last executing test programs: 3m0.511912852s ago: executing program 1 (id=341): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x44}}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b4, 0x0, 0x94, 0x0, 0x94, 0x0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x8800}}, @TTL={0x24, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0, 0x0, {0x1000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x88]}, {0x0, [0x5, 0x11, 0x0, 0x2, 0x4], 0x3, 0x6}}}}, {{@ip={@remote, @remote, 0xff, 0x0, 'wlan1\x00', 'vlan1\x00', {}, {0xff}, 0x0, 0x0, 0x54}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffffff, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x410) mknodat(r2, &(0x7f0000000280)='./file0/file0\x00', 0x8, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000000c0)=""/144, 0x90, 0x5e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000b1401042bbd7000ffdbdf2551003f0005000400"], 0x18}}, 0x8000800) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0d, &(0x7f0000000040)) 2m54.66306223s ago: executing program 1 (id=353): socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x6, &(0x7f0000000140)=[{0x7, 0x8, 0x1, 0x2}, {0x6, 0x2, 0x1, 0x1e9}, {0xfffa, 0x9, 0x5, 0x4}, {0x2, 0x5, 0x6, 0x2bf0}, {0x9, 0xff, 0x8, 0x7f9}, {0x7, 0x3, 0x9}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000040000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000a3819ff000000f5ffffffffffffff0000737da567", @ANYRES32=r4, @ANYBLOB="14000100"/20], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a0000fe", 0x38}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket(0x11, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000740)={0x0}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r10 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f0000000c80)=[{r10}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_getres(0x8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x400000000000004) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0xb, 0x1, 0x0, 0x9, 0x0}) 2m53.029883234s ago: executing program 1 (id=358): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket(0x29, 0x80000, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c00018008"], 0x34}}, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r9 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) preadv(r10, &(0x7f0000000540)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x20, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000100), &(0x7f00000002c0)=@v1={0x1000000, [{0x4, 0x800}]}, 0xc, 0x3) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="940100001e00ff020100000000eaff00010000007c0106", @ANYRES16=r9, @ANYRES8=r6, @ANYRES32=r0], 0x194}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 2m51.941754499s ago: executing program 1 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x865) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xda, 0xcb, &(0x7f0000000240)="691b3cb74604c8929a91788e88e624b6115b277aade4685260a0612d771a427edb6c16a11698380acda8026412e47bb88a56b76604a4c8f23381431383caeee5419b066523bebebfd119d4a2d511d49ae6c56aa15ca154b246dc36146c264463234d2d7f9578ffa87dfbc8462a76ad251deac5fc40acec52e81f29993565f3aba466664a7352a659bb6a", &(0x7f0000000300)=""/203, 0x3, 0x0, 0x29, 0x6, &(0x7f0000000040)="70fce043ee4d6d2a098679e91a0b7e3b5687e0bd0e7e34acd19a6ba0aec043fbe6be60b7b9c085d4da", &(0x7f00000000c0)="71a6d0bb4dd8", 0x4, 0x0, 0x8a6}, 0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001f8ff00000000000000000000000a010400190e986012f2b116e7d559aa4a735300000000000000010000000900010073797a310000000030000000030a010200000000000000000100ffff0900010073797a310000000008000b400000000308000a40000000042c000000050a01020000000000000000010000040c00024000000000000000010900010073797a31000000001400000011"], 0xa4}}, 0x200000d4) r3 = syz_clone(0x80002011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r3) rt_tgsigqueueinfo(r3, r3, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) ptrace$peeksig(0x4209, r3, &(0x7f0000000580)={0x1, 0x0, 0x1}, &(0x7f00000016c0)=[{}]) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x203) r7 = open_tree(r1, &(0x7f00000004c0)='./file0\x00', 0x800) move_mount(r7, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000000)=0x42, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000500)) 2m49.174236091s ago: executing program 1 (id=368): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x674081, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8040480) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd2(0x44, 0x1) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, 0x0) (async) fcntl$notify(r5, 0x402, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, 0x0) (async) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000180)=0x800) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) (async) unshare(0x2a020480) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {0x0, 0x1}, 0x1b300000, 0x0, 0x0, 0x8000, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'gre0\x00', 0x2}) 2m47.31350747s ago: executing program 1 (id=370): sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffeed, 0x2004c004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) set_mempolicy(0x4005, 0x0, 0x8) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x1777, &(0x7f00000000c0)={0x0, 0x77b4, 0x0, 0x1, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc1, 0x13, 0xa3, 0x20, 0x112a, 0x1, 0xd811, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x53, 0x0, 0x2, 0x5, 0x8d, 0x9d, 0x0, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000095, 0x0, 0x3ff}]}) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m46.10653322s ago: executing program 32 (id=370): sendmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffeed, 0x2004c004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) set_mempolicy(0x4005, 0x0, 0x8) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async, rerun: 64) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async, rerun: 32) r2 = syz_io_uring_setup(0x1777, &(0x7f00000000c0)={0x0, 0x77b4, 0x0, 0x1, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) close(0x3) (rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc1, 0x13, 0xa3, 0x20, 0x112a, 0x1, 0xd811, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x53, 0x0, 0x2, 0x5, 0x8d, 0x9d, 0x0, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000095, 0x0, 0x3ff}]}) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m54.320694379s ago: executing program 0 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x208081, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x318, 0x0, 0x8}, {0xc0010141, 0x0, 0xac4f}, {0x8e8, 0x0, 0x4}, {0xb7f, 0x0, 0x9}, {0x8d8, 0x0, 0x7}]}) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x401) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'virt_wifi0\x00', 0x100}) r3 = syz_open_dev$vcsn(&(0x7f0000000140), 0x4, 0x10c81) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000000180)={0xeb, 0x0, 0x8}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000200)={0x1, 0x1, [{r2, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}]}) r4 = openat(r2, &(0x7f0000000240)='./file0\x00', 0x72b79b9a77052ae3, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000280)={0x2, 0x8000, {0xffffffffffffffff}, {}, 0x1, 0x200}) syz_pidfd_open(r5, 0x0) r6 = socket$inet(0x2, 0x800, 0x3) open_tree(r4, &(0x7f00000002c0)='./file0\x00', 0x80000) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/116, 0x74}], 0x6, &(0x7f0000000700)=""/4096, 0x1000}, 0x20) openat$binderfs(0xffffff9c, &(0x7f0000001740)='./binderfs/custom0\x00', 0x6, 0x0) r7 = openat$autofs(0xffffff9c, &(0x7f0000001780), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r4, {0x8, 0x7fff}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendfile(r8, r0, &(0x7f0000001840)=0x5, 0x819b) r9 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r9, &(0x7f0000001880)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x9, 0x8, 0x2, 0x696, 0x3, 0x3, 0x7, 0x154, 0x40, 0x1f2, 0x6, 0x3ff, 0x38, 0x4, 0x1, 0x400, 0x40}, [{0x6474e551, 0x7c, 0x780, 0x6, 0x1, 0x81, 0x6, 0x8}, {0x60000000, 0x7, 0x8001, 0x3, 0x4, 0x2, 0xd, 0x3}, {0x60000000, 0x8, 0x9, 0x7f, 0x3, 0xffffffffffffffff, 0x5, 0x8000}, {0x2, 0x1, 0xc0c1, 0x5, 0x33, 0x8, 0x4000, 0x87}], "18ba7ad21b0e8889d43ee14b1144d02a608b526eb113d44da96a3affe5589588abe59d813a7bf6250f12c564f223e59f9b67a01159bf1e172146169f667d88053e985e3837eee438e193c0ebe1c899d04ce80ea8c92137a162866799763ec310f389d1fcaf5ef6634206b4f58b798bab4c90ecc07052cc0fac59a6497393fcb36d303079e0f4a2665e12420eace070d4f4cd7402eba8fc74e916274496cf2390d3eaf77efd375674906309f08bfc417f10228abea1f06fbb29b8eaab5754c7acfab5f2c98cccada3dea8c55f57c084ee01bfcbe911e31c2d29f05b147cc5e9d8b66b7856cb7fe04c668f92a9931f14e298408a006b1fcfa156f5"}, 0x21a) sendmsg$nl_route_sched(r4, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0x0, 0x4}, {0x8, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x27}, @TCA_RATE={0x6, 0x5, {0x38, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x74, r10, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5ecd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x74}, 0x1, 0x0, 0x0, 0x44050}, 0x4008000) read(r7, &(0x7f0000001d80)=""/12, 0xc) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000001dc0), &(0x7f0000001e40)=0x60) add_key$user(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x1}, &(0x7f0000001f00)="af9ae2c88c108783f5b2f6899bf1db75525e16df818180df6508c0cbd58523c6e32a3b2e833fd4709537168c7569e6336461439b98de132ecdb1ed5b4c0390155bcc1b8dd20007afb593a0803b87633bd0c7ae60f2634c18cdc8b0ac80b8c9d6ddad8179ebeb9b7fd3c9691ff8d05b8ecc036fb6a92d58dbb925652413b369c60172", 0x82, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000002000)={0x12, 0x10, 0xfa00, {&(0x7f0000001fc0), 0xffffffffffffffff, r3}}, 0x18) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000002080)={0x0, @local, @multicast1}, &(0x7f00000020c0)=0xc) sendmsg$nl_route_sched(r3, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x8, 0x9}, {0xc, 0xfff2}, {0x4, 0xffff}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) 1m53.950441682s ago: executing program 0 (id=560): capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfd1bd000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, 'O'}, @main=@item_4={0x3, 0x0, 0xa, "f7785222"}]}}, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x230500, 0x0) 1m50.401825388s ago: executing program 0 (id=572): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@util={0x25, "6dd5395bf19e0523b063ae2d78c395bd"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06", 0x29}], 0x1}, 0x8001) 1m50.242385655s ago: executing program 0 (id=573): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wakeup_count', 0x28402, 0x9) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) setgroups(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) r4 = open_tree(r3, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x10000, @value=r1}, 0x28) 1m49.075098452s ago: executing program 0 (id=581): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000300)={0x2, 0x200, 0x4, 0x80800}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) pipe2(&(0x7f00000002c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x1ff, 0x0, 0xfffffe0000000003, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1m48.776166443s ago: executing program 0 (id=584): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000fa0080b8785d96000100000000000000000000000000000000000000000000008534df7400", "2809e8dbe11e598948324ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000004000", "f4bd000000801900", [0x0, 0x2000000000005]}}) 1m48.086181929s ago: executing program 33 (id=584): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000fa0080b8785d96000100000000000000000000000000000000000000000000008534df7400", "2809e8dbe11e598948324ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000004000", "f4bd000000801900", [0x0, 0x2000000000005]}}) 10.089587448s ago: executing program 2 (id=932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x188, 0x0, 0x0, 0x0, 0x20, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x101540, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x10000010}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) (async) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000600)={0x1, 0xfe, {0x1002, 0x0, 0x411, 0x16, 0x800000, 0x8000, 0xfffffffc, 0x0, 0xffffffffffffffff}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYRES16=r5], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x14, 0x1, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="0046ff44c89eae88f48547bcc6ab948a7ed0bf62205a91b52af13fbfebe5aa5d7a8527dcf291c40200000087603638278dd9ede0127ac85738d2f780daf4a0fdffffffa7ceb9c6c206223ea2281316573832453bc57504ef0818fa7ecb4240dbc3989a11db"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82710e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r8, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x20, 0x23, 0x29, {0x29, 0xf, "aa92db7ba922516255833d70a072dee942de0d6e65853719465fea0bf53e61564de0638cc821bd"}}, &(0x7f0000000080)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "de619bee48a9ef7667922c37e590ce195cddd653ba08983b9b29b1b803cb4daaaf51032c46675f6cbb63d1c659fff370637a88f9fbf383c9b6727d888b478f94f011cfb769325abc6e7f4613af8b6ca0bebec49a2abb770da5e836ce2d7a37704107caa6d7e2cb34b0e9a85bafc3ccc4cefa9cd8b4ca68ca9675c76c1983e36b07f5189beb74c2f60c6917"}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)={0x0, 0x18, 0x78, "adc15f964a528a6c9c11f5c7ca3edfafc012b41b3bbe0a90334dae170ea27a1b621e02b3099f762e4f3c0bb600afae508e542cb9c80a5ed9c09f002929ed138d367de9639a1724b6efd1912827fa367f4821f97227c442de98d4cc50e9f2aec0c4895c43fcdba9c5145319d8c3df3c109114da3c431dfe0b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000000280)={0x20, 0x0, 0x46, {0x44, "f15e272366571572b2ef0d430eccfbd761244d62eb004987b9718a7ee6849703ef42bb76e8cdc57bc8b0dd8900accf52be293924e3082fa6ff7ea39d223943737531e3df"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0xb}}) 8.650764606s ago: executing program 2 (id=937): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) 7.847314038s ago: executing program 4 (id=941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0x0, 0x0, 0x37, 0x0, "9fbec440185adb4355a0b995b33a564a4057c788d8b4d460e6370f7fc8878a84b63703017f69f5f088a6e5167f031b9384ce4a9c8ecba6754f722e91a07641763bcbbdcf43f987b072bb4509ae2de481"}, 0xd8) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002bc0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0x10}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e150}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000800) 7.845749909s ago: executing program 3 (id=942): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x0, @remote}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000280)=""/48, 0x30}], 0x2) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0xa}) 7.675970899s ago: executing program 4 (id=944): socket$packet(0x11, 0xa, 0x300) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000013, 0x4, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe4000000001, 0x7, 0xffffffff}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de984f7eb3c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x37}]}, 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) recvmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f00000002c0)}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/125, 0x7d}], 0x4}, 0xffff}, {{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/155, 0x9b}], 0x1, &(0x7f0000000840)=""/213, 0xd5}, 0xfffffff9}, {{&(0x7f0000000940)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/218, 0xda}, {&(0x7f0000000b40)=""/90, 0x5a}], 0x2, &(0x7f0000000bc0)=""/154, 0x9a}, 0xfffffff8}], 0x3, 0x2002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x8, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xb701, 0x7}], 0x1, 0xc, 0x0, 0x0, 0x3}}, 0xfffffffd}) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x8808, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 6.965090295s ago: executing program 6 (id=945): unshare(0x24020400) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) unshare(0x24040080) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b40000002100010026bd7000fbdbdf2564010102000000000000000000000000fc0000000000000000000000000000014e2400004e21ffff0200a0a03a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b06000100000008001f00030000005000110000000000000000000000000000000000ac1414aa0000000000000000000000006401010000000e171b7a0000000000007f0000000032010000023500000a0002000c001c00", @ANYRES32=0x0, @ANYBLOB="03000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x90) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80d1}, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r6 = socket(0x2b, 0x1, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}) io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x24, &(0x7f0000000000)={0xfeffffff, r6, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 6.21742274s ago: executing program 5 (id=947): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x10005, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0x0, 0x6, 0x0, 0x1}}) ioprio_get$uid(0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000140), 0x10005, 0x161742) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0x0, 0x6, 0x0, 0x1}}) (async) ioprio_get$uid(0x3, 0x0) (async) 5.979021399s ago: executing program 5 (id=948): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) unshare(0x66000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x1001, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @private=0xa010102}}}}) r1 = getpid() getpriority(0x0, r1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402"], 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000000)=[0xb40, 0x80000000]) r2 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x9, 0x4) 5.613764855s ago: executing program 3 (id=949): lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x7, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x406f413, 0x0) 5.442598294s ago: executing program 2 (id=950): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x4}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)="0f0c48cab3ab455152e54b85bb30dec430bfe415ce73e8b7ea6cc4cf5f54a515325b69f2453680bea67fe339a66ab01d33", 0x31}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x10000, @local, 0x3}}}, 0x30) 5.371385199s ago: executing program 4 (id=951): sched_setattr(0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) (async) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) (async) close(r1) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000002b40)={{0x12, 0x1, 0x300, 0x22, 0x70, 0x9c, 0x20, 0x6cb, 0x9, 0xf796, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x14, 0x3, 0x60, 0xa, [{{0x9, 0x4, 0xb9, 0x1, 0x0, 0x32, 0x3, 0xec}}]}}]}}, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000009600)={0x14, 0x0, &(0x7f00000095c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r5, 0x5601, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xa}, [@typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) 4.881663663s ago: executing program 6 (id=952): r0 = socket(0x18, 0x4, 0x0) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008004}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x200) syz_pidfd_open(r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x3}}}}}]}}]}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x589800) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/176) 4.459374075s ago: executing program 2 (id=953): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) accept4$unix(r2, &(0x7f0000000680)=@abs, &(0x7f0000000080)=0x6e, 0x0) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x18, 0x70, 0xfd}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xfffffffffffffefa, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x401, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9000, 0x600a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x24008050) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 3.556056994s ago: executing program 4 (id=954): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121081, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x2000, 0x5}) 3.333765395s ago: executing program 4 (id=955): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x200, 0x0, 0xffff1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x40ac03, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000004c40)=ANY=[@ANYBLOB="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"], 0x62d) 3.118828157s ago: executing program 6 (id=956): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020480) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000480), 0xc, 0x400100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000004c0)=0x3) ioctl$int_in(r3, 0x40000000af01, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x3, 0x0, 0x2d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x700, 0x1, 0xd, 0x7f}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20080002}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x82083) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000080)={&(0x7f00000001c0)=[{0x3, 0x6000, 0x1, &(0x7f0000000180)='\"'}], 0x1}) 2.791734124s ago: executing program 6 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x2442, &(0x7f00000000c0)={0x0, 0x7d8c, 0x4000, 0x1, 0xb, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.791219029s ago: executing program 5 (id=958): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb4b, 0x9, 0x18, 0x0, 0x400003}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = syz_open_procfs(0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x92) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) (async) bind$vsock_stream(r2, 0x0, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x4}, 0xffffff5a) (async) listen(r5, 0x1ff) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b3", 0x14) openat$rtc(0xffffff9c, &(0x7f0000000080), 0x307800, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) 2.361722838s ago: executing program 3 (id=959): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) 2.360371632s ago: executing program 5 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) r2 = syz_io_uring_setup(0x7268, &(0x7f0000000400)={0x0, 0x7478, 0x10, 0x400001, 0x129}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0xc, 0x110, 0xffffffff}], 0xc, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/39, 0x27}, 0x8}], 0x1, 0x10002, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000e988aac9cfdc74a3000206010d0000000000008ed9bbec00030c0003006861050002000005a67fca35814af340e87a000900020073797a300000000005000400000000000c"], 0x50}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 2.272155261s ago: executing program 6 (id=961): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x603, 0x600, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x1, 0xbe, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x757}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x6, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x3, 0x8, 0x5, 0x20, 0x3}, 0x38, &(0x7f0000000200)={0x5, 0xf, 0x38, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x0, 0x4, 0xa}, @generic={0x1e, 0x10, 0x2, "e24b85fa1d539353f3d751d66d1749d1c04fb952778e6664572538"}]}, 0x2, [{0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "64dcb6844b35cb65d3188436568bc25e7835ad868a01ecf1899d936ee9dcb2668171e801e724ba5812eaf9"}}, {0x98, &(0x7f0000000280)=@string={0x98, 0x3, "fa7703aacdf8f105e4289248e4c311a11a74e803b02f0af264a00ffacf57bab9437bedadffa448a9e278f5e9991d7cddbca7abce03ec9d22d1f5225d49d73cd2fa5b1250ab8dfb8e27f966341184e01e1671872f881f910ab6b1dc471c8ab5ed700de28c5020b401b4841765ca222c8dea76f2d88e7a48357a03983f690f381416081c7e5f65b8f734d441ea3f294e31e2af88be81fd"}}]}) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0xa, @rand_addr=0x64010101}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2, 0x0, 0x0, 0x0, 0xe966, &(0x7f0000000000)='pimreg1\x00', 0x1, 0x8, 0xfffc}) 2.174397572s ago: executing program 3 (id=962): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r4, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VIDIOC_DQEVENT(r6, 0x80885659, &(0x7f0000000240)={0x0, @src_change}) socket(0x1f, 0x5, 0x0) r7 = socket(0xa, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x3}, 0x10) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000200)={@mcast2, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x52d279e7dd5fb93f, &(0x7f0000000080)={&(0x7f0000000380)=@gettfilter={0x0, 0x2e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0x10}, {0x3, 0x10}, {0x10, 0xa}}, [{0x0, 0xb, 0x3}, {0x0, 0xb, 0xfffffff8}]}, 0x28}}, 0x20004801) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af60, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x2, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5}, {0xfff1, 0xb}, {0xfff1, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) 1.578310949s ago: executing program 5 (id=963): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x4}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)="0f0c48cab3ab455152e54b85bb30dec430bfe415ce73e8b7ea6cc4cf5f54a515325b69f2453680bea67fe339a66ab01d33", 0x31}], 0x1, 0x0, 0x0, 0x4000}], 0x1, 0x80) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x10000, @local, 0x3}}}, 0x30) 1.080620272s ago: executing program 2 (id=964): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x34}}, 0x800) 837.75283ms ago: executing program 2 (id=965): syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x50, r3, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRES64=r0, @ANYBLOB=',rootmode=00000000000000000040000,use']) socket(0x2, 0x3, 0xff) socket$kcm(0x21, 0x2, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYRES16=r1], 0x0) 749.61681ms ago: executing program 4 (id=966): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x0, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x80c0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) fcntl$setstatus(r1, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r1, 0x8, r5) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) write$tun(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="0000809b60e7d167012006ffff0100000000000000000000000000010000000000000000000000000000000073007fb9670000002b03000000000000040109c91000000000000000000000ffffffffffff0101003b00052165000000290802060000000000000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000ffff64010101ff0200000000000000000000000000010c008949660000000004020400000000ff020000000000000000000000000001ff0100000000000000000000000000012e0a0405c9080400fe800000000000000000000000000037fe88000000000000000000000000000100000000000000000000ffffac1e0101fc020000000000000000000000000001fe80000000000000000000000000002f0000000000000000000000000000000300004e2100004e220000000000000000d9cb3572ac1afb10868c9278bcad6eb53ff724c5f0794355d102cbb1cd2a670c990380c8a4c2e8f3d8603669d9d2f9c8e61f593a5fde8fa93c7a3c03656e321826bf18db0fc116506631dc0e4025a71ae8e24300e5acf347a8f341ca9a6081ca"], 0x14c) rmdir(&(0x7f0000000100)='./control\x00') r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000300)) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0x19, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private1}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x0, @multicast1}}]}, 0xc8}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000340)={0x0, 0x5, 0x5, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca249435, &(0x7f0000000740)={0x0, 0x3, @start={r9, 0x0, "6f4f5ba7d084e9e931aa83adc08dfbd3e4bb49a6ae0c5f2b9dc1fa6a05e521c76cd330e943531833ff11775ac93c788173d1f296cb36691df48c95204dbbe4338dfe6e18a594b6796ba0a0586b081d1024a61079d5d2bba1926209dee2c002705bf86d7b6bcb6f69b874c2a639f82defb849172d29e0b1d7170340c041f9a529a0c6c5c752eb59222d2a0c8a31f675e64c6ccf2901b06a158de44cdc667ffd416389f0437bfc27e42842d34b34a299bfb49ebc8acf309bb2b643ed4f5b0b9e99cc6ddaae7723a1e1202ed47d0f0bdf9790b3ed6241973ef2bdf2f953c8a7aa2f5598f295b53be44f0e2d6dc2d09c2c050dea749d43c518604223724529b5cac75ad218930ccbe004d2321427efe9d66105701a00bfa2900b516d2aaf2e4cd8ba6a2efaa6f52fc4b4f98adca34d1e3b1b33e41c31c5e50c6657fe9488acb2d98a85313f42738f1eb3483303a222f0def906ec901218954f96da181615234ea18fc174b8bdcab6c2c00dba8aae9ad20694e5e520836159bb8a0794397136b6dd371b1e9dd36a5660b605d81715f83e2ba312637284569e280f88a1bce1055fd3e65f3c153f97f5c85c3bf7e750c9ffb168cf76c37bcc5d185dcffd022e713f6c14c0f3674ad1d9b4104041945a7b84ef66e167f162b3d19abb08b5bac599c4495e702d201c1a91507a6c1b9bf75d56b3014da30970f59813982c7a65e8e21197076cd031805b7579d6be30fe2596297ac7d042ef7f40c0afd3c3a7f5146110314a87f4ed9333f14977e5646de4cfdbf061e6ebf1d9e475e038bb7c0d70d545d5383d8869a13e29903b302769b5802fede7cd1ca8b9cd4944344407017e25fc164d4961946096017f81415dc5d6a31f21854a0b1a67c92ae25f8208259093bc9a736715ce63d6798dba9b7eef02aeae3750090db56909d37355439bf865d0dd72b8a1807b18180d1793b029fa28e92270f78c70b6ea1252965abe45d5ca10cc6f0d603df12e473cc7d0d191a43b269f2f245ed821912a82b0cc138101d65321ae902ca62f444d0cf4c7e5153fecbb0faa96cb405721cc85a7dd5eb8f802775a98178a3ee7856c1c7c3bdaffc6998a7cd14ba6285b01b0f7283019ab7f593135c34634aaf067a2e1a1d0029724052041a8c2fe74572f2b72e40669dfb8358b7a0b45f9d881a714c9c5ee65293ede0d024ae223b226ac66568ad25fa26d936a4bf748bae6afb585ae4d1666582ff167fc5e1cbe64625402270cd0ef6c0df4237cd98cb345b20f968ddedbe95fab73aecfd7cd5784469449e2e0e4b930079bb58739bc82495028f82787bb88473d1b55afd678a5319293ad68a4f1acc63f1d768bb2326b452d80a1d413a41549f3709d176154f380c0528802c6ce640b02dbf104d74a43fcac8be78b39b6a42b96fa157ec4c0f39f2a86e2761c7d69a2f7454b8ff50ad3", "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"}, [0x9f, 0x1, 0x2, 0x0, 0x2, 0x1, 0x2, 0x8, 0xb3, 0x8001, 0x10001, 0x6, 0x11f, 0x3, 0x7ffffffc, 0x5, 0xa1f8, 0x80, 0x9881, 0xc, 0x8, 0x9, 0x8, 0x8, 0x0, 0x7, 0x100000000, 0x2, 0x6, 0x8, 0x80000001, 0x40, 0x7ff, 0x7, 0x100000001, 0x6, 0xf, 0x9, 0xa, 0xffffffffffffff00, 0x1, 0x9, 0x0, 0x6, 0x40, 0x7, 0x6, 0x3ff, 0xfffffffffffffffa, 0x1800000000, 0xbc, 0x4, 0xad, 0x5, 0x54, 0x3620, 0x7, 0x2, 0x7, 0x8, 0xb85, 0xa42c, 0x3, 0x4]}) write$binfmt_script(r7, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ']'}, {0x20, '\x00'}, {}, {}], 0xa, "29e3c7479b83880559771927948cf01bb53d7ed89c6c2fb74fb83b795ea9fe098e0c561e4d717e5fe2d8b3dc"}, 0x3f) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_ENUMSTD(r6, 0xc0405619, &(0x7f0000001640)={0x5, 0xc000c, "008e8a381e2397687ee2fe24e41b647cee2643b7000000ca", {0x12, 0x9}, 0xb}) 669.516974ms ago: executing program 3 (id=967): modify_ldt$write2(0x11, &(0x7f0000000000)={0x1d30, 0x0, 0x400, 0x1}, 0x10) (async) madvise(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x19) (async) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 527.985792ms ago: executing program 5 (id=968): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={0x0}) (async) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) fchdir(0xffffffffffffffff) (rerun: 32) r4 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000640)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x2}, 0x1c) (async) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0e0000000500"}) syz_open_dev$hidraw(&(0x7f00000000c0), 0x6, 0x400000) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0) (rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000000000000200000100000000000000030900010073797a30000000000900020073797a320000000014000000000a0000000000000000000000000000c834cec0323b91406184e657ba4720b63e"], 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) syz_emit_ethernet(0x51, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa1608004dfc004300650000003a9078e0000001ac1414aa7f000001ac141439ac1414bbac1e0001e0000001004e2200a62da2c298b3c995ca00e03216267853ad7caeaff819373133"], 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x40000000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 1.384551ms ago: executing program 3 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107000000000000000067000000080001000c000000080003004770e19b2861ca6b1ed98fc25ceec787b6e0d3a2dab1bdad9955e939694a9c33e5c3713bf6776f42bf11af1e63483d7fa25a8755da8894c2a2cebdddda184ec3868c0db3cc94033524e05d857fca381e1e98ab7518eda813e22a9f7e2799a6757ea5d0ad46fdd6415fbb165a325a84c0a5f0074ff5cde5bed9abf112dad42268bea03329d8eeb72c19ce7a2a9cc2ce216748db4a19649173c004a32024d628a9333e316d279810702ec2323eec70a79a47c6367462b38fee62181afd89b8cc836aa8c8c3fc0811776a5525b795870101cb956147b9a5655387954dd71f50892e55f365a11daad2033f5e10a3", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="0180c2000000c200000008004500001c0000000000119078000000000000000000004e2000089078"], 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r7 = open_tree(r6, &(0x7f0000000080)='\x00', 0x81901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x70, 0x20000}, 0x20) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$inet6(r10, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="e8c10f0fd59c1bd8fa55932b69c2152cd8afef35d2698d53fead111e84b9886bbfe1136a346e20750dd5b1d679507fe8c34b7512d36a863588573d3dc70c88f119f75f44c766d24efaba3f2faaa8c34c5e63805d9f57e7f2482f1f279f5a57de1a5d4928f63207ca55fa1dc6f613463cf2a4d5b578d8a4e378dded9712859f23f8c969f6bad0eb26673b2fe8883d774151e6741e97abdf", 0x97}, {&(0x7f0000000000)="e76f3bc40cbc6493cb8a88252c16bdb106fb1a4fdbbd8fcd611ded2564c8fa6074517f34fad72e2a24b7138958d9d12382a4e1954ada33402fb015d82ea7815997e1a2d7bf7bdef5cd7a68decf2b88450d4287f93570ce11885f08", 0x5b}, {&(0x7f0000000340)="1af05205f2be5c410f81b6abd45613b98bc0d020b95cf9935d6c4b389d92aa698cc408c8786b2e788092162310c97b98e7a62cc7eabe80457e49fed688695e1644a43ec5a95a743f5bf1170a6512f301382b72a8da5255b2c5c7554eb2db168a04f9eb3f1ab8da6d327448cb6c938981789378ef3170cd2bcd2704e22883ea301986b9056950c3833d9bdde9e593210d2f11806aeec76ea8755eb4296dea7345c2ed58fe53593ad5675835d47106dcb3222ba974c7256f4b7966ceb7", 0xbc}, {&(0x7f0000000400)="73054c8fa6be87f68ae925923a7797a155b6f809752cd569e5758544ad521bf5ec4caea9d10e19960c78da1c3900958cc87f32bce7bbecceb4dfd5f52c9bd5f4f301298d3828b343513a573eef127663afaeaf16751dfd0496716b36fc409329d9ca1b79bd4872e81386ca44cc15903d5a22fdf4898f410eda506f1d690c1bcd2d527a81ef873bc882c1526233da215096c47a", 0x93}, {&(0x7f0000000280)="61c7318eea6b10e9216a91e51d4e6b4c54", 0x11}, {&(0x7f00000004c0)="d4d62beacdb311e0972454012fe5b31c21a91b35f9e6872e89b2fda9b9db8c0ce091385049f8f706cb5c3255e83886cfb3aeb1536cc9aa646d4f487777b8879fd5a37b8f40396eff021d02a617a59938e8b6d42c58f826e3425349cf1e038aa9c38fc5ea4284e96e221385b905c4e82ebfdb0b12", 0x74}, {&(0x7f00000002c0)="32a38f1bfacbf862aedf7cff7d3e425c277c96320e865be8f3", 0x19}], 0x7}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)="1a039aa96144fad3c37aa94a9e1965652ccaf419a2238dbdd082c19608286dffba597a058d3023b4729a1e7bc238cdcf7d8502cc50285b9c2e69ed96ecf36fd5e17ed5d04ad86ea65ca6730bf55a41d021d47cf6f51848dc84f6c0c136334ab92429075e0adb9d06dd81058f3f203ca914f226e2c613d669d1c4e774dde26ef524", 0x81}, {&(0x7f0000000840)="b9840d8d3634a722af78c347ba744d6686209228ad3548796b67359f6befc6921c50b6175c27f9f32f78e53f88f083e528b33a78ad72b59ac94cc58f3911577294ea9e19599cf211074dd1e817c9a73217", 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="62dd61bf3e58a4d1c1150120eb317c4443b8de5c5fb44d3381ca8e796e96db62b83f6c3cc1cb9ef6fc4e753a0b0ff6", 0x2f}, {&(0x7f0000000e40)="12583f12deeb62d501cec87db95bc0ffc2cee2560fabcc01f4f5661a59c99f2ba0ee4849f88622285ce9b13354a0efe943a0cbcc8491c94e43fd1c7c71079f192fad1751c7bde6a41992a2cf614c3099f6510444b21ad54a50a468fc8d4a2bae7650829f41b9a2571026c998ea24e316fb792dcb7e159834efbec6ca6fe68826963afe0991ebb90acbb700087a", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f80)="36d0e54a3c83cd5a141d33c3cd0c373ed4e966bfdb92249816337e9602eb3a61c281f864456aff00f3c5925643cdaaf3ca6f0c62d015c16861f86551ef403cf40a7520be5aac17b2beb1b2e0dc49bf95166fbb432a665d34868dac70812cdb7c24328118e4104137fb64f2935321ff0d81d7d972e7a79c079f225c8981fd48dabb3702f172840a0aaaf107566930", 0x8e}, {&(0x7f0000001040)="4f67857ac7707e915e00047bd1c4a276a26a6d15e76ca8062dee193bcfa526ec8ffee3af3957fc297279d2e70e7e392d8e9c743570b70d2864786d51f2270e", 0x3f}, {&(0x7f0000001080)="9676822591d232b46ee195b66ca39ac6f07ae3d861f15f0d88", 0x19}, {&(0x7f00000010c0)="b0c8cb68dc471301228f1620acdf3848f856144b0a4f06877ccbd79a548897293f870ea7027fa17a544b4fcbfc6d85aebe5399a100a0e8af385c579c6b21ba55524d1b9fb1585f5f54e5731d94fd3a6e72c1cd31cb7856fdf48e37c302643ea6ad1e6bb94eab3903422aa93296da4f9ec23c70aba93f655fa5119a897ef3519ced79d40fc75207834ec0c385ac4f81277c9b46268f9b66fe4c52ce1d41197415d5e694f76e71cb835435aaaad1db5890653d927d70acb49b683f341c758a3024fce0361e", 0xc4}, {&(0x7f00000011c0)="4a58869e", 0x4}], 0x5}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000014c0)="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", 0x9e6}, {0x0}], 0x2}}], 0x5, 0xf6e4bfd48a0bd8ae) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r8) r11 = socket$inet6(0xa, 0x6, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) 0s ago: executing program 6 (id=970): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4a, 0x8001, 0x0, 0x9, 0x3, 0x80000000, 0x2, 0x8}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000001c0)={[{0x4, 0x5, 0x80, 0x4, 0x4, 0x4, 0x9, 0x5, 0xb6, 0x0, 0x40, 0x9}, {0x3bea, 0xfff9, 0x6, 0x4, 0x5, 0x4, 0xf, 0xfe, 0x3, 0x8, 0x5, 0x2, 0x4}, {0x8, 0x8, 0x9, 0x6a, 0xfc, 0x7, 0x6f, 0x6, 0x4, 0x2, 0x6, 0x7, 0x8}], 0xf}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000076003e70"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48848}, 0x20004804) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000400)="f78faf8f95d9bdd56a64cdf2e0eb924ff601240283baa4876119cc8ee4b855ed86c5a281021d8eb012f93c6feecc4eb677709e97fcaef9bb63cae4cbf946234403e0c2924e40c50c90ad859c8c1191f9a90439a595fc8982e7e00252eff8af7a3aa0e10ac7750d915ba4a2a67ee8200d18216fda181ad01e29734fc0f13db3bb5ad1be651661a0c1f054ebb747e372e19fdc45b38285c7cc3595f917288c86d5c7fb26986c550ba798cf1e7260d8ae46b5d8", 0xb2}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000005c0)="c381a10a007a33ea8254352f07d7856ba4fc88b8c6b7ae6d2265ee26365ec75af707fe35c7bb607e49274d8e672cb4d02b0372b145446ffd37259e68283fc724683d7c8f99d0958ab3bbd3c3c20908da6902c1791ff0cffa994009a6e29225c9b05ddda4334a5dd682d2d2e3dd0f6aa1ae6d6c850cdc94a9c050d99a6a89315f809fe533e52a6d7bf58fc87f5dc7ed7327bb5d7167ec7be85e7a817135d7f425bf957e1c448a41deba60558aeeeff929dc52b67c569c0452", 0xb8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000680)=[@rthdrdstopts={{0x1a4, 0x29, 0x37, {0x3a, 0x32, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0x66, "cf8ce4f77f727af81da291a893741eaaef2364fb4cc3c567d5a06eb649c814314d19355fae3d9164022aa9bf05d8709ceaac9a97bc0db8d71a801b3be624acc8d3d4cac9c26a44aa255df9142b299279e0e8b840ffbacda57f7af784baf45fa83326c7adee55"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @generic={0x5, 0xfa, "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"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr={{0x84, 0x29, 0x39, {0x0, 0xe, 0x1, 0x40, 0x0, [@empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x11}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x9}}, @dontfrag={{0x10, 0x29, 0x3e, 0xfffffff8}}, @hopopts_2292={{0x5c, 0x29, 0x36, {0x5e, 0x8, '\x00', [@hao={0xc9, 0x10, @empty}, @padn, @calipso={0x7, 0x30, {0x0, 0xa, 0x6, 0xffff, [0x0, 0x3, 0x80000000, 0x382, 0x8]}}]}}}, @dstopts={{0x64, 0x29, 0x37, {0x0, 0x9, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x8, 0x6, [0x8, 0x0, 0xfffffffffffffe00, 0x400, 0xe0a, 0xe7]}}, @jumbo, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xde}]}}}, @dstopts={{0x24, 0x29, 0x37, {0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x34}, @enc_lim={0x4, 0x1, 0xf}, @enc_lim={0x4, 0x1, 0x6}]}}}], 0x32c}}], 0x3, 0x0) unshare(0x20040600) unshare(0x24060400) unshare(0x4020400) kernel console output (not intermixed with test programs): 494876][ T6546] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 442.505742][ T40] usb 5-1: config 7 has no interface number 0 [ 442.512569][ T40] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0 [ 442.523627][ T6546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.543140][ T891] usb 1-1: config 0 descriptor?? [ 442.577076][ T40] usb 5-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.593937][ T6546] usb 3-1: config 0 descriptor?? [ 442.653182][ T40] usb 5-1: config 7 interface 187 has no altsetting 0 [ 442.706795][ T40] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 442.724899][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.745128][ T40] usb 5-1: Product: syz [ 442.767914][ T40] usb 5-1: Manufacturer: syz [ 442.779743][ T40] usb 5-1: SerialNumber: syz [ 442.823864][ T6546] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 442.959867][ T5957] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16 [ 442.975528][ T6546] usb 3-1: USB disconnect, device number 30 [ 443.021104][ T6546] usblp0: removed [ 443.069753][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.095481][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.147367][ T5897] usb 6-1: USB disconnect, device number 15 [ 443.147382][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.162194][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 443.197097][ T40] usb 5-1: Unknown endpoint type found, address 0x07 [ 443.225449][ T40] usb 5-1: Not enough endpoints found in device, aborting! [ 443.247363][ T891] nzxt-kraken2 0003:1E71:170E.000A: item fetching failed at offset 2/5 [ 443.293654][ T891] nzxt-kraken2 0003:1E71:170E.000A: hid parse failed with -22 [ 443.333236][ T891] nzxt-kraken2 0003:1E71:170E.000A: probe with driver nzxt-kraken2 failed with error -22 [ 443.384490][ T6546] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 443.437890][ T5957] usb 5-1: USB disconnect, device number 34 [ 443.604622][ T6546] usb 3-1: Using ep0 maxpacket: 32 [ 443.611775][ T6546] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 443.626638][ T6546] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 443.647391][ T6546] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 443.674023][ T6546] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.712539][ T6546] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 443.746483][ T6546] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 443.774333][ T6546] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 443.811613][ T6546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.841153][ T6546] usb 3-1: config 0 descriptor?? [ 444.064968][ T6546] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 444.227381][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.249086][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.631962][ T6546] usb 3-1: USB disconnect, device number 31 [ 444.686063][ T6546] usblp0: removed [ 444.711171][ T8328] syz.0.560 (8328): drop_caches: 2 [ 444.835427][ T5914] usb 1-1: USB disconnect, device number 35 [ 445.281002][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.287675][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.720087][ T8387] syzkaller0: entered promiscuous mode [ 445.726087][ T8387] syzkaller0: entered allmulticast mode [ 445.822515][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.834135][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.848450][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.858693][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.870039][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.888846][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.909973][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.929049][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.940744][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.953308][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 445.977243][ T8394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.141766][ T8402] tipc: Started in network mode [ 446.148765][ T8402] tipc: Node identity 0adf79f0a7ab, cluster identity 4711 [ 446.173916][ T8402] tipc: Enabled bearer , priority 0 [ 446.184549][ T8403] syzkaller0: entered promiscuous mode [ 446.194536][ T8403] syzkaller0: entered allmulticast mode [ 446.243940][ T8403] tipc: Resetting bearer [ 446.316212][ T8403] tipc: Disabling bearer [ 446.534999][ T5897] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 446.871120][ T5897] usb 5-1: device descriptor read/64, error -71 [ 447.044562][ T5957] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 447.124315][ T5897] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 447.202282][ T5957] usb 6-1: not running at top speed; connect to a high speed hub [ 447.224363][ T5957] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 447.274539][ T5897] usb 5-1: device descriptor read/64, error -71 [ 447.384586][ T5897] usb usb5-port1: attempt power cycle [ 447.538513][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.550505][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.562080][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.573623][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.585624][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.744388][ T5897] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 447.775331][ T5897] usb 5-1: device descriptor read/8, error -71 [ 448.054450][ T5897] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 448.075227][ T5897] usb 5-1: device descriptor read/8, error -71 [ 448.212293][ T5897] usb usb5-port1: unable to enumerate USB device [ 448.297660][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 448.433468][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.440973][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.448847][ T8429] bridge_slave_0: entered allmulticast mode [ 448.458231][ T8429] bridge_slave_0: entered promiscuous mode [ 448.468172][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.475925][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.483209][ T8429] bridge_slave_1: entered allmulticast mode [ 448.491612][ T8429] bridge_slave_1: entered promiscuous mode [ 448.544490][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.563309][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.620158][ T8429] team0: Port device team_slave_0 added [ 448.630181][ T8429] team0: Port device team_slave_1 added [ 448.682192][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.691789][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.721087][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.740205][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.747560][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.774145][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.863722][ T8429] hsr_slave_0: entered promiscuous mode [ 448.871194][ T8429] hsr_slave_1: entered promiscuous mode [ 448.879355][ T8429] debugfs: 'hsr0' already exists in 'hsr' [ 448.886290][ T8429] Cannot create hsr debugfs directory [ 449.193634][ T8429] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.208939][ T8429] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.223376][ T8429] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.250879][ T8429] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 449.674788][ T5835] Bluetooth: hci0: command tx timeout [ 449.771748][ T5957] usb 6-1: string descriptor 0 read error: -71 [ 449.805036][ T5957] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.825600][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.837225][ T5914] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 449.855718][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.877018][ T5957] usb 6-1: can't set config #1, error -71 [ 449.896114][ T5957] usb 6-1: USB disconnect, device number 16 [ 449.987271][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.022134][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.029490][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.039646][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 450.062278][ T5914] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 450.085795][ T5914] usb 4-1: config 0 has no interface number 0 [ 450.108168][ T5914] usb 4-1: too many endpoints for config 0 interface 191 altsetting 46: 38, using maximum allowed: 30 [ 450.121170][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.128410][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.146165][ T5914] usb 4-1: config 0 interface 191 altsetting 46 has 0 endpoint descriptors, different from the interface descriptor's value: 38 [ 450.162143][ T5914] usb 4-1: config 0 interface 191 has no altsetting 0 [ 450.169955][ T5914] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 450.200247][ T8461] vlan2: entered allmulticast mode [ 450.209867][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.223119][ T5914] usb 4-1: config 0 descriptor?? [ 450.334608][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.455453][ T5957] usb 4-1: USB disconnect, device number 39 [ 450.463985][ T8429] veth0_vlan: entered promiscuous mode [ 450.509328][ T8429] veth1_vlan: entered promiscuous mode [ 450.600393][ T8429] veth0_macvtap: entered promiscuous mode [ 450.631836][ T8429] veth1_macvtap: entered promiscuous mode [ 450.679046][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.697081][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.717877][ T74] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.717945][ T74] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.717984][ T74] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.718021][ T74] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.870788][ T6995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.870821][ T6995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.915688][ T5914] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 450.945679][ T2125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.958982][ T2125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.088962][ T5914] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.106011][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.135502][ T5914] usb 3-1: Product: syz [ 451.140055][ T5914] usb 3-1: Manufacturer: syz [ 451.151232][ T5914] usb 3-1: SerialNumber: syz [ 451.182521][ T5914] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.210551][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.299439][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.336793][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.374477][ T8471] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 451.524862][ T5957] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 451.534300][ T8471] usb 4-1: Using ep0 maxpacket: 8 [ 451.546149][ T8471] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 451.556593][ T8471] usb 4-1: config 11 has no interface number 0 [ 451.563931][ T8471] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 451.575730][ T8471] usb 4-1: config 11 interface 95 has no altsetting 0 [ 451.588399][ T8471] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 451.607910][ T8471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.617528][ T8471] usb 4-1: Product: syz [ 451.621862][ T8471] usb 4-1: Manufacturer: syz [ 451.627118][ T8471] usb 4-1: SerialNumber: syz [ 451.651169][ T891] usb 3-1: USB disconnect, device number 32 [ 451.659572][ T5957] usb 7-1: device descriptor read/64, error -71 [ 451.724783][ T5839] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 451.765997][ T5835] Bluetooth: hci0: command tx timeout [ 451.853719][ T8476] libceph: resolve '400' (ret=-3): failed [ 451.870161][ T8471] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -8 [ 451.888364][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.901281][ T5839] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 451.911913][ T8471] usb 4-1: USB disconnect, device number 40 [ 451.915633][ T5957] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 451.935981][ T5839] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 451.967189][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.990542][ T5839] usb 6-1: config 0 descriptor?? [ 452.019630][ T5839] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 452.034760][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 452.050088][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 452.067483][ T5839] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 452.078931][ T5839] usb 6-1: media controller created [ 452.087162][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.102916][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 452.107972][ T5957] usb 7-1: device descriptor read/64, error -71 [ 452.120193][ T5839] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 452.147332][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 452.279880][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 452.282809][ T5957] usb usb7-port1: attempt power cycle [ 452.289346][ T5839] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 452.329039][ T5839] usb 6-1: USB disconnect, device number 17 [ 452.474637][ T9] usb 3-1: Service connection timeout for: 256 [ 452.480879][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 452.512435][ T9] ath9k_htc: Failed to initialize the device [ 452.556297][ T891] usb 3-1: ath9k_htc: USB layer deinitialized [ 452.631700][ T5839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 452.705184][ T5957] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 452.735025][ T5957] usb 7-1: device descriptor read/8, error -71 [ 453.024461][ T5957] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 453.066352][ T5957] usb 7-1: device descriptor read/8, error -71 [ 453.094598][ T5839] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 453.195000][ T5957] usb usb7-port1: unable to enumerate USB device [ 453.269923][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 453.280440][ T5839] usb 3-1: not running at top speed; connect to a high speed hub [ 453.293788][ T5839] usb 3-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 453.306476][ T5839] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 20, changing to 4 [ 453.322780][ T5839] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 22, changing to 4 [ 453.338933][ T5839] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 63752, setting to 1023 [ 453.360333][ T5839] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.373203][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.374464][ T5957] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 453.389152][ T5839] usb 3-1: Manufacturer: 䞺㍯圵㮔斴䗇綁焘굜펥൙濶쾕洌蚾ꀄ朴延ၙᇔ材Δ峭쉜훜춇騄἟샠켥뚯躒룸ꖵ‷蔗᪓᪐웟ဇ䶲ȉ鍢隊昶ẶἌ鸕䦋煤僣⇀踶꒮孬鱟뵫໼ⲥ枪쁻㘏︻⍒五돎㣏艒⥐릪扭嘯ꆠ㣢簺෨㓖炔햱୾䙋툙恥럈뗃ꔟጩ␠侃ᦂ⸧굈의 [ 453.389196][ T5839] usb 3-1: SerialNumber: ఌ [ 453.626883][ T5957] usb 6-1: device descriptor read/64, error -71 [ 453.837541][ T5835] Bluetooth: hci0: command tx timeout [ 453.894358][ T5957] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 454.036337][ T5957] usb 6-1: device descriptor read/64, error -71 [ 454.159993][ T5957] usb usb6-port1: attempt power cycle [ 454.514813][ T5957] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 454.565152][ T5957] usb 6-1: device descriptor read/8, error -71 [ 454.817459][ T5957] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 454.845218][ T5957] usb 6-1: device descriptor read/8, error -71 [ 454.965582][ T5957] usb usb6-port1: unable to enumerate USB device [ 455.723760][ T5839] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 455.732289][ T5839] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 455.740573][ T5839] usb 3-1: 2:1 : format type 0 is not supported yet [ 455.825813][ T5839] usb 3-1: USB disconnect, device number 33 [ 455.907988][ T8537] __nla_validate_parse: 8 callbacks suppressed [ 455.908003][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.614'. [ 455.933335][ T5835] Bluetooth: hci0: command tx timeout [ 455.939916][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.614'. [ 455.968411][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.614'. [ 456.082473][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.134734][ T6546] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 456.294293][ T6546] usb 5-1: Using ep0 maxpacket: 32 [ 456.420477][ T6546] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.488274][ T6546] usb 5-1: config 0 has no interface number 0 [ 456.520717][ T6546] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.547614][ T6546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.557386][ T6546] usb 5-1: Product: syz [ 456.562838][ T6546] usb 5-1: Manufacturer: syz [ 456.572517][ T6546] usb 5-1: SerialNumber: syz [ 456.619016][ T6546] usb 5-1: config 0 descriptor?? [ 456.650915][ T8548] netlink: 76 bytes leftover after parsing attributes in process `syz.6.616'. [ 456.725353][ T6546] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.144613][ T6546] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 457.152144][ T6546] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 457.674556][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 458.786414][ T8570] kvm: user requested TSC rate below hardware speed [ 458.823530][ T8570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 459.048448][ T891] usb 5-1: USB disconnect, device number 39 [ 459.080266][ T8577] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 459.377583][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 459.488451][ T8588] syzkaller1: entered promiscuous mode [ 459.494280][ T8588] syzkaller1: entered allmulticast mode [ 459.584370][ T5897] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 459.654782][ T891] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 459.744482][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 459.757282][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.767237][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 459.799773][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 459.821297][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 459.834742][ T891] usb 5-1: Using ep0 maxpacket: 16 [ 459.841579][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 459.845797][ T891] usb 5-1: descriptor type invalid, skip [ 459.854284][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 459.867846][ T891] usb 5-1: descriptor type invalid, skip [ 459.879383][ T891] usb 5-1: config 0 has no interfaces? [ 459.892187][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 459.909502][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.921063][ T891] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=6c.b8 [ 459.921829][ T5897] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.930432][ T6546] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 459.939592][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.956766][ T891] usb 5-1: Product: చ [ 459.961253][ T891] usb 5-1: Manufacturer: ࠇ [ 459.965985][ T891] usb 5-1: SerialNumber: syz [ 459.983730][ T5897] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 459.991748][ T891] usb 5-1: config 0 descriptor?? [ 459.999329][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.011619][ T5897] usb 6-1: Product: syz [ 460.016662][ T5897] usb 6-1: SerialNumber: syz [ 460.029320][ T5897] usb 6-1: config 0 descriptor?? [ 460.034690][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 460.049017][ T8583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 460.062793][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.106802][ T6546] usb 7-1: config 0 has an invalid interface number: 218 but max is 0 [ 460.121114][ T6546] usb 7-1: config 0 has no interface number 0 [ 460.137834][ T6546] usb 7-1: config 0 interface 218 has no altsetting 0 [ 460.154022][ T6546] usb 7-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=b6.d6 [ 460.175248][ T6546] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.206458][ T6546] usb 7-1: config 0 descriptor?? [ 460.235364][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 460.252992][ T5897] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 460.272466][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 460.309266][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.327034][ T9] usb 4-1: Product: syz [ 460.333205][ T8583] syzkaller0: entered promiscuous mode [ 460.339057][ T9] usb 4-1: Manufacturer: syz [ 460.344499][ T8583] syzkaller0: entered allmulticast mode [ 460.350544][ T9] usb 4-1: SerialNumber: syz [ 460.376910][ T9] usb 4-1: config 0 descriptor?? [ 460.434132][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.454380][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 460.509780][ T6546] usb 7-1: string descriptor 0 read error: -71 [ 460.526775][ T6546] usb 7-1: USB disconnect, device number 6 [ 460.542368][ T5834] usb 6-1: USB disconnect, device number 22 [ 460.605410][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 460.624346][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.639516][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.678347][ T9] usb 4-1: USB disconnect, device number 41 [ 460.681101][ T3965] usb 4-1: Failed to submit usb control message: -71 [ 460.711968][ T3965] usb 4-1: unable to send the bmi data to the device: -71 [ 460.724214][ T3965] usb 4-1: unable to get target info from device [ 460.740263][ T3965] usb 4-1: could not get target info (-71) [ 460.754516][ T3965] usb 4-1: could not probe fw (-71) [ 461.289810][ T8617] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 461.328833][ T8614] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 461.690494][ T5957] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 461.867459][ T5957] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.878271][ T5957] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.887894][ T5957] usb 6-1: config 1 has no interface number 0 [ 461.894376][ T5957] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.906838][ T5957] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 461.930060][ T5957] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 461.945163][ T5957] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 461.965797][ T5957] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.975209][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.983390][ T5957] usb 6-1: Product: syz [ 461.988184][ T5957] usb 6-1: Manufacturer: syz [ 461.992886][ T5957] usb 6-1: SerialNumber: syz [ 462.068022][ T8634] netlink: 'syz.3.640': attribute type 4 has an invalid length. [ 462.364017][ T6546] usb 5-1: USB disconnect, device number 40 [ 462.844360][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 463.004275][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 463.096972][ T5957] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 463.107782][ T9] usb 7-1: config 1 interface 0 altsetting 222 bulk endpoint 0x82 has invalid maxpacket 1024 [ 463.118541][ T5957] cdc_ncm 6-1:1.1: bind() failure [ 463.123882][ T9] usb 7-1: config 1 interface 0 altsetting 222 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.123919][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 463.131529][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.158366][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.167454][ T9] usb 7-1: Product: syz [ 463.172228][ T9] usb 7-1: Manufacturer: 跕漡ꈝ씉袂輄ࠪ㘕ᄡⵒꅛ摡ህ聻䇃⹌翘㗍펨듦螴仞ꚼ㸶▋ጞ虨赂 [ 463.186559][ T9] usb 7-1: SerialNumber: syz [ 463.209897][ T8639] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 463.221960][ T5957] usb 6-1: USB disconnect, device number 23 [ 463.263110][ T8639] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 463.531988][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 463.569801][ T9] usb 7-1: USB disconnect, device number 7 [ 464.804370][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 464.816874][ T5839] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 464.997609][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 465.005997][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 465.026092][ T9] usb 7-1: config 1 interface 0 altsetting 222 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 465.039722][ T5839] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 465.052587][ T8669] binder: 8663:8669 ioctl c00c620f 800001c0 returned -22 [ 465.065828][ T9] usb 7-1: config 1 interface 0 altsetting 222 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.086438][ T5839] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 465.122812][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 465.154493][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 465.184357][ T5839] usb 4-1: Product: syz [ 465.191314][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 465.202065][ T5839] usb 4-1: Manufacturer: syz [ 465.207369][ T5839] usb 4-1: SerialNumber: syz [ 465.212308][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.223326][ T9] usb 7-1: Product: syz [ 465.228077][ T9] usb 7-1: Manufacturer: syz [ 465.233131][ T9] usb 7-1: SerialNumber: syz [ 465.258390][ T5839] usb 4-1: config 0 descriptor?? [ 465.265354][ T8639] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 465.273325][ T8659] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 465.283795][ T5839] hub 4-1:0.0: bad descriptor, ignoring hub [ 465.320755][ T5839] hub 4-1:0.0: probe with driver hub failed with error -5 [ 465.564400][ T5897] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 465.735811][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 465.741253][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 465.778644][ T5897] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.835135][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.873186][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.969588][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.990741][ T5897] usb 3-1: Product: syz [ 466.006829][ T5834] usb 4-1: USB disconnect, device number 42 [ 466.014321][ T5897] usb 3-1: Manufacturer: syz [ 466.020347][ T5897] usb 3-1: SerialNumber: syz [ 466.139438][ T8682] netlink: 'syz.4.653': attribute type 4 has an invalid length. [ 466.188162][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.651'. [ 466.321755][ T8684] loop6: detected capacity change from 0 to 524287999 [ 466.378113][ T5897] usb 3-1: 0:2 : does not exist [ 466.391301][ T5897] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 466.452086][ T5897] usb 3-1: USB disconnect, device number 34 [ 466.541824][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.654377][ T5834] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 466.824258][ T5834] usb 6-1: Using ep0 maxpacket: 16 [ 467.055492][ T5957] IPVS: starting estimator thread 0... [ 467.073045][ T9] usb 7-1: USB disconnect, device number 8 [ 467.154463][ T8686] IPVS: using max 37 ests per chain, 88800 per kthread [ 467.984461][ T5897] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 468.215262][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 468.225259][ T5897] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 468.240131][ T5897] usb 3-1: config 0 has no interface number 0 [ 468.251931][ T5897] usb 3-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 468.282265][ T5897] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 468.285227][ T5957] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 468.319132][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.339536][ T5897] usb 3-1: Product: syz [ 468.345318][ T5897] usb 3-1: Manufacturer: syz [ 468.353750][ T5897] usb 3-1: SerialNumber: syz [ 468.374343][ T5897] usb 3-1: config 0 descriptor?? [ 468.400650][ T5897] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 468.468628][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 468.496145][ T5957] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 468.506661][ T5957] usb 4-1: config 0 has no interface number 0 [ 468.594939][ T5957] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 468.636550][ T8711] netlink: 'syz.4.663': attribute type 4 has an invalid length. [ 468.645102][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.666036][ T5957] usb 4-1: Product: syz [ 468.685640][ T5957] usb 4-1: Manufacturer: syz [ 468.708081][ T5957] usb 4-1: SerialNumber: syz [ 468.745787][ T5957] usb 4-1: config 0 descriptor?? [ 468.766871][ T5957] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 468.970130][ T5957] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 468.978360][ T5957] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 469.021730][ T8719] netlink: 'syz.4.664': attribute type 4 has an invalid length. [ 469.266012][ T5834] usb 6-1: unable to get BOS descriptor or descriptor too short [ 469.271570][ T5897] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 469.298925][ T5834] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 469.324693][ T5834] usb 6-1: can't read configurations, error -71 [ 469.356888][ T8721] tls_set_device_offload_rx: netdev not found [ 469.448544][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.458837][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.563932][ T5957] usb 3-1: USB disconnect, device number 35 [ 469.734261][ T891] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 469.894287][ T891] usb 7-1: Using ep0 maxpacket: 32 [ 469.908904][ T891] usb 7-1: config 3 has an invalid interface number: 171 but max is 0 [ 469.928432][ T891] usb 7-1: config 3 has no interface number 0 [ 469.949191][ T8742] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 469.958155][ T8742] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 469.987520][ T891] usb 7-1: config 3 interface 171 has no altsetting 0 [ 470.224024][ T891] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5 [ 470.233611][ T891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.245642][ T891] usb 7-1: Product: syz [ 470.271446][ T891] usb 7-1: Manufacturer: syz [ 470.287506][ T891] usb 7-1: SerialNumber: syz [ 470.410582][ T8739] could not allocate digest TFM handle sha3-512-generic [ 470.434341][ T5897] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 470.555015][ T891] as10x_usb: device has been detected [ 470.569283][ T891] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 470.593593][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 470.616754][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.658192][ T5897] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 470.692098][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.704822][ T891] usb 7-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 470.755863][ T5897] usb 5-1: config 0 descriptor?? [ 471.083548][ T891] as10x_usb: error during firmware upload part1 [ 471.112824][ T891] Registered device Sky IT Digital Key (green led) [ 471.150922][ T891] usb 7-1: USB disconnect, device number 9 [ 471.329792][ T891] Unregistered device Sky IT Digital Key (green led) [ 471.365856][ T891] as10x_usb: device has been disconnected [ 471.457307][ T5897] uclogic 0003:2179:0077.000B: interface is invalid, ignoring [ 471.653053][ T891] usb 4-1: USB disconnect, device number 43 [ 473.211894][ T5834] usb 5-1: USB disconnect, device number 41 [ 473.232570][ T8785] netlink: 'syz.2.678': attribute type 4 has an invalid length. [ 473.334660][ T891] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 473.495991][ T891] usb 4-1: Using ep0 maxpacket: 16 [ 473.535911][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.558716][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.568674][ T891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.584422][ T891] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.600606][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.615493][ T891] usb 4-1: config 0 descriptor?? [ 473.974307][ T5839] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 474.130214][ T5839] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 474.161688][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.204454][ T5839] usb 5-1: Product: syz [ 474.214247][ T5839] usb 5-1: Manufacturer: syz [ 474.219003][ T5839] usb 5-1: SerialNumber: syz [ 474.358397][ T8782] sctp: [Deprecated]: syz.3.677 (pid 8782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.358397][ T8782] Use struct sctp_sack_info instead [ 474.552184][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.576366][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 474.588788][ T5897] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 474.645872][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.676674][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 474.748357][ T5839] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 474.769696][ T891] usbhid 4-1:0.0: can't add hid device: -71 [ 474.788338][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 474.831466][ T5897] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 474.863977][ T5839] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 474.876135][ T5897] usb 3-1: config 0 has no interface number 0 [ 474.922021][ T5839] usb 5-1: USB disconnect, device number 42 [ 474.932568][ T891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 474.970631][ T891] usb 4-1: USB disconnect, device number 44 [ 475.008924][ T5897] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 475.025814][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.043932][ T5897] usb 3-1: Product: syz [ 475.061450][ T5897] usb 3-1: Manufacturer: syz [ 475.075307][ T8825] netlink: 'syz.4.687': attribute type 4 has an invalid length. [ 475.084687][ T5897] usb 3-1: SerialNumber: syz [ 475.492067][ T5897] usb 3-1: config 0 descriptor?? [ 475.551156][ T5897] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 475.948285][ T5897] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 475.984840][ T5897] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 476.348362][ T8835] netlink: 'syz.4.691': attribute type 7 has an invalid length. [ 476.395161][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 476.504465][ T5897] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 476.688599][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.703272][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.704122][ T8839] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.692'. [ 476.722788][ T6546] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 476.732680][ T5897] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 476.747220][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.779077][ T5897] usb 4-1: config 0 descriptor?? [ 476.864490][ T6546] usb 6-1: device descriptor read/64, error -71 [ 477.114347][ T6546] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 477.174350][ T5839] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 477.208085][ T5897] hid_parser_main: 24 callbacks suppressed [ 477.208110][ T5897] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 477.229621][ T5897] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 477.246917][ T6546] usb 6-1: device descriptor read/64, error -71 [ 477.268053][ T5897] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 477.349536][ T891] usb 3-1: USB disconnect, device number 36 [ 477.360163][ T6546] usb usb6-port1: attempt power cycle [ 477.375081][ T5839] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.401411][ T5839] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.441798][ T5839] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 477.462784][ T5839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 477.483889][ T5839] usb 7-1: SerialNumber: syz [ 477.544010][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 477.550251][ T40] usb 4-1: USB disconnect, device number 45 [ 477.804226][ T6546] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 477.812881][ T5839] usb 7-1: 0:2 : does not exist [ 477.889121][ T6546] usb 6-1: device descriptor read/8, error -71 [ 477.963394][ T5839] usb 7-1: USB disconnect, device number 10 [ 478.218314][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.404873][ T6546] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 478.484365][ T6546] usb 6-1: device descriptor read/8, error -71 [ 478.596040][ T6546] usb usb6-port1: unable to enumerate USB device [ 479.295491][ T8874] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 479.806510][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.703'. [ 480.464222][ T5839] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 480.704275][ T5839] usb 6-1: Using ep0 maxpacket: 32 [ 480.722175][ T5839] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 480.730553][ T5839] usb 6-1: config 0 has no interface number 0 [ 480.942331][ T8894] syz.2.706 (8894): drop_caches: 2 [ 481.044861][ T5839] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 481.060471][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.174228][ T5839] usb 6-1: Product: syz [ 481.181547][ T5839] usb 6-1: Manufacturer: syz [ 481.205914][ T5839] usb 6-1: SerialNumber: syz [ 481.263524][ T5839] usb 6-1: config 0 descriptor?? [ 481.293831][ T5839] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 481.511484][ T5839] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 481.574693][ T5839] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 482.426508][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 482.426523][ T30] audit: type=1326 audit(1766742413.643:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.477861][ T8906] netlink: 'syz.6.710': attribute type 1 has an invalid length. [ 482.536180][ T30] audit: type=1326 audit(1766742413.673:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.569299][ T8906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.576755][ T30] audit: type=1326 audit(1766742413.673:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.607298][ T30] audit: type=1326 audit(1766742413.673:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.634340][ T30] audit: type=1326 audit(1766742413.673:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.667446][ T30] audit: type=1326 audit(1766742413.673:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.691982][ T8909] bond1: (slave ip6gretap1): making interface the new active one [ 482.710077][ T30] audit: type=1326 audit(1766742413.673:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.745814][ T8909] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 482.801087][ T30] audit: type=1326 audit(1766742413.673:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 482.907066][ T30] audit: type=1326 audit(1766742413.673:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 483.075595][ T30] audit: type=1326 audit(1766742413.673:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.6.710" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 483.375067][ T5839] usb 6-1: USB disconnect, device number 30 [ 483.626695][ T8922] netlink: 'syz.6.712': attribute type 4 has an invalid length. [ 484.014289][ T891] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 484.342835][ T8928] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 484.446136][ T891] usb 7-1: Using ep0 maxpacket: 8 [ 484.484343][ T5839] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 484.523240][ T891] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 484.532567][ T891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.615222][ T891] pvrusb2: Hardware description: Terratec Grabster AV400 [ 484.624797][ T891] pvrusb2: ********** [ 484.629159][ T891] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 484.648386][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.671917][ T891] pvrusb2: Important functionality might not be entirely working. [ 484.701194][ T891] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 484.701308][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.729237][ T891] pvrusb2: ********** [ 484.805757][ T5839] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 484.860055][ T2345] pvrusb2: Invalid write control endpoint [ 484.869278][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.885882][ T8937] netlink: 'syz.3.716': attribute type 4 has an invalid length. [ 484.937411][ T5839] usb 6-1: config 0 descriptor?? [ 485.191216][ T2345] pvrusb2: Invalid write control endpoint [ 485.216617][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 485.241810][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 485.259856][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 485.293566][ T2345] pvrusb2: Device being rendered inoperable [ 485.313805][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 485.334560][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 485.361550][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.403184][ T2345] pvrusb2: Attached sub-driver cx25840 [ 485.407968][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.426188][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 485.517381][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 485.551679][ T5839] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 485.571269][ T5839] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 485.621136][ T5839] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000D/input/input22 [ 485.771010][ T5839] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 485.839084][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.5.713'. [ 486.323184][ T891] usb 6-1: USB disconnect, device number 31 [ 487.057796][ T891] usb 7-1: USB disconnect, device number 11 [ 487.436593][ T891] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 487.602611][ T8976] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 487.614537][ T891] usb 6-1: Using ep0 maxpacket: 32 [ 487.642208][ T891] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.662544][ T891] usb 6-1: config 0 has no interface number 0 [ 487.687008][ T891] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.760248][ T891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.804225][ T891] usb 6-1: Product: syz [ 487.808465][ T891] usb 6-1: Manufacturer: syz [ 487.867713][ T891] usb 6-1: SerialNumber: syz [ 487.910617][ T891] usb 6-1: config 0 descriptor?? [ 487.959371][ T891] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 487.985378][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 488.134537][ T5839] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 488.151474][ T891] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 488.170808][ T8988] netlink: 'syz.3.730': attribute type 4 has an invalid length. [ 488.185471][ T891] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 488.296204][ T5839] usb 7-1: device descriptor read/64, error -71 [ 488.544343][ T5839] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 488.707778][ T5839] usb 7-1: device descriptor read/64, error -71 [ 488.865825][ T5839] usb usb7-port1: attempt power cycle [ 489.005099][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 489.194603][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 489.210487][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.220543][ T5839] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 489.228662][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.378432][ T9] usb 5-1: Product: syz [ 489.394964][ T5839] usb 7-1: device descriptor read/8, error -71 [ 489.408630][ T9] usb 5-1: Manufacturer: syz [ 489.420340][ T9] usb 5-1: SerialNumber: syz [ 489.490179][ T9] usb 5-1: config 0 descriptor?? [ 489.656240][ T5839] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 489.695919][ T5839] usb 7-1: device descriptor read/8, error -71 [ 489.806196][ T5839] usb usb7-port1: unable to enumerate USB device [ 490.575609][ T5897] usb 6-1: USB disconnect, device number 32 [ 490.637037][ T9] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 490.652674][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 492.188127][ T5897] usb 5-1: USB disconnect, device number 43 [ 492.330053][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.737'. [ 493.072969][ T9061] loop8: detected capacity change from 0 to 7 [ 493.086990][ T9061] Dev loop8: unable to read RDB block 7 [ 493.092910][ T9061] loop8: AHDI p1 p2 p3 [ 493.097480][ T9061] loop8: partition table partially beyond EOD, truncated [ 493.107952][ T9061] loop8: p1 start 1601398130 is beyond EOD, truncated [ 493.115190][ T9061] loop8: p2 start 1702059890 is beyond EOD, truncated [ 493.570883][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 493.570905][ T30] audit: type=1326 audit(1766742424.713:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 493.756810][ T30] audit: type=1326 audit(1766742424.713:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 493.986218][ T30] audit: type=1326 audit(1766742424.713:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.116199][ T30] audit: type=1326 audit(1766742424.713:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.209175][ T30] audit: type=1326 audit(1766742424.713:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.307697][ T30] audit: type=1326 audit(1766742424.713:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.491282][ T30] audit: type=1326 audit(1766742424.723:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.564527][ T30] audit: type=1326 audit(1766742424.723:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.684357][ T30] audit: type=1326 audit(1766742424.723:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 494.860776][ T30] audit: type=1326 audit(1766742424.723:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9057 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 495.349292][ T9084] netlink: 'syz.2.743': attribute type 4 has an invalid length. [ 495.542005][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.747'. [ 495.644575][ T5839] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 495.804359][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 495.816567][ T5839] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 495.830550][ T5839] usb 7-1: config 0 has no interface number 0 [ 495.856072][ T5839] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 495.866754][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.883663][ T5839] usb 7-1: Product: syz [ 495.892178][ T5839] usb 7-1: Manufacturer: syz [ 495.900778][ T5839] usb 7-1: SerialNumber: syz [ 495.937218][ T5839] usb 7-1: config 0 descriptor?? [ 495.953123][ T5839] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 496.087846][ T9102] syzkaller0: entered promiscuous mode [ 496.112346][ T9102] syzkaller0: entered allmulticast mode [ 496.165304][ T5839] usb 7-1: qt2_setup_urbs - submit read urb failed -8 [ 496.180312][ T5839] quatech2 7-1:0.51: probe with driver quatech2 failed with error -8 [ 496.207394][ T9102] tipc: Enabled bearer , priority 0 [ 496.270836][ T9102] tipc: Resetting bearer [ 496.350496][ T9101] tipc: Resetting bearer [ 496.496012][ T9101] tipc: Disabling bearer [ 497.224311][ T5839] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 497.404267][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 497.411699][ T5839] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 497.420782][ T5839] usb 6-1: config 0 has no interface number 0 [ 497.433608][ T5839] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 497.470694][ T5839] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 497.501558][ T5839] usb 6-1: config 0 interface 41 has no altsetting 0 [ 497.526015][ T5839] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 497.543222][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.573336][ T5839] usb 6-1: Product: syz [ 497.592236][ T5839] usb 6-1: Manufacturer: syz [ 497.610876][ T5839] usb 6-1: SerialNumber: syz [ 497.629734][ T5839] usb 6-1: config 0 descriptor?? [ 497.648883][ T9127] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 497.673393][ T9127] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 497.916649][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.943656][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.004546][ T9127] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 498.021253][ T9127] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 498.259140][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.277728][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.311425][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.453758][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.466619][ T5839] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 498.498089][ T5839] usb 6-1: USB disconnect, device number 33 [ 498.521129][ T6546] usb 7-1: USB disconnect, device number 16 [ 498.895463][ T9149] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 499.454270][ T6546] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 499.574773][ T9158] vivid-004: disconnect [ 499.630601][ T6546] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 499.640306][ T6546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.648806][ T6546] usb 6-1: Product: syz [ 499.653429][ T6546] usb 6-1: Manufacturer: syz [ 499.664954][ T6546] usb 6-1: SerialNumber: syz [ 499.673214][ T6546] usb 6-1: config 0 descriptor?? [ 499.695647][ T6546] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 499.702910][ T6546] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 499.720225][ T6546] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 499.734524][ T5839] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 499.831157][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 499.885759][ T6546] usb 6-1: USB disconnect, device number 34 [ 499.903896][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.917789][ T9164] binder: 9161:9164 ioctl c018620c 800002c0 returned -1 [ 499.939409][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.954532][ T5839] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.964656][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 499.972797][ T5839] usb 5-1: SerialNumber: syz [ 500.189965][ T9138] netlink: 52 bytes leftover after parsing attributes in process `syz.4.758'. [ 500.200892][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.208602][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.256836][ T5839] usb 5-1: 0:2 : does not exist [ 500.264401][ T5839] usb 5-1: unit 5: unexpected type 0x0d [ 500.293057][ T5839] usb 5-1: USB disconnect, device number 44 [ 500.335221][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.359779][ T9158] vivid-004: reconnect [ 501.014359][ T5839] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 501.023258][ T129] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 501.184240][ T5839] usb 3-1: Using ep0 maxpacket: 8 [ 501.194824][ T129] usb 6-1: Using ep0 maxpacket: 32 [ 501.213141][ T129] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.222757][ T5839] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 501.233180][ T129] usb 6-1: config 0 has no interface number 0 [ 501.252481][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.261176][ T5839] usb 3-1: Product: syz [ 501.275273][ T129] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.305936][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.314274][ T5839] usb 3-1: Manufacturer: syz [ 501.320489][ T5839] usb 3-1: SerialNumber: syz [ 501.327829][ T129] usb 6-1: Product: syz [ 501.334045][ T129] usb 6-1: Manufacturer: syz [ 501.339404][ T129] usb 6-1: SerialNumber: syz [ 501.358585][ T5839] usb 3-1: config 0 descriptor?? [ 501.374906][ T129] usb 6-1: config 0 descriptor?? [ 501.390011][ T129] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.425356][ T9191] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 501.504250][ T6546] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 501.592596][ T129] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 501.617615][ T5839] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 501.624406][ T5897] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 501.632395][ T129] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8 [ 501.666203][ T6546] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.693397][ T6546] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.704370][ T6546] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.714418][ T6546] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.728332][ T9186] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 501.748272][ T6546] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.794243][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 501.849001][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 501.868593][ T5897] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 501.878513][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.887437][ T5897] usb 5-1: Product: syz [ 501.908116][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.918503][ T5897] usb 5-1: Manufacturer: syz [ 501.928436][ T5897] usb 5-1: SerialNumber: syz [ 501.940008][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.965032][ T5897] usb 5-1: config 0 descriptor?? [ 501.999386][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.008777][ T5897] hub 5-1:0.0: bad descriptor, ignoring hub [ 502.035343][ T5897] hub 5-1:0.0: probe with driver hub failed with error -5 [ 502.074276][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.090144][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.101265][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.119268][ T5897] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 502.151280][ T5839] gspca_sunplus: reg_w_riv err -71 [ 502.172968][ T5839] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 502.220014][ T5897] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 502.257642][ T5839] usb 3-1: USB disconnect, device number 37 [ 502.267672][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.775'. [ 502.306169][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.347965][ T5897] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 502.399930][ T9186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.402943][ T5897] usb 5-1: USB disconnect, device number 45 [ 502.426375][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 502.426394][ T30] audit: type=1326 audit(1766742433.633:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9193 comm="syz.3.778" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x0 [ 502.546466][ T9195] netlink: 'syz.3.778': attribute type 32 has an invalid length. [ 502.554831][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 502.567387][ T9195] netlink: 'syz.3.778': attribute type 32 has an invalid length. [ 502.583410][ T9195] sg_write: data in/out 124/4 bytes for SCSI command 0x1c-- guessing data in; [ 502.583410][ T9195] program syz.3.778 not setting count and/or reply_len properly [ 502.613990][ T5839] usb 7-1: USB disconnect, device number 17 [ 503.527309][ T9204] use of bytesused == 0 is deprecated and will be removed in the future, [ 503.536281][ T9204] use the actual size instead. [ 504.020569][ T891] usb 6-1: USB disconnect, device number 35 [ 504.250302][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 504.854340][ T5839] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 505.000884][ T9219] bond1: option ad_actor_sys_prio: invalid value (0) [ 505.008106][ T9219] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 505.017068][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.027783][ T5839] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 505.051531][ T9219] bond1 (unregistering): Released all slaves [ 505.073063][ T5839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.088460][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.096659][ T5839] usb 6-1: Product: syz [ 505.100893][ T5839] usb 6-1: Manufacturer: syz [ 505.105694][ T5839] usb 6-1: SerialNumber: syz [ 505.326984][ T9239] netlink: 'syz.6.788': attribute type 4 has an invalid length. [ 505.403002][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.482275][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.556638][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.584858][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.623532][ T9243] kvm: pic: single mode not supported [ 505.625115][ T5839] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 505.655578][ T5839] usb 6-1: USB disconnect, device number 36 [ 506.014308][ T6546] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 506.084310][ T5839] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 506.179085][ T6546] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.205844][ T6546] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 506.219131][ T891] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 506.236859][ T6546] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 506.254253][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 506.267549][ T5839] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 506.284395][ T5839] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 506.396645][ T40] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 506.456243][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.796'. [ 506.728716][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.738434][ T30] audit: type=1326 audit(1766742437.533:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 506.744619][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.783658][ T6546] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.806238][ T6546] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.826864][ T6546] usb 4-1: Product: syz [ 506.832537][ T5839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 506.832544][ T30] audit: type=1326 audit(1766742437.533:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 506.832620][ T30] audit: type=1326 audit(1766742437.533:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 506.892280][ T891] usb 5-1: Using ep0 maxpacket: 32 [ 506.897522][ T6546] usb 4-1: Manufacturer: syz [ 506.911871][ T6546] usb 4-1: SerialNumber: syz [ 506.962085][ T6546] cdc_ncm 4-1:1.0: skipping garbage [ 506.968422][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 506.973365][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 506.988314][ T891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 507.012318][ T5839] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 507.065181][ T891] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 507.074694][ T5839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.089729][ T5839] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.100654][ T5839] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 507.110982][ T40] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 507.159554][ T30] audit: type=1326 audit(1766742437.533:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.183424][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.191621][ T40] usb 3-1: config 0 has no interface number 0 [ 507.234284][ T891] usb 5-1: Product: syz [ 507.238733][ T891] usb 5-1: Manufacturer: syz [ 507.243683][ T891] usb 5-1: SerialNumber: syz [ 507.249017][ T30] audit: type=1326 audit(1766742437.533:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.276831][ T891] usb 5-1: config 0 descriptor?? [ 507.285499][ T9263] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 507.313926][ T891] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 507.337496][ T40] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 507.350880][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.368456][ T30] audit: type=1326 audit(1766742437.533:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.380775][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.428989][ T40] usb 3-1: Product: syz [ 507.433429][ T40] usb 3-1: Manufacturer: syz [ 507.440518][ T40] usb 3-1: SerialNumber: syz [ 507.479395][ T30] audit: type=1326 audit(1766742437.533:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.507441][ T40] usb 3-1: config 0 descriptor?? [ 507.560154][ T5839] usb 6-1: can't set config #16, error -71 [ 507.585212][ T40] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 507.612968][ T30] audit: type=1326 audit(1766742437.533:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.623662][ T5839] usb 6-1: USB disconnect, device number 37 [ 507.746558][ T40] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 507.758200][ T40] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 507.837289][ T30] audit: type=1326 audit(1766742437.683:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 507.913564][ T9279] macvtap1: entered promiscuous mode [ 507.919522][ T9279] macvtap1: entered allmulticast mode [ 507.925758][ T9279] veth1_vlan: entered allmulticast mode [ 508.110094][ T30] audit: type=1326 audit(1766742437.683:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.134948][ T30] audit: type=1326 audit(1766742437.703:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.198295][ T9278] macvtap2: entered promiscuous mode [ 508.208037][ T9278] macvtap2: entered allmulticast mode [ 508.223291][ T30] audit: type=1326 audit(1766742437.703:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.384043][ T30] audit: type=1326 audit(1766742437.703:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.422123][ T30] audit: type=1326 audit(1766742437.703:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.447420][ T30] audit: type=1326 audit(1766742437.703:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.475664][ T30] audit: type=1326 audit(1766742437.703:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9269 comm="syz.6.796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 508.895255][ T6546] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 508.906277][ T6546] cdc_ncm 4-1:1.0: bind() failure [ 509.092541][ T6546] usb 4-1: USB disconnect, device number 46 [ 509.108285][ T5839] usb 5-1: USB disconnect, device number 46 [ 509.108359][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 509.324401][ T129] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 509.366337][ T9292] binder: 9291:9292 unknown command 0 [ 509.371793][ T9292] binder: 9291:9292 ioctl c0306201 80000080 returned -22 [ 509.385244][ T9293] binder: 9291:9293 ioctl 4020ae46 80000000 returned -22 [ 509.504436][ T5839] usb 3-1: USB disconnect, device number 38 [ 509.512506][ T129] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 509.540905][ T129] usb 7-1: config 0 has no interface number 0 [ 509.582585][ T129] usb 7-1: config 0 interface 41 has no altsetting 0 [ 509.600171][ T129] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 509.618881][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.633522][ T129] usb 7-1: Product: syz [ 509.638223][ T129] usb 7-1: Manufacturer: syz [ 509.643147][ T129] usb 7-1: SerialNumber: syz [ 509.691627][ T129] usb 7-1: config 0 descriptor?? [ 510.014290][ T5839] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 510.142256][ T9309] netlink: 'syz.4.806': attribute type 4 has an invalid length. [ 510.194593][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 510.220220][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.232035][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.244787][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 510.256047][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.265800][ T891] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 510.273903][ T5839] usb 3-1: config 0 descriptor?? [ 510.340425][ T129] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -32 [ 510.429301][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.455464][ T891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.478663][ T891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.503526][ T891] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 510.518755][ T891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.536352][ T891] usb 6-1: config 0 descriptor?? [ 510.706891][ T5839] logitech 0003:046D:C29C.000E: item fetching failed at offset 5/6 [ 510.728853][ T5839] logitech 0003:046D:C29C.000E: parse failed [ 510.742578][ T5839] logitech 0003:046D:C29C.000E: probe with driver logitech failed with error -22 [ 510.759645][ T891] dragonrise 0003:0079:0011.000F: unknown main item tag 0x0 [ 510.781734][ T891] dragonrise 0003:0079:0011.000F: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0 [ 510.952989][ T9303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 510.960054][ T891] usb 6-1: USB disconnect, device number 38 [ 511.384273][ T891] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 511.535811][ T891] usb 5-1: Using ep0 maxpacket: 32 [ 511.549851][ T891] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 511.569758][ T891] usb 5-1: config 0 has no interface number 0 [ 511.570867][ T9329] input: syz1 as /devices/virtual/input/input25 [ 511.585676][ T891] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 511.599777][ T891] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 511.622437][ T891] usb 5-1: config 0 interface 126 has no altsetting 0 [ 511.638776][ T891] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 511.667811][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.691288][ T891] usb 5-1: Product: syz [ 511.700085][ T891] usb 5-1: Manufacturer: syz [ 511.709691][ T891] usb 5-1: SerialNumber: syz [ 511.719924][ T891] usb 5-1: config 0 descriptor?? [ 511.735991][ T9324] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.764422][ T9324] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.856477][ T9337] QAT: Device 64 not found [ 511.875011][ T9337] QAT: Invalid ioctl -1072667448 [ 511.888373][ T9339] bond1: option fail_over_mac: invalid value (10) [ 511.906310][ T9339] bond1 (unregistering): Released all slaves [ 512.202772][ T891] ir_usb 5-1:0.126: IR Dongle converter detected [ 512.204534][ T5839] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 512.217634][ T891] usb 5-1: IRDA class descriptor not found, device not bound [ 512.251577][ T891] usb 5-1: USB disconnect, device number 47 [ 512.398263][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 512.420629][ T5839] usb 6-1: config 8 has an invalid interface number: 8 but max is 1 [ 512.430154][ T5839] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 512.440951][ T5839] usb 6-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 512.450069][ T5839] usb 6-1: config 8 has no interface number 0 [ 512.456734][ T5839] usb 6-1: config 8 interface 8 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.470117][ T5839] usb 6-1: config 8 interface 8 has no altsetting 0 [ 512.485535][ T40] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 512.505079][ T5839] usb 6-1: language id specifier not provided by device, defaulting to English [ 512.527733][ T5839] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=31.8b [ 512.540153][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.554049][ T5839] usb 6-1: Manufacturer: ы [ 512.561792][ T5839] usb 6-1: SerialNumber: 몐꧶螒㖈쵀缼䆎즪狸 [ 512.673288][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 512.689703][ T40] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 512.700846][ T40] usb 4-1: config 0 has no interface number 0 [ 512.723587][ T40] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 512.733526][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.742295][ T40] usb 4-1: Product: syz [ 512.746925][ T40] usb 4-1: Manufacturer: syz [ 512.751837][ T40] usb 4-1: SerialNumber: syz [ 512.762885][ T40] usb 4-1: config 0 descriptor?? [ 512.779031][ T40] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 512.792316][ T9337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.826345][ T9337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.879803][ T5839] dm9601 6-1:8.8: probe with driver dm9601 failed with error -22 [ 512.901263][ T5839] sr9700 6-1:8.8: probe with driver sr9700 failed with error -22 [ 512.913407][ T129] usb 3-1: USB disconnect, device number 39 [ 512.972314][ T5839] usb 6-1: USB disconnect, device number 39 [ 512.991722][ T40] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 513.039212][ T40] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 513.079263][ T5897] usb 7-1: USB disconnect, device number 18 [ 513.454445][ T129] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 513.649406][ T129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 513.675217][ T129] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 513.694589][ T129] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 513.726846][ T129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.745652][ T129] usb 3-1: config 0 descriptor?? [ 513.769554][ T9350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.003163][ T129] usbhid 3-1:0.0: can't add hid device: -71 [ 514.011439][ T129] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 514.047511][ T129] usb 3-1: USB disconnect, device number 40 [ 514.176615][ T9360] netlink: 'syz.5.818': attribute type 4 has an invalid length. [ 514.401241][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.5.819'. [ 514.584328][ T129] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 514.714256][ T129] usb 3-1: device descriptor read/64, error -71 [ 514.954476][ T129] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 515.104313][ T129] usb 3-1: device descriptor read/64, error -71 [ 515.210791][ T5839] usb 4-1: USB disconnect, device number 47 [ 515.218868][ T129] usb usb3-port1: attempt power cycle [ 515.604313][ T129] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 515.635545][ T129] usb 3-1: device descriptor read/8, error -71 [ 515.847372][ T9373] netlink: 14 bytes leftover after parsing attributes in process `syz.5.821'. [ 515.954264][ T129] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 516.007460][ T129] usb 3-1: device descriptor read/8, error -71 [ 516.159260][ T129] usb usb3-port1: unable to enumerate USB device [ 516.654254][ T891] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 516.794752][ T40] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 516.808903][ T891] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 516.864480][ T891] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.898226][ T891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.938446][ T891] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 516.983830][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.007312][ T40] usb 4-1: config 0 has no interfaces? [ 517.027963][ T40] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.038284][ T891] usb 3-1: config 0 descriptor?? [ 517.049168][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.071058][ T40] usb 4-1: Product: syz [ 517.094655][ T40] usb 4-1: Manufacturer: syz [ 517.099401][ T40] usb 4-1: SerialNumber: syz [ 517.157872][ T40] usb 4-1: config 0 descriptor?? [ 517.305409][ T9373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.411540][ T9373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.557605][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'. [ 517.632086][ T9373] bond0 (unregistering): Released all slaves [ 517.744761][ T9376] syzkaller1: entered promiscuous mode [ 517.750434][ T9376] syzkaller1: entered allmulticast mode [ 517.797527][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 518.317951][ T9384] pimreg: entered allmulticast mode [ 518.360243][ T9408] pimreg: left allmulticast mode [ 518.687909][ T9396] : entered promiscuous mode [ 519.189921][ T9415] netlink: 'syz.6.829': attribute type 4 has an invalid length. [ 519.994757][ T129] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 520.184623][ T129] usb 5-1: Using ep0 maxpacket: 32 [ 520.198696][ T129] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 520.211683][ T129] usb 5-1: config 0 has no interface number 0 [ 520.302335][ T40] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 520.329815][ T129] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 520.354274][ T129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.395230][ T129] usb 5-1: Product: syz [ 520.410033][ T129] usb 5-1: Manufacturer: syz [ 520.427531][ T129] usb 5-1: SerialNumber: syz [ 520.455303][ T129] usb 5-1: config 0 descriptor?? [ 520.474368][ T40] usb 6-1: Using ep0 maxpacket: 32 [ 520.502077][ T40] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 520.531556][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 520.563173][ T129] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 520.597226][ T40] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 520.611559][ T40] usb 6-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 520.644300][ T40] usb 6-1: Product: syz [ 520.662285][ T891] usbhid 3-1:0.0: can't add hid device: -71 [ 520.670777][ T40] usb 6-1: Manufacturer: syz [ 520.680771][ T891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 520.690215][ T40] usb 6-1: SerialNumber: syz [ 520.725763][ T40] usb 6-1: config 0 descriptor?? [ 520.735702][ T891] usb 3-1: USB disconnect, device number 45 [ 520.741525][ T129] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 520.779621][ T40] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 520.791870][ T129] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 520.815432][ T5839] usb 4-1: USB disconnect, device number 48 [ 520.854732][ T5897] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 520.977977][ T40] usb 6-1: USB disconnect, device number 40 [ 520.989038][ T3011] usb 6-1: Failed to submit usb control message: -71 [ 521.016674][ T3011] usb 6-1: unable to send the bmi data to the device: -71 [ 521.026089][ T3011] usb 6-1: unable to get target info from device [ 521.032752][ T3011] usb 6-1: could not get target info (-71) [ 521.039992][ T3011] usb 6-1: could not probe fw (-71) [ 521.046010][ T5897] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 521.057682][ T5897] usb 7-1: config 0 has no interface number 0 [ 521.063974][ T5897] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.091768][ T5897] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.158655][ T5897] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 521.179783][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.233862][ T5897] usb 7-1: config 0 descriptor?? [ 521.336574][ T9440] syzkaller0: entered promiscuous mode [ 521.344809][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 521.372654][ T9440] syzkaller0: entered allmulticast mode [ 521.750744][ T9448] binder: 9447:9448 ioctl 40046210 0 returned -14 [ 521.786326][ T5897] uclogic 0003:256C:006D.0010: unknown main item tag 0x0 [ 521.810980][ T5897] uclogic 0003:256C:006D.0010: unknown main item tag 0x0 [ 521.838431][ T5897] uclogic 0003:256C:006D.0010: unknown main item tag 0x0 [ 521.869534][ T5897] uclogic 0003:256C:006D.0010: unknown main item tag 0x0 [ 521.896029][ T5897] uclogic 0003:256C:006D.0010: unknown main item tag 0x0 [ 521.945726][ T5897] uclogic 0003:256C:006D.0010: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1 [ 522.145713][ T9462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.190578][ T9462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.384377][ T40] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 522.510808][ T891] usb 7-1: USB disconnect, device number 19 [ 522.521161][ T9470] netlink: 'syz.3.843': attribute type 4 has an invalid length. [ 522.595358][ T40] usb 6-1: Using ep0 maxpacket: 8 [ 522.609365][ T40] usb 6-1: config 0 has an invalid interface number: 216 but max is 0 [ 522.650458][ T40] usb 6-1: config 0 has no interface number 0 [ 522.683973][ T40] usb 6-1: config 0 interface 216 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 522.713006][ T40] usb 6-1: config 0 interface 216 has no altsetting 0 [ 522.737236][ T40] usb 6-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=bf.a6 [ 522.762401][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.789091][ T40] usb 6-1: Product: syz [ 522.802422][ T40] usb 6-1: Manufacturer: syz [ 522.814206][ T40] usb 6-1: SerialNumber: syz [ 522.845727][ T40] r8152-cfgselector 6-1: Unknown version 0x0000 [ 522.868914][ T40] r8152-cfgselector 6-1: config 0 descriptor?? [ 523.084262][ T6546] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 523.108122][ T40] r8152 6-1:0.216: Expected endpoints are not found [ 523.164673][ T40] r8152-cfgselector 6-1: USB disconnect, device number 41 [ 523.211029][ T5897] usb 5-1: USB disconnect, device number 48 [ 523.269721][ T6546] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 523.298059][ T6546] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.317013][ T6546] usb 7-1: Product: syz [ 523.321443][ T6546] usb 7-1: Manufacturer: syz [ 523.331250][ T6546] usb 7-1: SerialNumber: syz [ 523.744643][ T6546] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 523.797551][ T6546] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 526.204303][ T5839] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 526.365826][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 526.376841][ T5839] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 526.405734][ T9530] netlink: 'syz.3.857': attribute type 4 has an invalid length. [ 526.427403][ T5839] usb 3-1: config 0 has no interface number 0 [ 526.450840][ T5839] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 526.461055][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.489046][ T5839] usb 3-1: Product: syz [ 526.507595][ T5839] usb 3-1: Manufacturer: syz [ 526.520050][ T5839] usb 3-1: SerialNumber: syz [ 526.578819][ T5839] usb 3-1: config 0 descriptor?? [ 526.613833][ T5839] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 526.831684][ T5839] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 526.849034][ T5839] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 527.525833][ T6546] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 527.578314][ T6546] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 527.663103][ T6546] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 527.840825][ T6546] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 527.953365][ T6546] usb 7-1: USB disconnect, device number 20 [ 528.350094][ T9546] QAT: failed to copy from user cfg_data. [ 528.584354][ T6546] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 528.764471][ T6546] usb 5-1: Using ep0 maxpacket: 16 [ 528.857457][ T5897] usb 3-1: USB disconnect, device number 46 [ 528.869755][ T6546] usb 5-1: unable to get BOS descriptor or descriptor too short [ 528.911039][ T6546] usb 5-1: config 1 has an invalid interface number: 27 but max is 0 [ 528.929964][ T6546] usb 5-1: config 1 has no interface number 0 [ 528.945234][ T6546] usb 5-1: config 1 interface 27 has no altsetting 0 [ 528.973287][ T6546] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=45.9f [ 528.999059][ T6546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.020187][ T6546] usb 5-1: Product: syz [ 529.034254][ T6546] usb 5-1: Manufacturer: syz [ 529.049085][ T6546] usb 5-1: SerialNumber: syz [ 529.706736][ T5906] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 529.904385][ T5906] usb 6-1: Using ep0 maxpacket: 8 [ 529.920306][ T5906] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 529.951072][ T5906] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 529.975182][ T5906] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 530.019041][ T5906] usb 6-1: Product: syz [ 530.023856][ T5906] usb 6-1: Manufacturer: syz [ 530.039282][ T5906] usb 6-1: SerialNumber: syz [ 530.059821][ T5906] usb 6-1: config 0 descriptor?? [ 530.166411][ T9577] netlink: 'syz.6.870': attribute type 4 has an invalid length. [ 530.285691][ T5906] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 530.632834][ T9549] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.862'. [ 530.801601][ T6546] qmi_wwan 5-1:1.27: bogus CDC Union: master=0, slave=0 [ 530.822114][ T6546] qmi_wwan 5-1:1.27: probe with driver qmi_wwan failed with error -22 [ 530.856226][ T6546] usb 5-1: USB disconnect, device number 49 [ 530.973470][ T9583] kernel profiling enabled (shift: 17) [ 530.993768][ T9583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.001446][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 531.008791][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 531.016312][ T9583] IPv6: NLM_F_CREATE should be set when creating new route [ 531.313565][ T5906] gspca_sunplus: reg_w_riv err -71 [ 531.324417][ T5906] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 531.351123][ T5906] usb 6-1: USB disconnect, device number 42 [ 531.365309][ T9591] IPv6: addrconf: prefix option has invalid lifetime [ 532.056666][ T9609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 532.067824][ T6546] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 532.234309][ T6546] usb 5-1: Using ep0 maxpacket: 32 [ 532.288208][ T6546] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 532.313228][ T6546] usb 5-1: config 0 has no interface number 0 [ 532.364303][ T6546] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 532.426163][ T6546] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.455763][ T6546] usb 5-1: Product: syz [ 532.460039][ T6546] usb 5-1: Manufacturer: syz [ 532.506891][ T6546] usb 5-1: SerialNumber: syz [ 532.545221][ T6546] usb 5-1: config 0 descriptor?? [ 532.590850][ T6546] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 532.666664][ T9628] netlink: 'syz.2.883': attribute type 4 has an invalid length. [ 532.784660][ T6546] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 532.791752][ T6546] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 532.872176][ T5906] IPVS: starting estimator thread 0... [ 532.964264][ T9634] IPVS: using max 25 ests per chain, 60000 per kthread [ 532.971297][ T6546] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 533.214416][ T6546] usb 4-1: Using ep0 maxpacket: 16 [ 533.222022][ T6546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.234721][ T6546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.248035][ T6546] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 533.265564][ T6546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.294081][ T6546] usb 4-1: config 0 descriptor?? [ 533.719092][ T9626] xt_TCPMSS: Only works on TCP SYN packets [ 533.735595][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.792034][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.883549][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.893873][ T9640] bond1: (slave bond_slave_1): Device is not our slave [ 533.922643][ T9640] bond1: option active_slave: invalid value (bond_slave_1) [ 533.935311][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.974108][ T9640] bond1 (unregistering): Released all slaves [ 533.974270][ T5906] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 534.120420][ T6546] usbhid 4-1:0.0: can't add hid device: -71 [ 534.157040][ T5906] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 534.167358][ T6546] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 534.198600][ T5906] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 534.238401][ T6546] usb 4-1: USB disconnect, device number 49 [ 534.273875][ T5906] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 534.330465][ T5906] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 534.364653][ T5906] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 534.417690][ T5906] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 534.434693][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 534.459880][ T5906] usb 7-1: Product: syz [ 534.471184][ T5906] usb 7-1: Manufacturer: syz [ 534.542708][ T5906] cdc_wdm 7-1:1.0: skipping garbage [ 534.549290][ T5906] cdc_wdm 7-1:1.0: skipping garbage [ 534.571205][ T5906] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 534.606529][ T5906] cdc_wdm 7-1:1.0: Unknown control protocol [ 534.898214][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 534.898680][ T5839] usb 7-1: USB disconnect, device number 21 [ 534.905387][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 534.916998][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 535.497961][ T5906] usb 5-1: USB disconnect, device number 50 [ 536.132333][ T9686] netlink: 'syz.2.896': attribute type 4 has an invalid length. [ 536.214292][ T5839] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 536.384261][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 536.391669][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.413361][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.443863][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.460164][ T5839] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 536.471237][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.497468][ T5839] usb 5-1: config 0 descriptor?? [ 536.547091][ T5897] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 536.722352][ T5897] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 536.749882][ T5897] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 536.767860][ T5897] usb 4-1: config 220 has no interface number 2 [ 536.775529][ T5897] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 536.792840][ T5897] usb 4-1: config 220 interface 0 has no altsetting 0 [ 536.800735][ T5897] usb 4-1: config 220 interface 76 has no altsetting 0 [ 536.808144][ T5897] usb 4-1: config 220 interface 1 has no altsetting 0 [ 536.818309][ T5897] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 536.830723][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.838975][ T5897] usb 4-1: Product: syz [ 536.843434][ T5897] usb 4-1: Manufacturer: syz [ 536.849099][ T5897] usb 4-1: SerialNumber: syz [ 536.925054][ T9681] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 536.952058][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 536.981627][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 537.015784][ T5839] usb 5-1: USB disconnect, device number 51 [ 537.093782][ T5897] usb 4-1: selecting invalid altsetting 0 [ 537.120999][ T5897] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 537.142061][ T5897] uvcvideo 4-1:220.0: No valid video chain found. [ 537.172338][ T5897] usb 4-1: selecting invalid altsetting 0 [ 537.181877][ T5897] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 537.218005][ T5897] usb 4-1: USB disconnect, device number 50 [ 537.250407][ T7465] udevd[7465]: setting mode of /dev/bus/usb/004/050 to 020664 failed: No such file or directory [ 537.268366][ T7465] udevd[7465]: setting owner of /dev/bus/usb/004/050 to uid=0, gid=0 failed: No such file or directory [ 537.311461][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 537.311480][ T30] audit: type=1326 audit(1766742468.523:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.342625][ T30] audit: type=1326 audit(1766742468.553:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.368507][ T30] audit: type=1326 audit(1766742468.553:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.396184][ T30] audit: type=1326 audit(1766742468.553:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.419492][ T30] audit: type=1326 audit(1766742468.553:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.444335][ T30] audit: type=1326 audit(1766742468.553:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.515068][ T30] audit: type=1326 audit(1766742468.553:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.560585][ T30] audit: type=1326 audit(1766742468.583:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9702 comm="syz.6.903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 537.744749][ T5897] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 537.894278][ T5897] usb 7-1: device descriptor read/64, error -71 [ 537.956445][ T5906] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 538.114234][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 538.140341][ T5906] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 538.152426][ T5906] usb 5-1: config 0 has no interface number 0 [ 538.175946][ T5897] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 538.187414][ T5906] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 538.197289][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.206238][ T5906] usb 5-1: Product: syz [ 538.217806][ T5906] usb 5-1: Manufacturer: syz [ 538.222565][ T5906] usb 5-1: SerialNumber: syz [ 538.241297][ T5906] usb 5-1: config 0 descriptor?? [ 538.262509][ T5906] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 538.334284][ T5839] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 538.344255][ T5897] usb 7-1: device descriptor read/64, error -71 [ 538.426772][ T9728] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 538.464055][ T5897] usb usb7-port1: attempt power cycle [ 538.510641][ T5906] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 538.531474][ T5906] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 538.554051][ T5839] usb 4-1: config 4 has an invalid interface number: 39 but max is 1 [ 538.565596][ T5839] usb 4-1: config 4 has an invalid interface number: 49 but max is 1 [ 538.588236][ T5839] usb 4-1: config 4 has no interface number 0 [ 538.602828][ T5839] usb 4-1: config 4 has no interface number 1 [ 538.621226][ T5839] usb 4-1: config 4 interface 39 has no altsetting 0 [ 538.646531][ T5839] usb 4-1: config 4 interface 49 has no altsetting 0 [ 538.688469][ T5839] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=25.79 [ 538.738449][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.764332][ T5839] usb 4-1: Product: syz [ 538.768908][ T5839] usb 4-1: Manufacturer: syz [ 538.773803][ T5839] usb 4-1: SerialNumber: syz [ 538.835094][ T5897] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 538.895068][ T5897] usb 7-1: device descriptor read/8, error -71 [ 538.921823][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.909'. [ 539.024216][ T5839] usb 4-1: USB disconnect, device number 51 [ 539.154343][ T5897] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 539.185416][ T5897] usb 7-1: device descriptor read/8, error -71 [ 539.297007][ T9735] netlink: 'syz.2.911': attribute type 12 has an invalid length. [ 539.315324][ T5897] usb usb7-port1: unable to enumerate USB device [ 539.319275][ T9735] netlink: 'syz.2.911': attribute type 29 has an invalid length. [ 539.350180][ T9735] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 539.378889][ T9735] netlink: 'syz.2.911': attribute type 2 has an invalid length. [ 539.442629][ T9735] netlink: 'syz.2.911': attribute type 1 has an invalid length. [ 539.472181][ T9735] netlink: 228 bytes leftover after parsing attributes in process `syz.2.911'. [ 539.665242][ T5906] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 539.855613][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.874233][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.903224][ T5906] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 539.920590][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.930001][ T5906] usb 3-1: SerialNumber: syz [ 539.994875][ T40] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 540.144414][ T40] usb 4-1: device descriptor read/64, error -71 [ 540.167245][ T5906] usb 3-1: 0:2 : does not exist [ 540.178966][ T5906] usb 3-1: unit 5: unexpected type 0x0d [ 540.226306][ T5906] usb 3-1: USB disconnect, device number 47 [ 540.414423][ T40] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 540.554505][ T40] usb 4-1: device descriptor read/64, error -71 [ 540.675671][ T40] usb usb4-port1: attempt power cycle [ 540.694286][ T5906] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 540.844337][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 540.852830][ T5906] usb 7-1: unable to get BOS descriptor or descriptor too short [ 540.863488][ T5906] usb 7-1: config 4 interface 0 has no altsetting 0 [ 541.411263][ T5906] usb 7-1: string descriptor 0 read error: -22 [ 541.422710][ T5906] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 541.432068][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.453999][ T5906] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 541.454250][ T40] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 541.476745][ T5906] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 541.511044][ T5906] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 541.519708][ T5906] usb 7-1: media controller created [ 541.527935][ T40] usb 4-1: device descriptor read/8, error -71 [ 541.556678][ T9752] random: crng reseeded on system resumption [ 541.601888][ T5897] usb 5-1: USB disconnect, device number 52 [ 541.635387][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.774333][ T40] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 541.799606][ T40] usb 4-1: device descriptor read/8, error -71 [ 541.814389][ T6546] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 541.915731][ T40] usb usb4-port1: unable to enumerate USB device [ 541.977342][ T6546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.989908][ T6546] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.005853][ T6546] usb 6-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 542.015503][ T6546] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.028221][ T6546] usb 6-1: config 0 descriptor?? [ 542.084449][ T40] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 542.256383][ T40] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 542.265021][ T40] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.276642][ T40] usb 3-1: config 0 has no interface number 0 [ 542.282883][ T40] usb 3-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 542.292324][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.307919][ T40] usb 3-1: config 0 descriptor?? [ 542.318065][ T40] rndis_host 3-1:0.9: More than one union descriptor, skipping ... [ 542.326754][ T40] usb 3-1: bad CDC descriptors [ 542.333994][ T40] cdc_acm 3-1:0.9: More than one union descriptor, skipping ... [ 542.447795][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.917'. [ 542.530592][ T5897] usb 3-1: USB disconnect, device number 48 [ 542.717914][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 542.903956][ T9766] netlink: 'syz.3.921': attribute type 4 has an invalid length. [ 542.976208][ T5897] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 543.138793][ T5897] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 543.154588][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.165223][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.181221][ T5897] usb 5-1: config 1 has no interface number 0 [ 543.188351][ T5897] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 543.199947][ T5897] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 543.224032][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 543.235875][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.244440][ T5897] usb 5-1: Product: syz [ 543.248848][ T5897] usb 5-1: Manufacturer: syz [ 543.253501][ T5897] usb 5-1: SerialNumber: syz [ 543.394521][ T5957] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 543.470102][ T5906] usb 7-1: USB disconnect, device number 26 [ 543.490985][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.520355][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.557929][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.579501][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.605814][ T5957] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.628474][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.651115][ T5957] usb 3-1: SerialNumber: syz [ 543.755593][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.785036][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.796300][ T5897] usb 5-1: USB disconnect, device number 53 [ 543.873559][ T5957] usb 3-1: 0:2 : does not exist [ 543.949975][ T6546] usbhid 6-1:0.0: can't add hid device: -71 [ 543.970089][ T5957] usb 3-1: unit 16 not found! [ 543.978777][ T6546] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 544.031787][ T6546] usb 6-1: USB disconnect, device number 43 [ 544.042354][ T5957] usb 3-1: USB disconnect, device number 49 [ 544.127255][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.292841][ T9793] tipc: Started in network mode [ 544.298067][ T9793] tipc: Node identity 84e, cluster identity 4711 [ 544.304514][ T9793] tipc: Node number set to 2126 [ 544.494482][ T5957] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 544.674233][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 544.685469][ T5957] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 544.693959][ T5957] usb 4-1: config 0 has no interface number 0 [ 544.736639][ T5957] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 544.798652][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.814207][ T5957] usb 4-1: Product: syz [ 544.833640][ T5957] usb 4-1: Manufacturer: syz [ 544.843834][ T5957] usb 4-1: SerialNumber: syz [ 544.903215][ T5957] usb 4-1: config 0 descriptor?? [ 544.916793][ T5957] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 545.176412][ T5957] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 545.203698][ T5957] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8 [ 545.874538][ T6546] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 546.064235][ T6546] usb 3-1: Using ep0 maxpacket: 32 [ 546.071580][ T6546] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.089976][ T6546] usb 3-1: config 0 interface 0 has no altsetting 0 [ 546.138645][ T6546] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 546.240786][ T6546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.275068][ T6546] usb 3-1: config 0 descriptor?? [ 546.521601][ T9813] netlink: 'syz.5.935': attribute type 4 has an invalid length. [ 546.639769][ T6546] usbhid 3-1:0.0: can't add hid device: -71 [ 546.674450][ T6546] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 546.718981][ T6546] usb 3-1: USB disconnect, device number 50 [ 546.964477][ T9824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.420182][ T6546] usb 4-1: USB disconnect, device number 56 [ 547.592146][ T9839] kvm: user requested TSC rate below hardware speed [ 547.885746][ T5957] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 548.067262][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 548.566302][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.945'. [ 548.577532][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.945'. [ 548.739203][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 548.769680][ T5957] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 548.803499][ T5957] usb 6-1: can't read configurations, error -71 [ 549.900440][ T5957] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 550.026040][ T9876] netlink: 'syz.2.950': attribute type 4 has an invalid length. [ 550.107940][ T5957] usb 6-1: config index 0 descriptor too short (expected 65316, got 36) [ 550.116763][ T5957] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 550.149760][ T5957] usb 6-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 550.174000][ T5957] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 550.197791][ T5957] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.214924][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.258078][ T5957] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 550.269209][ T5957] usb 6-1: no configuration chosen from 1 choice [ 550.275793][ T5906] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 550.434249][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 550.441919][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 550.458722][ T5906] usb 5-1: config 20 has an invalid interface number: 185 but max is 0 [ 550.468425][ T5906] usb 5-1: config 20 has no interface number 0 [ 550.475993][ T5906] usb 5-1: config 20 interface 185 has no altsetting 0 [ 550.487760][ T5906] usb 5-1: New USB device found, idVendor=06cb, idProduct=0009, bcdDevice=f7.96 [ 550.500344][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.510616][ T5906] usb 5-1: Product: syz [ 550.515542][ T5906] usb 5-1: Manufacturer: syz [ 550.520619][ T5906] usb 5-1: SerialNumber: syz [ 550.814335][ T129] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 550.979071][ T129] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 551.119738][ T129] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.137922][ T129] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 551.150757][ T129] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 551.169225][ T5906] usb 5-1: USB disconnect, device number 54 [ 551.194804][ T129] usb 7-1: Manufacturer: syz [ 551.218559][ T129] usb 7-1: config 0 descriptor?? [ 551.314459][ T129] rc_core: IR keymap rc-hauppauge not found [ 551.322126][ T129] Registered IR keymap rc-empty [ 551.341218][ T129] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 551.364250][ T5897] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 551.387973][ T129] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 551.465299][ T9881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.499959][ T9881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.534280][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 551.546969][ T129] usb 7-1: USB disconnect, device number 27 [ 551.561210][ T5897] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 551.576225][ T5897] usb 3-1: config 0 has no interface number 0 [ 551.603182][ T5897] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 551.612844][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.621780][ T5897] usb 3-1: Product: syz [ 551.626307][ T5897] usb 3-1: Manufacturer: syz [ 551.631659][ T5897] usb 3-1: SerialNumber: syz [ 551.651327][ T5897] usb 3-1: config 0 descriptor?? [ 551.683346][ T5897] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 551.867261][ T5897] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 551.882639][ T5897] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 552.446569][ T5897] usb 6-1: USB disconnect, device number 45 [ 552.678153][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.6.957'. [ 552.845135][ T9896] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.854581][ T9896] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.444851][ T5957] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 553.604260][ T5957] usb 7-1: Using ep0 maxpacket: 8 [ 553.611801][ T5957] usb 7-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 553.629812][ T5957] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 553.655430][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.685756][ T5957] hub 7-1:32.0: bad descriptor, ignoring hub [ 553.703029][ T5957] hub 7-1:32.0: probe with driver hub failed with error -5 [ 553.907247][ T9918] netlink: 'syz.5.963': attribute type 4 has an invalid length. [ 554.150516][ T129] usb 3-1: USB disconnect, device number 51 [ 554.178760][ T5957] usb 7-1: reset high-speed USB device number 28 using dummy_hcd [ 554.606362][ T9924] netlink: 'syz.4.966': attribute type 16 has an invalid length. [ 554.624536][ T9924] netlink: 'syz.4.966': attribute type 17 has an invalid length. [ 554.749216][ T5897] usb 7-1: USB disconnect, device number 28 [ 554.804306][ T129] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 554.966778][ T129] usb 3-1: Using ep0 maxpacket: 16 [ 554.983942][ T129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.015377][ T129] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.048029][ T129] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.065626][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.092981][ T129] usb 3-1: Product: syz [ 555.126312][ T129] usb 3-1: Manufacturer: syz [ 555.141174][ T129] usb 3-1: SerialNumber: syz [ 555.201551][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.366909][ T9924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.398666][ T129] usb 3-1: 0:2 : does not exist [ 555.442019][ T129] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 555.536421][ T129] usb 3-1: USB disconnect, device number 52 [ 555.658009][ T7465] udevd[7465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.933859][ T9924] ================================================================== [ 555.942258][ T9924] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa42/0xce0 [ 555.951267][ T9924] Read of size 1 at addr ffff888057cabd50 by task syz.4.966/9924 [ 555.959061][ T9924] [ 555.961438][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.4.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.961462][ T9924] Tainted: [L]=SOFTLOCKUP [ 555.961469][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.961482][ T9924] Call Trace: [ 555.961489][ T9924] [ 555.961496][ T9924] dump_stack_lvl+0xe8/0x150 [ 555.961521][ T9924] print_report+0xca/0x240 [ 555.961538][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 555.961562][ T9924] kasan_report+0x118/0x150 [ 555.961582][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 555.961608][ T9924] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 555.961635][ T9924] ieee80211_do_stop+0x1786/0x1f70 [ 555.961665][ T9924] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 555.961697][ T9924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 555.961725][ T9924] ieee80211_stop+0x1b1/0x240 [ 555.961748][ T9924] ? __pfx_ieee80211_stop+0x10/0x10 [ 555.961772][ T9924] __dev_close_many+0x344/0x6b0 [ 555.961790][ T9924] ? __pfx___dev_close_many+0x10/0x10 [ 555.961806][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 555.961824][ T9924] __dev_change_flags+0x2be/0x680 [ 555.961846][ T9924] ? __pfx___dev_change_flags+0x10/0x10 [ 555.961864][ T9924] ? netif_state_change+0x241/0x380 [ 555.961879][ T9924] ? __pfx_netif_state_change+0x10/0x10 [ 555.961893][ T9924] ? __pfx_set_operstate+0x10/0x10 [ 555.961918][ T9924] netif_change_flags+0x88/0x1a0 [ 555.961939][ T9924] do_setlink+0xc55/0x41c0 [ 555.961957][ T9924] ? __wake_up_klogd+0xe6/0x120 [ 555.961985][ T9924] ? __pfx_do_setlink+0x10/0x10 [ 555.962014][ T9924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 555.962039][ T9924] ? ___ratelimit+0x5a0/0x900 [ 555.962066][ T9924] ? __mutex_trylock_common+0x153/0x260 [ 555.962087][ T9924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 555.962108][ T9924] ? rcu_is_watching+0x15/0xb0 [ 555.962128][ T9924] ? trace_contention_end+0x39/0x100 [ 555.962148][ T9924] ? __mutex_lock+0x335/0x1350 [ 555.962169][ T9924] ? rtnl_newlink+0x8ec/0x1c90 [ 555.962187][ T9924] ? __pfx___mutex_lock+0x10/0x10 [ 555.962207][ T9924] ? ns_capable+0x8a/0xf0 [ 555.962225][ T9924] rtnl_newlink+0x14b0/0x1c90 [ 555.962247][ T9924] ? __pfx_rtnl_newlink+0x10/0x10 [ 555.962262][ T9924] ? __do_fast_syscall_32+0x1dc/0x560 [ 555.962280][ T9924] ? do_fast_syscall_32+0x34/0x80 [ 555.962297][ T9924] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.962330][ T9924] ? kasan_quarantine_put+0xbb/0x1f0 [ 555.962346][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 555.962364][ T9924] ? kmem_cache_free+0x197/0x620 [ 555.962379][ T9924] ? nlmon_xmit+0xb0/0x100 [ 555.962404][ T9924] ? __lock_acquire+0x6b6/0x2cf0 [ 555.962423][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 555.962438][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 555.962453][ T9924] ? __dev_queue_xmit+0x289/0x3140 [ 555.962474][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 555.962490][ T9924] ? __dev_queue_xmit+0x289/0x3140 [ 555.962513][ T9924] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 555.962536][ T9924] ? __pfx_rtnl_newlink+0x10/0x10 [ 555.962552][ T9924] rtnetlink_rcv_msg+0x7cf/0xb70 [ 555.962570][ T9924] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 555.962586][ T9924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.962602][ T9924] ? ref_tracker_free+0x63a/0x7d0 [ 555.962618][ T9924] ? __asan_memcpy+0x40/0x70 [ 555.962631][ T9924] ? __pfx_ref_tracker_free+0x10/0x10 [ 555.962650][ T9924] netlink_rcv_skb+0x208/0x470 [ 555.962670][ T9924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.962688][ T9924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.962712][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.962735][ T9924] netlink_unicast+0x82f/0x9e0 [ 555.962756][ T9924] ? __pfx_netlink_unicast+0x10/0x10 [ 555.962773][ T9924] ? __alloc_skb+0x198/0x3a0 [ 555.962788][ T9924] ? netlink_sendmsg+0x642/0xb30 [ 555.962808][ T9924] ? skb_put+0x11b/0x210 [ 555.962826][ T9924] netlink_sendmsg+0x805/0xb30 [ 555.962850][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.962871][ T9924] ? __import_iovec+0x5d4/0x7f0 [ 555.962889][ T9924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 555.962910][ T9924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 555.962924][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.962945][ T9924] __sock_sendmsg+0x21c/0x270 [ 555.962970][ T9924] ____sys_sendmsg+0x505/0x820 [ 555.962991][ T9924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.963017][ T9924] ? __pfx_futex_wake_mark+0x10/0x10 [ 555.963040][ T9924] ___sys_sendmsg+0x21f/0x2a0 [ 555.963060][ T9924] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.963081][ T9924] ? futex_wait+0x285/0x360 [ 555.963111][ T9924] ? __fget_files+0x2a/0x420 [ 555.963130][ T9924] ? __fget_files+0x3a0/0x420 [ 555.963154][ T9924] __sys_sendmsg+0x164/0x220 [ 555.963173][ T9924] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.963195][ T9924] ? rcu_is_watching+0x15/0xb0 [ 555.963220][ T9924] __do_fast_syscall_32+0x1dc/0x560 [ 555.963238][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 555.963253][ T9924] ? do_fast_syscall_32+0x34/0x80 [ 555.963270][ T9924] ? irqentry_exit+0x10f/0x660 [ 555.963287][ T9924] do_fast_syscall_32+0x34/0x80 [ 555.963305][ T9924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 555.963327][ T9924] RIP: 0023:0xf70dd539 [ 555.963342][ T9924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 555.963356][ T9924] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 555.963374][ T9924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 555.963386][ T9924] RDX: 00000000000080c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.963396][ T9924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.963405][ T9924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 555.963415][ T9924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 555.963431][ T9924] [ 555.963437][ T9924] [ 556.529620][ T9924] The buggy address belongs to the physical page: [ 556.536064][ T9924] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057caad80 pfn:0x57ca8 [ 556.546251][ T9924] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 556.555745][ T9924] memcg:ffff888030c7c982 [ 556.560020][ T9924] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 556.567684][ T9924] page_type: f8(unknown) [ 556.571982][ T9924] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 556.580613][ T9924] raw: ffff888057caad80 0000000000000000 00000000f8000000 ffff888030c7c982 [ 556.589451][ T9924] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 556.598150][ T9924] head: ffff888057caad80 0000000000000000 00000000f8000000 ffff888030c7c982 [ 556.606927][ T9924] head: 00fff00000000002 ffffea00015f2a01 00000000ffffffff 00000000ffffffff [ 556.615636][ T9924] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 556.624331][ T9924] page dumped because: kasan: bad access detected [ 556.630858][ T9924] page_owner tracks the page as allocated [ 556.636617][ T9924] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 7383, tgid 7382 (syz.4.352), ts 380750139236, free_ts 380282388293 [ 556.658202][ T9924] post_alloc_hook+0x234/0x290 [ 556.662994][ T9924] get_page_from_freelist+0x24e0/0x2580 [ 556.668598][ T9924] __alloc_frozen_pages_noprof+0x181/0x370 [ 556.674524][ T9924] alloc_pages_mpol+0x232/0x4a0 [ 556.679400][ T9924] ___kmalloc_large_node+0x4e/0x150 [ 556.684630][ T9924] __kmalloc_large_node_noprof+0x18/0x90 [ 556.690282][ T9924] __kvmalloc_node_noprof+0x6e/0x920 [ 556.695588][ T9924] alloc_netdev_mqs+0xa6/0x11b0 [ 556.700465][ T9924] ieee80211_if_add+0x45c/0x1370 [ 556.705441][ T9924] ieee80211_add_iface+0xb5/0x5a0 [ 556.710506][ T9924] nl80211_new_interface+0x883/0x1130 [ 556.715912][ T9924] genl_family_rcv_msg_doit+0x215/0x300 [ 556.721485][ T9924] genl_rcv_msg+0x60e/0x790 [ 556.726208][ T9924] netlink_rcv_skb+0x208/0x470 [ 556.730999][ T9924] genl_rcv+0x28/0x40 [ 556.735011][ T9924] netlink_unicast+0x82f/0x9e0 [ 556.739886][ T9924] page last free pid 5849 tgid 5849 stack trace: [ 556.746345][ T9924] __free_frozen_pages+0xbc8/0xd30 [ 556.752122][ T9924] __slab_free+0x2ce/0x320 [ 556.756574][ T9924] qlist_free_all+0x97/0x100 [ 556.761186][ T9924] kasan_quarantine_reduce+0x148/0x160 [ 556.766684][ T9924] __kasan_slab_alloc+0x22/0x80 [ 556.771557][ T9924] kmem_cache_alloc_lru_noprof+0x36c/0x6e0 [ 556.777394][ T9924] sock_alloc_inode+0x28/0xc0 [ 556.782101][ T9924] alloc_inode+0x6a/0x1b0 [ 556.786716][ T9924] __sock_create+0x12d/0x9d0 [ 556.791347][ T9924] __sys_socket+0xd7/0x1b0 [ 556.795919][ T9924] __ia32_compat_sys_socketcall+0x6df/0x9d0 [ 556.801868][ T9924] __do_fast_syscall_32+0x1dc/0x560 [ 556.807473][ T9924] do_fast_syscall_32+0x34/0x80 [ 556.812450][ T9924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 556.818997][ T9924] [ 556.821376][ T9924] Memory state around the buggy address: [ 556.827149][ T9924] ffff888057cabc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 556.835268][ T9924] ffff888057cabc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 556.843359][ T9924] >ffff888057cabd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 556.851437][ T9924] ^ [ 556.858162][ T9924] ffff888057cabd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 556.866248][ T9924] ffff888057cabe00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 556.874329][ T9924] ================================================================== [ 556.894382][ T9924] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 556.901649][ T9924] CPU: 0 UID: 0 PID: 9924 Comm: syz.4.966 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.912459][ T9924] Tainted: [L]=SOFTLOCKUP [ 556.916819][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.926938][ T9924] Call Trace: [ 556.930250][ T9924] [ 556.933392][ T9924] vpanic+0x1e0/0x670 [ 556.937411][ T9924] panic+0xb9/0xc0 [ 556.941169][ T9924] ? __pfx_panic+0x10/0x10 [ 556.945719][ T9924] ? preempt_schedule_thunk+0x16/0x30 [ 556.951118][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 556.957328][ T9924] ? preempt_schedule_thunk+0x16/0x30 [ 556.962731][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 556.968932][ T9924] check_panic_on_warn+0x89/0xb0 [ 556.973928][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 556.980147][ T9924] end_report+0x6f/0x140 [ 556.984481][ T9924] kasan_report+0x129/0x150 [ 556.989109][ T9924] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 556.995312][ T9924] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 557.001417][ T9924] ieee80211_do_stop+0x1786/0x1f70 [ 557.006661][ T9924] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 557.012271][ T9924] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.018410][ T9924] ieee80211_stop+0x1b1/0x240 [ 557.023335][ T9924] ? __pfx_ieee80211_stop+0x10/0x10 [ 557.028760][ T9924] __dev_close_many+0x344/0x6b0 [ 557.034088][ T9924] ? __pfx___dev_close_many+0x10/0x10 [ 557.039517][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 557.046733][ T9924] __dev_change_flags+0x2be/0x680 [ 557.054554][ T9924] ? __pfx___dev_change_flags+0x10/0x10 [ 557.061555][ T9924] ? netif_state_change+0x241/0x380 [ 557.067189][ T9924] ? __pfx_netif_state_change+0x10/0x10 [ 557.074864][ T9924] ? __pfx_set_operstate+0x10/0x10 [ 557.082486][ T9924] netif_change_flags+0x88/0x1a0 [ 557.087655][ T9924] do_setlink+0xc55/0x41c0 [ 557.092112][ T9924] ? __wake_up_klogd+0xe6/0x120 [ 557.097486][ T9924] ? __pfx_do_setlink+0x10/0x10 [ 557.102474][ T9924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.108364][ T9924] ? ___ratelimit+0x5a0/0x900 [ 557.113301][ T9924] ? __mutex_trylock_common+0x153/0x260 [ 557.118900][ T9924] ? __pfx___mutex_trylock_common+0x10/0x10 [ 557.125174][ T9924] ? rcu_is_watching+0x15/0xb0 [ 557.130508][ T9924] ? trace_contention_end+0x39/0x100 [ 557.136018][ T9924] ? __mutex_lock+0x335/0x1350 [ 557.140926][ T9924] ? rtnl_newlink+0x8ec/0x1c90 [ 557.145975][ T9924] ? __pfx___mutex_lock+0x10/0x10 [ 557.152205][ T9924] ? ns_capable+0x8a/0xf0 [ 557.156964][ T9924] rtnl_newlink+0x14b0/0x1c90 [ 557.162346][ T9924] ? __pfx_rtnl_newlink+0x10/0x10 [ 557.168803][ T9924] ? __do_fast_syscall_32+0x1dc/0x560 [ 557.174665][ T9924] ? do_fast_syscall_32+0x34/0x80 [ 557.181076][ T9924] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.188274][ T9924] ? kasan_quarantine_put+0xbb/0x1f0 [ 557.193681][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 557.198902][ T9924] ? kmem_cache_free+0x197/0x620 [ 557.203975][ T9924] ? nlmon_xmit+0xb0/0x100 [ 557.208422][ T9924] ? __lock_acquire+0x6b6/0x2cf0 [ 557.213395][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 557.218709][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 557.223936][ T9924] ? __dev_queue_xmit+0x289/0x3140 [ 557.229348][ T9924] ? __local_bh_enable_ip+0xd0/0x130 [ 557.235554][ T9924] ? __dev_queue_xmit+0x289/0x3140 [ 557.241045][ T9924] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 557.246390][ T9924] ? __pfx_rtnl_newlink+0x10/0x10 [ 557.251538][ T9924] rtnetlink_rcv_msg+0x7cf/0xb70 [ 557.256605][ T9924] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 557.261835][ T9924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.267377][ T9924] ? ref_tracker_free+0x63a/0x7d0 [ 557.272738][ T9924] ? __asan_memcpy+0x40/0x70 [ 557.277707][ T9924] ? __pfx_ref_tracker_free+0x10/0x10 [ 557.283241][ T9924] netlink_rcv_skb+0x208/0x470 [ 557.288058][ T9924] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 557.293615][ T9924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.299145][ T9924] ? netlink_deliver_tap+0x2e/0x1b0 [ 557.304924][ T9924] netlink_unicast+0x82f/0x9e0 [ 557.310138][ T9924] ? __pfx_netlink_unicast+0x10/0x10 [ 557.315473][ T9924] ? __alloc_skb+0x198/0x3a0 [ 557.320295][ T9924] ? netlink_sendmsg+0x642/0xb30 [ 557.325541][ T9924] ? skb_put+0x11b/0x210 [ 557.330042][ T9924] netlink_sendmsg+0x805/0xb30 [ 557.335221][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.340553][ T9924] ? __import_iovec+0x5d4/0x7f0 [ 557.345524][ T9924] ? aa_sock_msg_perm+0xf1/0x1b0 [ 557.350502][ T9924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.356347][ T9924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.361710][ T9924] __sock_sendmsg+0x21c/0x270 [ 557.366478][ T9924] ____sys_sendmsg+0x505/0x820 [ 557.371512][ T9924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.377107][ T9924] ? __pfx_futex_wake_mark+0x10/0x10 [ 557.382470][ T9924] ___sys_sendmsg+0x21f/0x2a0 [ 557.387461][ T9924] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.392804][ T9924] ? futex_wait+0x285/0x360 [ 557.397464][ T9924] ? __fget_files+0x2a/0x420 [ 557.402143][ T9924] ? __fget_files+0x3a0/0x420 [ 557.406936][ T9924] __sys_sendmsg+0x164/0x220 [ 557.411574][ T9924] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.416888][ T9924] ? rcu_is_watching+0x15/0xb0 [ 557.421794][ T9924] __do_fast_syscall_32+0x1dc/0x560 [ 557.427045][ T9924] ? lockdep_hardirqs_on+0x7b/0x110 [ 557.432270][ T9924] ? do_fast_syscall_32+0x34/0x80 [ 557.437333][ T9924] ? irqentry_exit+0x10f/0x660 [ 557.442235][ T9924] do_fast_syscall_32+0x34/0x80 [ 557.447216][ T9924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 557.453671][ T9924] RIP: 0023:0xf70dd539 [ 557.457996][ T9924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 557.478266][ T9924] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 557.486906][ T9924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 557.494916][ T9924] RDX: 00000000000080c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.503003][ T9924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 557.511022][ T9924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 557.519193][ T9924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 557.527376][ T9924] [ 557.531131][ T9924] Kernel Offset: disabled [ 557.535651][ T9924] Rebooting in 86400 seconds..