last executing test programs: 26m30.884653517s ago: executing program 32 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) 26m26.870034731s ago: executing program 33 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x10, 0x1000) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 26m11.425661291s ago: executing program 34 (id=88): add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) eventfd(0xffbffffd) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181403, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 23m23.575513051s ago: executing program 6 (id=374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x63, 0x3, 0x2, 0x3, 0x2, 0x5, "0b0909090c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000cb0000000000000000000000000000000000000000000000000000040000000000000a0020003300000077583a8ebc0158a4a671c753bf3df9073ea28fbe4cbf4cc961d948ba271b6c824aca800000686a499db64579e6b1956c4d1ec4139ded3242c9a9402986834a439a12d5e97a4c303ab3f8f81597005cc85bdad966a8d7d8a0291fd4ce464fd3fc7866c6c02bcca83b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ff0200000000000000000000000000014e200000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000040000000000000000000000000000000000000000000000000000000000000101040000000000000000000000000000000000b56b6e000000010000000000808be56314f7fa42"], 0xb8}}, 0x10000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x10000000000006, 0xfa11, 0xfffffffe}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0x6cb}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000500)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 23m13.547557945s ago: executing program 6 (id=400): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0xa, 0x805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) pipe2(&(0x7f0000000080), 0x4800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23m12.710985945s ago: executing program 6 (id=404): fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 23m11.90721971s ago: executing program 6 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x2, 0x2, 0x31a6, 0x3, 0x8c, 0x2, {0x4, 0x7fff, 0x9, 0x1000, 0x8, 0x7f, 0x40, 0xc4, 0x4, 0x2000, 0x9, 0x0, 0x0, 0x7b, 0x9}}, {0x4, 0x5, 0x2, 0x3, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="78000000000000000800000000000000010000000000000003000000000000"], 0x0, 0x0, 0x0, 0x0}) 23m10.9152711s ago: executing program 6 (id=409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000780)=0x9a0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)=0x80) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) sendmmsg(r1, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000025c0)="3dbc77b7b3ff", 0x6}], 0x1}}], 0x1, 0x10014) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 23m10.15706762s ago: executing program 6 (id=411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) 22m54.451392908s ago: executing program 35 (id=411): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) 18m21.460677951s ago: executing program 5 (id=1059): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @vsb}}) 18m20.629679126s ago: executing program 5 (id=1062): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 18m17.6324792s ago: executing program 5 (id=1064): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 18m16.81805911s ago: executing program 5 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 18m15.918913206s ago: executing program 5 (id=1069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) 18m15.743065085s ago: executing program 0 (id=1070): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="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", 0xf80) 18m13.733342675s ago: executing program 0 (id=1074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000140)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdc00, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x2e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="8a0173916713", {0x9, 0x200}}, 0x3240, 0x8c, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @void, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x50) 18m12.921280182s ago: executing program 0 (id=1076): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f00000029c0)='./file1\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004580)="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", 0x2000, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={0x78, 0x0, 0x3f5, {0x7, 0x8000, 0x0, {0x1, 0xfff, 0x3, 0x6, 0x0, 0x6, 0x7, 0x7, 0x7, 0x2000, 0x6, r2, r4, 0x2, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) 18m12.2431383s ago: executing program 0 (id=1079): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x11, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 18m11.474681359s ago: executing program 0 (id=1082): bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan1\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg(r0, 0x0, 0x0, 0x40010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x6, 0xffffffffffffffff, 0x4001, 0x6, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0xffffffffffffda2e, 0xffffffffffffffff, 0x1c, 0xffffffffffffffff, 0xfffffffffffffdfc, 0x6, 0xfffffffffffffffc], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18m10.510596358s ago: executing program 0 (id=1084): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmctl$SHM_LOCK(r0, 0xb) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="67640f01ca660f5f5198c401795da6790000000f320f0866baf80cb84685d683ef66bafc0c66b8860066eff30fc7fa66b8bd008ee066430f3882b10e0000000f01c2", 0x42}], 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f000000a000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000007000/0x11000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f000000d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000013000/0x2000)=nil, 0x0}, 0x68) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setrlimit(0x1, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='[', 0x1, 0xffffffffffffffff) process_madvise(r7, &(0x7f0000000680)=[{0x0}, {&(0x7f00000000c0)='t', 0x1}], 0x2, 0xb, 0x0) 18m8.907671971s ago: executing program 8 (id=1087): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xff}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 18m7.403208078s ago: executing program 8 (id=1089): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="b0f1c3f43a1a3fd9825e0a677a5c0a2601f0d8c78d947f368782dfdcb2352ee8f023e878465f3b00c7155b77652c02aa082dfdd7e267b9f6930b7461f242450a13b970006113adef88", 0x49, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xa2d7}, 0x1c) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000001180)=ANY=[], 0xffe0) 18m6.150968567s ago: executing program 8 (id=1090): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}, {@sysvgroups}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0xff91, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0000e5", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x11}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r5, &(0x7f0000004c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x62, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x7fff, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x4, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x7, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0x0, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x802, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x3, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0xffff, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0x5, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x3, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x1200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x10, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1003, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x3, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000008c0)=0x8004900) sendmsg$nl_xfrm(r2, 0x0, 0x0) write$binfmt_register(r1, &(0x7f0000000380)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'ext4\x00', 0x3a, '*}\'', 0x3a, './file1', 0x3a, [0x4f, 0x4f, 0x50, 0x43, 0x50]}, 0x34) 18m3.430992976s ago: executing program 5 (id=1091): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x5, 0xffffed73, 0x20, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), 0x0}, 0x20) r3 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3) syz_open_dev$sg(&(0x7f0000000240), 0xff, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0xfffff000, @local, 0x1}}}, 0x32) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c00000000014060014003500776732000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 18m3.186803373s ago: executing program 8 (id=1092): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x11, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 18m1.302377569s ago: executing program 8 (id=1093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000004c0)=0x4) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 17m58.736718742s ago: executing program 8 (id=1094): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r9, 0x2c, 0x0, 0x7fffffff, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r9, 0xffffffffffffffff, 0x30, 0x1d, r9, @void, @value=r2, @void, @void, r10}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17) 17m54.571499999s ago: executing program 36 (id=1084): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3b, 0x1, 0x2, "4749570000000000000000000e1609d600", 0x20493859}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000108000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) shmctl$SHM_LOCK(r0, 0xb) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="67640f01ca660f5f5198c401795da6790000000f320f0866baf80cb84685d683ef66bafc0c66b8860066eff30fc7fa66b8bd008ee066430f3882b10e0000000f01c2", 0x42}], 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f000000a000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000007000/0x11000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, &(0x7f000000d000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000013000/0x2000)=nil, 0x0}, 0x68) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setrlimit(0x1, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='[', 0x1, 0xffffffffffffffff) process_madvise(r7, &(0x7f0000000680)=[{0x0}, {&(0x7f00000000c0)='t', 0x1}], 0x2, 0xb, 0x0) 17m47.888213973s ago: executing program 37 (id=1091): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x2, 0x5, 0xffffed73, 0x20, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f00000005c0), 0x0}, 0x20) r3 = accept4(r0, &(0x7f0000000100)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x3) syz_open_dev$sg(&(0x7f0000000240), 0xff, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x1, 0x2, {0xa, 0x4e21, 0xfffff000, @local, 0x1}}}, 0x32) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x20049009}, 0x2000c000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c00000000014060014003500776732000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 17m43.23303862s ago: executing program 38 (id=1094): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140)) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r9, 0x2c, 0x0, 0x7fffffff, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map=r9, 0xffffffffffffffff, 0x30, 0x1d, r9, @void, @value=r2, @void, @void, r10}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17) 16m11.000675s ago: executing program 9 (id=1228): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e00", @ANYBLOB='\x00'/18, @ANYBLOB, @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 16m0.220931735s ago: executing program 9 (id=1249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15m59.266525119s ago: executing program 9 (id=1251): socket$inet6_tcp(0xa, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 15m54.42635479s ago: executing program 9 (id=1260): socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x0, 0x0, 0x0) 15m53.622569314s ago: executing program 9 (id=1262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa55, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x24a4af79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) close_range(r4, 0xffffffffffffffff, 0x10000000000000) 15m52.391224016s ago: executing program 9 (id=1266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x1000001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r3, 0x0, 0x11, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r4, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 15m36.370861052s ago: executing program 39 (id=1266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x1000001, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r3 = semget(0x1, 0x1, 0x39c) semctl$SETALL(r3, 0x0, 0x11, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(r4, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m9.683029397s ago: executing program 4 (id=2936): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x64, &(0x7f00000001c0)=ANY=[@ANYBLOB=',ro'], 0x1, 0x0, 0x0) 1m8.893161702s ago: executing program 4 (id=2940): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000300)) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma '], 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0xc4, 0x8, 0x1000, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x4}, 0x50) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) capget(0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "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"}, 0x418, 0xe5bb}) sendmsg$nl_route(r3, 0x0, 0x26040810) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x41}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) 1m0.287494603s ago: executing program 4 (id=2959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "da773aa0c7167eab596592f5fdf828c7b327872371ef6f7d0813ddeb29360cdd9904950b28eaad765aadb1ed9c374d401fba9186b073000e886e1a38956cb8f4f5a7a2c660a1e6460df3144e83d79ab98d2f5b8d88af2ce45a3960436c4bc12cc409e983040e5b3bbed630b035929813e067435b80e7a8eff6002e3c5086890186c9e26c69fd3f778e00354e288ca82dc6b9d5db22d108721ba3a681211ec7208b1ae3384dc4b289eef03f9e5208047cebc74fab36fc74a10ce5a98c11fef20d53f846a92c875bbdf774bba596cd2ec62ffbcb1854f011b00095f848b992e8ff406536e7acaedf6d12f8d8e4365d6d45b3d55352af22602119dba719274ac4c8"}, @TCA_GRED_DPS={0x10, 0x3, {0xd, 0x10}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) sendto$packet(r7, &(0x7f0000000380)="c1858aec1d0a06756f6608f23687", 0xe, 0x24080000, &(0x7f0000000240)={0x11, 0x19, r6, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 59.026829416s ago: executing program 4 (id=2962): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() r1 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 56.135430377s ago: executing program 4 (id=2964): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000000)="144024aeae8b2bfc3aa2119a66f6983264487965372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d68988f7795c858", 0x39, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x9, 0x0, 0x0) 54.288085186s ago: executing program 4 (id=2967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e00", @ANYBLOB='\x00'/18, @ANYBLOB, @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 38.798273635s ago: executing program 40 (id=2967): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000010000008e00", @ANYBLOB='\x00'/18, @ANYBLOB, @ANYRES32], 0x48) ftruncate(0xffffffffffffffff, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) 24.731243978s ago: executing program 2 (id=3014): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000"], 0x4c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.932312087s ago: executing program 2 (id=3016): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a00)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bf5e28417c98ffc787ea8d7fb31338169d069156a023121fa75", 0xed}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/4114, 0x1012, 0x1, 0x0}, &(0x7f0000000180)=0x40) 21.104141292s ago: executing program 2 (id=3017): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x6, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) landlock_restrict_self(r4, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 15.953495535s ago: executing program 1 (id=3021): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x9, 0x0, 0x0) 14.678068238s ago: executing program 1 (id=3025): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000"], 0x4c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13.181951987s ago: executing program 7 (id=3028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x10) 12.797729527s ago: executing program 2 (id=3029): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) get_robust_list(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='+rdma '], 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7, 0xc4, 0x8, 0x1000, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x4}, 0x50) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) capget(0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44acaa55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r5, 0x7ac, &(0x7f0000000000)={&(0x7f00000006c0)={{@local, 0xf}, {@local, 0xff}, 0x400, "a0bef8f809fdbd794a5876812ecdc0f431e2e967134102e29601a109e8d6a5ea253fda100493f73e13d658b12a3dd0ee2619b2e158b8c1b070c4557ee3d7af4aa2bee609c235eee770aaee45497f554467c6e9d3f26475cfcac907d6b9d7846c4a66e178b7e711e1aa3c48463161dc313e13c58b5b22e077b23a647b4dbba9d052b703693008e1f49a92569615441c37e65f33c121efe1792557ebe6005581e24f47c1ea78ff928b49608b7e9b9e13903f343c17be0054fe54f0d8d7ec55847f847cc5bc5f54ffb48cdd6c4e992054759f155c47cf89fc8a0f48cfcea4ffe70b9fe7385805918d66fec51601c1ecbbd2d4968fa2ee1cb00bb49ae093b25d39cd0010349f9c63e8fe096e6f8afd79a91d6d0d16e0437fb9e342342795b94ceefe593cbf02d29e96b1f24b13cd77a1846e1bb48e2598c86b2c792fdda2200ebc4e4dd451afd893f7d56431141b1a3a783274db59e9b6e0433ef25a2bddb33a27bce4efdca9d10025d6dd659e7f2a57d3388cf7586814d510bb27139a7354ae00d731bfd4ef92d07469a83000d1850e84c47be45cfa6ddc6a85d6f733a6a2c952966ab3ed2a577de6dba67623b3f0e95ec21f0f7f8f8ffa4214f82dc15951b8186335578ce37d126681210eab215969b3d288e68dccb9772dfc9ae4c64b5ee5e120e90ba3685b2c7f83dedfcea4a974cc5720ed4eafa2b32bf03ae60cc716fff174a71a2ff4398e7d311303752c6b60572a9d4c50bea69e11f8ad4313677866073ae7780e58284e50e2a96e3d1b7c5ed63c9ca828961448d6d0240a7fbb458fd4ae04f42af11fb5a724be40a5ab6cc51eebd1d06cc1bb000e875db0030cc7c28a19f06dd362e774598e9669db5aaa732e589ecd57efebd3e3bbd87e6e8755cf41f97867085cfc0c13249180c5c4b0259c26f0e3a02da75480e52efeaee4a83458268362ee1e305cc3da30c43c7d25f80eba5d5386e08ecc4cb0a5ae4ddc8a7555a92800873676a1dcec504174f2bb2dea5776fbe3e8055d8918bb8589f9dd023a058a8b4fbed59a6cc78ef07bdb8f7b1dc77f1dcdc5583ca5a5dac9c5cff92a561b9ee1d8c7af343e7550c565a766299030a8e431edf48d8cd122ecda6182efe0dba76208af12a5539ed51991ad88cddca65043c0dde225d8602a783de11b636a7624d5002e27a2aed5963b0c40a80162a9449396190dd0c15bbf9fd35808a6921efb066f0924a4fe18f5cc3b008671dff827064e16e1a0589cc2bdff95a7987287955ecf2a8e8184d506ec4be628d93d5dad068ca02567388c536e23e5d36c74e9fa429279c09e29e5164219c81e2167cd01dc4ca5ff739ab6355ba1f0b84db5f2a939fd58e0b3a32a15432d77335eaee2a081699c0c865c03ffebb4c9a1bb041b164bea76b87ac63248bb570f0761c7b6eae686bd9a3f1f42bfc2961da5e11288"}, 0x418, 0xe5bb}) sendmsg$nl_route(r3, 0x0, 0x26040810) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x41}, 0x38) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) 11.866503248s ago: executing program 1 (id=3031): syz_open_dev$char_usb(0xc, 0xb4, 0x345) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2000000000000069, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x1e80, 0xffffffffffffff4f, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x4c314356, 0x0, 0xb, [{0x80000004, 0x8}, {0x7ff, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$kcm(0x10, 0x2, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 11.36916219s ago: executing program 7 (id=3032): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 10.762357558s ago: executing program 7 (id=3034): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x9, 0x0, 0x0) 9.641557914s ago: executing program 7 (id=3036): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee6"], 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) 8.853319859s ago: executing program 3 (id=3037): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/17, 0x11}, 0x189}], 0x1, 0x4002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 8.656019094s ago: executing program 7 (id=3038): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x140, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x114, 0x3, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x103, 0x6, 0x1, 0x0, "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"}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mkdir(0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x6, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) landlock_restrict_self(r4, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 8.211038216s ago: executing program 3 (id=3039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 5.341155781s ago: executing program 3 (id=3040): syz_usb_connect(0x1, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000"], 0x4c}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.873103477s ago: executing program 2 (id=3041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004009c}, 0x10) 3.249714074s ago: executing program 1 (id=3042): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}], 0x1, 0x0) tee(r0, r4, 0x8f5, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) write(r2, 0x0, 0x0) 2.739105038s ago: executing program 3 (id=3043): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.738819261s ago: executing program 2 (id=3044): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x18, &(0x7f0000000480)={0x20, 0xf, 0x7}, 0x0, 0x0, 0x0, 0x0}) 2.221355067s ago: executing program 1 (id=3045): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x9, 0x0, 0x0) 1.558218995s ago: executing program 3 (id=3046): unshare(0x20000) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = getgid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x8889, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 216.956054ms ago: executing program 7 (id=3047): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffee6"], 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) 179.23854ms ago: executing program 1 (id=3048): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 3 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) kernel console output (not intermixed with test programs): onfig 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1479.079930][ T796] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1479.091461][ T796] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1479.276484][ T796] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1479.284103][ T796] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1479.295343][ T796] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1479.307606][ T796] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1479.319458][ T796] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1479.516022][ T796] usb 4-1: string descriptor 0 read error: -22 [ 1479.547662][ T796] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1479.557071][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.566799][ T5839] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 1479.830253][ T796] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1479.907040][ T5839] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1479.950059][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1479.961942][ T5839] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1479.974125][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1479.985453][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1480.100739][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.127365][ T5839] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1480.159923][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1480.170978][ T5839] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1480.182923][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1480.194196][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1480.293674][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.332778][ T5839] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1480.350922][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1480.362073][ T5839] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1480.374134][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1480.385474][ T5839] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1480.529446][ T5880] usb 4-1: USB disconnect, device number 32 [ 1480.635014][ T5839] usb 8-1: string descriptor 0 read error: -22 [ 1480.654583][ T5839] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1480.664113][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.855964][ T5839] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1481.144960][T15279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.197543][T15279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.409259][ T5839] usb 8-1: USB disconnect, device number 39 [ 1481.415575][T15274] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 1482.854240][T10158] usb 5-1: USB disconnect, device number 65 [ 1482.917274][ T796] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1483.116785][ T796] usb 8-1: device descriptor read/64, error -71 [ 1483.366697][ T796] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1483.536712][ T796] usb 8-1: device descriptor read/64, error -71 [ 1483.697372][ T796] usb usb8-port1: attempt power cycle [ 1484.086478][ T796] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1484.121722][ T796] usb 8-1: device descriptor read/8, error -71 [ 1484.366475][ T796] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1484.401768][ T796] usb 8-1: device descriptor read/8, error -71 [ 1484.519249][ T796] usb usb8-port1: unable to enumerate USB device [ 1484.599466][T10158] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1484.815235][T10158] usb 3-1: config 0 has no interfaces? [ 1484.821173][T10158] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1484.830929][T10158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.958142][T10158] usb 3-1: config 0 descriptor?? [ 1485.177013][ T5880] usb 3-1: USB disconnect, device number 45 [ 1486.027440][T15307] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2426'. [ 1486.178412][T15310] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 1486.746657][ T5880] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 1486.767191][T10158] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 1486.963011][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1486.963109][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1486.981669][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1486.992944][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.004975][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.016559][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.022501][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1487.039164][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.051328][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.062939][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.163139][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.184369][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1487.185764][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.195675][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.215127][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.226832][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.291013][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.299535][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1487.309120][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1487.310907][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.321643][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.321786][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.321931][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.369396][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.380887][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.482244][T10158] usb 3-1: string descriptor 0 read error: -22 [ 1487.489217][T10158] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1487.499389][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.593480][ T5880] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1487.603153][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1487.614517][ T5880] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.626461][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1487.637979][ T5880] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1487.721287][T10158] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1487.745999][ T5880] usb 8-1: string descriptor 0 read error: -22 [ 1487.754609][ T5880] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1487.764254][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.945189][T15316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.026350][ T5880] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1488.070081][T15316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.261709][T10158] usb 3-1: USB disconnect, device number 46 [ 1488.268437][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.306920][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.393219][T15315] adutux: No device or device unplugged -19 [ 1488.432114][T15315] adutux: No device or device unplugged -19 [ 1488.501494][ T5880] usb 8-1: USB disconnect, device number 44 [ 1491.246908][ T5880] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1491.832883][ T5880] usb 5-1: config 0 has no interfaces? [ 1491.838658][ T5880] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1491.848163][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.208827][ T5880] usb 5-1: config 0 descriptor?? [ 1492.326491][ T5839] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1492.451952][T10158] usb 5-1: USB disconnect, device number 66 [ 1492.571324][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1492.846549][ T5839] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1493.016471][ T5839] usb 3-1: device descriptor read/64, error -71 [ 1493.097779][T15352] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2440'. [ 1493.127907][ T5839] usb usb3-port1: attempt power cycle [ 1493.546693][ T5839] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1493.616565][ T5839] usb 3-1: device descriptor read/8, error -71 [ 1493.926546][ T5839] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1494.070127][ T5839] usb 3-1: device descriptor read/8, error -71 [ 1494.216743][ T5839] usb usb3-port1: unable to enumerate USB device [ 1495.246510][T10158] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1495.296795][ T5839] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1495.500648][ T5839] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1495.549070][T10158] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1495.550394][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1495.571157][ T5839] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1495.583003][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1495.594361][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1495.694672][T10158] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.701166][ T5839] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1495.705169][T10158] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1495.725774][T10158] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1495.732848][T10158] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1495.742150][T10158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.844180][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1495.855359][ T5839] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1495.867523][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1495.879059][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1496.307491][T10158] usb 3-1: config 0 descriptor?? [ 1496.359010][ T5839] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1496.385683][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1496.397127][ T5839] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.409177][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1496.420614][ T5839] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1496.545461][T10158] usbhid 3-1:0.0: can't add hid device: -71 [ 1496.552147][T10158] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1496.632991][ T5839] usb 2-1: string descriptor 0 read error: -22 [ 1496.647527][ T5839] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1496.657005][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.661459][T10158] usb 3-1: USB disconnect, device number 51 [ 1496.860726][ T5839] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1497.107627][T15379] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 1497.212481][T15381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.287890][T15381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.847899][ T5880] usb 2-1: USB disconnect, device number 31 [ 1497.848058][T15381] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1498.105481][T15385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2451'. [ 1499.621067][T15398] veth3: entered promiscuous mode [ 1499.957555][ T5880] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1500.162316][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1500.174078][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1500.184040][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1500.198201][ T5880] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1500.207602][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.304159][ T5880] usb 3-1: config 0 descriptor?? [ 1500.348959][ T5880] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1500.602326][ T5880] usb 3-1: USB disconnect, device number 52 [ 1502.316505][T10158] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1502.470792][T10158] usb 3-1: device descriptor read/64, error -71 [ 1502.736714][T10158] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1502.916601][T10158] usb 3-1: device descriptor read/64, error -71 [ 1503.096478][T10158] usb usb3-port1: attempt power cycle [ 1503.586514][T10158] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1503.642269][T10158] usb 3-1: device descriptor read/8, error -71 [ 1504.018849][T10158] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1504.107097][T10158] usb 3-1: device descriptor read/8, error -71 [ 1504.220090][T10158] usb usb3-port1: unable to enumerate USB device [ 1506.603630][T15425] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2463'. [ 1506.976970][T10158] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1507.256570][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1507.264196][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1507.275392][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1507.287851][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1507.299379][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1507.357065][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1507.371658][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1507.383404][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1507.395614][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1507.407377][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1507.452596][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1507.806773][T15441] netlink: 'syz.7.2467': attribute type 1 has an invalid length. [ 1507.926100][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1507.937626][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1507.949833][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1507.961461][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1508.530236][T10158] usb 2-1: string descriptor 0 read error: -22 [ 1508.544289][T10158] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1508.554036][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.700057][T10158] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1509.105180][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.106102][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.489713][ T5880] usb 2-1: USB disconnect, device number 32 [ 1509.506912][T15445] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1510.926620][T10158] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1511.108695][T10158] usb 5-1: device descriptor read/64, error -71 [ 1511.416670][T10158] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1511.586516][T10158] usb 5-1: device descriptor read/64, error -71 [ 1511.697794][T10158] usb usb5-port1: attempt power cycle [ 1512.206586][T10158] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1512.248433][T10158] usb 5-1: device descriptor read/8, error -71 [ 1512.524260][T10158] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1512.618223][T10158] usb 5-1: device descriptor read/8, error -71 [ 1512.727935][T10158] usb usb5-port1: unable to enumerate USB device [ 1513.882775][T10158] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1514.081041][T10158] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1514.092514][T10158] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1514.102746][T10158] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1514.111979][T10158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.278921][T15464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1514.337707][T10158] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1514.389069][T15468] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2476'. [ 1514.673725][ T5880] usb 4-1: USB disconnect, device number 33 [ 1514.699167][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.705745][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.875754][T11728] udevd[11728]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.307654][T10158] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1516.524605][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.567661][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1516.578878][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.591272][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1516.603234][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1516.677688][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.685666][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1516.697372][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.709468][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1516.721091][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1516.898924][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1516.934347][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1516.945684][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1516.957824][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1516.969426][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1517.138379][T10158] usb 3-1: string descriptor 0 read error: -22 [ 1517.145424][T10158] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1517.155281][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.902832][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1517.904098][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1517.949316][T10158] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1518.006892][ T5880] usb 3-1: USB disconnect, device number 57 [ 1519.043435][T15509] syzkaller0: entered promiscuous mode [ 1519.043502][T15509] syzkaller0: entered allmulticast mode [ 1519.643756][T15514] netlink: 'syz.2.2489': attribute type 1 has an invalid length. [ 1520.551542][T15518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2490'. [ 1525.266487][T15538] pim6reg: entered allmulticast mode [ 1525.309063][T10158] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 1525.559582][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.586586][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1525.597804][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.609864][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1525.621183][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1525.798089][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1525.805699][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1525.817452][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.829529][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1525.841095][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1526.019501][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1526.049443][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1526.060813][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1526.072723][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1526.084168][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1526.279715][T15547] netlink: 'syz.3.2500': attribute type 6 has an invalid length. [ 1526.386564][T10158] usb 2-1: string descriptor 0 read error: -22 [ 1526.394151][T10158] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1526.403803][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.749243][T10158] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1527.185612][T15548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.200569][T15548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.601605][T10158] usb 2-1: USB disconnect, device number 33 [ 1527.608730][T15549] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1528.514421][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1529.060672][T15561] syzkaller0: entered promiscuous mode [ 1529.066505][T15561] syzkaller0: entered allmulticast mode [ 1530.263113][T15582] binder: 15570:15582 ioctl 4018620d 0 returned -22 [ 1530.272905][T15582] binder: 15570:15582 ioctl c018620c 80000380 returned -1 [ 1533.203217][T15598] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 1534.647393][T12163] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 1534.843695][T12163] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1534.867708][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1534.878773][T12163] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1534.890725][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1534.902105][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1534.986794][T12163] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1534.995342][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1535.008005][T12163] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1535.020099][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1535.031686][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1535.070392][T12163] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1535.085268][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1535.096618][T12163] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1535.108540][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1535.119803][T12163] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1535.202302][T12163] usb 4-1: string descriptor 0 read error: -22 [ 1535.338149][T12163] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1535.347419][T12163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.443841][T12163] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1535.800977][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.878816][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1536.189149][T10158] usb 4-1: USB disconnect, device number 34 [ 1536.198263][T15604] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 1537.467795][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2515'. [ 1541.100356][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1541.267017][T12163] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 1541.479241][T12163] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.516939][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.528249][T12163] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.540300][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.551843][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.612507][T12163] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.621599][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.633304][T12163] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.645457][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.657091][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.729707][T12163] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1541.742215][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1541.753637][T12163] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1541.765631][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1541.777336][T12163] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1541.940933][T12163] usb 8-1: string descriptor 0 read error: -22 [ 1541.949765][T12163] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1541.959275][T12163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.093425][T12163] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1542.404526][T15659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.405786][T15659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.819058][T15661] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 1543.889722][T10158] usb 8-1: USB disconnect, device number 45 [ 1543.907734][T15659] usb 8-1: Couldn't submit interrupt_out_urb -19 [ 1548.229730][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2540'. [ 1548.239085][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2540'. [ 1549.336470][T10158] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1549.547063][T10158] usb 4-1: Using ep0 maxpacket: 16 [ 1549.642539][T10158] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1549.651900][T10158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.660195][T10158] usb 4-1: Product: syz [ 1549.664441][T10158] usb 4-1: Manufacturer: syz [ 1549.669285][T10158] usb 4-1: SerialNumber: syz [ 1549.687539][T12163] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 1549.838042][T10158] usb 4-1: config 0 descriptor?? [ 1549.949196][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1549.966494][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1549.971152][T10158] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1549.980152][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1549.996075][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1550.007649][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1550.230484][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1550.264261][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1550.275447][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1550.287602][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1550.299079][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1550.397715][T10158] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1550.430246][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1550.447106][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1550.458178][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1550.470644][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1550.482095][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1550.572869][T12163] usb 2-1: string descriptor 0 read error: -22 [ 1550.579937][T12163] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1550.589499][T12163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.725412][T12163] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1551.309524][T12163] usb 2-1: USB disconnect, device number 34 [ 1551.321422][T15719] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1552.304994][T12163] usb 4-1: USB disconnect, device number 35 [ 1552.379770][T12163] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1552.468057][T12163] visor 4-1:0.0: device disconnected [ 1553.302877][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2553'. [ 1553.312561][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 1554.081194][T15758] netlink: 'syz.1.2556': attribute type 1 has an invalid length. [ 1555.458899][T10158] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 1555.659247][T10158] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1555.688953][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1555.700164][T10158] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.712180][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1555.723524][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1555.847973][T10158] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1555.893756][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1555.904842][T10158] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1555.916857][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1555.928205][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1556.073695][T10158] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1556.116491][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1556.127903][T10158] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1556.139973][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1556.151357][T10158] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1556.528912][T10158] usb 5-1: string descriptor 0 read error: -22 [ 1556.548624][T10158] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1556.558336][T10158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.773067][T10158] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1557.262712][T12163] usb 5-1: USB disconnect, device number 71 [ 1557.272081][T15776] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 1560.145335][T15783] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 1562.032278][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2567'. [ 1562.043264][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 1563.096905][T10158] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1563.332441][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.342684][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1563.353834][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.365892][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1563.377582][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1563.455185][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.463551][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1563.474945][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.486987][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1563.498784][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1563.525181][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1563.534610][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1563.546084][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1563.558369][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1563.574633][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1563.801057][T10158] usb 3-1: string descriptor 0 read error: -22 [ 1563.823912][T10158] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1563.833379][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.940606][T10158] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1564.515036][T12746] usb 3-1: USB disconnect, device number 58 [ 1564.521378][T15805] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 1564.596486][T10158] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1564.827755][T10158] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1564.839457][T10158] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1564.850304][T10158] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1564.860030][T10158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.961599][T15824] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1564.992087][T10158] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1565.437057][T10158] usb 2-1: USB disconnect, device number 35 [ 1566.307687][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1570.083623][T12163] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1570.336725][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.356478][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.368759][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.380854][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.392170][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.515566][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.558267][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.569369][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.581533][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.592918][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.764351][T12163] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1570.778531][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1570.789732][T12163] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1570.801586][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1570.812902][T12163] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1570.985428][T12163] usb 2-1: string descriptor 0 read error: -22 [ 1570.992759][T12163] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1571.002936][T12163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.161253][T12163] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1571.305840][T15867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1571.347855][T15867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1571.471214][T12163] usb 2-1: USB disconnect, device number 36 [ 1572.106438][T10158] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1572.296785][T10158] usb 3-1: Using ep0 maxpacket: 8 [ 1572.429898][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.557476][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.569543][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1572.723337][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.736444][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.748623][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1572.836393][T10158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1572.865710][T10158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1572.877266][T10158] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1573.046830][T10158] usb 3-1: string descriptor 0 read error: -22 [ 1573.053676][T10158] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1573.063333][T10158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.311706][T10158] adutux 3-1:168.0: interrupt endpoints not found [ 1573.492417][T15873] binder: 15872:15873 ioctl 40046104 0 returned -22 [ 1573.575715][T12163] usb 3-1: USB disconnect, device number 59 [ 1574.366838][T10158] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1574.576972][T10158] usb 2-1: Using ep0 maxpacket: 16 [ 1574.688757][T10158] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1574.696805][T10158] usb 2-1: can't read configurations, error -61 [ 1574.880492][T10158] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1575.146765][T10158] usb 2-1: Using ep0 maxpacket: 16 [ 1575.170218][T10158] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1575.178099][T10158] usb 2-1: can't read configurations, error -61 [ 1575.186627][T10158] usb usb2-port1: attempt power cycle [ 1575.541735][T10158] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1575.604131][T10158] usb 2-1: Using ep0 maxpacket: 16 [ 1575.660323][T10158] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1575.668633][T10158] usb 2-1: can't read configurations, error -61 [ 1575.846451][T10158] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1575.925638][T10158] usb 2-1: Using ep0 maxpacket: 16 [ 1575.956252][T10158] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1575.964125][T10158] usb 2-1: can't read configurations, error -61 [ 1576.004163][T10158] usb usb2-port1: unable to enumerate USB device [ 1576.141056][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.147784][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.626963][ T5865] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1576.780631][ T5865] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.081379][ T5865] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.291275][ T5865] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.736764][ T5865] bridge_slave_1: left allmulticast mode [ 1578.742682][ T5865] bridge_slave_1: left promiscuous mode [ 1578.749641][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.847520][ T5865] bridge_slave_0: left allmulticast mode [ 1578.853334][ T5865] bridge_slave_0: left promiscuous mode [ 1578.860525][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.506459][T10158] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1579.703579][T10158] usb 2-1: Using ep0 maxpacket: 8 [ 1579.738749][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1579.789107][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1579.800896][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1579.906643][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1579.915619][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1579.928149][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1580.049322][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.076758][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1580.088257][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1580.139416][T10158] usb 2-1: string descriptor 0 read error: -22 [ 1580.161866][T10158] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1580.171744][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.287845][T10158] adutux 2-1:168.0: interrupt endpoints not found [ 1580.507146][ T5865] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1580.553908][ T5865] bridge0 (unregistering): left promiscuous mode [ 1580.559346][T15924] binder: 15920:15924 ioctl 40046104 0 returned -22 [ 1580.631026][T10158] usb 2-1: USB disconnect, device number 41 [ 1580.726754][ T5865] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.785475][ T5865] bond_slave_0: left promiscuous mode [ 1580.838243][ T5865] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.874276][ T5865] bond_slave_1: left promiscuous mode [ 1580.928015][ T5865] bond0 (unregistering): Released all slaves [ 1581.077006][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.087356][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.105702][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.201110][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.232543][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1582.367790][ T5865] hsr_slave_0: left promiscuous mode [ 1582.404670][ T5865] hsr_slave_1: left promiscuous mode [ 1582.477086][ T5865] veth1_macvtap: left promiscuous mode [ 1582.482690][ T5865] veth0_macvtap: left promiscuous mode [ 1582.517896][ T5865] veth1_vlan: left promiscuous mode [ 1582.523406][ T5865] veth0_vlan: left promiscuous mode [ 1583.316820][ T5787] Bluetooth: hci1: command tx timeout [ 1584.686685][ T5865] team_slave_1 (unregistering): left promiscuous mode [ 1584.733616][ T5865] team0 (unregistering): Port device team_slave_1 removed [ 1584.825081][ T5865] team_slave_0 (unregistering): left promiscuous mode [ 1584.879667][ T5865] team0 (unregistering): Port device team_slave_0 removed [ 1585.397327][ T5787] Bluetooth: hci1: command tx timeout [ 1585.507120][ T5865] team0 (unregistering): Port device dummy0 removed [ 1586.690010][ T5865] IPVS: stop unused estimator thread 0... [ 1586.767570][T10158] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1587.008089][T10158] usb 5-1: Using ep0 maxpacket: 16 [ 1587.079271][T10158] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1587.088092][T10158] usb 5-1: can't read configurations, error -61 [ 1587.296971][T10158] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1587.488500][ T5787] Bluetooth: hci1: command tx timeout [ 1587.526649][T10158] usb 5-1: Using ep0 maxpacket: 16 [ 1587.570306][T10158] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1587.578266][T10158] usb 5-1: can't read configurations, error -61 [ 1587.618028][T10158] usb usb5-port1: attempt power cycle [ 1587.954172][T15930] chnl_net:caif_netlink_parms(): no params data found [ 1587.999479][T10158] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1588.031863][T15895] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1588.068577][T10158] usb 5-1: Using ep0 maxpacket: 16 [ 1588.091845][T10158] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1588.099656][T10158] usb 5-1: can't read configurations, error -61 [ 1588.208747][T15895] usb 2-1: Using ep0 maxpacket: 8 [ 1588.231997][T15895] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1588.246580][T10158] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1588.275530][T15895] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1588.287635][T15895] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1588.345442][T10158] usb 5-1: Using ep0 maxpacket: 16 [ 1588.403907][T15895] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1588.417709][T10158] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1588.425598][T10158] usb 5-1: can't read configurations, error -61 [ 1588.447712][T15895] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1588.459197][T15895] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1588.489915][T10158] usb usb5-port1: unable to enumerate USB device [ 1588.534307][T15895] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1588.567778][T15895] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1588.579510][T15895] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1588.660126][T15895] usb 2-1: string descriptor 0 read error: -22 [ 1588.683629][T15895] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1588.693068][T15895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.846952][T15895] adutux 2-1:168.0: interrupt endpoints not found [ 1589.081796][T15990] binder: 15988:15990 ioctl 40046104 0 returned -22 [ 1589.139078][T12163] usb 2-1: USB disconnect, device number 42 [ 1589.557033][ T5787] Bluetooth: hci1: command tx timeout [ 1589.864277][T15930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.873872][T15930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.928560][T15930] bridge_slave_0: entered allmulticast mode [ 1590.004506][T15930] bridge_slave_0: entered promiscuous mode [ 1590.162331][T15930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.170603][T15930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.460719][T15930] bridge_slave_1: entered allmulticast mode [ 1590.509787][T15930] bridge_slave_1: entered promiscuous mode [ 1590.779035][T12163] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1590.879501][T16022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1590.996585][T12163] usb 4-1: Using ep0 maxpacket: 8 [ 1591.117430][T15930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.234262][T12163] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1591.379926][T15930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.446827][ T5839] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1591.588347][T12163] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 1591.596873][T12163] usb 4-1: config 7 has no interface number 0 [ 1591.668362][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.679530][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.689512][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1591.702620][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1591.712302][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.821329][T12163] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1591.831051][T12163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.839408][T12163] usb 4-1: Product: syz [ 1591.843708][T12163] usb 4-1: Manufacturer: syz [ 1591.848428][T12163] usb 4-1: SerialNumber: syz [ 1591.891172][ T5839] usb 5-1: config 0 descriptor?? [ 1592.034718][T15930] team0: Port device team_slave_0 added [ 1592.069189][T16027] syzkaller0: entered promiscuous mode [ 1592.075202][T16027] syzkaller0: entered allmulticast mode [ 1592.125700][T15930] team0: Port device team_slave_1 added [ 1592.496449][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.504117][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.511777][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.519393][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.527002][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.534567][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.542166][ T5839] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1592.974600][ T5839] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1593.234017][T15930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.238794][ T5839] usb 5-1: USB disconnect, device number 76 [ 1593.241275][T15930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.274538][T15930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.672281][T15930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.679616][T15930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.707607][T15930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.239953][T16033] fido_id[16033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1594.965266][T15930] hsr_slave_0: entered promiscuous mode [ 1594.999078][T15930] hsr_slave_1: entered promiscuous mode [ 1595.038038][T15930] debugfs: 'hsr0' already exists in 'hsr' [ 1595.044075][T15930] Cannot create hsr debugfs directory [ 1596.342392][T16050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 1598.036437][T12163] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1598.226368][T12163] usb 2-1: Using ep0 maxpacket: 16 [ 1598.311045][T12163] usb 2-1: config 0 has no interfaces? [ 1598.363201][T12163] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1598.372575][T12163] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1598.380763][T12163] usb 2-1: Manufacturer: syz [ 1598.481402][T12163] usb 2-1: config 0 descriptor?? [ 1599.067636][T15930] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1599.187949][T12163] usb 2-1: USB disconnect, device number 43 [ 1599.189513][T15930] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1599.220246][T15930] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1599.304650][T15930] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1600.382932][T12163] usb 4-1: USB disconnect, device number 36 [ 1601.028350][T10158] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1601.206738][T10158] usb 2-1: Using ep0 maxpacket: 8 [ 1601.249480][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1601.274332][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1601.285997][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1601.363290][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1601.371189][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1601.383030][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1601.411447][T15930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.428472][T10158] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1601.436052][T10158] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1601.447941][T10158] usb 2-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1601.524380][T10158] usb 2-1: string descriptor 0 read error: -22 [ 1601.532287][T10158] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1601.541804][T10158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.684778][T15930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.723792][T10158] adutux 2-1:168.0: interrupt endpoints not found [ 1601.771669][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.779156][ T9173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.926930][T16079] binder: 16078:16079 ioctl 40046104 0 returned -22 [ 1601.945220][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.952866][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.015318][T15895] usb 2-1: USB disconnect, device number 44 [ 1602.575606][T15930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1602.596541][T16094] program syz.3.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1604.058124][T16107] syzkaller0: entered promiscuous mode [ 1604.063783][T16107] syzkaller0: entered allmulticast mode [ 1604.954288][T15930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.231962][T15895] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1605.486442][T15895] usb 2-1: Using ep0 maxpacket: 16 [ 1605.620485][T15895] usb 2-1: config 0 has no interfaces? [ 1605.683669][T15895] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1605.693296][T15895] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1605.701578][T15895] usb 2-1: Manufacturer: syz [ 1605.919692][T15895] usb 2-1: config 0 descriptor?? [ 1606.389423][T12163] usb 2-1: USB disconnect, device number 45 [ 1607.747038][T12163] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1607.863532][T15930] veth0_vlan: entered promiscuous mode [ 1607.984799][T12163] usb 5-1: Using ep0 maxpacket: 8 [ 1608.023613][T15930] veth1_vlan: entered promiscuous mode [ 1608.069793][T12163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.101320][T12163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1608.113084][T12163] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.160000][T12163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.177584][T12163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1608.189439][T12163] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.364880][T12163] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1608.387051][T12163] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1608.398661][T12163] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1608.462332][T12163] usb 5-1: string descriptor 0 read error: -22 [ 1608.470145][T12163] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1608.479569][T12163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.580631][T16162] schedule_timeout: wrong timeout value ffffffffffffffff [ 1608.588652][T16162] CPU: 1 UID: 0 PID: 16162 Comm: vivid-002-sdr-c Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1608.588763][T16162] Tainted: [L]=SOFTLOCKUP [ 1608.588795][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1608.588845][T16162] Call Trace: [ 1608.588877][T16162] [ 1608.588906][T16162] __dump_stack+0x26/0x30 [ 1608.589242][T16162] dump_stack_lvl+0x14c/0x1c0 [ 1608.589338][T16162] dump_stack+0x1e/0x25 [ 1608.589423][T16162] schedule_timeout+0x1d2/0x240 [ 1608.589698][T16162] ? kthread_should_stop+0xd7/0x140 [ 1608.589934][T16162] vivid_thread_sdr_cap+0x12af/0x1720 [ 1608.590173][T16162] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1608.590421][T16162] kthread+0xd5a/0xf00 [ 1608.590527][T16162] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 1608.590639][T16162] ? __pfx_kthread+0x10/0x10 [ 1608.590724][T16162] ret_from_fork+0x207/0x6f0 [ 1608.590953][T16162] ? __switch_to+0x521/0x750 [ 1608.591150][T16162] ? __pfx_kthread+0x10/0x10 [ 1608.591284][T16162] ret_from_fork_asm+0x1a/0x30 [ 1608.591492][T16162] [ 1608.712346][T15930] veth0_macvtap: entered promiscuous mode [ 1608.774252][T12163] adutux 5-1:168.0: interrupt endpoints not found [ 1608.818382][T15930] veth1_macvtap: entered promiscuous mode [ 1609.049059][T16148] binder: 16147:16148 ioctl 40046104 0 returned -22 [ 1609.138993][T12163] usb 5-1: USB disconnect, device number 77 [ 1609.181290][T15930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.352478][T15930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.634114][ T1137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.737132][ T1137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.788749][ T5866] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.957199][ T55] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.629161][T16175] syzkaller0: entered promiscuous mode [ 1610.634822][T16175] syzkaller0: entered allmulticast mode [ 1613.277191][ T5880] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1613.512136][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 1613.647624][ T5880] usb 3-1: config 0 has no interfaces? [ 1613.696580][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1613.705843][ T5880] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1613.714212][ T5880] usb 3-1: Manufacturer: syz [ 1613.832754][ T5880] usb 3-1: config 0 descriptor?? [ 1614.090629][T15236] usb 3-1: USB disconnect, device number 60 [ 1615.186446][T15895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1615.389547][T15895] usb 4-1: Using ep0 maxpacket: 8 [ 1615.418415][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.426014][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.438365][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1615.569391][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.620099][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.634199][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1615.701704][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1615.737860][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1615.749405][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1615.854510][T15895] usb 4-1: string descriptor 0 read error: -22 [ 1615.869627][T15895] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1615.879048][T15895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.011023][T15895] adutux 4-1:168.0: interrupt endpoints not found [ 1616.042501][T16240] syzkaller0: entered promiscuous mode [ 1616.048544][T16240] syzkaller0: entered allmulticast mode [ 1616.230281][T16228] binder: 16226:16228 ioctl 40046104 0 returned -22 [ 1616.264773][T15895] usb 4-1: USB disconnect, device number 37 [ 1617.635771][T16255] syzkaller0: entered promiscuous mode [ 1617.644877][T16255] syzkaller0: entered allmulticast mode [ 1617.735202][T13732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.743578][T13732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.025057][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.033271][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.986550][T15895] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1619.206777][T15895] usb 4-1: Using ep0 maxpacket: 8 [ 1619.222296][T15895] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1619.231347][T15895] usb 4-1: config 179 has no interface number 0 [ 1619.242552][T15895] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1619.254276][T15895] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1619.266546][T15895] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1619.280293][T15895] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1619.292339][T15895] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1619.305930][T15895] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1619.313005][T15895] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1619.322313][T15895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.420785][T15895] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input27 [ 1619.537425][ T5120] input input27: unable to receive magic message: -110 [ 1619.626350][ T5120] input input27: unable to receive magic message: -32 [ 1619.723925][T15895] usb 4-1: USB disconnect, device number 38 [ 1619.730071][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1619.730202][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1620.367085][T16276] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1620.588217][T16279] syzkaller0: entered promiscuous mode [ 1620.593959][T16279] syzkaller0: entered allmulticast mode [ 1621.297012][ T5880] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1621.477729][T16285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2685'. [ 1621.516509][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 1621.537923][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1621.574789][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1621.586614][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1621.672574][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1621.693526][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1621.705298][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1621.804902][T16289] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 1621.850834][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1621.880217][T16289] usb usb8: usbfs: process 16289 (syz.4.2686) did not claim interface 0 before use [ 1621.916476][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1621.928191][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1621.976727][ T5880] usb 4-1: string descriptor 0 read error: -22 [ 1622.016641][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1622.026336][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.223994][ T5880] adutux 4-1:168.0: interrupt endpoints not found [ 1622.298518][T16281] binder: 16280:16281 ioctl 40046104 0 returned -22 [ 1622.329294][T16291] syzkaller0: entered promiscuous mode [ 1622.334936][T16291] syzkaller0: entered allmulticast mode [ 1622.376502][ T5880] usb 4-1: USB disconnect, device number 39 [ 1625.209502][T16307] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1625.559376][T16310] syzkaller0: entered promiscuous mode [ 1625.564945][T16310] syzkaller0: entered allmulticast mode [ 1626.098083][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1626.873709][T16325] syzkaller0: entered promiscuous mode [ 1626.879498][T16325] syzkaller0: entered allmulticast mode [ 1626.892548][ T5880] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1627.186671][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 1627.207916][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.225884][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1627.238420][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1627.304579][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.313082][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1627.324793][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1627.413286][ T5880] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1627.486459][ T5880] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1627.497992][ T5880] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1627.590133][ T5880] usb 4-1: string descriptor 0 read error: -22 [ 1627.612578][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1627.621918][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.772310][ T5880] adutux 4-1:168.0: interrupt endpoints not found [ 1627.986743][T16320] binder: 16319:16320 ioctl 40046104 0 returned -22 [ 1628.039784][T15895] usb 4-1: USB disconnect, device number 40 [ 1628.835950][T16340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1629.178730][T16345] syzkaller0: entered promiscuous mode [ 1629.184393][T16345] syzkaller0: entered allmulticast mode [ 1629.582053][T16351] ptrace attach of "./syz-executor exec"[10250] was attempted by "./syz-executor exec"[16351] [ 1629.615542][T16351] random: crng reseeded on system resumption [ 1630.369128][T15895] usb 8-1: new low-speed USB device number 46 using dummy_hcd [ 1630.566355][T15895] usb 8-1: device descriptor read/64, error -71 [ 1630.841834][T15895] usb 8-1: new low-speed USB device number 47 using dummy_hcd [ 1631.056659][T15895] usb 8-1: device descriptor read/64, error -71 [ 1631.234564][T15895] usb usb8-port1: attempt power cycle [ 1631.487716][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1631.520473][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1631.531088][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1631.544939][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1631.556352][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1631.677032][T15895] usb 8-1: new low-speed USB device number 48 using dummy_hcd [ 1631.769884][T15895] usb 8-1: device descriptor read/8, error -71 [ 1632.027592][T15895] usb 8-1: new low-speed USB device number 49 using dummy_hcd [ 1632.059498][T15895] usb 8-1: device descriptor read/8, error -71 [ 1632.183913][T15895] usb usb8-port1: unable to enumerate USB device [ 1632.586406][T15895] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1632.776322][T15895] usb 4-1: Using ep0 maxpacket: 8 [ 1632.804215][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1632.816732][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1632.828287][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.872351][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1632.889173][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1632.902334][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.921441][T15895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1632.929193][T15895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1632.941239][T15895] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1632.999416][T15895] usb 4-1: string descriptor 0 read error: -22 [ 1633.017195][T15895] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1633.026912][T15895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.142427][T15895] adutux 4-1:168.0: interrupt endpoints not found [ 1633.318971][T16372] binder: 16371:16372 ioctl 40046104 0 returned -22 [ 1633.387422][T12163] usb 4-1: USB disconnect, device number 41 [ 1633.429573][T16367] chnl_net:caif_netlink_parms(): no params data found [ 1633.647656][ T5801] Bluetooth: hci3: command tx timeout [ 1634.792126][T16384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 1635.661314][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.668728][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.697289][T16367] bridge_slave_0: entered allmulticast mode [ 1635.709908][T16367] bridge_slave_0: entered promiscuous mode [ 1635.726673][ T5801] Bluetooth: hci3: command tx timeout [ 1635.807428][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.814740][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.869460][T16367] bridge_slave_1: entered allmulticast mode [ 1635.883113][T16367] bridge_slave_1: entered promiscuous mode [ 1636.421459][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.527874][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.971085][T16367] team0: Port device team_slave_0 added [ 1637.095229][T16367] team0: Port device team_slave_1 added [ 1637.441874][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.449155][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.475315][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.588168][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.594696][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1637.655647][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.662892][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.689317][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.826623][ T5801] Bluetooth: hci3: command tx timeout [ 1638.387061][T16367] hsr_slave_0: entered promiscuous mode [ 1638.450750][T16367] hsr_slave_1: entered promiscuous mode [ 1638.484645][T16367] debugfs: 'hsr0' already exists in 'hsr' [ 1638.490751][T16367] Cannot create hsr debugfs directory [ 1638.523833][T16395] syzkaller0: entered promiscuous mode [ 1638.529644][T16395] syzkaller0: entered allmulticast mode [ 1639.546698][T15895] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1639.729958][T15895] usb 4-1: device descriptor read/64, error -71 [ 1639.876527][ T5801] Bluetooth: hci3: command tx timeout [ 1639.985311][T15895] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1640.034784][T16367] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.161960][T15895] usb 4-1: device descriptor read/64, error -71 [ 1640.231689][T16367] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.283635][T15895] usb usb4-port1: attempt power cycle [ 1640.454094][T16367] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.533108][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2733'. [ 1640.647149][T15895] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 1640.676954][T15895] usb 4-1: device descriptor read/8, error -71 [ 1640.924833][T16417] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1640.941232][T15895] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 1640.993850][T16417] bond1 (unregistering): Released all slaves [ 1641.012680][T15895] usb 4-1: device descriptor read/8, error -71 [ 1641.134839][T15895] usb usb4-port1: unable to enumerate USB device [ 1641.184783][T16367] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.827726][T16367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1641.891147][T16367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1641.959012][T16367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1642.000653][T16367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1642.702140][T16430] netlink: 'syz.2.2737': attribute type 1 has an invalid length. [ 1643.191216][T16432] syzkaller0: entered promiscuous mode [ 1643.197103][T16432] syzkaller0: entered allmulticast mode [ 1643.996942][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.261870][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.415782][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.423295][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.477055][ T796] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 1644.510202][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.517852][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.702086][ T796] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1644.710582][ T796] usb 4-1: config 0 has no interface number 0 [ 1644.763485][ T796] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1644.774666][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1644.787224][ T796] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1644.799859][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1644.811205][ T796] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1644.822313][ T796] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1644.836048][ T796] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1644.845619][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.132084][ T796] usb 4-1: config 0 descriptor?? [ 1645.172281][T16435] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.224275][T16435] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.299577][ T796] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1645.597946][ T5880] usb 4-1: USB disconnect, device number 46 [ 1645.658424][ T5880] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1646.734927][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 1647.694210][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.847708][T16454] syzkaller0: entered promiscuous mode [ 1647.853441][T16454] syzkaller0: entered allmulticast mode [ 1649.593975][ T5880] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1649.830301][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1649.841186][ T5880] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1649.933328][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1649.944249][ T5880] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1650.043377][ T5880] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1650.054195][ T5880] usb 2-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1650.123198][ T5880] usb 2-1: string descriptor 0 read error: -22 [ 1650.147180][ T5880] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1650.156829][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.209710][ T5880] usb 2-1: rejected 3 configurations due to insufficient available bus power [ 1650.218867][ T5880] usb 2-1: no configuration chosen from 3 choices [ 1650.458065][T16367] veth0_vlan: entered promiscuous mode [ 1650.515202][T16367] veth1_vlan: entered promiscuous mode [ 1650.903994][T16367] veth0_macvtap: entered promiscuous mode [ 1650.989731][T16367] veth1_macvtap: entered promiscuous mode [ 1651.202234][T16367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.306508][ T5880] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1651.315655][T16367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.445263][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.501527][ T5880] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1651.510236][ T5880] usb 4-1: config 0 has no interface number 0 [ 1651.545492][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.564352][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1651.575415][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1651.586306][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1651.598277][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1651.609580][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1651.620544][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1651.633716][ T5880] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1651.643181][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.664951][ T1137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.752421][ T1137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.898929][ T5880] usb 4-1: config 0 descriptor?? [ 1651.909451][T16477] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1651.937448][T16477] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1652.022041][ T5880] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1652.309627][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-1) [ 1652.321819][ T796] usb 4-1: USB disconnect, device number 47 [ 1652.365699][ T796] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1652.545165][T12163] usb 2-1: USB disconnect, device number 46 [ 1653.282591][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1653.296881][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1653.309622][T16485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1653.320849][T16485] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2752'. [ 1654.377923][T16494] syzkaller0: entered promiscuous mode [ 1654.383581][T16494] syzkaller0: entered allmulticast mode [ 1655.530210][T16504] fuse: Unknown parameter 'user_id00000000000000000000' [ 1656.361948][T16512] netlink: 'syz.7.2758': attribute type 1 has an invalid length. [ 1657.337040][ T5880] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 1657.567353][ T5880] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1657.578127][ T5880] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1657.641868][ T5880] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1657.654154][ T5880] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1657.739291][ T5880] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1657.750418][ T5880] usb 4-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1657.893219][ T5880] usb 4-1: string descriptor 0 read error: -22 [ 1657.919803][ T5880] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1657.929347][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.007963][ T5880] usb 4-1: rejected 3 configurations due to insufficient available bus power [ 1658.017117][ T5880] usb 4-1: no configuration chosen from 3 choices [ 1658.713821][T13732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.721961][T13732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.983315][ T5866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.991773][ T5866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.735519][T16535] syzkaller0: entered promiscuous mode [ 1659.741359][T16535] syzkaller0: entered allmulticast mode [ 1660.000475][ T5880] usb 4-1: USB disconnect, device number 48 [ 1660.797515][T16544] syzkaller0: entered promiscuous mode [ 1660.803392][T16544] syzkaller0: entered allmulticast mode [ 1661.177517][T16551] fuse: Unknown parameter 'user_id00000000000000000000' [ 1664.080336][T16575] syzkaller0: entered promiscuous mode [ 1664.086274][T16575] syzkaller0: entered allmulticast mode [ 1664.829497][T16580] syzkaller0: entered promiscuous mode [ 1664.835144][T16580] syzkaller0: entered allmulticast mode [ 1665.105928][T16583] fuse: Unknown parameter 'user_id00000000000000000000' [ 1665.173164][T16586] fuse: Bad value for 'fd' [ 1667.590241][T16612] netlink: 'syz.7.2785': attribute type 1 has an invalid length. [ 1668.658089][T16622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1671.439724][T16630] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1671.953154][T16635] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1673.972443][T16649] syzkaller0: entered promiscuous mode [ 1673.978138][T16649] syzkaller0: entered allmulticast mode [ 1674.997677][T16651] fuse: Bad value for 'fd' [ 1675.830098][T16658] fuse: Bad value for 'fd' [ 1676.348145][T16666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2798'. [ 1676.357809][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2798'. [ 1677.665432][T16680] syzkaller0: entered promiscuous mode [ 1677.671617][T16680] syzkaller0: entered allmulticast mode [ 1677.871143][T16680] tipc: Started in network mode [ 1677.876454][T16680] tipc: Node identity 460d7c8a4f13, cluster identity 4711 [ 1677.884649][T16680] tipc: Enabled bearer , priority 0 [ 1677.950651][T16679] tipc: Resetting bearer [ 1678.040770][T16679] tipc: Disabling bearer [ 1678.685010][T16683] syzkaller0: entered promiscuous mode [ 1678.690741][T16683] syzkaller0: entered allmulticast mode [ 1679.651163][T16691] fuse: Bad value for 'fd' [ 1681.031332][T16698] netlink: 'syz.4.2807': attribute type 1 has an invalid length. [ 1683.327378][T16700] bridge0: entered allmulticast mode [ 1683.367943][T16700] bridge0: left allmulticast mode [ 1684.276964][T16704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2810'. [ 1684.286348][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2810'. [ 1684.965869][T16706] fuse: Bad value for 'fd' [ 1685.926960][T16644] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1686.176460][T16644] usb 8-1: Using ep0 maxpacket: 16 [ 1686.225239][T16644] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1686.289118][T16644] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1686.298387][T16644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.306635][T16644] usb 8-1: Product: syz [ 1686.310879][T16644] usb 8-1: Manufacturer: syz [ 1686.315544][T16644] usb 8-1: SerialNumber: syz [ 1686.427269][T16644] usb 8-1: config 0 descriptor?? [ 1686.471916][T16644] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1686.481488][T16644] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1686.558069][T16720] fuse: Bad value for 'fd' [ 1687.185074][T16644] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1687.855293][T16644] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1687.863742][T16644] em28xx 8-1:0.0: board has no eeprom [ 1689.237427][T16644] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1689.245537][T16644] em28xx 8-1:0.0: dvb set to bulk mode. [ 1689.252506][T16642] em28xx 8-1:0.0: Binding DVB extension [ 1689.359422][T16644] usb 8-1: USB disconnect, device number 50 [ 1689.387703][T16644] em28xx 8-1:0.0: Disconnecting em28xx [ 1689.747339][T16642] em28xx 8-1:0.0: Registering input extension [ 1689.846561][T16644] em28xx 8-1:0.0: Closing input extension [ 1690.043423][T16644] em28xx 8-1:0.0: Freeing device [ 1690.859822][T16753] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1690.869128][T16753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2823'. [ 1693.581560][T16767] fuse: Unknown parameter '0x0000000000000005' [ 1694.714331][T16772] syzkaller0: entered promiscuous mode [ 1694.720177][T16772] syzkaller0: entered allmulticast mode [ 1697.273874][T16784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1697.283127][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1697.706514][T16644] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1697.910978][T16644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.922400][T16644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.932501][T16644] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1697.945821][T16644] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1697.955196][T16644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.106877][T16644] usb 4-1: config 0 descriptor?? [ 1698.210574][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 1698.886014][T16644] usbhid 4-1:0.0: can't add hid device: -71 [ 1698.892900][T16644] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1699.010634][T16644] usb 4-1: USB disconnect, device number 49 [ 1699.030100][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.036740][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1701.141667][T16812] bridge0: entered allmulticast mode [ 1701.167991][T16812] bridge0: left allmulticast mode [ 1702.483683][T16819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2847'. [ 1702.493473][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2847'. [ 1704.803373][T16841] bridge0: entered allmulticast mode [ 1704.872632][T16841] bridge0: left allmulticast mode [ 1706.196914][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 1706.787869][T16860] fuse: Bad value for 'user_id' [ 1706.792833][T16860] fuse: Bad value for 'user_id' [ 1707.794284][T16871] bridge0: entered allmulticast mode [ 1707.866451][T16871] bridge0: left allmulticast mode [ 1708.982106][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1709.067733][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1709.310645][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1709.368806][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2869'. [ 1710.699178][T16898] fuse: Bad value for 'user_id' [ 1710.704157][T16898] fuse: Bad value for 'user_id' [ 1711.082572][ T796] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1711.279229][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 1711.319766][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1711.333208][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1711.342939][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.518460][ T796] usb 5-1: config 0 descriptor?? [ 1711.567500][ T796] hub 5-1:0.0: bad descriptor, ignoring hub [ 1711.573609][ T796] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1711.682637][ T796] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1711.986551][T16905] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1719.556535][T16946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1720.841378][T16644] usb 5-1: USB disconnect, device number 78 [ 1723.105078][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2895'. [ 1728.103859][ T796] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1728.316319][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 1728.594901][ T796] usb 3-1: config 0 has no interfaces? [ 1728.637843][ T796] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1728.647206][ T796] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1728.655332][ T796] usb 3-1: Manufacturer: syz [ 1728.781137][ T796] usb 3-1: config 0 descriptor?? [ 1733.424838][T17032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2913'. [ 1735.942062][ T796] usb 3-1: USB disconnect, device number 61 [ 1736.720238][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1736.731691][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1736.758564][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1736.828687][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1745.492743][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2929'. [ 1745.811841][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'. [ 1747.156731][ T796] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1747.340169][ T796] usb 8-1: Using ep0 maxpacket: 16 [ 1747.368622][ T796] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1747.466410][ T796] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1747.475798][ T796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.484282][ T796] usb 8-1: Product: syz [ 1747.488625][ T796] usb 8-1: Manufacturer: syz [ 1747.493303][ T796] usb 8-1: SerialNumber: syz [ 1747.607242][ T796] usb 8-1: config 0 descriptor?? [ 1747.699571][ T796] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1747.709217][ T796] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1748.427825][ T796] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1748.886659][ T796] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1748.894862][ T796] em28xx 8-1:0.0: board has no eeprom [ 1749.256515][ T796] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1749.264546][ T796] em28xx 8-1:0.0: dvb set to bulk mode. [ 1749.270719][T15895] em28xx 8-1:0.0: Binding DVB extension [ 1749.413826][ T796] usb 8-1: USB disconnect, device number 51 [ 1749.527266][ T796] em28xx 8-1:0.0: Disconnecting em28xx [ 1749.862296][T15895] em28xx 8-1:0.0: Registering input extension [ 1749.902975][ T796] em28xx 8-1:0.0: Closing input extension [ 1750.030378][ T796] em28xx 8-1:0.0: Freeing device [ 1751.919110][T17130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1752.994438][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 1753.064470][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 1753.099185][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 1753.172298][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 1754.176433][T16642] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1754.366808][T16642] usb 3-1: Using ep0 maxpacket: 16 [ 1754.413535][T16642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1754.472058][T16642] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1754.481452][T16642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.489774][T16642] usb 3-1: Product: syz [ 1754.494046][T16642] usb 3-1: Manufacturer: syz [ 1754.498922][T16642] usb 3-1: SerialNumber: syz [ 1754.527527][T16642] usb 3-1: config 0 descriptor?? [ 1754.631586][T16642] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1754.641685][T16642] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1755.222394][T16642] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1755.757529][T16642] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1755.765812][T16642] em28xx 3-1:0.0: board has no eeprom [ 1756.126363][T16642] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1756.134499][T16642] em28xx 3-1:0.0: dvb set to bulk mode. [ 1756.140759][T16644] em28xx 3-1:0.0: Binding DVB extension [ 1756.280347][T17161] em28xx 3-1:0.0: reading from i2c device at 0x4 failed (error=-5) [ 1756.280371][T16642] usb 3-1: USB disconnect, device number 62 [ 1756.364131][T16642] em28xx 3-1:0.0: Disconnecting em28xx [ 1756.709171][T16644] em28xx 3-1:0.0: Registering input extension [ 1756.769189][T16642] em28xx 3-1:0.0: Closing input extension [ 1756.826564][T16642] em28xx 3-1:0.0: Freeing device [ 1757.396762][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 1758.154268][T17172] syzkaller0: entered promiscuous mode [ 1758.160340][T17172] syzkaller0: entered allmulticast mode [ 1758.292482][T17176] tipc: Started in network mode [ 1758.298775][T17176] tipc: Node identity 6a16bde3c278, cluster identity 4711 [ 1758.306839][T17176] tipc: Enabled bearer , priority 0 [ 1758.430529][T17171] tipc: Resetting bearer [ 1758.502243][T17171] tipc: Disabling bearer [ 1759.360211][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 1760.105922][T17191] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1760.478336][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.484937][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1761.839631][T17204] dlm: non-version read from control device 8224 [ 1762.926507][T15895] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1763.130958][T15895] usb 4-1: Using ep0 maxpacket: 16 [ 1763.161558][T15895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1763.214075][T15895] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1763.223488][T15895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.231749][T15895] usb 4-1: Product: syz [ 1763.236446][T15895] usb 4-1: Manufacturer: syz [ 1763.241296][T15895] usb 4-1: SerialNumber: syz [ 1763.361086][T15895] usb 4-1: config 0 descriptor?? [ 1763.440671][T15895] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1763.450865][T15895] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1763.878332][T17206] syz.4.2962 (17206): drop_caches: 2 [ 1764.039367][T15895] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1764.518529][T15895] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1764.527041][T15895] em28xx 4-1:0.0: board has no eeprom [ 1764.876355][T15895] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1764.884468][T15895] em28xx 4-1:0.0: dvb set to bulk mode. [ 1764.890503][T16633] em28xx 4-1:0.0: Binding DVB extension [ 1765.026424][T15895] usb 4-1: USB disconnect, device number 50 [ 1765.069461][T15895] em28xx 4-1:0.0: Disconnecting em28xx [ 1765.477277][T16633] em28xx 4-1:0.0: Registering input extension [ 1765.566449][T15895] em28xx 4-1:0.0: Closing input extension [ 1765.738861][T15895] em28xx 4-1:0.0: Freeing device [ 1766.958752][T17217] syzkaller0: entered promiscuous mode [ 1766.964422][T17217] syzkaller0: entered allmulticast mode [ 1767.087997][T17217] tipc: Started in network mode [ 1767.093318][T17217] tipc: Node identity 523c5cfdfdc8, cluster identity 4711 [ 1767.101416][T17217] tipc: Enabled bearer , priority 0 [ 1767.184404][T17216] tipc: Resetting bearer [ 1767.283766][T17216] tipc: Disabling bearer [ 1767.431161][T17226] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1774.802521][T17264] syzkaller0: entered promiscuous mode [ 1774.808250][T17264] syzkaller0: entered allmulticast mode [ 1774.879115][T17267] tipc: Enabled bearer , priority 0 [ 1774.890565][T17263] tipc: Resetting bearer [ 1774.919651][T17263] tipc: Disabling bearer [ 1777.588018][T16642] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 1778.217000][T16642] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1778.226871][T16642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.311800][T16642] usb 8-1: config 0 descriptor?? [ 1778.596299][T16644] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1778.619398][T16642] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input32 [ 1778.850912][T16644] usb 4-1: Using ep0 maxpacket: 16 [ 1778.879395][T16644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1778.965212][T16644] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1778.974842][T16644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.983186][T16644] usb 4-1: Product: syz [ 1778.987613][T16644] usb 4-1: Manufacturer: syz [ 1778.992402][T16644] usb 4-1: SerialNumber: syz [ 1779.320164][T16644] usb 4-1: config 0 descriptor?? [ 1779.439137][T16644] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1779.449045][T16644] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1780.110765][T16644] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1780.558562][T16644] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1780.567308][T16644] em28xx 4-1:0.0: board has no eeprom [ 1780.786293][T16644] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1780.794618][T16644] em28xx 4-1:0.0: dvb set to bulk mode. [ 1780.801540][T16642] em28xx 4-1:0.0: Binding DVB extension [ 1780.830424][T16644] usb 4-1: USB disconnect, device number 51 [ 1780.839806][T16644] em28xx 4-1:0.0: Disconnecting em28xx [ 1781.581745][T16642] em28xx 4-1:0.0: Registering input extension [ 1781.676551][T16644] em28xx 4-1:0.0: Closing input extension [ 1781.791664][T16644] em28xx 4-1:0.0: Freeing device [ 1782.136909][T15895] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1782.337029][T15895] usb 2-1: Using ep0 maxpacket: 32 [ 1782.376588][T15895] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1782.384843][T15895] usb 2-1: config 0 has no interface number 0 [ 1782.450765][T15895] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1782.460484][T15895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.468929][T15895] usb 2-1: Product: syz [ 1782.473249][T15895] usb 2-1: Manufacturer: syz [ 1782.478179][T15895] usb 2-1: SerialNumber: syz [ 1782.594091][T15895] usb 2-1: config 0 descriptor?? [ 1782.709306][T15895] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1782.718695][T15895] usb 2-1: selecting invalid altsetting 1 [ 1782.724609][T15895] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1782.852551][T15895] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1782.987759][T15895] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1783.054063][T15895] usb 2-1: media controller created [ 1783.375863][T15895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1783.809497][T15895] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1783.816927][T15895] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1783.831898][ T5120] bcm5974 8-1:0.0: could not read from device [ 1783.912549][T15895] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1783.926562][ T5120] bcm5974 8-1:0.0: could not read from device [ 1784.006902][T15475] bcm5974 8-1:0.0: could not read from device [ 1784.067219][ T5120] bcm5974 8-1:0.0: could not read from device [ 1784.137167][ T5120] bcm5974 8-1:0.0: could not read from device [ 1784.184669][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1784.205448][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1784.217834][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1784.267447][ T5120] bcm5974 8-1:0.0: could not read from device [ 1784.283792][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1784.307246][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1784.356900][ T5120] bcm5974 8-1:0.0: could not read from device [ 1784.407502][T15475] bcm5974 8-1:0.0: could not read from device [ 1784.466482][T15475] udevd[15475]: Error opening device "/dev/input/event4": Input/output error [ 1784.483936][T15475] udevd[15475]: Unable to EVIOCGABS device "/dev/input/event4" [ 1784.518076][T15475] udevd[15475]: Unable to EVIOCGABS device "/dev/input/event4" [ 1784.583356][T15475] udevd[15475]: Unable to EVIOCGABS device "/dev/input/event4" [ 1784.596479][T15895] usb 2-1: USB disconnect, device number 47 [ 1784.679781][T15475] udevd[15475]: Unable to EVIOCGABS device "/dev/input/event4" [ 1786.376391][ T5787] Bluetooth: hci0: command tx timeout [ 1786.890499][T17323] chnl_net:caif_netlink_parms(): no params data found [ 1788.271110][ T5866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.435531][ T5866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.459309][ T5787] Bluetooth: hci0: command tx timeout [ 1788.801028][ T5866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.876968][T16644] usb 8-1: USB disconnect, device number 52 [ 1788.990227][ T5866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.680969][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.689099][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.756359][T15895] usb 8-1: new low-speed USB device number 53 using dummy_hcd [ 1789.797020][T17323] bridge_slave_0: entered allmulticast mode [ 1789.883466][T17323] bridge_slave_0: entered promiscuous mode [ 1789.958965][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.966904][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.007924][T15895] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1790.016556][T15895] usb 8-1: config 0 has no interface number 0 [ 1790.047266][T17323] bridge_slave_1: entered allmulticast mode [ 1790.056671][T15895] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1790.068257][T15895] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1790.079259][T15895] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1790.091097][T15895] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1790.102358][T15895] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1790.113448][T15895] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1790.127689][T15895] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1790.137133][T15895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.179730][T17323] bridge_slave_1: entered promiscuous mode [ 1790.211767][T15895] usb 8-1: config 0 descriptor?? [ 1790.225537][T17345] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1790.237053][T17345] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1790.344710][T15895] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1790.526903][ T5787] Bluetooth: hci0: command tx timeout [ 1790.558709][T16644] usb 8-1: USB disconnect, device number 53 [ 1790.678133][T16644] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1790.914318][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1791.239857][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1791.267059][ T5866] bridge_slave_1: left allmulticast mode [ 1791.272863][ T5866] bridge_slave_1: left promiscuous mode [ 1791.279523][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.410868][ T5866] bridge_slave_0: left allmulticast mode [ 1791.416970][ T5866] bridge_slave_0: left promiscuous mode [ 1791.423421][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.066518][T16644] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1792.276344][T16644] usb 8-1: Using ep0 maxpacket: 16 [ 1792.297781][T16644] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1792.307312][T16644] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1792.315571][T16644] usb 8-1: Product: syz [ 1792.320014][T16644] usb 8-1: Manufacturer: syz [ 1792.324767][T16644] usb 8-1: SerialNumber: syz [ 1792.413283][T16644] usb 8-1: config 0 descriptor?? [ 1792.596379][ T5801] Bluetooth: hci0: command tx timeout [ 1792.843452][T16644] usb 8-1: USB disconnect, device number 54 [ 1792.928832][ T5866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1792.987189][ T5866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.004432][ T5866] bond0 (unregistering): Released all slaves [ 1793.056499][T16642] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1793.110499][T11352] udevd[11352]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1793.281153][T16642] usb 4-1: Using ep0 maxpacket: 16 [ 1793.316295][T16642] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1793.376651][T16642] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1793.385915][T16642] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.394837][T16642] usb 4-1: Product: syz [ 1793.399142][T16642] usb 4-1: Manufacturer: syz [ 1793.403810][T16642] usb 4-1: SerialNumber: syz [ 1793.461875][T16642] usb 4-1: config 0 descriptor?? [ 1793.511012][T16642] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1793.520968][T16642] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1793.542983][T17323] team0: Port device team_slave_0 added [ 1793.659778][T17323] team0: Port device team_slave_1 added [ 1794.177141][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1794.184291][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1794.210558][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.234735][T16642] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1794.345592][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1794.353552][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1794.380227][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1794.527850][T17370] fuse: Bad value for 'fd' [ 1794.679471][ T5866] hsr_slave_0: left promiscuous mode [ 1794.695421][ T5866] hsr_slave_1: left promiscuous mode [ 1794.710986][T16642] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1794.719188][T16642] em28xx 4-1:0.0: board has no eeprom [ 1794.810504][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.819184][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.838086][T16642] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1794.846286][T16642] em28xx 4-1:0.0: dvb set to bulk mode. [ 1794.852232][T15236] em28xx 4-1:0.0: Binding DVB extension [ 1794.907159][ T5866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.914860][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.925236][T16642] usb 4-1: USB disconnect, device number 52 [ 1794.990569][T16642] em28xx 4-1:0.0: Disconnecting em28xx [ 1795.182882][ T5866] veth1_macvtap: left promiscuous mode [ 1795.202323][ T5866] veth0_macvtap: left promiscuous mode [ 1795.216497][ T5866] veth1_vlan: left promiscuous mode [ 1795.222034][ T5866] veth0_vlan: left promiscuous mode [ 1795.361157][T15236] em28xx 4-1:0.0: Registering input extension [ 1795.431859][T16642] em28xx 4-1:0.0: Closing input extension [ 1795.554229][T16642] em28xx 4-1:0.0: Freeing device [ 1796.386745][T16642] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1796.682423][T16642] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1796.691010][T16642] usb 3-1: config 0 has no interface number 0 [ 1796.758849][T16642] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1796.769903][T16642] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1796.780728][T16642] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1796.792588][T16642] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1796.803794][T16642] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1796.814735][T16642] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1796.827895][T16642] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1796.837088][T16642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.030577][T16642] usb 3-1: config 0 descriptor?? [ 1797.126702][T17381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1797.148811][T17381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1797.242311][ T5866] team0 (unregistering): Port device team_slave_1 removed [ 1797.320339][ T5866] team0 (unregistering): Port device team_slave_0 removed [ 1797.324307][T16642] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1797.619756][T16642] usb 3-1: USB disconnect, device number 63 [ 1797.778339][T16642] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1798.686968][T17323] hsr_slave_0: entered promiscuous mode [ 1798.722243][T17323] hsr_slave_1: entered promiscuous mode [ 1798.824747][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 1798.830900][T17323] Cannot create hsr debugfs directory [ 1802.189250][T17323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1802.297507][T17323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1802.597497][T17323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1802.737857][T17323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1804.637231][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1804.925377][T17323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1804.965824][T17427] fuse: Bad value for 'fd' [ 1805.061054][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.068623][ T5866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.219759][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.227363][ T5866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.536747][T16633] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1806.661592][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3026'. [ 1806.733336][T17443] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3026'. [ 1806.779369][T16633] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1806.787904][T16633] usb 2-1: config 0 has no interface number 0 [ 1806.839774][T16633] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1806.851164][T16633] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1806.862166][T16633] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1806.873983][T16633] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1806.885351][T16633] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1806.896449][T16633] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1806.909762][T16633] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1806.919046][T16633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.076964][T17444] syzkaller0: entered promiscuous mode [ 1807.082737][T17444] syzkaller0: entered allmulticast mode [ 1807.232062][T16633] usb 2-1: config 0 descriptor?? [ 1807.241578][T17439] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.449056][T17439] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1807.559499][T16633] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1807.824964][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 1807.847754][T16633] usb 2-1: USB disconnect, device number 48 [ 1807.890302][T17323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.904927][T16633] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1809.781091][T17489] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1810.662015][T17495] fuse: Bad value for 'fd' [ 1811.113930][T17323] veth0_vlan: entered promiscuous mode [ 1811.241939][T17323] veth1_vlan: entered promiscuous mode [ 1811.713686][T17323] veth0_macvtap: entered promiscuous mode [ 1811.837963][T17323] veth1_macvtap: entered promiscuous mode [ 1812.121962][T17323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.388824][T17323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.717623][ T397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.891100][ T397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.016680][ T1137] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.065712][ T1137] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.054776][T17512] syzkaller0: entered promiscuous mode [ 1814.060689][T17512] syzkaller0: entered allmulticast mode [ 1815.859682][T16642] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1816.088293][T16642] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1816.096712][T16642] usb 4-1: config 0 has no interface number 0 [ 1816.175260][T16642] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1816.186341][T16642] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1816.197189][T16642] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1816.208911][T16642] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1816.220096][T16642] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1816.231089][T16642] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1816.244257][T16642] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1816.253454][T16642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.337336][T16642] usb 4-1: config 0 descriptor?? [ 1816.348676][T17533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1816.386792][T17533] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1816.510417][T16642] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1816.994990][T15895] usb 4-1: USB disconnect, device number 53 [ 1817.048429][T15895] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1818.280115][T17556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1818.457323][T16642] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1818.673639][T16642] usb 3-1: Using ep0 maxpacket: 16 [ 1818.738641][T16642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1818.794252][T16642] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1818.804070][T16642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.812457][T16642] usb 3-1: Product: syz [ 1818.816894][T16642] usb 3-1: Manufacturer: syz [ 1818.821654][T16642] usb 3-1: SerialNumber: syz [ 1819.016779][T16642] usb 3-1: config 0 descriptor?? [ 1819.072289][T16642] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1819.082174][T16642] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1819.694357][T16642] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1820.187826][T16642] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1820.196379][T16642] em28xx 3-1:0.0: board has no eeprom [ 1820.570122][T16642] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1820.579002][T16642] em28xx 3-1:0.0: dvb set to bulk mode. [ 1820.584850][T15236] em28xx 3-1:0.0: Binding DVB extension [ 1820.772444][T16642] usb 3-1: USB disconnect, device number 64 [ 1820.825775][T16642] em28xx 3-1:0.0: Disconnecting em28xx [ 1820.837604][T17582] ===================================================== [ 1820.845310][T17582] BUG: KMSAN: uninit-value in validate_xmit_skb+0x14e1/0x2400 [ 1820.853088][T17582] validate_xmit_skb+0x14e1/0x2400 [ 1820.858496][T17582] validate_xmit_skb_list+0xd4/0x320 [ 1820.863969][T17582] sch_direct_xmit+0xd4/0xcf0 [ 1820.869112][T17582] __dev_queue_xmit+0x2f2d/0x5890 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1820.874343][T17582] packet_xmit+0x8f/0x710 [ 1820.879121][T17582] packet_sendmsg+0x91d9/0xa320 [ 1820.884149][T17582] ____sys_sendmsg+0xfe7/0x1080 [ 1820.889355][T17582] ___sys_sendmsg+0x271/0x3b0 [ 1820.894158][T17582] __sys_sendmsg+0x1aa/0x300 [ 1820.898986][T17582] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1820.904756][T17582] ia32_sys_call+0x35f2/0x4340 [ 1820.909810][T17582] __do_fast_syscall_32+0x14a/0x310 [ 1820.915272][T17582] do_fast_syscall_32+0x37/0x80 [ 1820.920387][T17582] do_SYSENTER_32+0x1f/0x30 [ 1820.925067][T17582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1820.931783][T17582] [ 1820.934175][T17582] Uninit was stored to memory at: [ 1820.939505][T17582] validate_xmit_skb+0x14da/0x2400 [ 1820.944797][T17582] validate_xmit_skb_list+0xd4/0x320 [ 1820.950378][T17582] sch_direct_xmit+0xd4/0xcf0 [ 1820.955235][T17582] __dev_queue_xmit+0x2f2d/0x5890 [ 1820.960718][T17582] packet_xmit+0x8f/0x710 [ 1820.965224][T17582] packet_sendmsg+0x91d9/0xa320 [ 1820.970337][T17582] ____sys_sendmsg+0xfe7/0x1080 [ 1820.975328][T17582] ___sys_sendmsg+0x271/0x3b0 [ 1820.980224][T17582] __sys_sendmsg+0x1aa/0x300 [ 1820.984949][T17582] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1820.990755][T17582] ia32_sys_call+0x35f2/0x4340 [ 1820.995719][T17582] __do_fast_syscall_32+0x14a/0x310 [ 1821.001231][T17582] do_fast_syscall_32+0x37/0x80 [ 1821.006428][T17582] do_SYSENTER_32+0x1f/0x30 [ 1821.011100][T17582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1821.017713][T17582] [ 1821.020101][T17582] Uninit was created at: [ 1821.024775][T17582] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1821.031099][T17582] kmalloc_reserve+0x13c/0x4b0 [ 1821.036236][T17582] __alloc_skb+0x805/0x1030 [ 1821.040911][T17582] alloc_skb_with_frags+0xc5/0xa60 [ 1821.046423][T17582] sock_alloc_send_pskb+0xacb/0xc60 [ 1821.051769][T17582] packet_sendmsg+0x7477/0xa320 [ 1821.056891][T17582] ____sys_sendmsg+0xfe7/0x1080 [ 1821.061887][T17582] ___sys_sendmsg+0x271/0x3b0 [ 1821.066949][T17582] __sys_sendmsg+0x1aa/0x300 [ 1821.071677][T17582] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1821.077466][T17582] ia32_sys_call+0x35f2/0x4340 [ 1821.082413][T17582] __do_fast_syscall_32+0x14a/0x310 [ 1821.087883][T17582] do_fast_syscall_32+0x37/0x80 [ 1821.092910][T17582] do_SYSENTER_32+0x1f/0x30 [ 1821.097738][T17582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1821.104252][T17582] [ 1821.106765][T17582] CPU: 0 UID: 0 PID: 17582 Comm: syz.1.3048 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1821.118449][T17582] Tainted: [L]=SOFTLOCKUP [ 1821.122863][T17582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1821.133183][T17582] ===================================================== [ 1821.140282][T17582] Disabling lock debugging due to kernel taint [ 1821.146618][T17582] Kernel panic - not syncing: kmsan.panic set ... [ 1821.153164][T17582] CPU: 0 UID: 0 PID: 17582 Comm: syz.1.3048 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1821.164723][T17582] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1821.170376][T17582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1821.180547][T17582] Call Trace: [ 1821.183909][T17582] [ 1821.186929][T17582] __dump_stack+0x26/0x30 [ 1821.191428][T17582] dump_stack_lvl+0x50/0x1c0 [ 1821.196171][T17582] ? dump_stack+0x12/0x25 [ 1821.200659][T17582] dump_stack+0x1e/0x25 [ 1821.204969][T17582] vpanic+0x435/0xd40 [ 1821.209146][T17582] panic+0x15d/0x160 [ 1821.213258][T17582] kmsan_report+0x31a/0x320 [ 1821.217959][T17582] ? __msan_warning+0x1b/0x30 [ 1821.222835][T17582] ? validate_xmit_skb+0x14e1/0x2400 [ 1821.228310][T17582] ? validate_xmit_skb_list+0xd4/0x320 [ 1821.233953][T17582] ? sch_direct_xmit+0xd4/0xcf0 [ 1821.238954][T17582] ? __dev_queue_xmit+0x2f2d/0x5890 [ 1821.244322][T17582] ? packet_xmit+0x8f/0x710 [ 1821.249161][T17582] ? packet_sendmsg+0x91d9/0xa320 [ 1821.254344][T17582] ? ____sys_sendmsg+0xfe7/0x1080 [ 1821.259500][T17582] ? ___sys_sendmsg+0x271/0x3b0 [ 1821.264477][T17582] ? __sys_sendmsg+0x1aa/0x300 [ 1821.269354][T17582] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1821.275209][T17582] ? ia32_sys_call+0x35f2/0x4340 [ 1821.280328][T17582] ? __do_fast_syscall_32+0x14a/0x310 [ 1821.285874][T17582] ? do_fast_syscall_32+0x37/0x80 [ 1821.291068][T17582] ? do_SYSENTER_32+0x1f/0x30 [ 1821.295909][T17582] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1821.302577][T17582] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1821.309241][T17582] ? skb_network_protocol+0x898/0xaa0 [ 1821.314794][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.320084][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.326099][T17582] ? netif_skb_features+0x1788/0x2160 [ 1821.331678][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.336980][T17582] __msan_warning+0x1b/0x30 [ 1821.341652][T17582] validate_xmit_skb+0x14e1/0x2400 [ 1821.346941][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.352948][T17582] ? filter_irq_stacks+0x49/0x190 [ 1821.358276][T17582] validate_xmit_skb_list+0xd4/0x320 [ 1821.363771][T17582] sch_direct_xmit+0xd4/0xcf0 [ 1821.368606][T17582] ? kmsan_get_metadata+0x146/0x160 [ 1821.373986][T17582] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1821.380514][T17582] __dev_queue_xmit+0x2f2d/0x5890 [ 1821.385727][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.391013][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.397026][T17582] ? __dev_queue_xmit+0x27d/0x5890 [ 1821.402349][T17582] packet_xmit+0x8f/0x710 [ 1821.406846][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.412145][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.418147][T17582] packet_sendmsg+0x91d9/0xa320 [ 1821.423144][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.428435][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.434451][T17582] ? aa_label_sk_perm+0x759/0x810 [ 1821.439851][T17582] ? __msan_warning+0x1b/0x30 [ 1821.444704][T17582] ? filter_irq_stacks+0x12c/0x190 [ 1821.449966][T17582] ? mac_pton+0x1f0/0x1150 [ 1821.454610][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.459904][T17582] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1821.466490][T17582] ? __pfx_packet_sendmsg+0x10/0x10 [ 1821.471846][T17582] ? __pfx_packet_sendmsg+0x10/0x10 [ 1821.477200][T17582] ____sys_sendmsg+0xfe7/0x1080 [ 1821.482211][T17582] ___sys_sendmsg+0x271/0x3b0 [ 1821.487008][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.492304][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.498316][T17582] ? __rcu_read_unlock+0x6c/0xd0 [ 1821.503546][T17582] ? __fget_files+0x3b4/0x4a0 [ 1821.508605][T17582] ? __fget_files+0x3b9/0x4a0 [ 1821.513458][T17582] ? kmsan_get_metadata+0xf1/0x160 [ 1821.518755][T17582] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1821.524750][T17582] __sys_sendmsg+0x1aa/0x300 [ 1821.529499][T17582] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1821.535196][T17582] ia32_sys_call+0x35f2/0x4340 [ 1821.540155][T17582] __do_fast_syscall_32+0x14a/0x310 [ 1821.545549][T17582] do_fast_syscall_32+0x37/0x80 [ 1821.550574][T17582] do_SYSENTER_32+0x1f/0x30 [ 1821.555237][T17582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1821.561742][T17582] RIP: 0023:0xf73dd539 [ 1821.565904][T17582] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1821.585650][T17582] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1821.594200][T17582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002ac0 [ 1821.602274][T17582] RDX: 0000000020040051 RSI: 0000000000000000 RDI: 0000000000000000 [ 1821.610340][T17582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1821.618409][T17582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1821.626479][T17582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1821.634578][T17582] [ 1821.638030][T17582] Kernel Offset: disabled [ 1821.642397][T17582] Rebooting in 86400 seconds..