1}}, 0x5, 0x5, 0x7, 0x6, 0x8, 0xfffffffd, 0x4}, &(0x7f0000000680)=0x9c) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009200000000000000002000100000010000000000200000000030005000000000002000000d3000001"], 0x50}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) timer_gettime(0x0, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_open_dev$loop(0x0, 0x5, 0x0) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000740)) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYBLOB="18002abd7000fedbdf256bff210008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x8014) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x401, 0x5, 0x4, 0xff, 0x40, 0x1, 0x4, 0x377b002b, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000400)={r14, 0xb}, &(0x7f0000000440)=0x8) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x1c}], 0x1}, 0x0) 4.509074467s ago: executing program 0 (id=288): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r0}, 0x10) bind$xdp(r1, &(0x7f0000000b00)={0x2c, 0x9, 0x0, 0x8}, 0x10) 4.291987487s ago: executing program 0 (id=290): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x2400c000}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}}}, &(0x7f0000000040)=0x84) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x5, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xe597a6608decc52a, 0x0) 2.944262431s ago: executing program 1 (id=299): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x122}, {&(0x7f0000000bc0)="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", 0x1ae}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eea4ee5f10fe3b42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e", 0x84}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) mmap(&(0x7f00003bf000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 32) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x52) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000740)={0x28, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x93, &(0x7f0000000680)="11eb03dea566bf362163631a6ebbf254a81c58b05ca1f288a6b95de099956afa5f9fb1b95b548a34267060b4b24d3b13858ff87dce0926d809fd0aef2820959cdea653c1e462ed1646183d9b5ad1409168abaa58a91dea4d7aff1bfc0267bc78a951a5c8956877b9e989acb00cf02964e785f06f8e404164508fb477a497984a30ad60349c2167b78bbbfa86aff17d45060126"}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000940)={0x48, 0x3, r4, 0x0, 0x1, 0x26, &(0x7f0000000780)="45c3dbbc5a5029d4081242b86143ed922eb774ba8dbe618369d3d939546e0fd78d51b890a010"}) (async, rerun: 32) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, r7, 0x0, 0x2, 0x1, &(0x7f0000000400)='i', 0x4}) (async) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000500)=@assoc_value, &(0x7f0000000580)=0x8) (async) sendmsg$tipc(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000) (async) recvmsg(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x41ff) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 2.276526212s ago: executing program 1 (id=301): openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc8100, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(r0, 0x0, r0, 0x0, 0x757, 0x7) r1 = socket$inet6(0xa, 0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000015", @ANYRES8], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) fanotify_init(0x0, 0x403) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7ffc}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000015c0)="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", 0x430}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c268", 0x1b}], 0x3, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x7fffffff, 0xb, 0x20, "76811f6c751b4122cf411e9891bdf45ab9a3f5880975dc170ce33db967209e98", 0x30314742}) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000000)) 1.148386024s ago: executing program 1 (id=304): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f0000000600)={0x6f, {{0x2, 0xfffc, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}}, 0x108) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x14, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0105702, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x4, 0x7, 0x101, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000) r9 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000c40)=ANY=[@ANYBLOB="1201500200000010410e504740000102030109026e000301084002080b0001012530090904000000010130000a24010f0a00030000000904010000010230000904010101010220000905010930020507400a2525290000000000800904020000010230000904020101010230000905820920000502040a252500fcff0008c400"], &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) 898.740283ms ago: executing program 0 (id=305): flock(0xffffffffffffffff, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x1a, 0xbf, 0xcd, 0x40, 0x19d2, 0x412, 0x1281, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x90, 0x6, "", [{{0x9, 0x4, 0x4, 0x0, 0x0, 0xfa, 0x6c, 0x82, 0x8e, [@uac_as]}}]}}]}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000880)={'wlan0\x00'}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "dafa"}, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="58000000000905000000000000000000010000070900010073797a30000000000c00048008210140000000042400020014000180080001000000000008000200ac1414aa0c000280050041008400000008000540000000"], 0x58}, 0x1, 0x0, 0x0, 0x44002}, 0x24) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a2a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x6005}, @void, @eth={@multicast, @random="f2f0f9f313fe", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x26, 0x14, 0x68, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @multicast1}}}}}}, 0x26) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x1, 0x3, 0x20000007}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) writev(r6, &(0x7f0000003c80)=[{&(0x7f00000003c0)='i', 0x1}], 0x1) r7 = openat$cgroup_ro(r6, &(0x7f0000000240)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80881) 515.859656ms ago: executing program 2 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100), 0x10) bind$xdp(r1, &(0x7f0000000b00)={0x2c, 0x9, 0x0, 0x8}, 0x10) 460.515145ms ago: executing program 2 (id=309): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000180)={0x0, 0x0, [0x6, 0x3, 0x3fffc000, 0x6, 0x7, 0x7, 0x10, 0x2]}) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getrusage(0x1, &(0x7f0000000880)) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000800)={0x0, 0x15, 0x2, "91b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, 0x0, 0x0}, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x84, 0x2, "06f5"}, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="421202"], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x0, 0x12, 0x2, 'C='}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 356.932859ms ago: executing program 2 (id=310): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0xffffff2a}], 0x1}, 0x4048081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x3e1300, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000100)) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)={0x20, 0x43, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 310.152696ms ago: executing program 2 (id=311): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x238, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x1b0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xffffffffffffffd8, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) (async) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f0000000000)=0xf, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x3, 0x2, 0x0, 0x3, 0x7}}) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x7, 0x3, 'rr\x00', 0x1, 0x2, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0xa) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}}, 0x18) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 221.145536ms ago: executing program 2 (id=312): r0 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r1 = socket(0x2b, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x84, 0x6, 0x2, 0x28, @private2, @empty, 0x0, 0x7800, 0x30b7, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000004780)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', r2, 0x78a1, 0x7, 0x180, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}}}}}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x2f, &(0x7f0000000200)}) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0xa8}}, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x7fff, 0xa, 0x20, "76811f05000000000000000000a3f45ab9a3f5880975dc0800e33db967209e98", 0x41414270}) 0s ago: executing program 2 (id=313): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x34, &(0x7f0000000100)=[{0x3e, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x0, @svalue=0x81}, {0x1, @uvalue=0x50}, {0x1, @uvalue=0x2}]}, 0x2}]}) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x428, 0x3f4, 0x2, 0x70bd29, 0x25dfdbfb, {0x3, 0x1, 0x9, [0xd, 0x7, 0xfff, 0x3, 0x9, 0x8, 0x7f, 0x5, 0xfff, 0x4, 0xd, 0xdeb, 0xbaa, 0x80000000, 0x6, 0x2, 0x1, 0x7f, 0x3, 0x81, 0x8, 0x3ff, 0x1, 0x3, 0x3c, 0x61d, 0x403, 0x0, 0x4, 0x6, 0x1, 0x40, 0x2, 0x2, 0xfffffffb, 0x5, 0x80000000, 0x5, 0x1, 0x0, 0x6, 0x9, 0x4, 0x0, 0x10, 0x4, 0x1, 0xfaa, 0xd1, 0x80000001, 0xffff8001, 0x6, 0x3ff, 0x8eef, 0x8, 0x4, 0x793, 0x80, 0x0, 0x9, 0x2, 0x140b, 0xfb, 0x6], [0x8, 0x8, 0xc6, 0xfffffffe, 0x800, 0x800, 0xb215, 0x2c00, 0xfffffff9, 0x4, 0x8000000, 0x1, 0xc086, 0x4, 0x1, 0xffffffff, 0x6, 0x8, 0xffff, 0x1, 0x46, 0xffffffff, 0x7fff, 0x0, 0x521, 0xd4e, 0x40cc, 0x4, 0x48000000, 0x8, 0x6, 0xfffffffd, 0x80, 0x5, 0x9, 0x10, 0x2, 0x3, 0x3, 0x9, 0x8000, 0x8000, 0x869a, 0x10000, 0xa165, 0x2, 0x1ff, 0x800, 0x4, 0x81, 0x4, 0x5, 0x5, 0xfffffffa, 0x400, 0x3, 0x6, 0x6, 0xffff0001, 0x9, 0xfff, 0x3, 0x7, 0x4], [0x9ced, 0x7fff, 0x100, 0xffff40ab, 0x13, 0x1, 0x10001, 0x18000000, 0x6, 0x2, 0xa, 0x2, 0xffffff01, 0x8, 0x2c, 0x5, 0x400, 0x7, 0x3, 0x6, 0xb08, 0x8001, 0x3, 0xb52a, 0x0, 0x3, 0xa000, 0x3, 0x7fff, 0xb1, 0x44db0b74, 0x5, 0x4, 0x1ff, 0x7, 0x8, 0x0, 0x9, 0xf, 0x3, 0x8, 0x10000, 0x81, 0x1acf, 0x6, 0x294, 0x9, 0x2, 0x3, 0x0, 0x40, 0x1, 0x5, 0x743cfc5, 0x4, 0x1, 0x58e4, 0xd48, 0x6, 0x2000000, 0x7, 0xa, 0x0, 0xbac0], [0x4, 0xa8fd, 0xd, 0x5, 0x7690ff73, 0x8, 0x7, 0x7, 0x8000, 0x1, 0xb71, 0xff, 0x505, 0xfffffffb, 0x9, 0x8, 0x6, 0x80, 0x5, 0x2, 0xb271, 0xfffffffa, 0xdde3, 0x8001, 0x8, 0x4, 0xfab, 0x6, 0x0, 0x5, 0x40, 0x3, 0x10, 0x8, 0xed2, 0x7ff, 0xdc3, 0x661, 0x3, 0x7, 0xb2, 0x5, 0xffff909e, 0x100, 0x6d9d, 0x8001, 0x1000, 0xd9, 0x5, 0x2, 0x81, 0xfffffff7, 0x7, 0x0, 0x800, 0x9, 0x92b, 0x76, 0x7, 0x6, 0x80, 0x2, 0x2000200], 0x6, ['*.!\\\x00', '\x00']}, ["", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x8000}, 0x4040041) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) recvmsg$can_raw(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/139, 0x8b}], 0x1, &(0x7f0000000280)=""/107, 0x6b}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "df7ae5faa2299bf7000e5283f2da0d5c"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1000}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="739b1e1ac7704b52c20e55d849fffcf643fdbb3a833ec55fa8"}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) pwritev2(r2, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000140)='\x00', 0x1}], 0x3, 0x0, 0x0, 0x2) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c100000000100224e0000", 0x58}], 0x1) kernel console output (not intermixed with test programs): [ 100.990531][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 106.418705][ T5600] cgroup: Unknown subsys name 'net' [ 106.732039][ T5600] cgroup: Unknown subsys name 'cpuset' [ 106.782298][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 109.163618][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.359855][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.366448][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.391233][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.407890][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.426893][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.460024][ T4928] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.507013][ T4928] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.525538][ T4928] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.550035][ T4928] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.561176][ T4928] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.654367][ T4928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.685114][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.689325][ T4928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.719715][ T4928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.736123][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.738659][ T5628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.741124][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.752207][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.793408][ T4928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.795464][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.534354][ T5620] Bluetooth: hci0: command tx timeout [ 115.623439][ T5620] Bluetooth: hci1: command tx timeout [ 115.852106][ T5620] Bluetooth: hci3: command tx timeout [ 115.932783][ T5620] Bluetooth: hci2: command tx timeout [ 116.547920][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.549064][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.549400][ T5622] bridge_slave_0: entered allmulticast mode [ 116.554706][ T5622] bridge_slave_0: entered promiscuous mode [ 116.589748][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.590122][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.590461][ T5618] bridge_slave_0: entered allmulticast mode [ 116.597881][ T5618] bridge_slave_0: entered promiscuous mode [ 116.654342][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.654623][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.654850][ T5622] bridge_slave_1: entered allmulticast mode [ 116.657412][ T5622] bridge_slave_1: entered promiscuous mode [ 116.660003][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.660266][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.660480][ T5618] bridge_slave_1: entered allmulticast mode [ 116.666121][ T5618] bridge_slave_1: entered promiscuous mode [ 116.816482][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.816827][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.817065][ T5621] bridge_slave_0: entered allmulticast mode [ 116.819835][ T5621] bridge_slave_0: entered promiscuous mode [ 116.882125][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.882494][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.882815][ T5625] bridge_slave_0: entered allmulticast mode [ 116.885703][ T5625] bridge_slave_0: entered promiscuous mode [ 116.902174][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.904810][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.920721][ T5621] bridge_slave_1: entered allmulticast mode [ 116.935059][ T5621] bridge_slave_1: entered promiscuous mode [ 116.952137][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.959278][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.959755][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.960121][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.960425][ T5625] bridge_slave_1: entered allmulticast mode [ 117.003942][ T5625] bridge_slave_1: entered promiscuous mode [ 117.039779][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.058941][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.185623][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.238789][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.256280][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.261096][ T5622] team0: Port device team_slave_0 added [ 117.279246][ T5618] team0: Port device team_slave_0 added [ 117.298028][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.338668][ T5622] team0: Port device team_slave_1 added [ 117.352873][ T5618] team0: Port device team_slave_1 added [ 117.462657][ T5621] team0: Port device team_slave_0 added [ 117.520962][ T5625] team0: Port device team_slave_0 added [ 117.529909][ T5621] team0: Port device team_slave_1 added [ 117.538487][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.538507][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.538527][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.547321][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.547378][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.547510][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.603968][ T5625] team0: Port device team_slave_1 added [ 117.623625][ T5620] Bluetooth: hci0: command tx timeout [ 117.654745][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.654758][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.654779][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.658741][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.658753][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.658774][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.696695][ T5620] Bluetooth: hci1: command tx timeout [ 117.825761][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.825775][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.825795][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.847282][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.847337][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.847421][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.879052][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.879103][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.879152][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.942505][ T5620] Bluetooth: hci3: command tx timeout [ 118.021865][ T5620] Bluetooth: hci2: command tx timeout [ 118.224744][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.224760][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.224780][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.388947][ T5622] hsr_slave_0: entered promiscuous mode [ 118.391219][ T5622] hsr_slave_1: entered promiscuous mode [ 118.415603][ T5618] hsr_slave_0: entered promiscuous mode [ 118.418167][ T5618] hsr_slave_1: entered promiscuous mode [ 118.420573][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 118.420845][ T5618] Cannot create hsr debugfs directory [ 118.547197][ T5621] hsr_slave_0: entered promiscuous mode [ 118.548983][ T5621] hsr_slave_1: entered promiscuous mode [ 118.550481][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 118.550519][ T5621] Cannot create hsr debugfs directory [ 118.626484][ T5625] hsr_slave_0: entered promiscuous mode [ 118.628429][ T5625] hsr_slave_1: entered promiscuous mode [ 118.629927][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 118.629959][ T5625] Cannot create hsr debugfs directory [ 119.693301][ T5620] Bluetooth: hci0: command tx timeout [ 119.737882][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.774780][ T5620] Bluetooth: hci1: command tx timeout [ 119.796318][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 119.819411][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.866046][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 119.877707][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.909298][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 119.949875][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.979260][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.013129][ T5620] Bluetooth: hci3: command tx timeout [ 120.092532][ T5620] Bluetooth: hci2: command tx timeout [ 120.130141][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.158841][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.176827][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.221365][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.245264][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.293960][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.331034][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.367832][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.729853][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.764608][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.785124][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.827030][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.843094][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.890795][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.929463][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.957954][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.203883][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.248774][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.271123][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.319096][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.357133][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.387448][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.405787][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.447528][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.479935][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.655770][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.746218][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.746478][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.773759][ T5620] Bluetooth: hci0: command tx timeout [ 121.790829][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.840106][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.840231][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.853733][ T5620] Bluetooth: hci1: command tx timeout [ 121.990266][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.068779][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.068990][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.091770][ T5620] Bluetooth: hci3: command tx timeout [ 122.153346][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.153535][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.171796][ T5620] Bluetooth: hci2: command tx timeout [ 122.197331][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.381385][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.446620][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.472682][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.489838][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.570473][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.573046][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.675541][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.757414][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.757715][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.866487][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.866752][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.537253][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.054670][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.060294][ T5622] veth0_vlan: entered promiscuous mode [ 124.146581][ T5622] veth1_vlan: entered promiscuous mode [ 124.490943][ T5621] veth0_vlan: entered promiscuous mode [ 124.530008][ T5622] veth0_macvtap: entered promiscuous mode [ 124.573332][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.593496][ T5622] veth1_macvtap: entered promiscuous mode [ 124.617212][ T5621] veth1_vlan: entered promiscuous mode [ 124.737348][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.805189][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.926715][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.029260][ T1483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.068012][ T1483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.107211][ T5621] veth0_macvtap: entered promiscuous mode [ 125.133188][ T1483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.138090][ T1483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.225681][ T5621] veth1_macvtap: entered promiscuous mode [ 125.269786][ T5625] veth0_vlan: entered promiscuous mode [ 125.567905][ T5625] veth1_vlan: entered promiscuous mode [ 125.583697][ T5618] veth0_vlan: entered promiscuous mode [ 125.615824][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.676450][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.765346][ T5618] veth1_vlan: entered promiscuous mode [ 125.806363][ T1483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.823427][ T1483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.831237][ T1483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.878683][ T452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.878735][ T452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.913961][ T1483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.084157][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.084183][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.173291][ T5625] veth0_macvtap: entered promiscuous mode [ 126.370224][ T5625] veth1_macvtap: entered promiscuous mode [ 126.707171][ T5618] veth0_macvtap: entered promiscuous mode [ 126.819284][ T5618] veth1_macvtap: entered promiscuous mode [ 126.843672][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.865053][ T1188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.865074][ T1188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.002163][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.190521][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.190547][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.191307][ T1188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.232535][ T1188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.280451][ T1188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.283711][ T1188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.334198][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.454452][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.613390][ T1188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.614141][ T1188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.614906][ T1188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.615184][ T1188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.750749][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.750780][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.322918][ T5700] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.702004][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 129.777145][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.797826][ T5700] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 129.797871][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.797892][ T5700] usb 1-1: Product: syz [ 129.797907][ T5700] usb 1-1: Manufacturer: syz [ 129.797922][ T5700] usb 1-1: SerialNumber: syz [ 129.866890][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.866914][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.897150][ T5707] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.992512][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.992536][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.070619][ T5700] usb 1-1: config 0 descriptor?? [ 130.184396][ T5707] usb 3-1: Using ep0 maxpacket: 8 [ 130.236451][ T5707] usb 3-1: unable to get BOS descriptor or descriptor too short [ 130.251773][ T5707] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.251848][ T5707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 130.289271][ T5707] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 130.289307][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.289348][ T5707] usb 3-1: Product: syz [ 130.289366][ T5707] usb 3-1: Manufacturer: syz [ 130.289383][ T5707] usb 3-1: SerialNumber: syz [ 130.654838][ T5700] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.654907][ T5700] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 130.807657][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.807682][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.215524][ T5700] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 132.066093][ T5707] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.251893][ T1264] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.412267][ T1264] usb 4-1: device descriptor read/64, error -71 [ 133.824702][ T5700] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 133.824783][ T5700] em28xx 1-1:0.0: board has no eeprom [ 133.841684][ T1264] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.925697][ T5795] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.984272][ T1264] usb 4-1: device descriptor read/64, error -71 [ 134.021711][ T5785] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 134.022598][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 134.096675][ T1264] usb usb4-port1: attempt power cycle [ 134.295660][ T5785] usb 2-1: device descriptor read/64, error -32 [ 134.326940][ T5700] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 134.327031][ T5700] em28xx 1-1:0.0: dvb set to bulk mode. [ 134.413460][ T822] em28xx 1-1:0.0: Binding DVB extension [ 134.533866][ T5785] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.661813][ T1264] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.824980][ T1264] usb 4-1: device descriptor read/8, error -71 [ 134.826815][ T5785] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.854860][ T5785] usb 2-1: not running at top speed; connect to a high speed hub [ 134.856327][ T5785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.856350][ T5785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.920939][ T5785] usb 2-1: string descriptor 0 read error: -22 [ 134.921187][ T5785] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.921214][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.462273][ T5700] usb 1-1: USB disconnect, device number 2 [ 135.887261][ T5785] usb 2-1: 0:2 : does not exist [ 136.196129][ T5700] em28xx 1-1:0.0: Disconnecting em28xx [ 136.366367][ T5785] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 136.433226][ T5785] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 136.433346][ T5785] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 136.433366][ T5785] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 136.482299][ T822] em28xx 1-1:0.0: Registering input extension [ 136.482958][ T5785] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 136.509016][ T5785] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 136.514806][ T5707] usb 3-1: USB disconnect, device number 2 [ 136.519973][ T5700] em28xx 1-1:0.0: Closing input extension [ 137.166266][ T5785] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 137.231453][ T5785] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 137.400682][ T5821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16'. [ 137.803692][ T5785] usb 2-1: USB disconnect, device number 3 [ 138.276032][ T5700] em28xx 1-1:0.0: Freeing device [ 138.851762][ T5778] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 139.055772][ T5778] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 139.097521][ T5778] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 139.097556][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.097576][ T5778] usb 4-1: Product: syz [ 139.097592][ T5778] usb 4-1: Manufacturer: syz [ 139.097608][ T5778] usb 4-1: SerialNumber: syz [ 139.257558][ T5700] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 139.300025][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.300274][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.300430][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.359114][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.359410][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.359663][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.359918][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.360145][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.360529][ T5847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.23'. [ 139.444505][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.475124][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 139.476439][ T5700] usb 1-1: not running at top speed; connect to a high speed hub [ 139.539765][ T5700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.539798][ T5700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.580300][ T5700] usb 1-1: string descriptor 0 read error: -22 [ 139.580517][ T5700] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.580543][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.830295][ T5778] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 139.849785][ T5778] dvb-usb: bulk message failed: -22 (3/0) [ 140.038242][ T5778] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 140.322704][ T5700] usb 1-1: 0:2 : does not exist [ 140.385387][ T5859] netlink: 'syz.2.25': attribute type 10 has an invalid length. [ 140.466964][ T5859] team0: Device dummy0 is up. Set it down before adding it as a team port [ 140.917035][ T5778] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 140.917190][ T5778] dvb_usb_umt_010 4-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 140.973954][ T5778] usb 4-1: USB disconnect, device number 6 [ 141.220991][ T5858] syz.1.24 (5858) used greatest stack depth: 18880 bytes left [ 142.006290][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.025094][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.520456][ T5700] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 142.543426][ T5700] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 142.672017][ T823] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.821652][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 142.824022][ T823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.824065][ T823] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 142.824090][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.883692][ T823] usb 2-1: config 0 descriptor?? [ 142.955195][ T5894] autofs4:pid:5894:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 143.251138][ T5700] usb 1-1: USB disconnect, device number 3 [ 143.626390][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.639184][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.701151][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.728748][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.762990][ T823] nti 0003:0757:0A00.0001: ignoring exceeding usage max [ 143.765229][ T823] nti 0003:0757:0A00.0001: unknown main item tag 0x0 [ 143.765273][ T823] nti 0003:0757:0A00.0001: unknown main item tag 0x2 [ 143.894445][ T823] nti 0003:0757:0A00.0001: hidraw0: USB HID v0.05 Device [HID 0757:0a00] on usb-dummy_hcd.1-1/input0 [ 143.977501][ T5911] netlink: 'syz.0.39': attribute type 16 has an invalid length. [ 143.977523][ T5911] __nla_validate_parse: 5 callbacks suppressed [ 143.977565][ T5911] netlink: 156 bytes leftover after parsing attributes in process `syz.0.39'. [ 144.167459][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.168574][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.673801][ T823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.838801][ T823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.838836][ T823] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.838856][ T823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.838906][ T823] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.890367][ T823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.890400][ T823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.890419][ T823] usb 4-1: Product: syz [ 144.890435][ T823] usb 4-1: Manufacturer: syz [ 144.965018][ T823] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 144.965687][ T5934] tmpfs: Bad value for 'mpol' [ 145.002833][ T5934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 145.227174][ T823] usb 4-1: USB disconnect, device number 7 [ 145.523185][ T49] usb 2-1: USB disconnect, device number 4 [ 145.759689][ T5930] warning: `syz.2.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.124330][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 146.210809][ T5947] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 146.287042][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.287813][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 146.291321][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.291382][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.347219][ T10] usb 4-1: string descriptor 0 read error: -22 [ 146.347376][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.347448][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.479767][ T10] usb 4-1: 0:2 : does not exist [ 146.780392][ T5947] veth0_vlan: left promiscuous mode [ 146.871236][ T5947] veth0_vlan: entered promiscuous mode [ 146.980207][ T5947] team0: Device veth0_vlan failed to register rx_handler [ 147.179984][ T5958] sctp: [Deprecated]: syz.0.51 (pid 5958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.179984][ T5958] Use struct sctp_sack_info instead [ 147.852373][ T823] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 148.081747][ T823] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 148.130151][ T823] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 148.130242][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.130263][ T823] usb 1-1: Product: syz [ 148.130277][ T823] usb 1-1: Manufacturer: syz [ 148.130293][ T823] usb 1-1: SerialNumber: syz [ 148.283037][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 148.335759][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 148.366052][ T823] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 148.748331][ T10] usb 4-1: USB disconnect, device number 8 [ 149.162147][ T5978] tracefs: Bad value for 'uid' [ 149.162169][ T5978] tracefs: Bad value for 'uid' [ 149.493261][ T823] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 149.546021][ T823] usb 1-1: USB disconnect, device number 4 [ 149.638477][ T5989] binder: 5987:5989 unknown command 0 [ 149.638536][ T5989] binder: 5987:5989 ioctl c0306201 200000000100 returned -22 [ 149.807960][ T5992] overlayfs: failed to resolve './file0': -2 [ 150.105603][ T5994] Zero length message leads to an empty skb [ 150.183118][ T5700] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.360220][ T5700] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 150.360258][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.360279][ T5700] usb 2-1: Product: syz [ 150.360296][ T5700] usb 2-1: Manufacturer: syz [ 150.360312][ T5700] usb 2-1: SerialNumber: syz [ 150.871703][ T49] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 150.899202][ T5996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.900393][ T5996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.060864][ T5700] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 151.060935][ T5700] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 151.074346][ T5700] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 151.074495][ T5700] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.110752][ T49] usb 1-1: device descriptor read/64, error -71 [ 151.156174][ T5700] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.238808][ T5700] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 151.353458][ T5700] usb 2-1: USB disconnect, device number 5 [ 151.361873][ T49] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 151.521709][ T49] usb 1-1: device descriptor read/64, error -71 [ 151.574969][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 151.632052][ T49] usb usb1-port1: attempt power cycle [ 151.747830][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.748601][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 151.768756][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.768788][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.800968][ T10] usb 3-1: string descriptor 0 read error: -22 [ 151.801233][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.801270][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.889541][ T10] usb 3-1: 0:2 : does not exist [ 152.051757][ T49] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 152.082778][ T49] usb 1-1: device descriptor read/8, error -71 [ 152.323159][ T49] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 152.356779][ T49] usb 1-1: device descriptor read/8, error -71 [ 152.472189][ T49] usb usb1-port1: unable to enumerate USB device [ 152.750883][ T6032] netlink: 133536 bytes leftover after parsing attributes in process `syz.3.73'. [ 153.132913][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 153.291845][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 153.294919][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.294994][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.295022][ T49] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.295042][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.297038][ T49] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.297065][ T49] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.297085][ T49] usb 2-1: Manufacturer: syz [ 153.316140][ T49] usb 2-1: config 0 descriptor?? [ 153.500516][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 153.518710][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 153.664667][ T10] usb 3-1: USB disconnect, device number 3 [ 153.807356][ T49] usb 2-1: USB disconnect, device number 6 [ 154.451773][ T5785] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 154.619378][ T5785] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 154.619410][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 154.619427][ T5785] usb 1-1: Product: syz [ 154.619439][ T5785] usb 1-1: Manufacturer: syz [ 154.619451][ T5785] usb 1-1: SerialNumber: syz [ 154.689969][ T5785] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 155.115816][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.116478][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.142080][ T5785] vp7045: USB control message 'in' went wrong. [ 155.142097][ T5785] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 155.142130][ T5785] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 155.224138][ T5785] usb 1-1: USB disconnect, device number 9 [ 155.487424][ T6067] netlink: 228 bytes leftover after parsing attributes in process `syz.3.84'. [ 156.081725][ T5785] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 156.091996][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.235304][ T5785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.236088][ T5785] usb 1-1: not running at top speed; connect to a high speed hub [ 156.237616][ T5785] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.237642][ T5785] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.251648][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 156.298314][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 156.298349][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.298372][ T9] usb 2-1: Product: syz [ 156.298388][ T9] usb 2-1: Manufacturer: syz [ 156.298404][ T9] usb 2-1: SerialNumber: syz [ 156.342456][ T5785] usb 1-1: string descriptor 0 read error: -22 [ 156.342620][ T5785] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.342645][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.351431][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 156.351460][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 156.447728][ T5785] usb 1-1: 0:2 : does not exist [ 156.761682][ T5707] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 156.833558][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 156.861352][ T9] r8152-cfgselector 2-1: No union descriptors [ 156.911833][ T9] r8152-cfgselector 2-1: USB disconnect, device number 7 [ 157.003439][ T5707] usb 3-1: not running at top speed; connect to a high speed hub [ 157.005097][ T5707] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 157.005126][ T5707] usb 3-1: config 11 has no interface number 0 [ 157.005176][ T5707] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 157.005219][ T5707] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.005244][ T5707] usb 3-1: config 11 interface 95 has no altsetting 0 [ 157.071224][ T5707] usb 3-1: string descriptor 0 read error: -22 [ 157.071283][ T5707] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 157.071308][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 157.116279][ T6096] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 157.150494][ T5707] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 157.379000][ T5707] usb 3-1: USB disconnect, device number 4 [ 157.698819][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.698893][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.699075][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.699085][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.699244][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.699254][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.699520][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.699529][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.699690][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.699700][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.699880][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.699897][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.700061][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.700071][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.700327][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.700337][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.700555][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.700565][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.700735][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.700744][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.775278][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.775340][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.877965][ T5785] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 157.890898][ T5785] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 157.952009][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952024][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952124][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952132][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952219][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952226][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952319][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952326][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952411][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952419][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952504][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952512][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952601][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952610][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952717][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952724][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952804][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952810][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.952889][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.952897][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.953001][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.953009][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.953101][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.953108][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 157.999069][ T6105] binder: BINDER_SET_CONTEXT_MGR already set [ 157.999085][ T6105] binder: 6104:6105 ioctl 4018620d 200000000100 returned -16 [ 158.245647][ T5785] usb 1-1: USB disconnect, device number 10 [ 158.353767][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.664654][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 158.865197][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 158.867935][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.867964][ T10] usb 2-1: config 0 has no interface number 0 [ 158.890216][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.890251][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.890273][ T10] usb 2-1: Product: syz [ 158.890290][ T10] usb 2-1: Manufacturer: syz [ 158.890306][ T10] usb 2-1: SerialNumber: syz [ 158.972973][ T10] usb 2-1: config 0 descriptor?? [ 158.994798][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 159.267025][ T5700] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 159.318268][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 159.418601][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 159.431754][ T5700] usb 1-1: Using ep0 maxpacket: 32 [ 159.484592][ T5700] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 159.484635][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.484636][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 159.484657][ T5700] usb 1-1: Product: syz [ 159.484672][ T5700] usb 1-1: Manufacturer: syz [ 159.484687][ T5700] usb 1-1: SerialNumber: syz [ 159.544253][ T10] usb 2-1: USB disconnect, device number 8 [ 159.579117][ T5700] usb 1-1: config 0 descriptor?? [ 159.633002][ T5852] udevd[5852]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 159.633181][ T5852] udevd[5852]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 159.665375][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 159.753699][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 159.775303][ T10] quatech2 2-1:0.51: device disconnected [ 159.918886][ T5700] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 011 [ 160.732394][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.735362][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.419748][ T6177] PKCS8: Unsupported PKCS#8 version [ 161.951725][ T5785] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.061423][ T823] usb 1-1: USB disconnect, device number 11 [ 162.142552][ T5785] usb 2-1: Using ep0 maxpacket: 16 [ 162.156127][ T5785] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 162.156162][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.156184][ T5785] usb 2-1: Product: syz [ 162.156200][ T5785] usb 2-1: Manufacturer: syz [ 162.156216][ T5785] usb 2-1: SerialNumber: syz [ 162.219497][ T5785] r8152-cfgselector 2-1: Unknown version 0x0000 [ 162.219530][ T5785] r8152-cfgselector 2-1: config 0 descriptor?? [ 162.665831][ T823] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 162.708596][ T5788] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 162.841968][ T823] usb 1-1: Using ep0 maxpacket: 32 [ 162.855170][ T823] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 190, changing to 7 [ 162.855227][ T823] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 162.859703][ T823] usb 1-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 162.859735][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.859756][ T823] usb 1-1: Product: 㿉⿬弬궖蠭強᥿ዕ첿쮡칯軩帱奁챐餄坺왲᠙偙ᥗ靗뢜ﻺྒ敤䪉籼瘎蟞䄌岫缽ꎙꃮ᭤윅夐밪痟馚枚截흸栮볙濁᤺㤞궵⬤⫄螦ᷣ獍諆埵婋衷ⰸ틙 [ 162.859792][ T823] usb 1-1: Manufacturer: Н [ 162.859808][ T823] usb 1-1: SerialNumber: ␁ [ 163.232247][ T823] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.418817][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.459316][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.475896][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.477185][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.496255][ T6208] FAULT_INJECTION: forcing a failure. [ 163.496255][ T6208] name failslab, interval 1, probability 0, space 0, times 1 [ 163.496479][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.2.131 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.496525][ T6208] Tainted: [L]=SOFTLOCKUP [ 163.496547][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.496600][ T6208] Call Trace: [ 163.496685][ T6208] [ 163.496708][ T6208] dump_stack_lvl+0xe8/0x150 [ 163.496810][ T6208] should_fail_ex+0x46b/0x600 [ 163.496855][ T6208] should_failslab+0xa8/0x100 [ 163.496911][ T6208] __kmalloc_noprof+0xdf/0x7b0 [ 163.496985][ T6208] ? kfree+0x4d/0x6c0 [ 163.497039][ T6208] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 163.497075][ T6208] tomoyo_realpath_from_path+0xe3/0x5d0 [ 163.497136][ T6208] ? tomoyo_domain+0xd7/0x130 [ 163.497199][ T6208] ? tomoyo_path_number_perm+0x219/0x630 [ 163.497273][ T6208] tomoyo_path_number_perm+0x246/0x630 [ 163.497365][ T6208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.497401][ T6208] ? __lock_acquire+0x6b5/0x2d10 [ 163.497505][ T6208] ? do_raw_spin_lock+0x12b/0x2f0 [ 163.497573][ T6208] ? __fget_files+0x2a/0x420 [ 163.497653][ T6208] ? __fget_files+0x2a/0x420 [ 163.497700][ T6208] ? __fget_files+0x3a6/0x420 [ 163.497726][ T6208] ? __fget_files+0x2a/0x420 [ 163.497780][ T6208] security_file_ioctl+0xc3/0x2a0 [ 163.497859][ T6208] __se_sys_ioctl+0x47/0x170 [ 163.497895][ T6208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.497942][ T6208] do_syscall_64+0x174/0x580 [ 163.498019][ T6208] ? trace_irq_disable+0x3b/0x140 [ 163.498079][ T6208] ? clear_bhb_loop+0x40/0x90 [ 163.498181][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.498205][ T6208] RIP: 0033:0x7f2c019fce59 [ 163.498240][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.498322][ T6208] RSP: 002b:00007f2bffc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.498432][ T6208] RAX: ffffffffffffffda RBX: 00007f2c01c75fa0 RCX: 00007f2c019fce59 [ 163.498501][ T6208] RDX: 0000200000000100 RSI: 00000000c0405602 RDI: 0000000000000003 [ 163.498536][ T6208] RBP: 00007f2bffc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 163.498550][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.498594][ T6208] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 163.498697][ T6208] [ 163.526706][ T6208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.719805][ T6210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.745461][ T6210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.784960][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.807657][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.562595][ T5778] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 164.729528][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.739492][ T5778] usb 2-1: not running at top speed; connect to a high speed hub [ 164.741143][ T5778] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.741183][ T5778] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.759512][ T823] usb 1-1: 2:1 : bogus bTerminalLink 7 [ 164.793788][ T5778] usb 2-1: string descriptor 0 read error: -22 [ 164.794042][ T5778] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.794068][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.203056][ T6230] FAULT_INJECTION: forcing a failure. [ 165.203056][ T6230] name failslab, interval 1, probability 0, space 0, times 0 [ 165.203095][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.2.140 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 165.203120][ T6230] Tainted: [L]=SOFTLOCKUP [ 165.203127][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.203138][ T6230] Call Trace: [ 165.203147][ T6230] [ 165.203165][ T6230] dump_stack_lvl+0xe8/0x150 [ 165.203200][ T6230] should_fail_ex+0x46b/0x600 [ 165.203249][ T6230] should_failslab+0xa8/0x100 [ 165.203278][ T6230] __kmalloc_noprof+0xdf/0x7b0 [ 165.203300][ T6230] ? tomoyo_encode+0x28b/0x550 [ 165.203326][ T6230] tomoyo_encode+0x28b/0x550 [ 165.203349][ T6230] tomoyo_realpath_from_path+0x58d/0x5d0 [ 165.203377][ T6230] ? tomoyo_path_number_perm+0x219/0x630 [ 165.203406][ T6230] tomoyo_path_number_perm+0x246/0x630 [ 165.203447][ T6230] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.203474][ T6230] ? __lock_acquire+0x6b5/0x2d10 [ 165.203499][ T6230] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.203542][ T6230] ? __fget_files+0x2a/0x420 [ 165.203565][ T6230] ? __fget_files+0x2a/0x420 [ 165.203584][ T6230] ? __fget_files+0x3a6/0x420 [ 165.203603][ T6230] ? __fget_files+0x2a/0x420 [ 165.203627][ T6230] security_file_ioctl+0xc3/0x2a0 [ 165.203660][ T6230] __se_sys_ioctl+0x47/0x170 [ 165.203690][ T6230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.203710][ T6230] do_syscall_64+0x174/0x580 [ 165.203741][ T6230] ? trace_irq_disable+0x3b/0x140 [ 165.203763][ T6230] ? clear_bhb_loop+0x40/0x90 [ 165.203786][ T6230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.203806][ T6230] RIP: 0033:0x7f2c019fce59 [ 165.203825][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.203840][ T6230] RSP: 002b:00007f2bffc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.203866][ T6230] RAX: ffffffffffffffda RBX: 00007f2c01c75fa0 RCX: 00007f2c019fce59 [ 165.203880][ T6230] RDX: 0000200000000100 RSI: 00000000c0405602 RDI: 0000000000000003 [ 165.203892][ T6230] RBP: 00007f2bffc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.203903][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.203914][ T6230] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 165.203943][ T6230] [ 165.204199][ T6230] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.600664][ T823] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 165.615059][ T5778] usb 2-1: 0:2 : does not exist [ 165.637932][ T823] usb 1-1: USB disconnect, device number 12 [ 165.794309][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.019832][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 166.020059][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 166.607099][ T5778] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.636408][ T5778] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 166.944591][ T5778] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 166.954527][ T6261] FAULT_INJECTION: forcing a failure. [ 166.954527][ T6261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 166.954642][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.2.152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 166.954761][ T6261] Tainted: [L]=SOFTLOCKUP [ 166.954782][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 166.954797][ T6261] Call Trace: [ 166.954806][ T6261] [ 166.954822][ T6261] dump_stack_lvl+0xe8/0x150 [ 166.954912][ T6261] should_fail_ex+0x46b/0x600 [ 166.955021][ T6261] _copy_from_user+0x2d/0xb0 [ 166.955097][ T6261] video_usercopy+0x36f/0x1450 [ 166.955214][ T6261] ? __pfx___video_do_ioctl+0x10/0x10 [ 166.955303][ T6261] ? __pfx_video_usercopy+0x10/0x10 [ 166.955410][ T6261] ? __fget_files+0x2a/0x420 [ 166.955499][ T6261] ? __fget_files+0x2a/0x420 [ 166.955580][ T6261] ? __fget_files+0x3a6/0x420 [ 166.955649][ T6261] v4l2_ioctl+0x190/0x1e0 [ 166.955725][ T6261] ? __pfx_v4l2_ioctl+0x10/0x10 [ 166.955799][ T6261] __se_sys_ioctl+0xff/0x170 [ 166.955885][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.955949][ T6261] do_syscall_64+0x174/0x580 [ 166.956050][ T6261] ? trace_irq_disable+0x3b/0x140 [ 166.956136][ T6261] ? clear_bhb_loop+0x40/0x90 [ 166.956211][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.956274][ T6261] RIP: 0033:0x7f2c019fce59 [ 166.956328][ T6261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.956380][ T6261] RSP: 002b:00007f2bffc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.956437][ T6261] RAX: ffffffffffffffda RBX: 00007f2c01c75fa0 RCX: 00007f2c019fce59 [ 166.956479][ T6261] RDX: 0000200000000100 RSI: 00000000c0405602 RDI: 0000000000000003 [ 166.956521][ T6261] RBP: 00007f2bffc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.956547][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.956560][ T6261] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 166.956607][ T6261] [ 167.341095][ T5778] usb 2-1: USB disconnect, device number 10 [ 167.999102][ T6295] FAULT_INJECTION: forcing a failure. [ 167.999102][ T6295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.999145][ T6295] CPU: 1 UID: 0 PID: 6295 Comm: syz.2.163 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.999174][ T6295] Tainted: [L]=SOFTLOCKUP [ 167.999183][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.999196][ T6295] Call Trace: [ 167.999206][ T6295] [ 167.999216][ T6295] dump_stack_lvl+0xe8/0x150 [ 167.999250][ T6295] should_fail_ex+0x46b/0x600 [ 167.999339][ T6295] _copy_to_user+0x31/0xb0 [ 167.999374][ T6295] simple_read_from_buffer+0xe1/0x170 [ 167.999408][ T6295] proc_fail_nth_read+0x1be/0x230 [ 167.999440][ T6295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.999470][ T6295] ? rw_verify_area+0x2ac/0x4e0 [ 167.999501][ T6295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.999540][ T6295] vfs_read+0x212/0xa80 [ 167.999578][ T6295] ? __pfx_vfs_read+0x10/0x10 [ 167.999611][ T6295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 167.999665][ T6295] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.999699][ T6295] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 167.999733][ T6295] ? mutex_lock_nested+0x152/0x1d0 [ 167.999758][ T6295] ? fdget_pos+0x252/0x320 [ 167.999793][ T6295] ksys_read+0x156/0x270 [ 167.999832][ T6295] ? __pfx_ksys_read+0x10/0x10 [ 167.999869][ T6295] ? __pfx_v4l2_ioctl+0x10/0x10 [ 167.999906][ T6295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.999931][ T6295] do_syscall_64+0x174/0x580 [ 167.999963][ T6295] ? trace_irq_disable+0x3b/0x140 [ 167.999990][ T6295] ? clear_bhb_loop+0x40/0x90 [ 168.000018][ T6295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.000041][ T6295] RIP: 0033:0x7f2c019bd68e [ 168.000062][ T6295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 168.000080][ T6295] RSP: 002b:00007f2bffc4dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.000104][ T6295] RAX: ffffffffffffffda RBX: 00007f2bffc4e6c0 RCX: 00007f2c019bd68e [ 168.000120][ T6295] RDX: 000000000000000f RSI: 00007f2bffc4e0a0 RDI: 0000000000000004 [ 168.000134][ T6295] RBP: 00007f2bffc4e090 R08: 0000000000000000 R09: 0000000000000000 [ 168.000147][ T6295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.000161][ T6295] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 168.000194][ T6295] [ 168.879953][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.900448][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.912637][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.919485][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.939711][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.949282][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 168.980125][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.009958][ T6327] syz.3.173 uses obsolete (PF_INET,SOCK_PACKET) [ 169.066863][ T6330] netlink: 'syz.3.173': attribute type 27 has an invalid length. [ 169.069770][ T6329] netlink: 'syz.3.173': attribute type 27 has an invalid length. [ 169.137600][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.208773][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.235252][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.268174][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.284861][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.289160][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.296702][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.304519][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.354498][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.365215][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.405167][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.414065][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.506598][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.547427][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.561037][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.603909][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.631281][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.647210][ T6342] netlink: 666 bytes leftover after parsing attributes in process `syz.3.177'. [ 169.714312][ T6323] NILFS (nullb0): couldn't find nilfs on the device [ 169.854673][ T6346] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 169.854673][ T6346] program syz.1.180 not setting count and/or reply_len properly [ 169.941683][ T5778] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 170.118029][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.119434][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.119460][ T5778] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 170.119528][ T5778] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.128513][ T5778] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 170.128590][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.128645][ T5778] usb 1-1: Product: syz [ 170.128696][ T5778] usb 1-1: Manufacturer: syz [ 170.128751][ T5778] usb 1-1: SerialNumber: syz [ 170.419140][ T6361] netlink: 'syz.2.186': attribute type 11 has an invalid length. [ 170.419163][ T6361] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.186'. [ 170.419694][ T6362] netlink: 'syz.2.186': attribute type 11 has an invalid length. [ 170.419709][ T6362] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.186'. [ 171.022837][ T5778] usb 1-1: USB disconnect, device number 13 [ 171.172080][ T5785] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.178980][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.407123][ T6389] vivid-000: ================= START STATUS ================= [ 171.425733][ T6389] vivid-000: RDS Tx I/O Mode: Controls [ 171.425831][ T6389] vivid-000: RDS Program ID: 32904 [ 171.425861][ T6389] vivid-000: RDS Program Type: 3 [ 171.425906][ T6389] vivid-000: RDS PS Name: VIVID-TX [ 171.425928][ T6389] vivid-000: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 171.425954][ T6389] vivid-000: RDS Stereo: true [ 171.425973][ T6389] vivid-000: RDS Artificial Head: false [ 171.425992][ T6389] vivid-000: RDS Compressed: false [ 171.426013][ T6389] vivid-000: RDS Dynamic PTY: false [ 171.426033][ T6389] vivid-000: RDS Traffic Announcement: false [ 171.426083][ T6389] vivid-000: RDS Traffic Program: true [ 171.426128][ T6389] vivid-000: RDS Music: true [ 171.426195][ T6389] vivid-000: ================== END STATUS ================== [ 172.182215][ T5778] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 172.356279][ T5778] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.358000][ T5778] usb 1-1: not running at top speed; connect to a high speed hub [ 172.359717][ T5778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.359742][ T5778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.414543][ T5778] usb 1-1: string descriptor 0 read error: -22 [ 172.414712][ T5778] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.414730][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.527411][ T6417] netlink: 100 bytes leftover after parsing attributes in process `syz.1.205'. [ 172.533135][ T5778] usb 1-1: 0:2 : does not exist [ 172.652162][ T6420] capability: warning: `syz.1.205' uses deprecated v2 capabilities in a way that may be insecure [ 172.933671][ T823] IPVS: starting estimator thread 0... [ 173.092462][ T6424] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 173.248676][ T6426] IPVS: using max 9 ests per chain, 21600 per kthread [ 173.926115][ T5778] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.953287][ T5778] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 174.078929][ T5778] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 174.157143][ T6455] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.258736][ T5778] usb 1-1: USB disconnect, device number 14 [ 174.881881][ T5778] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.024855][ T5778] usb 1-1: device descriptor read/64, error -71 [ 175.271693][ T5778] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 175.401999][ T5778] usb 1-1: device descriptor read/64, error -71 [ 175.522200][ T5778] usb usb1-port1: attempt power cycle [ 175.626051][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.626568][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.641928][ T6504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.642720][ T6504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.852445][ T823] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 175.872219][ T5778] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 175.896760][ T5778] usb 1-1: device descriptor read/8, error -71 [ 176.005467][ T823] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 176.005689][ T823] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 176.007407][ T823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.007440][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.007463][ T823] usb 2-1: SerialNumber: syz [ 176.071722][ T6503] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.076318][ T823] hub 2-1:1.0: bad descriptor, ignoring hub [ 176.076360][ T823] hub 2-1:1.0: probe with driver hub failed with error -5 [ 176.077926][ T823] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 176.077945][ T823] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 176.078000][ T823] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 176.161766][ T5778] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 176.264606][ T5778] usb 1-1: device descriptor read/8, error -71 [ 176.372322][ T5778] usb usb1-port1: unable to enumerate USB device [ 176.412161][ T5700] usb 2-1: USB disconnect, device number 11 [ 177.221744][ T823] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 177.391267][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.399453][ T823] usb 2-1: not running at top speed; connect to a high speed hub [ 177.401032][ T823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.401057][ T823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.438867][ T823] usb 2-1: string descriptor 0 read error: -22 [ 177.439149][ T823] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.439178][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.509880][ T823] usb 2-1: 0:2 : does not exist [ 178.171706][ T5788] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 178.332222][ T5785] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 178.361852][ T5788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.361918][ T5788] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.362019][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.370888][ T5788] usb 1-1: config 0 descriptor?? [ 178.436707][ T5788] pwc: Askey VC010 type 2 USB webcam detected. [ 178.507607][ T5785] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.507632][ T5785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.507647][ T5785] usb 3-1: Product: syz [ 178.507658][ T5785] usb 3-1: Manufacturer: syz [ 178.507887][ T5785] usb 3-1: SerialNumber: syz [ 178.557736][ T5785] usb 3-1: config 0 descriptor?? [ 178.774612][ T5785] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.822166][ T5788] pwc: recv_control_msg error -32 req 02 val 2b00 [ 178.824548][ T5788] pwc: recv_control_msg error -32 req 02 val 2700 [ 178.928755][ T823] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 178.952509][ T823] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 179.031789][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.032373][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.115569][ T5788] pwc: recv_control_msg error -71 req 04 val 1000 [ 179.118193][ T5788] pwc: recv_control_msg error -71 req 04 val 1300 [ 179.159020][ T5788] pwc: recv_control_msg error -71 req 04 val 1400 [ 179.160419][ T5788] pwc: recv_control_msg error -71 req 02 val 2000 [ 179.161098][ T5788] pwc: recv_control_msg error -71 req 02 val 2100 [ 179.165271][ T5788] pwc: recv_control_msg error -71 req 04 val 1500 [ 179.166858][ T5788] pwc: recv_control_msg error -71 req 02 val 2500 [ 179.176766][ T5788] pwc: recv_control_msg error -71 req 02 val 2400 [ 179.238425][ T5788] pwc: recv_control_msg error -71 req 02 val 2600 [ 179.240914][ T5788] pwc: recv_control_msg error -71 req 02 val 2900 [ 179.269977][ T5788] pwc: recv_control_msg error -71 req 02 val 2800 [ 179.280771][ T823] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 179.295256][ T5788] pwc: recv_control_msg error -71 req 04 val 1100 [ 179.297082][ T5788] pwc: recv_control_msg error -71 req 04 val 1200 [ 179.561689][ T823] usb 2-1: USB disconnect, device number 12 [ 179.791621][ T5788] pwc: Registered as video103. [ 179.820888][ T5785] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 179.933875][ T5788] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 180.207845][ T5788] usb 1-1: USB disconnect, device number 19 [ 180.603499][ T823] usb 3-1: USB disconnect, device number 6 [ 180.815947][ T6589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.819458][ T6589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.063435][ T823] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.101713][ T5788] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 181.191723][ T823] usb 3-1: device descriptor read/64, error -71 [ 181.251741][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 181.252792][ T5788] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 181.254834][ T5788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 181.254912][ T5788] usb 1-1: can't read configurations, error -61 [ 181.421906][ T5788] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 181.423163][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 181.432167][ T823] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.571671][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 181.572659][ T5788] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 181.574613][ T5788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 181.574652][ T5788] usb 1-1: can't read configurations, error -61 [ 181.575186][ T5788] usb usb1-port1: attempt power cycle [ 181.582070][ T823] usb 3-1: device descriptor read/64, error -71 [ 181.624480][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 181.626052][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 181.633736][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.633763][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.684438][ T9] usb 2-1: string descriptor 0 read error: -22 [ 181.684549][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.684567][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.693780][ T823] usb usb3-port1: attempt power cycle [ 181.741688][ T9] usb 2-1: 0:2 : does not exist [ 181.981802][ T5788] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 182.005794][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 182.023654][ T5788] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 182.038741][ T5788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 182.038788][ T5788] usb 1-1: can't read configurations, error -61 [ 182.097073][ T823] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 182.132588][ T823] usb 3-1: device descriptor read/8, error -71 [ 182.161767][ T5788] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 182.184871][ T5788] usb 1-1: Using ep0 maxpacket: 32 [ 182.185854][ T5788] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 182.188001][ T5788] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 182.188038][ T5788] usb 1-1: can't read configurations, error -61 [ 182.188777][ T5788] usb usb1-port1: unable to enumerate USB device [ 182.381628][ T823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.403030][ T823] usb 3-1: device descriptor read/8, error -71 [ 182.522197][ T823] usb usb3-port1: unable to enumerate USB device [ 183.166015][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 183.170046][ T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 183.211723][ T823] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 183.247275][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 183.307394][ T9] usb 2-1: USB disconnect, device number 13 [ 183.375996][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 183.396497][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.396565][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.396594][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.396616][ T823] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.396640][ T823] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.400628][ T823] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.400660][ T823] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.400681][ T823] usb 1-1: Manufacturer: syz [ 183.513229][ T823] usb 1-1: config 0 descriptor?? [ 183.843543][ T823] rc_core: IR keymap rc-hauppauge not found [ 183.843567][ T823] Registered IR keymap rc-empty [ 183.894403][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.913390][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.986323][ T823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 184.014635][ T823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 184.183360][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.203876][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.225206][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.242227][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.261779][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.283609][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.301965][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.326927][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.341865][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.361705][ T823] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.374126][ T6628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.280'. [ 184.458149][ T823] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 184.458178][ T823] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.485243][ T6628] unsupported nlmsg_type 40 [ 184.528156][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 184.561398][ T823] usb 1-1: USB disconnect, device number 24 [ 185.061811][ T49] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 185.226598][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.237995][ T49] usb 2-1: not running at top speed; connect to a high speed hub [ 185.239347][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.239390][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.270454][ T49] usb 2-1: string descriptor 0 read error: -22 [ 185.270593][ T49] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.270612][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.316449][ T49] usb 2-1: 0:2 : does not exist [ 186.402315][ T823] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 186.557157][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.557221][ T823] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 186.557247][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.613298][ T823] usb 1-1: config 0 descriptor?? [ 186.621421][ T823] pwc: Askey VC010 type 2 USB webcam detected. [ 186.750867][ T49] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.778999][ T49] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 186.883238][ T49] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 186.988696][ T49] usb 2-1: USB disconnect, device number 14 [ 187.044601][ T823] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.677590][ T6657] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 187.677670][ T6657] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 187.677725][ T6657] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 187.727291][ T6657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.001008][ T6657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 188.709305][ T823] pwc: recv_control_msg error -71 req 02 val 2c00 [ 188.709824][ T823] pwc: recv_control_msg error -71 req 04 val 1000 [ 188.710359][ T823] pwc: recv_control_msg error -71 req 04 val 1300 [ 188.778367][ T823] pwc: recv_control_msg error -71 req 04 val 1400 [ 188.778922][ T823] pwc: recv_control_msg error -71 req 02 val 2000 [ 188.781391][ T823] pwc: recv_control_msg error -71 req 02 val 2100 [ 188.802825][ T823] pwc: recv_control_msg error -71 req 04 val 1500 [ 188.803380][ T823] pwc: recv_control_msg error -71 req 02 val 2500 [ 188.803893][ T823] pwc: recv_control_msg error -71 req 02 val 2400 [ 188.804465][ T823] pwc: recv_control_msg error -71 req 02 val 2600 [ 188.804962][ T823] pwc: recv_control_msg error -71 req 02 val 2900 [ 188.805540][ T823] pwc: recv_control_msg error -71 req 02 val 2800 [ 188.806242][ T823] pwc: recv_control_msg error -71 req 04 val 1100 [ 188.806737][ T823] pwc: recv_control_msg error -71 req 04 val 1200 [ 188.954470][ T823] pwc: Registered as video103. [ 188.957902][ T823] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 188.986512][ T823] usb 1-1: USB disconnect, device number 25 [ 189.265935][ T6700] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 189.266028][ T6700] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 189.952367][ T5778] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 189.972684][ T823] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 190.149396][ T823] usb 1-1: config 7 has an invalid interface number: 4 but max is 0 [ 190.149428][ T823] usb 1-1: config 7 has no interface number 0 [ 190.169133][ T823] usb 1-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=12.81 [ 190.169168][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.169190][ T823] usb 1-1: Product: syz [ 190.169203][ T823] usb 1-1: Manufacturer: syz [ 190.169219][ T823] usb 1-1: SerialNumber: syz [ 190.171072][ T5778] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.230223][ T5778] usb 2-1: not running at top speed; connect to a high speed hub [ 190.263565][ T5778] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice= 0.40 [ 190.263608][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.263632][ T5778] usb 2-1: Product: syz [ 190.263648][ T5778] usb 2-1: Manufacturer: syz [ 190.263673][ T5778] usb 2-1: SerialNumber: syz [ 190.429649][ T6727] ================================================================== [ 190.429704][ T6727] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360 [ 190.429760][ T6727] Read of size 8 at addr ffff88802c5a3c18 b[ 190.429760][ T6727] Read of size 8 at addr ffff88802c5a3c18 by task syz.2.313/6727 [ 190.429779][ T6727] [ 190.429797][ T6727] CPU: 0 UID: 0 PID: 6727 Comm: syz.2.313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.429829][ T6727] Tainted: [L]=SOFTLOCKUP [ 190.429838][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.429851][ T6727] Call Trace: [ 190.429862][ T6727] [ 190.429873][ T6727] dump_stack_lvl+0xe8/0x150 [ 190.429905][ T6727] print_address_description+0x55/0x1e0 [ 190.429961][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.429986][ T6727] print_report+0x58/0x70 [ 190.430014][ T6727] kasan_report+0x117/0x150 [ 190.430047][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.430077][ T6727] dvb_device_open+0xc4/0x360 [ 190.430102][ T6727] ? rt_spin_unlock+0x160/0x200 [ 190.430132][ T6727] chrdev_open+0x4d0/0x5f0 [ 190.430153][ T6727] ? __pfx_chrdev_open+0x10/0x10 [ 190.430174][ T6727] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 190.430237][ T6727] ? __pfx_chrdev_open+0x10/0x10 [ 190.430257][ T6727] do_dentry_open+0x83d/0x13e0 [ 190.430287][ T6727] vfs_open+0x3b/0x350 [ 190.430307][ T6727] ? path_openat+0x2ed3/0x3960 [ 190.430342][ T6727] path_openat+0x2eea/0x3960 [ 190.430396][ T6727] ? __pfx_path_openat+0x10/0x10 [ 190.430431][ T6727] ? kasan_save_track+0x4f/0x80 [ 190.430454][ T6727] ? kasan_save_track+0x3e/0x80 [ 190.430476][ T6727] ? __kasan_slab_alloc+0x6c/0x80 [ 190.430536][ T6727] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.430578][ T6727] do_file_open+0x23e/0x4a0 [ 190.430615][ T6727] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.430652][ T6727] ? __pfx_do_file_open+0x10/0x10 [ 190.430678][ T6727] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 190.430716][ T6727] ? alloc_fd+0x679/0x6f0 [ 190.430753][ T6727] do_sys_openat2+0x115/0x200 [ 190.430780][ T6727] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.430807][ T6727] ? exc_page_fault+0x6a/0xc0 [ 190.430839][ T6727] ? do_user_addr_fault+0xc6f/0x1340 [ 190.430891][ T6727] __x64_sys_openat+0x138/0x170 [ 190.430910][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.430948][ T6727] do_syscall_64+0x174/0x580 [ 190.430982][ T6727] ? trace_irq_disable+0x3b/0x140 [ 190.431008][ T6727] ? clear_bhb_loop+0x40/0x90 [ 190.431032][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.431060][ T6727] RIP: 0033:0x7f2c019bd68e [ 190.431094][ T6727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.431128][ T6727] RSP: 002b:00007f2bffc4db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.431153][ T6727] RAX: ffffffffffffffda RBX: 00007f2bffc4e6c0 RCX: 00007f2c019bd68e [ 190.431171][ T6727] RDX: 0000000000141000 RSI: 00007f2bffc4dc00 RDI: ffffffffffffff9c [ 190.431186][ T6727] RBP: 00007f2bffc4dc00 R08: 0000000000000000 R09: 0000000000000000 [ 190.431200][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 190.431214][ T6727] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 190.431243][ T6727] [ 190.431249][ T6727] [ 190.431253][ T6727] Allocated by task 1300: [ 190.431309][ T6727] kasan_save_track+0x3e/0x80 [ 190.431333][ T6727] __kasan_kmalloc+0x93/0xb0 [ 190.431357][ T6727] __kmalloc_cache_noprof+0x3a6/0x690 [ 190.431381][ T6727] batadv_forw_packet_alloc+0x1e9/0x390 [ 190.431402][ T6727] batadv_iv_ogm_queue_add+0x935/0xe40 [ 190.431435][ T6727] batadv_iv_ogm_schedule+0xb09/0x1020 [ 190.431470][ T6727] batadv_iv_send_outstanding_bat_ogm_packet+0x68d/0x7a0 [ 190.431509][ T6727] process_one_work+0x98b/0x1630 [ 190.431538][ T6727] worker_thread+0xb49/0x1140 [ 190.431566][ T6727] kthread+0x388/0x470 [ 190.431588][ T6727] ret_from_fork+0x514/0xb70 [ 190.431611][ T6727] ret_from_fork_asm+0x1a/0x30 [ 190.431636][ T6727] [ 190.431641][ T6727] Freed by task 1300: [ 190.431657][ T6727] kasan_save_track+0x3e/0x80 [ 190.431673][ T6727] kasan_save_free_info+0x46/0x50 [ 190.431716][ T6727] __kasan_slab_free+0x5c/0x80 [ 190.431739][ T6727] kfree+0x1c5/0x6c0 [ 190.431759][ T6727] process_one_work+0x98b/0x1630 [ 190.431787][ T6727] worker_thread+0xb49/0x1140 [ 190.431815][ T6727] kthread+0x388/0x470 [ 190.431838][ T6727] ret_from_fork+0x514/0xb70 [ 190.431853][ T6727] ret_from_fork_asm+0x1a/0x30 [ 190.431888][ T6727] [ 190.431894][ T6727] Last potentially related work creation: [ 190.431902][ T6727] kasan_save_stack+0x3e/0x60 [ 190.431925][ T6727] kasan_record_aux_stack+0xbd/0xd0 [ 190.431954][ T6727] insert_work+0x3d/0x330 [ 190.431978][ T6727] __queue_work+0xbe8/0x1090 [ 190.432012][ T6727] call_timer_fn+0x192/0x5e0 [ 190.432033][ T6727] __run_timer_base+0x764/0x9f0 [ 190.432064][ T6727] run_timer_softirq+0xb7/0x170 [ 190.432089][ T6727] handle_softirqs+0x1de/0x6d0 [ 190.432120][ T6727] run_ktimerd+0x69/0x100 [ 190.432138][ T6727] smpboot_thread_fn+0x541/0xa50 [ 190.432155][ T6727] kthread+0x388/0x470 [ 190.432176][ T6727] ret_from_fork+0x514/0xb70 [ 190.432204][ T6727] ret_from_fork_asm+0x1a/0x30 [ 190.432236][ T6727] [ 190.432241][ T6727] The buggy address belongs to the object at ffff88802c5a3c00 [ 190.432241][ T6727] which belongs to the cache kmalloc-512 of size 512 [ 190.432262][ T6727] The buggy address is located 24 bytes inside of [ 190.432262][ T6727] freed 512-byte region [ffff88802c5a3c00, ffff88802c5a3e00) [ 190.432292][ T6727] [ 190.432298][ T6727] The buggy address belongs to the physical page: [ 190.432379][ T6727] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c5a0 [ 190.432435][ T6727] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.432453][ T6727] flags: 0x80000000000040(head|node=0|zone=1) [ 190.432479][ T6727] page_type: f5(slab) [ 190.432505][ T6727] raw: 0080000000000040 ffff88813feabc80 dead000000000100 dead000000000122 [ 190.432523][ T6727] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 190.432547][ T6727] head: 0080000000000040 ffff88813feabc80 dead000000000100 dead000000000122 [ 190.432561][ T6727] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 190.432575][ T6727] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 190.432605][ T6727] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 190.432624][ T6727] page dumped because: kasan: bad access detected [ 190.432688][ T6727] page_owner tracks the page as allocated [ 190.432700][ T6727] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28196069104, free_ts 0 [ 190.432740][ T6727] post_alloc_hook+0x1f9/0x250 [ 190.432759][ T6727] get_page_from_freelist+0x265c/0x26e0 [ 190.432804][ T6727] __alloc_frozen_pages_noprof+0x18d/0x380 [ 190.432833][ T6727] allocate_slab+0x74/0x5e0 [ 190.432863][ T6727] refill_objects+0x33c/0x3d0 [ 190.432891][ T6727] __pcs_replace_empty_main+0x373/0x720 [ 190.432922][ T6727] __kmalloc_cache_noprof+0x44e/0x690 [ 190.432939][ T6727] bus_add_driver+0x165/0x670 [ 190.432973][ T6727] driver_register+0x23a/0x320 [ 190.433002][ T6727] usb_register_driver+0x1e4/0x390 [ 190.433028][ T6727] do_one_initcall+0x250/0x870 [ 190.433051][ T6727] do_initcall_level+0x104/0x190 [ 190.433080][ T6727] do_initcalls+0x59/0xa0 [ 190.433100][ T6727] kernel_init_freeable+0x2a6/0x3e0 [ 190.433115][ T6727] kernel_init+0x1d/0x1d0 [ 190.433146][ T6727] ret_from_fork+0x514/0xb70 [ 190.433169][ T6727] page_owner free stack trace missing [ 190.433177][ T6727] [ 190.433182][ T6727] Memory state around the buggy address: [ 190.433195][ T6727] ffff88802c5a3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.433211][ T6727] ffff88802c5a3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.433225][ T6727] >ffff88802c5a3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.433235][ T6727] ^ [ 190.433246][ T6727] ffff88802c5a3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.433266][ T6727] ffff88802c5a3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.433274][ T6727] ================================================================== [ 190.451809][ T6727] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.451847][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.2.313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 190.451909][ T6727] Tainted: [L]=SOFTLOCKUP [ 190.451931][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 190.451965][ T6727] Call Trace: [ 190.451981][ T6727] [ 190.451998][ T6727] vpanic+0x56c/0xa60 [ 190.452063][ T6727] ? __pfx_vpanic+0x10/0x10 [ 190.452145][ T6727] ? __pfx___schedule+0x10/0x10 [ 190.452182][ T6727] panic+0xc5/0xd0 [ 190.452241][ T6727] ? __pfx_panic+0x10/0x10 [ 190.452313][ T6727] ? preempt_schedule_thunk+0x16/0x40 [ 190.452355][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.452422][ T6727] check_panic_on_warn+0x89/0xb0 [ 190.452477][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.452503][ T6727] end_report+0x73/0x170 [ 190.452548][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.452613][ T6727] kasan_report+0x128/0x150 [ 190.452658][ T6727] ? dvb_device_open+0xc4/0x360 [ 190.452689][ T6727] dvb_device_open+0xc4/0x360 [ 190.452778][ T6727] ? rt_spin_unlock+0x160/0x200 [ 190.452821][ T6727] chrdev_open+0x4d0/0x5f0 [ 190.452845][ T6727] ? __pfx_chrdev_open+0x10/0x10 [ 190.452901][ T6727] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 190.452974][ T6727] ? __pfx_chrdev_open+0x10/0x10 [ 190.453001][ T6727] do_dentry_open+0x83d/0x13e0 [ 190.453073][ T6727] vfs_open+0x3b/0x350 [ 190.453123][ T6727] ? path_openat+0x2ed3/0x3960 [ 190.453157][ T6727] path_openat+0x2eea/0x3960 [ 190.453258][ T6727] ? __pfx_path_openat+0x10/0x10 [ 190.453306][ T6727] ? kasan_save_track+0x4f/0x80 [ 190.453330][ T6727] ? kasan_save_track+0x3e/0x80 [ 190.453367][ T6727] ? __kasan_slab_alloc+0x6c/0x80 [ 190.453443][ T6727] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.453471][ T6727] do_file_open+0x23e/0x4a0 [ 190.453503][ T6727] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.453598][ T6727] ? __pfx_do_file_open+0x10/0x10 [ 190.453636][ T6727] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 190.453695][ T6727] ? alloc_fd+0x679/0x6f0 [ 190.453746][ T6727] do_sys_openat2+0x115/0x200 [ 190.453794][ T6727] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.453820][ T6727] ? exc_page_fault+0x6a/0xc0 [ 190.453896][ T6727] ? do_user_addr_fault+0xc6f/0x1340 [ 190.453951][ T6727] __x64_sys_openat+0x138/0x170 [ 190.453980][ T6727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.454038][ T6727] do_syscall_64+0x174/0x580 [ 190.454120][ T6727] ? trace_irq_disable+0x3b/0x140 [ 190.454146][ T6727] ? clear_bhb_loop+0x40/0x90 [ 190.454222][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.454285][ T6727] RIP: 0033:0x7f2c019bd68e [ 190.454307][ T6727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 190.454343][ T6727] RSP: 002b:00007f2bffc4db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.454406][ T6727] RAX: ffffffffffffffda RBX: 00007f2bffc4e6c0 RCX: 00007f2c019bd68e [ 190.454445][ T6727] RDX: 0000000000141000 RSI: 00007f2bffc4dc00 RDI: ffffffffffffff9c [ 190.454461][ T6727] RBP: 00007f2bffc4dc00 R08: 0000000000000000 R09: 0000000000000000 [ 190.454476][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 190.454490][ T6727] R13: 00007f2c01c76038 R14: 00007f2c01c75fa0 R15: 00007ffe8998bfd8 [ 190.454543][ T6727] [ 190.454865][ T6727] Kernel Offset: disabled