last executing test programs: 9m41.293283004s ago: executing program 3 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) munlockall() madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x5e5782, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) write$dsp(r2, &(0x7f00000001c0)="5cba", 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000600)=@x86={0x7, 0x0, 0x8, 0x0, 0x8, 0x8, 0x4, 0xb, 0x3, 0xf, 0x5, 0x70, 0x0, 0x9, 0x2b, 0x0, 0x0, 0x0, 0x8, '\x00', 0x4, 0xd}) close(r2) fcntl$setsig(r3, 0xa, 0x21) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = mq_open(0x0, 0x40, 0x8, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 9m38.24216957s ago: executing program 3 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000200)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x3, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @empty}}]}, 0x210) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fdf8bc95b0000b9a2030000b800000000ba000000800f3066b81f008ee066ba430066ed66b8e4000f00d0b8010000000f01c12e260f01b50a000000c4e27d785670360f011866baf80cb8d6603f8eef66bafc0c66ed", 0x56}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 9m35.919301976s ago: executing program 3 (id=57): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @empty, 0x8}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x8}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) close(r0) 9m34.583877538s ago: executing program 3 (id=62): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_usb_ep_write(r1, 0xf7, 0xa3, &(0x7f0000000080)="518c04bb3a4ee9ada8d8f4aa5dbe7b44ee67c17fe692b697aff59ad41e6c3bad375ca4434ddc084bdb036e734cacb654a7723648d2399876f6b76fe4b61408e0ea4a5fdea61aa7847d22c2ba381f4001f9a1b3db8190d8874eb70f3ad5b369fbe47e93bd09fb8f85706026315048225db3a4f81ea2c1d4037ec838684490f8def1b8c59875bd364a6770f62393f5a4d9b31e350878e44202170ea23a371a88befbf12e") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 9m32.788669673s ago: executing program 3 (id=73): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x10, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x7fff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 9m32.510142671s ago: executing program 3 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @mcast2, 0x1, 0x0, 0x40, 0x500, 0x0, 0x10200}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = epoll_create(0x10000e9) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0x1b}) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfe33) 9m32.196439363s ago: executing program 32 (id=76): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a", 0x27}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@mcast1, @remote, @mcast2, 0x1, 0x0, 0x40, 0x500, 0x0, 0x10200}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = epoll_create(0x10000e9) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) r7 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000080)={0x1b}) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfe33) 12.939913355s ago: executing program 4 (id=2072): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = inotify_init1(0x800) r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0x24000802) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x34}}, 0x80) open(&(0x7f0000000040)='.\x00', 0x4d8403, 0x5c) 12.701802213s ago: executing program 4 (id=2073): timer_create(0x5, &(0x7f0000000180)={0x0, 0x37, 0x1, @thr={&(0x7f0000000040)="8955a2d524b9164ec11bed33f1cd684adb3eab7ce015cf2d889e4d5fc6023571e14778a157939d6ddb59b09e91f9c86fe33182cac9123bdd488eb23a4b75f04218f7a6c853f9bcfd76bf8f9d1b5b2c86a2e62cd5ab957b1ce98f704625dfe1d9864572fc256289ea245b4753356d9f6cd553f0c1318457c04757fe960d22dbe07c0cb7c9eb9badb4a4424be0c2", &(0x7f0000000100)="8ae10be3cad1"}}, &(0x7f00000001c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x3d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x4080) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 9.515153156s ago: executing program 4 (id=2085): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000105509147200000000000109022400010000000009040000040300000009210000000122050009058103e2812add050df240410002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x2f, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x3d4d) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.554719524s ago: executing program 1 (id=2093): socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket(0x40000000015, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}}, 0x80) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) r4 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f01f}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r5) waitid(0x2, 0x0, 0x0, 0x1000004, 0x0) sched_getattr(r5, &(0x7f0000000040)={0x38}, 0xffffffffffffff42, 0x0) 8.059969722s ago: executing program 5 (id=2096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote, 0x100}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) 6.911205913s ago: executing program 1 (id=2097): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x4070bd28}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)}], 0x1}, 0x4000000) (async) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) (async) close(r4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async, rerun: 32) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) (rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 6.846486391s ago: executing program 2 (id=2098): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)='\x00', 0x1}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xffff, 0x4, 0xfbff, 0x9}, 'syz1\x00', 0x49}) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x50, 0x26, 0x39, {0x2, 0x4}, {0x8000, 0xa}, @ramp={0x400, 0x7, {0x8, 0x6, 0xebcd, 0xfffb}}}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x143200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0xcf, 0xca, 0x64, 0x40, 0x5d1, 0x2022, 0xc940, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x19, 0x5, 0x50, 0x2, [{{0x9, 0x4, 0x3b, 0xff, 0x0, 0xc0, 0x18, 0x24, 0x7}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)='\x00', 0x1}, {0x0}], 0x2) (async) socket$kcm(0x10, 0x2, 0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xffff, 0x4, 0xfbff, 0x9}, 'syz1\x00', 0x49}) (async) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x51) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) (async) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000500)={0x50, 0x26, 0x39, {0x2, 0x4}, {0x8000, 0xa}, @ramp={0x400, 0x7, {0x8, 0x6, 0xebcd, 0xfffb}}}) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x143200, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0xcf, 0xca, 0x64, 0x40, 0x5d1, 0x2022, 0xc940, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x19, 0x5, 0x50, 0x2, [{{0x9, 0x4, 0x3b, 0xff, 0x0, 0xc0, 0x18, 0x24, 0x7}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) (async) 6.588265506s ago: executing program 0 (id=2099): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0x9, 0xbf, &(0x7f0000000100)=""/191, 0x41000, 0xa, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x4, 0x10, 0x1, 0xfffffffa}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[r0, r1, r1, r0], &(0x7f0000000200)=[{0x2, 0x2, 0xc, 0x9}, {0x4, 0x3, 0x3, 0x7}, {0x3, 0x2, 0x0, 0xa}, {0x4, 0x3, 0x7, 0x6}], 0x10, 0x1}, 0x94) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 6.568826219s ago: executing program 5 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r6, 0x0, 0x0, 0xa2}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r6, 0x0, 0x7, 0x1}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000003c0)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) (async) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@getae={0x1c0, 0x1f, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xa, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x6974, 0x34ff}, [@sa={0xe4, 0x6, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff, 0x4, 0x4e24, 0x3, 0x2, 0x0, 0x80, 0x6c, r1, r2}, {@in6=@local, 0x4d3, 0x6c}, @in6=@private1, {0x8000000000000000, 0x7ff, 0x6, 0x3, 0xc0d, 0x5, 0xd37, 0x1}, {0x4, 0x0, 0x7, 0x8000000000000000}, {0x1, 0x6, 0x400}, 0x70bd25, 0x3503, 0xa, 0x2, 0x9, 0x19}}, @algo_auth_trunc={0x9b, 0x14, {{'sha256-avx2\x00'}, 0x278, 0x40, "96ff87c4c6e5cbc335b913f92432457adbf7f6808367f270c58db4a2b403df4799609d04128c4a2ab77faeb863ba9262da09314cf98306d82cc7e3e5e73d0d4175417df14c51e128a7bfb3172926ba"}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x48000}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_TMR_METRONOME(r7, 0x40045407) 6.425423052s ago: executing program 0 (id=2101): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mq_notify(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0xffff]}}}}}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(r1, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/118, 0x76}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 6.364208673s ago: executing program 5 (id=2102): r0 = socket$netlink(0x10, 0x3, 0x3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.285228221s ago: executing program 4 (id=2103): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc931e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd9, 0x94, 0x8b, 0x20, 0x694, 0x1, 0xb244, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x60, 0x2, 0x1, 0xaa, 0x4, 0x96, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) 6.107091901s ago: executing program 5 (id=2104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000180)=""/130, &(0x7f0000000240)=0x82) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)="aff7", 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0x31, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f00000001c0)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x0, 0x0, 0xaac}, 0x48) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0xb0, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180d20000000800460000a2000800000006907864010101ac1414aa4404a21000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r1], 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000080)=""/98, &(0x7f0000000000)=0x62) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000340), 0x8) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)=@arm64={0xf, 0x0, 0x7, '\x00', 0x1}) 5.871993774s ago: executing program 5 (id=2105): r0 = syz_usb_connect(0x6, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x5c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600655800000800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) lseek(0xffffffffffffffff, 0x80000000004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x2000094}, 0x4040800) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 5.775255459s ago: executing program 1 (id=2106): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) read(r0, &(0x7f0000000040)=""/46, 0x2e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r2, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0xdc0b, 0x10100, 0x0, 0x20e, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) splice(r9, 0x0, r10, 0x0, 0x4ffe6, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6a, 0x3, "63f732ebf2d36a8295ef250485c83ea3cd7f19b71fc2bf26fd3537691d53a6b8a41bad7be4f06063c838d743206a34453275fa37244ac8f635eb9df6da9784d0d91cf2714f0a19c2859d8dfeda3ee1ff2ad739f520e82c97732040f37678fd425285c913e5ab"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "fd49f7f1c0d34f5a95ea15be9161f80b7f8f53e0f508d84c20759a800aebce93"}}, @TIPC_NLA_NODE_ID={0x60, 0x3, "515ab2b45caf88d4adf3add497c4bee7c38e591b5947c185dbef06c6c7bbaab374269ff0552950ea460a489de7cb52be839f31226aa2681c9df32b3136ba579f9ba5083f6f04584f9741d95907aaa3898a40042f6fcc5a0441c4b9b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffeffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 5.587892794s ago: executing program 2 (id=2107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x22000884) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000040)={0x20, r3, 0xffe3, 0x0, 0x0}) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8aa000) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000100)={0x980900, 0x8}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000280)={0x18, r3}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000003c0)={0x18, r3}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r3, 0x0, &(0x7f00000001c0)="09be7a0bd101a03c6800b7efc7a23e2850ddf1", 0x13, 0x2}) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000000)={0x0, r0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240), 0x0, 0x4000800) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x22, 0x7, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1004000}) 4.704413732s ago: executing program 1 (id=2108): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902810003010060000904000000010100000a240100000002010205240506000904010000010200000904010101010200000e240201000000009290d2199a5a09050109000000040007250180000000090402000001020000090402010101021b00082402010000000007240100000000090582090002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001340)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x4, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.657719143s ago: executing program 0 (id=2109): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0x63, 0x221, 0x0, 0x0}], 0x1}) 3.574820572s ago: executing program 2 (id=2110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004d4010000020a05"], 0x250}}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3.479828076s ago: executing program 0 (id=2111): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) (async) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000600)='syz0\x00') close(r0) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) r8 = open_tree(r7, &(0x7f0000000280)='\x00', 0x89901) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r11, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x400000000, 0x4, 0x9, 0x3, 0xfffffffffffffffc, 0x1000800000]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c744240200800000ff2c24f30f516797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4c}], 0x1, 0x24, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xe, 0x8}, 0x8) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) recvfrom$inet6(r8, &(0x7f00000001c0)=""/70, 0x46, 0x40, &(0x7f0000000240)={0xa, 0x4e23, 0xfff, @mcast2, 0x7fff}, 0x1c) (async) getdents(r6, &(0x7f0000001fc0)=""/171, 0xab) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000010000000000140012800900010076657468000000006e7ef76b0800200001"], 0x3c}, 0x1, 0x0, 0x0, 0x44800}, 0x800) 3.284766182s ago: executing program 0 (id=2112): syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv4_newroute={0x30, 0x18, 0x4a2499fd4c68d2f3, 0x2, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xc8, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}]}, 0x30}}, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x26c8, 0x0, 0x1, 0x0, 0x10) 2.185471131s ago: executing program 4 (id=2113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f"]) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x7de, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2b, 0x80801, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r6}}, 0x48) 1.572110139s ago: executing program 5 (id=2114): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) eventfd(0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat \a'], 0x1d) dup2(r5, r1) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fallocate(r6, 0x81, 0xa0, 0x6) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) 1.503041156s ago: executing program 1 (id=2115): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000001c0)="01", 0x1}], 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x40000e, 0x343}) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) (async) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f00000001c0)="01", 0x1}], 0x2) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x40000e, 0x343}) (async) 1.075786014s ago: executing program 0 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080010000060a01040000000000000000010000000900020073797a310000000038000480340001800c00010062697477697365002400028008000340000000040800024000000000080006400000000008000140000000000900010073797a30000000005e000740"], 0x1f4}}, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001500)=ANY=[@ANYBLOB="12e1ab16000000105e049d00ec0000000001090224000100000000090400fd0103000000090000000122050009058103000400000700f67efe4d3a85eec385102524211f90bc04a2a400f02c533073ebac8e38816f92ee70c5b22334714fda5e58655460b82dea00ad8b126fc49c55ca0397bdea482bd76dc3260946dd4642882967187af37ae6f4a97bbebc5a0c2d7614c162f2ef8ad0e44599fab2159b3fa8a96fc89c349e2ed6963dbf6068e538a4c5ff22b07dfa51db2bb6a7c9398b0d4a7d9c9ee8bb68f1eb0f431bcd28ccd9a9aea09490f492640bb65059a5fccb5b67fde92abb3a5f990d882910011285bb073d0220868f"], 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0xa102, 0x60) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x1, 0x9}}, 0x20) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x101, 0x83dd, &(0x7f00000001c0)="e3119d17ef249ae811c27d7995145cc9a0f057eb1ced9d53d0d446189c9e420a5274c6fdf8a6c717465f6087b4e12ae46adf8c90b19587fc2404281d83d2f2080f2eda7292c09ec4bd8419b64c1824291d0b76e517da55e685b3fd5232c38544f4cd34586c012b31afa8925e08f2ad3772380009693349ec14abd7fb1761467bd8d6c80517a4cdb2f8"}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000e00)={0x0, 0xc, 0x5, {0x5, 0x4, "6d4c90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x184, r7, 0x800, 0x7, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x167}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0xce8f6d3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7fffffffffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x40}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xe00000000000000}, {0xc}}]}, 0x184}, 0x1, 0x0, 0x0, 0x804}, 0x4000014) 1.027761257s ago: executing program 1 (id=2117): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x8000000000000000, 0x40000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r1, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socket(0x5, 0x800, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x6, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x200) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x20001}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000080)={0x3, r7, 0x1fa, 0x0, 0x4, 0x80000c, 0x0, 0x1, 0x4040}) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [], [0x3], [0x0, 0x9, 0x0, 0x2c8], [0x40000000000]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.027185771s ago: executing program 2 (id=2118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x70}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6}, 0x94) io_uring_setup(0x162e, &(0x7f00000002c0)={0x0, 0xd38b, 0x1000, 0x1, 0x348}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0x1cb) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 712.668815ms ago: executing program 2 (id=2119): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x8, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) r5 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x40045731, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmmsg$inet(r4, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) fcntl$notify(r1, 0x402, 0x1a) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 123.683016ms ago: executing program 2 (id=2120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket(0x2, 0x3, 0x6) r2 = accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80800) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x20, 0x48812, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504be93"], 0x0) 0s ago: executing program 4 (id=2121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000240)={0x2, 0x0, 0x6, {0x800, 0x0, 0x0, 0xf46}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r6, 0x0, &(0x7f0000000140)="b8", 0x1, 0x100, 0x1}) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000200)='~', 0x1) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000082647306e53f870c0000002a9000938a435a"], 0x0}, 0x0) kernel console output (not intermixed with test programs): 12796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.382047][ T1211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 563.526102][ T1211] usb 2-1: device descriptor read/64, error -71 [ 563.602425][ T5973] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 563.868833][ T1211] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 563.881906][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 563.891012][ T5973] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 563.920122][ T5973] usb 6-1: config 0 has no interface number 0 [ 563.927001][ T5973] usb 6-1: config 0 interface 12 has no altsetting 0 [ 563.939553][ T5973] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=87.40 [ 563.954521][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.968456][ T5973] usb 6-1: Product: syz [ 563.973875][ T5973] usb 6-1: Manufacturer: syz [ 563.978538][ T5973] usb 6-1: SerialNumber: syz [ 563.994642][ T5973] usb 6-1: config 0 descriptor?? [ 564.011455][ T1211] usb 2-1: device descriptor read/64, error -71 [ 564.135807][ T1211] usb usb2-port1: attempt power cycle [ 564.481465][ T1211] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 564.503315][ T1211] usb 2-1: device descriptor read/8, error -71 [ 564.768353][ T1211] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 564.797576][ T1211] usb 2-1: device descriptor read/8, error -71 [ 564.912792][ T1211] usb usb2-port1: unable to enumerate USB device [ 565.701591][ T5932] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 565.841014][T12806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.858064][T12806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.910472][ T5973] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 565.918398][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 565.978927][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.990267][ T5973] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 566.021450][ T5973] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 566.029132][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.055098][ T5973] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 566.098094][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 566.172846][ T5973] usb 6-1: USB disconnect, device number 122 [ 566.181272][ T5932] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 566.197834][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.293248][ T5932] usb 1-1: config 0 descriptor?? [ 566.360069][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1708'. [ 566.576109][T12847] loop7: detected capacity change from 7 to 8 [ 566.682969][ T1211] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 566.704355][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2 [ 566.714233][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 566.722742][ C0] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 566.731175][ C0] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 566.739680][ C0] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 566.748140][ C0] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 566.756611][ C0] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 566.765096][ C0] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 566.833687][ T5932] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 566.901831][ T5880] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 566.916328][ T5932] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 566.932343][ T1211] usb 5-1: device descriptor read/64, error -71 [ 567.051632][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 567.065539][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.108096][ T5880] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 567.187216][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.195472][ T5880] usb 3-1: Product: syz [ 567.199678][ T5880] usb 3-1: Manufacturer: syz [ 567.204560][ T5880] usb 3-1: SerialNumber: syz [ 567.220299][ T5880] usb 3-1: config 0 descriptor?? [ 567.241526][ T1211] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 567.244567][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0034/input/input52 [ 567.365759][ T5932] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 567.421543][ T1211] usb 5-1: device descriptor read/64, error -71 [ 567.431185][ T5880] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 567.654483][ T1211] usb usb5-port1: attempt power cycle [ 567.714561][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.723820][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.799849][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'. [ 567.809168][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 568.154106][ T1211] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 568.297290][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.303861][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.330253][ T1211] usb 5-1: device descriptor read/8, error -71 [ 568.556186][T10348] usb 3-1: Failed to submit usb control message: -110 [ 568.565253][T10348] usb 3-1: unable to send the bmi data to the device: -110 [ 568.575451][T10348] usb 3-1: unable to get target info from device [ 568.592853][ T1211] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 568.603152][T10348] usb 3-1: could not get target info (-110) [ 568.610396][T10348] usb 3-1: could not probe fw (-110) [ 568.625120][ T1211] usb 5-1: device descriptor read/8, error -71 [ 568.741924][ T1211] usb usb5-port1: unable to enumerate USB device [ 569.172208][ T5932] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 569.323286][ T5932] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 569.332416][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.342897][ T5932] usb 2-1: config 0 has no interface number 0 [ 569.349848][ T5932] usb 2-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.364225][ T5932] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 569.373474][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.393077][ T5932] usb 2-1: config 0 descriptor?? [ 569.413455][ T5932] cxacru 2-1:0.109: usbatm_usb_probe: bind failed: -19! [ 569.458205][T12872] ucma_write: process 1191 (syz.4.1714) changed security contexts after opening file descriptor, this is not allowed. [ 569.781907][ T1211] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 569.842180][ T30] audit: type=1326 audit(1756816074.546:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 569.907241][ T30] audit: type=1326 audit(1756816074.546:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 569.991197][T10498] usb 2-1: USB disconnect, device number 6 [ 570.021606][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 570.033099][ T1211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.046013][ T1211] usb 5-1: config 0 has no interfaces? [ 570.053490][ T9] usb 3-1: USB disconnect, device number 116 [ 570.078423][ T30] audit: type=1326 audit(1756816074.546:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.090552][ T1211] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 570.177270][ T30] audit: type=1326 audit(1756816074.546:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.203933][ T5932] usb 1-1: USB disconnect, device number 110 [ 570.211479][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.256178][ T1211] usb 5-1: config 0 descriptor?? [ 570.359267][ T30] audit: type=1326 audit(1756816074.546:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.403692][ T30] audit: type=1326 audit(1756816074.546:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.428495][ T30] audit: type=1326 audit(1756816074.546:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.457012][ T30] audit: type=1326 audit(1756816074.546:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.508648][ T30] audit: type=1326 audit(1756816074.546:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.5.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x7ffc0000 [ 570.571492][ T9] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 570.705975][T12872] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 570.717628][ T5973] usb 5-1: USB disconnect, device number 120 [ 570.743362][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.787803][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 570.841593][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 570.862574][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 570.922644][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.951516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.969204][ T9] usb 3-1: Product: syz [ 570.978930][ T9] usb 3-1: Manufacturer: syz [ 570.996129][ T9] usb 3-1: SerialNumber: syz [ 571.030970][T12882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 571.054159][ T9] cdc_mbim 3-1:1.0: skipping garbage [ 571.254607][T12882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 571.265450][T12882] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 572.229718][ T9] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 572.239221][ T9] cdc_mbim 3-1:1.0: bind() failure [ 572.261031][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 572.274857][ T9] cdc_ncm 3-1:1.1: bind() failure [ 572.317652][ T9] usb 3-1: USB disconnect, device number 117 [ 572.762123][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 573.058101][ T9] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 573.106765][ T9] usb 3-1: config 0 has no interface number 0 [ 573.121489][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 573.147376][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.194631][ T9] usb 3-1: Product: syz [ 573.287040][ T9] usb 3-1: Manufacturer: syz [ 573.301077][ T9] usb 3-1: SerialNumber: syz [ 573.315394][ T9] usb 3-1: config 0 descriptor?? [ 573.322971][ T9] hub 3-1:0.217: bad descriptor, ignoring hub [ 573.329566][ T9] hub 3-1:0.217: probe with driver hub failed with error -5 [ 573.531998][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 573.533090][T12938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.566994][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.614246][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 573.625707][T12938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.650876][ T9] usb 3-1: media controller created [ 573.819497][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.094974][ T9] DVB: Unable to find symbol dib7000p_attach() [ 574.193069][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 574.691667][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 574.701158][ T9] Registered IR keymap rc-empty [ 574.747742][ T9] dvb-usb: could not initialize remote control. [ 574.775686][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 575.045397][ T9] usb 3-1: USB disconnect, device number 118 [ 575.287989][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 575.298562][T12955] netlink: 'syz.5.1733': attribute type 1 has an invalid length. [ 575.551461][ T1211] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 575.793248][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.847949][ T1211] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 575.876227][ T1211] usb 5-1: can't read configurations, error -71 [ 576.146506][T12970] macvlan0: entered promiscuous mode [ 576.171204][T12970] macvlan0: entered allmulticast mode [ 576.259568][T12977] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 576.294814][T12977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 576.872373][T12999] netlink: 'syz.2.1743': attribute type 1 has an invalid length. [ 576.960702][T12999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1743'. [ 576.977771][ T1211] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 577.291634][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 577.308175][ T1211] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.319168][ T1211] usb 5-1: config 4 interface 0 has no altsetting 0 [ 577.329745][ T1211] usb 5-1: string descriptor 0 read error: -22 [ 577.338383][ T1211] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 577.411249][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.631804][ T5880] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 577.667082][ T1211] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 577.722423][ T1211] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 577.722785][ T1211] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 577.722843][ T1211] usb 5-1: media controller created [ 577.803200][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.868503][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 577.880270][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 577.880364][ T5880] usb 6-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 577.880383][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.888458][ T5880] usb 6-1: config 0 descriptor?? [ 578.090738][ T5880] usb 6-1: string descriptor 0 read error: -22 [ 578.270790][ T1211] usb 5-1: USB disconnect, device number 122 [ 579.759138][T13022] tipc: Enabling of bearer rejected, failed to enable media [ 579.909277][T13029] delete_channel: no stack [ 579.977187][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 580.058212][ T1211] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 580.221548][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 580.271556][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.298188][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.308241][ T1211] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 580.322090][ T1211] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 580.331442][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.335574][ T5973] usb 6-1: USB disconnect, device number 123 [ 580.499141][ T1211] usb 5-1: config 0 descriptor?? [ 580.941872][T13059] kvm: pic: non byte write [ 580.990691][ T1211] hid_parser_main: 8 callbacks suppressed [ 580.990727][ T1211] logitech 0003:046D:C293.0035: unknown main item tag 0x0 [ 581.022074][ T1211] logitech 0003:046D:C293.0035: unknown main item tag 0x0 [ 581.051103][ T1211] logitech 0003:046D:C293.0035: unknown main item tag 0x0 [ 581.067967][ T1211] logitech 0003:046D:C293.0035: unknown main item tag 0x0 [ 581.095707][ T1211] logitech 0003:046D:C293.0035: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.4-1/input0 [ 581.121476][ T1211] logitech 0003:046D:C293.0035: no inputs found [ 581.282083][ T5932] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 581.332174][ T5973] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 581.472058][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 581.502368][ T5973] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 581.521833][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.535830][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 581.610303][ T5973] usb 6-1: config 0 descriptor?? [ 581.615479][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 66 [ 581.639257][ T5973] cp210x 6-1:0.0: cp210x converter detected [ 581.652209][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 581.699586][ T5932] usb 1-1: New USB device found, idVendor=4ad6, idProduct=4cd8, bcdDevice=4f.32 [ 581.709170][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.721387][ T5932] usb 1-1: Product: syz [ 581.725648][ T5932] usb 1-1: Manufacturer: syz [ 581.730308][ T5932] usb 1-1: SerialNumber: syz [ 581.938475][ T5981] usb 5-1: USB disconnect, device number 123 [ 581.980373][ T5973] usb 6-1: cp210x converter now attached to ttyUSB0 [ 582.084882][ T5932] usb 1-1: config 0 descriptor?? [ 582.103909][T13059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 582.122527][T13059] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 582.642398][ T5981] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 582.808244][ T5981] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 582.825410][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.846362][ T5981] usb 5-1: Product: syz [ 582.856351][ T5981] usb 5-1: Manufacturer: syz [ 582.884123][ T5981] usb 5-1: SerialNumber: syz [ 582.905519][ T5981] usb 5-1: config 0 descriptor?? [ 582.927019][ T5981] ch341 5-1:0.0: ch341-uart converter detected [ 583.292344][ T1211] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 583.423621][T13099] tipc: Enabling of bearer rejected, failed to enable media [ 583.432817][ T1211] usb 3-1: device descriptor read/64, error -71 [ 583.671768][ T1211] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 583.680646][ T5973] usb 1-1: USB disconnect, device number 111 [ 583.752151][ T5932] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 583.811436][ T1211] usb 3-1: device descriptor read/64, error -71 [ 583.924266][ T5932] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 583.925867][ T1211] usb usb3-port1: attempt power cycle [ 583.934080][ T5932] usb 2-1: config 0 has no interface number 0 [ 583.998203][ T5932] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 584.056215][ T5932] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 584.073114][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.085040][ T5932] usb 2-1: Product: syz [ 584.098379][ T5932] usb 2-1: Manufacturer: syz [ 584.174382][ T5981] ch341-uart ttyUSB1: failed to read break control: -71 [ 584.185774][ T5981] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 584.196026][ T5973] usb 6-1: USB disconnect, device number 124 [ 584.246514][ T5932] usb 2-1: SerialNumber: syz [ 584.264261][ T5973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 584.281934][ T1211] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 584.302628][ T5981] usb 5-1: USB disconnect, device number 124 [ 584.315362][ T1211] usb 3-1: device descriptor read/8, error -71 [ 584.343048][ T5932] usb 2-1: config 0 descriptor?? [ 584.354790][ T5973] cp210x 6-1:0.0: device disconnected [ 584.362894][ T5981] ch341 5-1:0.0: device disconnected [ 584.571879][ T1211] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 584.620196][ T5932] usb 2-1: USB disconnect, device number 7 [ 584.638988][ T1211] usb 3-1: device descriptor read/8, error -71 [ 584.679015][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.770980][ T1211] usb usb3-port1: unable to enumerate USB device [ 585.521511][ T5973] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 585.682252][ T5973] usb 2-1: Using ep0 maxpacket: 8 [ 585.693654][ T5973] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 585.707278][ T5973] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 585.800531][T13138] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 585.828185][T13138] team0: Port device batadv1 added [ 585.848319][ T5973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.866105][ T5973] usb 2-1: New USB device found, idVendor=1d6b, idProduct=8101, bcdDevice= 0.40 [ 585.885546][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.904104][ T5973] usb 2-1: Product: syz [ 585.943717][ T5973] usb 2-1: Manufacturer: syz [ 585.948373][ T5973] usb 2-1: SerialNumber: syz [ 586.061818][T13140] hub 9-0:1.0: USB hub found [ 586.068023][T13140] hub 9-0:1.0: 1 port detected [ 586.107796][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1782'. [ 586.360366][ T5973] usb 2-1: 0:2 : does not exist [ 586.579068][ T5973] usb 2-1: USB disconnect, device number 8 [ 587.160900][T13153] syzkaller1: entered promiscuous mode [ 587.166637][T13153] syzkaller1: entered allmulticast mode [ 587.985314][T13155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.179836][T13158] netlink: 'syz.0.1786': attribute type 27 has an invalid length. [ 588.655757][T13162] netlink: 'syz.2.1788': attribute type 30 has an invalid length. [ 588.666799][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1788'. [ 588.985542][T13176] cgroup: fork rejected by pids controller in /syz1 [ 589.042470][ T5973] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 589.244156][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 589.271936][T13187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1795'. [ 589.281149][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 589.390025][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.484289][ T5973] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 589.519277][T13188] B: renamed from veth0 (while UP) [ 589.552262][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.764856][ T5973] usb 1-1: config 0 descriptor?? [ 590.221741][ T5981] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 590.307616][ T5973] lenovo 0003:17EF:6047.0036: unknown main item tag 0x0 [ 590.310847][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 590.332330][ T5973] lenovo 0003:17EF:6047.0036: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 590.424066][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.436092][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.473075][ T5981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 590.587665][ T24] usb 1-1: USB disconnect, device number 112 [ 590.610554][ T5981] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.654306][ T5973] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 590.674668][T10347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.700514][T13191] fido_id[13191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 590.725779][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.871486][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 590.898206][ T5981] usb 6-1: config 0 descriptor?? [ 590.915263][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.037220][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.097613][T10347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.138707][ T5973] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 591.170133][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.328333][ T5973] usb 3-1: config 0 descriptor?? [ 591.391983][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.462113][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.495041][T10347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.600243][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.623477][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.639382][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.649971][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.660361][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.751583][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.773775][ T5981] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 591.842747][T10347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.873312][ T24] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 591.900146][ T5981] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 591.932723][ T5973] savu 0003:1E7D:2D5A.0038: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 591.992945][ T5973] usb 3-1: USB disconnect, device number 123 [ 592.011494][ T24] usb 5-1: device descriptor read/64, error -71 [ 592.251957][ T24] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 592.364580][T13212] fido_id[13212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 592.382680][ T24] usb 5-1: device descriptor read/64, error -71 [ 592.491929][ T24] usb usb5-port1: attempt power cycle [ 592.825086][ T5188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 592.835589][ T5188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 592.846686][ T5188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 592.876087][ T5188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 592.902022][ T24] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 592.910000][ T5188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.978747][ T24] usb 5-1: device descriptor read/8, error -71 [ 593.046717][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.072277][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.079872][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.106069][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.131693][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 593.221455][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 593.241898][ T24] usb 5-1: device descriptor read/8, error -71 [ 593.419010][ T24] usb usb5-port1: unable to enumerate USB device [ 593.445777][ T9] usb 6-1: USB disconnect, device number 125 [ 593.591684][ T5973] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 593.851506][ T5973] usb 3-1: device descriptor read/64, error -71 [ 594.103334][ T5973] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 594.261446][ T5973] usb 3-1: device descriptor read/64, error -71 [ 594.372258][ T5973] usb usb3-port1: attempt power cycle [ 594.751457][ T5973] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 594.772306][ T5973] usb 3-1: device descriptor read/8, error -71 [ 594.890732][T10347] dvmrp0 (unregistering): left allmulticast mode [ 595.021845][ T5973] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 595.077679][ T5973] usb 3-1: device descriptor read/8, error -71 [ 595.191924][ T5973] usb usb3-port1: unable to enumerate USB device [ 595.200068][ T5879] Bluetooth: hci2: command tx timeout [ 595.745405][T10347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.760271][T10347] bond_slave_0: left allmulticast mode [ 595.814624][T10347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.830756][T10347] bond_slave_1: left allmulticast mode [ 595.881558][T10347] bond0 (unregistering): (slave team0): Releasing backup interface [ 595.895102][T10347] team0: left allmulticast mode [ 595.899990][T10347] team_slave_0: left allmulticast mode [ 595.910007][T10347] team_slave_1: left allmulticast mode [ 595.925439][T10347] bond0 (unregistering): Released all slaves [ 596.069809][T10347] tipc: Disabling bearer [ 596.090167][T10347] tipc: Left network mode [ 596.727821][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'. [ 596.737216][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 597.281510][ T5879] Bluetooth: hci2: command tx timeout [ 597.705753][T13233] chnl_net:caif_netlink_parms(): no params data found [ 597.780308][T13292] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 597.912292][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 598.113161][ T5981] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 598.113197][ T5981] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.113217][ T5981] usb 5-1: config 1 interface 0 has no altsetting 0 [ 598.116497][ T5981] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40 [ 598.116518][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.116533][ T5981] usb 5-1: Product: syz [ 598.116544][ T5981] usb 5-1: Manufacturer: à°­ [ 598.116555][ T5981] usb 5-1: SerialNumber: syz [ 598.352934][ T5981] usbhid 5-1:1.0: can't add hid device: -71 [ 598.353051][ T5981] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 598.358218][ T5981] usb 5-1: USB disconnect, device number 3 [ 598.361940][ T5973] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 598.451237][T13233] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.451477][T13233] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.451669][T13233] bridge_slave_0: entered allmulticast mode [ 598.458883][T13233] bridge_slave_0: entered promiscuous mode [ 598.513454][ T5973] usb 6-1: Using ep0 maxpacket: 8 [ 598.517882][T13233] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.526801][T13233] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.534819][T13233] bridge_slave_1: entered allmulticast mode [ 598.544698][T13233] bridge_slave_1: entered promiscuous mode [ 598.560720][ T5973] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 598.582053][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.590080][ T5973] usb 6-1: Product: syz [ 598.598879][ T5973] usb 6-1: Manufacturer: syz [ 598.603979][ T5973] usb 6-1: SerialNumber: syz [ 598.603982][T10347] hsr_slave_0: left promiscuous mode [ 598.619807][ T5973] usb 6-1: config 0 descriptor?? [ 598.626128][T10347] hsr_slave_1: left promiscuous mode [ 598.633710][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.641821][T10347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.706097][T10347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.761442][T10347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.033161][T10347] veth1_macvtap: left promiscuous mode [ 599.056342][T10347] veth0_macvtap: left allmulticast mode [ 599.062164][T10347] veth0_macvtap: left promiscuous mode [ 599.068060][T10347] veth1_vlan: left promiscuous mode [ 599.077761][T10347] veth0_vlan: left promiscuous mode [ 599.135891][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.168482][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.214074][T13297] fuse: Bad value for 'group_id' [ 599.219098][T13297] fuse: Bad value for 'group_id' [ 599.354188][ T5879] Bluetooth: hci2: command tx timeout [ 599.782971][T10347] pim6reg (unregistering): left allmulticast mode [ 600.986931][T13323] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 601.160915][ T5973] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.213024][ T5973] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 601.242506][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 601.246503][ T5973] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 601.290964][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1822'. [ 601.300489][ T5973] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 601.345763][ T5973] usb 6-1: USB disconnect, device number 126 [ 601.375927][T13334] netlink: 'syz.0.1823': attribute type 10 has an invalid length. [ 601.441677][ T5879] Bluetooth: hci2: command tx timeout [ 601.543578][T10347] team0 (unregistering): Port device team_slave_1 removed [ 601.624959][T10347] team0 (unregistering): Port device team_slave_0 removed [ 601.751987][ T5973] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 601.925187][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 601.933770][ T5973] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.962778][ T5973] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 601.997191][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.014666][ T5973] usb 6-1: config 0 descriptor?? [ 602.605235][ T5973] uclogic 0003:28BD:0042.0039: interface is invalid, ignoring [ 603.087852][T13334] batman_adv: batadv0: Adding interface: wlan1 [ 603.109122][T13334] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.135176][T13334] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 603.177254][T13233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.204393][ T30] audit: type=1326 audit(1756816107.906:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.309367][ T30] audit: type=1326 audit(1756816107.936:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.406287][T13233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.420002][ T30] audit: type=1326 audit(1756816107.936:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127918ebe9 code=0x7ffc0000 [ 603.442377][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.521647][ T30] audit: type=1326 audit(1756816107.936:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127918ebe9 code=0x7ffc0000 [ 603.544007][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.589113][ T30] audit: type=1326 audit(1756816107.946:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.611399][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.619341][ T30] audit: type=1326 audit(1756816107.946:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127918ebe9 code=0x7ffc0000 [ 603.641714][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.653025][ T30] audit: type=1326 audit(1756816107.946:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127918ebe9 code=0x7ffc0000 [ 603.675386][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.687643][ T30] audit: type=1326 audit(1756816107.956:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.709920][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.734536][ T30] audit: type=1326 audit(1756816107.956:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.745021][T13233] team0: Port device team_slave_0 added [ 603.756829][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.757388][ T1211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 603.777968][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 603.822573][ T30] audit: type=1326 audit(1756816107.956:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13333 comm="syz.0.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f127912adb9 code=0x7ffc0000 [ 603.837759][T13233] team0: Port device team_slave_1 added [ 603.844887][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.878253][T13353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1826'. [ 603.887752][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 603.951503][ T1211] usb 5-1: device descriptor read/64, error -71 [ 603.963403][T13349] team1: entered promiscuous mode [ 603.968562][T13349] team1: entered allmulticast mode [ 604.173569][T10347] IPVS: stop unused estimator thread 0... [ 604.184035][T13233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.198472][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.206020][ T1211] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 604.224464][ C0] vkms_vblank_simulate: vblank timer overrun [ 604.270665][T13233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.296876][T13233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.304256][T13233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.373998][T13233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.416504][ T9] usb 6-1: USB disconnect, device number 127 [ 604.465926][ T1211] usb 5-1: device descriptor read/64, error -71 [ 604.622268][ T1211] usb usb5-port1: attempt power cycle [ 604.759009][T13365] binder: 13364:13365 ioctl 4b2f ef9 returned -22 [ 604.917504][T13233] hsr_slave_0: entered promiscuous mode [ 604.924818][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.934496][T13233] hsr_slave_1: entered promiscuous mode [ 604.941034][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.961748][T13233] debugfs: 'hsr0' already exists in 'hsr' [ 604.981780][T13233] Cannot create hsr debugfs directory [ 604.991549][ T1211] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 605.068716][ T1211] usb 5-1: device descriptor read/8, error -71 [ 605.151503][ T5973] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 605.301512][ T5973] usb 6-1: Invalid ep0 maxpacket: 32 [ 605.344314][ T1211] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 605.427902][ T1211] usb 5-1: device descriptor read/8, error -71 [ 605.432472][ T5973] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 605.542428][ T1211] usb usb5-port1: unable to enumerate USB device [ 605.613912][ T5973] usb 6-1: Invalid ep0 maxpacket: 32 [ 605.630236][ T5973] usb usb6-port1: attempt power cycle [ 605.733698][T10498] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 605.935665][T10498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.951968][ T5981] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 605.967448][T10498] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.988875][T10498] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 605.991654][ T5973] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 606.012694][T10498] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.038690][T10498] usb 1-1: config 0 descriptor?? [ 606.046137][ T5973] usb 6-1: Invalid ep0 maxpacket: 32 [ 606.125245][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 606.131132][T13233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.145570][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 606.164828][ T5981] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 606.178581][T13233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.189998][ T5981] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 606.201719][ T5973] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 606.205781][T13233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.217731][ T5981] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.228359][T13233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 606.229699][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.246189][ T5981] usb 3-1: Product: syz [ 606.251646][ T5973] usb 6-1: Invalid ep0 maxpacket: 32 [ 606.258123][ T5973] usb usb6-port1: unable to enumerate USB device [ 606.266293][ T5981] usb 3-1: Manufacturer: syz [ 606.271908][ T5981] usb 3-1: SerialNumber: syz [ 606.517663][T10498] hid_parser_main: 29 callbacks suppressed [ 606.517689][T10498] saitek 0003:06A3:0CFA.003A: unknown main item tag 0x0 [ 606.557934][ T5981] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 606.565655][T10498] saitek 0003:06A3:0CFA.003A: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.0-1/input0 [ 606.589188][ T5981] cdc_ncm 3-1:1.0: bind() failure [ 606.625920][ T5981] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 606.642802][ T5981] cdc_ncm 3-1:1.1: bind() failure [ 606.647792][T13233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.671184][ T5981] usb 3-1: USB disconnect, device number 3 [ 606.708217][ T24] usb 1-1: USB disconnect, device number 113 [ 606.745602][T13233] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.752666][ T5973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 606.787268][ T9247] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.794546][ T9247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.820711][T13412] fido_id[13412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 606.868778][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.876011][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.932004][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 606.952374][ T5973] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 606.970767][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 606.999461][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 607.026209][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.065208][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.141023][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 607.165329][T13233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.174486][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.330148][T13233] veth0_vlan: entered promiscuous mode [ 607.403446][T13425] trusted_key: encrypted_key: master key parameter 'u†er:syz' is invalid [ 607.602033][T13233] veth1_vlan: entered promiscuous mode [ 607.609999][ T5973] usb 5-1: usb_control_msg returned -32 [ 607.630460][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 607.752819][T13233] veth0_macvtap: entered promiscuous mode [ 607.788856][T13233] veth1_macvtap: entered promiscuous mode [ 607.891249][T13233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.932574][T13233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.102992][ T3556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.164910][ T3556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.200293][T13438] usb usb8: usbfs: process 13438 (syz.0.1838) did not claim interface 0 before use [ 608.213670][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 608.231567][T13438] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 608.241645][T13438] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1838'. [ 608.253722][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 608.311157][ T3556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.359610][ T3556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.539695][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.611460][T10498] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 608.667077][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.756683][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.802318][T13448] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 608.834453][T10498] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 608.851505][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.859329][T10498] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.897178][T10348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.912517][T10348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.919956][T10498] usb 6-1: config 0 has no interfaces? [ 608.943162][ T10] usb 5-1: USB disconnect, device number 8 [ 609.031176][T10498] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 609.072995][T10498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.127517][T10498] usb 6-1: Product: syz [ 609.168157][T10498] usb 6-1: Manufacturer: syz [ 609.201755][T10498] usb 6-1: SerialNumber: syz [ 609.228573][T10498] usb 6-1: config 0 descriptor?? [ 609.371456][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 609.555321][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.604618][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 609.659748][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.676803][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 609.700514][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 609.722452][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 609.722470][ T30] audit: type=1326 audit(1756816114.426:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 609.724761][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 609.764476][ T30] audit: type=1326 audit(1756816114.426:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 609.837613][ T30] audit: type=1326 audit(1756816114.426:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 609.886423][ T24] usb 2-1: Manufacturer: syz [ 609.905267][ T24] usb 2-1: config 0 descriptor?? [ 609.986868][ T30] audit: type=1326 audit(1756816114.426:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.121210][ T30] audit: type=1326 audit(1756816114.426:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.166155][ T30] audit: type=1326 audit(1756816114.426:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.469661][ T30] audit: type=1326 audit(1756816114.426:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.610473][ T30] audit: type=1326 audit(1756816114.426:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.725596][ T24] rc_core: IR keymap rc-hauppauge not found [ 610.740177][ T24] Registered IR keymap rc-empty [ 610.758322][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 610.789182][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 610.801674][ T30] audit: type=1326 audit(1756816114.496:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.825773][T13473] netlink: 'syz.2.1842': attribute type 5 has an invalid length. [ 610.881041][ T30] audit: type=1326 audit(1756816114.496:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13457 comm="syz.4.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6e4f8ebe9 code=0x7ffc0000 [ 610.909602][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 610.932688][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 610.949216][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 610.997568][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.021949][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.121643][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.161782][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.177932][T10498] usb 6-1: USB disconnect, device number 6 [ 611.282122][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.303001][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.332150][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.372368][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.401930][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.443173][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.476425][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 611.506062][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 611.529873][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.271568][ T5973] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 612.292228][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 612.591870][ T5952] usb 2-1: USB disconnect, device number 9 [ 612.604671][ T5981] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 612.635281][ T24] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 612.645157][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 612.672548][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.706089][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 612.748143][ T24] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 612.763182][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 612.781445][ T5981] usb 3-1: device descriptor read/64, error -71 [ 612.794401][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.803307][ T24] usb 6-1: Product: syz [ 612.807799][ T24] usb 6-1: Manufacturer: syz [ 612.814115][ T24] usb 6-1: SerialNumber: syz [ 612.820257][ T5973] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 612.830137][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.845757][ T5973] usb 5-1: Product: syz [ 612.855010][ T24] usb 6-1: config 0 descriptor?? [ 612.865466][ T5973] usb 5-1: Manufacturer: syz [ 612.874018][ T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 612.885807][ T5973] usb 5-1: SerialNumber: syz [ 612.955547][ T5973] usb 5-1: config 0 descriptor?? [ 613.006923][T13493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 613.034934][T13493] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 613.042817][ T5981] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 613.072875][ T5973] usb 5-1: ucan: probing device on interface #0 [ 613.191930][ T5981] usb 3-1: device descriptor read/64, error -71 [ 613.274983][ T5973] usb 5-1: ucan: could not read protocol version, ret=-71 [ 613.300284][ T5973] usb 5-1: ucan: probe failed; try to update the device firmware [ 613.310578][ T5981] usb usb3-port1: attempt power cycle [ 613.477867][ T5973] usb 5-1: USB disconnect, device number 9 [ 613.741559][ T5981] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 613.785375][ T5981] usb 3-1: device descriptor read/8, error -71 [ 613.992773][ T24] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 613.999765][ T24] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 614.041470][ T5981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 614.104572][ T5981] usb 3-1: device descriptor read/8, error -71 [ 614.243734][ T5981] usb usb3-port1: unable to enumerate USB device [ 614.268834][ T5981] usb 6-1: USB disconnect, device number 7 [ 614.823097][ T5981] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 615.022792][T13533] fuse: Bad value for 'fd' [ 615.030994][ T5981] usb 6-1: Using ep0 maxpacket: 16 [ 615.433161][ T5981] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 615.461734][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.516018][ T5981] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 615.546408][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.581332][ T5981] usb 6-1: Product: syz [ 615.585654][ T5981] usb 6-1: Manufacturer: syz [ 615.701169][ T5981] usb 6-1: SerialNumber: syz [ 615.732360][ T5981] usb 6-1: config 0 descriptor?? [ 615.760409][ T5981] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 615.775884][T13538] fuse: Bad value for 'user_id' [ 615.809431][ T5981] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 615.811476][T13538] fuse: Bad value for 'user_id' [ 615.971144][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1854'. [ 615.980440][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1854'. [ 616.285214][ T5981] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 616.300009][ T5981] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 616.316355][ T5981] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 616.357763][ T5981] em28xx 6-1:0.0: No AC97 audio processor [ 616.391035][ T5981] usb 6-1: USB disconnect, device number 8 [ 616.438715][ T5981] em28xx 6-1:0.0: Disconnecting em28xx [ 616.527418][ T5981] em28xx 6-1:0.0: Freeing device [ 617.204471][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 618.421723][ T5981] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 618.571809][ T5981] usb 5-1: device descriptor read/64, error -71 [ 618.821722][ T5981] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 618.917761][T13589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1864'. [ 618.975088][ T5981] usb 5-1: device descriptor read/64, error -71 [ 619.117704][ T5981] usb usb5-port1: attempt power cycle [ 619.471615][ T5981] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 619.502224][ T5981] usb 5-1: device descriptor read/8, error -71 [ 619.601802][T13606] netlink: 'syz.2.1867': attribute type 6 has an invalid length. [ 619.613684][T13606] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1867'. [ 619.753121][ T5981] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 619.808594][ T5981] usb 5-1: device descriptor read/8, error -71 [ 619.936523][ T5981] usb usb5-port1: unable to enumerate USB device [ 620.221576][ T5981] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 620.400224][ T5981] usb 2-1: config 0 has an invalid interface number: 221 but max is 0 [ 620.401514][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 620.416546][ T5981] usb 2-1: config 0 has no interface number 0 [ 620.430805][ T5981] usb 2-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=ba.57 [ 620.445186][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.458167][ T5981] usb 2-1: Product: syz [ 620.465920][ T5981] usb 2-1: Manufacturer: syz [ 620.471066][ T5981] usb 2-1: SerialNumber: syz [ 620.507064][ T5981] usb 2-1: config 0 descriptor?? [ 620.616585][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 620.634179][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 620.651496][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 620.672154][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 620.687963][ T10] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 620.721212][ T10] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 620.737953][ T5981] HFC-S_USB 2-1:0.221: probe with driver HFC-S_USB failed with error -5 [ 620.751164][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 620.760329][ T5981] usb 2-1: USB disconnect, device number 10 [ 620.770276][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 620.781987][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.809571][ T10] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 621.006757][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 621.021243][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 622.007284][ T10] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 622.072380][ T10] usb 3-1: USB disconnect, device number 8 [ 622.111648][ T1211] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 622.275391][ T1211] usb 6-1: config 0 has an invalid interface number: 195 but max is 0 [ 622.291387][ T1211] usb 6-1: config 0 has no interface number 0 [ 622.311506][ T1211] usb 6-1: config 0 interface 195 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 622.406306][ T1211] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 622.432969][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.481366][ T1211] usb 6-1: Product: syz [ 622.495868][ T1211] usb 6-1: Manufacturer: syz [ 622.500513][ T1211] usb 6-1: SerialNumber: syz [ 622.610000][T13650] bridge1: entered promiscuous mode [ 622.655305][ T1211] usb 6-1: config 0 descriptor?? [ 622.690593][T13646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 623.822087][ T5981] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 623.983338][ T5981] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.365964][ T5981] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 624.378161][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 624.408930][ T5981] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.566574][ T5981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 624.571386][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 624.590030][ T5981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.607414][ T5981] usb 1-1: Product: syz [ 624.608998][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.654451][ T5981] usb 1-1: Manufacturer: syz [ 624.657401][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 624.659608][ T5981] usb 1-1: SerialNumber: syz [ 624.698044][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.814442][ T10] usb 3-1: config 0 descriptor?? [ 624.902619][ T1211] asix 6-1:0.195 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 624.948151][ T1211] asix 6-1:0.195: probe with driver asix failed with error -71 [ 624.952748][T13665] fuse: Bad value for 'fd' [ 624.958675][T13680] fuse: Bad value for 'fd' [ 625.212364][ T1211] usb 6-1: USB disconnect, device number 9 [ 625.238802][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 625.460377][ T5981] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 625.519940][ T5981] cdc_ncm 1-1:1.0: bind() failure [ 625.658111][ T24] usb 3-1: USB disconnect, device number 9 [ 625.673908][ T5981] usb 1-1: USB disconnect, device number 114 [ 625.731771][ T1211] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 625.931392][ T1211] usb 6-1: Using ep0 maxpacket: 16 [ 625.946580][ T1211] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 625.958649][ T1211] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 625.968889][ T1211] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.002539][ T1211] usb 6-1: config 1 interface 0 has no altsetting 0 [ 626.022675][ T1211] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 626.032198][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.040344][ T1211] usb 6-1: Product: syz [ 626.044698][ T1211] usb 6-1: Manufacturer: syz [ 626.049324][ T1211] usb 6-1: SerialNumber: syz [ 626.296190][ T1211] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 626.311675][ T5981] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 626.472487][ T5981] usb 1-1: too many configurations: 252, using maximum allowed: 8 [ 626.482469][ T5981] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 626.490329][ T5981] usb 1-1: can't read configurations, error -61 [ 626.631696][ T5981] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 627.055930][ T5981] usb 1-1: too many configurations: 252, using maximum allowed: 8 [ 627.073069][ T5981] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 627.106135][ T5981] usb 1-1: can't read configurations, error -61 [ 627.130704][ T5981] usb usb1-port1: attempt power cycle [ 627.651401][ T5981] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 627.672651][ T5981] usb 1-1: too many configurations: 252, using maximum allowed: 8 [ 627.689152][ T5981] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 627.708812][ T5981] usb 1-1: can't read configurations, error -61 [ 627.861618][ T5981] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 627.971769][ T5973] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 627.980569][ T5981] usb 1-1: too many configurations: 252, using maximum allowed: 8 [ 627.990158][ T5981] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 627.998354][ T5981] usb 1-1: can't read configurations, error -61 [ 628.121388][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 628.151694][ T5981] usb usb1-port1: unable to enumerate USB device [ 628.182296][ T5981] usb 6-1: USB disconnect, device number 10 [ 628.190221][ T5981] usblp0: removed [ 628.281844][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 628.295057][ T24] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 628.306109][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 628.326983][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.335898][ T5973] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 628.345716][ T24] usb 3-1: Product: syz [ 628.349893][ T24] usb 3-1: Manufacturer: syz [ 628.355101][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.363822][ T24] usb 3-1: SerialNumber: syz [ 628.370693][ T5973] usb 2-1: config 0 descriptor?? [ 628.389908][ T24] usb 3-1: config 0 descriptor?? [ 628.405666][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 628.465994][T13714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1897'. [ 628.475767][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1897'. [ 628.631486][ T5981] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 628.798927][ T5981] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 628.813742][T13706] macvlan2: entered promiscuous mode [ 628.826462][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.826740][T13706] macvlan2: entered allmulticast mode [ 628.889647][T13706] veth1_vlan: entered allmulticast mode [ 628.910129][ T5981] usb 6-1: Product: syz [ 628.922074][ T5981] usb 6-1: Manufacturer: syz [ 628.933818][ T5973] aquacomputer_d5next 0003:0C70:F011.003B: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 628.948203][ T5981] usb 6-1: SerialNumber: syz [ 629.188890][ T5973] usb 2-1: USB disconnect, device number 11 [ 629.319771][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 629.511935][ T24] gspca_ov534_9: reg_w failed -110 [ 629.661548][ T1211] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 629.679886][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.687498][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.811538][ T24] gspca_ov534_9: Unknown sensor 0000 [ 629.811653][ T24] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 629.895423][ T1211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.940290][ T5981] rtl8150 6-1:1.0: couldn't reset the device [ 629.961728][ T5981] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 630.003924][ T5981] usb 6-1: USB disconnect, device number 11 [ 630.082119][ T1211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 630.299207][ T1211] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 630.311251][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 630.330225][ T1211] usb 1-1: SerialNumber: syz [ 630.369653][T13732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.641655][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 630.813293][T13738] pim6reg: entered allmulticast mode [ 630.952209][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 630.959969][ T10] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 630.969840][ T10] usb 2-1: config 0 has no interface number 0 [ 630.992698][ T10] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 631.002608][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.012346][ T10] usb 2-1: Product: syz [ 631.017479][ T10] usb 2-1: Manufacturer: syz [ 631.069007][ T10] usb 2-1: SerialNumber: syz [ 631.093331][ T10] usb 2-1: config 0 descriptor?? [ 631.102446][ T10] kobil_sct 2-1:0.148: required endpoints missing [ 631.310139][ T10] usb 2-1: USB disconnect, device number 12 [ 631.632084][ T5981] usb 3-1: USB disconnect, device number 10 [ 631.806303][T13733] pim6reg: left allmulticast mode [ 632.224081][ T1211] usb 1-1: 0:2 : does not exist [ 632.291851][ T1211] usb 1-1: USB disconnect, device number 119 [ 632.412839][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.336763][T13789] kvm: pic: single mode not supported [ 633.336954][T13789] kvm: pic: level sensitive irq not supported [ 633.351961][ T981] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 633.375182][T13789] kvm: pic: non byte read [ 633.394240][T13789] kvm: pic: non byte read [ 633.399019][T13789] kvm: pic: non byte read [ 633.405035][T13789] kvm: pic: non byte read [ 633.409723][T13789] kvm: pic: non byte read [ 633.415032][T13789] kvm: pic: single mode not supported [ 633.415091][T13789] kvm: pic: non byte read [ 633.426046][T13789] kvm: pic: non byte read [ 633.430827][T13789] kvm: pic: non byte read [ 633.465467][T13789] kvm: pic: non byte read [ 633.507477][T13793] netlink: 'syz.5.1916': attribute type 4 has an invalid length. [ 633.536194][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 633.547311][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 633.566139][T13797] netlink: 'syz.5.1916': attribute type 4 has an invalid length. [ 633.594739][ T981] usb 5-1: config 1 has an invalid interface number: 249 but max is 0 [ 633.609982][ T981] usb 5-1: config 1 has no interface number 0 [ 633.635664][ T981] usb 5-1: string descriptor 0 read error: -22 [ 633.659971][ T981] usb 5-1: New USB device found, idVendor=0421, idProduct=0434, bcdDevice= 1.00 [ 633.674598][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.704077][ T981] usb-storage 5-1:1.249: USB Mass Storage device detected [ 633.738525][ T981] usb-storage 5-1:1.249: Quirks match for vid 0421 pid 0434: 30 [ 633.988145][ T981] usb 5-1: USB disconnect, device number 14 [ 635.511656][T13787] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 635.511716][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 635.527923][T13787] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 636.128125][T13787] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 636.142579][T13797] block nbd0: Attempted send on invalid socket [ 636.156329][T13797] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 636.421739][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 636.455081][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 636.571763][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 636.624500][ T24] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 636.632205][ T1211] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 636.634451][ T981] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 636.648926][ T24] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 636.657784][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 636.672822][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 636.673938][ T10] usb 3-1: config 4 has an invalid interface number: 88 but max is 0 [ 636.691065][ T24] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 636.693071][ T10] usb 3-1: config 4 has no interface number 0 [ 636.707011][ T10] usb 3-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 636.709924][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.720511][ T10] usb 3-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 636.823136][ T10] usb 3-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 636.841776][ T10] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.844087][ T981] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 636.855342][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 636.868741][ T10] usb 3-1: config 4 interface 88 has no altsetting 0 [ 636.869698][ T24] usb 5-1: Product: syz [ 636.882732][ T1211] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 636.892153][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 636.901569][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.909690][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.918134][ T10] usb 3-1: Product: syz [ 636.928328][ T1211] usb 2-1: Product: syz [ 636.933085][ T10] usb 3-1: Manufacturer: syz [ 636.937719][ T10] usb 3-1: SerialNumber: syz [ 636.942562][ T1211] usb 2-1: Manufacturer: syz [ 636.954162][ T24] usb 5-1: Manufacturer: syz [ 636.956649][ T1211] usb 2-1: SerialNumber: syz [ 636.958795][ T24] usb 5-1: SerialNumber: syz [ 636.960798][ T981] usb 6-1: config 179 has no interface number 0 [ 636.981024][ T24] usb 5-1: config 0 descriptor?? [ 636.987081][T13805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 636.987653][ T981] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 637.008977][ T981] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 637.020397][ T981] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 637.026428][ T1211] r8152-cfgselector 2-1: Unknown version 0x0000 [ 637.047651][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 637.054558][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 637.055074][ T1211] r8152-cfgselector 2-1: config 0 descriptor?? [ 637.074261][ T981] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 637.099304][ T981] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 637.114276][ T981] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 637.146179][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.344696][ T10] usb 3-1: USB disconnect, device number 11 [ 637.359288][T13829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.370015][T13829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.379304][ T24] usb 5-1: USB disconnect, device number 15 [ 637.403096][ T1211] r8152-cfgselector 2-1: Needed 2 retries to read version [ 637.416215][T13818] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 637.429155][ T981] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 637.440743][ T981] xpad 6-1:179.65: probe with driver xpad failed with error -90 [ 637.473348][ T1211] r8152-cfgselector 2-1: Unknown version 0x0000 [ 637.553749][ T1211] r8152-cfgselector 2-1: bad CDC descriptors [ 637.601541][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.633195][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.642098][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.699412][ T981] usb 6-1: USB disconnect, device number 12 [ 638.271414][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 638.523559][ T1211] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 638.754151][ T24] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 638.766610][ T10] usb 5-1: device descriptor read/64, error -71 [ 638.925096][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 638.936760][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 639.081566][ T24] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 639.097770][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.204674][T13855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1928'. [ 639.233136][ T24] usb 6-1: config 0 descriptor?? [ 639.256043][T13848] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 639.281587][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 639.456412][ T5973] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 639.601673][ T10] usb 5-1: device descriptor read/64, error -71 [ 639.651434][ T5973] usb 2-1: Using ep0 maxpacket: 32 [ 639.674683][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 639.731976][ T10] usb usb5-port1: attempt power cycle [ 639.747266][ T24] elecom 0003:056E:010D.003C: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.5-1/input0 [ 639.823985][ T5973] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 639.949720][ T5973] usb 2-1: config 0 has no interface number 0 [ 640.015137][ T24] usb 6-1: USB disconnect, device number 13 [ 640.021238][ T5973] usb 2-1: config 0 interface 184 has no altsetting 0 [ 640.090633][ T5973] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 640.091545][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 640.153127][ T10] usb 5-1: device descriptor read/8, error -71 [ 640.202136][ T5973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.264793][ T5973] usb 2-1: Product: syz [ 640.269006][ T5973] usb 2-1: Manufacturer: syz [ 640.336912][ T5973] usb 2-1: SerialNumber: syz [ 640.390200][ T5973] usb 2-1: config 0 descriptor?? [ 640.401617][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 640.432101][ T10] usb 5-1: device descriptor read/8, error -71 [ 640.461732][ T5973] smsc75xx v1.0.0 [ 640.465419][ T5973] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 640.549180][ T10] usb usb5-port1: unable to enumerate USB device [ 640.584952][ T5973] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 640.671737][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.679461][T13855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.733263][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.741021][T13855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.851217][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 641.026073][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 641.046105][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 641.068843][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.092969][ T10] usb 6-1: Product: syz [ 641.100277][ T10] usb 6-1: Manufacturer: syz [ 641.114174][ T10] usb 6-1: SerialNumber: syz [ 641.134651][ T10] usb 6-1: config 0 descriptor?? [ 641.182101][ T10] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 641.241932][T13881] unknown channel width for channel at 909000KHz? [ 641.348176][T13885] unknown channel width for channel at 909000KHz? [ 641.374672][ T10] gspca_vc032x: reg_r err -71 [ 641.384303][ T10] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 641.418052][ T10] usb 6-1: USB disconnect, device number 14 [ 642.011688][ T24] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 642.211256][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.267701][ T24] usb 3-1: config 0 has no interface number 0 [ 642.310807][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 642.440084][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 642.507277][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=0008, bcdDevice= 0.00 [ 642.540385][ T9] usb 2-1: USB disconnect, device number 14 [ 642.559013][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.636053][ T24] usb 3-1: config 0 descriptor?? [ 642.647444][T13893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 642.655421][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 642.810448][T13911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 642.817086][T13911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 642.825276][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 642.851551][T13911] vhci_hcd vhci_hcd.0: Device attached [ 642.883339][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 642.897632][T13912] vhci_hcd: connection closed [ 642.906349][ T5981] usb 3-1: USB disconnect, device number 12 [ 642.917466][ T1142] vhci_hcd: stop threads [ 642.921855][ T1142] vhci_hcd: release socket [ 642.928566][ T1142] vhci_hcd: disconnect device [ 642.956597][T13894] ptrace attach of "./syz-executor exec"[5888] was attempted by "./syz-executor exec"[13894] [ 643.072875][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 643.227019][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 643.245725][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.272472][ T10] usb 6-1: Product: syz [ 643.276794][ T10] usb 6-1: Manufacturer: syz [ 643.290334][ T10] usb 6-1: SerialNumber: syz [ 643.343142][ T10] usb 6-1: config 0 descriptor?? [ 643.373845][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 643.392137][T13921] mÐZ`Ô€@: entered promiscuous mode [ 643.399671][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 643.586814][T13925] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1944'. [ 643.906225][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1944'. [ 644.133588][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 644.142536][ T10] em28xx 6-1:0.0: Config register raw data: 0x1c [ 644.192690][T13935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 644.561386][T13933] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 644.805348][T13907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.854832][T13907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.904058][ T10] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 644.911033][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 645.082139][ T10] usb 6-1: USB disconnect, device number 15 [ 645.101644][ T10] em28xx 6-1:0.0: Disconnecting em28xx [ 645.139509][ T10] em28xx 6-1:0.0: Freeing device [ 645.502081][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 645.671495][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 645.680092][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 645.702344][ T9] usb 1-1: config 4 has an invalid interface number: 239 but max is 0 [ 645.711131][ T9] usb 1-1: config 4 has no interface number 0 [ 645.720579][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=48.59 [ 645.731390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.739460][ T9] usb 1-1: Product: syz [ 645.743889][ T9] usb 1-1: Manufacturer: syz [ 645.748520][ T9] usb 1-1: SerialNumber: syz [ 645.981674][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 646.135086][ T24] usb 2-1: device descriptor read/64, error -71 [ 646.231556][ T5879] Bluetooth: hci2: command 0x0c1a tx timeout [ 646.412171][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 646.561752][ T24] usb 2-1: device descriptor read/64, error -71 [ 646.704919][ T24] usb usb2-port1: attempt power cycle [ 646.792113][ T5981] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 646.829532][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'. [ 646.838763][T13973] netlink: 'syz.2.1956': attribute type 1 has an invalid length. [ 646.847027][T13973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1956'. [ 646.856910][T13973] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1956'. [ 646.866292][T13973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1956'. [ 647.074954][ T5981] usb 6-1: unable to get BOS descriptor or descriptor too short [ 647.088329][ T5981] usb 6-1: too many configurations: 14, using maximum allowed: 8 [ 647.107580][ T5981] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 647.117189][ T5981] usb 6-1: can't read configurations, error -71 [ 647.126519][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 647.163150][ T24] usb 2-1: device descriptor read/8, error -71 [ 647.421768][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 647.444809][ T24] usb 2-1: device descriptor read/8, error -71 [ 647.541822][ T1211] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 647.563297][ T24] usb usb2-port1: unable to enumerate USB device [ 647.704869][ T1211] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 647.714340][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.725394][ T1211] usb 3-1: Product: syz [ 647.729841][ T1211] usb 3-1: Manufacturer: syz [ 647.736811][ T1211] usb 3-1: SerialNumber: syz [ 647.760810][ T1211] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 647.786255][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 648.027371][ T9] usb 1-1: MBOX3: Invalid descriptor size=18. [ 648.058463][ T9] usb 1-1: USB disconnect, device number 120 [ 648.231034][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 648.270936][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 648.466107][ T9] usb 3-1: USB disconnect, device number 13 [ 648.874610][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 648.929775][ T10] ath9k_htc: Failed to initialize the device [ 648.952225][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 649.521885][ T981] usb 1-1: new low-speed USB device number 121 using dummy_hcd [ 649.838465][ T981] usb 1-1: Invalid ep0 maxpacket: 16 [ 650.008752][ T981] usb 1-1: new low-speed USB device number 122 using dummy_hcd [ 650.173398][ T981] usb 1-1: Invalid ep0 maxpacket: 16 [ 650.184637][ T981] usb usb1-port1: attempt power cycle [ 650.539716][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 650.563354][ T981] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 650.592132][ T981] usb 1-1: Invalid ep0 maxpacket: 16 [ 650.739936][ T981] usb 1-1: new low-speed USB device number 124 using dummy_hcd [ 650.775109][ T981] usb 1-1: Invalid ep0 maxpacket: 16 [ 650.780857][ T981] usb usb1-port1: unable to enumerate USB device [ 651.332583][T14021] netlink: 'syz.5.1969': attribute type 29 has an invalid length. [ 651.342100][T14021] fuse: Unknown parameter 'euid>00000000000000000000' [ 651.814413][T14028] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1971'. [ 652.239660][ T981] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 652.292683][ T981] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 653.015381][T14052] netlink: 'syz.1.1978': attribute type 13 has an invalid length. [ 653.875046][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 654.297363][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.308690][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 654.346630][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.435236][ T10] usb 2-1: config 0 descriptor?? [ 654.910992][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 654.921086][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 655.032622][ T10] usb 2-1: USB disconnect, device number 19 [ 655.101203][T14087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1985'. [ 655.202052][ T981] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 655.384958][ T981] usb 1-1: Using ep0 maxpacket: 32 [ 655.408217][ T981] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.417574][ T981] usb 1-1: config 0 has no interface number 0 [ 655.458955][ T981] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 655.476222][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.476231][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 655.751718][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 655.791143][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.808552][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 655.820231][ T981] usb 1-1: Product: syz [ 655.829360][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.861246][ T981] usb 1-1: Manufacturer: syz [ 655.870543][ T981] usb 1-1: SerialNumber: syz [ 655.880302][ T10] usb 2-1: config 0 descriptor?? [ 655.895006][ T981] usb 1-1: config 0 descriptor?? [ 655.917365][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 655.934982][ T981] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 655.945262][ T981] usb 1-1: selecting invalid altsetting 1 [ 655.965991][ T981] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 656.000908][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 656.046182][ T981] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 656.219573][ T981] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 656.285154][ T981] usb 1-1: media controller created [ 656.386962][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 656.386992][ T30] audit: type=1326 audit(1756816161.056:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.1.1979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f30a358ebe9 code=0x0 [ 656.444425][ T981] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.624436][ T981] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 656.739925][ T981] zl10353_read_register: readreg error (reg=127, ret==-71) [ 657.278040][ T981] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 657.456578][ T981] usb 1-1: USB disconnect, device number 126 [ 657.737436][ T24] usb 2-1: USB disconnect, device number 20 [ 657.746077][ T24] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 658.092501][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 658.311370][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 658.330387][ T10] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 658.361559][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.456563][ T10] usb 6-1: config 0 descriptor?? [ 658.788088][T14131] trusted_key: encrypted_key: insufficient parameters specified [ 658.964574][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 658.987054][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 659.106878][ T10] usb 6-1: USB disconnect, device number 19 [ 659.385249][T14135] pim6reg: entered allmulticast mode [ 660.061451][ T981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 660.231421][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 660.253324][ T981] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 660.297008][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.349690][ T981] pvrusb2: Hardware description: Terratec Grabster AV400 [ 660.381563][ T981] pvrusb2: ********** [ 660.394978][ T981] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 660.484608][ T981] pvrusb2: Important functionality might not be entirely working. [ 660.561420][ T981] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 660.599644][ T981] pvrusb2: ********** [ 660.652004][ T2345] pvrusb2: Invalid write control endpoint [ 660.770228][ T2345] pvrusb2: Invalid write control endpoint [ 660.797787][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 660.825452][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 660.850583][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 660.876720][ T2345] pvrusb2: Device being rendered inoperable [ 660.883458][ T2345] cx25840 4-0044: Unable to detect h/w, assuming cx23887 [ 660.890626][ T2345] cx25840 4-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 660.905374][ T2345] pvrusb2: Attached sub-driver cx25840 [ 660.909934][T14154] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 661.090177][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 661.758815][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 662.118427][ T1211] usb 5-1: USB disconnect, device number 20 [ 662.267740][T14144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.781587][ T10] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 663.143980][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 663.165161][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.175003][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.209663][ T10] usb 1-1: Product: syz [ 663.231057][ T10] usb 1-1: Manufacturer: syz [ 663.257825][ T10] usb 1-1: SerialNumber: syz [ 663.310033][ T10] usb 1-1: config 0 descriptor?? [ 664.062119][ T5981] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 664.361754][ T5981] usb 6-1: Using ep0 maxpacket: 16 [ 664.368709][ T5981] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 664.386776][ T5981] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 664.403659][ T5981] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 664.421653][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 664.434043][ T5981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.447001][ T5981] usb 6-1: Product: syz [ 664.465521][ T5981] usb 6-1: Manufacturer: syz [ 664.470326][ T5981] usb 6-1: SerialNumber: syz [ 664.541842][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 664.575665][ T10] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 664.585805][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.594144][ T10] usb 2-1: Product: syz [ 664.598404][ T10] usb 2-1: Manufacturer: syz [ 664.603206][ T10] usb 2-1: SerialNumber: syz [ 664.618570][ T10] usb 2-1: config 0 descriptor?? [ 664.717403][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.730244][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 664.747239][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.757234][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.779503][T14206] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 664.806708][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.863116][ T10] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 665.000378][ T9] usb 5-1: USB disconnect, device number 21 [ 665.322997][ T10] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 665.494945][ T9] usb 1-1: USB disconnect, device number 127 [ 665.725610][ T1211] usb 2-1: USB disconnect, device number 21 [ 666.211420][ T981] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 666.368977][ T981] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 666.436837][T14233] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2021'. [ 666.446575][ T981] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 666.491422][ T1211] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 666.561882][ T981] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 666.651063][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.666920][T14219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 666.698527][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 666.732059][ T981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 666.864711][ T1211] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 666.985088][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 666.994962][ T5981] usb 6-1: USB disconnect, device number 20 [ 667.021139][ T1211] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 667.030467][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.038845][ T1211] usb 1-1: Product: syz [ 667.048966][ T1211] usb 1-1: Manufacturer: syz [ 667.051507][ T30] audit: type=1400 audit(1756816171.746:487): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14236 comm="syz.1.2022" [ 667.070231][ T1211] usb 1-1: SerialNumber: syz [ 667.192065][T14238] overlayfs: missing 'lowerdir' [ 667.373702][ T1211] usb 1-1: config 0 descriptor?? [ 667.383785][T14217] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 667.391974][T14217] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 667.410276][ T1211] usb 1-1: ucan: probing device on interface #0 [ 667.498188][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 668.008016][ T1211] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 668.017538][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 668.258243][ T10] usb 6-1: config 1 interface 1 has no altsetting 0 [ 668.319179][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.337352][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.365508][ T10] usb 6-1: Product: syz [ 668.376597][ T10] usb 6-1: Manufacturer: syz [ 668.422057][ T10] usb 6-1: SerialNumber: syz [ 668.666861][T14226] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 669.047008][ T10] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 669.056695][ T1211] usb 5-1: USB disconnect, device number 22 [ 669.077537][ T10] usb 6-1: 2:1 : sample bitwidth 232 in over sample bytes 4 [ 669.105475][ T10] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 669.399194][ T10] usb 6-1: USB disconnect, device number 21 [ 669.483822][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 670.448310][T11546] usb 1-1: USB disconnect, device number 2 [ 670.807770][ T5981] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 671.027231][ T5981] usb 2-1: Using ep0 maxpacket: 32 [ 671.093895][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.119434][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.138215][ T5981] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 671.172883][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.209735][ T5981] usb 2-1: config 0 descriptor?? [ 671.361599][ T1211] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 671.364922][ T5981] hub 2-1:0.0: USB hub found [ 671.547263][ T1211] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 671.574349][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.579316][ T5981] hub 2-1:0.0: 1 port detected [ 671.587764][ T1211] usb 6-1: Product: syz [ 671.594009][ T1211] usb 6-1: Manufacturer: syz [ 671.598876][ T1211] usb 6-1: SerialNumber: syz [ 671.638259][ T1211] usb 6-1: config 0 descriptor?? [ 671.780601][ T5981] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 671.789637][ T5981] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 671.813436][ T5981] usbhid 2-1:0.0: can't add hid device: -71 [ 671.819472][ T5981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 671.861131][ T1211] hso 6-1:0.0: Failed to find BULK IN ep [ 671.906539][ T5981] usb 2-1: USB disconnect, device number 22 [ 671.917770][ T1211] usb-storage 6-1:0.0: USB Mass Storage device detected [ 672.083542][ T1211] usb 6-1: USB disconnect, device number 22 [ 673.211461][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 673.341363][ T10] usb 3-1: device descriptor read/64, error -71 [ 673.581404][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 673.661473][ T981] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 673.745096][ T10] usb 3-1: device descriptor read/64, error -71 [ 673.753097][T14329] pim6reg1: entered allmulticast mode [ 673.842334][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 673.850066][ T981] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 673.861819][ T10] usb usb3-port1: attempt power cycle [ 673.869282][ T981] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.900423][ T981] usb 2-1: config 1 interface 0 has no altsetting 0 [ 673.910449][ T981] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 673.921722][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.931002][ T981] usb 2-1: Product: syz [ 673.936841][ T981] usb 2-1: Manufacturer: syz [ 673.942040][ T981] usb 2-1: SerialNumber: syz [ 673.972436][ T5981] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 674.031499][ T1211] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 674.139329][ T5981] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 674.151398][ T5981] usb 1-1: config 0 has an invalid interface number: 3 but max is 2 [ 674.159597][ T5981] usb 1-1: config 0 has no interface number 0 [ 674.167283][ T5981] usb 1-1: config 0 has no interface number 1 [ 674.179272][ T5981] usb 1-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 674.190876][ T1211] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 674.197524][ T981] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input57 [ 674.205925][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 674.209952][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 674.220836][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.229200][ T5981] usb 1-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 674.259475][ T981] usb 2-1: USB disconnect, device number 23 [ 674.265545][ C1] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 674.279680][ T1211] usb 5-1: Product: syz [ 674.284200][ T1211] usb 5-1: Manufacturer: syz [ 674.285677][ T5981] usb 1-1: config 0 interface 3 has no altsetting 0 [ 674.288849][ T1211] usb 5-1: SerialNumber: syz [ 674.298908][ T5981] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 674.313998][ T10] usb 3-1: device descriptor read/8, error -71 [ 674.316126][ T981] appletouch 2-1:1.0: input: appletouch disconnected [ 674.332385][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.371835][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 674.380466][ T1211] usb 5-1: config 0 descriptor?? [ 674.388928][ T24] usb 6-1: config 0 has an invalid interface number: 115 but max is 0 [ 674.398396][ T24] usb 6-1: config 0 has no interface number 0 [ 674.416660][ T24] usb 6-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 674.436017][ T5981] usb 1-1: config 0 descriptor?? [ 674.442621][ T24] usb 6-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 674.500868][ T24] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 674.515250][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.525303][ T24] usb 6-1: Product: syz [ 674.529620][ T24] usb 6-1: Manufacturer: syz [ 674.536274][ T24] usb 6-1: SerialNumber: syz [ 674.558012][ T24] usb 6-1: config 0 descriptor?? [ 674.578521][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 674.603284][ T10] usb 3-1: device descriptor read/8, error -71 [ 674.658125][ T5981] usb 1-1: Could not set interface, error -71 [ 674.680678][ T5981] usb 1-1: string descriptor 0 read error: -71 [ 674.702256][ T5981] usb 1-1: selecting invalid altsetting 0 [ 674.712563][ T10] usb usb3-port1: unable to enumerate USB device [ 674.719001][ T5981] usb 1-1: Could not set interface, error -22 [ 674.755709][ T5981] usb 1-1: USB disconnect, device number 3 [ 674.837539][T14334] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 674.848116][ T1211] airspy 5-1:0.0: Board ID: 00 [ 674.853012][ T1211] airspy 5-1:0.0: Firmware version: [ 675.049565][T14329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.071538][T14329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.136110][ T1211] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 675.247891][ T1211] airspy 5-1:0.0: Registered as swradio24 [ 675.254031][ T1211] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 675.276330][ T1211] usb 5-1: USB disconnect, device number 23 [ 675.570288][T14344] tipc: Enabling of bearer rejected, already enabled [ 675.585633][T14344] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 675.600742][T14344] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 676.518792][T14359] fuse: Unknown parameter '000000000000000000000030xffffffffffffffff' [ 677.795265][T14373] pim6reg: entered allmulticast mode [ 677.968858][ T24] usb 6-1: USB disconnect, device number 23 [ 678.193308][T14385] input: syz1 as /devices/virtual/input/input58 [ 678.343001][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 678.537959][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 678.548469][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.612931][ T10] usb 2-1: Product: syz [ 678.617156][ T10] usb 2-1: Manufacturer: syz [ 678.647247][ T10] usb 2-1: SerialNumber: syz [ 678.676338][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 678.707036][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2065'. [ 678.713061][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 679.141216][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.185611][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.213552][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.292454][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.353411][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.398884][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.456870][T14384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.503992][T14384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.635097][ T1211] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 679.744564][ T5981] usb 2-1: USB disconnect, device number 24 [ 679.801366][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 679.815306][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.833165][ T1211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.858693][ T1211] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 679.878073][ T1211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.905490][ T1211] usb 5-1: config 0 descriptor?? [ 679.994116][ T9] usb 2-1: Service connection timeout for: 256 [ 680.006377][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 680.027638][ T9] ath9k_htc: Failed to initialize the device [ 680.038615][ T5981] usb 2-1: ath9k_htc: USB layer deinitialized [ 680.486540][T14412] netlink: 'syz.4.2069': attribute type 13 has an invalid length. [ 680.495956][T14412] netlink: 'syz.4.2069': attribute type 17 has an invalid length. [ 680.566794][ T1211] usbhid 5-1:0.0: can't add hid device: -71 [ 680.586447][ T1211] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 680.669407][ T1211] usb 5-1: USB disconnect, device number 24 [ 681.010427][T14373] pim6reg: left allmulticast mode [ 681.281953][ T1211] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 681.411894][ T1211] usb 5-1: device descriptor read/64, error -71 [ 681.651514][ T1211] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 681.785104][ T1211] usb 5-1: device descriptor read/64, error -71 [ 681.919166][ T1211] usb usb5-port1: attempt power cycle [ 682.114708][T14444] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 682.271941][ T1211] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 682.306494][ T1211] usb 5-1: device descriptor read/8, error -71 [ 682.371584][T10498] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 682.423910][T14453] netlink: 'syz.5.2080': attribute type 8 has an invalid length. [ 682.472440][ T5981] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 682.525992][T10498] usb 3-1: config 255 has too many interfaces: 226, using maximum allowed: 32 [ 682.544346][T10498] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 682.567500][T10498] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 682.577180][ T1211] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 682.592016][T10498] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 682.601700][T10498] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.634758][ T5981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.648638][ T5981] usb 1-1: config 0 has no interfaces? [ 682.656910][ T5981] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 682.671994][ T5981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.676363][ T1211] usb 5-1: device descriptor read/8, error -71 [ 682.695629][T10498] uvcvideo 3-1:255.0: probe with driver uvcvideo failed with error -22 [ 682.707691][ T5981] usb 1-1: config 0 descriptor?? [ 682.792255][ T1211] usb usb5-port1: unable to enumerate USB device [ 682.796350][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 682.920278][T14451] syz.0.2074 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 682.931839][ T30] audit: type=1326 audit(1756816187.636:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.0.2074" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f127918ebe9 code=0x0 [ 684.411457][ T5981] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 684.572523][ T5981] usb 5-1: Invalid ep0 maxpacket: 16 [ 684.587495][T14479] fuse: Bad value for 'fd' [ 684.594898][T14479] fuse: Bad value for 'group_id' [ 684.595032][T14480] fuse: Bad value for 'group_id' [ 684.599876][T14479] fuse: Bad value for 'group_id' [ 684.613292][T14480] fuse: Bad value for 'group_id' [ 684.626051][ T30] audit: type=1326 audit(1756816189.326:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2087" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88398ebe9 code=0x0 [ 684.678775][T14484] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 684.689147][T14484] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 684.711522][ T5981] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 684.882204][ T5981] usb 5-1: Invalid ep0 maxpacket: 16 [ 684.890316][ T5981] usb usb5-port1: attempt power cycle [ 684.914417][T14495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.925892][T14495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.000490][ T24] usb 3-1: USB disconnect, device number 18 [ 685.232087][ T5981] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 685.280494][ T5981] usb 5-1: Invalid ep0 maxpacket: 16 [ 685.306316][ T1211] usb 1-1: USB disconnect, device number 4 [ 685.371765][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 685.419772][ T5981] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 685.462243][ T5981] usb 5-1: Invalid ep0 maxpacket: 16 [ 685.468797][ T5981] usb usb5-port1: unable to enumerate USB device [ 685.575708][ T24] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 685.722552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.807478][ T24] usb 3-1: Product: syz [ 685.823659][ T24] usb 3-1: Manufacturer: syz [ 685.861781][ T24] usb 3-1: SerialNumber: syz [ 685.875917][ T24] usb 3-1: config 0 descriptor?? [ 685.887167][ T24] gspca_main: touptek-2.14.0 probing 0547:6801 [ 686.110134][T14501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.135459][T14501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.149654][ T24] usb 3-1: USB disconnect, device number 19 [ 686.862292][T14523] input: syz1 as /devices/virtual/input/input59 [ 687.038001][T14531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.141467][ T1211] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 687.331043][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 687.355154][ T1211] usb 3-1: config 25 has an invalid interface number: 59 but max is 0 [ 687.380798][ T1211] usb 3-1: config 25 has no interface number 0 [ 687.407537][ T1211] usb 3-1: config 25 interface 59 has no altsetting 0 [ 687.467027][ T1211] usb 3-1: New USB device found, idVendor=05d1, idProduct=2022, bcdDevice=c9.40 [ 687.496809][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.521357][ T1211] usb 3-1: Product: syz [ 687.531353][ T1211] usb 3-1: Manufacturer: syz [ 687.541350][ T1211] usb 3-1: SerialNumber: syz [ 687.551527][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 687.726637][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.753288][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.799156][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 687.833778][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.865756][ T24] usb 1-1: config 0 descriptor?? [ 687.873180][ T1211] ftdi_sio 3-1:25.59: FTDI USB Serial Device converter detected [ 687.955183][ T1211] ftdi_sio ttyUSB0: unknown device type: 0xc940 [ 688.037496][ T1211] usb 3-1: USB disconnect, device number 20 [ 688.080675][ T1211] ftdi_sio 3-1:25.59: device disconnected [ 688.368785][ T24] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 688.707445][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2105'. [ 688.717437][T14545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.761006][ T24] cp2112 0003:10C4:EA90.003E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 688.852311][ T24] cp2112 0003:10C4:EA90.003E: Part Number: 0x82 Device Version: 0xFE [ 688.934247][T14562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.285431][ T24] cp2112 0003:10C4:EA90.003E: error reading lock byte: -32 [ 689.311409][ T5981] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 689.348515][ T24] usb 1-1: USB disconnect, device number 5 [ 689.421990][ T981] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 689.481405][ T5981] usb 5-1: Using ep0 maxpacket: 32 [ 689.490446][ T5981] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 689.499569][ T5981] usb 5-1: config 0 has no interface number 0 [ 689.508119][ T5981] usb 5-1: config 0 interface 96 has no altsetting 0 [ 689.527491][ T5981] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 689.538788][ T5981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.547211][ T5981] usb 5-1: Product: syz [ 689.555844][ T5981] usb 5-1: Manufacturer: syz [ 689.563140][ T5981] usb 5-1: SerialNumber: syz [ 689.573422][ T981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.587020][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 689.602952][ T5981] usb 5-1: config 0 descriptor?? [ 689.639044][ T5981] legousbtower 5-1:0.96: interrupt endpoints not found [ 689.677752][ T981] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 689.702781][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.752800][ T981] usb 2-1: config 0 descriptor?? [ 689.766335][T14565] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 689.791404][ T981] hub 2-1:0.0: USB hub found [ 689.841781][ T24] usb 5-1: USB disconnect, device number 33 [ 689.976300][ T981] hub 2-1:0.0: 2 ports detected [ 690.188428][T14570] netlink: 'syz.2.2110': attribute type 11 has an invalid length. [ 690.229080][T14570] netlink: 448 bytes leftover after parsing attributes in process `syz.2.2110'. [ 690.463660][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 691.061538][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 691.068617][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 691.086465][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 691.097760][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 691.107538][ T9] usb 3-1: config 1 has no interface number 0 [ 691.115002][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.126686][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.133554][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.150712][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 691.214240][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.225700][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.264721][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 691.279461][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 691.292471][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.326096][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 691.465961][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 691.467333][T10498] usb 2-1: USB disconnect, device number 25 [ 691.538466][ T9] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 691.576365][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 691.593080][ T9] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 691.852980][ T24] usb 3-1: USB disconnect, device number 21 [ 692.151170][T14591] program syz.1.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.204237][T14592] program syz.1.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 692.571423][ T5981] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 692.594156][T14596] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2116'. [ 692.731871][ T5981] usb 6-1: Using ep0 maxpacket: 8 [ 692.749232][ T5981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.769615][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.810960][ T5981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.828953][ T5981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.870616][ T5981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.920812][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.991634][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 693.318954][ T9] usb 1-1: device descriptor read/64, error -71 [ 693.464284][ T5981] usb 6-1: GET_CAPABILITIES returned 0 [ 693.469952][ T5981] usbtmc 6-1:16.0: can't read capabilities [ 693.591440][ C1] ================================================================== [ 693.599560][ C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 693.607474][ C1] Read of size 1 at addr ffff88804c841cb0 by task kworker/u8:16/9250 [ 693.615544][ C1] [ 693.617876][ C1] CPU: 1 UID: 0 PID: 9250 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 693.617896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.617910][ C1] Workqueue: bat_events batadv_nc_worker [ 693.617937][ C1] Call Trace: [ 693.617944][ C1] [ 693.617952][ C1] dump_stack_lvl+0x189/0x250 [ 693.617973][ C1] ? __kasan_check_byte+0x12/0x40 [ 693.617999][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.618018][ C1] ? lock_release+0x4b/0x3e0 [ 693.618045][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 693.618067][ C1] print_report+0xca/0x240 [ 693.618084][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 693.618100][ C1] kasan_report+0x118/0x150 [ 693.618124][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 693.618149][ C1] xfrm_state_find+0x2cf2/0x5400 [ 693.618165][ C1] ? __lock_acquire+0xab9/0xd20 [ 693.618195][ C1] ? unwind_next_frame+0xa5/0x2390 [ 693.618216][ C1] ? xfrm_state_find+0x1da/0x5400 [ 693.618234][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 693.618258][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 693.618290][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 693.618314][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 693.618337][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 693.618361][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 693.618398][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 693.618420][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 693.618445][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 693.618468][ C1] ? dst_cache_get+0x10e/0x5b0 [ 693.618492][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 693.618513][ C1] tipc_udp_xmit+0x1c3/0xaa0 [ 693.618531][ C1] ? tipc_crypto_xmit+0x1e2/0x23a0 [ 693.618551][ C1] ? tipc_udp_xmit+0xa4/0xaa0 [ 693.618567][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 693.618586][ C1] ? tipc_net+0x45/0x270 [ 693.618613][ C1] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 693.618632][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 693.618657][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 693.618681][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 693.618716][ C1] tipc_disc_timeout+0x580/0x6d0 [ 693.618743][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 693.618773][ C1] call_timer_fn+0x17e/0x5f0 [ 693.618798][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 693.618820][ C1] ? call_timer_fn+0xbe/0x5f0 [ 693.618844][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 693.618872][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.618895][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.618918][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 693.618942][ C1] __run_timer_base+0x61a/0x860 [ 693.618964][ C1] ? ktime_get+0x3e/0x1f0 [ 693.618987][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 693.619008][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 693.619035][ C1] run_timer_softirq+0xb7/0x180 [ 693.619057][ C1] handle_softirqs+0x283/0x870 [ 693.619075][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 693.619093][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 693.619113][ C1] __irq_exit_rcu+0xca/0x1f0 [ 693.619129][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 693.619155][ C1] irq_exit_rcu+0x9/0x30 [ 693.619170][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 693.619194][ C1] [ 693.619200][ C1] [ 693.619207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 693.619226][ C1] RIP: 0010:batadv_nc_worker+0xe5/0x610 [ 693.619248][ C1] Code: 4a 8d 2c fd 00 00 00 00 48 03 2b e8 e5 c4 5f f6 4c 8d 2d 00 00 00 00 48 c7 c7 20 9f 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 <45> 31 c9 41 55 e8 71 08 56 f6 48 83 c4 08 e8 58 7a 32 00 89 c3 31 [ 693.619264][ C1] RSP: 0018:ffffc9001e4cfa20 EFLAGS: 00000246 [ 693.619278][ C1] RAX: 0000000000000001 RBX: ffff88803282a5c0 RCX: 0000000000000002 [ 693.619289][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139f20 [ 693.619300][ C1] RBP: ffff88804ea4d338 R08: 0000000000000000 R09: ffffffff8b475462 [ 693.619312][ C1] R10: dffffc0000000000 R11: ffffffff8b475390 R12: dffffc0000000000 [ 693.619325][ C1] R13: ffffffff8b475462 R14: ffff88804ead8d80 R15: 0000000000000267 [ 693.619338][ C1] ? batadv_nc_worker+0xd2/0x610 [ 693.619359][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 693.619380][ C1] ? batadv_nc_worker+0xd2/0x610 [ 693.619408][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 693.619425][ C1] process_scheduled_works+0xae1/0x17b0 [ 693.619453][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 693.619476][ C1] worker_thread+0x8a0/0xda0 [ 693.619493][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 693.619520][ C1] ? __kthread_parkme+0x7b/0x200 [ 693.619541][ C1] kthread+0x70e/0x8a0 [ 693.619562][ C1] ? __pfx_worker_thread+0x10/0x10 [ 693.619578][ C1] ? __pfx_kthread+0x10/0x10 [ 693.619598][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.619620][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.619643][ C1] ? __pfx_kthread+0x10/0x10 [ 693.619663][ C1] ret_from_fork+0x3fc/0x770 [ 693.619681][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 693.619700][ C1] ? __switch_to_asm+0x39/0x70 [ 693.619721][ C1] ? __switch_to_asm+0x33/0x70 [ 693.619742][ C1] ? __pfx_kthread+0x10/0x10 [ 693.619762][ C1] ret_from_fork_asm+0x1a/0x30 [ 693.619796][ C1] [ 693.619802][ C1] [ 694.122063][ C1] Allocated by task 12356: [ 694.126490][ C1] kasan_save_track+0x3e/0x80 [ 694.131182][ C1] __kasan_slab_alloc+0x6c/0x80 [ 694.136045][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 694.141515][ C1] xfrm_state_alloc+0x24/0x2f0 [ 694.146294][ C1] __find_acq_core+0x8a7/0x1c00 [ 694.151149][ C1] xfrm_find_acq+0x78/0xa0 [ 694.155584][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 694.160619][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 694.165558][ C1] netlink_rcv_skb+0x205/0x470 [ 694.170332][ C1] xfrm_netlink_rcv+0x79/0x90 [ 694.175011][ C1] netlink_unicast+0x82c/0x9e0 [ 694.179793][ C1] netlink_sendmsg+0x805/0xb30 [ 694.184553][ C1] __sock_sendmsg+0x219/0x270 [ 694.189240][ C1] ____sys_sendmsg+0x505/0x830 [ 694.194004][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 694.198685][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 694.203623][ C1] do_syscall_64+0xfa/0x3b0 [ 694.208134][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.214029][ C1] [ 694.216357][ C1] Freed by task 5981: [ 694.220333][ C1] kasan_save_track+0x3e/0x80 [ 694.225016][ C1] kasan_save_free_info+0x46/0x50 [ 694.230049][ C1] __kasan_slab_free+0x5b/0x80 [ 694.234819][ C1] kmem_cache_free+0x18f/0x400 [ 694.239587][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 694.244619][ C1] process_scheduled_works+0xae1/0x17b0 [ 694.250166][ C1] worker_thread+0x8a0/0xda0 [ 694.254754][ C1] kthread+0x70e/0x8a0 [ 694.258826][ C1] ret_from_fork+0x3fc/0x770 [ 694.263418][ C1] ret_from_fork_asm+0x1a/0x30 [ 694.268188][ C1] [ 694.270511][ C1] The buggy address belongs to the object at ffff88804c841980 [ 694.270511][ C1] which belongs to the cache xfrm_state of size 928 [ 694.284478][ C1] The buggy address is located 816 bytes inside of [ 694.284478][ C1] freed 928-byte region [ffff88804c841980, ffff88804c841d20) [ 694.298276][ C1] [ 694.300619][ C1] The buggy address belongs to the physical page: [ 694.307039][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c840000 pfn:0x4c840 [ 694.317106][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 694.325612][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 694.333156][ C1] page_type: f5(slab) [ 694.337147][ C1] raw: 00fff00000000040 ffff888022aa28c0 dead000000000122 0000000000000000 [ 694.345730][ C1] raw: ffff88804c840000 00000000800f000a 00000000f5000000 0000000000000000 [ 694.354314][ C1] head: 00fff00000000040 ffff888022aa28c0 dead000000000122 0000000000000000 [ 694.362986][ C1] head: ffff88804c840000 00000000800f000a 00000000f5000000 0000000000000000 [ 694.371666][ C1] head: 00fff00000000002 ffffea0001321001 00000000ffffffff 00000000ffffffff [ 694.380335][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 694.388999][ C1] page dumped because: kasan: bad access detected [ 694.395410][ C1] page_owner tracks the page as allocated [ 694.401118][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6103, tgid 6102 (syz.1.30), ts 107526913407, free_ts 107487736723 [ 694.420251][ C1] post_alloc_hook+0x240/0x2a0 [ 694.425037][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 694.430585][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 694.436392][ C1] alloc_pages_mpol+0x232/0x4a0 [ 694.441251][ C1] allocate_slab+0x8a/0x370 [ 694.445762][ C1] ___slab_alloc+0xbeb/0x1410 [ 694.450487][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 694.455952][ C1] xfrm_state_alloc+0x24/0x2f0 [ 694.460725][ C1] xfrm_add_sa+0x17d1/0x4070 [ 694.465323][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 694.470268][ C1] netlink_rcv_skb+0x205/0x470 [ 694.475038][ C1] xfrm_netlink_rcv+0x79/0x90 [ 694.479717][ C1] netlink_unicast+0x82c/0x9e0 [ 694.484489][ C1] netlink_sendmsg+0x805/0xb30 [ 694.489251][ C1] __sock_sendmsg+0x219/0x270 [ 694.493937][ C1] ____sys_sendmsg+0x505/0x830 [ 694.498702][ C1] page last free pid 6102 tgid 6102 stack trace: [ 694.505032][ C1] __free_frozen_pages+0xbc4/0xd30 [ 694.510152][ C1] __slab_free+0x303/0x3c0 [ 694.514572][ C1] qlist_free_all+0x97/0x140 [ 694.519169][ C1] kasan_quarantine_reduce+0x148/0x160 [ 694.524628][ C1] __kasan_slab_alloc+0x22/0x80 [ 694.529484][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 694.534950][ C1] ptlock_alloc+0x20/0x70 [ 694.539288][ C1] pte_alloc_one+0x7d/0x170 [ 694.543790][ C1] __pte_alloc+0x25/0x1a0 [ 694.548133][ C1] __handle_mm_fault+0x49b3/0x5440 [ 694.553268][ C1] handle_mm_fault+0x40a/0x8e0 [ 694.558049][ C1] do_user_addr_fault+0xa81/0x1390 [ 694.563182][ C1] exc_page_fault+0x76/0xf0 [ 694.567699][ C1] asm_exc_page_fault+0x26/0x30 [ 694.572560][ C1] [ 694.574889][ C1] Memory state around the buggy address: [ 694.580529][ C1] ffff88804c841b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.588592][ C1] ffff88804c841c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.596656][ C1] >ffff88804c841c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 694.604715][ C1] ^ [ 694.610348][ C1] ffff88804c841d00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 694.618411][ C1] ffff88804c841d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 694.626578][ C1] ================================================================== [ 694.634827][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 694.642049][ C1] CPU: 1 UID: 0 PID: 9250 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 694.651687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.661767][ C1] Workqueue: bat_events batadv_nc_worker [ 694.667440][ C1] Call Trace: [ 694.670733][ C1] [ 694.673580][ C1] dump_stack_lvl+0x99/0x250 [ 694.678199][ C1] ? __asan_memcpy+0x40/0x70 [ 694.682809][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.688184][ C1] ? __pfx__printk+0x10/0x10 [ 694.692803][ C1] vpanic+0x281/0x750 [ 694.696794][ C1] ? __pfx_vpanic+0x10/0x10 [ 694.701309][ C1] ? irqentry_exit+0x74/0x90 [ 694.705935][ C1] panic+0xb9/0xc0 [ 694.709675][ C1] ? __pfx_panic+0x10/0x10 [ 694.714100][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 694.720625][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 694.726551][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 694.731695][ C1] check_panic_on_warn+0x89/0xb0 [ 694.736662][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 694.741806][ C1] end_report+0x78/0x160 [ 694.746073][ C1] kasan_report+0x129/0x150 [ 694.750632][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 694.755765][ C1] xfrm_state_find+0x2cf2/0x5400 [ 694.760717][ C1] ? __lock_acquire+0xab9/0xd20 [ 694.765602][ C1] ? unwind_next_frame+0xa5/0x2390 [ 694.770750][ C1] ? xfrm_state_find+0x1da/0x5400 [ 694.775806][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 694.781129][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 694.787313][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 694.793225][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 694.799834][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 694.805764][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 694.811783][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 694.817174][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 694.822569][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 694.828589][ C1] ? dst_cache_get+0x10e/0x5b0 [ 694.833377][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 694.838242][ C1] tipc_udp_xmit+0x1c3/0xaa0 [ 694.842838][ C1] ? tipc_crypto_xmit+0x1e2/0x23a0 [ 694.847970][ C1] ? tipc_udp_xmit+0xa4/0xaa0 [ 694.852664][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 694.857796][ C1] ? tipc_net+0x45/0x270 [ 694.862070][ C1] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 694.867198][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 694.872424][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 694.877743][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 694.883480][ C1] tipc_disc_timeout+0x580/0x6d0 [ 694.888473][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 694.893964][ C1] call_timer_fn+0x17e/0x5f0 [ 694.898577][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 694.904060][ C1] ? call_timer_fn+0xbe/0x5f0 [ 694.908765][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 694.913906][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.919144][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.924345][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 694.929822][ C1] __run_timer_base+0x61a/0x860 [ 694.934699][ C1] ? ktime_get+0x3e/0x1f0 [ 694.939087][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 694.944482][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 694.950752][ C1] run_timer_softirq+0xb7/0x180 [ 694.955642][ C1] handle_softirqs+0x283/0x870 [ 694.960429][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 694.965219][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 694.970532][ C1] __irq_exit_rcu+0xca/0x1f0 [ 694.975138][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 694.980342][ C1] irq_exit_rcu+0x9/0x30 [ 694.984598][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 694.990255][ C1] [ 694.993196][ C1] [ 694.996138][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.002134][ C1] RIP: 0010:batadv_nc_worker+0xe5/0x610 [ 695.007694][ C1] Code: 4a 8d 2c fd 00 00 00 00 48 03 2b e8 e5 c4 5f f6 4c 8d 2d 00 00 00 00 48 c7 c7 20 9f 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 <45> 31 c9 41 55 e8 71 08 56 f6 48 83 c4 08 e8 58 7a 32 00 89 c3 31 [ 695.027328][ C1] RSP: 0018:ffffc9001e4cfa20 EFLAGS: 00000246 [ 695.033421][ C1] RAX: 0000000000000001 RBX: ffff88803282a5c0 RCX: 0000000000000002 [ 695.041412][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e139f20 [ 695.049398][ C1] RBP: ffff88804ea4d338 R08: 0000000000000000 R09: ffffffff8b475462 [ 695.057379][ C1] R10: dffffc0000000000 R11: ffffffff8b475390 R12: dffffc0000000000 [ 695.065359][ C1] R13: ffffffff8b475462 R14: ffff88804ead8d80 R15: 0000000000000267 [ 695.073348][ C1] ? batadv_nc_worker+0xd2/0x610 [ 695.078318][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 695.083713][ C1] ? batadv_nc_worker+0xd2/0x610 [ 695.088683][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 695.094421][ C1] process_scheduled_works+0xae1/0x17b0 [ 695.099996][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 695.106000][ C1] worker_thread+0x8a0/0xda0 [ 695.110604][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 695.116949][ C1] ? __kthread_parkme+0x7b/0x200 [ 695.122338][ C1] kthread+0x70e/0x8a0 [ 695.126426][ C1] ? __pfx_worker_thread+0x10/0x10 [ 695.131541][ C1] ? __pfx_kthread+0x10/0x10 [ 695.136153][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 695.141383][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.146609][ C1] ? __pfx_kthread+0x10/0x10 [ 695.151217][ C1] ret_from_fork+0x3fc/0x770 [ 695.155826][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 695.160958][ C1] ? __switch_to_asm+0x39/0x70 [ 695.165727][ C1] ? __switch_to_asm+0x33/0x70 [ 695.170497][ C1] ? __pfx_kthread+0x10/0x10 [ 695.175130][ C1] ret_from_fork_asm+0x1a/0x30 [ 695.179921][ C1] [ 695.183297][ C1] Kernel Offset: disabled [ 695.187624][ C1] Rebooting in 86400 seconds..