last executing test programs: 28m18.736313613s ago: executing program 0 (id=1071): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet6(0xa, 0x4, 0x8) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) 28m18.456788343s ago: executing program 0 (id=1075): r0 = socket(0x10, 0x803, 0x0) (async) r1 = inotify_init() fgetxattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)=""/252, 0xfc) r2 = socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) (async) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newlink={0x54, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e2a}]}}}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x100, 0x9bd}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge_slave={{}, {0x0, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD, @IFLA_BRPORT_PROXYARP_WIFI={0x0, 0xc, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI, @IFLA_BRPORT_FAST_LEAVE={0x0, 0x7, 0x1}, @IFLA_BRPORT_ISOLATED, @IFLA_BRPORT_PROTECT={0x0, 0x6, 0x1}, @IFLA_BRPORT_COST={0x0, 0x3, 0x8}, @IFLA_BRPORT_STATE]}}}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 28m18.356807472s ago: executing program 0 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x4, 0x77f, 0x5, 0x5373}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x201) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa61, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000001c0)={0x1, 0xd7, 0x2, 0x1, 0xe2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8a}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20004040) r6 = socket(0x10, 0x803, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000100)={0x5, 0x8001, {0x53, 0xc3fc, 0x6, {0x8, 0x7}, {0x5, 0x8}, @rumble={0x5, 0x9}}, {0x55, 0x3, 0x1000, {0x0, 0x1}, {0xf801, 0xa24}, @rumble={0x7, 0x7ff}}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="dc297bf1ce66483446d8201c47351c48446d35092c264952b8f5dc29101250a70dd587d7ce50b9d0498d730e2ebab5f00af36c7140005940a14d8ab9b12d393c3d0c4ee11a4d7387a436eae3fdf34c3066886a8e313cc51eb9b9202e0dfa69ff22f804a605555a9229ba5cf9a481032d85f29f418f14be1c5a5068f0e59e7dca13596a93002b768a2a9162dc177d1b696f0a20d8249cb3241b2cf5952a014e7ec0efbedcb8a132773999003dd76838", 0xaf}, {&(0x7f0000000800)="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", 0x4fa}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000000000800000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001400000000000000000000000700"/36], 0x38}, 0x200000e0) 28m18.241470099s ago: executing program 0 (id=1078): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400f50003ed02000905030000000000000904"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) (async) write$binfmt_elf64(r8, &(0x7f0000000480)=ANY=[], 0xfffffd8e) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc040564b, &(0x7f0000000140)={0xffff, 0x0, 0x1014, 0x6b, 0x68d, {0x800, 0xffffffff}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 28m18.164843417s ago: executing program 0 (id=1079): semget(0x2, 0x1, 0x250) semget(0x2, 0x2, 0x583) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd07}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0xa]}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa8, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000100010006001600008000000500120000000000060011000500000008000b0000800000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) 28m18.080972314s ago: executing program 0 (id=1080): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000398000/0x4000)=nil, 0x4000, &(0x7f0000000000)='/dev/kvm\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x7, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2a8, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0xc, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0xa, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x24008880) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r8, @ANYBLOB="100001800400", @ANYRES8=r2], 0x28}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x2, 0x303}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) setrlimit(0x7, &(0x7f0000000500)) pipe2$watch_queue(0x0, 0x80) io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28m2.877077527s ago: executing program 32 (id=1080): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000398000/0x4000)=nil, 0x4000, &(0x7f0000000000)='/dev/kvm\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x7, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2a8, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0xc, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x20005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x419, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0xa, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, 'gre0\x00'}}, 0x1e) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x24008880) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc048aeca, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r8, @ANYBLOB="100001800400", @ANYRES8=r2], 0x28}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r9 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x2, 0x303}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) setrlimit(0x7, &(0x7f0000000500)) pipe2$watch_queue(0x0, 0x80) io_uring_enter(r9, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24m37.684756129s ago: executing program 5 (id=2019): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c8000004300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r2 = io_uring_setup(0x3454, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) landlock_create_ruleset(&(0x7f0000000080)={0x1, 0x2, 0x1}, 0x48, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000834000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r4, 0x2219, 0x771f, 0x33, 0x0, 0x0) dup(r2) 24m34.501485947s ago: executing program 5 (id=2030): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x6, 0x8, 0xc4, 0x2, 0x7, 0x7, 0xf1, 0x7, 0xff, 0x41, 0x7d}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x9, 0x8, 0xb, 0xff, 0x6, 0x3, 0x3, 0x8}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01030000000000000000010000002c000000030a01020000000000000000010000000900030073797a31000000000900adee73797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480200001800700010072740000140002800800014000000015080002400000000010000180090001006861736800000000140000001100010000000000000000000000000a"], 0xc4}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_NAT={0x2c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r3, &(0x7f0000002180)={0x50, 0x0, r5, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r6, {0x403, 0x0, 0x8, 0xfff}}, 0x20) getdents64(r4, 0x0, 0x20000) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r7, r2, 0x7, r1, &(0x7f0000000780)={0xffffffffffffffff, r1, 0x3}) 24m33.515402959s ago: executing program 5 (id=2033): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x3, 0x8b, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)=0x0) syz_ublk_setup_queues(r4, r5, &(0x7f0000000380)={0x0, 0x983b, 0x1018, 0x2, 0x1ba, 0x0, r0}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4246, 0x1, 0x1, 0xfc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x28c3, 0x0, 0x3, 0x18f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c99, 0x80, 0x3, 0x233}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xccc5, 0x4, 0x4000001, 0x1fa, 0x0, r0}}], 0x4, &(0x7f0000003040)={0x2e, 0x13, 0x0, r4, 0xc0107520, 0x0, 0xffffffffffdfe, 0x0, 0x3, {0x1}, 0x0, 0x0, '\x00', {0x0, 0xd8f, 0x0, 0x0}}, &(0x7f00000030c0)) 24m33.179004669s ago: executing program 5 (id=2035): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x7ff, &(0x7f0000000000)=0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x24000080) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0xf861, r0, &(0x7f00000001c0)="d16ae3e4d068712c68df95ba1a58cf1d96ace40aaa47edb06bc4263994c040c6b7dd47a55e6bbeb4a6308bc3a255ed13ba5032863631f08c51afed6c6f1dc1b422a527f24fae83e049c1ed0eb436b575c8c505470142afddd99624198b80147bcaae6277732e09d436e016f053", 0x6d, 0x7, 0x0, 0x2, r3}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x400000b2, 0x0, 0x1}]}) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r14, &(0x7f0000000440)=""/55, 0x37) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 24m31.589540477s ago: executing program 5 (id=2039): r0 = fsopen(&(0x7f0000000200)='9p\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577d62652983030df30303097091f200000393300"], 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x82004) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000340)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180), 0x0, 0x800, &(0x7f0000000480)={0xa, 0x4e23, 0x20000000, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r0], 0x40}}, 0x0) socket(0x10, 0x803, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='.\\\x00', &(0x7f00000002c0)='/dev/dvb/adapter#/demux#\x00', 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000001c0)) 24m31.379699351s ago: executing program 5 (id=2041): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '(!\xefG&^'}, {0x20, 'syz0\x00'}, {0x20, ':\x81'}], 0xa, "1308e08dd4d3d6f7445933cb11cee2c516cd636d66917434aa6fef5743cb2fd163658dbd50037d470a8ab00aee3cded51801e710c4ff2ac5bb40f4c49437b9099f9ba6c882c61d63a1b2ab8b4ac54bb14e6501442ebf546a45b59bd76f30a4d899293413c45a417fdd1b153addedb5fa41790e05a573ee8934d54233cef0accf0d97bb9da65f3ced42eaafa6dbfb87987eb720ec013f1cff238405182087a4609bfbc328007dfa1e66d570"}, 0xd3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x101, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x7c, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x5, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x7, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf42, 0x6, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 24m30.69827553s ago: executing program 33 (id=2041): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {0x20, 'syz0\x00'}, {0x20, 'syz0\x00'}, {0x20, '(!\xefG&^'}, {0x20, 'syz0\x00'}, {0x20, ':\x81'}], 0xa, "1308e08dd4d3d6f7445933cb11cee2c516cd636d66917434aa6fef5743cb2fd163658dbd50037d470a8ab00aee3cded51801e710c4ff2ac5bb40f4c49437b9099f9ba6c882c61d63a1b2ab8b4ac54bb14e6501442ebf546a45b59bd76f30a4d899293413c45a417fdd1b153addedb5fa41790e05a573ee8934d54233cef0accf0d97bb9da65f3ced42eaafa6dbfb87987eb720ec013f1cff238405182087a4609bfbc328007dfa1e66d570"}, 0xd3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x101, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x7c, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x5, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x7, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf42, 0x6, 0x3, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.621507592s ago: executing program 4 (id=9398): syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r3, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r3, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r3, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x4, 0x80, 0x1, 0x7, 0x2b, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000080)) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) 5.067117026s ago: executing program 2 (id=9401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) inotify_init1(0x80000) (async) inotify_init1(0x80000) epoll_create1(0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$packet(0x11, 0x3, 0x300) select(0x40, &(0x7f00000000c0)={0x2, 0x202, 0x9, 0xa52, 0xb7, 0x7, 0x3, 0xd31}, 0x0, &(0x7f0000000100)={0x7f, 0xfffffffe, 0x80000010, 0xe, 0xa, 0x200, 0x2, 0x22451915}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2000) shutdown(r0, 0x0) 5.059824689s ago: executing program 1 (id=9402): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "d20439d998dac410e5dcc97b04afe8ae67f94e5c16bd07cdb8dc4e6df97f1f94f9c6a5693a2d381fab71f9c7c47834797b49e1b83812eaf898462d97008563047d6ca24c58933798016d90d2e436b5924434bf42c36b255dd85cfe585be50a49cf513a3179c21d3cba73c4d9109dc6352d65"}, 0x7d) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c010000000009"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x100}}, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) ioctl$TCSBRK(r2, 0x5409, 0x40) 4.984842334s ago: executing program 3 (id=9403): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000340)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 4.94230234s ago: executing program 3 (id=9404): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x0, 0x0, 0x500, 0x6e4, 0x5400046}) 4.890822495s ago: executing program 3 (id=9405): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0xdfdf, @local, 0xe218}], 0x2c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpgrp(0x0) getresuid(&(0x7f0000002380)=0x0, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x0) fstat(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() statx(0xffffffffffffff9c, &(0x7f0000002740)='./file0\x00', 0x4000, 0x0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002940)=0x0) r13 = getuid() syz_fuse_handle_req(r1, &(0x7f0000000080)="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", 0x2000, &(0x7f0000002bc0)={&(0x7f0000002080)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x2d, 0x5, 0x2800000, 0xdb8, 0x40, 0x0, 0x5, 0x0, 0x0, 0x4, 0x5}}, &(0x7f0000002100)={0x18, 0x0, 0xc, {0xf15}}, &(0x7f0000002140)={0x18, 0x0, 0xfffffffffffffff9, {0x400}}, &(0x7f0000002180)={0x18, 0x0, 0x100000001, {0x5}}, &(0x7f00000021c0)={0x18, 0x0, 0x1}, &(0x7f0000002200)={0x28, 0x0, 0x3, {{0x1, 0x3, 0x1, r2}}}, &(0x7f0000002240)={0x60, 0xfffffffffffffff5, 0x8, {{0x5, 0x9, 0x101, 0x7, 0x8, 0x15, 0x401, 0x2}}}, &(0x7f00000022c0)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000002300)={0x14, 0x0, 0x10dd, {'+!.\x00'}}, &(0x7f0000002340)={0x20, 0x0, 0x0, {0x0, 0xa}}, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x5, 0x0, 0x0, {0x6, 0x81, 0x9a0a, 0x80000000, 0x9, 0x4, 0x1000, 0x5, 0x96, 0x2000, 0x1, r3, 0xee01, 0x9, 0x5}}}, &(0x7f0000002600)={0x90, 0x0, 0x10, {0x1, 0x3, 0x6, 0x8, 0x39, 0x4, {0x6, 0x8c, 0xe2, 0x6, 0x3, 0xffffffffffffffff, 0x6, 0x2, 0x0, 0x1000, 0x8, r6, r9, 0x6, 0x3}}}, &(0x7f00000026c0)={0x50, 0x0, 0x7, [{0x1, 0x6, 0x1, 0x4, '\x00'}, {0x2, 0xffffffffffff0001, 0x3, 0x0, '%.$'}]}, &(0x7f0000002880)={0xb0, 0x0, 0x2, [{{0x1, 0x3, 0x8, 0x4, 0x727, 0xffff, {0x5, 0x7, 0xffff, 0x9, 0x800, 0x70, 0x3ff, 0x6, 0x1, 0xc000, 0x400, r10, r11, 0x8, 0x11bb0000}}, {0x7, 0x1, 0x1, 0x5, '\x00'}}]}, &(0x7f0000002980)={0xa0, 0x0, 0x5, {{0x0, 0x2, 0xd, 0x7, 0x80, 0x2, {0x5, 0xaad, 0x5, 0x6, 0x80000001, 0x3, 0x9, 0x8, 0x8001, 0x2000, 0x2, r12, 0xee01, 0xc54c, 0xffff}}, {0x0, 0xc}}}, &(0x7f0000002a40)={0x20, 0x0, 0x6, {0x273, 0x0, 0x1, 0x3e20}}, &(0x7f0000002a80)={0x130, 0x0, 0x5, {0x2, 0xffff, 0x0, '\x00', {0x0, 0xf, 0x400, 0x8, r13, 0xee00, 0x8000, '\x00', 0x10001, 0x0, 0x1, 0x8000, {}, {0xfffffffffffffff8, 0x648b}, {0x7, 0x8}, {0x2, 0xffff}, 0xcb, 0x3, 0x100, 0xfffffffc}}}}) lchown(&(0x7f0000002c80)='./file0\x00', r4, r7) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r14, &(0x7f0000002d00)={0x14}, 0x14) ioctl$XFS_IOC_GETBMAPX(r14, 0xc0205838, &(0x7f0000002d40)={0x1, 0xd, 0x4, 0x0, 0x8, 0x10}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000002d80)=@sg0, r5, &(0x7f0000002dc0)={0x80000000, 0x6, 0x1}) r15 = openat$panthor(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r15, 0x40086414, &(0x7f0000002e40)={0x0, 0x76}) r16 = socket$inet_smc(0x2b, 0x1, 0x0) r17 = syz_mount_image$fuse(&(0x7f0000002e80), &(0x7f0000002ec0)='./file0\x00', 0x1000, &(0x7f0000002f00)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6cda}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}], [{@uid_eq={'uid', 0x3d, r8}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}}, 0x1, 0x0, &(0x7f0000003040)="ef2cd7745562f67cf2e8a50baa33b0e255b59ccbe3a6401b03a662b07793c5dfa0cec89d057376d8016645af943a34aab110c5fc44f66c9373b726b90599007239cbf05e73c1b49205491a2b4d5bce1471ea6e567f0325fbf4589d8fe3f5fa18061a40f91e8a4bc238d67d47210427a8add7246120a123b6516d721384e45bb10fe032ebadc8af58456428c9") r18 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003100), 0x404000, 0x0) r19 = accept4$packet(r18, &(0x7f0000003140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003180)=0x14, 0x80800) recvmsg(r16, &(0x7f00000032c0)={&(0x7f00000031c0)=@nl=@proc, 0x80, &(0x7f0000003240), 0x0, &(0x7f0000003280)=""/56, 0x38}, 0x21) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000003300)={'gretap0\x00'}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r18, 0x4, &(0x7f0000003340)='\x00', &(0x7f0000003380)='./file0\x00', r17) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f00000033c0), 0x1003) getsockopt$IP_SET_OP_VERSION(r19, 0x1, 0x53, &(0x7f0000003400), &(0x7f0000003440)=0x8) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000003480)={'bond0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.805344761s ago: executing program 3 (id=9406): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x501080, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xd9d, &(0x7f0000000040)={0x0, 0x8c8a1, 0xc000, 0x18, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3], 0x108}}], 0x2, 0xc040) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 4.794127814s ago: executing program 2 (id=9407): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) ftruncate(r2, 0x5) (rerun: 32) mmap(&(0x7f00008a2000/0x4000)=nil, 0x4000, 0x2000006, 0x10, r1, 0x87414000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000001600)=""/4069, 0x40f00, 0x2}, 0x94) (async) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1, 0x80, 0xf}}, 0x30) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00190f000000543af754d30200000000000000000044c31f9573ae167701387623492caf5ca2a46e9f6c8ee143fa55a743b2e4adaae32b08be8fdd586bf78a415d3d6cc06a4ff6c96efebf7ca4e69ae35df4710d3e036b2357"], 0x0}, 0x0) (async, rerun: 64) r4 = syz_open_dev$hiddev(&(0x7f0000000180), 0x37a, 0xc000) (rerun: 64) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000000100)={0x2, 0x100, 0xf}) r5 = syz_io_uring_setup(0xbd9, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) (async, rerun: 32) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) (rerun: 32) fadvise64(r6, 0x65, 0xf7f, 0x2) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x7, 0x30, [0x40, 0x7, 0xffff, 0x4], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000040)={0x5}, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x101000d) (async, rerun: 64) listen(r2, 0x2) (rerun: 64) 4.737387064s ago: executing program 2 (id=9408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0xaad, 0x6, 0x3f13, 0x6, 0x800, 0x94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r5) pselect6(0x40, &(0x7f0000002a80)={0x7, 0x10000, 0x7, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffffc}, &(0x7f0000002ac0)={0x5, 0x7, 0xe5f, 0x5, 0xff, 0x3, 0xdd, 0x2}, &(0x7f0000002b00)={0x9, 0xfffffffffffffff9, 0x10, 0x9, 0x4, 0x0, 0x2, 0x2}, 0x0, 0x0) unshare(0x28040680) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r6 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x5, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r6, &(0x7f0000000080), 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x5, &(0x7f00000001c0)=0xc24, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x2, r8, 0x5}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x8, 0x0, 0x0}}, 0x10) 4.565438894s ago: executing program 4 (id=9409): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000100)="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", 0x174}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x2, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) clock_adjtime(0x4, &(0x7f00000002c0)={0x6, 0x3f8, 0x4, 0x22, 0xa, 0x2, 0x1, 0x1, 0x0, 0xa30, 0x7f, 0xaa5, 0x0, 0x2, 0x0, 0x4, 0x5, 0x0, 0x7ff, 0x9, 0x7fffffffffffffff, 0x2, 0xfffffffffffffffd, 0x8, 0x6, 0x10001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r2, 0x4) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 4.546030765s ago: executing program 4 (id=9410): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000000)=0x13, 0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0) 3.969315887s ago: executing program 4 (id=9411): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000300), 0x1) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) pselect6(0x40, &(0x7f0000000100)={0x403, 0x635d, 0x7, 0xc, 0x4, 0xfff, 0xf7fffffffffffffd, 0x9}, &(0x7f00000001c0)={0x21, 0xac, 0x0, 0x7, 0x28, 0x5, 0x8000000000020001, 0xb}, &(0x7f0000000200)={0x5, 0x1000, 0x0, 0x4, 0xffffffffffffff81, 0x8, 0x9, 0x4b}, 0x0, &(0x7f0000000040)={&(0x7f00000004c0), 0x8}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) landlock_restrict_self(r2, 0x8) times(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r4, 0x409, 0x6) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0x4, @loopback, 0x1}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x80, 0x0, 0xfed2}) listen(r5, 0x5) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f00000003c0)=@multiplanar_overlay={0x0, 0x8, 0x4, 0x100, 0xc, {0x77359400}, {0x5, 0x2, 0x70, 0x2, 0x8, 0x80, "a699909c"}, 0x3, 0x3, {0x0}, 0x3ff}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e63, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000e}, 0x1c) listen(r6, 0xb) 3.96862412s ago: executing program 4 (id=9412): syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff04010009050100100000ff0909050a1000020101070905080e0800030180c71004f2a7471c03c0f3f4ca2fea06ed21c2893b526ca2ae4c6320285e61c7047008590b991f436e3dcb5e0a1e180c381883c8206e6823e6d13fb81f0050a160ee9c434d7599cdd5f1ebcb129c56aadf40ff9bd4e08e2e2701d1a2325e6eecf743f153034002ed1ce648aa"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x28}}, 0x20050840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000540), 0x2000) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3.864196373s ago: executing program 2 (id=9413): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0x38002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x2, 0x80001) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r3}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = eventfd(0x3ff) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000005c0)={0x1ff, 0x50000, 0x4, r4, 0x4}) pipe(&(0x7f0000000440)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20a82, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) splice(r5, 0x0, r2, 0x0, 0x7, 0x5) ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000eedbe72508004b00c19e391713000000080015000100000008000100"/44], 0x28}, 0x1, 0x0, 0x0, 0x4000855}, 0x4040000) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 3.686540362s ago: executing program 1 (id=9414): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6b, 0x9, 0x4, 0x800000, 0x10001, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x5, 0x37, 0x5, "f74037f2"}, 0x7, 0x4, {}, 0x1b66}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x6b, 0x9, 0x4, 0x800000, 0x10001, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x5, 0x37, 0x5, "f74037f2"}, 0x7, 0x4, {}, 0x1b66}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x800}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xeb4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x48884) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000040)={0x0, 0x30d6, 0x60000, 0x0, 0x80000000, 0x0, 0x6, 0x4}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r3, 0xc008644c, &(0x7f00000000c0)={r4}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.480997335s ago: executing program 1 (id=9415): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f00000002c0)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @dev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc9c1}, 0x4000) poll(&(0x7f00000000c0)=[{r0, 0x2001}, {r0, 0x282}, {r1, 0x401}], 0x3, 0x5) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000000)=0xff06ff) r11 = socket(0x400000000010, 0x3, 0x0) write(r11, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000300", 0x33a) 3.178106189s ago: executing program 1 (id=9416): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x1, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x18, 0x8, 0xc9, 0x4, 0x3, 0x5, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0xfa, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xcccd4000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0xb, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4, 0x7}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0xe8, 0xe, 0x0, 0x0, 0x7}, {0x100000, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1, 0x800, 0x900, [0x17a, 0x0, 0x10000, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000080)={0x7, 0x9}) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001102bbd703157dbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e0000001080002"], 0x60}}, 0x814) 3.106664958s ago: executing program 1 (id=9417): gettimeofday(&(0x7f0000000000), 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003a5f338510000401140080102030109021200010452100c090470070028c56b0d"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x8, 0x2, 0x17, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x2080) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req={0xfffffffb, 0x140000, 0x439, 0x8}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000b06010300000000000000000200000005000100070000000900020073797a310000000030000780180009"], 0x58}, 0x1, 0x0, 0x0, 0x2050}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 2.681071528s ago: executing program 4 (id=9418): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f20436120000000000010902240001000000090904001001030003000921fcff050122290009058103"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x4040, 0x80) truncate(&(0x7f00000006c0)='./file1\x00', 0x2000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f00000000c0)=""/23, 0x17, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x2000, 0x7, {0x0, 0x2710}, {0x2, 0x0, 0xd3, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x3c, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655125c}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r6, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r6, 0x0) r7 = getegid() fchown(0xffffffffffffffff, 0x0, r7) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="600d2900000029053ae907160d146e599f41b2ab6cfda5a571b8df92dbaeff924bbf5962dcddbdd0ec2a4f484d9ba040bd29fd49cf496ae3146126863b93fecb778bea42d33caff82c555bb72ac88e865e31a8506ad50a8d2b3da47bd54594ac124153a7c65808c927637fd18353e8c67b562a957872e1b13bbbbae7fb25264533fd5901efca8fb4460c0ee30745545c90c833b46eb26d240187b35c9126c98d62be7319490bddd0d509a41f96c91261b88af7e156b8679aa4cd38fa646ee2a010739148833d6c9050aaca69847bdce4afd32073f4b34707a556ec8aeb9cdd29c630bd"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.995020991s ago: executing program 6 (id=9420): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46ffc) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'ip6tnl0\x00'}}, 0x1e) (async) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'ip6tnl0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x1a6) connect$pppoe(r5, &(0x7f0000000380)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) ioprio_set$pid(0x2, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x3c16, 0x400, 0x3, 0x3}, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000040)=[@dead_binder_done], 0x65, 0x0, &(0x7f0000000080)="568e4ad2a6b2f3db29095bff85c65de80ddcc2aacdc1f8c90f2b5bcba6a66d9c7a4385b03afd750733ccb3f9f566404754e3dc6fd5893e2e0214219c088f641e553e9fd71bcdb0d0ba3a83386df3f6d025719d05aa11f4fa9e767b9f5499f43b378f3490e3"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x54, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x54, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r7}, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540)={r7}, 0x4) readv(r6, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/46, 0x2e}], 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0x7000, 0x3000}) 1.7571008s ago: executing program 3 (id=9421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000300), &(0x7f0000000380)=0x4) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0xeeee8000, 0x10000, 0x7, 0x10, 0x6}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x7, 0x100, 0x0, 0x400000, r9}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x5, 0xe51, 0x2, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7b00, 0x1, 0x40000000009, 0x5, 0x6a], 0xeeee0000, 0x808d6}) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3, [0x79a, 0xab2, 0x445, 0xf2e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000200)=0x4) 1.736783274s ago: executing program 3 (id=9422): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x501}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x48}}, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x7b, &(0x7f0000000180)="1d7d3d05c5693b8ab7bab2b106307727afa20690fa4281ceb60e4e1139dce02e2242283f7ac3800b75a43fab7f1cc1c341059259a224535ce850d8f7ca063c2b677635c3f24970c0a75422b08bab02e68e238f19023842835d06d03325339c28e2daf03629fb882277695b1a77a40b288251b3f637b1832f8e71ff", 0x58, 0x0, &(0x7f0000000200)="3bcfc213d1b0e4a13c152df180ded50ccecae9aac66d4872cd8b1d828eb1a475d83d2a67a6d1778d5cd1b55b14b316f869451b68cab5105b27bc7496d86d5fed2476855e85e5e4324435edb14883ee8d512ecdc694059bf0"}) syz_usb_control_io$uac2(r2, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x1f, "7098615c0db74dfa1a70c0a831e8ed9fb7ba234253177f2b4746848aab9b96"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000003e40)={0x2c, &(0x7f0000003c80)={0x0, 0x11, 0x9, "59d685382ace374e03"}, 0x0, 0x0, 0x0, 0x0}) 1.121720199s ago: executing program 6 (id=9423): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x9}, 0x8) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x1001}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4f}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xee5e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200484dd}, 0x4000080) 996.089726ms ago: executing program 6 (id=9424): syz_open_dev$vim2m(&(0x7f0000000000), 0x800c2, 0x2) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800c2, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000030d2dbc7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000000003020000128009000100626f6e64000000000c00028006001800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000030d2dbc7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000000003020000128009000100626f6e64000000000c00028006001800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x6, 0x6, 0x7f, 0x6, 0x4d, 0x39cc195a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x7, 0x7, 0xe661, 0x7fff, 0xff, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x0, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x20004, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x9, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x80001000, 0xfffffffc, 0x0, 0x0, 0x7, 0x1, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0xd, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x4, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7f, 0xa, 0x1, 0x209, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0xa, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0x4, 0xa, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1007, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14b, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x4006, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delqdisc={0x34, 0x26, 0x1, 0x70bd27, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x32, 0xff, 0x64}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x32, 0xff, 0x64}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pim6reg0\x00'}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x10}, 0xc1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x4b, 0x0, 0x0, @stepwise={0x39c, 0x3ff, 0x9, 0x2, 0xd126, 0x6}}) 897.400968ms ago: executing program 6 (id=9425): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x9000, 0x2a, 0x4000, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @mcast2, 0x6}, 0x1c) openat(r2, &(0x7f0000000140)='./file0\x00', 0x290000, 0x100) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000180)={0x3, 0x2}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x7, 0xc8, 0x94, 0x4, 0x2}}}, 0xb) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000240)={0x80, 0x4, 0x4, 0x21b458b3cb75860b, 0x800, {0x0, 0x2710}, {0x5, 0x1, 0x6, 0x9, 0xcc, 0xc, "f36fac5c"}, 0x7, 0x4, {0xffffffffffffffff}, 0x7fffffff}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_open_dev$dri(&(0x7f0000000300), 0xf02e, 0x204000) r4 = syz_open_dev$vcsu(&(0x7f0000000340), 0x1, 0xd8440) tee(r4, r2, 0x5, 0x1) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0x1b}, @l2cap_cid_signaling={{0x17}, [@l2cap_move_chan_req={{0xe, 0x3, 0x3}, {0x8, 0x46}}, @l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0x40, 0x5}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x0, 0x6}}]}}, 0x20) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x6a}, @l2cap_cid_signaling={{0x66}, [@l2cap_conn_req={{0x2, 0x5, 0x4}, {0xed62, 0xfff7}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x4160, 0x79c6}}, @l2cap_move_chan_rsp={{0xf, 0xf9, 0x4}, {0x7, 0x31b3}}, @l2cap_conf_req={{0x4, 0x8, 0x3c}, {0x10, 0x6, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x2, 0x4, 0x7fff, 0x9}}, @l2cap_conf_ews={0x7, 0x2, 0x200}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x4800}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x10, 0x6, 0xb, 0x7, 0x9}}, @l2cap_conf_ews={0x7, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x6, 0x8e, 0x7, 0x2}}]}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x8, 0x5}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x7}}]}}, 0x6f) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "7feab8b7199a65983c745e20591c1b7909aebf73426e9d7fbfa2ba439d81c20ef0c99571d6d42e5bddf6e0432d69b2ad7096deb99e0324168b671527f688094daa56e516fd2ebbfc7ed660dd9d683974c53e87dabdaccc35dab6db78e10d8f3d71a8d1fcc8cdb840f888671499905019702f32c57c99bc1df0723f83e26905a44edca75b5d42c018af32c54b5c68ebf39a5454b4db8a46b07f12cabe70923229a81ff9e1ba4acf505fe83dd7b0466b0fc373101bc11133e23a0cbbfecf1eaa647e68b32aca3db2175fb1ca52d2abef788432a1a461e6b9d3801972d76f226bcad35f205d687f77b2352d35e90c38dca635dffa3f836d6ccf3ca6f83282bf0ba3c23fc047e47041ca660a1114c179969e1e389f191e0837f35944502ad6832e28df4cd67d789008f068ee68f315f733e3b0c8319e4f8da43fa6cb46aa34118fc34459666181d15d2147d7856dea306447922afa3812e0111659009c3b7f1831e8ebb03003c97fc36ab4f210a525a5abf4b6595d33440defa143523bdb0b3ff447b0354a58bf9812eb9c04901d897ca2955fc82cf3d9817c246d32d3f0a166862b697fb2d948779e81871546c6423b628b508c3adcacb37c30380143e09df27d015e9b9e986fd41a5c903e8aaaa2144f923802d387f997dd3188a0f7faa82eb7a8d7f180e767d1ed6fc468a43ab06e5e77608aea564353aa88b5ada85bd5840ce6fdf389047ff6fb1cff94383c17b929da51cf76220f1e85f5b4fc7b5d9b5da1100f3bd788a111b8e58331f7772d5793b1891d84bdbdbb3d1a99fc0fbb690190f8a589cf77e91ce9d68ffd593403033d867444320de72dc5e23ff43401ec2d32e3314ae213d278784d8bb820f5589b923b96aa24727267fe830d6f36ae26e8b39bbd4bcb34087268cd9823966944bdec64de8feee85ce3ae9d52b12c86a592c94deb44df2922957efbfbce107059dadb4b6af159708614ad7938638d28d3d279d433228803aa65f375b9a016dd70ee0ced3090601a312bf10bcecfc16c13a8b99d6edf5e31c9b9af8d644eeb5462932251fc2ba65b72ae826c818e2714cde2970796596ca4a112a40971f28459a24194cf5a0d0e4b16b2d93528ba93075ac21ea84304fa4160c235e5a77e4e4e088ad52643b1e0386f5ae438fef509669999226711a97aed3c346d7248cfe61cf346a7c5d7a0c953e556eb257c872fdcf40ea6ffc5348c177e29f72bec5009f67a82cc501bd163001c096bd192dbe2f67986c371886c289c037a57677175624ba55acb6464efea1bc1acb20f98dfcecb7ad48131be44f070baba04f675d81f16b60ada5b77e57df10a34acd7fb980a8f898bc2c6fc9af523ef4a7f616b4908b3cd7ec62f2e9156cc10990636c7f47b211c6535bd237ae91fb344178d105eed4ae9b63e18669ad338b245de1cbf383e8cbbe8bf8cd1af05eed311300982c8546950306ee893d13618571d43dd0bb5d3224c1f42f36bf9a67e1f310f6973b265361ba95456ab178cf4d83df4be859f78f77cbf32ad18c398470a5cc9a9a1a330b9d5f81083f1fb00bd40e7bd2220f12bbba1ff2da4b861a5484ae072ebbab4c447961de9f7cf3c569b36031fac2868ada4541c93dc8bf2590411d4efef038a52104e0c374d8f0c2ae5574095f1648130cc4c355271ee3367d337ab82410df214d1ceb85af575f152d89e809c44ebaad90b43e9ed0ba659f94f6a828137901c8d622a1cc65871200d678aeecd8dd0a1f72f9c811a847bf9c55e3f79669f5a5e5dc0df09ca134c1163460361e2693f3ce593ddb2032a5d45c4f5cd3140d9ebd0a998679634297d2b1f8c03808a696c10f0283cc904a20b1cd5e07d4b92fd7d21924410580d7284cb13d8a9103cdd38341f78dfd447c3360a4855ad88cb580d71f3db8b9f112ed8be1f0bf68cc94a37c8b7fe9c6cffa7dd5ea0a1d0e5f12e15a54acdfd35cf87b1c7acbbfb23159aa64ebc1f0ab4c62cfcc97eb65e6ce9c62a76b6b62f2a42d78d6b2bc95ff60deee50cf0eca9717449f609fa6719c4b2dec04a9d2312f4fb2a12b7874c2922d1ffc93cce08e074b820290209d10196ac8995f5a0538e103909dc0a5a1659d6541413731306e8ee8d4ec59abc10e2e1563f0233ed9d8a67e57e736514870bf189ff7f2929d895603b88583d821d00085857425f529b9db70e7a10da37ce2a79093c72f55f32232a5d31c4724e0fd683e2f5b275c3bea603f9323461e9e57984825af1f943aea9461630ed6debc61cc19e4c3c267f092e1decae5d0942fb9b8ca58a914cfeafc44a2be3dddeadf31c27964b128c32082e0b5593781377f7bf14c2fce3e8c796ed3f293a805845cbec0a8c884d0b85d7c85e0a714388bd57f4522a6f65a36d337561d75a9b26b3352528a0af9115c6c6e5baf46545f7c73b4ed7e7d3cfec063e233f98b48bb700d12c9c0e8cb38d846526c96c885d809d3fd42142d4f1429af56f22ecc5fc360f6cea49c5579e65846213203b1d5bf07f145078d3bac033ff3ad3ddd9d4b2db394c338e3396f193faf891ef56b17aab15209e9c4d44011b6a96848ac2b4d40a2aa151abb0995800578a4eea82cf51d1dad8fda410b397aaa55f3fc087742cfac0285fe024ddb94eb923b8735a634250b4ef28ff2ade8921b95cbb31474af322ff0f2cdc66905b3ae46645f974a90efd6ab074a690035b03b56fd133ad60af4df3f54352113f1e752dd8effbb2ad059431efdc29e8c5bd6d8464ac1021407b8bde6bdfbfab38e1597ff9d28790b019ba31aac2ee73d77749146233e561d1c4e59898204005fd781aba0374f2c74a7b3772fcf44137b4db70ac8e19ecf56951dc37fbabbee76c4aa8f9c91fb2f9793128ff6e62f837aa648e522ed388693226555899d9035794055d57122ecf07eb8c3927636e048dfdd3c09cda6d49107fb3837c17b64a25e239a26ff9a6be949fbe2e208477a5bfc30d6c064079dc3948690ee1bdba54e413e684482fc7253ffbda4181cc1ae8dfa406e3274f83f3fbb2a0c46eb5f881576d3ddbbd5613caac57242bf029883518d886bb6c0890a32a381b5d0c4134569b42781fc25c72cb65e1c298336c79c5ad02396224d61e052b9f1bf15b4eb07a7624eb3c76b28299be7f4abd8779f8854a3c84e0084343fe6a6e8ec6ae4dd1593a8664aa51426e8878dae43bdd58ace23ce8e63fb0a8439d2c47a2c1035f0681ca84c0604775ed245d38f10f342b4ed62d4d10b8db6e2af70c949fe55e259702a7c9c02a5538e8c7edae2aee91a670c1d626800c9c7a51c68392a28c0b53ff7d91418a5725c2a4d9d16e0050c25138f81e1725d398de1b928490d5ce9a0bcd3dfd5e2991ce1a60b4f99538e82332358e0ea446e6bf1b0ca1f9f2d6138db55a4e7fd13800dbb83edaa4765db6e40c5145c55888a87142e1d67f81614ecc41d539cf71d8de45bbf213727b0af6360ae6440a33ed1e7f011dfa3f91dc83c1924d9ea26651f385dc4a78696defcfe0834ddb59ff46a49932e4c9e3b2a14accb4555e16a57668464d3cb8a7796bf97722f3625c968a191923751ce92827d73020abbe225b5e1317a0a3f54b32dcd4b0df89ee4688f244c4f4860f65d9c3cf7b14ebf90e0ea68fb1aef6bba7254fd19020140ada1f12d48d881d4a98b294c386b1e676be4e403a10106d1911ffca1588009536326cb137e63eaf9942234b374c6d0f206569bf1e9db890140cb5b8d53cfd0305e761ed7cbfa1a2cae720eb9082fc358c2214029ef8edea148c852cfd76fcb9e74b5291d4db48024f5957f9d9ce9b567727fffbf7a1180175753eb082d244e795fcdcdddf1ebe982c5bdb8aebb3f15eca57f0b8354e47275cf619d35d4fdc7b2d42a84a794209cf462b09315e84d805a44896db04faacfc912107dd927355ea6d369c60e370d6f066f1c3d6783aab788fa4d5b54c768ceedbfeacc15b44aae658c05bbd82ea35a6ce9566243722615aff1331c468f7478e458eaf964b487399353692eeaed2f5ac612936ecfd1e61794e913fc96417fb1096247dee711b3394235fa48ef1e253ae9961b4c0ce748f8160bbf2ccf9add3630dd134337f639b443c6d75229b8dc8af9da8ac9b16fad300aacea78c42b4a8699079110e7c37f3bd0bb3a2209e194ab46ea62f12375176794b29d6aab7967f22d4be5aa8bb2b0693758f4cd394d6bcaa85064a0c4b8da081e4f3266dabfa7f7391c194c4ad1de97f6d6e9ed777515be8214ecc2c6012aa2afafe7aa9253181e374bc89c0166ad61ecbfdd03e4d46dc837c138356aad4488eb9df0f7aa69f62e963e2fbb90c8220ef82c292f3354e93862e6dda2f82ed914988bf124e435f34ae0f3b853605bb6f3cb3ff5ad55d9bdc1071f730f963ff9ed2afdbadfa35fc0fae53da942f631f12c3d6e41b59e3878d17f9be4c541e91c6f1b67fbdb7a5928549f9cc3d8871adfd7ec7e8ad3691ed33e2c8e69504af934e94524b1304d44a838357c3f87d2b370ededbc9e07c19cad2f202430dd4952d1e697b5af4dd30af8663c56d71449b38e7adabb7da0d90f6451864f70991f5293a27f8df4e6a704c67d0b73bbe1f484990a56946e0a32d4d9d495bb2ac2446aa5376a181703ccf653c6f75a77acaa35ccc91754c904e846e33d03dcbb5638eb1c04e45caf9c8df654751f8bac30529efbbde8b96bdef9964378e453e6de66dfde1eb47737bc8417d75ef7c4740377f5e68bf8b31098b904c2f7ad9186de3baddc014854ada5ed00a986d3279d5c26db9e90c094c3c906b0bec769f16b00c6a0e98a268ab9a67cf6f766915a67fa799c9771fb1123c40a1db3854de60f074aad208fd92f9ad162dd87c7871777de04d222c84cae439c1d7caf6e4ac8daff59c8db15d6f1b93459415da68167f317ef0c8c142c820e8e5c0845e1fc4792e3fb92ab948689d83d3ba645952ea992b88f5906e76946e01eaf738fb047963d6d51a1c493b7311d22257d5b62ec26cc1285c3a685f2944a20f551a1aaa16a4b9b21c1ad517ba4bf747e50490078f9773718e954536dd929e8d9f9c10cc5743c60e92c970a0d1b20369e918d8c950d9021b04567c4e59e54af2199d65973e4974a04a298962bd06da2fbd112fa33662d8844d91fc8b11568827a4ac8e1480b5d07f96b648a3eb18c6e230cdf54f599ad0bd8f8bfe1b64fb9fd0b562f6a4d6f0d502942b1200dec46080a0d68a47906396f52f190fbbfceccf0bb10ae9ed70a171e1e0ebf5dc6077df6ebde6794abf40bd1214ae5087428a7476cd212dd42662d45010b6b978c186d78e7746cd57ec02019fedb7a8813015d415c1ee4721397f9dda1c4424c0c2a872d6347bbb53c872e0010c29fb2505548decec29c7b971d04156567ba3e3b91d21d3bedb7edf1887e954ea04c781cf9559873d2b1df5ff9829689bc8bc3d152cfc0fd9066dc70816630f57236edae6b25531b68661337bfcfe49c558cc1ed0ca221a58560cdb3eb91418fc17bbfeaf4d555f9df1e26d6eecc567350edf41560a1e688cecfe86ce44bbf96e5294d339a8075f47675c3a8ec6813dba7076458fe0c3e14d2b5273ec17275561fdea9e32e850f1cccf506360fd4650d3f02d9405d64a9f1649771b674563de9acaf7fe289c084a7aaa5c1861704d2721ad50b932ddf244e6438a437aa6096d1988d56b8afec7796ab09aabb7dc76ac72f5b43a7ade2c02ed3d67b899b660eafd49c9efa5fc6949a02a6068e177677c8ebd866a4098992201c792de38a34f311e18bd6c04a203e2571cfb435946c7"}, 0x1004) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r5, 0x0, 0x62, 0xa4, &(0x7f0000001500)="73da783572012280f76b3032d22f764aa6953b632df97204e25d53fc7a44bdd3f498bd059cb955ca95524ec2dff266853d11f1772030ad1491e1869437bfd02bd9d2dd7eb3c290bd60b7727eea60a7a50d170d03fc7287c6398193e1cf7b3fea8efe", &(0x7f0000001580)=""/164, 0xa, 0x0, 0x6d, 0x25, &(0x7f0000001640)="e316ef7f381870fab5b3322dddb31fc8b5b5d1ada7a7dde8613350a89e982c89b42feb7e674ff5f72a0f4dd2a6c581b1b12749e9dd0cd72bd7590b9840d6f2252967856a2730197520a89e8a7c2bdf45c9f5b50f66432f9cb8400df35fe8d7917ef3db317b282574e8455be6b5", &(0x7f00000016c0)="7d45f3682a0233b9b7862c053e631dca01f91eec4a700328d3590ae0f8a627c6633679a5c1", 0x1, 0x0, 0xffff0000}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001780)={0x0, 0xfffffff8, 0x1200000, 0x6aa, 0x7, 0x77c, 0x7, 0x3, {0x0, @in6={{0xa, 0x4e22, 0x4, @remote, 0x1}}, 0xfffffffa, 0x8, 0xffffff4d, 0x8001, 0x875}}, &(0x7f0000001840)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001880)={r7, 0x7}, 0x8) syz_emit_vhci(&(0x7f00000018c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000001900)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5e}, "4a7b0de8be421b7dba559c2bc3d12cc4bb0758ab0e639f5b71f5566869ec526ee71602872c0d6ffd62688d75d16c0a4bc0876eb62d9207fcd09ba78868ac5fc94414b1959294151417669eb650f7ab60720cccfa8129725174b71b6ae488"}, 0x62) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000029c0)={r5, &(0x7f0000001980)="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", &(0x7f0000002980)=@udp=r4}, 0x20) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000002a00)={0xe, {0x0, 0x2, 0x7, 0xe4, "0a3cf1c629a0cb56f94f3456623b7aacb819c211392a5ad14560460bcebaee5f4a480f7b66528d2b189e8c4b67de39172a6200c66dbb70af86e73d9e0af61f4ea5b78d74e23abb06adb97aafc87f8bd8b456a69b0d15c53f67dd627435c4bbd8f9794c6453f32644b28892131a5b8bd994cb055a51d260ef1a1593a66fe99cf3e91a353248d85f451d0e3aada07ed645c6bc68c1ae0a4c607ba767a344645ad74d19167c9b797daab10abe83240fd2e129b4b1a10f4dba10e71b15f1badbce9e4dbf359e28c2781e0d0d750318bc48dc189e0c9233b1457f6957258611b68e52a078bfbb"}}, 0xf0) socketpair(0x2a, 0x1, 0x7, &(0x7f0000002b00)) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000002b40)={0x7, [0x7, 0x4, 0x0, 0x1, 0x5, 0x27c, 0x6]}, 0x12) 896.611147ms ago: executing program 6 (id=9426): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000002340)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000000480)="e8737b611f719b83e4b062d53b44d3da7e2000d591088a983ce43ea97706a280dfa40700000000000000a61129d5bfd6b9f4a5364fa7899486dacc8d2ac69cf55fa122117570c641da4e1816d47b2a23572b6d233b98907e8ff0c8673c58faae0523fd992262e5", 0x67}, {&(0x7f0000000500)="7118a2f5039be572bcde9d86c3318a9d2a947dfa01b3d358d54e36bafc1ec836c1293eab01a1cb4939b3ccfbba190aaa8d4ed4dc61d40abec74a616f10293946927639a3cff0736c77ed62e787a1ed538bd96f2d2da74ba99d8529f5d3fc0f7a9359ec34ba2e1741a36434cdd9de590031171f", 0x73}, {&(0x7f0000001d00)="2496ddc006ef6ae3d0492c96141df090031428e748331be61ea28d07588628dbbda2474a67c1aefe480ce937bf09005c08a718d9c62f3d9398d684bcf67851697a7bc848092d902b561ed0d7a844747ebdd0c9ce8484bc28876998be053aabe71feb505e7c3c898f2e10a1293e59f48e012d9129579ce02542128967a4e75bab23560e5fbdb99f9f8f2d7ad8c535db1fd28f98918e8caa64f84a979988c63d1ea73cdf3c2381e81f84e46b18f28a3a74535c1d9c1fc8e981892db830498e9b40354c26432e02481efe11ba35aa96c9d7ae9951e4a070c9d80bcbeab67f7936092ab4b37913eebc", 0xe7}, {&(0x7f0000000980)="7271e90905111ffff527e3a4f3d4a74a94b3fc80d54d666304af7703db19190d5648a30b411c8f0d4a1a5373912972ff2113f122fc433002829f17a24e682ec877b803fc0f6b6fb87ba26dda7e868315ea2963721b1120858acf14405bd3721c5028a6f36ad0ec932bcf65bebd3ecd6419421ee9d43988e7b47766327f9094789ca1be2c574a6468b4f8291df2ca0d83575674ef289d5337fce30b4726ba629aff11b552750c127525dfc58ee72b4249ce266b66cbdae34cefab43e40553e83f824f4991ef727943145fe17723342613410c13eba93391522313f039622e18f0247911", 0xe3}, {&(0x7f0000000a80)="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", 0x1000}], 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="14020000000100000239df223886c0cb44e4afd456982d00040041000000", @ANYRES32=r1, @ANYBLOB="200079920b9abbc80000"], 0x18, 0x1}}, {{&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="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", 0xfb}], 0x1, &(0x7f0000001e80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="000000f41c0100000002000000f3a37bdbaad21a4cbec8cb7e2ba907cb32ad6ebcd3b15a82c154df724f92d608c3591d690a858a9a428861939c825f70b1765e8e944c6dd7774176c91dde6ce3b02f63a2de9444de03cfb7763265991d1d200c2153c7f5a58bd5", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x40}}], 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r7, @ANYRES64=r6, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000600000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e53"], 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @sdr={0x59555956, 0x3}}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) preadv2(r8, &(0x7f0000000680)=[{&(0x7f0000000580)=""/72, 0x48}], 0x1, 0x0, 0x7e, 0x10) fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 369.720194ms ago: executing program 2 (id=9427): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0xfdfffff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) 306.982828ms ago: executing program 2 (id=9428): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3dc0, 0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsu(&(0x7f00000004c0), 0xb0, 0x498b80) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0x100}], 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x4, 0x8, 0x2, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a28f2ce4df4e24c16ff0000c8c7a6ec00120c00014002080c00bdad446b9bbc7a7f4a16fa3b09d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x44091) r6 = fsopen(&(0x7f0000000600)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000680)='\nE\xcb\xf3\xfd\x0e\xc9T5Usou\x01\x00\x1d', &(0x7f0000000800)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1nr\xa2\xcf\'\x80w\xde\xb6\x02\xd8r*_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf6\x84\x1fA\xeas\xd3\xef\xa2\x85\xab!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@host, 0x5}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=9430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x90, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x3, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x5, 0x7, 0xffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1634, 0x8}}]}, {0x4}, {0xffffffffffffff01, 0x7, {0x1, 0x1}}, {0xffffffffffffff58, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r7, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) kernel console output (not intermixed with test programs): 549894][T26109] usb 4-1: Using ep0 maxpacket: 16 [ 1924.561460][T26109] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1924.571631][T26109] usb 4-1: config 1 has no interface number 0 [ 1924.577961][T26109] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1924.589864][T26109] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1924.600646][T26109] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1924.611359][T26109] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1924.626080][T26109] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1924.635414][T26109] usb 4-1: Product: syz [ 1924.653951][T26109] usb 4-1: Manufacturer: syz [ 1924.674011][T26109] usb 4-1: SerialNumber: syz [ 1924.705003][ T6558] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1924.726094][ T6558] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1925.144848][ T6558] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1925.163424][ T6558] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1925.279677][T26085] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1925.441996][T26085] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 254, changing to 7 [ 1925.467697][T26085] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1925.484796][T26085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.501371][T26085] usb 5-1: Product: syz [ 1925.507371][ T6595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8993'. [ 1925.510230][T26085] usb 5-1: Manufacturer: à°„ [ 1925.531704][T26085] usb 5-1: SerialNumber: syz [ 1925.551780][T26109] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1925.592143][T26109] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1925.633980][T26109] usb 4-1: USB disconnect, device number 40 [ 1926.062234][ T6603] syzkaller0: entered promiscuous mode [ 1926.068512][ T6603] syzkaller0: entered allmulticast mode [ 1926.083832][ T6604] tipc: Enabled bearer , priority 0 [ 1926.091694][ T6603] tipc: Enabling of bearer rejected, already enabled [ 1926.561936][ T6615] macvlan0: entered promiscuous mode [ 1926.568001][ T6615] netlink: 'syz.3.8999': attribute type 1 has an invalid length. [ 1926.576192][ T6615] netlink: 'syz.3.8999': attribute type 2 has an invalid length. [ 1927.089773][T32555] tipc: Node number set to 4294246401 [ 1927.802406][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.814817][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.830577][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.843823][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.855752][ T6644] input: syz1 as /devices/virtual/input/input178 [ 1927.914072][T26085] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1928.012119][T26085] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1928.037870][T26085] usb 5-1: USB disconnect, device number 69 [ 1928.094959][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1928.329686][T26109] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1928.449682][T26085] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1928.482756][T26109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1928.501175][T26109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.515455][T26109] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1928.524877][T26109] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1928.533708][T26109] usb 3-1: Manufacturer: syz [ 1928.543037][T26109] usb 3-1: config 0 descriptor?? [ 1928.632091][T26085] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1928.642543][T26085] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1928.651692][T26085] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1928.673270][T26085] usb 5-1: string descriptor 0 read error: -22 [ 1928.681731][T26085] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1928.691349][T26085] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1928.719292][T26085] usb 5-1: 0:2 : does not exist [ 1928.732350][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.744279][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1928.751365][ T5926] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1928.806784][T26085] usb-storage 5-1:1.1: USB Mass Storage device detected [ 1928.917005][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1928.927725][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.052187][ T6603] tipc: Resetting bearer [ 1929.094721][ T6603] tipc: Disabling bearer [ 1929.145486][T26085] usb 5-1: us122l: couldn't allocate write buffer [ 1929.155311][T26085] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1929.178852][T26085] usb 5-1: USB disconnect, device number 70 [ 1929.226418][ T6672] __nla_validate_parse: 3 callbacks suppressed [ 1929.226448][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9016'. [ 1929.632296][ T6239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1929.658707][ T6239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1929.678645][ T6239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1929.701176][ T6239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1929.730872][ T6239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1929.899223][T26109] uclogic 0003:256C:006D.00B8: failed retrieving string descriptor #200: -71 [ 1929.927044][T26109] uclogic 0003:256C:006D.00B8: failed retrieving pen parameters: -71 [ 1929.961403][T26109] uclogic 0003:256C:006D.00B8: failed probing pen v2 parameters: -71 [ 1929.987719][T26109] uclogic 0003:256C:006D.00B8: failed probing parameters: -71 [ 1930.008404][T26109] uclogic 0003:256C:006D.00B8: probe with driver uclogic failed with error -71 [ 1930.042346][T26109] usb 3-1: USB disconnect, device number 25 [ 1930.192859][ T6686] bridge1: entered promiscuous mode [ 1930.304832][T26085] usb 2-1: USB disconnect, device number 57 [ 1930.343194][ T6692] CUSE: unknown device info "" [ 1930.356005][ T6692] CUSE: unknown device info "" [ 1930.363953][ T6692] CUSE: unknown device info "ÿ" [ 1930.369002][ T6692] CUSE: unknown device info "" [ 1930.374845][ T6692] CUSE: unknown device info "ÿ" [ 1930.380745][ T6692] CUSE: unknown device info "" [ 1930.385856][ T6692] CUSE: unknown device info "" [ 1930.393808][ T6692] CUSE: unknown device info "" [ 1930.398911][ T6692] CUSE: DEVNAME unspecified [ 1930.479692][ T8935] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1930.504659][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.512453][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.519889][ T6677] bridge_slave_0: entered allmulticast mode [ 1930.529055][ T6677] bridge_slave_0: entered promiscuous mode [ 1930.537087][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.544358][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.552107][ T6677] bridge_slave_1: entered allmulticast mode [ 1930.562535][ T6677] bridge_slave_1: entered promiscuous mode [ 1930.618252][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.639594][ T8935] usb 4-1: Using ep0 maxpacket: 16 [ 1930.640440][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.650655][ T8935] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1930.654135][T26115] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1930.678739][ T8935] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1930.702782][ T8935] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1930.712091][ T8935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.726490][ T8935] usb 4-1: Product: syz [ 1930.735321][ T6677] team0: Port device team_slave_0 added [ 1930.736586][ T8935] usb 4-1: Manufacturer: syz [ 1930.746223][ T6677] team0: Port device team_slave_1 added [ 1930.759889][ T8935] usb 4-1: SerialNumber: syz [ 1930.776594][ T8935] usb 4-1: config 0 descriptor?? [ 1930.796672][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.796911][ T8935] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1930.803861][T26115] usb 5-1: device descriptor read/64, error -71 [ 1930.804157][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1930.804189][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.806573][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.833711][ T8935] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1930.888357][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1930.920159][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.034381][T28551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1931.046008][T28551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.058279][T26115] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1931.103894][ T6677] hsr_slave_0: entered promiscuous mode [ 1931.112006][ T6677] hsr_slave_1: entered promiscuous mode [ 1931.118311][ T6677] debugfs: 'hsr0' already exists in 'hsr' [ 1931.124828][ T6677] Cannot create hsr debugfs directory [ 1931.200027][T26115] usb 5-1: device descriptor read/64, error -71 [ 1931.318378][T28551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1931.332451][T28551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.343536][T26115] usb usb5-port1: attempt power cycle [ 1931.440308][ T8935] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1931.454240][ T8935] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1931.536775][T28551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1931.547564][T28551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1931.729712][T26115] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1931.771147][T26115] usb 5-1: device descriptor read/8, error -71 [ 1931.790975][T32471] Bluetooth: hci5: command tx timeout [ 1931.875558][ T8935] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1931.896855][ T8935] em28xx 4-1:0.0: No AC97 audio processor [ 1932.041373][T26115] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1932.084848][T26115] usb 5-1: device descriptor read/8, error -71 [ 1932.125485][T28551] bridge_slave_1: left allmulticast mode [ 1932.131598][T28551] bridge_slave_1: left promiscuous mode [ 1932.148701][T28551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.177906][T28551] bridge_slave_0: left allmulticast mode [ 1932.189870][T28551] bridge_slave_0: left promiscuous mode [ 1932.199698][T28551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.210647][T26115] usb usb5-port1: unable to enumerate USB device [ 1932.941699][T32555] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1933.101958][T32555] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1933.116845][T32555] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.139901][T32555] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1933.167187][T28551] team0: Port device bridge0 removed [ 1933.170785][T32555] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1933.195531][T32555] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1933.210542][T32555] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.223319][T26109] usb 4-1: USB disconnect, device number 41 [ 1933.238581][T32555] usb 3-1: config 0 descriptor?? [ 1933.320321][T26109] em28xx 4-1:0.0: Disconnecting em28xx [ 1933.356385][T26109] em28xx 4-1:0.0: Freeing device [ 1933.384086][ T6728] IPv6: NLM_F_CREATE should be specified when creating new route [ 1933.428873][ T6728] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9029'. [ 1933.577798][T28551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1933.606444][T28551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1933.632244][T28551] bond0 (unregistering): Released all slaves [ 1933.662584][T28551] bond1 (unregistering): Released all slaves [ 1933.666004][T32555] holtek 0003:1241:5015.00B9: collection stack underflow [ 1933.682541][T32555] holtek 0003:1241:5015.00B9: item 0 4 0 12 parsing failed [ 1933.700848][T32555] holtek 0003:1241:5015.00B9: parse failed [ 1933.708597][T32555] holtek 0003:1241:5015.00B9: probe with driver holtek failed with error -22 [ 1933.716457][T28551] bond2 (unregistering): Released all slaves [ 1933.786271][T28551] bond3 (unregistering): Released all slaves [ 1933.799669][T26109] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1933.869869][T32471] Bluetooth: hci5: command tx timeout [ 1933.914797][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1934.000947][T26109] usb 4-1: Using ep0 maxpacket: 16 [ 1934.030910][T26109] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1934.045086][T26109] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1934.070046][T26109] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1934.107373][T26109] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1934.117623][T26109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.176937][T26109] usb 4-1: Product: ꘽á¬é‹ î˜‹ê–ᜮꤺﷃç®ë¾°åº·ãœçŠã²žë”žæµŠä²ªî„°ã—¾è“ᰑ蚨溉츗澵ã»ï˜ ä¦•îšâµšî”ë’ïš°ï–섦팽舴잡Ⲗ촟഻áŸï¿ªã·¾êµºì—‚碃밚â„ì ˜â¶ã€ç¬•ï“젗池쿎쀚⪥2Ņ篸꧰伹ç¶ãžªí“«â¯…꧚Ľ賬嶚⫒驗Ⴖ룉㤱㮴 [ 1934.208746][T25477] usb 3-1: USB disconnect, device number 26 [ 1934.218582][T26109] usb 4-1: Manufacturer: з [ 1934.234529][T26109] usb 4-1: SerialNumber: 皴䅴뷜ᤇ䞭â‹î—¯à®œî‘’æ…ºì…µâ¹æŠˆç¸œç“Šë¿½â‰ºë¶©â…¡å¾†ç°µì­®á˜¶äŽžâ½‚çªê›¤êƒ¿ç¸œãŸ·åœ¸ì¤æ®œâ¥Ÿä–»ã¾ªäŸ›ìƒŒî§µâ·–︆èªÊä°†ç³ä¹…êž¾áµéžî‡»ìŠšë¨žéƒ“çž¾â¾î•횫喓 [ 1934.294356][T28551] : left promiscuous mode [ 1934.404062][T28551] tipc: Left network mode [ 1934.597998][T26109] usb 4-1: interface 2 not found [ 1934.668059][T26109] usb 4-1: USB disconnect, device number 42 [ 1935.517508][T28551] hsr_slave_0: left promiscuous mode [ 1935.527574][ T6772] netlink: 'syz.6.9037': attribute type 1 has an invalid length. [ 1935.549802][T28551] hsr_slave_1: left promiscuous mode [ 1935.571881][T28551] veth1_vlan: left allmulticast mode [ 1935.577964][T28551] veth1_vlan: left promiscuous mode [ 1935.584235][T28551] veth0_vlan: left promiscuous mode [ 1935.734730][T25477] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1935.889800][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9037'. [ 1935.919761][T25477] usb 3-1: Using ep0 maxpacket: 8 [ 1935.930191][T25477] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1935.950408][T32471] Bluetooth: hci5: command tx timeout [ 1935.957890][T25477] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1935.971115][T25477] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1935.994895][T25477] usb 3-1: Product: syz [ 1936.006081][T25477] usb 3-1: Manufacturer: syz [ 1936.016678][T25477] usb 3-1: SerialNumber: syz [ 1936.077779][T28551] team0 (unregistering): Port device team_slave_1 removed [ 1936.101937][T28551] team0 (unregistering): Port device team_slave_0 removed [ 1936.268081][T25477] usb 3-1: Invalid connection information received from device [ 1936.377112][ T6776] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1936.398486][ T6779] bond1: (slave gretap2): making interface the new active one [ 1936.417039][ T6779] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 1936.436303][ T6780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1936.780457][T26115] usb 3-1: USB disconnect, device number 27 [ 1936.850337][ T30] audit: type=1800 audit(1780975195.708:26099): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9040" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1937.085356][T28551] IPVS: stop unused estimator thread 0... [ 1937.088183][ T6677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1937.142476][ T6677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1937.186998][ T6677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1937.200117][ T6677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1937.212332][ T6677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1937.257345][ T6677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1937.268695][ T6677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1937.297365][ T6677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1937.419434][ T6808] netlink: 'syz.3.9043': attribute type 8 has an invalid length. [ 1937.531392][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.590050][ T5926] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1937.592528][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.629288][T32465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.636630][T32465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.704538][T28551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.711861][T28551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.754205][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1937.762849][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.801135][ T5926] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1937.820044][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.837375][ T5926] usb 3-1: Product: syz [ 1937.850703][ T5926] usb 3-1: Manufacturer: syz [ 1937.865693][ T5926] usb 3-1: SerialNumber: syz [ 1937.893700][ T5926] usb 3-1: config 0 descriptor?? [ 1937.925846][ T5926] cdc_ether 3-1:0.0: missing cdc header descriptor [ 1937.947968][ T5926] usb 3-1: unsupported MDLM descriptors [ 1938.025474][ T6827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1938.033340][T32471] Bluetooth: hci5: command tx timeout [ 1938.064871][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1938.136208][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9042'. [ 1938.220546][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.246109][ T6677] veth0_vlan: entered promiscuous mode [ 1938.246900][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.270605][T25477] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1938.271529][T26115] usb 3-1: USB disconnect, device number 28 [ 1938.314841][ T6677] veth1_vlan: entered promiscuous mode [ 1938.396258][ T6677] veth0_macvtap: entered promiscuous mode [ 1938.415890][ T6677] veth1_macvtap: entered promiscuous mode [ 1938.460407][T25477] usb 5-1: Using ep0 maxpacket: 16 [ 1938.470661][T25477] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1938.482150][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1938.492342][T25477] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 126, changing to 7 [ 1938.506719][T25477] usb 5-1: config 1 interface 2 has no altsetting 0 [ 1938.530398][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1938.550418][T25477] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1938.571825][T25477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.587013][T16682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.602063][T25477] usb 5-1: Product: syz [ 1938.606448][T25477] usb 5-1: Manufacturer: syz [ 1938.621166][T25477] usb 5-1: SerialNumber: syz [ 1938.627164][T16682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.660567][T16682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.686222][T16682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1938.965612][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9047'. [ 1939.118008][T28551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1939.137860][T28551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.234877][T16682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1939.264477][T16682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1939.330054][ T5926] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1939.501232][T25477] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1939.522053][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1939.526055][T25477] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1939.546524][ T5926] usb 3-1: not running at top speed; connect to a high speed hub [ 1939.572774][T25477] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1939.586478][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.587846][T25477] usb 5-1: selecting invalid altsetting 0 [ 1939.601464][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1939.667039][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 1939.682295][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1939.694025][T25477] usb 5-1: USB disconnect, device number 75 [ 1939.722228][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.810264][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1939.853326][ T5926] usb 3-1: 0:2 : does not exist [ 1940.184830][ T5926] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1940.220422][ T5926] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1940.239422][ T5926] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1940.274961][ T5926] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1940.314257][ T5926] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1940.420415][ T5926] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1940.487221][ T5926] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1940.589293][ T5926] usb 3-1: USB disconnect, device number 29 [ 1941.437055][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1941.573215][ T6917] netlink: 'syz.2.9061': attribute type 1 has an invalid length. [ 1941.722717][ T6917] bond1: entered promiscuous mode [ 1941.745381][ T6917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1941.949291][ T6920] bond1: (slave veth3): making interface the new active one [ 1941.951678][ T6928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9065'. [ 1941.968804][ T6925] binder: 6924:6925 ioctl 40046205 0 returned -22 [ 1942.006121][ T6920] veth3: entered promiscuous mode [ 1942.038683][ T6920] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1942.454980][ T6936] xt_hashlimit: size too large, truncated to 1048576 [ 1942.755455][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1942.872381][ T6939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1942.910849][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1942.957676][ T6945] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1942.964254][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1943.004101][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 1943.249620][ T5926] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 1943.731667][ T6946] vhci_hcd: connection reset by peer [ 1943.742559][T16565] vhci_hcd vhci_hcd.6: stop threads [ 1943.747866][T16565] vhci_hcd vhci_hcd.6: release socket [ 1943.754457][T16565] vhci_hcd vhci_hcd.6: disconnect device [ 1944.339684][ T8935] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1944.512018][ T8935] usb 3-1: Using ep0 maxpacket: 32 [ 1944.525984][ T8935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.565633][ T8935] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1944.593689][ T8935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.618516][ T8935] usb 3-1: Product: syz [ 1944.639112][ T8935] usb 3-1: Manufacturer: syz [ 1944.643857][ T8935] usb 3-1: SerialNumber: syz [ 1944.668941][ T8935] usb 3-1: config 0 descriptor?? [ 1944.687329][ T8935] cdc_ether 3-1:0.0: missing cdc header descriptor [ 1944.708941][ T8935] usb 3-1: unsupported MDLM descriptors [ 1944.905571][T32555] usb 3-1: USB disconnect, device number 30 [ 1945.965887][ T6985] tipc: Failed to remove unknown binding: 66,0,0/0:332244645/332244647 [ 1945.988002][ T6985] tipc: Failed to remove unknown binding: 66,0,0/0:332244645/332244646 [ 1946.069650][T32555] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1946.203878][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1946.238338][ T6998] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9084'. [ 1946.241600][T32555] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1946.263296][T32555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 1946.277808][T32555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1946.300485][T32555] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1946.309985][T32555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.329018][T32555] usb 3-1: Product: syz [ 1946.337772][T32555] usb 3-1: Manufacturer: syz [ 1946.348595][T32555] usb 3-1: SerialNumber: syz [ 1946.353708][T26085] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1946.433710][ T7010] input: syz0 as /devices/virtual/input/input180 [ 1946.510660][T26085] usb 5-1: Using ep0 maxpacket: 32 [ 1946.533348][T26085] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1946.544673][T26085] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1946.549126][ T7012] fuse: Unknown parameter 'us2r_id' [ 1946.559878][T26085] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1946.568940][T26085] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1946.578765][T26085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.588024][T26085] usb 5-1: Product: syz [ 1946.590533][ T8935] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1946.596899][T26085] usb 5-1: Manufacturer: syz [ 1946.605799][T26085] usb 5-1: SerialNumber: syz [ 1946.613404][T26085] usb 5-1: config 0 descriptor?? [ 1946.621951][ T7013] fuse: Unknown parameter 'us2r_id' [ 1946.674514][ T7017] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1946.686123][ T7017] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1946.757683][ T8935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1946.770672][ T8935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1946.781553][ T8935] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1946.788966][T32555] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1946.790692][ T8935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1946.790717][ T8935] usb 2-1: SerialNumber: syz [ 1946.796844][T32555] cdc_ncm 3-1:1.0: bind() failure [ 1946.834014][T32555] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1946.841116][T32555] cdc_ncm 3-1:1.1: bind() failure [ 1946.979656][T26086] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 1947.052079][ T8935] usb 2-1: 0:2 : does not exist [ 1947.120684][ T8935] usb 2-1: USB disconnect, device number 58 [ 1947.145529][T26086] usb 4-1: config 8 has an invalid descriptor of length 198, skipping remainder of the config [ 1947.167940][T26086] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1947.181088][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1947.205840][T26086] usb 4-1: string descriptor 0 read error: -22 [ 1947.215741][T26086] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 1947.226592][T26086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.517474][ T7024] netlink: 'syz.2.9076': attribute type 21 has an invalid length. [ 1947.525610][ T7024] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9076'. [ 1947.630514][T26085] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 1947.647534][T26085] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1948.129928][T26085] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1948.270476][T26085] usb 2-1: device descriptor read/64, error -71 [ 1948.339839][ T5926] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1948.519647][T26085] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 1948.659752][T26085] usb 2-1: device descriptor read/64, error -71 [ 1948.687849][ T7044] netlink: 51 bytes leftover after parsing attributes in process `syz.6.9097'. [ 1948.769958][T26085] usb usb2-port1: attempt power cycle [ 1948.829991][T26102] usb 3-1: USB disconnect, device number 31 [ 1948.946458][ T7053] tipc: Enabled bearer , priority 0 [ 1948.954151][ T7053] syzkaller0: entered promiscuous mode [ 1948.960481][ T7053] syzkaller0: entered allmulticast mode [ 1949.000279][ T7053] tipc: Resetting bearer [ 1949.021440][ T7052] tipc: Resetting bearer [ 1949.052979][ T7052] tipc: Disabling bearer [ 1949.109645][T26085] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 1949.141059][T26085] usb 2-1: device descriptor read/8, error -71 [ 1949.219720][T26102] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1949.304981][ T8935] usb 5-1: USB disconnect, device number 76 [ 1949.373141][T26102] usb 3-1: config index 0 descriptor too short (expected 1632, got 96) [ 1949.379710][T26085] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 1949.384734][T26102] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1949.403037][T26102] usb 3-1: config 0 has no interfaces? [ 1949.410534][T26085] usb 2-1: device descriptor read/8, error -71 [ 1949.415853][T26102] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 1949.426674][ T7057] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1949.437994][T26102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.446245][T26102] usb 3-1: Product: syz [ 1949.450594][T26102] usb 3-1: Manufacturer: syz [ 1949.455320][T26102] usb 3-1: SerialNumber: syz [ 1949.466330][T26102] usb 3-1: config 0 descriptor?? [ 1949.530327][T26085] usb usb2-port1: unable to enumerate USB device [ 1949.767502][ T8935] usb 4-1: USB disconnect, device number 43 [ 1950.768047][ T7071] binder: 7070:7071 ioctl c0306201 200000000080 returned -14 [ 1951.079758][T26086] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1951.189752][T26085] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1951.234840][T26086] usb 5-1: Using ep0 maxpacket: 32 [ 1951.242867][T26086] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1951.252423][T26086] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.263646][T26086] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1951.275789][T26086] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1951.299206][T26086] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1951.312019][T26086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.324528][T26086] usb 5-1: Product: syz [ 1951.328752][T26086] usb 5-1: Manufacturer: syz [ 1951.333773][T26086] usb 5-1: SerialNumber: syz [ 1951.349797][T26085] usb 2-1: Using ep0 maxpacket: 8 [ 1951.362181][T26085] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1951.370763][T26085] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1951.381647][T26085] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1951.392065][T26085] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1951.402616][T26085] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1951.415976][T26085] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1951.439637][T26085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.643538][T26086] usb 5-1: USB disconnect, device number 77 [ 1951.699455][ T7105] fuse: Bad value for 'fd' [ 1951.706052][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1951.861042][T26085] usb 2-1: usb_control_msg returned -71 [ 1951.877498][T26085] usbtmc 2-1:16.0: can't read capabilities [ 1951.900629][T26085] usb 2-1: USB disconnect, device number 63 [ 1951.975939][T26086] usb 3-1: USB disconnect, device number 32 [ 1952.024210][ T7110] netlink: 7 bytes leftover after parsing attributes in process `syz.2.9117'. [ 1952.038914][ T5926] hid-generic 0000:0000:0000.00BA: unknown main item tag 0x0 [ 1952.066463][ T5926] hid-generic 0000:0000:0000.00BA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1952.092387][ T7081] io-wq is not configured for unbound workers [ 1952.339114][ T7121] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 1953.489853][ T8935] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1953.531342][ T7161] xt_hashlimit: size too large, truncated to 1048576 [ 1953.649760][ T8935] usb 5-1: Using ep0 maxpacket: 16 [ 1953.657700][ T8935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 112, setting to 64 [ 1953.674775][ T8935] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1953.684697][ T8935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.693130][ T8935] usb 5-1: Product: syz [ 1953.697563][ T8935] usb 5-1: Manufacturer: syz [ 1953.702577][ T8935] usb 5-1: SerialNumber: syz [ 1953.712917][ T8935] usb 5-1: config 0 descriptor?? [ 1953.746316][ T8935] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1954.187164][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.629689][T26086] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1954.806522][T26086] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1954.858698][T26086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.894651][T26086] usb 2-1: Product: syz [ 1954.911523][T26086] usb 2-1: Manufacturer: syz [ 1954.921349][T26086] usb 2-1: SerialNumber: syz [ 1954.950970][T26086] usb 2-1: config 0 descriptor?? [ 1954.972591][T26086] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1955.012372][ T7186] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9136'. [ 1955.459753][ T8935] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1955.624548][ T8935] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1955.654523][ T8935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.669953][ T8935] usb 4-1: Product: syz [ 1955.674439][ T8935] usb 4-1: Manufacturer: syz [ 1955.689966][ T8935] usb 4-1: SerialNumber: syz [ 1955.719577][ T8935] usb 4-1: config 0 descriptor?? [ 1955.745727][ T8935] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1955.944425][ T8935] gspca_sunplus: reg_r err -32 [ 1956.022159][ T8935] usb 4-1: USB disconnect, device number 44 [ 1956.033773][T28551] usb 5-1: Failed to read usb control message: -110 [ 1956.083180][T28551] usb 5-1: Unable to read the bmi data from the device: -110 [ 1956.110710][T28551] usb 5-1: unable to get target info from device [ 1956.126050][T28551] usb 5-1: could not get target info (-110) [ 1956.140346][T28551] usb 5-1: could not probe fw (-110) [ 1956.170626][ T7195] syzkaller0: entered promiscuous mode [ 1956.194062][ T7195] syzkaller0: entered allmulticast mode [ 1956.541476][T26086] usb 5-1: USB disconnect, device number 78 [ 1956.657195][ T7207] QAT: Invalid ioctl 21531 [ 1956.724447][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.771681][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1957.327605][ T7220] macvlan0: left promiscuous mode [ 1957.407326][ T7220] bridge2: left promiscuous mode [ 1957.605601][T26086] usb 2-1: USB disconnect, device number 64 [ 1958.272578][T26102] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1958.480030][T26102] usb 2-1: config 0 has no interfaces? [ 1958.490675][T26102] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1958.500506][T26102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.508601][T26102] usb 2-1: Product: syz [ 1958.513639][T26102] usb 2-1: Manufacturer: syz [ 1958.518347][T26102] usb 2-1: SerialNumber: syz [ 1958.543403][T26102] usb 2-1: config 0 descriptor?? [ 1958.742355][ T7229] netlink: 'syz.6.9149': attribute type 6 has an invalid length. [ 1958.989463][T26102] usb 2-1: USB disconnect, device number 65 [ 1959.006891][ T7234] netlink: 'syz.6.9150': attribute type 21 has an invalid length. [ 1959.023192][ T7234] IPv6: NLM_F_CREATE should be specified when creating new route [ 1959.031695][ T7234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1959.038963][ T7234] IPv6: NLM_F_CREATE should be set when creating new route [ 1959.046322][ T7234] IPv6: NLM_F_CREATE should be set when creating new route [ 1959.053609][ T7234] IPv6: NLM_F_CREATE should be set when creating new route [ 1959.075597][ T7235] netlink: 'syz.6.9150': attribute type 21 has an invalid length. [ 1959.089069][ T7235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1959.143320][ T7234] batadv0: entered promiscuous mode [ 1959.156030][ T7234] batadv0: entered allmulticast mode [ 1959.255338][T32471] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1959.289681][T26086] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1959.369964][ T5926] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1959.531288][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1959.550687][ T5926] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1959.573196][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.610233][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1959.650334][ T5926] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 1959.671327][ T5926] usb 3-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 1959.699069][ T5926] usb 3-1: Manufacturer: syz [ 1959.707932][ T5926] usb 3-1: SerialNumber: syz [ 1959.738405][ T5926] usb 3-1: config 0 descriptor?? [ 1959.755185][ T5926] usb 3-1: 0:2 : does not exist [ 1959.884665][ T7243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1959.933683][ T7243] bridge0: port 3(bond2) entered blocking state [ 1959.940598][ T7243] bridge0: port 3(bond2) entered disabled state [ 1959.947237][ T7243] bond2: entered allmulticast mode [ 1959.955843][ T7243] bond2: entered promiscuous mode [ 1960.008883][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1960.053820][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9155'. [ 1960.131208][ T7248] netlink: 'syz.1.9155': attribute type 15 has an invalid length. [ 1960.139317][ T7248] netlink: 'syz.1.9155': attribute type 18 has an invalid length. [ 1960.216303][ T5926] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1960.286177][ T5926] usb 3-1: USB disconnect, device number 33 [ 1960.679598][T25477] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1960.819695][T25477] usb 2-1: device descriptor read/64, error -71 [ 1960.969814][ T7258] input: syz1 as /devices/virtual/input/input181 [ 1961.070708][T25477] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1961.209662][T25477] usb 2-1: device descriptor read/64, error -71 [ 1961.330171][T25477] usb usb2-port1: attempt power cycle [ 1961.738806][T26086] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1961.771397][T25477] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1961.803385][T25477] usb 2-1: device descriptor read/8, error -71 [ 1961.891491][T26086] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.901887][T26086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1961.920183][T26086] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1961.944077][T26086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1961.964750][T26086] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1961.993157][T26086] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1962.002360][T26086] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1962.013402][T26086] usb 3-1: Manufacturer: syz [ 1962.032392][T26086] usb 3-1: config 0 descriptor?? [ 1962.049706][T25477] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1962.080476][T25477] usb 2-1: device descriptor read/8, error -71 [ 1962.190166][T25477] usb usb2-port1: unable to enumerate USB device [ 1962.252347][T25477] usb 3-1: USB disconnect, device number 34 [ 1962.261167][ T7219] Set syz1 is full, maxelem 65536 reached [ 1962.669820][ T8935] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1962.796047][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.807243][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.820037][ T8935] usb 4-1: Using ep0 maxpacket: 32 [ 1962.829896][ T8935] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1962.839122][ T8935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.848515][ T8935] usb 4-1: Product: syz [ 1962.852868][ T8935] usb 4-1: Manufacturer: syz [ 1962.857527][ T8935] usb 4-1: SerialNumber: syz [ 1962.865383][ T8935] usb 4-1: config 0 descriptor?? [ 1962.873614][ T8935] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1963.309913][T32471] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1963.325498][T32471] Bluetooth: hci0: Injecting HCI hardware error event [ 1963.336200][T32471] Bluetooth: hci0: hardware error 0x00 [ 1963.799631][T26102] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1963.969714][T26102] usb 2-1: Using ep0 maxpacket: 16 [ 1963.979384][T26102] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1963.994928][T26102] usb 2-1: config index 0 descriptor too short (expected 107, got 72) [ 1964.007092][T26102] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 1964.023067][T26102] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1964.044660][T26102] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1964.066164][T26102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.079077][T26102] usb 2-1: Product: syz [ 1964.084730][T26102] usb 2-1: Manufacturer: syz [ 1964.090016][T26102] usb 2-1: SerialNumber: syz [ 1964.291092][ T8935] gspca_topro: reg_r err -71 [ 1964.298836][ T8935] gspca_topro: Sensor soi763a [ 1964.322753][T26102] usb 2-1: interface 2 not found [ 1964.329073][ T8935] usb 4-1: USB disconnect, device number 45 [ 1964.372391][T26102] usb 2-1: USB disconnect, device number 70 [ 1964.630051][ T5926] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1964.769842][ T5926] usb 5-1: device descriptor read/64, error -71 [ 1965.010036][ T5926] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1965.149665][ T5926] usb 5-1: device descriptor read/64, error -71 [ 1965.176788][ T6239] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1965.259987][ T5926] usb usb5-port1: attempt power cycle [ 1965.395123][T32471] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1965.619680][ T5926] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1965.651568][ T5926] usb 5-1: device descriptor read/8, error -71 [ 1965.735040][ T7336] dvmrp12: entered allmulticast mode [ 1965.910005][ T5926] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1965.931950][ T5926] usb 5-1: device descriptor read/8, error -71 [ 1966.050075][ T5926] usb usb5-port1: unable to enumerate USB device [ 1966.059364][ T7350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1966.098981][ T7354] netlink: 'syz.1.9187': attribute type 58 has an invalid length. [ 1966.126333][ T7354] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9187'. [ 1966.196907][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.207294][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.430029][T26085] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1966.553909][ T7369] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1966.649831][ T5926] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1966.799614][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 1966.814683][ T5926] usb 2-1: config 0 has an invalid interface number: 40 but max is 0 [ 1966.823220][ T5926] usb 2-1: config 0 has no interface number 0 [ 1966.830721][ T5926] usb 2-1: config 0 interface 40 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 1966.844580][ T5926] usb 2-1: config 0 interface 40 has no altsetting 0 [ 1966.854834][ T5926] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1966.864283][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.872490][ T5926] usb 2-1: Product: syz [ 1966.876807][ T5926] usb 2-1: Manufacturer: syz [ 1966.881585][ T5926] usb 2-1: SerialNumber: syz [ 1966.888921][ T5926] usb 2-1: config 0 descriptor?? [ 1967.019798][T26110] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1967.108733][ T5926] hub 2-1:0.40: bad descriptor, ignoring hub [ 1967.123077][ T5926] hub 2-1:0.40: probe with driver hub failed with error -5 [ 1967.147629][ T5926] usb 2-1: selecting invalid altsetting 3 [ 1967.155685][ T5926] comedi comedi5: could not set alternate setting 3 in high speed [ 1967.163813][ T5926] usbdux 2-1:0.40: driver 'usbdux' failed to auto-configure device. [ 1967.179858][T26110] usb 4-1: Using ep0 maxpacket: 32 [ 1967.181271][ T5926] usbdux 2-1:0.40: probe with driver usbdux failed with error -22 [ 1967.198016][T26110] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1967.211001][T26110] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1967.211131][ T5926] usb 2-1: USB disconnect, device number 71 [ 1967.251432][T26110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.267988][T26110] usb 4-1: Product: syz [ 1967.275724][T26110] usb 4-1: Manufacturer: syz [ 1967.285160][T26110] usb 4-1: SerialNumber: syz [ 1967.296989][T26110] usb 4-1: config 0 descriptor?? [ 1967.307797][ T7371] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1967.320133][T26110] hub 4-1:0.0: bad descriptor, ignoring hub [ 1967.326191][T26110] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1967.338204][T26110] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input182 [ 1967.546512][T26110] usb 4-1: USB disconnect, device number 46 [ 1967.552666][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1967.979622][T26102] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1968.154370][T26102] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1968.164124][T26102] usb 2-1: not running at top speed; connect to a high speed hub [ 1968.177564][T26102] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1968.191935][T26102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.204932][T26102] usb 2-1: Product: syz [ 1968.212672][T26102] usb 2-1: Manufacturer: syz [ 1968.220186][T26102] usb 2-1: SerialNumber: syz [ 1968.495008][T26102] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1968.567344][T26102] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1968.584001][T26102] usb 2-1: USB disconnect, device number 72 [ 1968.609646][ T8935] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1968.629024][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1968.799736][ T8935] usb 4-1: Using ep0 maxpacket: 32 [ 1968.807058][ T8935] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1968.820271][ T8935] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1968.844059][ T8935] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1968.857870][ T8935] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1968.868848][ T8935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.882373][ T8935] usb 4-1: Product: syz [ 1968.890043][ T8935] usb 4-1: Manufacturer: syz [ 1968.894793][ T8935] usb 4-1: SerialNumber: syz [ 1968.918123][ T8935] usb 4-1: config 0 descriptor?? [ 1969.053647][ T7400] tipc: Enabled bearer , priority 0 [ 1969.101280][ T7400] tipc: Disabling bearer [ 1969.133957][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9201'. [ 1969.333810][ T8935] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1970.144583][ T7386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.185546][ T7386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.270592][ T5926] usb 4-1: USB disconnect, device number 47 [ 1970.518928][ T7422] netlink: 'syz.2.9204': attribute type 11 has an invalid length. [ 1970.678787][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1970.890146][ T5926] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1970.943511][ T7020] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 1971.070219][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1971.083454][ T5926] usb 3-1: config 3 has an invalid interface number: 231 but max is 0 [ 1971.100775][ T5926] usb 3-1: config 3 has no interface number 0 [ 1971.113551][ T5926] usb 3-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 1971.138619][ T5926] usb 3-1: config 3 interface 231 has no altsetting 0 [ 1971.152320][ T7020] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1971.172835][ T5926] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 1971.191803][ T7020] usb 4-1: config 0 has no interface number 0 [ 1971.208790][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.217016][ T7020] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1971.233781][ T5926] usb 3-1: Product: syz [ 1971.244739][ T7020] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1971.259158][ T5926] usb 3-1: Manufacturer: syz [ 1971.272581][ T5926] usb 3-1: SerialNumber: syz [ 1971.282839][ T7020] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1971.319872][ T7020] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1971.348508][ T7020] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1971.356891][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9206'. [ 1971.368156][ T7020] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1971.409660][ T7020] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1971.425383][ T7020] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.445789][ T7020] usb 4-1: config 0 descriptor?? [ 1971.453668][ T7445] xt_HMARK: proto mask must be zero with L3 mode [ 1971.459640][ T7427] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1971.491175][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.520238][ T7427] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1971.553666][ T7020] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1971.707478][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.715373][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.962149][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.978770][ T7422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1972.547075][ T4825] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.581709][ T4825] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.666278][ T7486] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1972.690444][ T7486] pim6reg0: linktype set to 805 [ 1972.714896][ T4825] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.739773][ T4825] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1973.025182][ T30] audit: type=1326 audit(1780975231.888:26100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.9216" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd8ff9ce59 code=0x0 [ 1973.400033][T32555] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1973.492019][ T7475] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1973.537177][ T7513] fuse: Bad value for 'fd' [ 1973.625287][T26102] usb 4-1: USB disconnect, device number 48 [ 1973.639152][T26102] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1973.646902][T32555] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1973.699305][ T7475] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1973.711121][T32555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.741703][ T7475] usb 5-1: config 0 has no interface number 0 [ 1973.753994][T32555] usb 2-1: Product: syz [ 1973.771988][ T7475] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1973.784279][T32555] usb 2-1: Manufacturer: syz [ 1973.795743][T32555] usb 2-1: SerialNumber: syz [ 1973.812358][ T5926] kvaser_usb 3-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 1973.828870][ T7475] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 1973.841789][T32555] usb 2-1: config 0 descriptor?? [ 1973.857600][T32555] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1973.867294][ T5926] usb 3-1: USB disconnect, device number 36 [ 1973.876742][ T7475] usb 5-1: config 0 interface 113 has no altsetting 0 [ 1973.905953][ T7475] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1973.930790][ T7475] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.957689][ T7475] usb 5-1: Product: syz [ 1973.963671][ T7475] usb 5-1: Manufacturer: syz [ 1973.968379][ T7475] usb 5-1: SerialNumber: syz [ 1973.996650][ T7475] usb 5-1: config 0 descriptor?? [ 1974.006851][ T7507] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1974.021941][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1974.035637][ C1] usb 5-1: NFC: Urb failure (status -71) [ 1974.043677][ T7475] usb 5-1: NFC: Unable to get FW version [ 1974.050547][ T7475] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -71 [ 1974.231081][ T7475] usb 5-1: USB disconnect, device number 84 [ 1974.309914][ T5926] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1974.476517][ T5926] usb 3-1: descriptor type invalid, skip [ 1974.492053][ T5926] usb 3-1: descriptor type invalid, skip [ 1974.506959][ T5926] usb 3-1: descriptor type invalid, skip [ 1974.516850][T32555] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1974.532285][T32555] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1974.546902][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 1974.555026][ T5926] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1974.566151][T32555] usb 2-1: USB disconnect, device number 73 [ 1974.577848][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.621488][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1974.653490][ T5926] usb 3-1: MIDIStreaming interface descriptor not found [ 1974.835997][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.861956][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.926058][ T5926] usb 3-1: USB disconnect, device number 37 [ 1975.120868][ T7541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1975.238857][ T7550] syzkaller0: entered promiscuous mode [ 1975.281514][ T7550] syzkaller0: entered allmulticast mode [ 1975.655948][ T30] audit: type=1800 audit(1780975234.518:26101): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9234" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1975.788587][ T7562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1975.856538][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9236'. [ 1976.190970][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.197569][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.339684][T26086] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1976.529676][T26086] usb 2-1: Using ep0 maxpacket: 32 [ 1976.546456][T26086] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1976.559638][T26102] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1976.572813][T26086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.587752][T26086] usb 2-1: Product: syz [ 1976.616118][T26086] usb 2-1: Manufacturer: syz [ 1976.628553][T26086] usb 2-1: SerialNumber: syz [ 1976.660304][T26086] usb 2-1: config 0 descriptor?? [ 1976.733378][T26102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1976.758023][T26102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1976.781207][T26102] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1976.816854][T26102] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1976.860895][T26102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.894823][T26102] usb 3-1: config 0 descriptor?? [ 1976.989963][ T5926] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1977.078933][T26086] airspy 2-1:0.0: Board ID: 04 [ 1977.100731][T26086] airspy 2-1:0.0: Firmware version:  [ 1977.169669][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 1977.193754][ T5926] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1977.228956][ T5926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1977.256553][ T5926] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1977.293694][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.321608][ T5926] usb 4-1: config 0 descriptor?? [ 1977.331120][T26102] usbhid 3-1:0.0: can't add hid device: -71 [ 1977.333443][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1977.357502][T26102] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1977.363523][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.428990][T26086] airspy 2-1:0.0: usb_control_msg() failed -71 request 11 [ 1977.429561][T26102] usb 3-1: USB disconnect, device number 38 [ 1977.477716][T26086] airspy 2-1:0.0: Registered as swradio24 [ 1977.491847][T26086] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1977.525719][T26086] usb 2-1: USB disconnect, device number 74 [ 1978.072034][ T7575] trusted_key: encrypted_key: keyword 'neÿÿdefault' not recognized [ 1978.091094][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9243'. [ 1978.116841][ T7590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9244'. [ 1978.369817][T26102] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1978.529990][T26102] usb 3-1: device descriptor read/64, error -71 [ 1978.780831][T26102] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1978.859663][T26110] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1978.941987][T26102] usb 3-1: device descriptor read/64, error -71 [ 1979.070275][T26102] usb usb3-port1: attempt power cycle [ 1979.429644][T26102] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1979.476485][T26102] usb 3-1: device descriptor read/8, error -71 [ 1979.720534][T26102] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1979.765688][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 1979.787992][T26102] usb 3-1: device descriptor read/8, error -71 [ 1979.792845][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1979.840423][ T5926] usb 4-1: USB disconnect, device number 49 [ 1979.940668][T26102] usb usb3-port1: unable to enumerate USB device [ 1979.968488][ T7609] fuse: Bad value for 'fd' [ 1980.034453][ T7611] netlink: 'syz.6.9250': attribute type 1 has an invalid length. [ 1980.284286][ T7618] sg_write: data in/out 69/1 bytes for SCSI command 0x0-- guessing data in; [ 1980.284286][ T7618] program syz.4.9252 not setting count and/or reply_len properly [ 1980.316921][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9250'. [ 1980.351772][ T7611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1980.401449][ T7611] macvlan2: entered promiscuous mode [ 1980.411810][ T7611] macvlan2: entered allmulticast mode [ 1980.425913][ T7611] bond3: entered promiscuous mode [ 1980.444866][ T7611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1980.466138][ T7611] bond3: left promiscuous mode [ 1980.972680][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1980.991497][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1981.011834][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1981.031116][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1981.680023][T26102] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1981.845035][T26102] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1981.870900][T26102] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1981.877837][T26102] usb 3-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.00 [ 1981.892635][T26102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.965204][T26102] usb 3-1: config 0 descriptor?? [ 1981.971344][ T5926] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1981.996873][ T7639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1982.050115][T26110] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1982.111477][T26110] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1982.136290][T26102] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input183 [ 1982.156996][T26110] usb 2-1: can't read configurations, error -71 [ 1982.190467][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 1982.214873][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1982.239321][ T5926] usb 5-1: config 1 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1982.285512][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1982.288282][T26102] usb 3-1: USB disconnect, device number 43 [ 1982.299999][ T4983] bcm5974 3-1:0.0: could not read from device [ 1982.321898][ T5926] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 1982.343080][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.361759][ T7547] bcm5974 3-1:0.0: could not read from device [ 1982.370893][ T5926] usb 5-1: Product: syz [ 1982.388201][ T5926] usb 5-1: Manufacturer: syz [ 1982.399962][ T5926] usb 5-1: SerialNumber: syz [ 1982.602543][ T7663] fuse: Bad value for 'fd' [ 1982.669407][ T5926] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input184 [ 1982.706570][ T4983] bcm5974 5-1:1.0: could not read from device [ 1982.728626][ T4983] bcm5974 5-1:1.0: could not read from device [ 1982.737977][ T5926] usb 5-1: USB disconnect, device number 85 [ 1982.773549][ T4983] bcm5974 5-1:1.0: could not read from device [ 1982.877998][ T7672] netlink: 'syz.1.9265': attribute type 268 has an invalid length. [ 1982.905630][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1983.326807][ T7682] fuse: Unknown parameter 'gro5p_id' [ 1983.344026][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9271'. [ 1983.656561][ T7707] fuse: Bad value for 'fd' [ 1983.854954][ T7714] usb usb8: usbfs: process 7714 (syz.2.9276) did not claim interface 0 before use [ 1984.135721][ T7719] kernel read not supported for file / œ7³ÏüâW)«s“§Ç!Qöì¥fsõ‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 7719 comm: syz.2.9277) [ 1984.156126][ T30] audit: type=1800 audit(1780975243.018:26102): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9277" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=220208 res=0 errno=0 [ 1984.396923][ T7722] bond3: Unable to set up delay as MII monitoring is disabled [ 1984.410568][ T7722] bond3 (unregistering): Released all slaves [ 1984.429850][T32471] Bluetooth: hci5: command tx timeout [ 1984.696683][ T5926] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1984.862066][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1984.892622][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 1984.949657][T26086] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1984.959886][ T5926] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1984.984670][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.013122][ T5926] usb 5-1: config 0 descriptor?? [ 1985.028730][ T7725] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1985.099708][T26086] usb 4-1: device descriptor read/64, error -71 [ 1985.349786][T26086] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1985.454552][ T5926] uclogic 0003:28BD:0075.00BB: interface is invalid, ignoring [ 1985.499713][T26086] usb 4-1: device descriptor read/64, error -71 [ 1985.620137][T26086] usb usb4-port1: attempt power cycle [ 1985.747315][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.771152][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.816460][T26110] usb 5-1: USB disconnect, device number 86 [ 1985.970262][T26086] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1986.011586][T26086] usb 4-1: device descriptor read/8, error -71 [ 1986.260328][T26086] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1986.291801][T26086] usb 4-1: device descriptor read/8, error -71 [ 1986.400882][T26086] usb usb4-port1: unable to enumerate USB device [ 1986.421406][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9290'. [ 1986.445043][ T7760] fuse: fd is not a fuse device [ 1986.529126][ T7760] vivid-000: ================= START STATUS ================= [ 1986.553119][ T7760] vivid-000: Test Pattern: 75% Colorbar [ 1986.593821][ T7760] vivid-000: Fill Percentage of Frame: 4 [ 1986.637798][ T7764] netlink: 'syz.4.9290': attribute type 3 has an invalid length. [ 1986.659897][ T7760] vivid-000: Horizontal Movement: Move Left Slow [ 1986.681167][ T7760] vivid-000: Vertical Movement: Move Down Slow [ 1986.699630][ T7760] vivid-000: OSD Text Mode: All [ 1986.719026][ T7760] vivid-000: Show Border: false [ 1986.725583][ T7760] vivid-000: Show Square: true [ 1986.739984][ T7760] vivid-000: Sensor Flipped Horizontally: false [ 1986.751801][ T7760] vivid-000: Sensor Flipped Vertically: false [ 1986.768215][ T7760] vivid-000: Insert SAV Code in Image: true [ 1986.781024][ T7760] vivid-000: Insert EAV Code in Image: false [ 1986.801115][ T7760] vivid-000: Insert Video Guard Band: false [ 1986.810811][ T7760] vivid-000: Reduced Framerate: true [ 1986.826508][ T7760] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1986.839626][ T7760] vivid-000: S-Video 000-0 Is Connected To: None [ 1986.858937][ T7760] vivid-000: Enable Capture Cropping: true [ 1986.879193][ T7760] vivid-000: Enable Capture Composing: true [ 1986.887564][ T7760] vivid-000: Enable Capture Scaler: false [ 1986.899593][ T7760] vivid-000: Timestamp Source: End of Frame [ 1986.906119][ T7760] vivid-000: Colorspace: SMPTE 170M [ 1986.913378][ T7760] vivid-000: Transfer Function: Default [ 1986.919164][ T7760] vivid-000: Y'CbCr Encoding: Default [ 1986.925876][ T7760] vivid-000: HSV Encoding: Hue 0-256 [ 1986.931479][ T7760] vivid-000: Quantization: Default [ 1986.936745][ T7760] vivid-000: Apply Alpha To Red Only: false [ 1986.943041][ T7760] vivid-000: Standard Aspect Ratio: 4x3 [ 1986.948711][ T7760] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1986.956652][ T7760] vivid-000: DV Timings: 640x480p59 inactive [ 1986.963173][ T7760] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1986.970750][ T7760] vivid-000: Maximum EDID Blocks: 2 [ 1986.976108][ T7760] vivid-000: Limited RGB Range (16-235): false [ 1986.982590][ T7760] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 1986.992484][ T7760] vivid-000: Power Present: 0x00000001 [ 1986.998142][ T7760] tpg source WxH: 720x576 (HSV) [ 1987.003171][ T7760] tpg field: 4 [ 1987.009208][ T7760] tpg crop: (0,0)/16x16 [ 1987.013631][ T7760] tpg compose: (0,0)/16x16 [ 1987.018155][ T7760] tpg colorspace: 1 [ 1987.023961][ T7760] tpg transfer function: 0/0 [ 1987.028663][ T7760] tpg HSV encoding: 3/0 [ 1987.034256][ T7760] tpg quantization: 0/0 [ 1987.038517][ T7760] tpg RGB range: 0/2 [ 1987.042577][ T7760] vivid-000: ================== END STATUS ================== [ 1987.089626][ T5926] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1987.249567][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 1987.260759][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1987.276530][ T5926] usb 3-1: config 9 has an invalid interface number: 57 but max is 0 [ 1987.291123][ T5926] usb 3-1: config 9 has no interface number 0 [ 1987.302863][ T5926] usb 3-1: config 9 interface 57 has no altsetting 0 [ 1987.322674][ T5926] usb 3-1: string descriptor 0 read error: -22 [ 1987.330545][ T5926] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1987.351623][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.695772][ T5926] video4linux radio48: keene_cmd_main failed (-71) [ 1987.736596][ T5926] radio-keene 3-1:9.57: V4L2 device registered as radio48 [ 1987.777086][ T5926] usb 3-1: USB disconnect, device number 44 [ 1987.934578][ T7784] syzkaller0: entered promiscuous mode [ 1987.955106][ T7784] syzkaller0: entered allmulticast mode [ 1988.100611][ T7792] netlink: 'syz.1.9299': attribute type 13 has an invalid length. [ 1988.202709][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1988.349836][ T5926] usb 3-1: device descriptor read/64, error -71 [ 1988.366989][ T7792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1988.601003][ T5926] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1988.739825][ T5926] usb 3-1: device descriptor read/64, error -71 [ 1988.861504][ T5926] usb usb3-port1: attempt power cycle [ 1988.898508][ T7810] fuse: fd is not a fuse device [ 1988.936570][ T7817] netlink: 548 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1989.211458][ T5926] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1989.256879][ T5926] usb 3-1: device descriptor read/8, error -71 [ 1989.297723][T25477] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1989.487942][T25477] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1989.499264][T25477] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1989.509247][T25477] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1989.519611][ T5926] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1989.560392][ T5926] usb 3-1: device descriptor read/8, error -71 [ 1989.567327][T25477] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1989.577033][T25477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.607645][T25477] usb 5-1: Product: syz [ 1989.612826][T25477] usb 5-1: Manufacturer: syz [ 1989.617628][T25477] usb 5-1: SerialNumber: syz [ 1989.650120][T25477] usb 5-1: config 0 descriptor?? [ 1989.658588][T25477] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1989.666760][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1989.670026][ T5926] usb usb3-port1: unable to enumerate USB device [ 1989.700245][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1989.709304][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1989.717479][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1989.725242][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1989.733081][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1989.744672][T25477] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1989.756923][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1989.764825][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1989.775035][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1989.782865][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1989.790778][T25477] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1989.824035][T25477] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1989.955852][ T5926] usb 5-1: USB disconnect, device number 87 [ 1989.981987][ T5926] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1990.022940][ T5926] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1990.035176][ T5926] keyspan 5-1:0.0: device disconnected [ 1990.979974][T32471] Bluetooth: hci3: unexpected event for opcode 0x2023 [ 1991.280853][T25477] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1991.427789][T25477] usb 3-1: device descriptor read/64, error -71 [ 1991.535027][T26086] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1991.689657][T26086] usb 5-1: Using ep0 maxpacket: 32 [ 1991.697407][T26086] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1991.699226][T25477] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1991.709465][T26086] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1991.726607][T26086] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1991.737213][T26086] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 120, changing to 7 [ 1991.748886][T26086] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8256, setting to 1024 [ 1991.761176][T26086] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1991.770611][T26086] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1991.779885][T26086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.787961][T26086] usb 5-1: Product: syz [ 1991.809192][T26086] usb 5-1: Manufacturer: syz [ 1991.814533][T26086] usb 5-1: SerialNumber: syz [ 1991.830586][T26086] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1991.838731][T26086] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1991.872026][T25477] usb 3-1: device descriptor read/64, error -71 [ 1991.981055][T25477] usb usb3-port1: attempt power cycle [ 1992.346909][T25477] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1992.356638][T26086] usb 5-1: USB disconnect, device number 88 [ 1992.386930][T25477] usb 3-1: device descriptor read/8, error -71 [ 1992.416006][ T6121] udevd[6121]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1992.690242][T25477] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1992.730401][T25477] usb 3-1: device descriptor read/8, error -71 [ 1992.857957][T25477] usb usb3-port1: unable to enumerate USB device [ 1992.966300][ T30] audit: type=1326 audit(1780975251.808:26103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1992.991358][ T30] audit: type=1326 audit(1780975251.808:26104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.016363][ T30] audit: type=1326 audit(1780975251.808:26105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.041967][ T30] audit: type=1326 audit(1780975251.808:26106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.066650][ T30] audit: type=1326 audit(1780975251.808:26107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.091867][ T30] audit: type=1326 audit(1780975251.808:26108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.116755][ T30] audit: type=1326 audit(1780975251.808:26109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.141863][ T30] audit: type=1326 audit(1780975251.808:26110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.166724][ T30] audit: type=1326 audit(1780975251.808:26111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1993.191273][ T30] audit: type=1326 audit(1780975251.808:26112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.4.9313" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 1995.149596][T26086] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1996.078999][T28548] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1996.091473][T28548] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1996.132667][ T7814] netlink: 'syz.3.9307': attribute type 29 has an invalid length. [ 1996.174056][T28548] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1996.197636][T28548] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1996.565047][T32471] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1996.599635][T26102] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1996.681039][T25477] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1996.754539][T26102] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1996.769132][T26102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1996.777916][T26102] usb 4-1: Product: syz [ 1996.782488][T26102] usb 4-1: Manufacturer: syz [ 1996.787142][T26102] usb 4-1: SerialNumber: syz [ 1996.797349][T26102] usb 4-1: config 0 descriptor?? [ 1996.818455][T26102] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1996.845189][T25477] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 1996.861477][T25477] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1996.883259][T25477] usb 3-1: Product: syz [ 1996.897621][T25477] usb 3-1: Manufacturer: syz [ 1996.914627][T25477] usb 3-1: SerialNumber: syz [ 1996.952239][T25477] usb 3-1: config 0 descriptor?? [ 1997.227964][ T7871] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1997.234555][ T7871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1997.247903][T26102] usb 3-1: USB disconnect, device number 53 [ 1997.258483][ T7871] vhci_hcd vhci_hcd.0: Device attached [ 1997.288969][ T7871] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 1997.295602][ T7871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1997.308175][ T7871] vhci_hcd vhci_hcd.0: Device attached [ 1997.316806][ T7871] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 1997.323385][ T7871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1997.331923][ T7871] vhci_hcd vhci_hcd.0: Device attached [ 1997.343424][ T7871] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 1997.349995][ T7871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1997.358305][ T7871] vhci_hcd vhci_hcd.0: Device attached [ 1997.364706][ T7879] vhci_hcd: connection closed [ 1997.365083][ T6364] vhci_hcd vhci_hcd.1: stop threads [ 1997.376043][ T7874] vhci_hcd: connection closed [ 1997.376288][ T7872] vhci_hcd: connection closed [ 1997.376536][ T7877] vhci_hcd: connection closed [ 1997.386263][ T6364] vhci_hcd vhci_hcd.1: release socket [ 1997.397793][ T6364] vhci_hcd vhci_hcd.1: disconnect device [ 1997.404243][ T6364] vhci_hcd vhci_hcd.1: stop threads [ 1997.411799][ T6364] vhci_hcd vhci_hcd.1: release socket [ 1997.417464][ T6364] vhci_hcd vhci_hcd.1: disconnect device [ 1997.427694][ T6364] vhci_hcd vhci_hcd.1: stop threads [ 1997.440179][ T6364] vhci_hcd vhci_hcd.1: release socket [ 1997.447253][ T6364] vhci_hcd vhci_hcd.1: disconnect device [ 1997.460218][ T6364] vhci_hcd vhci_hcd.1: stop threads [ 1997.471111][ T6364] vhci_hcd vhci_hcd.1: release socket [ 1997.476767][ T6364] vhci_hcd vhci_hcd.1: disconnect device [ 1997.502183][T26110] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 1997.514981][T26110] usb 35-1: enqueue for inactive port 0 [ 1997.589978][T26110] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1998.219670][T26102] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1998.374028][T26102] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1998.383653][T26102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.409213][T26102] usb 2-1: config 0 descriptor?? [ 1998.415274][T25477] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1998.585031][T25477] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.617224][T25477] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1998.637219][T26102] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1998.646507][T25477] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1998.657794][T25477] usb 5-1: string descriptor 0 read error: -22 [ 1998.664628][T25477] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1998.674392][T25477] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1998.693788][T25477] usb 5-1: 0:2 : does not exist [ 1998.775503][T25477] usb-storage 5-1:1.1: USB Mass Storage device detected [ 1998.908857][T26102] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1998.917298][T26102] [drm] Initialized udl on minor 2 [ 1999.041234][T26102] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1999.054463][T26102] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1999.205095][ T7921] binder: 7920:7921 ioctl 4018620d 0 returned -22 [ 1999.274731][ T7891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9325'. [ 1999.296810][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1999.315218][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9332'. [ 1999.357650][ T7475] usb 4-1: USB disconnect, device number 54 [ 1999.433842][T26109] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1999.434224][T26086] usb 2-1: USB disconnect, device number 77 [ 1999.442133][T26109] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1999.719880][ T7475] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1999.752597][ T7929] fuse: Bad value for 'fd' [ 1999.861978][ T7475] usb 4-1: device descriptor read/64, error -71 [ 2000.109745][ T7475] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 2000.200424][ T7941] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9336'. [ 2000.249590][ T7475] usb 4-1: device descriptor read/64, error -71 [ 2000.370295][ T7475] usb usb4-port1: attempt power cycle [ 2000.720287][ T7475] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 2000.760407][ T7475] usb 4-1: device descriptor read/8, error -71 [ 2000.959005][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.007660][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.018051][ T7475] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 2001.040892][ T7475] usb 4-1: device descriptor read/8, error -71 [ 2001.152916][ T7475] usb usb4-port1: unable to enumerate USB device [ 2001.268157][T25477] snd-usb-us122l 5-1:1.1: usb_set_interface error [ 2001.276753][T25477] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 2001.311619][T25477] usb 5-1: USB disconnect, device number 90 [ 2001.554285][ T7948] syzkaller0: entered promiscuous mode [ 2001.560539][ T7948] syzkaller0: entered allmulticast mode [ 2001.575548][ T7948] tipc: Started in network mode [ 2001.580814][ T7948] tipc: Node identity caea7083a908, cluster identity 4711 [ 2001.588774][ T7948] tipc: Enabled bearer , priority 0 [ 2001.597881][ T7948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9339'. [ 2001.608041][ T7948] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9339'. [ 2001.617389][ T7948] netlink: 'syz.1.9339': attribute type 5 has an invalid length. [ 2001.625701][ T7948] netlink: 43 bytes leftover after parsing attributes in process `syz.1.9339'. [ 2001.642918][ T7948] tipc: Resetting bearer [ 2001.671932][ T7948] tipc: Resetting bearer [ 2001.713919][ T7948] tipc: Disabling bearer [ 2001.739641][T25477] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2001.909598][T25477] usb 5-1: Using ep0 maxpacket: 8 [ 2001.917498][T25477] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2001.927637][T25477] usb 5-1: config 8 has an invalid interface number: 45 but max is 0 [ 2001.935991][T25477] usb 5-1: config 8 has no interface number 0 [ 2001.942567][T25477] usb 5-1: config 8 interface 45 has no altsetting 0 [ 2001.952429][T25477] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7 [ 2001.961722][T25477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.969824][T25477] usb 5-1: Product: syz [ 2001.974099][T25477] usb 5-1: Manufacturer: syz [ 2001.978965][T25477] usb 5-1: SerialNumber: syz [ 2002.119679][T26086] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2002.198505][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.208375][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2002.226214][T25477] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 2002.236464][T25477] gspca_sn9c2028: read1 error -71 [ 2002.242250][T25477] gspca_sn9c2028: read1 error -71 [ 2002.247975][T25477] gspca_sn9c2028: read1 error -71 [ 2002.254049][T25477] sn9c2028 5-1:8.45: probe with driver sn9c2028 failed with error -71 [ 2002.268525][T25477] usb 5-1: USB disconnect, device number 91 [ 2002.274280][T26086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.285609][T26086] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2002.296621][T26086] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2002.308389][T26086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2002.321524][T26086] usb 2-1: SerialNumber: syz [ 2002.551207][T26086] usb 2-1: 0:2 : does not exist [ 2002.556215][T26086] usb 2-1: unit 5 not found! [ 2002.689826][T26086] usb 2-1: USB disconnect, device number 79 [ 2002.756890][ T7661] udevd[7661]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2003.004415][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2003.139723][T26086] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2003.279676][T26086] usb 5-1: device descriptor read/64, error -71 [ 2003.349675][T26102] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2003.480510][ T5926] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2003.509640][T26102] usb 4-1: Using ep0 maxpacket: 8 [ 2003.521084][T26086] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2003.534816][T26102] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2003.554592][T26102] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2003.578881][T26102] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2003.599293][T26102] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2003.620803][T26102] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2003.639614][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 2003.646363][T26102] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2003.651745][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.666643][T26086] usb 5-1: device descriptor read/64, error -71 [ 2003.676986][T26102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.711989][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2003.742856][ T5926] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2003.770275][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.794530][ T5926] usb 2-1: config 0 descriptor?? [ 2003.800241][T26086] usb usb5-port1: attempt power cycle [ 2003.972533][T26102] usb 4-1: GET_CAPABILITIES returned 0 [ 2003.983915][T26102] usbtmc 4-1:16.0: can't read capabilities [ 2004.021184][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.056992][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.159821][T26086] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2004.194422][T26086] usb 5-1: device descriptor read/8, error -71 [ 2004.326814][ T5926] corsair 0003:1B1C:1B02.00BC: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 2004.439654][T26086] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2004.470457][T26086] usb 5-1: device descriptor read/8, error -71 [ 2004.503236][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.516376][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.580165][T26086] usb usb5-port1: unable to enumerate USB device [ 2004.624059][ T5926] corsair 0003:1B1C:1B02.00BC: Read invalid backlight brightness: 57. [ 2004.852891][T26102] usb 2-1: USB disconnect, device number 80 [ 2005.447462][ T7984] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9349'. [ 2005.729767][T26102] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2005.741241][T26086] usb 4-1: USB disconnect, device number 59 [ 2005.891600][T26102] usb 2-1: Using ep0 maxpacket: 32 [ 2005.905212][T26102] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.916327][T26102] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2005.928906][T26102] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2005.941740][T26102] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2005.961654][T26102] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2005.971587][T26102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.980155][T26102] usb 2-1: Product: syz [ 2005.984176][ T7994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9353'. [ 2005.984522][T26102] usb 2-1: Manufacturer: syz [ 2005.998612][T26102] usb 2-1: SerialNumber: syz [ 2006.005725][ T7995] tipc: Enabling of bearer rejected, failed to enable media [ 2006.013353][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2006.066319][T26102] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input185 [ 2006.224328][T26086] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2006.229664][T26102] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2006.251455][T26102] (id 0x00) [ 2006.329680][T26102] rc_core: IR keymap rc-imon-pad not found [ 2006.343379][T26102] Registered IR keymap rc-empty [ 2006.358654][T26102] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2006.375489][T26102] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2006.381534][ T8006] netlink: 51 bytes leftover after parsing attributes in process `syz.1.9355'. [ 2006.385543][T26102] imon:send_packet: packet tx failed (-71) [ 2006.400085][T26086] usb 4-1: Using ep0 maxpacket: 8 [ 2006.419902][T26102] imon 2-1:155.0: remote input dev register failed [ 2006.427027][T26086] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2006.427355][T26102] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 2006.449245][T26086] usb 4-1: config 0 has no interface number 0 [ 2006.473084][T26086] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d [ 2006.480598][T26102] imon 2-1:155.0: unable to initialize intf0, err 0 [ 2006.489547][T26086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2006.494226][T26102] imon:imon_probe: failed to initialize context! [ 2006.503487][T26086] usb 4-1: Product: syz [ 2006.516371][T26102] imon 2-1:155.0: unable to register, err -19 [ 2006.519593][T26086] usb 4-1: Manufacturer: syz [ 2006.530676][T26086] usb 4-1: SerialNumber: syz [ 2006.548411][T26086] usb 4-1: config 0 descriptor?? [ 2006.557474][T26102] usb 2-1: USB disconnect, device number 81 [ 2006.582430][T26086] usb 4-1: selecting invalid altsetting 2 [ 2006.603720][T26086] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 2006.863447][T26102] usb 4-1: USB disconnect, device number 60 [ 2007.300443][T26110] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2007.485071][T26110] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2007.514029][T26110] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2007.544438][T26110] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2007.575329][T26110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.612247][ T8011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2007.667133][T26110] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2007.897443][T25477] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2007.942417][T26102] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2008.099693][T25477] usb 4-1: Using ep0 maxpacket: 16 [ 2008.109881][T26102] usb 5-1: Using ep0 maxpacket: 32 [ 2008.128786][T25477] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 2008.145689][T26102] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2008.155937][T25477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.171119][T26102] usb 5-1: config 2 has an invalid interface number: 75 but max is 0 [ 2008.195313][T25477] usb 4-1: Product: syz [ 2008.201325][T26102] usb 5-1: config 2 has no interface number 0 [ 2008.211595][T25477] usb 4-1: Manufacturer: syz [ 2008.218842][T26102] usb 5-1: config 2 interface 75 has no altsetting 0 [ 2008.227148][T25477] usb 4-1: SerialNumber: syz [ 2008.238770][T26102] usb 5-1: New USB device found, idVendor=e481, idProduct=0747, bcdDevice=89.5e [ 2008.249360][T25477] usb 4-1: config 0 descriptor?? [ 2008.257208][T26102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.291682][T26110] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 2008.299362][T26102] usb 5-1: Product: syz [ 2008.303735][T26102] usb 5-1: Manufacturer: syz [ 2008.321073][T25477] usb 4-1: selecting invalid altsetting 1 [ 2008.327646][T26102] usb 5-1: SerialNumber: syz [ 2008.334321][T25477] technisat-usb2: could not set alternate setting to 0 [ 2008.466791][ T8034] bridge_slave_0: entered promiscuous mode [ 2008.476886][ T8034] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2008.545938][T25477] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 2008.585124][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.601509][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.639145][T25477] usb 4-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 2008.666687][T25477] usb 4-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 2008.705858][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.730451][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.078274][T26086] usb 2-1: USB disconnect, device number 82 [ 2010.655096][T26102] usb 5-1: USB disconnect, device number 96 [ 2010.793729][ T8053] fuse: Unknown parameter '' [ 2011.139651][T26102] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2011.302183][T26102] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 2011.312311][T26102] usb 5-1: config 0 has no interface number 0 [ 2011.318742][T26102] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 2011.355608][T26102] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2011.381691][T26102] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2011.412093][T26102] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2011.438428][T26102] usb 5-1: config 0 interface 11 has no altsetting 0 [ 2011.455673][T26102] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2011.477843][T26102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2011.506241][T26102] usb 5-1: config 0 descriptor?? [ 2011.511845][ T5723] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 2011.530334][T26102] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 2011.546894][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 2011.554989][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 2011.563827][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 2011.572736][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 2011.580640][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 2011.588583][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 2011.608885][T26102] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2011.640228][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 2011.651239][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 2011.660651][ T5723] usb 2-1: device descriptor read/64, error -71 [ 2011.677152][ T30] kauditd_printk_skb: 10085 callbacks suppressed [ 2011.677170][ T30] audit: type=1326 audit(1780975270.528:36198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2011.708225][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 2011.716370][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 2011.724195][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 2011.736823][ T8065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2011.747504][T26102] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 2011.769771][ T30] audit: type=1326 audit(1780975270.528:36199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2011.780042][T26102] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2011.794824][ T8065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.845623][ T30] audit: type=1326 audit(1780975270.528:36200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2011.931873][T26102] usb 5-1: USB disconnect, device number 97 [ 2011.939630][ T5723] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 2011.947336][ T30] audit: type=1326 audit(1780975270.528:36201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2012.011208][T26102] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2012.032944][ T30] audit: type=1326 audit(1780975270.538:36202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2012.061291][T26102] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2012.082785][ T5723] usb 2-1: device descriptor read/64, error -71 [ 2012.133972][T26102] keyspan 5-1:0.11: device disconnected [ 2012.220070][ T5723] usb usb2-port1: attempt power cycle [ 2012.246654][ T8080] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2012.305621][ T30] audit: type=1326 audit(1780975271.168:36203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2012.372691][ T30] audit: type=1326 audit(1780975271.168:36204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.3.9373" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31fb9ce59 code=0x7ffc0000 [ 2012.570905][ T5723] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 2012.601278][ T5723] usb 2-1: device descriptor read/8, error -71 [ 2012.849679][ T5723] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2012.870500][ T5723] usb 2-1: device descriptor read/8, error -71 [ 2012.980219][ T5723] usb usb2-port1: unable to enumerate USB device [ 2013.021290][T26110] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2013.182239][T26110] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 2013.190785][T26110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.201578][T26110] usb 5-1: config 0 has no interface number 0 [ 2013.207759][T26110] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2013.218521][T26110] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2013.238708][T26110] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 2013.252139][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.260560][T26110] usb 5-1: Product: syz [ 2013.265061][T26110] usb 5-1: Manufacturer: syz [ 2013.270016][T26110] usb 5-1: SerialNumber: syz [ 2013.278341][T26110] usb 5-1: config 0 descriptor?? [ 2013.290618][ T8091] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 2013.308476][T26110] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 2013.315269][T26110] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 2013.537499][T26110] usb 5-1: USB disconnect, device number 98 [ 2014.569660][ T5723] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2014.721706][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2014.730272][ T5723] usb 5-1: not running at top speed; connect to a high speed hub [ 2014.739178][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 2014.750617][ T5723] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 2014.764597][ T5723] usb 5-1: string descriptor 0 read error: -22 [ 2014.771150][ T5723] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 2014.781220][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.795271][ T8106] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2014.813779][ T5723] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2014.821192][ T5723] usb 5-1: MIDIStreaming interface descriptor not found [ 2015.148351][ T8113] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 2015.182666][ T8106] syzkaller0: entered promiscuous mode [ 2015.197029][ T8106] syzkaller0: entered allmulticast mode [ 2015.212320][ T8106] tipc: Started in network mode [ 2015.217460][ T8106] tipc: Node identity 9e17024b3b94, cluster identity 4711 [ 2015.225749][ T8106] tipc: Enabled bearer , priority 0 [ 2015.234667][T26086] usb 5-1: USB disconnect, device number 99 [ 2015.248463][ T8105] tipc: Resetting bearer [ 2015.315799][ T8105] tipc: Disabling bearer [ 2015.359078][ T30] audit: type=1800 audit(1780975274.218:36205): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9387" name="/" dev="fuse" ino=4 res=0 errno=0 [ 2015.443327][T26110] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2015.447719][ T8119] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 2015.463198][ T8119] bond3 (unregistering): Released all slaves [ 2015.619679][T26110] usb 2-1: Using ep0 maxpacket: 16 [ 2015.626901][T26110] usb 2-1: config index 0 descriptor too short (expected 37359, got 202) [ 2015.636095][T26110] usb 2-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 2015.645370][T26110] usb 2-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.656140][T26110] usb 2-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 2015.674690][T26110] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2015.689776][T26110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.698333][T26110] usb 2-1: Product: syz [ 2015.703172][T26110] usb 2-1: Manufacturer: syz [ 2015.707827][T26110] usb 2-1: SerialNumber: syz [ 2015.728722][T26110] usb 2-1: 0:2 : does not exist [ 2015.854638][ T8127] netlink: 'syz.3.9391': attribute type 1 has an invalid length. [ 2015.885790][ T8127] bond4: entered promiscuous mode [ 2015.892948][ T8127] bond4: entered allmulticast mode [ 2015.910390][ T8127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2015.937365][T26110] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2015.998081][T26110] usb 2-1: USB disconnect, device number 87 [ 2016.034934][ T6084] udevd[6084]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2016.219737][T26086] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2016.382154][T26086] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 2016.391394][T26086] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.401812][T26086] usb 5-1: config 220 has no interface number 2 [ 2016.408151][T26086] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2016.421436][T26086] usb 5-1: config 220 interface 0 has no altsetting 0 [ 2016.428263][T26086] usb 5-1: config 220 interface 76 has no altsetting 0 [ 2016.435366][T26086] usb 5-1: config 220 interface 1 has no altsetting 0 [ 2016.445227][T26086] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2016.454613][T26086] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.462798][T26086] usb 5-1: Product: syz [ 2016.467066][T26086] usb 5-1: Manufacturer: syz [ 2016.473272][T26086] usb 5-1: SerialNumber: syz [ 2016.716077][T26086] usb 5-1: selecting invalid altsetting 0 [ 2016.730236][ C1] blk_print_req_error: 132 callbacks suppressed [ 2016.730257][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.737135][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.745823][ C1] buffer_io_error: 137 callbacks suppressed [ 2016.745838][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 2016.754957][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2016.761587][T26086] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2016.768891][ T7547] Buffer I/O error on dev loop9, logical block 3, async page read [ 2016.798977][T26086] uvcvideo 5-1:220.0: No valid video chain found. [ 2016.805824][T26086] usb 5-1: selecting invalid altsetting 0 [ 2016.810381][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.830269][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 2016.843152][T26086] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 2016.856357][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.865680][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2016.885857][ T7547] Buffer I/O error on dev loop9, logical block 3, async page read [ 2016.893783][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.893810][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2016.893881][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.893894][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 2016.931764][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.941064][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 2016.953241][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2016.953403][T26086] usb 5-1: USB disconnect, device number 100 [ 2016.962495][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 2016.962812][ C0] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2017.000664][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2017.355629][ T8146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2017.362218][ T8146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2017.372987][ T8146] vhci_hcd vhci_hcd.0: Device attached [ 2017.519982][T26110] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2017.617158][ T8147] vhci_hcd: connection closed [ 2017.619087][ T7647] vhci_hcd vhci_hcd.2: stop threads [ 2017.631871][ T7647] vhci_hcd vhci_hcd.2: release socket [ 2017.637501][ T7647] vhci_hcd vhci_hcd.2: disconnect device [ 2017.652850][T26086] usb 38-1: enqueue for inactive port 0 [ 2017.690266][T26110] usb 5-1: Using ep0 maxpacket: 32 [ 2017.703150][T26110] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2017.719985][T26110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.734894][T26110] usb 5-1: Product: syz [ 2017.744178][T26110] usb 5-1: Manufacturer: syz [ 2017.756037][T26110] usb 5-1: SerialNumber: syz [ 2017.770535][T26110] usb 5-1: config 0 descriptor?? [ 2017.786988][T26110] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2018.069664][ T8145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2018.112539][ T8150] syzkaller0: entered promiscuous mode [ 2018.118201][ T8150] syzkaller0: entered allmulticast mode [ 2018.140893][T26086] usb usb38-port1: attempt power cycle [ 2018.181728][ T8145] tipc: Enabled bearer , priority 0 [ 2018.310106][T26110] gspca_ov534_9: reg_w failed -110 [ 2018.538410][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9399'. [ 2018.584108][ T8144] tipc: Resetting bearer [ 2018.639158][ T8144] tipc: Disabling bearer [ 2018.700653][T26086] usb usb38-port1: unable to enumerate USB device [ 2018.759836][T26110] gspca_ov534_9: Unknown sensor 0000 [ 2018.759953][T26110] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2018.805425][T26110] usb 5-1: USB disconnect, device number 101 [ 2019.088823][ T8171] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9406'. [ 2019.185954][ T30] audit: type=1326 audit(1780975278.048:36206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.2.9408" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f3779ce59 code=0x0 [ 2019.219633][ T7475] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2019.378755][ T7475] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2019.388536][ T7475] usb 2-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 2019.402372][ T7475] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2019.417791][ T7475] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2019.427991][ T7475] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2019.440191][ T7475] usb 2-1: Manufacturer: syz [ 2019.462384][ T7475] usb 2-1: config 0 descriptor?? [ 2019.488724][ T30] audit: type=1326 audit(1780975278.348:36207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.517832][ T30] audit: type=1326 audit(1780975278.378:36208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f510a75d68e code=0x7ffc0000 [ 2019.543380][ T30] audit: type=1326 audit(1780975278.378:36209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.569936][ T30] audit: type=1326 audit(1780975278.378:36210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.594559][ T8191] netlink: 'syz.4.9411': attribute type 10 has an invalid length. [ 2019.595060][ T30] audit: type=1326 audit(1780975278.378:36211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.602622][ T8191] ipvlan0: entered allmulticast mode [ 2019.627626][ T30] audit: type=1326 audit(1780975278.378:36212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.657525][ T30] audit: type=1326 audit(1780975278.378:36213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2019.685458][ T8191] veth0_vlan: entered allmulticast mode [ 2019.689900][T26110] usb 2-1: USB disconnect, device number 88 [ 2019.700933][ T8191] team0: Device ipvlan0 failed to register rx_handler [ 2019.702682][ T30] audit: type=1326 audit(1780975278.398:36214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f510a75d68e code=0x7ffc0000 [ 2019.733018][ T30] audit: type=1326 audit(1780975278.398:36215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8190 comm="syz.4.9411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510a79ce59 code=0x7ffc0000 [ 2020.049680][ T5723] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2020.199740][ T5723] usb 5-1: Using ep0 maxpacket: 8 [ 2020.207210][ T5723] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 2020.216685][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.227516][ T5723] usb 5-1: config 0 has no interface number 0 [ 2020.234624][ T5723] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2020.246943][ T5723] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 2020.257607][ T5723] usb 5-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 2020.260387][ T8198] netlink: 'syz.1.9414': attribute type 10 has an invalid length. [ 2020.274074][ T5723] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 2020.278989][ T8199] netlink: 'syz.1.9414': attribute type 10 has an invalid length. [ 2020.289023][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.296050][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9414'. [ 2020.304167][T26102] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2020.313161][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9414'. [ 2020.321321][ T5723] usb 5-1: Product: syz [ 2020.334241][ T5723] usb 5-1: Manufacturer: syz [ 2020.339179][ T5723] usb 5-1: SerialNumber: syz [ 2020.343922][ T8198] team0: Port device geneve1 added [ 2020.353352][ T5723] usb 5-1: config 0 descriptor?? [ 2020.364309][ T8194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2020.454648][ T8201] netlink: 'syz.1.9415': attribute type 3 has an invalid length. [ 2020.463415][ T8201] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9415'. [ 2020.519835][T26102] usb 3-1: Using ep0 maxpacket: 16 [ 2020.535184][T26102] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2020.547041][T26102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2020.564076][T26102] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2020.573466][T26102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.581671][T26102] usb 3-1: Product: syz [ 2020.585893][T26102] usb 3-1: Manufacturer: syz [ 2020.590660][T26102] usb 3-1: SerialNumber: syz [ 2020.596963][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9412'. [ 2020.602523][T26102] usb 3-1: config 0 descriptor?? [ 2020.616531][T26102] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2020.625990][T26102] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 2020.644040][ T5723] usb 5-1: NFC: intf ffff88807a739000 id ffffffff8f3e8a00 [ 2020.666766][ T5723] usb 5-1: USB disconnect, device number 102 [ 2020.761216][ T8204] netlink: 'syz.1.9416': attribute type 11 has an invalid length. [ 2020.769201][ T8204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9416'. [ 2021.089651][T26110] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2021.216400][T26102] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 2021.223964][T26102] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 2021.231219][T26110] usb 2-1: device descriptor read/64, error -71 [ 2021.439043][T26102] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 2021.446696][ T5723] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2021.454494][T26102] em28xx 3-1:0.0: No AC97 audio processor [ 2021.479686][T26110] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2021.609763][T26110] usb 2-1: device descriptor read/64, error -71 [ 2021.617792][ T5723] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.628918][ T5723] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2021.638834][ T5723] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2021.645605][ T5723] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 2021.654750][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.665941][ T5723] usb 5-1: config 0 descriptor?? [ 2021.730102][T26110] usb usb2-port1: attempt power cycle [ 2022.100633][T26110] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2022.144585][T26110] usb 2-1: device descriptor read/8, error -71 [ 2022.309250][ T5723] chicony 0003:04F2:1236.00BD: unknown main item tag 0x4 [ 2022.329897][ T5723] chicony 0003:04F2:1236.00BD: unknown main item tag 0x7 [ 2022.337089][ T5723] chicony 0003:04F2:1236.00BD: item 0 2 0 9 parsing failed [ 2022.345108][ T5723] chicony 0003:04F2:1236.00BD: Chicony hid parse failed: -22 [ 2022.354812][ T5723] chicony 0003:04F2:1236.00BD: probe with driver chicony failed with error -22 [ 2022.409641][T26110] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2022.430495][T26110] usb 2-1: device descriptor read/8, error -71 [ 2022.551023][T26110] usb usb2-port1: unable to enumerate USB device [ 2022.928297][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9424'. [ 2022.937953][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9424'. [ 2023.522326][ T5723] usb 3-1: USB disconnect, device number 56 [ 2023.532944][ T5723] em28xx 3-1:0.0: Disconnecting em28xx [ 2023.546232][ T5723] em28xx 3-1:0.0: Freeing device [ 2023.806369][ T5723] IPVS: starting estimator thread 0... [ 2023.901882][ T8246] IPVS: using max 26 ests per chain, 62400 per kthread [ 2023.977806][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9430'. [ 2023.992742][ T8251] [ 2023.995132][ T8251] ============================================ [ 2024.001290][ T8251] WARNING: possible recursive locking detected [ 2024.007521][ T8251] syzkaller #0 Tainted: G L [ 2024.013489][ T8251] -------------------------------------------- [ 2024.019633][ T8251] syz.1.9429/8251 is trying to acquire lock: [ 2024.025599][ T8251] ffffffff8f3d6650 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 2024.035837][ T8251] [ 2024.035837][ T8251] but task is already holding lock: [ 2024.043191][ T8251] ffffffff8f3d6650 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 2024.053360][ T8251] [ 2024.053360][ T8251] other info that might help us debug this: [ 2024.061413][ T8251] Possible unsafe locking scenario: [ 2024.061413][ T8251] [ 2024.068859][ T8251] CPU0 [ 2024.072173][ T8251] ---- [ 2024.075466][ T8251] lock(qp_broker_list.mutex); [ 2024.080344][ T8251] lock(qp_broker_list.mutex); [ 2024.085201][ T8251] [ 2024.085201][ T8251] *** DEADLOCK *** [ 2024.085201][ T8251] [ 2024.093359][ T8251] May be due to missing lock nesting notation [ 2024.093359][ T8251] [ 2024.101718][ T8251] 1 lock held by syz.1.9429/8251: [ 2024.106744][ T8251] #0: ffffffff8f3d6650 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20 [ 2024.117383][ T8251] [ 2024.117383][ T8251] stack backtrace: [ 2024.123275][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.1.9429 Tainted: G L syzkaller #0 PREEMPT(full) [ 2024.123297][ T8251] Tainted: [L]=SOFTLOCKUP [ 2024.123303][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2024.123312][ T8251] Call Trace: [ 2024.123320][ T8251] [ 2024.123330][ T8251] dump_stack_lvl+0xe8/0x150 [ 2024.123351][ T8251] print_deadlock_bug+0x279/0x290 [ 2024.123372][ T8251] __lock_acquire+0x253f/0x2cf0 [ 2024.123391][ T8251] ? is_bpf_text_address+0x292/0x2b0 [ 2024.123409][ T8251] ? is_bpf_text_address+0x26/0x2b0 [ 2024.123427][ T8251] ? kernel_text_address+0xa5/0xe0 [ 2024.123449][ T8251] ? __kernel_text_address+0xd/0x30 [ 2024.123473][ T8251] ? vmci_qp_broker_detach+0x117/0xf20 [ 2024.123492][ T8251] lock_acquire+0x106/0x350 [ 2024.123507][ T8251] ? vmci_qp_broker_detach+0x117/0xf20 [ 2024.123532][ T8251] __mutex_lock+0x1a3/0x1550 [ 2024.123552][ T8251] ? vmci_qp_broker_detach+0x117/0xf20 [ 2024.123574][ T8251] ? kasan_save_track+0x4f/0x80 [ 2024.123596][ T8251] ? kasan_save_track+0x3e/0x80 [ 2024.123615][ T8251] ? kasan_save_free_info+0x46/0x50 [ 2024.123632][ T8251] ? __kasan_slab_free+0x5c/0x80 [ 2024.123652][ T8251] ? kfree+0x1c5/0x640 [ 2024.123670][ T8251] ? vmci_ctx_put+0x5ef/0xc40 [ 2024.123684][ T8251] ? vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 2024.123699][ T8251] ? vmci_datagram_dispatch+0x450/0xc60 [ 2024.123715][ T8251] ? vmci_qp_broker_detach+0x8dd/0xf20 [ 2024.123735][ T8251] ? vmci_host_close+0x98/0x160 [ 2024.123753][ T8251] ? vmci_qp_broker_detach+0x117/0xf20 [ 2024.123775][ T8251] ? exit_to_user_mode_loop+0x193/0x680 [ 2024.123790][ T8251] ? __pfx___mutex_lock+0x10/0x10 [ 2024.123813][ T8251] vmci_qp_broker_detach+0x117/0xf20 [ 2024.123838][ T8251] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2024.123858][ T8251] ? kasan_quarantine_put+0xbb/0x1f0 [ 2024.123878][ T8251] ? lockdep_hardirqs_on+0x7a/0x110 [ 2024.123895][ T8251] ? kfree+0x1c5/0x640 [ 2024.123918][ T8251] ? vmci_ctx_put+0x5ef/0xc40 [ 2024.123932][ T8251] ? vmci_ctx_put+0x141/0xc40 [ 2024.123948][ T8251] vmci_ctx_put+0x64e/0xc40 [ 2024.123963][ T8251] ? __pfx___schedule+0x10/0x10 [ 2024.123985][ T8251] ? vmci_ctx_put+0x141/0xc40 [ 2024.124001][ T8251] ? __pfx_vmci_ctx_put+0x10/0x10 [ 2024.124016][ T8251] ? preempt_schedule_thunk+0x16/0x30 [ 2024.124037][ T8251] ? preempt_schedule_common+0x82/0xd0 [ 2024.124055][ T8251] vmci_ctx_enqueue_datagram+0x3ab/0x420 [ 2024.124073][ T8251] vmci_datagram_dispatch+0x450/0xc60 [ 2024.124092][ T8251] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 2024.124112][ T8251] vmci_qp_broker_detach+0x8dd/0xf20 [ 2024.124136][ T8251] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 2024.124155][ T8251] ? kasan_quarantine_put+0xbb/0x1f0 [ 2024.124176][ T8251] ? kfree+0x1c5/0x640 [ 2024.124194][ T8251] ? vmci_ctx_put+0x5ef/0xc40 [ 2024.124208][ T8251] ? vmci_ctx_put+0x141/0xc40 [ 2024.124223][ T8251] vmci_ctx_put+0x64e/0xc40 [ 2024.124239][ T8251] ? vmci_ctx_put+0x141/0xc40 [ 2024.124254][ T8251] ? __pfx_vmci_ctx_put+0x10/0x10 [ 2024.124274][ T8251] vmci_host_close+0x98/0x160 [ 2024.124294][ T8251] ? __pfx_vmci_host_close+0x10/0x10 [ 2024.124313][ T8251] __fput+0x44f/0xa60 [ 2024.124335][ T8251] task_work_run+0x1d9/0x270 [ 2024.124356][ T8251] ? __pfx_task_work_run+0x10/0x10 [ 2024.124379][ T8251] exit_to_user_mode_loop+0x193/0x680 [ 2024.124394][ T8251] ? rcu_is_watching+0x15/0xb0 [ 2024.124412][ T8251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.124429][ T8251] do_syscall_64+0x353/0x580 [ 2024.124444][ T8251] ? trace_irq_disable+0x3b/0x140 [ 2024.124464][ T8251] ? clear_bhb_loop+0x40/0x90 [ 2024.124480][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2024.124495][ T8251] RIP: 0033:0x7efd8ff9ce59 [ 2024.124511][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.124525][ T8251] RSP: 002b:00007efd90dff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2024.124541][ T8251] RAX: 0000000000000000 RBX: 00007efd90216090 RCX: 00007efd8ff9ce59 [ 2024.124551][ T8251] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007 [ 2024.124561][ T8251] RBP: 00007efd90032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2024.124570][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2024.124579][ T8251] R13: 00007efd90216128 R14: 00007efd90216090 R15: 00007efd9033fa48 [ 2024.124595][ T8251] [ 2024.544522][ T8250] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9430'. [ 2024.670509][ T5723] usb 5-1: USB disconnect, device number 103