last executing test programs: 8.690820775s ago: executing program 0 (id=2037): socket$kcm(0xa, 0x3, 0x87) syz_emit_ethernet(0x87, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x51, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [{0x22, 0x5, "60aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c000000000000"}]}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0xdd43, 0x10000000004, 0x3c, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 8.451536545s ago: executing program 4 (id=2039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) lseek(r1, 0x3, 0x3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 8.298503156s ago: executing program 4 (id=2041): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) io_uring_enter(r4, 0xbbc, 0xd582, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000240)={0x16, 0x1, 0x1, "005a03f00004000000000000000000ff00", 0x38414761}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0) syz_usb_disconnect(r9) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x9, 0x2, 0x0, 0x7ff}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r11], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYRES16=r10, @ANYRES8=0x0, @ANYBLOB="07b0cf7e2c89cc", @ANYRESOCT=r0], 0x0) 7.594810692s ago: executing program 0 (id=2043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[], 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @loopback}}}}}}, 0x0) (async) copy_file_range(r2, 0x0, r2, &(0x7f0000000100)=0x2295, 0xf, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e24, 0xfffffffe, @loopback, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) (async) write$binfmt_script(r5, &(0x7f0000000a80), 0x4) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0x3, 0x43}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 7.079813999s ago: executing program 0 (id=2045): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) (async) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0xffffffffffffff13, 0x0, 0x0}) (async) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0xffffffffffffff13, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe4) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x8103, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x880}, 0x4001) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) (async) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) 6.949992176s ago: executing program 0 (id=2046): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) dup3(r0, r0, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x20000000, 0x0, 0x5}, 0xffffffff}) (async) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x50) read$FUSE(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) (async) gettid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000440)="99a2d1cfd6d19a2714424475b5173389dcfd8ffc813dd4731fd8d0dcea30cd988f491e3b2b2c03d97e90a5cf6a5de11416118e073050c114212de7af41906dc09b4f333308059f50b867e4cc0675dd9272bd9e59314fe6c9137cb5d9832b56dc31b9355eceeb390e19719ad0a282205f6599eee3f96c3178b4ff447a9db0427f3ba35de45693774cfc9722ed3b6c776a8acbca5e7f5e20dae9d093fd327f3f18a498b51312b051e9040e29a30a5c2ddaf14cd95aea0e21266c8006d60dfcd4610ed0e97bc564822c73a8f8c005bc0ad3f2e7975af2bb4b4ef08296bdb9dd2c7e0000000000", 0xe5) (async) socket(0x10, 0x2, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) (async) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 5.968258602s ago: executing program 2 (id=2052): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6089090}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="000228bd7000fcdbdf2545010000"], 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000300)=[{0x28, 0x0, 0x0, 0xfffff02c}, {0x6, 0xfe, 0x0, 0x3}]}, 0x10) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) (async) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x20000, 0x3, 0x2d3}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) r8 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r8, 0x1c, 0x0, @void}, 0x10) 5.89763673s ago: executing program 2 (id=2053): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = epoll_create1(0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="401f01000000"], 0x0, 0x0, 0x0, 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x2, 0x1, 0x89, 0x8, 0x7fff, 0x3}) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000c85000)={0xc0000013}) r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x4407, 0x0, 0x1, 0x28b}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x5fc8, 0xfffff800, 0x4, 0x0, 0x0) 5.495346466s ago: executing program 3 (id=2054): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) select(0x40, &(0x7f00000002c0)={0xf, 0x8002, 0xe, 0x7, 0x4, 0x9, 0x7fffffff, 0x1000}, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x10, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c4}, 0x4054) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x4, 0x5, 0x2, 0x8, "5d2ca36a07330aee0c3d8b86dc41a6f45009d1", 0x2, 0x2}) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\a\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.657761929s ago: executing program 4 (id=2056): socket$inet6(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x19e) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x5, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x11f4, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x11c4, 0x2, [@TCA_TCINDEX_ACT={0x11c0, 0x7, [@m_xt={0x1ac, 0x17, 0x0, 0x0, {{0x7}, {0xfc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x5d, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c0401699f8277d8c193f3c7c09a5e9c"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcd9}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xec8, 0x1e, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x7, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0xe, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0xa, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0xffffffff, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x6, 0x8, 0x4, 0x7, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x4, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x0, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x5, 0xf, 0xc}, {0x9, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {0x5}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x11f4}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_setlink={0x2c, 0x13, 0x800, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x20184, 0x20001}, [@IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040894}, 0x4c000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6, 0xff}]}) 4.559974841s ago: executing program 3 (id=2057): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250300000014000700fc01000000000000000000000000000108000b00", @ANYRES32=0x0, @ANYBLOB="1400090000000000000000000000ffffe000000206"], 0x4c}, 0x1, 0x0, 0x0, 0x20010}, 0x4000001) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf09010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x2000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x4010, r5, 0x8ad5d000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 4.039100356s ago: executing program 1 (id=2059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=ANY=[@ANYBLOB="3c0200001900010025bd7000fcdbdf2500000000000000000000ffffe0000001fe8000000000000000002b000000003700000000000000000200000089000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000200000000000000000100000000008401050020010000000000000000000000000002000000003300000000000000640101000000000000000000000000000000000000000000000000003b00000040000000ff020000000000000000000000000001000020003300000002000000fe80000000000000000000000000000000000000000000000000000000000000fcffffffe0000002000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000135000000000000000000000000000000000000e0000001000000000000000000000000fffffffd3300000000000000ac1414bb000000000000000000000000023500000000080000000000000000000000000020010000000000000000000000000000000004d333"], 0x23c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 3.923868739s ago: executing program 1 (id=2060): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r3, 0x1, 0x80000}, 0x14}}, 0x40000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x228, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x1f8, 0x2, [@TCA_BASIC_ACT={0x1f4, 0x3, [@m_ctinfo={0xb8, 0x6, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x8, 0x7, 0x3, 0xf6}}]}, {0x5a, 0x6, "546d9026840459f892ae17b6b31f2f13af9671758bdcc30d9a2ecc6562c012485c8ddb9b065eacff60296ee05b73c246e1aebafcb7c2d70609cef3069fe09315f2579fb5392334555e1c14fe0254102733b05ee18011"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x138, 0x2, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x8aaf, 0x10000000, 0xb, 0x1}, 0x103a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x20000000, 0xf81, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe72, 0x101, 0xffffffffeffffffe, 0x9, 0xffffffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe, 0x1, 0xffffffffffffffff, 0xfffffffd, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x401, 0x1, 0x7, 0x382}, 0x6}}]}, {0x79, 0x6, "3c61089a15380a1126f43201835b5098e62c765cc000ebe01329c8b134a2ac678d58e084f65a17a435341fdaafad71ec5b72c8e6ac0a83412fcd5fda56965f5e20253c4c7b5a498ed5f80ab0793e90d85689fa268783d048fbe89b29012fa72364926e9d579110081e7dc8aa0ff81188a2d86962e8"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}]}, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x20040001) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x404) shutdown(r0, 0x0) 3.909611141s ago: executing program 0 (id=2061): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, &(0x7f0000000280)) read$FUSE(r2, &(0x7f0000004300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x1e, 0x0, r5}, 0x10) listxattr(0x0, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/43, 0x2b) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet6(r1, &(0x7f0000000040)=""/61, 0x3d, 0x40000040, &(0x7f00000001c0)={0xa, 0x4e21, 0x246, @mcast2, 0x3}, 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.81773357s ago: executing program 2 (id=2062): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000001600)) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000240)={0x7ff, 0x401, 0x5, 0x3ff, 0x1b, "31ca84752de91cef"}) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) (async) read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0x105b) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x44, 0x13, 0x5, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3.695903016s ago: executing program 1 (id=2063): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4008000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x4, 0x4000) r2 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0x100, 0x1, 0x4, 0x0, r1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x808000}, 0x8) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) 3.57632417s ago: executing program 4 (id=2064): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$radio(&(0x7f00000005c0), 0x2, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0xb}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/time\x00') madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fc01"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000840) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000600)=[&(0x7f000008c000/0x3000)=nil, &(0x7f0000fec000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000002240), 0x0) 3.438288399s ago: executing program 1 (id=2065): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000000)=""/106, 0x6a) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) epoll_create1(0x0) unshare(0x4020400) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x6, 0xb7fb, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) write$tun(r1, &(0x7f0000000280)={@void, @void, @ipv6=@tipc_packet={0x7, 0x6, "e27f0c", 0x28, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @payload_named={{{{{0x28, 0x0, 0x1, 0x0, 0x1, 0xa, 0x3, 0x2, 0x6, 0x0, 0x1, 0xb, 0x2, 0x2, 0x7, 0x4, 0x3, 0x4e22, 0x4e24}, 0x1, 0x2}, 0x2, 0x3}}}}}}, 0x50) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.863706718s ago: executing program 2 (id=2066): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x7ac, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xf8}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_flow={{0x9}, {0x76c, 0x2, [@TCA_FLOW_ACT={0x750, 0x9, 0x0, 0x1, [@m_vlan={0xc0, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x687}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x81, 0x6, "592c8208b3eed081d478cfe09d8731141cd58387f43a6360c6cba680a4f270ab39f101a4e3a245dcbd2e2f9cb969dd013b22a09047274c7e80c579d751791ef7150b479058cdef134308e5a9cad1ed70d9856716768042ba041762d7b1aa818cc65abb41fe155c55e173d65be0fef45b34c9a1c3b18dd9af41b9c1e4e4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xe0, 0x1e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x98f2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7c1b}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb}]}, {0x6c, 0x6, "59340ddfebe936b15724675591802cb33327959b93987038cdc1504c51f1ba92cec063f3f05806744dd3ce0a0a141f6aabff94fef1769017d8dddb1a40a89e2e8831dd89ce9e4ef87b3cf5d35298c55c298a9154d07e100e45e5006e839095fb456fee470c39b37d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x15c, 0x19, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4f, 0xffffffffffffffff, 0x990}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa4, 0x3, 0x10000000, 0x3ff, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x8, 0x4, 0xa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xad, 0x3, 0x0, 0x1}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x1, 0x9, 0x81}, 0x5}}]}, {0xa0, 0x6, "41a315d971011c8bcbf829d521a9b586c36796e1fb2070dee35ad896b9e7f0038f4de1cc51a7bffe8641694630a15971f157af252b1a698763bef3f5c211156eecfea95eb70103a3990938a6dc4a66ada498521c4390fad0cdcb0f313af1334eab5368ede2829cf8c8ebbd439972469e1466f9531528cb38d5252635b9457d15cac726da6e9833367b9f66595201f1a31cf59ee1b95d5f80cde5f990"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_sample={0x140, 0xd, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xba0}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0xca, 0x6, "ff39f1b9fd507fb2f59d6ec63ded0a62907ce77c67ba791d50c2b6250405c7f373f731860b0eb7b973e3a57048582334af2afa1eab3b796cf99763187a02ecfa4be429d755ee918e47e6cd2bc6161c25743e3915974fc86b216ba4a78c894f7d4535dd6c4d9a2945be819063eb201837fe0c3cfae30343809e244aea4f01ed4d276691eba3e396b21ba0cadd1ce189776e51522eff6c91367c0e3f637a9a20ad0bb601534c785004e0aac398117c3c462321b09575c619ea9eb7b4c7a2c70124bf6c2ce3144a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1ac, 0x19, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7f, 0x1, 0x7fffffff, 0x5}, @remote, @broadcast, 0xffffffff, 0x10000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x800, 0x2, 0xffffffff, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x4, 0x7, 0x6, 0x3db7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x2, 0x8, 0x6}, @loopback, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x7fff, 0x6, 0x2400000, 0xb31}, @multicast2, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xdf, 0x1, 0x7, 0x0, 0xd}, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2fd2192b, 0x7, 0x200, 0x1}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}]}, {0x69, 0x6, "b71db2fa1beb3aff6e55f75983cc7a452e08d04f06b7578a39558e2498433ec514a71afe48331bbf5e16185d7e170982bfdd6dfbf10d8242efc8a11845900b134e34c468954f604872431ec8e915f18f8024f59f3a64e13f1c75fa163ac4e0d9289957bbc0"}, {0xc}, {0xc, 0x8, {0x2, 0x5}}}}, @m_vlan={0xcc, 0x1c, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3d0}]}, {0x98, 0x6, "ebd87b07c829eb8293958fa18b6e75ab54ba60d579420d542310c2f0b47e4825e086c8ccf745522ec272799847d08509fce9c4cb83075f6ba63aa3e374ca5c47da541f317f5b70f7c13e2ef6bdd7e7c53d0d60f22373c62cc00ec42e52a8667549f4ad95da45f1155e18b93b0de21de0f4b5f0f40dbfecc949d6e6e20b0fd2a88379ec29a644435ccbc969ba39e0ea5c9518f6a8"}, {0xc}, {0xc}}}, @m_tunnel_key={0x98, 0x4, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x68d}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, {0x4a, 0x6, "f6847315f97204e4a7278dbfb9b2859ba213e1ab75244d4334f831ad8353412111aea4953fe1f9adbaf68a162f8c454274fb2ba2b13b94a80a7549310d51b80d1eb3f13265fb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x140c}, @TCA_FLOW_MASK={0x8, 0x6, 0x3}, @TCA_FLOW_MASK={0x8, 0x6, 0x736a}]}}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x8080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000540), 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000580)={{0x2, @addr=0xffff}, 0x8, 0x3, 0x82}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3}) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) r5 = socket(0xa, 0x3, 0xff) io_setup(0x1, &(0x7f00000005c0)=0x0) io_pgetevents(r6, 0x50, 0x6, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}], &(0x7f00000006c0)={0x0, 0x989680}, &(0x7f0000000780)={&(0x7f0000000700)={[0x401]}, 0x8}) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x102, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x1ff, 0x101, 0x6c}) 2.771461844s ago: executing program 3 (id=2067): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "3d196e85f3a47d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) writev(r1, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000340)="658ac4560a", 0x5}], 0x2) 2.631880199s ago: executing program 3 (id=2068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @multicast1, 0x4e24, 0x20000001, 'sed\x00', 0x5, 0x32bd, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047440, &(0x7f0000001200)) r6 = socket(0x1e, 0x1, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x20040600) sendfile(0xffffffffffffffff, r7, 0x0, 0xe000000000000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_pgetevents(0x0, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0xfffffffffffffffd) connect$tipc(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4004) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) write$proc_mixer(r8, &(0x7f0000000280)=[{'PCM', @void}, {'VOLUME', @val={' \'', 'Capture'}}, {'IGAIN', @val={' \'', 'CD Capture Switch'}}], 0x59) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) 2.627270719s ago: executing program 1 (id=2069): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) io_uring_setup(0x7d3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x2000000, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b700000000000000b702219dfb765542"], 0x0, 0x47, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000ffef00", [0x8, 0xffffffff9673e35d]}}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 2.172502993s ago: executing program 4 (id=2070): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}}, &(0x7f0000000300)=0x84) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000d0490bd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04000a0001000000000000000000140035006d6163766c616e3000"], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000001c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r8, 0x7b2, &(0x7f00000000c0)={&(0x7f0000000f00)=[0x2, 0xe0, 0x20400000, 0xff, 0x7, 0x2, 0x9, 0x5, 0x80, 0x4, 0x2, 0x0, 0x5, 0x3a4d, 0x2800, 0x486, 0x5, 0x5a, 0x7, 0x7, 0xfffffff9, 0x4, 0x2, 0x0, 0xfff, 0x9, 0xffff0001, 0x3, 0x4, 0xb9b2, 0x441, 0x6, 0x3, 0x7, 0x8, 0xfffffff8, 0x0, 0xfffffffe, 0x9, 0x8, 0x3, 0x2, 0x1ff, 0x9, 0x2, 0x8, 0x1000, 0x7, 0x1, 0x5, 0x1, 0xf91, 0x0, 0x9, 0x9, 0x7, 0xb, 0x7, 0x7, 0x8000, 0xb80, 0x4, 0x9f, 0x1, 0x5, 0xc41, 0x8, 0x2, 0x1ff, 0x5, 0x7, 0xff76, 0x4, 0xf, 0x6, 0x7, 0x8, 0x3, 0x4, 0x6, 0x4, 0x7fffffff, 0x3, 0x47, 0x7, 0x8, 0x101, 0xfffff046, 0x9, 0x400, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x7, 0x36, 0x157, 0x7d1, 0x8b96, 0xf, 0x20005, 0x0, 0x7, 0x6, 0x2, 0x8, 0x925, 0x4, 0x9, 0x7, 0xb, 0x5a17cff6, 0x0, 0xb6, 0x2, 0x3, 0x2, 0x7f, 0xffffff7f, 0x7, 0x10000, 0x3, 0x1c2a, 0x3ff, 0x0, 0x10, 0x7f, 0x6, 0x3, 0x14, 0x80, 0x7, 0x4, 0x2, 0x0, 0x2f6, 0x5, 0x9, 0xa7, 0x0, 0x9, 0xc, 0x40, 0x8000006, 0x200, 0x1, 0x2, 0x1, 0x401, 0xaa0, 0x2, 0x6, 0x9, 0x400, 0xe, 0x0, 0xfffeffff, 0x5, 0x7fffffff, 0x7ff6, 0x3, 0x1, 0x4, 0x7, 0x400, 0x0, 0x6, 0x6, 0x101, 0x2, 0x5, 0xfffffff8, 0x3, 0x7fff, 0x6d, 0x7, 0x1, 0x8, 0x6, 0x10001, 0x0, 0xffffffff, 0x8, 0xd, 0x2, 0x200, 0x7bd, 0xa2, 0x2, 0x7, 0x9, 0x6, 0x2, 0x4ec, 0x3, 0x401, 0x5, 0xb, 0x1, 0x948, 0x7, 0x8001, 0xff, 0x200, 0xb67, 0x6, 0x5b, 0x2, 0x1, 0x8, 0x6, 0x2, 0x2, 0x1, 0x10, 0x7f, 0xa07, 0xc0bf, 0x40, 0xa4f, 0x8, 0x8001, 0x8, 0x6, 0x10000, 0x1000, 0x8, 0x1, 0x6, 0xab5, 0x4, 0x9da, 0x800000, 0x7, 0x4, 0xf8, 0x7, 0x7fffffff, 0xfffeffff, 0x401, 0x1, 0x101, 0x2, 0x3, 0xe, 0x6, 0x9, 0x401, 0x7, 0x0, 0x7, 0xfffffffc, 0x5, 0x4, 0x8, 0x3f39, 0xbaa, 0x2, 0x6, 0xcb7, 0x4, 0x8, 0x7f, 0x53b, 0xc, 0x1, 0x2, 0x8, 0xc, 0xfffffff8, 0x0, 0x2, 0x3, 0x5, 0x3, 0x4000400, 0x6b, 0x7ae, 0x1, 0x6f0, 0xffff, 0x4, 0x9, 0x4, 0xfff, 0x2, 0x7f, 0x3, 0x6, 0x544040be, 0x2, 0xc, 0x8, 0x9, 0x8, 0x7, 0x10001, 0xff, 0x7, 0x10000, 0x2, 0x818, 0x4, 0x3, 0x5af, 0x2, 0x5, 0x7, 0x2, 0xd, 0x2, 0x8d, 0xb8c5, 0xfffffffe, 0x202, 0x3, 0x2, 0xa0, 0x9, 0x7, 0x1, 0x4000000, 0xffffffff, 0x4, 0x40, 0x0, 0x1, 0x7, 0x6, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8, 0x1, 0x5, 0x3, 0x9, 0xb1, 0x5, 0x7, 0xe, 0x9, 0x100, 0x3, 0x5, 0x6, 0x7, 0x2, 0x3, 0xec, 0x5, 0x7, 0xff, 0x5, 0x0, 0x9cf, 0xaef8, 0xffff, 0x5, 0x1, 0x5, 0xc, 0x3, 0xc, 0x0, 0x0, 0x6, 0x7, 0x4, 0xf2ed, 0x6, 0x4, 0x1, 0x7, 0x5, 0x8, 0x10000, 0xb, 0x9, 0xec852fda, 0x2, 0x9, 0x2, 0x3620, 0x9, 0x3, 0x3, 0x7, 0x74, 0x0, 0x9, 0x0, 0x2, 0x7, 0x8, 0x3, 0x5, 0x21000000, 0x4, 0x5, 0x9, 0x356d28dc, 0x8, 0x999, 0x6, 0x24, 0x6, 0x3, 0x2772, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x101, 0x9cf, 0x10001, 0xd1, 0x0, 0x5, 0x3, 0x6, 0x40004, 0x80000001, 0x2, 0x5, 0x9, 0xe, 0xfff, 0x7, 0x10000, 0xffff, 0x7, 0x9, 0xfffffff7, 0x6, 0x4, 0x9, 0x7ff, 0xd8a, 0x5, 0x929, 0x0, 0x8, 0xfffffffe, 0x40, 0x4, 0x2, 0x6, 0x1, 0x7, 0x7, 0x7fffffff, 0x33, 0x5, 0xa7, 0x7d8e, 0x2, 0x5, 0x4, 0x5, 0x3, 0x3, 0x1, 0x5, 0x96, 0x80, 0x8000, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x5, 0x0, 0x4, 0x100000, 0x6, 0x1, 0x9, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x6, 0x4, 0x5, 0x40, 0x800, 0xfffffffb, 0x5, 0x0, 0x0, 0x80, 0x6, 0x10, 0x0, 0x0, 0x3, 0x4, 0x4, 0x80000001, 0x81, 0x8001, 0x0, 0x6, 0x2, 0x7, 0xff, 0x7fff, 0x7, 0x0, 0x3, 0x1, 0x3, 0xb, 0x3, 0x6c, 0xffffffff, 0x8, 0x1ff, 0x10, 0xf, 0x81, 0x292d, 0x2ac9, 0x9, 0xb42, 0x7, 0xd015, 0x3, 0xff, 0x8001, 0x6, 0x0, 0xe, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x5, 0x80000000, 0x6, 0xffffffff, 0x8, 0x5, 0x3, 0xd, 0x8001, 0x100, 0xffffffa1, 0xb, 0x1, 0x25fa, 0xd4, 0x2, 0xffffffd6, 0x976, 0x7, 0x4, 0x0, 0x5, 0xff, 0x3, 0xe6, 0x74c, 0x4, 0x7, 0xb0a, 0x6, 0x862d, 0x40, 0xffffffff, 0x5, 0x5, 0xd8c, 0x9, 0x7fffffff, 0x7, 0xe11, 0x4, 0x8, 0x1ff, 0x6, 0x10, 0x8001, 0x0, 0x8, 0xffffffff, 0x40, 0xe8, 0xb, 0x2, 0x9, 0x8, 0x5, 0x5, 0x80000001, 0xe, 0x4, 0x9, 0xb, 0x1, 0x3, 0x9, 0x9, 0xa0000000, 0xc390, 0x4, 0x791, 0xfff, 0x4, 0x54f, 0x4, 0x4, 0x80, 0x6, 0xfffffe00, 0xb, 0x5, 0x4, 0x7, 0x401, 0x4, 0x2, 0x8, 0x2, 0x3, 0xfffffff7, 0x9, 0x5, 0x6, 0x6, 0x4, 0x8, 0x0, 0x6f616b2e, 0x8, 0x101, 0x1ff, 0x2, 0x0, 0x4, 0xa25, 0x7, 0x8001, 0x9, 0xdd4, 0x4, 0x9, 0x7ff, 0x9, 0xffffffff, 0x80, 0x1, 0x4, 0x7, 0xfffffff7, 0x8, 0x2f69, 0x1, 0x7, 0x766b, 0x8, 0x1, 0xb, 0x8, 0xffffce7d, 0x6, 0x2, 0xffff349c, 0x9c1, 0x2, 0x1, 0x1, 0x2, 0x52, 0x9, 0x10000, 0x5, 0x4, 0x35, 0x9, 0x9088, 0xfff, 0x8, 0xb, 0x8000, 0x7, 0x80000001, 0x8, 0x800, 0x6, 0x5, 0x6, 0xd1, 0x8, 0x8000, 0x3, 0x6, 0x4, 0x5, 0x10000, 0x5, 0x7fff, 0xff, 0x607, 0x6, 0x3, 0x4, 0x7, 0x8, 0xc0000000, 0x9, 0xf035, 0x5aa8, 0x1, 0x7, 0x3, 0x3, 0x5, 0x5, 0x2, 0x20, 0x101, 0x6, 0xb, 0x5fa5, 0x8, 0x5, 0xfffffffd, 0x7fffffff, 0x4, 0x5, 0x8, 0x1000, 0x3, 0x5, 0x3, 0x9, 0x2, 0x9a5, 0x8, 0x8, 0xff, 0x7, 0x4, 0x7fffffff, 0x4b8, 0x3, 0x5, 0x2, 0x4, 0x6, 0x40, 0x1, 0xe07, 0x8, 0x340, 0x3, 0x5, 0x5, 0xa, 0xfb3f, 0x100000, 0x3, 0x9, 0x4, 0xa, 0x100, 0x1a, 0xfffffffa, 0x7, 0x39, 0x7ff, 0xe, 0x835, 0x7, 0x1, 0x2b, 0x2, 0x1d1c, 0x10, 0x6, 0x10000, 0x7, 0x7f, 0x4, 0x5, 0x5, 0x2, 0x4, 0xffffff00, 0xee5b, 0x1, 0x1, 0x0, 0x8, 0xfffffffc, 0x29f0, 0x6, 0x8, 0x7, 0x769, 0x0, 0x4, 0xe6f, 0x3, 0xf2a, 0x6, 0x93ad, 0x5, 0x9, 0x400, 0x8000, 0x7, 0x6, 0x5, 0x80000001, 0x4, 0x9, 0x1, 0xf4, 0x100, 0x7, 0x1, 0x400, 0x401, 0x5, 0x3, 0xb, 0x7, 0x10, 0x2, 0x2, 0x7f, 0x5, 0x7f, 0x54bf, 0x10, 0xd, 0x8, 0xff, 0x73a3, 0xdc, 0x3, 0x9, 0x3, 0x3b, 0x400000, 0x4, 0x2, 0xfaea, 0x3, 0x80000001, 0x6, 0x7, 0x4, 0x4b, 0x8, 0x6, 0x2, 0xffff, 0x8, 0x8, 0x2, 0xb, 0x9, 0x7fffffff, 0x80, 0x0, 0x1, 0x2, 0x9, 0x5b40000, 0x32bb, 0x200, 0x8, 0x9, 0xf3d, 0x8a, 0x4, 0x3, 0x5, 0x5, 0x81, 0x5, 0xef, 0x6, 0x6, 0xac, 0x7, 0x4, 0x64, 0x6, 0x9, 0x8, 0x3, 0x300000, 0x3, 0x0, 0x4a1, 0xcd9, 0x3e77, 0x854, 0xee8, 0x3, 0x7fffffff, 0x400, 0x5, 0x3, 0x4, 0x2, 0x2, 0x81c, 0x3ff, 0x800, 0xe7d, 0x40, 0x1ff, 0x0, 0x4, 0x3, 0x400, 0xfffffffe, 0xffffffff, 0x800, 0x41c, 0x9, 0xfffffffc, 0x800009, 0x1bcb, 0x9, 0x4, 0x2, 0xf4a, 0x8, 0x1ff, 0x3, 0x401, 0x3, 0x9, 0x7, 0x2b4, 0x91, 0x7, 0x8c, 0x1, 0xffffffff, 0x2, 0xb, 0x10000009, 0x7, 0x3, 0x0, 0x9, 0xb, 0x3, 0x1f, 0x8, 0xf1b, 0x0, 0x4, 0x0, 0x7, 0x8, 0xd3, 0x5, 0xf, 0x3, 0x8, 0x7, 0x3, 0x7ff, 0x104, 0x6, 0x5, 0x2, 0x7, 0x8, 0x6ee5, 0xfffffffb, 0x401, 0x7, 0x7fffffff, 0x1, 0x0, 0x1, 0x5, 0xc0000000, 0x1, 0x2, 0x76ac8333, 0xe, 0xff, 0x3ff, 0x66680, 0x7ff, 0x9, 0x9, 0x2, 0x230c, 0x2, 0x51c4ea0d, 0xbd, 0x9c, 0xd, 0x401, 0x0, 0x0, 0x3, 0xe6, 0x2, 0x4], 0x2, 0x400, 0x38}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 1.919932139s ago: executing program 2 (id=2071): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f000000c900)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000440)="6c286a1604282e60347edd4e45c53a22f0938b380020f62bcb865106c7cba56e494cec5deac5afe8501f290ad6e98574529e15d4c36af1aea3bc3003c2a8a09ad07e6e66b06839b1346eddf7d23ce9874ab9ed4fd020749fd28ab5a2978da11e3c5ff2f4c55046ea641751edd6790b377a0f115af0dc43559571b9e17fc0370586a13bc4bd1db37c6e867ab2ce78bea500b07c1a565059a646e30806ab6641e09c39f867b2b6dbf8e5d13f689db692cdff938df3c98e6c2a54d9b95d24f1308256b8f00c17", 0xc5}, {&(0x7f0000000280)="1b6e857411d19809cec7961031193657128277cd765aaca423cde27fcb0e17219eca991cf90c52619419cde87674fa9148743020d87c3ad22863a896000a149734f4da0a99ef0d2853d6ea45d37f0c75e8fa3c6505741698ccd18caf9e8f2c6c2e326d13", 0x64}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f00000005c0)="b699eec88b20ea21aa888749c5d6fc228224560647a8b74fbf0b502a996161a170fe0526102b27119d1acd8da942cab445f75fae10d7dabe1824411624d3d10c459043b65db441d14e1b0b6452b5d84e70092b1793059ddf1eeea1b5b0a30ffd73a488e5fe078e19f06a77498c0399d063d88647cd584d4ba4fc2486c6e20560c2889ad5", 0x84}, {&(0x7f0000000780)="c13ce86b28cbd5f5c6826af6b9123baec4981d9a9f3c63037cb89a7c5074d5b6a8d00a19c54f963266d2c607cc5576f20e09cf1a3fd72eabf59d03f8b2616d4f939b9cd85f796750f51e2f2774d79e38a606163961bbd504daab3a0a5e844dddfa3d654fd0b43f52ddc22512d51a328e730fb4fc79e863f0b4722a95199c62d7f22ec7c4932fb25da8cd14fe251de603dc5368f6ba0e32ff6638864d85667c27949e05d08b4d89f5edd9701ffb51dcb1781864e673fbf38eb61130bd0f9761f604c8ee0ec78b7772e6e009fa3565017172d411", 0xd3}, {&(0x7f0000000880)="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", 0xff}, {&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000a80)="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", 0xff}, {&(0x7f0000000b80)="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", 0x1000}], 0x6, &(0x7f0000001d00)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}], 0x60, 0x4c804}}, {{&(0x7f0000001d80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e00)="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", 0xfc}, {&(0x7f0000001f00)="a7d704e08dabe591938ae2f9a91cc892e01c819cdc35be75937362118757f53070939c3053bf4b43480a072d32025a164d2d8e", 0x33}, {&(0x7f0000001f40)="9e2d1b17b2050acea75ae8df670a02fc2d9048dcb92b0da083a0cad652200371f09019081c9dd3120bd60ddf861564d10c39dde5d832dedf456a2e3ff3957c1ffd03a433c39d9d4ed7fd7193922620155fa4d88ba97248886eaa265bea0278f19e46581a2b95592ff3af2cdfd200a983bf00ea8daa318dcd330b76bcd9959d51b08d6d13b01b99b56157", 0x8a}, {&(0x7f0000002140)="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", 0xfd}], 0x4, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, r2, r2, r2, r0, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r3, r1, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138, 0x20000000}}, {{&(0x7f000000a240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002080)=[{&(0x7f000000a2c0)="1eff7051888b5cbe028599b3129cf5739df50a70ebb1c604ee8e08298d9f9f1333fa4a8393c4d4153f37dcfced03626437f513b71247b8fd648981391eb61a77fa386897e2d8c2fa264fdeb294e93b824503817b11c19932c7ea", 0x5a}], 0x1, &(0x7f000000c400)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r3]}}, @rights={{0x24, 0x1, 0x1, [r3, r5, r1, r5, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128, 0x8881}}, {{0x0, 0x0, &(0x7f000000c640)=[{&(0x7f000000c540)="0281ff5988dcd492fc361d6336376fb6e5a1c94c4885b3a5a1bd0a589ad2d1cafb6eac3f9482b3cc8a26b6d82066579b7c02f5535eaa2d34345f521b1a569f63c711e1504bdc7fb34281dfccc6a7ab1a189cd4bc53d1612564a17ab779a9a2f959ddbb7444794176b2caf74579f62f9d588832ca3053e39ec34e140a5115c5f0d4be11576e3b08038eaf737227596f2f7a392d95cf035882ff530b5e4ec3ea39fbcc8b77faa1b46f98c2f5eae7629f2ef36ed63354f784b596cfd35b376afe74b27f9f43c415b8a09bf04d27fa169627cd9298a2", 0xd4}], 0x1, &(0x7f000000c680)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50, 0x20048800}}, {{&(0x7f000000c700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000c8c0)=[{&(0x7f000000c780)="454b07e93e5feafe93b811bb149864c91555", 0x12}, {&(0x7f000000c7c0)="1e1f650e6d335eb576fbf2ca81c19eb58227465df4d14f6e46a1b35df87ea504ea01fa219de99fdd1f1d3beb01dd9d43c50c3cebbe158c6b81e74c4fc1c598e55fe2abf09cc8db5793ca37d7fbe4d458f04fcb2f92ffe15b26919b23c3ceb482f6fc08e4d9589226a960e25fc603e97929ad8c65157a0f449e2f1c354cbf8ffd896af929a546afeaed418659188b6a446f5c89e1eff4e65166666fbbd21fa0481debeb0626ed0e3f0de6ab1fb675d8473966104a91b86fd7a335ef5b90dd0be98d3696f3fc6323c3a97f0ca8ac1b68579a92caaa07a6042c576c550287714b7eb97069a45f0b28b00da99197afd8eb5e7601868e3d", 0xf5}], 0x2, 0x0, 0x0, 0x41}}], 0x6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x6a2500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f00000000c0)={0x8985, "b546008318526b06000e00005ba42049956f8a3c1b2cf34b000000001000"}) ioctl$SW_SYNC_IOC_INC(r11, 0x40045701, &(0x7f0000000340)=0x400f) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x7, 0xd, 0x6, 0xfff, 0x13cd, 0xeb7b, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x7ffc0000) socket(0x21, 0x800, 0x6) 1.079969113s ago: executing program 1 (id=2072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xee, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f0000000040)=ANY=[@ANYBLOB="4aa73c40652f5cf02835995f271d5374dd3d733308", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountstats\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)) ioctl$SOUND_PCM_READ_RATE(r5, 0x80045002, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x408}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000000240)=""/53, 0x35}], 0x5}, 0x27}], 0x3, 0x2000, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1}}], 0x2, 0x20040141) accept(r8, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) 1.024792296s ago: executing program 3 (id=2073): syz_open_dev$sg(&(0x7f00000060c0), 0x7ffffffffffffffd, 0xa402) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000001700)=[{{&(0x7f0000000200)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000480)=""/4095, 0x1049}, {&(0x7f0000001480)=""/29, 0x1d}, {&(0x7f00000014c0)=""/218, 0xda}, {&(0x7f00000015c0)=""/54, 0x36}], 0x7, &(0x7f0000001680)=""/121, 0x79}, 0xbf}], 0x1, 0x12002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB="2c000007000000de00001400", @ANYRES32, @ANYRES64=0x0, @ANYRES64=0x0], 0x20) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0xa7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000100)={0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20048881}, 0x2400c8c0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010005fba00"/18, @ANYRES32=0x0], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 627.44523ms ago: executing program 2 (id=2074): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014007282800020004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x0, 0x3fc, &(0x7f0000000c40)=ANY=[@ANYBLOB="120100010b1a0540101410907e95010203010902ea0302024010060904cf490b02060002390812b36443236d8fbb31d60617e3ed99ff2c3d5ef982d8906a65bdca6d420f08991ea40a4600675d79e9e029cfe02a28f3bd5bedfade64620a24010500080201020c2407040000f2df8b066a7c0c24020500020407faff040b0d2408040700053be5e4459401082405060a2f4054112406"], 0x0) 574.093662ms ago: executing program 4 (id=2075): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x800) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_open_dev$video4linux(&(0x7f0000000380), 0x7, 0x101080) ioctl$VIDIOC_SUBDEV_S_SELECTION(r13, 0xc040563e, &(0x7f00000003c0)={0x0, 0x0, 0x1, 0x0, {0x4, 0x73, 0x95, 0x9}}) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 77.253298ms ago: executing program 0 (id=2076): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e040031000022000001090224000100000000090400000103000000092100000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x23, 0x2, @thr={&(0x7f0000000080)="09aef850c1cb34d94bbf4927256e60a72bb93c33480c02279736546a78c1768c0cfcc9bfdd33ef92f190626e331fef8d56eee7731294e9abd07033dac0f71bcd21e4", &(0x7f0000000140)="31464900815f97641573d3b5cb5236f3b6cbe525e14002b9088b15b1e787917f198a14e5ea1ae647969dbf21e09b53e7e3bf3fb6c308315aec"}}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a00004000000000000000001400030068f372300000000000000000000000001400110076"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000400)="0000230b13fe") 0s ago: executing program 3 (id=2077): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000180)={0x0, 0xd, 0xa7, {0xa7, 0x6, "60a671b4a074321ef0d1d7eb8ac3f86b1e5b7304c3166ac20770b9463244a70a58fef3e3a39dcf69df7fc27221b67d3f988e8cafd7f22d9d3a1ed03c2c4f63649f2f40c7f6c75ab661c7c06125c9db9c93f624c026c0804069ee7a8a59d174d4327205cde670aa65db720cef318983312237ca2ed62de97f333a69dbe6a00a9dd16834bfc596aa8873f0f1a12a738501de70f86579924c7c31ac7a7e0c2481edb1d522b04f"}}, &(0x7f0000000240)={0x0, 0x3, 0x51, @string={0x51, 0x3, "049b7295136b33ae45c92b2e42854e9253b5812348bd157b33fae81e939e1a2b3954f156d658fa5bf13ff09d4c57a4c4de122f64e69e799bcb3a1cf27d5489539f06fcde35f978eac26adb2301a725"}}, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_4={0x3, 0x0, 0x8, "a6eeed11"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x6, 0x1, {0x22, 0xf0}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x0, 0xb, 0x81, "f8f5010d50e278a32d9f892e12d0a5e212eb2352597973de022e0eaec53862c2f52e55482ed6c042ec9024b8e6348af0baaab7bdeedadd19d72e640eff9ebc24888f8363b914ae2e5589e2f481951258764c4c7641b071436c3e334ee30d13748f56ecb65ba6d065f5f5ffb75748ab0e4f31796f053f010d0180ebe9d0374b3c53"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xd5}, &(0x7f0000000480)={0x20, 0x1, 0x31, "aaa946bda2e6c9b07e829a3b92d764d567506e5c067c9540da5b3bd0aa79df0a1f312bbc77283697d3c81e51a4945bee54"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x3}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x62) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000010c0)=""/4, 0x4}, {&(0x7f0000000480)=""/51, 0x33}], 0x2}}], 0x1, 0x40004022, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000300f3508da040d391a990102030109022d0001000000440904ef0003846a92000905021010000204070905640208000803080905030010"], 0x0) kernel console output (not intermixed with test programs): ][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.399036][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 394.412152][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.429973][ T30] audit: type=1326 audit(1773957042.914:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 394.452547][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 394.463889][ T30] audit: type=1326 audit(1773957042.914:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 394.472073][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 394.486684][ T30] audit: type=1326 audit(1773957042.914:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 394.517916][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 394.518404][ T30] audit: type=1326 audit(1773957042.914:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 394.555410][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 394.564812][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.565196][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 394.573829][ T5907] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 394.603237][ T49] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 394.612458][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.627449][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 394.628621][T11941] fuse: Unknown parameter '0x0000000000000005' [ 394.642958][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.647487][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 394.662260][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.683833][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.698688][ T30] audit: type=1326 audit(1773957042.914:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 394.704049][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.764856][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 394.775853][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 394.790462][ T30] audit: type=1326 audit(1773957042.914:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.3.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f837439e007 code=0x7ffc0000 [ 394.817327][ T5907] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 394.842068][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.850493][ T5907] usb 1-1: Product: syz [ 394.875369][ T5907] usb 1-1: Manufacturer: syz [ 394.881974][ T5907] usb 1-1: SerialNumber: syz [ 394.892528][ T5907] usb 1-1: config 0 descriptor?? [ 394.902911][T11939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 394.910492][T11939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 394.914686][T11950] syzkaller1: entered promiscuous mode [ 394.925618][T11950] syzkaller1: entered allmulticast mode [ 395.140146][T11939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.147857][T11939] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 395.173718][ T9] tipc: Node number set to 2130706433 [ 395.396772][T11960] netlink: 'syz.4.1632': attribute type 11 has an invalid length. [ 395.569356][T11939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.583595][T11939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.614423][ T5907] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 395.854714][ T797] usb 4-1: USB disconnect, device number 105 [ 396.031379][ T5907] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 396.141796][ T5907] usb 1-1: USB disconnect, device number 104 [ 396.256053][T11972] loop5: detected capacity change from 0 to 7 [ 396.274321][ T5823] Dev loop5: unable to read RDB block 7 [ 396.289708][ T5823] loop5: AHDI p2 [ 396.297337][ T5823] loop5: partition table partially beyond EOD, truncated [ 396.314593][T11972] Dev loop5: unable to read RDB block 7 [ 396.320543][T11972] loop5: AHDI p2 [ 396.326770][T11972] loop5: partition table partially beyond EOD, truncated [ 397.020850][T11993] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 397.062653][T11990] fuse: Unknown parameter '0x0000000000000005' [ 397.069908][T11990] __nla_validate_parse: 1 callbacks suppressed [ 397.069917][T11990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 397.563179][ T5907] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 397.713202][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 397.722468][ T5907] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.749312][ T5907] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 397.846059][ T5907] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.042347][ T5907] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 398.052254][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.125043][ T5907] usb 4-1: Product: syz [ 398.154163][ T5907] usb 4-1: Manufacturer: syz [ 398.177988][ T5907] usb 4-1: SerialNumber: syz [ 398.442194][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1651'. [ 398.859577][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1650'. [ 398.900141][T12023] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 398.945970][T12023] bond2 (unregistering): Released all slaves [ 399.218614][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 399.218631][ T30] audit: type=1326 audit(1773957048.064:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.336853][ T30] audit: type=1326 audit(1773957048.064:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.397328][T12035] syzkaller0: entered promiscuous mode [ 399.412207][ T30] audit: type=1326 audit(1773957048.124:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.456771][T12035] syzkaller0: entered allmulticast mode [ 399.508866][ T30] audit: type=1326 audit(1773957048.134:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.607659][ T30] audit: type=1326 audit(1773957048.134:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f301a35cfce code=0x7ffc0000 [ 399.653573][ T30] audit: type=1326 audit(1773957048.134:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.780699][ T30] audit: type=1326 audit(1773957048.214:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.841395][ T30] audit: type=1326 audit(1773957048.214:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 399.885812][ T30] audit: type=1326 audit(1773957048.214:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 400.010946][ T30] audit: type=1326 audit(1773957048.224:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12034 comm="syz.0.1654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 400.315407][ T5907] usb 4-1: 0:2 : does not exist [ 400.323071][ T5907] usb 4-1: unit 1 not found! [ 400.332525][ T5907] usb 4-1: unit 130 not found! [ 400.578349][ T5907] usb 4-1: USB disconnect, device number 106 [ 400.822386][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.205323][T12063] loop5: detected capacity change from 0 to 7 [ 401.230867][ T5824] Dev loop5: unable to read RDB block 7 [ 401.238422][ T5824] loop5: AHDI p2 [ 401.246201][ T5824] loop5: partition table partially beyond EOD, truncated [ 401.290417][T12063] Dev loop5: unable to read RDB block 7 [ 401.296094][T12063] loop5: AHDI p2 [ 401.299895][T12063] loop5: partition table partially beyond EOD, truncated [ 401.534854][T12069] FAULT_INJECTION: forcing a failure. [ 401.534854][T12069] name failslab, interval 1, probability 0, space 0, times 0 [ 401.563243][T12069] CPU: 0 UID: 0 PID: 12069 Comm: syz.1.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.563262][T12069] Tainted: [L]=SOFTLOCKUP [ 401.563265][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.563274][T12069] Call Trace: [ 401.563280][T12069] [ 401.563285][T12069] dump_stack_lvl+0xe8/0x150 [ 401.563397][T12069] should_fail_ex+0x412/0x560 [ 401.563483][T12069] should_failslab+0xa8/0x100 [ 401.563529][T12069] ? vm_area_alloc+0x24/0x140 [ 401.563555][T12069] kmem_cache_alloc_noprof+0x87/0x650 [ 401.563569][T12069] vm_area_alloc+0x24/0x140 [ 401.563580][T12069] mmap_region+0x10eb/0x2240 [ 401.563597][T12069] ? tomoyo_check_open_permission+0x1d3/0x470 [ 401.563672][T12069] ? __pfx_mmap_region+0x10/0x10 [ 401.563689][T12069] ? __lock_acquire+0x6b5/0x2cf0 [ 401.563764][T12069] ? bpf_lsm_mmap_addr+0x9/0x50 [ 401.563785][T12069] ? security_mmap_addr+0x71/0x240 [ 401.563836][T12069] ? shmem_mapping+0xd/0x50 [ 401.563849][T12069] ? memfd_check_seals_mmap+0xc5/0x200 [ 401.563872][T12069] do_mmap+0xc39/0x10c0 [ 401.563891][T12069] ? __pfx_do_mmap+0x10/0x10 [ 401.563903][T12069] ? down_write_killable+0x180/0x240 [ 401.563971][T12069] ? __pfx_down_write_killable+0x10/0x10 [ 401.563983][T12069] ? apparmor_mmap_file+0x2da/0x3e0 [ 401.564021][T12069] vm_mmap_pgoff+0x2c9/0x4f0 [ 401.564039][T12069] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.564052][T12069] ? __fget_files+0x2a/0x420 [ 401.564073][T12069] ? __fget_files+0x3a0/0x420 [ 401.564086][T12069] ? __fget_files+0x2a/0x420 [ 401.564101][T12069] ksys_mmap_pgoff+0x51e/0x760 [ 401.564118][T12069] do_syscall_64+0x14d/0xf80 [ 401.564149][T12069] ? trace_irq_disable+0x3b/0x150 [ 401.564173][T12069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.564192][T12069] ? clear_bhb_loop+0x40/0x90 [ 401.564204][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.564216][T12069] RIP: 0033:0x7f6a31b9c799 [ 401.564227][T12069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.564235][T12069] RSP: 002b:00007f6a32a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.564247][T12069] RAX: ffffffffffffffda RBX: 00007f6a31e15fa0 RCX: 00007f6a31b9c799 [ 401.564254][T12069] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 401.564260][T12069] RBP: 00007f6a32a00090 R08: 0000000000000003 R09: 00000000976be000 [ 401.564266][T12069] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 401.564272][T12069] R13: 00007f6a31e16038 R14: 00007f6a31e15fa0 R15: 00007f6a31f3fa48 [ 401.564287][T12069] [ 402.327046][T12082] binder: BINDER_SET_CONTEXT_MGR already set [ 402.333062][T12082] binder: 12081:12082 ioctl 4018620d 200000004a80 returned -16 [ 402.343668][ T1153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.393174][ T1153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.401918][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.438531][T12086] xt_cgroup: invalid path, errno=-2 [ 402.451609][ T1153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.474416][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 402.530845][T12092] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 402.763353][ T5907] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 402.993710][T12104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'. [ 403.003774][T12104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1673'. [ 403.109322][ T5907] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 403.168682][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.193598][ T5907] usb 5-1: Product: syz [ 403.235549][ T5907] usb 5-1: Manufacturer: syz [ 403.252618][ T5907] usb 5-1: SerialNumber: syz [ 403.323452][ T5907] usb 5-1: config 0 descriptor?? [ 403.353562][ T5907] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 403.365281][T12111] loop5: detected capacity change from 0 to 3 [ 403.374059][T12111] Dev loop5: unable to read RDB block 3 [ 403.386420][T12111] loop5: AHDI p2 [ 403.399461][T12111] loop5: partition table partially beyond EOD, truncated [ 404.283685][ T5907] gspca_stk1135: reg_w 0x0 err -110 [ 404.290001][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.332269][ T5907] gspca_stk1135: Sensor write failed [ 404.383389][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.445307][ T5907] gspca_stk1135: Sensor write failed [ 404.482422][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.706758][ T5907] gspca_stk1135: Sensor read failed [ 404.714890][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.726914][T12133] tipc: Enabling of bearer rejected, already enabled [ 404.734709][ T5907] gspca_stk1135: Sensor read failed [ 404.775544][ T5907] gspca_stk1135: Detected sensor type unknown (0x0) [ 404.790363][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.797032][ T5907] gspca_stk1135: Sensor read failed [ 404.802224][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.810544][ T5907] gspca_stk1135: Sensor read failed [ 404.816050][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.826143][ T5907] gspca_stk1135: Sensor write failed [ 404.836281][ T5907] gspca_stk1135: serial bus timeout: status=0x00 [ 404.856505][ T5907] gspca_stk1135: Sensor write failed [ 404.922369][ T5907] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 405.170419][T12143] fuse: Unknown parameter '017777777777777777777770x0000000000000005' [ 405.438308][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1686'. [ 405.513624][ T5883] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 405.553477][T12150] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 405.683216][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 405.696746][ T5883] usb 2-1: config 0 has no interfaces? [ 405.787837][ T5883] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 405.809630][ T5883] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 405.874851][ T5883] usb 2-1: Manufacturer: syz [ 405.892839][ T5883] usb 2-1: config 0 descriptor?? [ 406.120670][ T5883] usb 5-1: USB disconnect, device number 93 [ 406.823176][ T5883] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 406.855540][T12162] syzkaller0: entered promiscuous mode [ 406.866445][T12162] syzkaller0: entered allmulticast mode [ 406.984971][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.006347][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 407.035602][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 407.069511][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 407.083764][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 407.136204][ T5883] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 407.155151][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.176875][ T5883] usb 5-1: Product: syz [ 407.190853][ T5883] usb 5-1: Manufacturer: syz [ 407.208486][ T5883] usb 5-1: SerialNumber: syz [ 407.237526][ T5883] usb 5-1: config 0 descriptor?? [ 407.247460][T12157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 407.272740][ T5883] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 407.540259][ T5907] usb 5-1: USB disconnect, device number 94 [ 407.546485][ C0] kbtab 5-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 407.993239][ T5907] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 408.157844][ T5907] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 408.169659][ T5907] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 408.181598][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 408.191099][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 408.200684][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 408.209302][ T5907] usb 5-1: Product: syz [ 408.213750][ T5907] usb 5-1: Manufacturer: syz [ 408.218580][ T5907] usb 5-1: SerialNumber: syz [ 408.234998][ T5907] usb 5-1: config 0 descriptor?? [ 408.247003][ T5907] usb 5-1: selecting invalid altsetting 0 [ 408.506775][T12175] sctp: [Deprecated]: syz.0.1695 (pid 12175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 408.506775][T12175] Use struct sctp_sack_info instead [ 408.764059][ T5907] usb 2-1: USB disconnect, device number 93 [ 408.833200][ T5883] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 409.012757][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 409.021647][ T5883] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.033643][ T5883] usb 1-1: config 6 has an invalid interface number: 128 but max is 1 [ 409.043330][ T5883] usb 1-1: config 6 has an invalid interface number: 3 but max is 1 [ 409.076743][ T5883] usb 1-1: config 6 has no interface number 0 [ 409.089989][ T5883] usb 1-1: config 6 has no interface number 1 [ 409.102997][ T5883] usb 1-1: config 6 interface 128 has no altsetting 0 [ 409.120332][ T5883] usb 1-1: config 6 interface 3 has no altsetting 0 [ 409.161001][ T5883] usb 1-1: New USB device found, idVendor=0403, idProduct=b812, bcdDevice=22.79 [ 409.170595][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.185858][ T5883] usb 1-1: Product: syz [ 409.197058][ T5883] usb 1-1: Manufacturer: syz [ 409.258735][ T5883] usb 1-1: SerialNumber: syz [ 409.503661][ T5883] ftdi_sio 1-1:6.128: FTDI USB Serial Device converter detected [ 409.512472][ T5883] ftdi_sio ttyUSB0: unknown device type: 0x2279 [ 409.535976][ T5883] hub 1-1:6.3: Invalid hub with more than one config or interface [ 409.577454][ T5883] hub 1-1:6.3: probe with driver hub failed with error -22 [ 409.591674][ T5883] ftdi_sio 1-1:6.3: FTDI USB Serial Device converter detected [ 409.655677][ T5883] ftdi_sio ttyUSB1: unknown device type: 0x2279 [ 409.682109][ T5883] usb 1-1: USB disconnect, device number 105 [ 409.724047][ T5883] ftdi_sio 1-1:6.128: device disconnected [ 409.752780][ T5883] ftdi_sio 1-1:6.3: device disconnected [ 410.148684][T12194] syzkaller0: entered promiscuous mode [ 410.155049][T12194] syzkaller0: entered allmulticast mode [ 410.280606][T12198] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 410.549579][T12204] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 411.037623][ T5907] usb 5-1: USB disconnect, device number 95 [ 411.044752][ T796] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 411.263494][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.275084][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.311012][ T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.433270][ T796] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.442489][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.482026][ T796] usb 2-1: config 0 descriptor?? [ 412.099186][ T796] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 412.217185][T12218] fuse: Bad value for 'fd' [ 413.213219][ T796] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 413.374658][ T5883] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 413.386491][ T796] usb 5-1: config 0 has no interfaces? [ 413.406967][ T796] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 413.424270][ T796] usb 5-1: New USB device strings: Mfr=14, Product=0, SerialNumber=3 [ 413.453389][ T796] usb 5-1: Manufacturer: syz [ 413.469520][T12243] loop2: detected capacity change from 0 to 7 [ 413.477453][T12243] Dev loop2: unable to read RDB block 7 [ 413.481300][ T796] usb 5-1: SerialNumber: syz [ 413.505644][T12243] loop2: unable to read partition table [ 413.513792][ T796] usb 5-1: config 0 descriptor?? [ 413.515246][T12243] loop2: partition table beyond EOD, truncated [ 413.573506][ T5907] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 413.581609][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 413.589508][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.600216][ T5883] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 413.618535][T12243] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 413.638134][ T5883] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 413.650228][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.659636][ T5883] usb 1-1: Product: syz [ 413.666742][ T5883] usb 1-1: Manufacturer: syz [ 413.677643][ T5883] usb 1-1: SerialNumber: syz [ 413.691195][ T5883] usb 1-1: config 0 descriptor?? [ 413.733246][ T5907] usb 2-1: device descriptor read/64, error -32 [ 413.770349][ T796] usb 5-1: USB disconnect, device number 96 [ 413.938792][T12248] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 413.993557][ T5907] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 414.153434][ T5907] usb 2-1: device descriptor read/64, error -32 [ 414.232172][T12255] syzkaller0: entered promiscuous mode [ 414.237975][T12255] syzkaller0: entered allmulticast mode [ 414.393282][ T5907] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 414.427095][ T5907] usb 2-1: device descriptor read/8, error -32 [ 414.526295][T12262] program syz.1.1718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.653404][ T5883] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 414.803369][ T797] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 414.812629][ T5883] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 414.822299][ T5883] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 414.832644][ T5883] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 414.843859][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 414.855051][ T5883] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 414.870054][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.879514][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 414.888062][ T5883] usb 5-1: SerialNumber: syz [ 414.900559][ T5883] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 414.908533][ T5883] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 414.915115][ T5883] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 414.975685][ T797] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 414.987103][ T797] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 414.997240][ T797] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.006396][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.018559][T12264] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 415.030105][ T797] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 415.111575][ T796] usb 5-1: USB disconnect, device number 97 [ 415.340944][ T9] usb 2-1: USB disconnect, device number 94 [ 415.348329][ T797] usb 4-1: USB disconnect, device number 107 [ 415.773495][ T9] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 415.945653][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 415.953825][ T797] usb 1-1: USB disconnect, device number 106 [ 415.960903][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.973010][ T9] usb 2-1: Product: syz [ 415.977991][ T9] usb 2-1: Manufacturer: syz [ 415.983423][ T9] usb 2-1: SerialNumber: syz [ 416.001331][ T9] usb 2-1: config 0 descriptor?? [ 416.016823][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 416.075900][T12275] loop2: detected capacity change from 0 to 7 [ 416.084064][T12275] Dev loop2: unable to read RDB block 7 [ 416.089904][T12275] loop2: unable to read partition table [ 416.096281][T12275] loop2: partition table beyond EOD, truncated [ 416.102670][T12275] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 416.217430][ T9] gspca_stk1135: reg_w 0x2 err -71 [ 416.230201][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.239315][ T9] gspca_stk1135: Sensor write failed [ 416.249915][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.268426][ T9] gspca_stk1135: Sensor write failed [ 416.275495][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.282891][ T9] gspca_stk1135: Sensor read failed [ 416.288234][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.301956][ T9] gspca_stk1135: Sensor read failed [ 416.320572][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 416.333006][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.340382][ T9] gspca_stk1135: Sensor read failed [ 416.345739][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.352088][ T9] gspca_stk1135: Sensor read failed [ 416.357561][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.364115][ T9] gspca_stk1135: Sensor write failed [ 416.369566][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 416.377925][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 416.389504][ T9] gspca_stk1135: Sensor write failed [ 416.411642][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 416.435299][ T9] usb 2-1: USB disconnect, device number 95 [ 416.968254][T12269] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 417.688417][T12299] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 417.703874][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1729'. [ 418.023170][ T797] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 418.253259][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 418.260511][ T797] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 418.273549][ T797] usb 5-1: config 0 has no interface number 0 [ 418.284679][ T797] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 418.299504][ T797] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 418.309037][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.317110][ T797] usb 5-1: Product: syz [ 418.321441][ T797] usb 5-1: Manufacturer: syz [ 418.327694][ T797] usb 5-1: SerialNumber: syz [ 418.340807][ T797] usb 5-1: config 0 descriptor?? [ 418.346631][T12305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 418.523412][ T9] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 418.572679][ T797] asix 5-1:0.188: probe with driver asix failed with error -71 [ 418.597491][ T797] usb 5-1: USB disconnect, device number 98 [ 418.642518][T12312] loop2: detected capacity change from 0 to 7 [ 418.667178][ T5824] Dev loop2: unable to read RDB block 7 [ 418.672787][ T5824] loop2: unable to read partition table [ 418.673472][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 418.680351][ T5824] loop2: partition table beyond EOD, truncated [ 418.701106][T12312] Dev loop2: unable to read RDB block 7 [ 418.708907][T12312] loop2: unable to read partition table [ 418.748384][T12312] loop2: partition table beyond EOD, truncated [ 418.765260][T12312] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 418.854880][ T9] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 419.043356][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 419.085034][ T9] usb usb3-port1: attempt power cycle [ 419.147509][T12332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1739'. [ 419.518204][ T9] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 419.544037][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 419.684008][ T9] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 419.714934][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 419.725912][ T9] usb usb3-port1: unable to enumerate USB device [ 419.929384][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 419.929400][ T30] audit: type=1326 audit(1773957068.774:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31b9c799 code=0x7ffc0000 [ 420.059013][ T30] audit: type=1326 audit(1773957068.774:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31b9c799 code=0x7ffc0000 [ 420.137133][ T30] audit: type=1326 audit(1773957068.854:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f6a31b9c799 code=0x7ffc0000 [ 420.183985][ T30] audit: type=1326 audit(1773957068.914:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31b9c799 code=0x7ffc0000 [ 420.255870][ T30] audit: type=1326 audit(1773957068.914:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a31b9c799 code=0x7ffc0000 [ 420.705470][ T5883] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 420.729064][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 420.864595][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 420.876742][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 420.887849][ T5883] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 420.896928][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.906989][ T5883] usb 2-1: config 0 descriptor?? [ 420.912614][T12351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 420.913225][ T9] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 421.073416][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 421.203278][ T9] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 421.327119][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.334975][T12364] loop2: detected capacity change from 0 to 7 [ 421.341572][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.349131][T12364] Dev loop2: unable to read RDB block 7 [ 421.354781][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.359202][T12364] loop2: unable to read partition table [ 421.361814][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.367953][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 421.375030][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.380800][T12364] loop2: partition table beyond EOD, [ 421.387600][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.388038][ T9] usb usb1-port1: attempt power cycle [ 421.392992][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.393022][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.393045][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.400237][T12364] truncated [ 421.406240][ T5883] cypress 0003:04B4:BCA1.0021: unknown main item tag 0x0 [ 421.437590][T12364] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 421.475985][ T5883] cypress 0003:04B4:BCA1.0021: hidraw0: USB HID v7f.fd Device [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 421.539945][ T796] usb 2-1: USB disconnect, device number 96 [ 421.642897][T12372] xt_hashlimit: size too large, truncated to 1048576 [ 421.720463][T12376] input: syz1 as /devices/virtual/input/input38 [ 421.743175][ T9] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 421.785174][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 421.845920][T12379] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1752'. [ 421.864444][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 421.897332][T12379] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1752'. [ 421.906988][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'. [ 421.920458][T12372] netlink: 'syz.3.1750': attribute type 11 has an invalid length. [ 421.928359][T12372] netlink: 198792 bytes leftover after parsing attributes in process `syz.3.1750'. [ 421.933271][ T9] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 421.963826][ T9] usb 1-1: Invalid ep0 maxpacket: 32 [ 421.969535][ T9] usb usb1-port1: unable to enumerate USB device [ 422.069045][T12385] program syz.3.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.080406][T12384] program syz.3.1753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.221899][ T9] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 422.385092][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 422.403286][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 422.421391][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 422.433206][ T796] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 422.448585][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.465112][ T9] usb 3-1: config 0 descriptor?? [ 422.485771][T12381] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.595037][ T796] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 422.612142][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.631634][ T796] usb 4-1: config 0 descriptor?? [ 422.642715][ T796] cp210x 4-1:0.0: cp210x converter detected [ 422.943452][ T9] apple 0003:05AC:0267.0022: hidraw0: USB HID v7f.fd Device [HID 05ac:0267] on usb-dummy_hcd.2-1/input0 [ 423.064068][ T796] usb 4-1: cp210x converter now attached to ttyUSB0 [ 423.196640][ T796] usb 3-1: USB disconnect, device number 99 [ 423.251441][ T5883] usb 4-1: USB disconnect, device number 108 [ 423.262128][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 423.273872][ T5883] cp210x 4-1:0.0: device disconnected [ 423.549137][T12406] binder: 12404:12406 ioctl c0306201 200000000680 returned -14 [ 423.735780][T12407] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1758'. [ 424.483315][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.990331][T12453] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 425.141928][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 425.170241][T12455] netlink: 'syz.3.1770': attribute type 2 has an invalid length. [ 425.187247][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 425.201512][T12455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1770'. [ 425.491867][T12461] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1772' sets config #2 [ 425.536676][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1773'. [ 425.703874][ T8255] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.712609][ T8255] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.721826][ T8255] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.730709][ T8255] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.937456][T12468] veth1_virt_wifi: entered allmulticast mode [ 425.977557][T12471] binder: 12470:12471 ioctl 227c 200000000240 returned -22 [ 426.263649][T12479] syzkaller0: entered promiscuous mode [ 426.272180][T12479] syzkaller0: entered allmulticast mode [ 426.718006][ T5883] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 427.011030][T12499] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 427.191270][ T5883] usb 5-1: config 0 has no interfaces? [ 427.208937][ T5883] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 427.254412][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.400956][ T5883] usb 5-1: Product: syz [ 427.419277][ T5883] usb 5-1: Manufacturer: syz [ 427.431793][ T5883] usb 5-1: SerialNumber: syz [ 427.582873][ T5883] usb 5-1: config 0 descriptor?? [ 427.847932][T12488] __nla_validate_parse: 3 callbacks suppressed [ 427.847976][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 427.902874][T12508] net_ratelimit: 4 callbacks suppressed [ 427.902890][T12508] openvswitch: netlink: IP tunnel dst address not specified [ 428.406317][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 428.574891][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.609543][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.669900][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.707758][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.737825][ T9] usb 2-1: SerialNumber: syz [ 429.000749][ T9] usb 2-1: 0:2 : does not exist [ 429.389306][ T9] usb 2-1: USB disconnect, device number 97 [ 429.462320][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.747712][T12538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 429.767387][ T5883] usb 5-1: USB disconnect, device number 99 [ 430.166397][T12538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 430.213546][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 430.336715][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 430.354367][ T9] usb 4-1: device descriptor read/64, error -71 [ 430.471427][T12555] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 430.703193][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 430.792229][T12568] netlink: 'syz.2.1803': attribute type 1 has an invalid length. [ 430.854124][ T9] usb 4-1: device descriptor read/64, error -71 [ 430.973477][ T9] usb usb4-port1: attempt power cycle [ 431.063371][T12577] trusted_key: encrypted_key: insufficient parameters specified [ 431.173244][ T5883] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 431.303183][ T5883] usb 3-1: device descriptor read/64, error -71 [ 431.543215][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 431.574134][ T9] usb 4-1: device descriptor read/8, error -71 [ 431.733359][ T5883] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 431.813392][ T9] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 431.833645][ T9] usb 4-1: device descriptor read/8, error -71 [ 431.863215][ T5883] usb 3-1: device descriptor read/64, error -71 [ 431.943524][ T9] usb usb4-port1: unable to enumerate USB device [ 431.973393][ T5883] usb usb3-port1: attempt power cycle [ 432.013236][ T5907] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 432.164634][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 432.172795][ T5907] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 432.182082][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.190249][ T5907] usb 5-1: Product: syz [ 432.194450][ T5907] usb 5-1: Manufacturer: syz [ 432.199048][ T5907] usb 5-1: SerialNumber: syz [ 432.205530][ T5907] usb 5-1: config 0 descriptor?? [ 432.323196][ T5883] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 432.343695][ T5883] usb 3-1: device descriptor read/8, error -71 [ 432.417008][ T5907] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 432.593538][ T5883] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 432.624909][ T5883] usb 3-1: device descriptor read/8, error -71 [ 432.736299][ T5883] usb usb3-port1: unable to enumerate USB device [ 433.073607][ T5907] usb 5-1: reset high-speed USB device number 100 using dummy_hcd [ 433.091093][T12601] x_tables: duplicate underflow at hook 3 [ 433.423184][ T5883] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 433.593205][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 433.603294][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 433.618765][ T5883] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 433.628624][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.636864][ T5883] usb 4-1: Product: syz [ 433.641061][ T5883] usb 4-1: Manufacturer: syz [ 433.645726][ T5883] usb 4-1: SerialNumber: syz [ 433.701378][ T5907] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 433.716208][ T5907] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 433.728224][ T5907] usb 5-1: USB disconnect, device number 100 [ 433.860104][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.887567][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.917003][ T5883] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 433.928036][T12610] sctp: [Deprecated]: syz.1.1816 (pid 12610) Use of int in max_burst socket option. [ 433.928036][T12610] Use struct sctp_assoc_value instead [ 433.979074][ T5883] usb 4-1: USB disconnect, device number 113 [ 434.016182][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.183490][ T5907] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 434.212115][T12617] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 434.333332][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 434.345864][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.358981][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 434.377025][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 434.403330][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 434.423210][ T5907] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 434.432347][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.443703][ T5907] usb 3-1: config 0 descriptor?? [ 434.449523][T12612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 434.479089][ T5907] hub 3-1:0.0: USB hub found [ 434.543457][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 434.551089][ T9] usb 2-1: config 2 has an invalid interface number: 13 but max is 0 [ 434.566066][ T9] usb 2-1: config 2 has no interface number 0 [ 434.605830][ T9] usb 2-1: config 2 interface 13 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.632007][T12626] xt_connbytes: Forcing CT accounting to be enabled [ 434.644975][ T9] usb 2-1: config 2 interface 13 has no altsetting 0 [ 434.666760][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice=52.92 [ 434.686998][ T5907] hub 3-1:0.0: 2 ports detected [ 434.700996][T12628] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 434.708140][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.727109][ T9] usb 2-1: Product: syz [ 434.736052][ T9] usb 2-1: Manufacturer: syz [ 434.747595][ T9] usb 2-1: SerialNumber: syz [ 434.965976][ T30] audit: type=1326 audit(1773957083.814:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12609 comm="syz.1.1816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a31b9c799 code=0x0 [ 434.991871][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 435.043445][ T9] usb 2-1: USB disconnect, device number 98 [ 435.119271][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.13/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.329325][T12641] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 435.413033][T12641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.446599][T12641] bond4: (slave gretap3): making interface the new active one [ 435.456427][T12641] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 435.733345][ T5883] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 435.895680][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 435.904848][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.915952][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.925959][ T5883] usb 4-1: config 1 interface 0 has no altsetting 0 [ 435.935318][ T5883] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 435.944744][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.952910][ T5883] usb 4-1: Product: syz [ 435.959206][ T5883] usb 4-1: Manufacturer: syz [ 435.983257][ T5883] usb 4-1: SerialNumber: syz [ 436.022025][ T5883] smsusb:smsusb_probe: board id=8, interface number 0 [ 436.031006][ T5883] smsusb:smsusb_probe: Device initialized with return code -19 [ 436.256639][ T9] usb 4-1: USB disconnect, device number 114 [ 436.318050][ T5907] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 436.319002][ T5883] usb 3-1: USB disconnect, device number 104 [ 436.853531][ T9] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 437.015964][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 437.027929][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 437.051026][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 437.071816][T12664] syzkaller0: entered promiscuous mode [ 437.080854][T12664] syzkaller0: entered allmulticast mode [ 437.088901][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 437.099070][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.113296][ T9] usb 5-1: SerialNumber: ᰊ [ 437.287411][T12674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1832'. [ 437.569891][T12659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.579720][T12659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.589729][T12659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.599402][T12659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.618623][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 437.626297][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 437.634925][ T9] usb 5-1: unit 83 not found! [ 437.725277][ T9] usb 5-1: USB disconnect, device number 101 [ 437.798825][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 438.206004][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 439.845735][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.852044][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.923189][ T5907] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 440.056908][T12681] syzkaller1: entered promiscuous mode [ 440.062379][T12681] syzkaller1: entered allmulticast mode [ 440.092849][T12703] bond_slave_1: left promiscuous mode [ 440.098511][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 440.104289][T12703] bond_slave_1: left allmulticast mode [ 440.112977][T12703] bond1: left promiscuous mode [ 440.119766][ T5907] usb 2-1: config 0 has no interfaces? [ 440.125822][T12703] ipvlan2: left allmulticast mode [ 440.131027][T12703] bond1: left allmulticast mode [ 440.142216][ T5907] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.153549][T12703] ip6erspan0: left allmulticast mode [ 440.161527][ T5907] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.191861][ T5907] usb 2-1: Manufacturer: syz [ 440.212134][ T5907] usb 2-1: config 0 descriptor?? [ 440.254180][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.286546][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.296349][ T160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.318128][ T160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.399322][ T160] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.432748][ T160] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.530138][ T5907] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 440.643590][ T5883] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 440.661332][T12731] dlm: non-version read from control device 36 [ 440.725678][ T5907] usb 1-1: unable to get BOS descriptor or descriptor too short [ 440.734616][ T5907] usb 1-1: not running at top speed; connect to a high speed hub [ 440.754238][ T5907] usb 1-1: config 4 has an invalid interface number: 106 but max is 0 [ 440.763164][ T5907] usb 1-1: config 4 has no interface number 0 [ 440.770054][ T5907] usb 1-1: config 4 interface 106 has no altsetting 0 [ 440.785547][ T5907] usb 1-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91 [ 440.797769][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.805943][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.805995][ T5907] usb 1-1: Product: syz [ 440.829338][ T5907] usb 1-1: Manufacturer: syz [ 440.831142][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.849578][ T5883] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 440.859787][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.861865][ T5907] usb 1-1: SerialNumber: syz [ 440.887770][ T30] audit: type=1326 audit(1773957089.724:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 440.894023][ T5883] usb 4-1: config 0 descriptor?? [ 440.928954][ T797] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 440.937633][ T30] audit: type=1326 audit(1773957089.724:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd80815cfce code=0x7ffc0000 [ 440.967232][ T30] audit: type=1326 audit(1773957089.724:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd80815cfce code=0x7ffc0000 [ 440.990416][ T30] audit: type=1326 audit(1773957089.724:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.013393][ T30] audit: type=1326 audit(1773957089.724:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.036142][ T30] audit: type=1326 audit(1773957089.724:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.059055][ T30] audit: type=1326 audit(1773957089.724:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.081845][ T30] audit: type=1326 audit(1773957089.724:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.104750][ T30] audit: type=1326 audit(1773957089.724:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.127594][ T30] audit: type=1326 audit(1773957089.724:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12733 comm="syz.2.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80819c799 code=0x7ffc0000 [ 441.143158][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 441.157109][ T797] usb 5-1: config 2 has an invalid interface number: 142 but max is 0 [ 441.165357][ T797] usb 5-1: config 2 has no interface number 0 [ 441.171491][ T797] usb 5-1: config 2 interface 142 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 441.186642][ T797] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 441.188875][ T5907] uvcvideo 1-1:4.106: Found UVC 0.00 device syz (0408:4033) [ 441.200081][ T797] usb 5-1: config 2 interface 142 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.216393][ T797] usb 5-1: config 2 interface 142 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 441.227726][ T5907] uvcvideo 1-1:4.106: Forcing UVC version to 1.0a [ 441.229793][ T797] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 441.243612][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.243954][ T5907] uvcvideo 1-1:4.106: No valid video chain found. [ 441.251617][ T797] usb 5-1: Product: syz [ 441.251632][ T797] usb 5-1: Manufacturer: syz [ 441.251646][ T797] usb 5-1: SerialNumber: syz [ 441.282615][ T5907] usb 1-1: USB disconnect, device number 111 [ 441.284443][ T797] usb 5-1: NFC: intf ffff888035a1d000 id ffffffff8f1d0ca0 [ 441.409150][ T5883] hid_parser_main: 411 callbacks suppressed [ 441.409171][ T5883] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 441.422361][ T5883] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 441.429492][ T5883] hid-led 0003:1D34:000A.0023: unknown main item tag 0x0 [ 441.441214][ T5883] hid-led 0003:1D34:000A.0023: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 441.474986][ T5883] hid-led 0003:1D34:000A.0023: Dream Cheeky Webmail Notifier initialized [ 441.486455][ T5907] usb 5-1: USB disconnect, device number 102 [ 441.645803][ T5883] usb 4-1: USB disconnect, device number 115 [ 442.223198][ T5883] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 442.303440][ T797] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 442.384043][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 442.393775][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 442.415705][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 442.427531][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 442.485720][ T797] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 442.497237][ T797] usb 5-1: config 0 has no interface number 0 [ 442.505104][ T5907] usb 2-1: USB disconnect, device number 99 [ 442.509120][ T797] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 442.520755][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.530306][ T797] usb 5-1: Product: syz [ 442.536918][ T5883] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 442.548086][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.573488][ T5883] usb 1-1: Product: syz [ 442.582870][ T797] usb 5-1: Manufacturer: syz [ 442.587684][ T5883] usb 1-1: Manufacturer: syz [ 442.598161][ T797] usb 5-1: SerialNumber: syz [ 442.603263][ T5883] usb 1-1: SerialNumber: syz [ 442.612261][ T797] usb 5-1: config 0 descriptor?? [ 442.620770][ T5883] usb 1-1: config 0 descriptor?? [ 442.664743][ T5883] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input39 [ 442.731652][ C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 442.858226][T12763] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 442.864772][T12763] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.903461][T12763] vhci_hcd vhci_hcd.0: Device attached [ 442.982934][T12764] vhci_hcd: connection closed [ 442.986974][ T8257] vhci_hcd vhci_hcd.1: stop threads [ 443.003772][ T8257] vhci_hcd vhci_hcd.1: release socket [ 443.035762][ T8257] vhci_hcd vhci_hcd.1: disconnect device [ 443.084941][ T5883] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 443.271586][ T5945] usb 1-1: USB disconnect, device number 112 [ 443.277671][ C1] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 443.670311][ T797] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 443.732873][T12787] QAT: Invalid ioctl 1075883590 [ 443.737933][T12787] QAT: Invalid ioctl 1075883590 [ 443.753216][ T797] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 443.764450][T12787] QAT: Invalid ioctl 1075883590 [ 443.769774][ T797] asix 5-1:0.251: probe with driver asix failed with error -71 [ 443.777879][T12787] QAT: Invalid ioctl 1075883590 [ 443.787085][ T797] usb 5-1: USB disconnect, device number 103 [ 443.934684][T12787] QAT: Invalid ioctl 1075883590 [ 443.941364][T12791] syzkaller0: entered promiscuous mode [ 443.960462][T12787] QAT: Invalid ioctl 1075883590 [ 443.966064][T12787] QAT: Invalid ioctl 1075883590 [ 443.971472][T12787] QAT: Invalid ioctl 1075883590 [ 443.976652][T12787] QAT: Invalid ioctl 1075883590 [ 443.981704][T12787] QAT: Invalid ioctl 1075883590 [ 444.013703][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 444.030802][T12791] syzkaller0: entered allmulticast mode [ 444.303196][ T797] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 444.329450][ T5883] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 444.481538][ T797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 444.494621][ T797] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 444.508679][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.565856][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 444.625840][ T5883] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 444.637110][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.690042][ T797] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 444.749609][ T5883] usb 1-1: Product: syz [ 444.755116][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.763744][ T5883] usb 1-1: Manufacturer: syz [ 444.768424][ T5883] usb 1-1: SerialNumber: syz [ 444.778659][ T797] usb 2-1: Product: syz [ 444.782930][ T797] usb 2-1: Manufacturer: syz [ 444.794632][ T797] usb 2-1: SerialNumber: syz [ 444.804929][ T5883] usb 1-1: config 0 descriptor?? [ 444.819824][ T5883] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 444.854892][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 444.880772][ T5883] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 444.902894][T12822] kernel profiling enabled (shift: 25) [ 444.909864][ T5883] usb 1-1: media controller created [ 445.005568][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.517315][ T5883] DVB: Unable to find symbol tda10046_attach() [ 445.548638][ T5883] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 445.581963][ T5883] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 446.414568][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.423495][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.427394][T12858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.471022][ T5883] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 446.542907][ T5883] usb 1-1: USB disconnect, device number 113 [ 447.039726][ T797] usb 2-1: selecting invalid altsetting 1 [ 447.067151][ T797] usb 2-1: selecting invalid altsetting 1 [ 447.091695][ T797] usb 2-1: selecting invalid altsetting 1 [ 447.147216][T12869] fuse: Unknown parameter 'Hf0x0000000000000003' [ 447.235215][ T797] usb 2-1: USB disconnect, device number 100 [ 447.260538][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.863301][ T5907] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 448.027599][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 448.053699][ T5907] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 448.701516][ T5907] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.725236][ T5907] usb 4-1: config 1 interface 0 has no altsetting 0 [ 448.735770][ T5907] usb 4-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 448.747167][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.755652][ T5907] usb 4-1: Product: syz [ 448.759907][ T5907] usb 4-1: Manufacturer: syz [ 448.764940][ T5907] usb 4-1: SerialNumber: syz [ 449.033233][ T797] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 449.092958][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 449.186801][ T797] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.198646][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.210613][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 449.227420][ T797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.246759][ T797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.261948][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.273509][ T797] usb 1-1: config 0 descriptor?? [ 449.698426][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.707440][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.733516][ T5883] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 449.860826][ T797] plantronics 0003:047F:FFFF.0024: ignoring exceeding usage max [ 449.874095][ T5883] usb 2-1: device descriptor read/64, error -71 [ 449.882540][ T797] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 449.899874][T12881] batadv_slave_0: entered promiscuous mode [ 449.906906][T12893] hsr_slave_0: left promiscuous mode [ 449.923414][T12893] hsr_slave_1: left promiscuous mode [ 450.131077][ T797] usb 1-1: USB disconnect, device number 114 [ 450.137345][ T5883] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 450.223307][ T796] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 450.273639][ T5883] usb 2-1: device descriptor read/64, error -71 [ 450.383501][ T5883] usb usb2-port1: attempt power cycle [ 450.405247][ T796] usb 3-1: not running at top speed; connect to a high speed hub [ 450.416021][ T796] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 2047, setting to 64 [ 450.437325][ T796] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.470673][ T796] usb 3-1: config 1 interface 0 has no altsetting 0 [ 450.480085][ T796] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.40 [ 450.494396][T12881] batadv_slave_0: left promiscuous mode [ 450.523668][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.531775][ T796] usb 3-1: Manufacturer:  [ 450.536800][ T796] usb 3-1: SerialNumber: 댫ꐥ놴뢤㗦쭜ﹺ㔵岿旤鈴멱葉⛛恶觎䮂ꕛ掮ꬿ潌켽儈务簤硣痖乫뾉ᇡ㗆⇰뾨夓쩉㱸蓟 [ 450.561776][ T5907] usb 4-1: USB disconnect, device number 116 [ 450.589217][T12902] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 450.603562][T12902] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 450.736008][ T5883] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 450.775168][ T5883] usb 2-1: device descriptor read/8, error -71 [ 450.893379][ T797] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 451.003276][ T5949] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 451.013509][ T5883] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 451.023277][ T5907] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 451.034279][ T796] usbhid 3-1:1.0: can't add hid device: -71 [ 451.034642][ T5883] usb 2-1: device descriptor read/8, error -71 [ 451.040384][ T796] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 451.048460][ T797] usb 5-1: config 0 has no interfaces? [ 451.061827][ T796] usb 3-1: USB disconnect, device number 105 [ 451.062563][ T797] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 451.077672][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.085790][ T797] usb 5-1: Product: syz [ 451.090157][ T797] usb 5-1: Manufacturer: syz [ 451.095287][ T797] usb 5-1: SerialNumber: syz [ 451.101784][ T797] usb 5-1: config 0 descriptor?? [ 451.133214][ T5949] usb 1-1: device descriptor read/64, error -71 [ 451.153669][ T5883] usb usb2-port1: unable to enumerate USB device [ 451.233208][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 451.241174][ T5907] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 451.250759][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.258891][ T5907] usb 4-1: Product: syz [ 451.263073][ T5907] usb 4-1: Manufacturer: syz [ 451.267714][ T5907] usb 4-1: SerialNumber: syz [ 451.274454][ T5907] usb 4-1: config 0 descriptor?? [ 451.373205][ T5949] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 451.424694][T12918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.482896][T12914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.492799][T12914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.503186][ T5949] usb 1-1: device descriptor read/64, error -71 [ 451.590255][ T5907] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 451.599583][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.608300][ T5907] airspy 4-1:0.0: Could not detect board [ 451.614947][ T5907] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 451.616975][ T5949] usb usb1-port1: attempt power cycle [ 451.623672][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.973222][ T5949] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 452.004753][ T5949] usb 1-1: device descriptor read/8, error -71 [ 452.113248][ T5907] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 452.243249][ T5949] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 452.263729][ T5949] usb 1-1: device descriptor read/8, error -71 [ 452.273182][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 452.279615][ T5907] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 452.288114][ T5907] usb 3-1: config 179 has no interface number 0 [ 452.294567][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 452.305870][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 452.317295][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 452.328789][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 452.340372][ T5907] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 452.354099][ T5907] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 452.363271][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.374203][ T5949] usb usb1-port1: unable to enumerate USB device [ 452.388063][T12930] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 453.681990][ T5907] usb 5-1: USB disconnect, device number 104 [ 453.735188][ T5949] usb 4-1: USB disconnect, device number 117 [ 454.630625][T12948] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 454.668485][T12948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 454.683218][ T5907] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 454.740542][ T5883] usb 3-1: USB disconnect, device number 106 [ 454.740613][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 454.755044][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 454.783245][ T796] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 454.863169][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 454.884646][ T5907] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 454.911398][ T5907] usb 5-1: config 0 has no interface number 0 [ 454.917692][ T796] usb 1-1: device descriptor read/64, error -71 [ 454.958786][ T5907] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 454.996502][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.020960][ T5907] usb 5-1: Product: syz [ 455.029269][ T5907] usb 5-1: Manufacturer: syz [ 455.041159][ T5907] usb 5-1: SerialNumber: syz [ 455.067746][ T5907] usb 5-1: config 0 descriptor?? [ 455.089921][ T5907] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 455.205741][ T796] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 455.243496][T12959] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 455.404012][ T5883] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 455.413301][ T796] usb 1-1: device descriptor read/64, error -71 [ 455.426901][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 455.500441][ T5907] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.523909][ T796] usb usb1-port1: attempt power cycle [ 455.543190][ T5883] usb 2-1: device descriptor read/64, error -71 [ 455.580782][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.607904][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.653489][ T5949] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 455.793214][ T5883] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 455.803716][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 455.815081][ T5949] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 455.840619][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.857142][ T5949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.866960][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 455.885890][ T796] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 455.886716][ T5949] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 455.902729][ T5949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.913941][ T796] usb 1-1: device descriptor read/8, error -71 [ 455.916204][ T5949] usb 4-1: config 0 descriptor?? [ 455.953215][ T5883] usb 2-1: device descriptor read/64, error -71 [ 456.064105][ T5883] usb usb2-port1: attempt power cycle [ 456.173241][ T796] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 456.188883][T12961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1901'. [ 456.198875][ T796] usb 1-1: device descriptor read/8, error -71 [ 456.244207][T12966] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 456.310126][ T5949] usbhid 4-1:0.0: can't add hid device: -71 [ 456.316416][ T5949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 456.329003][ T5949] usb 4-1: USB disconnect, device number 118 [ 456.334145][ T796] usb usb1-port1: unable to enumerate USB device [ 456.403333][ T5883] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 456.423746][ T5883] usb 2-1: device descriptor read/8, error -71 [ 456.643277][ T5949] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 456.683201][ T5883] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 456.714402][ T5883] usb 2-1: device descriptor read/8, error -71 [ 456.796703][ T5949] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 456.805914][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.814121][ T5949] usb 4-1: Product: syz [ 456.818359][ T5949] usb 4-1: Manufacturer: syz [ 456.823013][ T5949] usb 4-1: SerialNumber: syz [ 456.832127][ T5949] r8152-cfgselector 4-1: Unknown version 0x0000 [ 456.841631][ T5883] usb usb2-port1: unable to enumerate USB device [ 456.848049][ T5949] r8152-cfgselector 4-1: config 0 descriptor?? [ 456.914460][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 456.914966][ T5883] usb 5-1: USB disconnect, device number 105 [ 456.943001][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 456.985013][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 457.007631][ T5883] quatech2 5-1:0.51: device disconnected [ 457.237368][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 457.237387][ T30] audit: type=1326 audit(1773957106.084:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.266630][ T30] audit: type=1326 audit(1773957106.084:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.293430][ T30] audit: type=1326 audit(1773957106.114:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.329616][ T30] audit: type=1326 audit(1773957106.114:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.355968][ T30] audit: type=1326 audit(1773957106.114:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.383448][ T30] audit: type=1326 audit(1773957106.144:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.406649][ T30] audit: type=1326 audit(1773957106.144:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.430161][ T30] audit: type=1326 audit(1773957106.144:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.458122][ T30] audit: type=1326 audit(1773957106.144:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.480813][ T30] audit: type=1326 audit(1773957106.144:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12982 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8b179c799 code=0x7ffc0000 [ 457.692758][ T796] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 458.123302][ T796] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 458.138225][T13009] tipc: Failed to obtain node identity [ 458.278206][T13009] tipc: Enabling of bearer rejected, failed to enable media [ 458.386626][T13011] xt_hashlimit: size too large, truncated to 1048576 [ 458.395099][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.406285][ T796] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 458.415420][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.431116][ T796] usb 4-1: config 0 descriptor?? [ 458.472939][ T796] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 458.632696][ T9] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 458.677270][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.696541][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.706074][ T796] usb 4-1: USB disconnect, device number 120 [ 458.935750][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 458.943933][ T9] usb 5-1: config 0 has no interface number 0 [ 458.950015][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 458.967828][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 458.987060][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 459.009410][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 459.018761][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 459.032446][ T9] usb 5-1: Product: syz [ 459.040918][ T9] usb 5-1: SerialNumber: syz [ 459.075545][ T9] usb 5-1: config 0 descriptor?? [ 459.092108][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 459.100418][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input40 [ 459.203185][ T5883] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 459.353192][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 459.355188][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.355235][ T5883] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 459.355255][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.357953][ T5883] usb 4-1: config 0 descriptor?? [ 459.363213][ T5883] hso 4-1:0.0: Not our interface [ 459.364748][ T5883] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 459.429145][T13022] binder: BINDER_SET_CONTEXT_MGR already set [ 459.429179][T13022] binder: 13012:13022 ioctl 4018620d 200000000040 returned -16 [ 460.078089][ T5949] usb 4-1: USB disconnect, device number 121 [ 460.183276][ T5883] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 460.221833][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1922'. [ 460.232341][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1922'. [ 460.333249][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 460.339350][ T5883] usb 3-1: too many configurations: 152, using maximum allowed: 8 [ 460.350217][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 460.358326][ T5883] usb 3-1: can't read configurations, error -61 [ 460.493194][ T5883] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 460.643446][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 460.652074][ T5883] usb 3-1: too many configurations: 152, using maximum allowed: 8 [ 460.687244][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 460.697082][ T5883] usb 3-1: can't read configurations, error -61 [ 460.709615][ T5883] usb usb3-port1: attempt power cycle [ 460.823183][ T5949] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 460.983239][ T5949] usb 4-1: Using ep0 maxpacket: 16 [ 460.991111][ T5949] usb 4-1: unable to get BOS descriptor or descriptor too short [ 461.002661][ T5949] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 461.040014][ T5949] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 461.052076][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.060546][ T5883] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 461.070429][ T5949] usb 4-1: Product: syz [ 461.076712][ T5949] usb 4-1: Manufacturer: syz [ 461.099080][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 461.110386][ T5949] usb 4-1: SerialNumber: syz [ 461.118302][ T5883] usb 3-1: too many configurations: 152, using maximum allowed: 8 [ 461.145918][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 461.160497][ T5883] usb 3-1: can't read configurations, error -61 [ 461.315382][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 461.315553][ T797] usb 5-1: USB disconnect, device number 106 [ 461.322368][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 461.373614][ T5883] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 461.404780][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 461.412399][ T5883] usb 3-1: too many configurations: 152, using maximum allowed: 8 [ 461.431675][ T797] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 461.446567][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 461.461892][ T5883] usb 3-1: can't read configurations, error -61 [ 461.488764][ T5883] usb usb3-port1: unable to enumerate USB device [ 461.773217][ T797] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 461.825039][ T5827] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 461.945176][ T797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 461.975150][ T797] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 462.002264][ T797] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 462.024923][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.046304][ T797] usb 5-1: Product: syz [ 462.063979][ T797] usb 5-1: Manufacturer: syz [ 462.076154][ T797] usb 5-1: SerialNumber: syz [ 462.107910][T13068] batadv_slave_0: left promiscuous mode [ 462.115455][T13068] geneve2: left promiscuous mode [ 462.187800][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1928'. [ 462.423294][ T797] usb 5-1: reset high-speed USB device number 107 using dummy_hcd [ 462.496476][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.506499][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.543364][ T9] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 462.696359][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 462.757903][T13077] bond3: Removing last ns target with arp_interval on [ 462.768729][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 462.778764][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1933'. [ 462.787697][T13077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1933'. [ 462.843231][ T9] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 462.993229][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 463.001867][ T9] usb usb2-port1: attempt power cycle [ 463.138289][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1935'. [ 463.143507][ T797] usb 5-1: device descriptor read/64, error -71 [ 463.339084][ T5949] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 463.352829][ T5949] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 463.357690][ T9] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 463.394106][ T797] usb 5-1: reset high-speed USB device number 107 using dummy_hcd [ 463.403794][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 463.450611][ T5949] usb 4-1: USB disconnect, device number 122 [ 463.533204][ T9] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 463.567880][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 463.574303][ T9] usb usb2-port1: unable to enumerate USB device [ 463.582291][ T797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.599210][ T797] usb 5-1: device firmware changed [ 463.611333][ T797] usb 5-1: USB disconnect, device number 107 [ 464.278735][T13115] loop2: detected capacity change from 0 to 7 [ 464.287431][T13115] Dev loop2: unable to read RDB block 7 [ 464.413403][T13115] loop2: unable to read partition table [ 464.440741][T13115] loop2: partition table beyond EOD, truncated [ 464.453323][T13115] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 464.894324][ T5195] Dev loop2: unable to read RDB block 7 [ 464.900747][ T5195] loop2: unable to read partition table [ 464.906931][ T5195] loop2: partition table beyond EOD, truncated [ 464.984911][T13134] syz_tun: left allmulticast mode [ 464.989987][T13134] syz_tun: left promiscuous mode [ 464.995248][T13134] bridge0: port 3(syz_tun) entered disabled state [ 465.022349][T13134] bridge_slave_0: left allmulticast mode [ 465.028476][T13134] bridge_slave_0: left promiscuous mode [ 465.036979][T13134] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.071431][T13134] bridge_slave_1: left allmulticast mode [ 465.077226][T13134] bridge_slave_1: left promiscuous mode [ 465.095186][T13134] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.262102][T13134] bond0: (slave bond_slave_0): Releasing backup interface [ 465.342815][T13134] bond0: (slave bond_slave_1): Releasing backup interface [ 465.448221][T13134] team0: Port device team_slave_0 removed [ 465.461323][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 465.538566][T13134] team0: Port device team_slave_1 removed [ 465.549307][T13134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.558953][T13134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.578216][T13134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.586889][T13134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.602601][T13134] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.677120][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 465.693720][ T796] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 465.857058][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 465.863227][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 465.876704][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 465.903362][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 465.921035][ T5827] Bluetooth: hci0: hardware error 0x00 [ 465.938375][ T796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.946444][ T796] usb 5-1: config 0 has no interface number 0 [ 465.958754][ T796] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 465.971408][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.981512][ T796] usb 5-1: Product: syz [ 465.986125][ T796] usb 5-1: Manufacturer: syz [ 465.991616][ T796] usb 5-1: SerialNumber: syz [ 465.998719][ T796] usb 5-1: config 0 descriptor?? [ 466.020689][ T796] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 466.058533][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 466.076453][ T9] usb 2-1: config 1 interface 0 altsetting 110 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 466.089019][ T9] usb 2-1: config 1 interface 0 altsetting 110 bulk endpoint 0x82 has invalid maxpacket 1024 [ 466.089933][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1956'. [ 466.099303][ T9] usb 2-1: config 1 interface 0 altsetting 110 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.121360][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 466.134761][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.144863][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.154715][ T9] usb 2-1: Product: ⎫툾＠鼷Ģ⨗䙧嫫㩙䷾쩰岖렶䩈嘟㻛㗽䭴鋭껫菵츺鳚彧ᣦ햼瓻㦒羝綕혡夸癹궵獭ࣺݏ糸첆ጀᛨ쓧⺣씔ㅾ夋ࣃ캕ɵ牣ဆ쾓ㅍൎ䚾뼂隖͚祻㟷뮉ご봄儲⊾Ṗȓ喢镩麻쑬뫯锦癙݁䱸龲﹠芩ࢴ狀㔘揀㡤ᑐ㗧蝬ᦠ⾄⡋䒗饳탲鿔芳썔ኑ呵뮔쭈泥矞儛黆었뷍蔜뙮뾫컚㞔 [ 466.213366][ T9] usb 2-1: Manufacturer: ࠐ [ 466.221981][ T9] usb 2-1: SerialNumber: 緢簐⒱瀗რ턫牀贘뉰䪄캅虦๟ᇬ듫籁졶㓐㘳쳈쿃᩵黭⋀Ʌ妨ĉꬒ஝첛夘卛逨ꎟ팕䟟烏鶇䚏࣎쇅牀쇐ᫎ磵碾栊楅獕䷃념箉㒭嫀恃䊄癿訵贚畋র뚥荞ᇏ씗璿ᐼ醣⸵ઢꔼ薳ퟘ㶏쉠ㆆ庉❳ꙧⳫ⧡娵ퟐ궶竐쓐 [ 466.265163][T13146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.273289][T13146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.281112][T13146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 466.421105][ T796] gspca_spca1528: reg_w err -71 [ 466.463605][ T796] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 466.482855][ T796] usb 5-1: USB disconnect, device number 108 [ 466.510000][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 466.510015][ T30] audit: type=1326 audit(1773957115.354:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.540367][ T30] audit: type=1326 audit(1773957115.354:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.566009][ T30] audit: type=1326 audit(1773957115.394:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.590578][ T30] audit: type=1326 audit(1773957115.394:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.615341][ T30] audit: type=1326 audit(1773957115.394:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.638352][ T30] audit: type=1326 audit(1773957115.394:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.661574][ T30] audit: type=1326 audit(1773957115.394:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.684114][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 466.694455][ T30] audit: type=1326 audit(1773957115.394:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.719955][ T30] audit: type=1326 audit(1773957115.394:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.744010][ T9] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 466.756997][ T9] usb 2-1: USB disconnect, device number 113 [ 466.764584][ T30] audit: type=1326 audit(1773957115.394:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13156 comm="syz.0.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301a39c799 code=0x7ffc0000 [ 466.813843][ T5907] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 466.843230][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 466.851594][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 466.860903][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.869299][ T10] usb 4-1: Product: syz [ 466.873854][ T10] usb 4-1: Manufacturer: syz [ 466.878458][ T10] usb 4-1: SerialNumber: syz [ 466.887251][ T10] usb 4-1: config 0 descriptor?? [ 466.935840][T13160] loop2: detected capacity change from 0 to 7 [ 466.945045][ T5824] Dev loop2: unable to read RDB block 7 [ 466.950633][ T5824] loop2: unable to read partition table [ 466.953203][ T5907] usb 1-1: device descriptor read/64, error -71 [ 466.956620][ T5824] loop2: partition table beyond EOD, truncated [ 466.975710][T13160] Dev loop2: unable to read RDB block 7 [ 466.981414][T13160] loop2: unable to read partition table [ 466.987809][T13160] loop2: partition table beyond EOD, truncated [ 466.994336][T13160] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 467.123754][ T9] usb 4-1: USB disconnect, device number 123 [ 467.253160][ T5907] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 467.413250][ T5907] usb 1-1: device descriptor read/64, error -71 [ 467.523732][ T5907] usb usb1-port1: attempt power cycle [ 467.543187][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 467.583733][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 467.713193][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 467.748415][ T9] usb 5-1: config 1 has an invalid interface number: 222 but max is 0 [ 467.759386][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 467.781547][ T9] usb 5-1: config 1 has no interface number 0 [ 467.794884][ T9] usb 5-1: too many endpoints for config 1 interface 222 altsetting 245: 158, using maximum allowed: 30 [ 467.820411][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.833559][ T10] usb 2-1: config 0 has no interface number 0 [ 467.843333][ T9] usb 5-1: config 1 interface 222 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 158 [ 467.859284][ T9] usb 5-1: config 1 interface 222 has no altsetting 0 [ 467.867806][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 467.877108][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.885320][ T5907] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 467.904730][ T10] usb 2-1: Product: syz [ 467.910248][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 467.919833][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.928330][ T10] usb 2-1: Manufacturer: syz [ 467.933645][ T5907] usb 1-1: device descriptor read/8, error -71 [ 467.940111][ T9] usb 5-1: Product: syz [ 467.949995][ T10] usb 2-1: SerialNumber: syz [ 467.955016][ T9] usb 5-1: Manufacturer: syz [ 467.959696][ T9] usb 5-1: SerialNumber: syz [ 467.974177][ T10] usb 2-1: config 0 descriptor?? [ 468.035203][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 468.186396][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 468.214095][ T5907] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 468.242606][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.273510][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 468.285141][ T10] usb 2-1: media controller created [ 468.321255][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 468.333312][ T5907] usb 1-1: device descriptor read/8, error -71 [ 468.443750][ T5907] usb usb1-port1: unable to enumerate USB device [ 468.640345][ T10] usb 2-1: USB disconnect, device number 114 [ 469.143594][T13205] loop2: detected capacity change from 0 to 7 [ 469.151185][T13205] Dev loop2: unable to read RDB block 7 [ 469.158087][T13205] loop2: unable to read partition table [ 469.164603][T13205] loop2: partition table beyond EOD, truncated [ 469.171444][T13205] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 469.561109][T13217] delete_channel: no stack [ 469.583216][ T5949] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 469.743224][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 469.756914][ T5949] usb 4-1: config 241 has an invalid interface number: 139 but max is 0 [ 469.769800][ T5949] usb 4-1: config 241 has no interface number 0 [ 469.777320][ T5949] usb 4-1: config 241 interface 139 has no altsetting 0 [ 469.794555][ T5949] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a74, bcdDevice=8d.8a [ 469.810410][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.820196][ T5949] usb 4-1: Product: syz [ 469.826812][ T5949] usb 4-1: Manufacturer: syz [ 469.832151][ T5949] usb 4-1: SerialNumber: syz [ 469.862349][T13227] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 469.883275][ T5883] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 470.058583][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.062039][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 470.077018][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.141461][ T5883] usb 2-1: config 0 has no interface number 0 [ 470.180388][ T5883] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 470.191024][T13231] : entered promiscuous mode [ 470.219986][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.235408][ T5883] usb 2-1: Product: syz [ 470.259098][ T5883] usb 2-1: Manufacturer: syz [ 470.273353][ T5883] usb 2-1: SerialNumber: syz [ 470.278384][ T9] usb 5-1: USB disconnect, device number 109 [ 470.289303][ T5883] usb 2-1: config 0 descriptor?? [ 470.318617][T13237] syz_tun: entered allmulticast mode [ 470.392358][ T5883] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 470.449890][T13239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1986'. [ 470.474860][ T5883] cx231xx 2-1:0.1: Not found matching IAD interface [ 470.579375][ T5883] usb 2-1: USB disconnect, device number 115 [ 470.585467][ T797] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 470.714021][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 470.743417][ T9] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 470.903430][ T9] usb 3-1: device descriptor read/64, error -71 [ 470.915526][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 470.955138][ T797] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 470.986016][ T797] usb 1-1: config 0 has no interface number 0 [ 471.009427][ T797] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 471.041354][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.087031][ T797] usb 1-1: Product: syz [ 471.091279][ T797] usb 1-1: Manufacturer: syz [ 471.130458][ T797] usb 1-1: SerialNumber: syz [ 471.163902][ T797] usb 1-1: config 0 descriptor?? [ 471.214990][ T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 471.264587][T13257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 471.363661][ T9] usb 3-1: device descriptor read/64, error -71 [ 471.389566][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.400441][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.464169][ T5883] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 471.516559][ T9] usb usb3-port1: attempt power cycle [ 471.535670][T13261] ipt_ECN: cannot use operation on non-tcp rule [ 471.619507][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 471.633285][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.650510][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.665602][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.674254][ T5883] usb 5-1: Product: syz [ 471.733482][T13271] openvswitch: netlink: IP tunnel dst address not specified [ 471.768928][ T5883] usb 5-1: Manufacturer: syz [ 471.769589][ T5883] usb 5-1: SerialNumber: syz [ 471.811454][T13269] syzkaller0: entered promiscuous mode [ 471.862445][T13269] syzkaller0: entered allmulticast mode [ 471.876485][ T9] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 471.903987][ T9] usb 3-1: device descriptor read/8, error -71 [ 471.950353][T13269] tipc: Enabled bearer , priority 0 [ 471.969370][T13268] tipc: Resetting bearer [ 472.008888][ T5883] usb 5-1: 0:2 : does not exist [ 472.065285][ T5883] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 472.078255][T13268] tipc: Disabling bearer [ 472.154244][ T5883] usb 5-1: USB disconnect, device number 110 [ 472.203192][ T9] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 472.245892][ T9] usb 3-1: device descriptor read/8, error -71 [ 472.275185][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.363760][ T9] usb usb3-port1: unable to enumerate USB device [ 472.598643][T13306] fuse: Bad value for 'fd' [ 472.684824][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 472.684840][ T30] audit: type=1326 audit(1773957121.534:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13308 comm="syz.4.2000" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8b179c799 code=0x0 [ 473.180327][ T797] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 473.214306][ T797] usb 1-1: USB disconnect, device number 127 [ 473.324366][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2005'. [ 473.863164][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 473.993807][ T5883] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 474.138958][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2011'. [ 474.209282][T13350] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2011'. [ 474.218337][ T5883] usb 3-1: device descriptor read/64, error -71 [ 474.345876][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 474.356641][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.434063][ T9] usb 5-1: Product: syz [ 474.451261][ T9] usb 5-1: Manufacturer: syz [ 474.473438][ T5883] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 474.559814][ T9] usb 5-1: SerialNumber: syz [ 474.673494][ T5883] usb 3-1: device descriptor read/64, error -71 [ 474.786468][ T5883] usb usb3-port1: attempt power cycle [ 474.827336][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 474.909205][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'. [ 474.940466][T13361] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2014'. [ 474.983309][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 475.023326][ T5945] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 475.359950][ T5945] usb 2-1: device descriptor read/64, error -71 [ 475.368108][ T5883] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 475.401663][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 475.433237][ T5883] usb 3-1: device descriptor read/8, error -71 [ 475.465480][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 475.684272][ T5945] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 475.715749][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 475.723217][ T5883] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 475.769472][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 475.786356][ T5883] usb 3-1: device descriptor read/8, error -71 [ 475.798379][ T9] usb 5-1: USB disconnect, device number 111 [ 475.883202][ T5945] usb 2-1: device descriptor read/64, error -71 [ 475.885976][T13368] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 475.908149][T13368] veth1_macvtap: left promiscuous mode [ 475.914304][ T5883] usb usb3-port1: unable to enumerate USB device [ 475.940715][T13368] team0: Device veth1_macvtap failed to register rx_handler [ 475.987950][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.996572][ T5945] usb usb2-port1: attempt power cycle [ 476.014183][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.037150][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.055176][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.153213][ T9] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 476.304951][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 476.313202][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 476.321995][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.332241][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 476.343277][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 476.352343][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.360602][ T9] usb 5-1: Product: syz [ 476.364903][ T9] usb 5-1: Manufacturer: syz [ 476.365895][ T5945] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 476.369510][ T9] usb 5-1: SerialNumber: syz [ 476.393612][ T5945] usb 2-1: device descriptor read/8, error -71 [ 476.604107][T13366] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2016'. [ 476.633493][ T5945] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 476.656486][T13376] binder: BINDER_SET_CONTEXT_MGR already set [ 476.662561][T13376] binder: 13373:13376 ioctl 4018620d 200000000100 returned -16 [ 476.683443][ T5945] usb 2-1: device descriptor read/8, error -71 [ 476.740278][T13376] binder: BINDER_SET_CONTEXT_MGR already set [ 476.746376][T13376] binder: 13373:13376 ioctl 4018620d 200000000040 returned -16 [ 476.808133][ T5945] usb usb2-port1: unable to enumerate USB device [ 478.035631][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'. [ 478.079481][T13396] loop3: detected capacity change from 0 to 7 [ 478.169997][T13396] loop3: [POWERTEC] p1 p2 [ 478.183412][T13396] loop3: p1 size 1680801792 extends beyond EOD, truncated [ 478.202993][T13396] loop3: p2 start 196608 is beyond EOD, truncated [ 478.288381][ T6490] udevd[6490]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 478.443196][ T5945] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 478.684163][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 478.700394][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 478.733620][ T5945] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 478.743680][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.775466][ T9] usb 5-1: 0:1 : does not exist [ 478.781015][ T5945] usb 1-1: Product: syz [ 478.793201][ T5945] usb 1-1: Manufacturer: syz [ 478.802401][ T9] usb 5-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 478.813671][ T5945] usb 1-1: SerialNumber: syz [ 478.939174][T13418] tap0: tun_chr_ioctl cmd 1074025677 [ 478.947983][T13418] tap0: linktype set to 780 [ 478.952534][ T5945] usb 1-1: config 0 descriptor?? [ 478.967702][ T5945] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 478.978449][ T5945] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 479.105345][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 479.200517][T13425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.225487][ T5945] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 479.239717][T13425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.264454][ T9] usb 5-1: USB disconnect, device number 112 [ 479.328122][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.331122][ T5945] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 479.395094][ T5945] em28xx 1-1:0.0: board has no eeprom [ 479.493284][ T5945] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 479.494685][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 479.516272][ T5945] em28xx 1-1:0.0: dvb set to bulk mode. [ 479.522991][ T5883] em28xx 1-1:0.0: Binding DVB extension [ 479.584420][T13438] loop2: detected capacity change from 0 to 7 [ 479.598407][ T5945] usb 1-1: USB disconnect, device number 2 [ 479.626984][T13438] Dev loop2: unable to read RDB block 7 [ 479.637984][ T5945] em28xx 1-1:0.0: Disconnecting em28xx [ 479.642896][T13438] loop2: unable to read partition table [ 479.661627][T13438] loop2: partition table beyond EOD, truncated [ 479.670046][ T5883] em28xx 1-1:0.0: Registering input extension [ 479.677011][T13438] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 479.725277][ T5945] em28xx 1-1:0.0: Closing input extension [ 479.847344][T13446] trusted_key: encrypted_key: insufficient parameters specified [ 479.851821][ T5945] em28xx 1-1:0.0: Freeing device [ 479.868775][T13445] syzkaller0: entered promiscuous mode [ 479.882639][T13445] syzkaller0: entered allmulticast mode [ 480.573238][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 480.735246][ T9] usb 5-1: config index 0 descriptor too short (expected 8228, got 36) [ 480.785121][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.828436][ T9] usb 5-1: config 0 has no interfaces? [ 480.853327][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 480.862398][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.884535][ T9] usb 5-1: config 0 descriptor?? [ 481.042994][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.083587][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.174525][ T9] usb 5-1: USB disconnect, device number 113 [ 481.554806][ T5907] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 481.696258][ T5907] usb 1-1: device descriptor read/64, error -71 [ 481.702847][ T9] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 481.937104][ T9] usb 5-1: config index 0 descriptor too short (expected 8228, got 36) [ 481.949392][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 481.969671][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.004804][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.015435][ T9] usb 5-1: config 0 has no interfaces? [ 482.041220][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 482.051617][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.081839][T13487] netlink: 10072 bytes leftover after parsing attributes in process `syz.2.2050'. [ 482.092672][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.119542][ T9] usb 5-1: config 0 descriptor?? [ 482.127132][ T5907] usb 1-1: device descriptor read/64, error -71 [ 482.246072][ T5907] usb usb1-port1: attempt power cycle [ 482.394916][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.404055][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.633251][ T5907] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 482.667691][ T5907] usb 1-1: device descriptor read/8, error -71 [ 482.727409][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 482.893888][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 482.906773][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 482.924334][ T5907] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 482.936145][ T10] usb 3-1: config 0 has no interface number 0 [ 482.952472][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 482.969299][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 482.983408][ T5907] usb 1-1: device descriptor read/8, error -71 [ 482.995523][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.005059][ T10] usb 3-1: Product: syz [ 483.009239][ T10] usb 3-1: Manufacturer: syz [ 483.014543][ T10] usb 3-1: SerialNumber: syz [ 483.022492][ T10] usb 3-1: config 0 descriptor?? [ 483.103654][ T5907] usb usb1-port1: unable to enumerate USB device [ 483.568688][ T5907] usb 5-1: USB disconnect, device number 114 [ 483.716999][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 483.725070][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 483.732595][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 483.742305][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 483.799909][T13513] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 483.847832][ T10] usb 3-1: USB disconnect, device number 119 [ 484.031414][ T30] audit: type=1326 audit(1773957132.874:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.4.2056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8b179c799 code=0x0 [ 484.670592][T13528] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 484.910989][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 485.073809][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 485.080584][ T5945] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 485.090111][ T5945] usb 1-1: config 0 has no interface number 0 [ 485.096600][ T5945] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.113160][ T5945] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 485.126723][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.141647][ T5945] usb 1-1: Product: syz [ 485.150704][ T5945] usb 1-1: Manufacturer: syz [ 485.158706][ T5945] usb 1-1: SerialNumber: syz [ 485.190488][ T5945] usb 1-1: config 0 descriptor?? [ 485.214396][ T5945] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 485.224842][ T5945] em28xx 1-1:0.132: Video interface 132 found: [ 485.745703][T13550] loop2: detected capacity change from 0 to 7 [ 485.753524][ T6490] Dev loop2: unable to read RDB block 7 [ 485.759167][ T6490] loop2: AHDI p1 p2 p3 p4 [ 485.795426][ T6490] loop2: partition table partially beyond EOD, truncated [ 485.831944][ T5945] em28xx 1-1:0.132: chip ID is em2874 [ 485.839916][ T30] audit: type=1326 audit(1773957134.684:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 485.890155][ T6490] loop2: p1 start 1601398130 is beyond EOD, truncated [ 485.891460][ T30] audit: type=1326 audit(1773957134.714:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 485.919711][ T6490] loop2: p2 start 1702059890 is beyond EOD, truncated [ 485.927063][ T6490] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 485.945876][T13550] Dev loop2: unable to read RDB block 7 [ 485.954000][T13550] loop2: AHDI p1 p2 p3 p4 [ 485.960553][T13550] loop2: partition table partially beyond EOD, truncated [ 485.968280][T13550] loop2: p1 start 1601398130 is beyond EOD, truncated [ 485.975526][T13550] loop2: p2 start 1702059890 is beyond EOD, truncated [ 485.982416][T13550] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 485.989723][ T30] audit: type=1326 audit(1773957134.714:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.013274][ T30] audit: type=1326 audit(1773957134.714:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.043881][ T30] audit: type=1326 audit(1773957134.714:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.066382][ T30] audit: type=1326 audit(1773957134.714:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.089537][ T30] audit: type=1326 audit(1773957134.714:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.112060][ T30] audit: type=1326 audit(1773957134.714:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.158939][ T30] audit: type=1326 audit(1773957134.714:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.3.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837439c799 code=0x7ffc0000 [ 486.286647][ T5195] Dev loop2: unable to read RDB block 7 [ 486.445803][ T5945] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 486.499833][ T5945] em28xx 1-1:0.132: board has no eeprom [ 486.583162][ T5945] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 486.591135][ T5945] em28xx 1-1:0.132: analog set to bulk mode. [ 486.601751][ T5883] em28xx 1-1:0.132: Registering V4L2 extension [ 486.835692][ T5195] loop2: AHDI p1 p2 p3 p4 [ 486.840308][ T5195] loop2: partition table partially beyond EOD, truncated [ 486.850809][ T5195] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.863485][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.872466][ T5195] loop2: p3 size 3070370205 extends beyond EOD, truncated [ 487.181620][ T6490] udevd[6490]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 487.444666][T13577] fuse: Unknown parameter 'J<@e/\(5_'St' [ 487.683683][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 487.694112][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 487.720581][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 487.737860][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 487.741827][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2073'. [ 487.810304][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 487.824945][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 487.959409][T13585] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 487.976995][T13585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2075'. [ 487.986983][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 487.997023][ T5883] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 488.022619][ T10] usb 1-1: USB disconnect, device number 7 [ 488.092786][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 488.130961][ T5945] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 488.293458][ T5945] usb 3-1: config 2 has an invalid interface number: 207 but max is 1 [ 488.312473][ T5883] usb 1-1: Decoder not found [ 488.347700][ T5883] em28xx 1-1:0.132: failed to create media graph [ 488.354876][ T5945] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 488.375172][ T5883] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 488.383366][ T5945] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 488.387513][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.412659][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.443340][ T5945] usb 3-1: config 2 has no interface number 0 [ 488.443525][T13590] ================================================================== [ 488.451709][ T5883] em28xx 1-1:0.132: Remote control support is not available for this card. [ 488.457497][T13590] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 488.457644][T13590] Read of size 8 at addr ffff888046d14748 by task v4l_id/13590 [ 488.457658][T13590] [ 488.457671][T13590] CPU: 0 UID: 0 PID: 13590 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 488.457691][T13590] Tainted: [L]=SOFTLOCKUP [ 488.457697][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.457708][T13590] Call Trace: [ 488.457716][T13590] [ 488.457723][T13590] dump_stack_lvl+0xe8/0x150 [ 488.457747][T13590] print_report+0xba/0x230 [ 488.457777][T13590] ? v4l2_fh_open+0xac/0x420 [ 488.457794][T13590] kasan_report+0x117/0x150 [ 488.457814][T13590] ? v4l2_fh_open+0xac/0x420 [ 488.457834][T13590] v4l2_fh_open+0xac/0x420 [ 488.457853][T13590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.457873][T13590] em28xx_v4l2_open+0x157/0x9a0 [ 488.457941][T13590] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.457960][T13590] v4l2_open+0x1bf/0x3a0 [ 488.457980][T13590] chrdev_open+0x4cd/0x5e0 [ 488.458013][T13590] ? __pfx_chrdev_open+0x10/0x10 [ 488.458030][T13590] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 488.458054][T13590] ? __pfx_chrdev_open+0x10/0x10 [ 488.458071][T13590] do_dentry_open+0x785/0x14e0 [ 488.458096][T13590] vfs_open+0x3b/0x340 [ 488.458114][T13590] ? path_openat+0x2df0/0x3860 [ 488.458132][T13590] path_openat+0x2e08/0x3860 [ 488.458152][T13590] ? __pfx_stack_trace_save+0x10/0x10 [ 488.458176][T13590] ? stack_depot_save_flags+0x33/0x810 [ 488.458233][T13590] ? __pfx_path_openat+0x10/0x10 [ 488.458248][T13590] ? __x64_sys_openat+0x138/0x170 [ 488.458267][T13590] ? do_syscall_64+0x14d/0xf80 [ 488.458283][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.458302][T13590] ? __lock_acquire+0x6b5/0x2cf0 [ 488.458322][T13590] do_file_open+0x23e/0x4a0 [ 488.458341][T13590] ? __pfx_do_file_open+0x10/0x10 [ 488.458365][T13590] ? _raw_spin_unlock+0x28/0x50 [ 488.458378][T13590] ? alloc_fd+0x64b/0x6c0 [ 488.458402][T13590] do_sys_openat2+0x113/0x200 [ 488.458423][T13590] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.458443][T13590] ? exc_page_fault+0x6a/0xc0 [ 488.458459][T13590] ? do_user_addr_fault+0xc6f/0x1340 [ 488.458494][T13590] __x64_sys_openat+0x138/0x170 [ 488.458517][T13590] do_syscall_64+0x14d/0xf80 [ 488.458533][T13590] ? trace_irq_disable+0x3b/0x150 [ 488.458553][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.458569][T13590] ? clear_bhb_loop+0x40/0x90 [ 488.458586][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.458602][T13590] RIP: 0033:0x7f03dc8a7407 [ 488.458617][T13590] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 488.458631][T13590] RSP: 002b:00007ffe8d427dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 488.458648][T13590] RAX: ffffffffffffffda RBX: 00007f03dcf51880 RCX: 00007f03dc8a7407 [ 488.458660][T13590] RDX: 0000000000000000 RSI: 00007ffe8d428f1b RDI: ffffffffffffff9c [ 488.458670][T13590] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 488.458680][T13590] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 488.458690][T13590] R13: 00007ffe8d428020 R14: 00007f03dd056000 R15: 000055d3839774d8 [ 488.458708][T13590] [ 488.458714][T13590] [ 488.782889][T13590] Allocated by task 5883: [ 488.787209][T13590] kasan_save_track+0x3e/0x80 [ 488.791865][T13590] __kasan_kmalloc+0x93/0xb0 [ 488.796428][T13590] __kmalloc_cache_noprof+0x31c/0x660 [ 488.801780][T13590] em28xx_v4l2_init+0x10b/0x2e70 [ 488.806761][T13590] em28xx_init_extension+0x120/0x1c0 [ 488.812035][T13590] process_scheduled_works+0xb6e/0x18c0 [ 488.817574][T13590] worker_thread+0xa53/0xfc0 [ 488.822143][T13590] kthread+0x388/0x470 [ 488.826193][T13590] ret_from_fork+0x51e/0xb90 [ 488.830761][T13590] ret_from_fork_asm+0x1a/0x30 [ 488.835501][T13590] [ 488.837801][T13590] Freed by task 5883: [ 488.841749][T13590] kasan_save_track+0x3e/0x80 [ 488.846400][T13590] kasan_save_free_info+0x46/0x50 [ 488.851406][T13590] __kasan_slab_free+0x5c/0x80 [ 488.856145][T13590] kfree+0x1c1/0x630 [ 488.860012][T13590] em28xx_v4l2_init+0x1683/0x2e70 [ 488.865014][T13590] em28xx_init_extension+0x120/0x1c0 [ 488.870273][T13590] process_scheduled_works+0xb6e/0x18c0 [ 488.875801][T13590] worker_thread+0xa53/0xfc0 [ 488.880369][T13590] kthread+0x388/0x470 [ 488.884412][T13590] ret_from_fork+0x51e/0xb90 [ 488.888983][T13590] ret_from_fork_asm+0x1a/0x30 [ 488.893723][T13590] [ 488.896023][T13590] The buggy address belongs to the object at ffff888046d14000 [ 488.896023][T13590] which belongs to the cache kmalloc-8k of size 8192 [ 488.910050][T13590] The buggy address is located 1864 bytes inside of [ 488.910050][T13590] freed 8192-byte region [ffff888046d14000, ffff888046d16000) [ 488.924013][T13590] [ 488.926317][T13590] The buggy address belongs to the physical page: [ 488.932716][T13590] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x46d10 [ 488.941450][T13590] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 488.949921][T13590] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 488.957443][T13590] page_type: f5(slab) [ 488.961400][T13590] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 488.969957][T13590] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 488.978517][T13590] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 488.987162][T13590] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 488.995805][T13590] head: 00fff00000000003 ffffea00011b4401 00000000ffffffff 00000000ffffffff [ 489.004470][T13590] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 489.013118][T13590] page dumped because: kasan: bad access detected [ 489.019521][T13590] page_owner tracks the page as allocated [ 489.025229][T13590] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13551, tgid 13551 (syz.3.2068), ts 486315929363, free_ts 486241651826 [ 489.046730][T13590] post_alloc_hook+0x231/0x280 [ 489.051473][T13590] get_page_from_freelist+0x24dc/0x2580 [ 489.056995][T13590] __alloc_frozen_pages_noprof+0x18d/0x380 [ 489.062776][T13590] allocate_slab+0x77/0x660 [ 489.067276][T13590] refill_objects+0x331/0x3c0 [ 489.071931][T13590] __pcs_replace_empty_main+0x2e6/0x730 [ 489.077451][T13590] __kmalloc_cache_noprof+0x392/0x660 [ 489.082794][T13590] audit_log_d_path+0xb8/0x1a0 [ 489.087536][T13590] audit_log_d_path_exe+0x42/0x70 [ 489.092536][T13590] audit_log_task+0x2c3/0x3d0 [ 489.097186][T13590] audit_seccomp+0x85/0x190 [ 489.101684][T13590] __seccomp_filter+0xd48/0x1ef0 [ 489.106598][T13590] do_syscall_64+0xf4/0xf80 [ 489.111076][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.116945][T13590] page last free pid 6490 tgid 6490 stack trace: [ 489.123246][T13590] __free_frozen_pages+0xc2b/0xdb0 [ 489.128346][T13590] __slab_free+0x263/0x2b0 [ 489.132740][T13590] qlist_free_all+0x97/0x100 [ 489.137306][T13590] kasan_quarantine_reduce+0x148/0x160 [ 489.142738][T13590] __kasan_slab_alloc+0x22/0x80 [ 489.147583][T13590] __kmalloc_noprof+0x316/0x760 [ 489.152416][T13590] tomoyo_realpath_from_path+0xe3/0x5d0 [ 489.157938][T13590] tomoyo_path_perm+0x283/0x560 [ 489.162764][T13590] security_inode_getattr+0x12b/0x310 [ 489.168108][T13590] __x64_sys_newfstat+0x13b/0x270 [ 489.173118][T13590] do_syscall_64+0x14d/0xf80 [ 489.177697][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.183564][T13590] [ 489.185865][T13590] Memory state around the buggy address: [ 489.191466][T13590] ffff888046d14600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.199499][T13590] ffff888046d14680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.207535][T13590] >ffff888046d14700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.215569][T13590] ^ [ 489.221953][T13590] ffff888046d14780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.230008][T13590] ffff888046d14800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.238039][T13590] ================================================================== [ 489.246945][ T5945] usb 3-1: config 2 interface 207 altsetting 73 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 489.260449][ T5945] usb 3-1: config 2 interface 207 has no altsetting 0 [ 489.268199][ T10] em28xx 1-1:0.132: Closing input extension [ 489.275311][T13590] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 489.282518][T13590] CPU: 0 UID: 0 PID: 13590 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 489.293102][T13590] Tainted: [L]=SOFTLOCKUP [ 489.297419][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.307461][T13590] Call Trace: [ 489.310726][T13590] [ 489.313641][T13590] vpanic+0x56c/0xa60 [ 489.317613][T13590] ? __pfx_vpanic+0x10/0x10 [ 489.322104][T13590] panic+0xc5/0xd0 [ 489.325813][T13590] ? __pfx_panic+0x10/0x10 [ 489.330217][T13590] ? preempt_schedule_thunk+0x16/0x30 [ 489.335610][T13590] ? preempt_schedule_thunk+0x16/0x30 [ 489.340964][T13590] ? v4l2_fh_open+0xac/0x420 [ 489.345538][T13590] check_panic_on_warn+0x89/0xb0 [ 489.350458][T13590] ? v4l2_fh_open+0xac/0x420 [ 489.355031][T13590] end_report+0x73/0x180 [ 489.359259][T13590] ? v4l2_fh_open+0xac/0x420 [ 489.363835][T13590] kasan_report+0x128/0x150 [ 489.368353][T13590] ? v4l2_fh_open+0xac/0x420 [ 489.372932][T13590] v4l2_fh_open+0xac/0x420 [ 489.377332][T13590] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.383300][T13590] em28xx_v4l2_open+0x157/0x9a0 [ 489.388143][T13590] ? do_raw_spin_lock+0x12b/0x2f0 [ 489.393159][T13590] v4l2_open+0x1bf/0x3a0 [ 489.397399][T13590] chrdev_open+0x4cd/0x5e0 [ 489.401813][T13590] ? __pfx_chrdev_open+0x10/0x10 [ 489.406740][T13590] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 489.413057][T13590] ? __pfx_chrdev_open+0x10/0x10 [ 489.417984][T13590] do_dentry_open+0x785/0x14e0 [ 489.422742][T13590] vfs_open+0x3b/0x340 [ 489.426799][T13590] ? path_openat+0x2df0/0x3860 [ 489.431550][T13590] path_openat+0x2e08/0x3860 [ 489.436133][T13590] ? __pfx_stack_trace_save+0x10/0x10 [ 489.441581][T13590] ? stack_depot_save_flags+0x33/0x810 [ 489.447031][T13590] ? __pfx_path_openat+0x10/0x10 [ 489.451966][T13590] ? __x64_sys_openat+0x138/0x170 [ 489.456984][T13590] ? do_syscall_64+0x14d/0xf80 [ 489.461746][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.467810][T13590] ? __lock_acquire+0x6b5/0x2cf0 [ 489.472742][T13590] do_file_open+0x23e/0x4a0 [ 489.477231][T13590] ? __pfx_do_file_open+0x10/0x10 [ 489.482244][T13590] ? _raw_spin_unlock+0x28/0x50 [ 489.487083][T13590] ? alloc_fd+0x64b/0x6c0 [ 489.491409][T13590] do_sys_openat2+0x113/0x200 [ 489.496077][T13590] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.501264][T13590] ? exc_page_fault+0x6a/0xc0 [ 489.505933][T13590] ? do_user_addr_fault+0xc6f/0x1340 [ 489.511207][T13590] __x64_sys_openat+0x138/0x170 [ 489.516045][T13590] do_syscall_64+0x14d/0xf80 [ 489.520621][T13590] ? trace_irq_disable+0x3b/0x150 [ 489.525635][T13590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.531684][T13590] ? clear_bhb_loop+0x40/0x90 [ 489.536349][T13590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.542223][T13590] RIP: 0033:0x7f03dc8a7407 [ 489.546623][T13590] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 489.566210][T13590] RSP: 002b:00007ffe8d427dd0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 489.574611][T13590] RAX: ffffffffffffffda RBX: 00007f03dcf51880 RCX: 00007f03dc8a7407 [ 489.582569][T13590] RDX: 0000000000000000 RSI: 00007ffe8d428f1b RDI: ffffffffffffff9c [ 489.590521][T13590] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 489.598473][T13590] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 489.606429][T13590] R13: 00007ffe8d428020 R14: 00007f03dd056000 R15: 000055d3839774d8 [ 489.614392][T13590] [ 489.617656][T13590] Kernel Offset: disabled [ 489.621961][T13590] Rebooting in 86400 seconds..