last executing test programs: 16.231702155s ago: executing program 3 (id=700): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080006", @ANYRES32=0x0, @ANYBLOB="08008602300033f1f97f14cbcd4645044b3ef91a509a3dad96909e5f06e31e5a5fe8d5df2746e246ba9f6d4d14ab510748921dc611b3f87ed207861873404fff21425bd015fa74dfce4c6de7d8df1de605d23358f139912ac27b15316d85f12241e1da058fb34fcebe79d871288c0400a8b88e87635680a63fb5b4264c0ca8a68804ff1f39e94802a8128336742523266bb08a29df60abd8cf2cc1851829056b14fd88a167973c69cbdd3b2ce694482b24b27fb9ed9ad42ddf54fec39842be2369a5a1e01fe2d82216f86cb7589a7320238fbc775ec57e639a60afa52c2cef1a337bbeaaebcc39807a7d4a839169adffb5868079a7e9cc9803cd13c8e04a75beb26e50b86a71ca0a67b897e150b98a24c7f461d7b147c0ae", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0xee01, @ANYBLOB="10000000000000002000000000000000"], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r9, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 15.536254286s ago: executing program 4 (id=701): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 14.017241033s ago: executing program 4 (id=707): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000100)={'bond0\x00', @ifru_data=0x0}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x590, 0x200) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r9 = io_uring_setup(0xc128, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x0, 0x1ce}) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r10 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) close(r10) syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) 13.681777148s ago: executing program 3 (id=708): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r2, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 11.69831269s ago: executing program 4 (id=712): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x700000000000000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, {0xa, 0x4e22, 0x3, @local, 0x2}, r4, 0xfffffffa}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e617400240002800800074000000000080001400000000008000340fe00001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0), &(0x7f0000000400)=0x8) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="12015002020000082505a1a440000106000109025c000201ff00000904000001020d0000052406000105240000000d240f0100000905810300000000000904010000020d00000904010102020d0000090582020000000000090503020000000000000000a08f81032cb0bd8a3ea63180dc00282081014e096d7680a484f8f773ef56b3b055d403269fc628aee34acf2136f617b8898940dcc1580ddd7cb3b8e803f197c45b5d6265ebbc641f3a1baf7360c07fd57fed56e10571a28e271acb58afe7845b134078656f30481d9ed31aeb2ca5e89f5971932b7ee14454857ff8f74cdf4a44bf0e444dcae72a306808eb"], 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) 9.986557042s ago: executing program 2 (id=714): socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0x61, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') execveat$binfmt(r2, r3, &(0x7f0000000240), &(0x7f0000000400)={[&(0x7f0000000300)='\x00\x80', &(0x7f0000000340)='proc\x00', &(0x7f00000003c0)='proc\x00']}, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xe0) io_setup(0xffffffff, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000140)) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000180)={0x1, 0xffffffff}, 0x8) close(r7) fsmount(r5, 0x0, 0x80) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) flock(r2, 0x8) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) 9.737510173s ago: executing program 3 (id=715): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x7f, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000060a010100000000000000000100000a0c000340000000000000000258000000060a01080000000000000000000000022400058008000140000000040800014000008035080001400000002108000140000000871d000721699d92dc9fd264507cda877def7e908a1688e9100ed3956433000000200000000b0a010800000000000000000100000408000c4000000a140400128058010000140a01020000000000000000070000097800080050433837908efc3c2fc07c2d2a133acca75ed38f21f44b61c9aeb0c655b704aa5458372ae4286db8da0dd2e0be3e1a342272a8d1f0129bc69d2f261ce4b13d323cf554d2d3b542a84ed5e53a9e4c39edf99b862ff621cb4ef77556dccbd9101394d4f9126d214be874dae188368aa01c897f86060c0006400000000000000001a80008004073acae1edc8ed2452abd587b76f44f70341c8555b1a3cca5ad0d9b04becb4a755945e01d5893c0719689203bc251e0fbd410db3539abb3170f686ea5dd56a0d3aa17594dfb4e04f2d0eae8d077e4a89f37440482b28dca515ec1465f80e8e4b945702eb58d7b7fd8228df62970b36b065c85d20c0d86114f0e9f0261609b957632a664c69075fb9756b7dddefcc7fe4b7a7a0f586fd312192a3462422a23b0b144e2010c00064000000000000000020c000640000000000000000120000000120a03000000000000000000050000060900020073797a320000000020000000120a01020000000000000000030000020900010073797a310000000030000000090a0300000000000000000007000008080005400000003408000440000000000900020073797a3000000000140000001100010000000000000000000700000ad7a07e4fd6faf333364355a394f890fcb0397e9cba3dfa293df68a943d91540e20a7a71fcbadcaa1dbe434b4b0f61e73f752c635f036d54f8e99348365b7e4f7f6a0d8e2e6edd291d7ec6eaa16c3dca5a277561b1239eb2569b6e8e3d7dd824f71eadaa7e9b290"], 0x288}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) r7 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 9.379246598s ago: executing program 0 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4014) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3859, 0x4) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 8.389903834s ago: executing program 1 (id=717): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 8.278905397s ago: executing program 0 (id=718): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 7.669922754s ago: executing program 2 (id=719): io_uring_setup(0x669, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000, r5}, 0x38) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x90) r7 = socket$inet(0x2, 0x1, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0xfe, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d55714e5da04400100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.529582097s ago: executing program 1 (id=720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x3, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x8}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000001c0)=0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="3e047a531102", 0x0, 0x9, 0x10000, 0x1, 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x448, &(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="ca43a94ca5be1fb3f909073f68c1446f63a40776245b30f90e57f4588c5bb23a34aaf50c89391d59ff04f3df0ac0390a24879f44b03218636f2be7079c4b02bbf38abe461f6c9551b2db64e18967d88ea71bc8682b7cfee681fa33648aac34e8a3ddc829986f70ddab569695265e365893e60ccb2e18fb0957b24f9cffc3399644d258b4136e60502fa21d231c91d3928ed96549d06e01f82aa489314e87829ea5a724ac82f9600dc69dc3ee020042722fadd67a91fe9299f977b746e43e65f79c9b2642a88465a3b5bc7bfe8b5909641e442b6f64d62ed244906a48e968348e31e782a10f185628", @ANYRESHEX=r5, @ANYRES16], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_settime(0x0, 0x1, &(0x7f0000000180), 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r8, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) 7.348774445s ago: executing program 4 (id=721): creat(0x0, 0x101) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x1c187f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, 0x0, 0x0, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r4, &(0x7f0000000000), 0x8) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) write(r3, &(0x7f0000000fc0)="c62521e5ba9a21ad2f3cab7629bd5b4a7764e5850f0ec7e1a9b0f8eec5bf5991cae41893fffb8d05f78f380ac193e91680bc9c0ee2a5abd4e099710af57d8bdba38e0fa58f185a989b5f217944be9fc4c594612665e474b0c262e6309b48cf3c1327c765e85869b29157274185b4556e093269451ac35b2aec73847d0d84771aadcb4238a52110f6a906fc0f81a80e458c7de13d3ebcee882cba06d76c36e779338c23f8ff7c8f6db3b388819b4eb7f1e753962124242d51193dc4f0415f87f3f2dc1d391be02b2aea87096679a31bf899d17ada4a1dcfff30bed9f44de1adc3417e1e3811", 0xe5) 7.046973728s ago: executing program 3 (id=722): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) 6.306291103s ago: executing program 1 (id=723): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x1, 0x9, 0x3007, 0x0, 0xd, 0x0, 0x3, 0x6}}) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000a0b80000000002000002400004803c0001800dffee00696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000001400000011000100"/146], 0x94}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200099dd554d7000ffdbdf250200"/36], 0x24}}, 0x8800) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x37) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a0fa72abaaded37e53e987e722424214f79ed6432be46dbbcbf8bc3039a06c208aa6c7b8658e45d6d0c"], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4000000) 5.610690964s ago: executing program 0 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x3, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x8}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000001c0)=0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="3e047a531102", 0x0, 0x9, 0x10000, 0x1, 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x448, &(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="ca43a94ca5be1fb3f909073f68c1446f63a40776245b30f90e57f4588c5bb23a34aaf50c89391d59ff04f3df0ac0390a24879f44b03218636f2be7079c4b02bbf38abe461f6c9551b2db64e18967d88ea71bc8682b7cfee681fa33648aac34e8a3ddc829986f70ddab569695265e365893e60ccb2e18fb0957b24f9cffc3399644d258b4136e60502fa21d231c91d3928ed96549d06e01f82aa489314e87829ea5a724ac82f9600dc69dc3ee020042722fadd67a91fe9299f977b746e43e65f79c9b2642a88465a3b5bc7bfe8b5909641e442b6f64d62ed244906a48e968348e31e782a10f185628", @ANYRESHEX=r5, @ANYRES16], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000180), 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r8, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) 4.943229503s ago: executing program 0 (id=725): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x250000, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x3c}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000140)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) 4.761254142s ago: executing program 4 (id=726): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x13, 0x13, 0xffffffffffffffff, 0x80000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'netpci0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000a000180c2000001a5adb7138c1daaaaaaaaaa27aaaaaaaaaaaaffffffffffffffffffffffffaaaaaaaaaebbbbbbbbbbbbbb95ed440b40d40180c200"]) r4 = accept4(r0, 0x0, 0x0, 0x800) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB='Dr', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0xf8, r9, 0x1, 0xfffffffe, 0x0, {}, [@WGDEVICE_A_PEERS={0xd0, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast2, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba98df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff2e}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x40000007, @empty, 0xcd9}}, @WGPEER_A_ALLOWEDIPS={0x4}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xf8}}, 0x40000) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, 0x0) 4.702820423s ago: executing program 3 (id=727): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x0, r4}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x101b, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x9ff, 0x6}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001200970225bd70000000000007000000", @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x20042841}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000}) syz_open_procfs(0xffffffffffffffff, 0x0) 4.654358474s ago: executing program 2 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4014) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3859, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c", 0x11, 0x4, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 4.567478986s ago: executing program 2 (id=729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)=""/198, 0xc6}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1a, 0x80805, 0x1fe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x4, 0x8000003}, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xff}}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0x70000, 0x7d, &(0x7f0000000240)=""/125}, {0x26000, 0x0, 0x0}, {0x26000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0xd44, 0x0, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xa, 0x20}, 0xc) 2.941106813s ago: executing program 1 (id=730): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_secret(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000005001000050000000500"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f00000007c0)=""/196}, 0x20) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x2, 0x3}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000018000000000000010000002008001e00020000004f67cb5900000000000000001a0b9e3a4a060a81891c9baaef9d2fe7e8fa4d52f22e00d1699db5b7f1d453040c1c878aa524ad58d6c3f5f957132ee32e850f3650abda4fe2a0d7ba4a4a2c532f7f1f1c871f700231b53b7556266c6301d10bc4e9aceb91b546b629"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 2.493461208s ago: executing program 0 (id=731): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x20, 0xb0, 0x0, 0x10, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$isdn(0x22, 0x3, 0x26) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x1fd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r6, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000004d80)=[{{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x28, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="680000000206050000000000444100000000000505000400010000000900020073797a320000000014000780080008e3fd2ff1f82864f840fffffffd0d0003006c6973743a73657400000000050001000600000014000300686173683a69702c706f72742c697000"], 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 2.42482544s ago: executing program 3 (id=732): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x7f, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) close(0x3) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x288}, 0x1, 0x0, 0x0, 0x8000000}, 0x10) r7 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 2.126251017s ago: executing program 4 (id=733): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x6) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vxcan1\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) 1.191229717s ago: executing program 2 (id=734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) 1.019296288s ago: executing program 1 (id=735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0xba, 0x2, 0x3, 0x0, 0x0, 0x4, 0xfc, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x8}, 0x8) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000001c0)=0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000800)="3e047a531102", 0x0, 0x9, 0x10000, 0x1, 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a16, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x1, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0x6, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x7, 0x40, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x294, 0x5, 0x0, 0x981, 0x4, 0xfd, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xf6, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x400001, 0x3, 0x8, 0x6, 0x200, 0x3], [0x3fd, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x4, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x1000007, 0x9, 0x2, 0x20000005, 0x7d, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x7], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x1, 0x40, 0x2, 0x763, 0xb, 0x8000402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa809, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x402, 0x1, 0x200, 0x7, 0x4edf, 0xfefffffd, 0x4, 0xe, 0x2, 0xe, 0x11, 0x133, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x448, &(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="ca43a94ca5be1fb3f909073f68c1446f63a40776245b30f90e57f4588c5bb23a34aaf50c89391d59ff04f3df0ac0390a24879f44b03218636f2be7079c4b02bbf38abe461f6c9551b2db64e18967d88ea71bc8682b7cfee681fa33648aac34e8a3ddc829986f70ddab569695265e365893e60ccb2e18fb0957b24f9cffc3399644d258b4136e60502fa21d231c91d3928ed96549d06e01f82aa489314e87829ea5a724ac82f9600dc69dc3ee020042722fadd67a91fe9299f977b746e43e65f79c9b2642a88465a3b5bc7bfe8b5909641e442b6f64d62ed244906a48e968348e31e782a10f185628", @ANYRESHEX=r5, @ANYRES16], 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000180), 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r8, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) 464.311297ms ago: executing program 1 (id=736): syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) unshare(0x10a3fc84767db0dc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0xc048aeca, &(0x7f0000001440)=@svm={0x1, 0x1, 0x1080, {0x26000}, {"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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x10002a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) 453.164417ms ago: executing program 0 (id=737): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000780)}, 0x2000c040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='source', &(0x7f0000000680)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0xfffff801) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2076) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000200)={0x2, 'vlan1\x00', {0x7}, 0xa}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r4 = memfd_secret(0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r5, &(0x7f00000000c0), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098000000"], 0x2c}], 0x1}, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r7, 0x1, 0x8) socket$inet6(0xa, 0x3, 0x7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x62}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/244, 0xf4}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) kernel console output (not intermixed with test programs): uous mode [ 119.344392][ T796] usb 3-1: SerialNumber: syz [ 119.364605][ T6421] syzkaller0: entered allmulticast mode [ 119.380595][ T796] usb 3-1: config 0 descriptor?? [ 119.422317][ T796] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 119.464507][ T796] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 120.016326][ T796] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 120.061982][ T796] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 120.090707][ T6443] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 120.211723][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.134'. [ 120.551317][ T6448] bond1: (slave bridge1): making interface the new active one [ 120.563842][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 120.623681][ T6448] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 120.752289][ T6443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.788650][ T796] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 120.799007][ T796] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 120.812240][ T796] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 120.837854][ T796] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 120.947198][ T6456] tipc: Started in network mode [ 121.071721][ T6456] tipc: Node identity b6ef975cc9d4, cluster identity 4711 [ 121.079633][ T6456] tipc: Enabled bearer , priority 0 [ 121.088458][ T6458] syzkaller0: entered promiscuous mode [ 121.122205][ T6458] syzkaller0: entered allmulticast mode [ 121.335417][ T6460] tipc: Resetting bearer [ 121.358611][ T6455] tipc: Resetting bearer [ 121.396269][ T6455] tipc: Disabling bearer [ 121.544546][ T796] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 121.553502][ T796] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 121.606494][ T6462] syzkaller0: entered promiscuous mode [ 121.612144][ T6462] syzkaller0: entered allmulticast mode [ 121.776163][ T796] usb 3-1: USB disconnect, device number 5 [ 121.992891][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 122.624448][ T5904] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.673911][ T6478] syzkaller0: entered promiscuous mode [ 123.404864][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 123.419838][ T5904] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 123.433409][ T5904] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 123.520111][ T5904] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.545188][ T5904] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 123.630831][ T5904] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 123.652786][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.661602][ T5904] usb 1-1: Product: syz [ 123.671474][ T5904] usb 1-1: Manufacturer: syz [ 123.676319][ T5904] usb 1-1: SerialNumber: syz [ 123.706721][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 123.716136][ T6493] syzkaller0: entered promiscuous mode [ 123.721662][ T6493] syzkaller0: entered allmulticast mode [ 123.743914][ T5904] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input6 [ 124.264448][ T5904] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 124.275084][ T5904] (id 0x00) [ 124.313174][ T6499] syzkaller0: entered promiscuous mode [ 124.325517][ T6499] syzkaller0: entered allmulticast mode [ 124.407366][ T5904] rc_core: IR keymap rc-imon-pad not found [ 124.435419][ T5904] Registered IR keymap rc-empty [ 124.463110][ T5904] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 124.494655][ T5904] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 124.537200][ T5904] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 124.564972][ T5904] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input7 [ 124.648154][ T5904] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:3> initialized [ 124.840809][ T6507] tipc: Enabled bearer , priority 0 [ 124.963341][ T6511] syzkaller0: entered promiscuous mode [ 125.007032][ T6511] syzkaller0: entered allmulticast mode [ 125.348298][ T6504] tipc: Resetting bearer [ 125.520905][ T6504] tipc: Disabling bearer [ 126.344940][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.514458][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 126.530900][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.551279][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.577598][ T5891] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.589858][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.612932][ T5891] usb 2-1: Product: syz [ 126.624506][ T5891] usb 2-1: Manufacturer: syz [ 126.634430][ T5891] usb 2-1: SerialNumber: syz [ 126.795026][ T9] usb 1-1: USB disconnect, device number 3 [ 126.801255][ T6534] imon:send_packet: packet tx failed (-71) [ 126.825271][ T6534] imon:vfd_write: send packet #5 failed [ 126.860856][ T5891] usb 2-1: 0:2 : does not exist [ 126.881903][ T5891] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 127.085466][ T5891] usb 2-1: USB disconnect, device number 5 [ 127.122733][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.172811][ T6538] tipc: Enabled bearer , priority 0 [ 127.192229][ T6538] syzkaller0: entered promiscuous mode [ 127.215110][ T6538] syzkaller0: entered allmulticast mode [ 127.244915][ T6538] tipc: Resetting bearer [ 127.256538][ T6537] tipc: Resetting bearer [ 127.281623][ T6537] tipc: Disabling bearer [ 128.641402][ T6551] Zero length message leads to an empty skb [ 130.891862][ T6579] tipc: Enabled bearer , priority 0 [ 130.936712][ T6579] syzkaller0: entered promiscuous mode [ 130.952405][ T6579] syzkaller0: entered allmulticast mode [ 131.007547][ T6581] tipc: Enabled bearer , priority 0 [ 131.015997][ T6581] syzkaller0: entered promiscuous mode [ 131.021782][ T6581] syzkaller0: entered allmulticast mode [ 131.076080][ T6584] tipc: Resetting bearer [ 131.095060][ T6578] tipc: Resetting bearer [ 131.129688][ T6578] tipc: Disabling bearer [ 131.207670][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 131.282265][ T6588] tipc: Resetting bearer [ 131.363558][ T6580] tipc: Resetting bearer [ 131.420626][ T6580] tipc: Disabling bearer [ 131.514582][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 131.777007][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 131.799939][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 131.851810][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.913016][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 131.988397][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.001435][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 132.011061][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 132.024804][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.045087][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.058128][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.075640][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 132.084480][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 132.096111][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.108611][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 132.123001][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 132.138713][ T9] usb 5-1: string descriptor 0 read error: -22 [ 132.156558][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 132.178684][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.179227][ T51] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 132.268585][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 133.180125][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.186919][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.834599][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.174860][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.185562][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.201619][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.211297][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.233116][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 134.255784][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.265554][ T10] usb 5-1: USB disconnect, device number 4 [ 134.316685][ T9] usb 2-1: Product: syz [ 134.323031][ T9] usb 2-1: Manufacturer: syz [ 134.339775][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 134.346359][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 134.386659][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 134.709430][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 134.745668][ T5904] usb 2-1: USB disconnect, device number 6 [ 135.255924][ T5904] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.506665][ T5904] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 135.519948][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.553872][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 135.570146][ T5904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.861222][ T5904] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 135.894667][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 135.913220][ T5904] usb 2-1: Product: syz [ 135.920779][ T5904] usb 2-1: Manufacturer: syz [ 135.943622][ T5904] cdc_wdm 2-1:1.0: skipping garbage [ 135.961180][ T5904] cdc_wdm 2-1:1.0: skipping garbage [ 136.129742][ T5904] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 136.147736][ T5904] cdc_wdm 2-1:1.0: Unknown control protocol [ 136.213867][ T6661] tipc: Enabled bearer , priority 0 [ 136.233813][ T6661] syzkaller0: entered promiscuous mode [ 136.244479][ T6641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 136.253017][ T6641] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 136.275074][ T5813] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.276261][ T6661] syzkaller0: entered allmulticast mode [ 136.373297][ T6661] tipc: Resetting bearer [ 136.387907][ T6641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.401514][ T6660] tipc: Resetting bearer [ 136.435025][ T6641] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 136.443904][ T6660] tipc: Disabling bearer [ 136.444418][ T5813] usb 5-1: Using ep0 maxpacket: 16 [ 136.484709][ T5813] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.509728][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.549426][ T5813] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.564809][ T5904] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 136.578050][ T6641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.584120][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.599433][ T6641] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 136.607569][ T5813] usb 5-1: Product: syz [ 136.614643][ T5813] usb 5-1: Manufacturer: syz [ 136.619698][ T5813] usb 5-1: SerialNumber: syz [ 136.636279][ T5813] usb 5-1: config 0 descriptor?? [ 136.650700][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 136.651120][ T9] usb 2-1: USB disconnect, device number 7 [ 136.657565][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 136.657590][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 136.689729][ T5813] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.704046][ T5813] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 136.754436][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 136.783073][ T5904] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 136.801855][ T6641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.813420][ T6641] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.822025][ T5904] usb 3-1: config 0 has no interface number 0 [ 136.829034][ T5904] usb 3-1: config 0 interface 12 has no altsetting 0 [ 136.857701][ T5904] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 136.884249][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.904666][ T5904] usb 3-1: Product: syz [ 136.916461][ T5904] usb 3-1: Manufacturer: syz [ 136.934473][ T5904] usb 3-1: SerialNumber: syz [ 136.955120][ T6641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.969627][ T5904] usb 3-1: config 0 descriptor?? [ 137.001019][ T6641] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.372538][ T5813] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 137.380505][ T5813] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 137.997400][ T5813] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 138.005727][ T5813] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 138.032544][ T5813] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 138.195346][ T6694] syzkaller0: entered promiscuous mode [ 138.201265][ T6694] syzkaller0: entered allmulticast mode [ 138.419597][ T6700] tipc: Enabled bearer , priority 0 [ 138.455985][ T6700] syzkaller0: entered promiscuous mode [ 138.462365][ T6700] syzkaller0: entered allmulticast mode [ 138.578713][ T6700] tipc: Resetting bearer [ 138.634921][ T6698] tipc: Resetting bearer [ 138.670588][ T5813] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 138.727732][ T6698] tipc: Disabling bearer [ 138.881490][ T5813] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 138.894207][ T5813] usb 5-1: USB disconnect, device number 5 [ 138.979996][ T6714] netlink: 'syz.3.202': attribute type 12 has an invalid length. [ 139.765268][ T6727] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.803455][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.206'. [ 139.821397][ T5904] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 139.832716][ T5904] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.851088][ T5904] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.894988][ T5904] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 139.941701][ T5904] usb 3-1: USB disconnect, device number 6 [ 140.857373][ T6759] syzkaller0: entered promiscuous mode [ 140.863021][ T6759] syzkaller0: entered allmulticast mode [ 141.505020][ T5813] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.897929][ T5813] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 141.909684][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.920607][ T5813] usb 1-1: Product: syz [ 141.924825][ T5813] usb 1-1: Manufacturer: syz [ 141.929422][ T5813] usb 1-1: SerialNumber: syz [ 141.951931][ T5813] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 142.059125][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.130231][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 143.161297][ T9] ath9k_htc: Failed to initialize the device [ 143.255947][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 143.291256][ T5813] usb 1-1: USB disconnect, device number 4 [ 143.494446][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.704869][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 143.726680][ T5904] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 143.753309][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.781323][ T5904] usb 5-1: Product: syz [ 143.793887][ T5904] usb 5-1: Manufacturer: syz [ 143.814192][ T5904] usb 5-1: SerialNumber: syz [ 143.880794][ T5904] usb 5-1: config 0 descriptor?? [ 144.136031][ T5904] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 144.254407][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.454505][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 144.494531][ T9] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 144.502019][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.567001][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.644327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.695827][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 144.744465][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.753753][ T9] usb 1-1: Product: syz [ 144.804403][ T9] usb 1-1: Manufacturer: syz [ 144.809080][ T9] usb 1-1: SerialNumber: syz [ 144.828714][ T9] usb 1-1: config 0 descriptor?? [ 145.597963][ T9] usb 1-1: Can not set alternate setting to 1, error: -71 [ 145.634501][ T9] synaptics_usb 1-1:0.0: probe with driver synaptics_usb failed with error -71 [ 145.682415][ T9] usb 1-1: USB disconnect, device number 5 [ 145.814971][ T5904] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 145.847043][ T5904] usb 5-1: USB disconnect, device number 6 [ 146.714673][ T6829] syzkaller0: entered promiscuous mode [ 146.760114][ T6829] syzkaller0: entered allmulticast mode [ 146.784489][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.944390][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 146.955145][ T5904] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 146.984665][ T5904] usb 5-1: config 0 has no interface number 0 [ 146.996855][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 147.034562][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.054867][ T5904] usb 5-1: Product: syz [ 147.059090][ T5904] usb 5-1: Manufacturer: syz [ 147.064502][ T5891] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.114435][ T5904] usb 5-1: SerialNumber: syz [ 147.129919][ T5904] usb 5-1: config 0 descriptor?? [ 147.209652][ T6770] syz.3.214 (6770): drop_caches: 1 [ 147.269235][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.292373][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 147.307761][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.319949][ T5891] usb 3-1: config 0 descriptor?? [ 147.350538][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 147.370160][ T5904] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 147.387934][ T5904] uvcvideo 5-1:0.31: Failed to initialize entity for entity 32774 [ 147.396394][ T5904] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 147.567349][ T6839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.622072][ T5904] usb 5-1: USB disconnect, device number 7 [ 147.664450][ T6848] tipc: Enabled bearer , priority 0 [ 147.687625][ T6848] syzkaller0: entered promiscuous mode [ 147.702959][ T6848] syzkaller0: entered allmulticast mode [ 147.752340][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 147.769412][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 147.779082][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 147.816889][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 147.828704][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 147.836391][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 147.844439][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 147.844793][ T6848] tipc: Resetting bearer [ 147.873742][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 147.916814][ T6847] tipc: Resetting bearer [ 147.929253][ T5891] pwc: recv_control_msg error -32 req 04 val 1500 [ 147.943229][ T5891] pwc: recv_control_msg error -32 req 02 val 2500 [ 147.969908][ T5891] pwc: recv_control_msg error -32 req 02 val 2400 [ 147.977386][ T6847] tipc: Disabling bearer [ 147.987941][ T5891] pwc: recv_control_msg error -32 req 02 val 2600 [ 147.997334][ T5891] pwc: recv_control_msg error -32 req 02 val 2900 [ 148.007982][ T5891] pwc: recv_control_msg error -32 req 02 val 2800 [ 148.054421][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.217961][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 148.234584][ T5891] pwc: Registered as video103. [ 148.242882][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 148.280312][ T5904] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 148.292572][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.313594][ T5891] usb 3-1: USB disconnect, device number 7 [ 148.334654][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 148.353194][ T5904] usb 1-1: Product: syz [ 148.406647][ T5904] usb 1-1: Manufacturer: syz [ 148.411472][ T5904] usb 1-1: SerialNumber: syz [ 148.446894][ T5904] usb 1-1: config 0 descriptor?? [ 148.477033][ T5904] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 006 [ 148.533163][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 148.571471][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.600955][ T10] usb 4-1: Product: syz [ 148.622129][ T10] usb 4-1: Manufacturer: syz [ 148.638146][ T6861] tc action pedit 'at' offset 6 out of bounds [ 148.645158][ T10] usb 4-1: SerialNumber: syz [ 148.694677][ T980] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.866317][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 148.886620][ T980] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 148.908001][ T980] usb 2-1: config 0 has no interface number 0 [ 148.929963][ T980] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 148.961227][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.984648][ T980] usb 2-1: Product: syz [ 148.988899][ T980] usb 2-1: Manufacturer: syz [ 149.019784][ T980] usb 2-1: SerialNumber: syz [ 149.044034][ T980] usb 2-1: config 0 descriptor?? [ 149.145828][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 149.169303][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 149.186764][ T5891] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.217142][ T6866] syzkaller0: entered promiscuous mode [ 149.222976][ T6866] syzkaller0: entered allmulticast mode [ 149.347717][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.358830][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.369008][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.441213][ T5891] usb 3-1: config 0 descriptor?? [ 149.455593][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 149.473069][ T980] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 149.485769][ T980] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.625044][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 149.637187][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.647784][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.666893][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 150.068846][ T5891] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.076797][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.084664][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 150.084835][ T5891] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.102492][ T5891] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.113058][ T5891] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.121003][ T5891] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.128971][ T5891] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.137760][ T5891] pwc: recv_control_msg error -32 req 04 val 1500 [ 150.145202][ T5891] pwc: recv_control_msg error -32 req 02 val 2500 [ 150.152773][ T5891] pwc: recv_control_msg error -32 req 02 val 2400 [ 150.160931][ T5891] pwc: recv_control_msg error -32 req 02 val 2600 [ 150.168714][ T5891] pwc: recv_control_msg error -32 req 02 val 2900 [ 150.176490][ T5891] pwc: recv_control_msg error -32 req 02 val 2800 [ 150.184120][ T5891] pwc: recv_control_msg error -32 req 04 val 1100 [ 150.196207][ T5891] pwc: Registered as video103. [ 150.210614][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 150.251502][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 150.277223][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.294802][ T10] usb 5-1: Product: syz [ 150.305762][ T10] usb 5-1: Manufacturer: syz [ 150.314033][ T10] usb 5-1: SerialNumber: syz [ 150.345374][ T10] usb 5-1: config 0 descriptor?? [ 150.441907][ T5891] usb 3-1: USB disconnect, device number 8 [ 150.577166][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 150.983827][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.234'. [ 151.019352][ T5904] i2c i2c-1: failure reading functionality [ 151.021575][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 151.061234][ T10] usb 5-1: USB disconnect, device number 8 [ 151.075026][ T5904] i2c i2c-1: connected i2c-tiny-usb device [ 151.102475][ T5904] usb 1-1: USB disconnect, device number 6 [ 151.267647][ T6879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.640301][ T9] usb 4-1: USB disconnect, device number 3 [ 152.259301][ T6891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.326685][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 152.508861][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 152.524385][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.539170][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 152.557768][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.558180][ T980] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 152.569187][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 152.624974][ T980] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 152.637484][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 152.646585][ T980] usb 2-1: USB disconnect, device number 8 [ 152.770473][ T9] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 152.808513][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.860716][ T9] usb 5-1: Product: syz [ 152.877481][ T9] usb 5-1: Manufacturer: syz [ 152.904455][ T9] usb 5-1: SerialNumber: syz [ 153.001663][ T9] usb 5-1: config 0 descriptor?? [ 153.068982][ T9] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 153.134728][ T6894] syzkaller0: entered promiscuous mode [ 153.150171][ T6894] syzkaller0: entered allmulticast mode [ 153.241308][ T9] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 153.723754][ T5813] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 153.932942][ T5813] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 153.958349][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.999654][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.011980][ T5813] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.064115][ T5813] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 154.096616][ T5813] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 154.197785][ T5813] usb 1-1: Manufacturer: syz [ 154.242743][ T5813] usb 1-1: config 0 descriptor?? [ 154.736638][ T5813] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 154.786921][ T5813] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 155.958869][ T5813] usb 5-1: USB disconnect, device number 9 [ 156.526609][ T5813] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 156.690315][ T5813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.712013][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.734357][ T5813] usb 3-1: Product: syz [ 156.738654][ T5813] usb 3-1: Manufacturer: syz [ 156.743385][ T5813] usb 3-1: SerialNumber: syz [ 156.767562][ T5813] usb 3-1: config 0 descriptor?? [ 156.913703][ T9] usb 1-1: USB disconnect, device number 7 [ 157.003037][ T5813] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.045339][ T5929] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 157.103919][ T6936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.213074][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 157.225179][ T5929] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 157.235811][ T5929] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 157.249110][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.271485][ T5929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 157.318875][ T5929] usb 5-1: config 0 has no interface number 0 [ 157.340373][ T5929] usb 5-1: config 0 interface 104 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.361665][ T5929] usb 5-1: config 0 interface 104 has no altsetting 1 [ 157.394900][ T5929] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 157.430601][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.452450][ T5929] usb 5-1: Product: syz [ 157.465550][ T5929] usb 5-1: Manufacturer: syz [ 157.470361][ T5929] usb 5-1: SerialNumber: syz [ 157.492678][ T5929] usb 5-1: config 0 descriptor?? [ 157.522602][ T5929] asix 5-1:0.104: probe with driver asix failed with error -22 [ 157.757576][ T5929] usb 5-1: USB disconnect, device number 10 [ 158.044670][ T6919] netlink: 76 bytes leftover after parsing attributes in process `syz.3.247'. [ 158.408225][ T6942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.487778][ T5813] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 158.525787][ T5813] usb 3-1: USB disconnect, device number 9 [ 158.621776][ T6947] syzkaller0: entered promiscuous mode [ 158.635104][ T6947] syzkaller0: entered allmulticast mode [ 159.225849][ T980] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 159.386706][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.425264][ T980] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 159.452950][ T980] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 159.481741][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.516272][ T980] usb 1-1: config 0 descriptor?? [ 159.537644][ T980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 159.559565][ T980] dvb-usb: bulk message failed: -22 (3/0) [ 159.591221][ T980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 159.620080][ T980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 159.640886][ T980] usb 1-1: media controller created [ 159.707508][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.729498][ T6956] dvb-usb: bulk message failed: -22 (2/0) [ 159.781528][ T980] dvb-usb: bulk message failed: -22 (6/0) [ 159.804798][ T980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 159.856311][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 159.886108][ T6973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 159.892934][ T6973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 159.903230][ T6973] vhci_hcd vhci_hcd.0: Device attached [ 159.917899][ T980] dvb-usb: schedule remote query interval to 150 msecs. [ 159.926186][ T980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.957383][ T980] usb 1-1: USB disconnect, device number 8 [ 160.305472][ T6974] vhci_hcd: connection closed [ 160.309423][ T58] vhci_hcd vhci_hcd.1: stop threads [ 160.336506][ T58] vhci_hcd vhci_hcd.1: release socket [ 160.346453][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 160.367459][ T980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 161.955517][ T6983] tipc: Enabled bearer , priority 0 [ 161.976627][ T6983] syzkaller0: entered promiscuous mode [ 161.982349][ T6983] syzkaller0: entered allmulticast mode [ 162.048031][ T6983] tipc: Resetting bearer [ 162.059492][ T6982] tipc: Resetting bearer [ 162.213719][ T6982] tipc: Disabling bearer [ 162.560385][ T7002] netlink: 'syz.4.266': attribute type 10 has an invalid length. [ 162.644489][ T980] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 162.826230][ T796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.966712][ T980] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 162.985212][ T980] usb 2-1: config 0 has no interface number 0 [ 163.002398][ T980] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 163.034464][ T980] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 163.062532][ T980] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.094676][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.175864][ T980] usb 2-1: config 0 descriptor?? [ 163.182553][ T6996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.218923][ T980] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 163.295784][ T796] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.316939][ T796] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.378157][ T796] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.425440][ T980] usb 2-1: USB disconnect, device number 9 [ 163.431521][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 163.454529][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.479275][ T7002] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 163.511308][ T796] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.040222][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.051033][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.419502][ T7009] syzkaller0: entered promiscuous mode [ 164.440101][ T7009] syzkaller0: entered allmulticast mode [ 164.517261][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.524540][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.531531][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.538579][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.545863][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.552984][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.559997][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.567144][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.573904][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.580864][ T7009] tc action pedit offset must be on 32 bit boundaries [ 164.587649][ T7009] 0: reclassify loop, rule prio 0, protocol 800 [ 164.938248][ T29] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 165.118126][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 165.214361][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.240580][ T29] usb 4-1: Product: syz [ 165.263257][ T29] usb 4-1: Manufacturer: syz [ 165.278483][ T29] usb 4-1: SerialNumber: syz [ 165.418990][ T29] usb 4-1: config 0 descriptor?? [ 165.507913][ T796] usb 5-1: USB disconnect, device number 11 [ 165.785779][ T7020] bond1: Removing last ns target with arp_interval on [ 165.816625][ T29] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 165.862550][ T7034] syzkaller0: entered promiscuous mode [ 165.868520][ T7034] syzkaller0: entered allmulticast mode [ 167.371584][ T29] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 167.390042][ T29] usb 4-1: USB disconnect, device number 4 [ 168.184409][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.766134][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 168.790565][ T5929] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 168.802014][ T5929] usb 1-1: config 252 has no interface number 0 [ 168.819647][ T5929] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.851390][ T5929] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 168.864357][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.892988][ T5929] usb 1-1: Product: syz [ 168.903120][ T5929] usb 1-1: Manufacturer: syz [ 168.919895][ T5929] usb 1-1: SerialNumber: syz [ 169.092155][ T5929] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 170.123321][ T7041] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 170.134961][ T36] usb 1-1: Failed to submit usb control message: -110 [ 170.152428][ T36] usb 1-1: unable to send the bmi data to the device: -110 [ 170.164090][ T36] usb 1-1: unable to get target info from device [ 170.170959][ T36] usb 1-1: could not get target info (-110) [ 170.177641][ T36] usb 1-1: could not probe fw (-110) [ 170.230501][ T5929] usb 1-1: USB disconnect, device number 9 [ 170.579616][ T7070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.601788][ T7068] syzkaller0: entered promiscuous mode [ 170.607465][ T7068] syzkaller0: entered allmulticast mode [ 170.618673][ T7068] tcf_pedit_act: 7 callbacks suppressed [ 170.618687][ T7068] tc action pedit offset must be on 32 bit boundaries [ 170.694430][ T5904] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 170.901595][ T5904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 170.910889][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.941175][ T5904] usb 2-1: Product: syz [ 170.947402][ T5904] usb 2-1: Manufacturer: syz [ 170.956935][ T5904] usb 2-1: SerialNumber: syz [ 171.002132][ T5904] usb 2-1: config 0 descriptor?? [ 171.314480][ T5904] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 171.429109][ T5929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 171.683238][ T5929] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 171.693095][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.706799][ T5929] usb 1-1: Product: syz [ 171.711120][ T5929] usb 1-1: Manufacturer: syz [ 171.719626][ T5929] usb 1-1: SerialNumber: syz [ 171.759170][ T5929] usb 1-1: config 0 descriptor?? [ 171.795360][ T5929] hub 1-1:0.0: bad descriptor, ignoring hub [ 171.824697][ T5929] hub 1-1:0.0: probe with driver hub failed with error -5 [ 171.999116][ T5929] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 172.018340][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.048342][ T5929] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 172.090242][ T5929] usb 1-1: media controller created [ 172.166584][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.382242][ T5929] DVB: Unable to find symbol dib7000p_attach() [ 172.406213][ T5929] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 172.615534][ T5929] rc_core: IR keymap rc-dib0700-rc5 not found [ 172.621893][ T5929] Registered IR keymap rc-empty [ 172.628294][ T5929] dvb-usb: could not initialize remote control. [ 172.643543][ T5929] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 172.978267][ T5904] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 173.027452][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 173.038665][ T7078] i2c i2c-1: Invalid block size returned: 58 [ 173.068312][ T5904] usb 2-1: USB disconnect, device number 10 [ 173.242098][ T29] usb 1-1: USB disconnect, device number 10 [ 173.264441][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 173.303169][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 173.345463][ T5929] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 173.364467][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.396807][ T5929] usb 4-1: Product: syz [ 173.401080][ T5929] usb 4-1: Manufacturer: syz [ 173.427298][ T5929] usb 4-1: SerialNumber: syz [ 173.448494][ T5929] usb 4-1: config 0 descriptor?? [ 173.697410][ T5929] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 005 [ 176.384068][ T7126] syzkaller0: entered promiscuous mode [ 176.389802][ T7126] syzkaller0: entered allmulticast mode [ 176.588269][ T796] usb 4-1: USB disconnect, device number 5 [ 176.815226][ T30] kauditd_printk_skb: 416 callbacks suppressed [ 176.815246][ T30] audit: type=1326 audit(1775198056.965:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.1.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244599c819 code=0x0 [ 176.935535][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.654601][ T5904] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 178.844658][ T5904] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.868414][ T5904] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.988104][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.018367][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 179.058935][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 179.146476][ T5904] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.171769][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.196977][ T5904] usb 3-1: Product: syz [ 179.211592][ T5904] usb 3-1: Manufacturer: syz [ 179.246051][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 179.291795][ T5904] cdc_wdm 3-1:1.0: skipping garbage [ 179.309704][ T5904] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 179.322554][ T5904] cdc_wdm 3-1:1.0: Unknown control protocol [ 179.737555][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 179.751730][ T7168] vlan2: entered promiscuous mode [ 179.757264][ T7168] batadv0: entered promiscuous mode [ 180.225425][ T5929] usb 3-1: USB disconnect, device number 10 [ 181.451752][ T7199] tipc: Cannot configure node identity twice [ 181.807943][ T5813] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.104391][ T5813] usb 1-1: Using ep0 maxpacket: 16 [ 182.293560][ T5813] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.303978][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.456328][ T5904] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 182.488578][ T5813] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.519612][ T5813] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.566662][ T5813] usb 1-1: config 1 interface 0 has no altsetting 0 [ 182.584209][ T5813] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 182.643776][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.666266][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.670146][ T5904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 182.690287][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.694489][ T5929] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.711558][ T5813] usb 1-1: Product: syz [ 182.721692][ T5813] usb 1-1: Manufacturer: syz [ 182.736575][ T5813] usb 1-1: SerialNumber: syz [ 182.744584][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.751329][ T5904] usb 2-1: Product: syz [ 182.784936][ T5929] usb 4-1: config 0 descriptor?? [ 182.800247][ T5904] usb 2-1: Manufacturer: syz [ 182.816176][ T5904] usb 2-1: SerialNumber: syz [ 182.826150][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 182.864994][ T5904] usb 2-1: config 0 descriptor?? [ 183.004597][ T5891] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 183.029767][ T5813] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 183.089098][ T5904] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 183.116771][ T5813] usb 1-1: USB disconnect, device number 11 [ 183.209746][ T5891] usb 5-1: config 0 has an invalid interface number: 84 but max is 0 [ 183.220849][ T5891] usb 5-1: config 0 has no interface number 0 [ 183.248547][ T5813] usblp0: removed [ 183.253289][ T5891] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 183.253346][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.279209][ T5929] pwc: recv_control_msg error -32 req 02 val 2700 [ 183.286987][ T5891] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 183.299336][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00 [ 183.306270][ T5891] usb 5-1: config 0 interface 84 has no altsetting 0 [ 183.306321][ T5891] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 183.362492][ T5929] pwc: recv_control_msg error -32 req 04 val 1000 [ 183.387790][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.388780][ T5929] pwc: recv_control_msg error -32 req 04 val 1300 [ 183.410362][ T5929] pwc: recv_control_msg error -32 req 04 val 1400 [ 183.418864][ T5929] pwc: recv_control_msg error -32 req 02 val 2000 [ 183.447890][ T5929] pwc: recv_control_msg error -32 req 02 val 2100 [ 183.457592][ T5929] pwc: recv_control_msg error -32 req 04 val 1500 [ 183.466302][ T5929] pwc: recv_control_msg error -32 req 02 val 2500 [ 183.474999][ T5929] pwc: recv_control_msg error -32 req 02 val 2400 [ 183.483673][ T5929] pwc: recv_control_msg error -32 req 02 val 2600 [ 183.502969][ T5929] pwc: recv_control_msg error -32 req 02 val 2900 [ 183.512393][ T5929] pwc: recv_control_msg error -32 req 02 val 2800 [ 183.534057][ T5891] usb 5-1: config 0 descriptor?? [ 183.541608][ T7208] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 183.579271][ T5891] option 5-1:0.84: GSM modem (1-port) converter detected [ 183.723150][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.731705][ T5929] pwc: Registered as video103. [ 183.741976][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 183.912280][ T5929] usb 4-1: USB disconnect, device number 6 [ 184.821826][ T5904] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 184.837208][ T5904] usb 2-1: USB disconnect, device number 11 [ 184.934579][ T24] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 185.087356][ T7222] syzkaller0: entered promiscuous mode [ 185.113831][ T7222] syzkaller0: entered allmulticast mode [ 185.134633][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 185.144388][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.160928][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.173271][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.175857][ T7222] TC_ACT_REPEAT abuse ? [ 185.199109][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.224617][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 185.232395][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.261727][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.274613][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.299143][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.319521][ T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 185.327375][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 185.338815][ T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 185.352369][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 185.365789][ T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 185.385429][ T24] usb 4-1: string descriptor 0 read error: -22 [ 185.392286][ T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 185.437885][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.470225][ T24] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 185.919817][ T5904] usb 5-1: USB disconnect, device number 12 [ 185.946028][ T5904] option 5-1:0.84: device disconnected [ 185.967771][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.011503][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.185753][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 186.706456][ T5929] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 186.721313][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.080290][ T5929] usb 2-1: config 0 descriptor?? [ 187.110332][ T5929] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 187.630059][ T5929] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 187.676410][ T7244] syzkaller0: entered promiscuous mode [ 187.691356][ T7244] syzkaller0: entered allmulticast mode [ 187.844637][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 188.027899][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.052268][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 188.110931][ T24] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 188.124596][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.132642][ T24] usb 5-1: Product: syz [ 188.137402][ T24] usb 5-1: Manufacturer: syz [ 188.148527][ T24] usb 5-1: SerialNumber: syz [ 188.171697][ T24] usb 5-1: config 0 descriptor?? [ 188.443276][ T7229] vivid-003: disconnect [ 188.449653][ T7229] vivid-003: reconnect [ 188.462891][ T5929] gspca_cpia1: usb_control_msg 05, error -71 [ 188.469148][ T5929] cpia1 2-1:0.0: unexpected systemstate: 00 [ 188.490464][ T5929] usb 2-1: USB disconnect, device number 12 [ 189.584378][ T5813] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.593007][ T24] usb 4-1: USB disconnect, device number 7 [ 189.751778][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.764233][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.776347][ T5813] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.792347][ T5813] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.802850][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.830172][ T5813] usb 2-1: config 0 descriptor?? [ 190.435476][ T5813] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 190.698095][ T24] usb 5-1: USB disconnect, device number 13 [ 190.740810][ T7259] usb 2-1: string descriptor 0 read error: -71 [ 190.766014][ T5813] usb 2-1: USB disconnect, device number 13 [ 192.716172][ T7302] raw_sendmsg: syz.3.334 forgot to set AF_INET. Fix it! [ 193.124949][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 193.530829][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.558978][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.577707][ T24] usb 3-1: Product: syz [ 193.592204][ T24] usb 3-1: Manufacturer: syz [ 193.608475][ T24] usb 3-1: SerialNumber: syz [ 193.675605][ T24] usb 3-1: config 0 descriptor?? [ 193.918540][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.705318][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.712155][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.748332][ T7321] syzkaller0: entered promiscuous mode [ 195.775035][ T7321] syzkaller0: entered allmulticast mode [ 196.259831][ T7327] fuse: Bad value for 'fd' [ 196.475264][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 196.754843][ T24] usb 3-1: USB disconnect, device number 11 [ 197.133716][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.394400][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 197.407350][ T5904] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.448030][ T5904] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 197.472916][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.114715][ T5904] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 198.350382][ T5904] usb 5-1: USB disconnect, device number 14 [ 199.554369][ T796] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 199.716211][ T796] usb 4-1: config index 0 descriptor too short (expected 8192, got 18) [ 199.724910][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.744378][ T796] usb 4-1: config 0 has no interfaces? [ 199.771638][ T796] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 199.781672][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.844659][ T796] usb 4-1: Product: syz [ 199.875046][ T796] usb 4-1: Manufacturer: syz [ 199.911428][ T796] usb 4-1: SerialNumber: syz [ 200.013743][ T796] usb 4-1: config 0 descriptor?? [ 200.589763][ T796] usb 4-1: USB disconnect, device number 8 [ 201.886663][ T7394] Cannot find del_set index 2 as target [ 203.464247][ T7409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.390769][ T7431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.604414][ T980] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 206.781807][ T980] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.793192][ T980] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 206.824381][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.873793][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.902036][ T7440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 206.912352][ T980] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 208.004306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.514583][ T105] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 210.286599][ T7481] binder: 7474:7481 ioctl c0306201 0 returned -14 [ 211.434423][ T5891] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 211.636858][ T5891] usb 5-1: not running at top speed; connect to a high speed hub [ 211.649587][ T24] usb 1-1: USB disconnect, device number 12 [ 211.665817][ T5891] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 211.689159][ T7481] syz.1.372 (7481): drop_caches: 2 [ 211.708749][ T5891] usb 5-1: config 9 has no interface number 0 [ 211.738930][ T5891] usb 5-1: config 9 interface 70 has no altsetting 0 [ 211.784456][ T5891] usb 5-1: New USB device found, idVendor=0411, idProduct=0001, bcdDevice=17.67 [ 211.800937][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.864702][ T5891] usb 5-1: Product: syz [ 211.869197][ T5891] usb 5-1: Manufacturer: syz [ 211.894350][ T5891] usb 5-1: SerialNumber: syz [ 212.369176][ T5891] pegasus 5-1:9.70: Missing or invalid endpoints [ 212.381728][ T5891] usb 5-1: USB disconnect, device number 15 [ 214.036825][ T7519] netlink: 32 bytes leftover after parsing attributes in process `syz.2.379'. [ 214.251207][ T7519] binder: 7515:7519 ioctl c0306201 0 returned -14 [ 216.234362][ T796] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.255940][ T7540] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7540 comm: syz.0.384) [ 216.451938][ T30] audit: type=1800 audit(1775198096.425:532): pid=7540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.384" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16749 res=0 errno=0 [ 216.651728][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 216.670520][ T796] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.686290][ T796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.864701][ T796] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 216.873838][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.906252][ T796] usb 2-1: config 0 descriptor?? [ 217.490178][ T796] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 217.904770][ T7555] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 218.187658][ T5891] usb 2-1: USB disconnect, device number 14 [ 218.484988][ T7551] fido_id[7551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 220.347597][ T7570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.404710][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.685889][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 220.694142][ T9] usb 3-1: config 1 has no interface number 0 [ 220.714601][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 220.749420][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 220.797742][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 608 [ 220.856110][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.875176][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 220.904447][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.914603][ T9] usb 3-1: Product: syz [ 220.918828][ T9] usb 3-1: Manufacturer: syz [ 220.923686][ T9] usb 3-1: SerialNumber: syz [ 221.031413][ T7569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.039301][ T7569] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.186969][ T9] usb 3-1: Error in usbnet_get_endpoints (-22) [ 221.437224][ T7584] random: crng reseeded on system resumption [ 221.915109][ T9] usb 3-1: USB disconnect, device number 12 [ 223.572917][ T7610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.604473][ T7639] mmap: syz.3.403 (7639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 226.640969][ T7607] syz.2.397 (7607): drop_caches: 2 [ 226.922603][ T7639] vivid-000: disconnect [ 227.436778][ T7627] vivid-000: reconnect [ 227.890634][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.907799][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.016145][ T7647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.808778][ T7653] tipc: New replicast peer: 255.255.255.255 [ 228.837251][ T7653] tipc: Enabled bearer , priority 10 [ 228.926070][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 229.118055][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.127536][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.137032][ T9] usb 4-1: Product: syz [ 229.159089][ T9] usb 4-1: Manufacturer: syz [ 229.179202][ T9] usb 4-1: SerialNumber: syz [ 229.222164][ T9] usb 4-1: config 0 descriptor?? [ 229.247315][ T5813] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 229.456077][ T5813] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 229.513990][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.523781][ T5813] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 229.621771][ T5813] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.695408][ T5813] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.704988][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.719092][ T5813] usb 1-1: Product: syz [ 229.729697][ T5813] usb 1-1: Manufacturer: syz [ 229.837155][ T5813] usb 1-1: SerialNumber: syz [ 229.858546][ T5813] usb 1-1: config 0 descriptor?? [ 229.965886][ T796] tipc: Node number set to 2913127955 [ 230.148758][ T5813] usb 1-1: selecting invalid altsetting 0 [ 230.515212][ T5813] usb 1-1: USB disconnect, device number 13 [ 230.651730][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.180918][ T7670] syzkaller1: entered promiscuous mode [ 231.212457][ T7670] syzkaller1: entered allmulticast mode [ 231.954551][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.997031][ T9] usb 4-1: USB disconnect, device number 9 [ 232.284397][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 232.651849][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.674444][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 232.694738][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.740268][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.760412][ T7680] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.774699][ T29] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.805528][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.946585][ T29] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 232.978093][ T29] usb 3-1: config 0 has no interface number 0 [ 233.003919][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.015778][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.064542][ T29] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 233.134740][ T29] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 233.158377][ T29] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 233.174803][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.190222][ T29] usb 3-1: Product: syz [ 233.197727][ T29] usb 3-1: Manufacturer: syz [ 233.209877][ T29] usb 3-1: SerialNumber: syz [ 233.224908][ T29] usb 3-1: config 0 descriptor?? [ 233.234851][ T7679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.253068][ T29] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 233.270739][ T29] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 233.297396][ T29] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 233.464857][ T29] usb 3-1: USB disconnect, device number 13 [ 233.479041][ T29] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 233.498945][ T29] cyberjack 3-1:0.69: device disconnected [ 234.162226][ T7694] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.417' sets config #2 [ 234.515901][ T9] usb 2-1: USB disconnect, device number 15 [ 234.820277][ T7708] Cannot find del_set index 2 as target [ 237.654344][ T7739] fuse: Bad value for 'fd' [ 237.840091][ T7739] ipip0: entered promiscuous mode [ 237.845359][ T7739] ipip0: entered allmulticast mode [ 238.093026][ T30] audit: type=1326 audit(1775198118.245:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.129594][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 238.246086][ T30] audit: type=1326 audit(1775198118.305:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.288222][ T30] audit: type=1326 audit(1775198118.305:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.384468][ T30] audit: type=1326 audit(1775198118.305:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.465767][ T30] audit: type=1326 audit(1775198118.315:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.505578][ T980] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 238.522445][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.552001][ T980] usb 1-1: Product: syz [ 238.569791][ T980] usb 1-1: Manufacturer: syz [ 238.580224][ T30] audit: type=1326 audit(1775198118.315:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.605280][ T980] usb 1-1: SerialNumber: syz [ 238.618910][ T980] usb 1-1: config 0 descriptor?? [ 238.720173][ T30] audit: type=1326 audit(1775198118.325:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 238.950527][ T980] hub 1-1:0.0: bad descriptor, ignoring hub [ 238.956085][ T30] audit: type=1326 audit(1775198118.325:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 239.023456][ T980] hub 1-1:0.0: probe with driver hub failed with error -5 [ 239.184028][ T980] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 239.206611][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.225055][ T980] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 239.269619][ T30] audit: type=1326 audit(1775198118.325:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 239.314356][ T980] usb 1-1: media controller created [ 239.384189][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.631352][ T30] audit: type=1326 audit(1775198118.325:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7741 comm="syz.4.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3739d9c819 code=0x7ffc0000 [ 240.051314][ T980] DVB: Unable to find symbol dib7000p_attach() [ 240.283806][ T980] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 242.128003][ T980] rc_core: IR keymap rc-dib0700-rc5 not found [ 242.134983][ T980] Registered IR keymap rc-empty [ 242.144012][ T980] dvb-usb: could not initialize remote control. [ 242.150779][ T7780] input: syz1 as /devices/virtual/input/input15 [ 242.167097][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 242.230354][ T980] usb 1-1: USB disconnect, device number 14 [ 242.236999][ T29] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.261050][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.268929][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.335347][ T7780] ======================================================= [ 242.335347][ T7780] WARNING: The mand mount option has been deprecated and [ 242.335347][ T7780] and is ignored by this kernel. Remove the mand [ 242.335347][ T7780] option from the mount to silence this warning. [ 242.335347][ T7780] ======================================================= [ 242.406104][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.458693][ T980] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 242.469159][ T7780] fuse: Unknown parameter '00000000000000000009' [ 242.478593][ T29] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 242.491127][ T29] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 242.548536][ T29] usb 4-1: Product: syz [ 242.560299][ T29] usb 4-1: SerialNumber: syz [ 242.590831][ T29] usb 4-1: config 0 descriptor?? [ 242.646150][ T29] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 242.718334][ T29] usb 4-1: Detected SIO [ 242.849269][ T29] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 243.183998][ T29] usb 4-1: USB disconnect, device number 10 [ 243.220419][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 243.252845][ T29] ftdi_sio 4-1:0.0: device disconnected [ 243.290547][ T7804] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.439' sets config #0 [ 243.843649][ T7814] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 243.880791][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.510849][ T7774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.710275][ T7819] usb usb8: usbfs: process 7819 (syz.1.438) did not claim interface 0 before use [ 244.973309][ T105] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.056100][ T1036] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.104447][ T1036] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.137276][ T1036] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.704407][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 246.274332][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 246.286945][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 246.343428][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.431115][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.485511][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.519455][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.542871][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 246.575338][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.168243][ T7852] bridge0: port 3(syz_tun) entered disabled state [ 247.205059][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.205666][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.231129][ T24] usb 1-1: usb_control_msg returned -32 [ 247.255712][ T24] usbtmc 1-1:16.0: can't read capabilities [ 248.040728][ T7797] usb 1-1: USB disconnect, device number 15 [ 248.208649][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.232290][ T7852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.984864][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 249.019135][ T7862] random: crng reseeded on system resumption [ 249.451462][ T193] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.539971][ T193] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.575894][ T193] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.593980][ T193] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.628891][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 249.638095][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 249.651459][ T7872] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 250.146405][ T7874] netlink: 68 bytes leftover after parsing attributes in process `syz.0.450'. [ 250.174835][ T7874] tipc: Failed to remove unknown binding: 66,1,1/2913127955:1310875051/1310875053 [ 251.560399][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 251.560415][ T30] audit: type=1800 audit(1775198131.635:562): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.452" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 252.788836][ T7799] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 252.923111][ T7903] Cannot find del_set index 2 as target [ 253.070277][ T7798] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.101684][ T7799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.112838][ T7799] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.131409][ T7799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 253.163553][ T7905] bridge0: port 3(erspan0) entered blocking state [ 253.185550][ T7799] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 253.197770][ T7905] bridge0: port 3(erspan0) entered disabled state [ 253.218211][ T7905] erspan0: entered allmulticast mode [ 253.240891][ T7905] erspan0: entered promiscuous mode [ 253.248405][ T7798] usb 2-1: device descriptor read/64, error -71 [ 253.271636][ T7906] erspan0: left allmulticast mode [ 253.297159][ T7799] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 253.304560][ T7906] erspan0: left promiscuous mode [ 253.338901][ T7906] bridge0: port 3(erspan0) entered disabled state [ 253.374714][ T7905] veth1_to_hsr: entered allmulticast mode [ 253.430823][ T7904] veth1_to_hsr: left allmulticast mode [ 253.454576][ T7799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.646114][ T7799] usb 5-1: Product: syz [ 253.650358][ T7799] usb 5-1: Manufacturer: syz [ 253.793871][ T7798] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.942643][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 254.001023][ T7799] usb 5-1: SerialNumber: syz [ 254.026308][ T7799] usb 5-1: config 0 descriptor?? [ 254.046032][ T7799] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 254.134786][ T7798] usb 2-1: device descriptor read/64, error -71 [ 254.275861][ T7798] usb usb2-port1: attempt power cycle [ 254.772635][ T7798] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 254.809733][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 254.832246][ T7798] usb 2-1: device descriptor read/8, error -71 [ 255.084355][ T7798] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.143309][ T7798] usb 2-1: device descriptor read/8, error -71 [ 255.275005][ T7798] usb usb2-port1: unable to enumerate USB device [ 256.073494][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.082435][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.152730][ T7798] usb 5-1: USB disconnect, device number 16 [ 256.715028][ T7934] xt_TCPMSS: Only works on TCP SYN packets [ 258.205702][ T7946] fuse: Unknown parameter 'fd0x000000000000000b00000000000000000000' [ 259.284366][ T5891] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 259.454213][ T5891] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 259.485597][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 259.536960][ T5891] usb 5-1: Product: syz [ 259.545168][ T5891] usb 5-1: Manufacturer: syz [ 259.549887][ T5891] usb 5-1: SerialNumber: syz [ 259.569260][ T5891] usb 5-1: config 0 descriptor?? [ 260.666278][ T5891] usb 5-1: USB disconnect, device number 17 [ 260.715607][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.679141][ T8015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.945891][ T8023] fuse: root generation should be zero [ 265.009932][ T8024] binder: BINDER_SET_CONTEXT_MGR already set [ 265.018992][ T8024] binder: 8017:8024 ioctl 4018620d 200000000040 returned -16 [ 266.344948][ T8042] syzkaller0: entered promiscuous mode [ 266.350646][ T8042] syzkaller0: entered allmulticast mode [ 267.406537][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 268.915299][ T8072] dummy0: entered promiscuous mode [ 270.214444][ T7798] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 270.487408][ T8070] dummy0: left promiscuous mode [ 270.534510][ T7798] usb 3-1: Using ep0 maxpacket: 32 [ 270.541524][ T7798] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 270.554494][ T7798] usb 3-1: config 0 has no interface number 0 [ 270.567093][ T7798] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 270.582987][ T7798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.591905][ T7798] usb 3-1: Product: syz [ 270.676383][ T7798] usb 3-1: Manufacturer: syz [ 270.681055][ T7798] usb 3-1: SerialNumber: syz [ 270.717206][ T7798] usb 3-1: config 0 descriptor?? [ 270.736004][ T7798] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.019421][ T7798] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.138778][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 271.194798][ T7798] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 271.405539][ T8090] fuse: Bad value for 'fd' [ 273.138884][ T8113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 273.188170][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 273.218169][ T7799] usb 3-1: USB disconnect, device number 14 [ 273.289841][ T7799] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 273.323247][ T7799] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 274.106078][ T7799] quatech2 3-1:0.51: device disconnected [ 274.357061][ T8127] syzkaller0: entered promiscuous mode [ 274.362614][ T8127] syzkaller0: entered allmulticast mode [ 274.764385][ T7799] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 274.996233][ T7799] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 275.007680][ T7799] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 275.024401][ T7799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 275.074898][ T7799] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.092920][ T7799] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.188003][ T7799] usb 2-1: Product: syz [ 275.192333][ T7799] usb 2-1: Manufacturer: syz [ 275.204149][ T7799] usb 2-1: SerialNumber: syz [ 275.216840][ T7799] usb 2-1: config 0 descriptor?? [ 275.230507][ T7799] usb 2-1: selecting invalid altsetting 0 [ 276.026874][ T8147] netlink: 'syz.4.506': attribute type 4 has an invalid length. [ 277.164343][ T7799] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.326181][ T7799] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.357015][ T7799] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.374137][ T7799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.401377][ T7799] usb 4-1: config 0 descriptor?? [ 277.421910][ T7799] pwc: Askey VC010 type 2 USB webcam detected. [ 277.544376][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 277.713307][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 277.723100][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.734171][ T10] usb 3-1: Product: syz [ 277.742821][ T8138] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 277.752692][ T7798] usb 2-1: USB disconnect, device number 20 [ 277.772355][ T10] usb 3-1: Manufacturer: syz [ 277.824438][ T7799] pwc: recv_control_msg error -32 req 02 val 2b00 [ 277.851599][ T10] usb 3-1: SerialNumber: syz [ 277.892314][ T7799] pwc: recv_control_msg error -32 req 02 val 2700 [ 277.900533][ T10] usb 3-1: config 0 descriptor?? [ 277.923052][ T7799] pwc: recv_control_msg error -32 req 02 val 2c00 [ 278.035261][ T7799] pwc: recv_control_msg error -32 req 04 val 1000 [ 278.051773][ T7799] pwc: recv_control_msg error -32 req 04 val 1300 [ 278.094552][ T7799] pwc: recv_control_msg error -32 req 04 val 1400 [ 278.140439][ T7799] pwc: recv_control_msg error -32 req 02 val 2000 [ 278.168165][ T7799] pwc: recv_control_msg error -32 req 02 val 2100 [ 278.185841][ T7799] pwc: recv_control_msg error -32 req 04 val 1500 [ 278.207073][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.216054][ T7799] pwc: recv_control_msg error -32 req 02 val 2500 [ 278.321818][ T7799] pwc: recv_control_msg error -32 req 02 val 2400 [ 278.375822][ T8164] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 278.390193][ T8164] bond1 (unregistering): Released all slaves [ 278.444986][ T7799] pwc: recv_control_msg error -32 req 02 val 2600 [ 278.461916][ T7799] pwc: recv_control_msg error -32 req 02 val 2900 [ 278.549862][ T7799] pwc: recv_control_msg error -32 req 02 val 2800 [ 278.606828][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 278.674370][ T7798] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 278.758369][ T7799] pwc: recv_control_msg error -71 req 04 val 1200 [ 278.780344][ T5891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.789457][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.791325][ T7799] pwc: Registered as video103. [ 278.861632][ T7798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 278.882932][ T7799] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 278.884288][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.907266][ T7798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.034344][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.073323][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 279.087207][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 279.097118][ T7799] usb 4-1: USB disconnect, device number 11 [ 279.111918][ T7798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 279.142456][ T5891] usb 2-1: Product: syz [ 279.154575][ T7798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.184439][ T5891] usb 2-1: Manufacturer: syz [ 279.199272][ T7798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 279.214351][ T7798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.251872][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 279.251872][ T7798] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 279.251899][ T7798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.264278][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 279.284978][ T7798] usb 5-1: Product: syz [ 279.320235][ T5891] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 279.390177][ T7798] usb 5-1: Manufacturer: syz [ 279.416768][ T7798] usb 5-1: SerialNumber: syz [ 279.511986][ T8159] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 279.525789][ T5891] usb 2-1: USB disconnect, device number 21 [ 279.544099][ T7798] usb 5-1: config 0 descriptor?? [ 279.562762][ T7798] ti_usb_3410_5052 5-1:0.0: required endpoints missing [ 280.184359][ T5891] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 280.291464][ T8176] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 280.306686][ T8176] netlink: 'syz.0.513': attribute type 2 has an invalid length. [ 280.314663][ T8176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.513'. [ 280.512825][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 280.538940][ T5891] usb 4-1: config 0 has no interfaces? [ 280.582495][ T5891] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 280.608513][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.686195][ T5891] usb 4-1: Product: syz [ 280.696494][ T5891] usb 4-1: Manufacturer: syz [ 280.704348][ T5891] usb 4-1: SerialNumber: syz [ 280.730219][ T5891] usb 4-1: config 0 descriptor?? [ 281.179717][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 281.212774][ T10] usb 3-1: USB disconnect, device number 15 [ 281.271421][ T8171] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 281.280485][ T8171] bond0: (slave wlan1): Opening slave failed [ 281.526631][ T8182] netlink: 'syz.1.514': attribute type 13 has an invalid length. [ 282.138883][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.517'. [ 282.283319][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 282.405310][ T10] usb 5-1: USB disconnect, device number 18 [ 282.994445][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 283.194363][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 283.234045][ T10] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 283.302255][ T10] usb 5-1: config 0 has no interface number 0 [ 283.319948][ T10] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 283.377867][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.409884][ T10] usb 5-1: config 0 descriptor?? [ 283.449902][ T7799] usb 4-1: USB disconnect, device number 12 [ 283.515091][ T8170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.529281][ T10] usb-storage 5-1:0.99: USB Mass Storage device detected [ 283.598631][ T10] usb-storage 5-1:0.99: device ignored [ 284.577741][ T8228] netlink: 80 bytes leftover after parsing attributes in process `syz.2.523'. [ 286.782678][ T7799] usb 5-1: USB disconnect, device number 19 [ 287.057823][ T8258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.081706][ T8258] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 287.219760][ T8259] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 8259 comm: syz.4.528) [ 287.255594][ T30] audit: type=1800 audit(1775198167.395:563): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.528" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20143 res=0 errno=0 [ 288.212214][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 288.389347][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.920304][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 288.929693][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'. [ 289.069854][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 289.329079][ T8280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.415677][ T8290] random: crng reseeded on system resumption [ 290.464055][ T8290] loop9: detected capacity change from 0 to 7 [ 290.579156][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.589054][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.664400][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.674044][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.689646][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.699854][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.709115][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.718899][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.734792][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.745555][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.773173][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.782825][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.792228][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.802291][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.810594][ T8290] ldm_validate_partition_table(): Disk read failed. [ 290.823771][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.833649][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.842971][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.852829][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.874799][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 290.884648][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 290.896006][ T8290] Dev loop9: unable to read RDB block 0 [ 290.908645][ T8290] loop9: unable to read partition table [ 290.915222][ T8290] loop9: partition table beyond EOD, truncated [ 290.953187][ T8290] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 291.080048][ T8292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.303579][ T8300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.320366][ T8300] Cannot find add_set index 0 as target [ 291.532126][ T8302] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 293.718307][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 293.830768][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.543'. [ 295.799203][ T8342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 296.222329][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 296.304263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.552459][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.578937][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.608496][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.725875][ T10] usb 3-1: config 0 descriptor?? [ 296.742010][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 296.924264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 296.940268][ T8358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.347407][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.517063][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.649566][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.659700][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 297.668848][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 297.678805][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 297.689514][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 297.699515][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 297.715294][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 297.725313][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 297.751552][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 297.785147][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 297.815107][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 298.550043][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 298.802537][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.843115][ T10] pwc: Registered as video103. [ 298.880248][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 298.911665][ T8376] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 299.172015][ T10] usb 3-1: USB disconnect, device number 16 [ 299.771697][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 301.614444][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 301.774385][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 301.783500][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.794915][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 301.823275][ T10] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 301.832750][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.869564][ T10] usb 4-1: Product: syz [ 301.880664][ T10] usb 4-1: Manufacturer: syz [ 301.890729][ T10] usb 4-1: SerialNumber: syz [ 301.921521][ T10] usb 4-1: config 0 descriptor?? [ 301.969980][ T10] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 302.206649][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.218162][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.166570][ T8427] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.688839][ T7799] usb 4-1: USB disconnect, device number 13 [ 304.870728][ T8446] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 304.870728][ T8446] program syz.4.563 not setting count and/or reply_len properly [ 305.146811][ T8447] blktrace: Concurrent blktraces are not allowed on loop4 [ 305.611985][ T8452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.162042][ T8462] netlink: 'syz.0.566': attribute type 4 has an invalid length. [ 306.175708][ T8463] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.036047][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 310.228293][ T8509] random: crng reseeded on system resumption [ 310.510878][ T8513] input: syz1 as /devices/virtual/input/input20 [ 310.590010][ T8513] fuse: Unknown parameter '00000000000000000009' [ 311.205221][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 311.713508][ T8526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.692466][ T8576] netlink: 'syz.4.587': attribute type 13 has an invalid length. [ 315.714669][ T8579] PKCS8: Unsupported PKCS#8 version [ 316.737707][ T5891] IPVS: starting estimator thread 0... [ 317.042443][ T8589] IPVS: using max 50 ests per chain, 120000 per kthread [ 317.500116][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.509864][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.638132][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'. [ 318.541953][ T8609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.010617][ T8615] fuse: Bad value for 'fd' [ 319.032186][ T8615] ipip0: entered promiscuous mode [ 319.037706][ T8615] ipip0: entered allmulticast mode [ 319.314772][ T7798] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 319.638537][ T7798] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 319.672132][ T7798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.697598][ T7798] usb 4-1: Product: syz [ 319.709306][ T7798] usb 4-1: Manufacturer: syz [ 319.781302][ T8633] tmpfs: Unknown parameter 'i1t!' [ 319.793974][ T8633] delete_channel: no stack [ 319.819181][ T7798] usb 4-1: SerialNumber: syz [ 319.858020][ T7798] usb 4-1: config 0 descriptor?? [ 319.886092][ T7798] hub 4-1:0.0: bad descriptor, ignoring hub [ 319.898356][ T7798] hub 4-1:0.0: probe with driver hub failed with error -5 [ 320.216534][ T7798] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 320.228108][ T7798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 320.253022][ T7798] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 320.275921][ T7798] usb 4-1: media controller created [ 320.367358][ T7798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.839548][ T7798] DVB: Unable to find symbol dib7000p_attach() [ 320.845892][ T7798] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 320.975678][ T7798] rc_core: IR keymap rc-dib0700-rc5 not found [ 320.987149][ T7798] Registered IR keymap rc-empty [ 320.987451][ T7798] dvb-usb: could not initialize remote control. [ 320.987465][ T7798] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 321.426454][ T8615] i2c i2c-1: Invalid block size returned: 58 [ 321.966528][ T8648] tipc: New replicast peer: 255.255.255.255 [ 321.974135][ T8648] tipc: Enabled bearer , priority 10 [ 322.345797][ T8654] futex_wake_op: syz.4.600 tries to shift op by -1; fix this program [ 322.724934][ T7798] usb 4-1: USB disconnect, device number 14 [ 322.796501][ T7798] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 323.095726][ T7810] tipc: Node number set to 3828638524 [ 323.852872][ T8672] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 323.874376][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.603'. [ 324.624508][ T7810] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 324.916652][ T7810] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 324.964528][ T7810] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 324.987699][ T7810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 325.190397][ T7810] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.293725][ T7810] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.322605][ T7810] usb 2-1: Product: syz [ 325.339957][ T7810] usb 2-1: Manufacturer: syz [ 325.368887][ T7810] usb 2-1: SerialNumber: syz [ 325.414948][ T7810] usb 2-1: config 0 descriptor?? [ 325.433705][ T7810] usb 2-1: selecting invalid altsetting 0 [ 325.529264][ T8691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.098167][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 327.278310][ T24] usb 3-1: config 171 has an invalid interface number: 109 but max is 0 [ 327.287214][ T24] usb 3-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 327.298766][ T24] usb 3-1: config 171 has no interface number 0 [ 327.310097][ T24] usb 3-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 327.328240][ T24] usb 3-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 327.527839][ T24] usb 3-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 327.564251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 327.780386][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 327.798498][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.816151][ T24] usb 3-1: Product: syz [ 327.825299][ T24] usb 3-1: Manufacturer: syz [ 327.829963][ T24] usb 3-1: SerialNumber: syz [ 328.022947][ T8704] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.033143][ T8693] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 328.053261][ T7798] usb 2-1: USB disconnect, device number 22 [ 328.513506][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 328.534268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 328.798303][ T8721] netlink: 'syz.2.609': attribute type 21 has an invalid length. [ 328.874627][ T8722] netlink: 'syz.2.609': attribute type 21 has an invalid length. [ 329.227730][ T8734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.231930][ T8734] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 329.330490][ T24] ath6kl: Failed to submit usb control message: -110 [ 329.330610][ T24] ath6kl: unable to send the bmi data to the device: -110 [ 329.330621][ T24] ath6kl: Unable to send get target info: -110 [ 329.331668][ T24] ath6kl: Failed to init ath6kl core: -110 [ 329.333132][ T24] ath6kl_usb 3-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 330.249124][ T8722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.609'. [ 330.362360][ T8721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.609'. [ 330.935434][ T8743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.068541][ T24] usb 3-1: USB disconnect, device number 17 [ 332.665514][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.618'. [ 334.234384][ T7799] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 334.584630][ T7799] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.605518][ T7799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.614186][ T7799] usb 3-1: Product: syz [ 334.621182][ T7799] usb 3-1: Manufacturer: syz [ 334.660149][ T7799] usb 3-1: SerialNumber: syz [ 334.714648][ T7799] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 334.781260][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.580532][ T8788] syzkaller0: entered promiscuous mode [ 335.586958][ T8788] syzkaller0: entered allmulticast mode [ 335.730562][ T8789] simple: basic_22 [ 335.734665][ T8789] simple: basic_44 [ 335.738506][ T8789] simple: basic_66 [ 335.742268][ T8789] simple: basic_88 [ 335.746061][ T8789] simple: basic_110 [ 335.749894][ T8789] simple: basic_132 [ 335.753737][ T8789] simple: basic_154 [ 335.757818][ T8789] simple: basic_176 [ 335.761664][ T8789] simple: basic_198 [ 335.765551][ T8789] simple: basic_220 [ 335.769466][ T8789] simple: basic_242 [ 335.773660][ T8789] simple: basic_264 [ 335.777564][ T8789] simple: basic_286 [ 335.781456][ T8789] simple: basic_308 [ 335.785297][ T8789] simple: basic_330 [ 335.789154][ T8789] simple: basic_352 [ 335.792988][ T8789] simple: basic_374 [ 335.796871][ T8789] 0: reclassify loop, rule prio 0, protocol 800 [ 335.824612][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 335.874683][ T10] ath9k_htc: Failed to initialize the device [ 335.965899][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 337.144683][ T10] usb 3-1: USB disconnect, device number 18 [ 337.204611][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 337.298911][ T8798] kAFS: unable to lookup cell '' [ 337.693209][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 337.893238][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.905895][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.058769][ T10] usb 3-1: Product: syz [ 338.070041][ T10] usb 3-1: Manufacturer: syz [ 338.082188][ T10] usb 3-1: SerialNumber: syz [ 338.188914][ T8805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.240950][ T10] usb 3-1: config 0 descriptor?? [ 338.401432][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 338.559839][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 340.181205][ T8821] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.593988][ T8826] sctp: [Deprecated]: syz.1.631 (pid 8826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.593988][ T8826] Use struct sctp_sack_info instead [ 340.824338][ T7810] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 340.974311][ T7810] usb 4-1: Using ep0 maxpacket: 8 [ 341.075815][ T7810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.096864][ T7810] usb 4-1: config 0 has no interfaces? [ 341.108125][ T7810] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 341.124835][ T7810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.331154][ T7810] usb 4-1: Product: syz [ 341.335731][ T7810] usb 4-1: Manufacturer: syz [ 341.341201][ T7810] usb 4-1: SerialNumber: syz [ 341.352723][ T7810] usb 4-1: config 0 descriptor?? [ 342.144502][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 342.177773][ T10] usb 3-1: USB disconnect, device number 19 [ 343.462834][ T7799] usb 4-1: USB disconnect, device number 15 [ 344.564577][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 344.765742][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.808731][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 344.920646][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 344.976396][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.014289][ T24] usb 4-1: Product: syz [ 345.023863][ T24] usb 4-1: Manufacturer: syz [ 345.037276][ T24] usb 4-1: SerialNumber: syz [ 345.059013][ T24] usb 4-1: config 0 descriptor?? [ 345.278564][ T8860] sg_write: data in/out 262111/92 bytes for SCSI command 0x69-- guessing data in; [ 345.278564][ T8860] program syz.4.637 not setting count and/or reply_len properly [ 345.376775][ T8867] netlink: 200 bytes leftover after parsing attributes in process `syz.2.638'. [ 345.524656][ T8867] loop6: detected capacity change from 0 to 524288000 [ 345.920244][ T8876] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.994376][ T5891] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 346.016487][ T8876] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 346.254547][ T5891] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 346.263419][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.287106][ T5891] usb 2-1: config 0 has no interfaces? [ 346.296657][ T5891] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 346.315808][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.389052][ T5891] usb 2-1: config 0 descriptor?? [ 346.999408][ T7799] usb 4-1: USB disconnect, device number 16 [ 347.436618][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.464941][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.537696][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.549703][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.561740][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.572542][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.584164][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.607333][ T8889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.609122][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 347.785873][ T8889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.820203][ T8889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.844929][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.846260][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'. [ 348.052606][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.089049][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.130040][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.140591][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.163920][ T8887] bridge0: port 3(syz_tun) entered blocking state [ 348.170666][ T8887] bridge0: port 3(syz_tun) entered forwarding state [ 348.181038][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.195387][ T8900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.214490][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.231948][ T8887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.506269][ T8898] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.645' sets config #2 [ 348.689382][ T8887] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.057408][ T8907] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 349.251749][ T8909] overlayfs: missing 'lowerdir' [ 349.553993][ T10] usb 2-1: USB disconnect, device number 23 [ 350.437649][ T8921] __nla_validate_parse: 10 callbacks suppressed [ 350.437696][ T8921] netlink: 48 bytes leftover after parsing attributes in process `syz.3.647'. [ 350.505155][ T8922] bridge0: port 4(hsr0) entered blocking state [ 350.512082][ T8922] bridge0: port 4(hsr0) entered disabled state [ 350.519212][ T8922] hsr0: entered allmulticast mode [ 350.524452][ T8922] hsr_slave_0: entered allmulticast mode [ 350.530189][ T8922] hsr_slave_1: entered allmulticast mode [ 350.540081][ T8922] hsr0: entered promiscuous mode [ 351.655410][ T30] audit: type=1800 audit(1775198231.605:564): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.650" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=20143 res=0 errno=0 [ 351.736094][ T8939] input: syz1 as /devices/virtual/input/input22 [ 351.959564][ T8939] fuse: Unknown parameter '00000000000000000009' [ 352.523388][ T30] audit: type=1326 audit(1775198232.665:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8949 comm="syz.1.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244599c819 code=0x0 [ 352.682411][ T8955] xt_cgroup: invalid path, errno=-2 [ 352.884410][ T7798] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 353.299382][ T8960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.411593][ T7798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 353.427644][ T7798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 353.449525][ T8961] overlayfs: missing 'lowerdir' [ 353.496078][ T7798] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 353.505497][ T7798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.515303][ T7798] usb 2-1: Product: syz [ 353.521887][ T7798] usb 2-1: Manufacturer: syz [ 353.554140][ T7798] usb 2-1: SerialNumber: syz [ 353.621759][ T7798] usb 2-1: config 0 descriptor?? [ 353.641448][ T8954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.648998][ T8954] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.895080][ T8953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.914664][ T8953] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 354.448865][ T8970] binder: 8966:8970 ioctl 4018620d 0 returned -22 [ 354.581863][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.615627][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.894250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 355.672080][ T8977] binder: 8966:8977 ioctl d000941e 0 returned -22 [ 356.530196][ T7798] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 356.584561][ T7798] usb 2-1: USB disconnect, device number 24 [ 356.721383][ T8985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.939717][ T8988] input: syz1 as /devices/virtual/input/input23 [ 357.006078][ T8988] fuse: Unknown parameter '00000000000000000009' [ 357.154482][ T30] audit: type=1800 audit(1775198237.255:566): pid=8993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.661" name="bus" dev="tmpfs" ino=716 res=0 errno=0 [ 359.868446][ T9018] SET target dimension over the limit! [ 359.880404][ T9018] netdevsim netdevsim0: Direct firmware load for / [ 359.880404][ T9018] failed with error -2 [ 359.895803][ C0] net_ratelimit: 590 callbacks suppressed [ 359.895833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.912606][ T9018] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 359.912606][ T9018] [ 359.991383][ T9010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.666'. [ 360.867580][ T9029] x_tables: duplicate underflow at hook 4 [ 360.875295][ T9029] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 361.515618][ T9033] xt_cgroup: invalid path, errno=-2 [ 362.074440][ T5891] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 362.231353][ T9042] input: syz1 as /devices/virtual/input/input24 [ 362.307980][ T9042] fuse: Unknown parameter '00000000000000000009' [ 362.325236][ T5891] usb 4-1: config 0 has no interfaces? [ 362.335215][ T5891] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 362.364347][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.396865][ T5891] usb 4-1: config 0 descriptor?? [ 362.560292][ T9049] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 362.720634][ T9048] input: syz1 as /devices/virtual/input/input25 [ 362.794449][ T9048] fuse: Unknown parameter '00000000000000000009' [ 363.291680][ T9058] tipc: Enabling of bearer rejected, already enabled [ 365.009218][ T5891] usb 4-1: USB disconnect, device number 17 [ 365.277580][ T9075] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 365.682802][ T9083] sg_write: data in/out 262111/92 bytes for SCSI command 0x69-- guessing data in; [ 365.682802][ T9083] program syz.3.682 not setting count and/or reply_len properly [ 365.956166][ T9085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.679'. [ 366.834455][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 366.985981][ T9097] input: syz1 as /devices/virtual/input/input26 [ 367.066723][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.092763][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.110591][ T9100] fuse: Unknown parameter '00000000000000000009' [ 367.269023][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 367.307191][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 367.371046][ T10] usb 3-1: Manufacturer: syz [ 367.386897][ T9101] netlink: 'syz.1.687': attribute type 9 has an invalid length. [ 367.394960][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'. [ 367.460475][ T10] usb 3-1: config 0 descriptor?? [ 367.714101][ T9107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 367.838499][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 368.577437][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 369.005723][ T9116] netlink: 'syz.3.689': attribute type 4 has an invalid length. [ 369.490996][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 369.503776][ T9122] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'. [ 370.679297][ T9128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.322602][ T5891] usb 3-1: USB disconnect, device number 20 [ 371.717846][ T9151] input: syz1 as /devices/virtual/input/input27 [ 371.953572][ T9151] fuse: Unknown parameter '00000000000000000009' [ 372.468924][ T9158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 372.716161][ T9162] sctp: [Deprecated]: syz.0.699 (pid 9162) Use of int in max_burst socket option. [ 372.716161][ T9162] Use struct sctp_assoc_value instead [ 373.792613][ T9180] binder: 9175:9180 ioctl c0306201 0 returned -14 [ 374.610026][ T9189] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 374.619359][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 375.408123][ T5891] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 375.450340][ T7799] IPVS: starting estimator thread 0... [ 375.621430][ T9205] IPVS: using max 38 ests per chain, 91200 per kthread [ 375.695115][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 375.703135][ T5891] usb 3-1: config 0 has no interfaces? [ 375.775567][ T7799] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 375.817070][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.827860][ T5891] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.854359][ T5891] usb 3-1: Manufacturer: syz [ 375.975538][ T7799] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.004462][ T7799] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 376.019992][ T9180] syz.0.703 (9180): drop_caches: 2 [ 376.034533][ T7799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 376.042687][ T7799] usb 4-1: Product: syz [ 376.043782][ T5891] usb 3-1: config 0 descriptor?? [ 376.083859][ T7799] usb 4-1: Manufacturer: syz [ 376.093562][ T7799] usb 4-1: SerialNumber: syz [ 376.362639][ T9208] input: syz1 as /devices/virtual/input/input28 [ 376.399878][ T7799] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 376.426096][ T9208] fuse: Unknown parameter '00000000000000000009' [ 376.633378][ T5891] usb 4-1: USB disconnect, device number 18 [ 376.651228][ T5891] usblp0: removed [ 377.250932][ T9222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.711'. [ 378.095042][ T7799] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 378.275325][ T7798] usb 3-1: USB disconnect, device number 21 [ 378.593586][ T9230] input: syz1 as /devices/virtual/input/input29 [ 378.676070][ T9230] fuse: Unknown parameter '00000000000000000009' [ 378.939062][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.945828][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.213863][ T9237] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 379.224163][ T9237] block device autoloading is deprecated and will be removed. [ 381.360318][ T7799] usb 5-1: unable to get BOS descriptor or descriptor too short [ 381.438691][ T7799] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 381.486395][ T7799] usb 5-1: can't read configurations, error -71 [ 381.557801][ T9258] block device autoloading is deprecated and will be removed. [ 381.703402][ T9262] input: syz1 as /devices/virtual/input/input30 [ 381.752805][ T9262] fuse: Unknown parameter '00000000000000000009' [ 382.711941][ T9281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.723'. [ 382.721212][ T9281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.723'. [ 382.938860][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 383.375011][ T9287] input: syz1 as /devices/virtual/input/input31 [ 383.498569][ T9289] fuse: Unknown parameter '00000000000000000009' [ 386.194314][ T9320] tipc: Can't bind to reserved service type 2 [ 386.475580][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 386.504768][ T9326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.745897][ T9326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.898665][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 387.939239][ T9341] input: syz1 as /devices/virtual/input/input32 [ 388.197671][ T9341] fuse: Unknown parameter '00000000000000000009' [ 388.492693][ T9349] dummy0: entered allmulticast mode [ 388.995479][ T9354] capability: warning: `syz.2.738' uses 32-bit capabilities (legacy support in use) [ 389.142426][ T9356] trusted_key: syz.2.738 sent an empty control message without MSG_MORE. [ 389.569295][ T9357] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 389.581426][ T9357] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 389.589847][ T9357] CPU: 0 UID: 0 PID: 9357 Comm: syz.2.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 389.600636][ T9357] Tainted: [L]=SOFTLOCKUP [ 389.605080][ T9357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.615211][ T9357] RIP: 0010:memcpy_sglist+0x420/0x730 [ 389.620603][ T9357] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 389.640307][ T9357] RSP: 0018:ffffc900045e7698 EFLAGS: 00010202 [ 389.646402][ T9357] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 389.654561][ T9357] RDX: ffffc90013625000 RSI: 00000000000001f1 RDI: 00000000000001f2 [ 389.662816][ T9357] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.671031][ T9357] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 389.679174][ T9357] R13: ffff8880295764c0 R14: ffff888035793880 R15: 0000000000000008 [ 389.687495][ T9357] FS: 00007efd13fa06c0(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 389.697223][ T9357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 389.703831][ T9357] CR2: 00007efd13f9fff8 CR3: 00000000570e2000 CR4: 00000000003526f0 [ 389.712289][ T9357] Call Trace: [ 389.715604][ T9357] [ 389.718551][ T9357] aead_recvmsg+0x719/0x1030 [ 389.723265][ T9357] ? __pfx_aead_recvmsg+0x10/0x10 [ 389.728328][ T9357] ? __pfx_aead_recvmsg+0x10/0x10 [ 389.733456][ T9357] sock_recvmsg_nosec+0x10c/0x140 [ 389.738512][ T9357] ____sys_recvmsg+0x3e3/0x4a0 [ 389.743297][ T9357] ? __pfx_____sys_recvmsg+0x10/0x10 [ 389.748603][ T9357] ? import_iovec+0x73/0xa0 [ 389.753137][ T9357] ___sys_recvmsg+0x215/0x590 [ 389.757854][ T9357] ? __lock_acquire+0x6b5/0x2cf0 [ 389.762975][ T9357] ? __pfx____sys_recvmsg+0x10/0x10 [ 389.768349][ T9357] do_recvmmsg+0x334/0x800 [ 389.773183][ T9357] ? __pfx_do_recvmmsg+0x10/0x10 [ 389.778319][ T9357] __x64_sys_recvmmsg+0x198/0x250 [ 389.783445][ T9357] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 389.789108][ T9357] do_syscall_64+0x14d/0xf80 [ 389.793734][ T9357] ? trace_irq_disable+0x3b/0x150 [ 389.798766][ T9357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.804920][ T9357] ? clear_bhb_loop+0x40/0x90 [ 389.809607][ T9357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.815689][ T9357] RIP: 0033:0x7efd1319c819 [ 389.820155][ T9357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.840094][ T9357] RSP: 002b:00007efd13fa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 389.848541][ T9357] RAX: ffffffffffffffda RBX: 00007efd13416360 RCX: 00007efd1319c819 [ 389.856522][ T9357] RDX: 0000000000000002 RSI: 0000200000004580 RDI: 000000000000000e [ 389.864491][ T9357] RBP: 00007efd13232c91 R08: 0000000000000000 R09: 0000000000000000 [ 389.872461][ T9357] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 389.880561][ T9357] R13: 00007efd134163f8 R14: 00007efd13416360 R15: 00007efd1353fa48 [ 389.888816][ T9357] [ 389.891949][ T9357] Modules linked in: [ 389.896232][ T9357] ---[ end trace 0000000000000000 ]--- [ 389.984701][ T9357] RIP: 0010:memcpy_sglist+0x420/0x730 [ 389.990327][ T9357] Code: e8 b5 b9 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 c7 b4 52 fd 4c 89 f3 eb 07 e8 bd b4 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 390.160979][ T9357] RSP: 0018:ffffc900045e7698 EFLAGS: 00010202 [ 390.169597][ T9357] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 390.177804][ T9357] RDX: ffffc90013625000 RSI: 00000000000001f1 RDI: 00000000000001f2 [ 390.185954][ T9357] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.194088][ T9357] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 390.268920][ T9357] R13: ffff8880295764c0 R14: ffff888035793880 R15: 0000000000000008 [ 390.301392][ T9357] FS: 00007efd13fa06c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 390.358024][ T9357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.372517][ T9357] CR2: 0000200000404030 CR3: 00000000570e2000 CR4: 00000000003526f0 [ 390.385310][ T9357] Kernel panic - not syncing: Fatal exception [ 390.392363][ T9357] Kernel Offset: disabled [ 390.396709][ T9357] Rebooting in 86400 seconds..