last executing test programs: 1m46.938325713s ago: executing program 0 (id=123): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = timerfd_create(0x1, 0x0) timerfd_gettime(r2, &(0x7f0000000640)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}]}, 0x30}, 0x1, 0x0, 0x0, 0x8805}, 0x0) 1m43.806356621s ago: executing program 0 (id=134): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = dup3(r2, r3, 0x0) (async) r6 = gettid() r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x310) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000a68daa40d35b7c315e040000131709021200010000000009"], 0x0) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x12) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.438646108s ago: executing program 0 (id=138): syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c174509b9bf38a076bf840109020905000000000000000705936b0000"], 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x305002, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r1}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, r1}) 1m40.388946365s ago: executing program 0 (id=144): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x1}}, 0x18) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0xa8880) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_overlay={0x7fffffff, 0x1, 0x4, 0x70000, 0x3, {}, {0x1, 0x1, 0xb, 0x81, 0x80, 0x7, "008000"}, 0x1, 0x3, {&(0x7f0000000200)=[{0x23, 0xf, {0x10}, 0x7}, {0x9, 0x2, {0xdb53}, 0x3}]}, 0x4, 0x0, r2}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(0x0, 0x5, 0x2a080) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xb348f11cfb70b748, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r10, 0x2271, &(0x7f0000000100)) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) 1m39.256990778s ago: executing program 0 (id=150): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) (async) r2 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004000a01010108000d001908"], 0x40}}, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) (async) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, 0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) request_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)='^\x00', 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x59) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="b1e3fcc02e68271ce747e70d8f86444f296e"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004880) (async) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[@ANYRES64=r10, @ANYRESOCT=r10, @ANYRES8=r10, @ANYRES16=r10, @ANYBLOB="a3587e2b667942b2762a1eecaeb6be1dfcc196ccc84ef62bd5d111f0ad86cbd1fd5430245f8d74ff144308c1a2fdf20dfbb0d2fc1acd2a95dcc364e7c03b7f0870e7064c51b2bd0bec0a694af17654602dfb18cb5ccaea1e570929c6cf12e9b022affc3808351a5c99cda26884d4b46f95edf79f6bc039f2d8e96c7cdd80eff3f08d23b586b8f5868d32189a59878eefc8b4ad942e019872cc40d67cfe46c36d11523e5a178aae7363c71d4af8d6a87b22082f54079cd16620a4e323391701c59c2a4b3aafffd1479529a4778416cefb0f28f448596dd2d57ae707d9ef89ca854027ceef5032d815c48b431ac2682cee07e453f5d204", @ANYRES16=r10, @ANYRESDEC=r10, @ANYRES16=r10, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m38.720629281s ago: executing program 0 (id=152): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x4, "22a85519"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x7, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000040)=""/30, &(0x7f0000000080)=0x1e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="00080000075005001c0012ee8c800b11600062726964676500000c3b4243c40005000100"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m38.096057751s ago: executing program 32 (id=152): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x13, 0x4, "22a85519"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x7, &(0x7f0000000340)={{0x0, 0x3938700}, {0x77359400}}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x2) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000040)=""/30, &(0x7f0000000080)=0x1e) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="00080000075005001c0012ee8c800b11600062726964676500000c3b4243c40005000100"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6.522791988s ago: executing program 1 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x44880}, 0x8004) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC=r0], 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/204, 0xcc) (async) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002a7264c20c518120007000102030109021200010f05000809046e0000fd13f8caa720427789d81259298ef1294e09a910bc435b320f9a80e0d8b36107ae669051a6074f868e888ed2962eb2"], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, 0x0}]}) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x0, 0xf9, &(0x7f00000003c0)="631b472c6e45172684aade7d47589e1f62498827b43fa1c66ef1f00725ecde18b7d338a8e4e2e97e576184bccca0e602cca72bee7dfb4bb630db7158d582deaf36b72da26b9dfa1a68412fce12636497461274956687abe1ad3608825bc11b42ed5b3a9aa395598b495361cedd22d4ceac934b6149cc48e9a1269058597f92b73a1f891b3bfeeefde0e65248f87fd32694f07081ac909e416540e623af61bfc16a488b0c17e43c9b3aba96eb4ef01df3df61bcf7010b1c61a1f33ddd37fd37961e2f2fb66b928437fda1b1e447fed0d5051352dfcc9ded5954de214cb142f4ee7355dc24f70738520de2464c5ed4823828b48dcfe1de566b22"}) 6.520852358s ago: executing program 3 (id=490): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r1, 0x0, 0x2, 0x100006dd}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r1, 0x0, &(0x7f00005c6000/0x2000)=nil, 0x2000, 0x9}) (async) unshare(0x40020000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 5.643541018s ago: executing program 5 (id=496): prctl$PR_SET_NAME(0x4, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='ns\x00') syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c00, 0x0) 5.486557443s ago: executing program 3 (id=497): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[], 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0xd00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) (async, rerun: 32) r2 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) (async) io_uring_enter(r2, 0x567, 0x1000a387, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (rerun: 64) syz_open_pts(r0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000280), 0x4) r9 = syz_io_uring_setup(0x4a31, &(0x7f0000000080)={0x0, 0xeb46, 0x400, 0x2, 0x362, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r9, 0x847ba, 0x8, 0xe, 0x0, 0x0) 5.35488524s ago: executing program 3 (id=498): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) landlock_create_ruleset(&(0x7f0000000040)={0x8221, 0x2, 0x1}, 0x18, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000080)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) landlock_create_ruleset(&(0x7f0000000040)={0x8221, 0x2, 0x1}, 0x18, 0x2) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000500)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000080)=0x8) (async) 5.22741631s ago: executing program 3 (id=499): r0 = socket$kcm(0x10, 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0xff9e}) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0x4}, {0xfff2, 0x6}, {0x3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x4c080) landlock_create_ruleset(&(0x7f0000000300)={0x2114, 0x0, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.224556902s ago: executing program 3 (id=502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="b05d5abd5dc3889a582532373604546fc1054032a08e17dc08c93a", @ANYRESDEC=r2, @ANYRESHEX=r2], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000240)={0x1, 0x7f, 0xab, 0x7, 0x7fe, 0x8, 0x40009, 0x6, 0x4, 0x2c, 0x1f}) syz_usb_ep_write(r3, 0x81, 0xfffffffffffffe70, &(0x7f0000000040)="feffffffffffba68") r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x68, 0x23b) write$sysctl(r7, &(0x7f00000002c0)='0\x00', 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@any, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) 4.074660966s ago: executing program 5 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0xe774556c864495e6) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800084000000008140005"], 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x288882, 0x0) write$tun(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="00030900050009000100c6aa5a91527b379e717e2471228b44745dabc400ade5ae5fd1c5140b66739c2f797eedb0f6af05093213a2b68a5c80fe15195547fd8433c055d0e8afb98f2e5a06347349d28fd7a8d5b7dc785d7db2f58b5c3e48d75677276b6c325f61f2816740b2b2a0aa45d5d3438ae903b512c94c7a29c48553be8769680a02e772d703523ec2ae8b7c5a2f5c34479a4dc97a85187c942756a9204ce9e3bd9429ae3b1c1478239619461b3736454352089ca5a7a18002eade717c627d48e0be4dc66c48d4ec30c254b4dd84e9b31399cc3a351876dc16d482739e3c8f78e042fa6010e2fd282ed857d80d55a5667d2d23f8e4e9367df282809912c2eae08d74aa96af117470e2ebdbac3d5060b27b526a0c71a5b8944d92cb83c859f514085f7bd28d5587c51809d7f947ae9c30e37cfd3ec94889192e3b7f4df419fdfef4596bb94767646f7cdf32596d8e7016d0ce77ac5b8907845586c1c678c79cb99afd6db1ffab02afabe8195fa928102d"], 0xf8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"d7fa2588fb9a5d7de3c8354c5c72e8980bc3b8583972c5604e4667acdf1add72", 0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x7ff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_create(0x7, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="9b5c5547b6e09dad", 0x8}], 0x1}, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r9, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="5807e822", @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) prlimit64(0x0, 0xb, &(0x7f0000000180)={0xbffffffffffffff5, 0x3}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.874131032s ago: executing program 5 (id=504): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000000c0)=0x1) close(0x3) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000838101014000000000001090224000100000000090400000103000000092100100001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0) 3.442817179s ago: executing program 1 (id=505): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newsa={0x154, 0x1a, 0x713, 0xfffffffd, 0x0, {{@in6=@local, @in6=@mcast1, 0xfffc}, {@in6=@empty, 0x0, 0x33}, @in=@dev, {}, {}, {0x0, 0x6, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd28, 0x70bd2a, 0x70bd25, 0x6}}]}, 0x154}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) 3.182567387s ago: executing program 1 (id=506): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000180)={[0x8]}, 0x8) 2.600854633s ago: executing program 4 (id=508): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x22100, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) read$FUSE(r2, 0x0, 0x0) (async) capget(&(0x7f0000000140)={0x20080522}, &(0x7f00000001c0)={0x7, 0x1, 0x2e7, 0x8, 0x1, 0x86d7}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x3}]}}}]}, 0x64}}, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) (async) r5 = syz_open_dev$swradio(&(0x7f0000000a40), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0x8000003, 0x2}) (async) listen(r3, 0x0) poll(&(0x7f0000000240)=[{r3, 0x4018}], 0x1, 0x7) 2.462764757s ago: executing program 2 (id=509): r0 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000140)=0x1, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00100000010400004a"]) 2.1826099s ago: executing program 2 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) r3 = eventfd2(0xc, 0x800) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r3, 0x15, 0x0, r3}) (async) read$eventfd(r3, &(0x7f0000000000), 0x8) (async) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) r8 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6, 0x40, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x24, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) (async) io_uring_enter(r8, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) (async) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) r11 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) clock_adjtime(0x3, &(0x7f0000000280)={0x6, 0x8, 0x1, 0x0, 0x7f, 0xe6, 0x1, 0x3, 0x5, 0x7ff, 0x1, 0x23c4, 0x100000000000000, 0x2, 0xffffffff, 0xa, 0xffffffffffffffff, 0x2, 0x7f, 0x4, 0x9d8, 0x5, 0x7, 0x3, 0xffffffff, 0x7}) (async) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) 2.126382513s ago: executing program 5 (id=511): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)='X', 0x1}, {&(0x7f0000001140)="c999ff4452c6edbea4e1002000003cb9", 0x10}, {&(0x7f00000012c0)='J', 0x1}, {&(0x7f0000000940)='Q', 0x1}, {&(0x7f0000000a40)="0e", 0x1}, {&(0x7f0000000b40)='\\', 0x1}], 0x6}}, {{0x0, 0xfffffffffffffeb0, &(0x7f0000000fc0)=[{&(0x7f0000001080)="3b251d068910324364cb", 0xa}, {&(0x7f0000001100)="7f", 0x1}, {&(0x7f0000000cc0)="c7", 0x1}, {&(0x7f0000000880)="f9", 0x1}, {&(0x7f0000001300)="d0b2c46b09439c5117bcfc4288092a8a8c8972b35c76c5309cc57cbe785c8f4ea9ef36f1b2001df06b7e610330ddf218ac1f0d53518998993491dcd3dff18c5e15680cc90299fc2dce367bee46c2104e7bbad6db094b085edd76ae3b74c427cff35ed1e3e888371445fc51b891e54e1c639eb7351d9dd3d94d3069a1c35147d3caae1ecb3ff3a6a70f2abdb11342755672fcbf57fe04eb1ab41882492c84d8ac4369126e15", 0x1}, {&(0x7f00000011c0)="5b03eaa828d6b89ae58b90ab27d268fa5cd28183e10b06af4c8502a6e5fa447fd1375546c91b1c466828938ddf17560f917f0beffe4d2022600cb778bd5090ebb05d713e7cd10bd7d3a039e2fd0ac52791cd9618550ddde6bea93589a7c6d630134d1c831f3cac3821e531d47fd9378b6f572a202f15d7e077c142dcf97cde53e771aebcecf60c3c", 0x88}, {&(0x7f0000000e40)='D', 0x1}, {&(0x7f0000000e80)="c6", 0x1}, {&(0x7f0000000ec0)='x', 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)="cf", 0x1}, {&(0x7f0000001180)="cd", 0x1}], 0x2}}], 0x3, 0x4008440) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x30}}, [@private2]}}}]}, 0x4c}}, 0x0) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) 1.922286273s ago: executing program 2 (id=512): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200000000000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x50}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x4000ffe, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc044) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='usrquota', 0x0, r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/176) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000080)="640fc735a3907872c4c265df2366b81e000f00d066b872008ee866ba200066b8002866ef660f72e300667900660f3a62a9ca000000020f00c7ea00400000e600"}], 0x15, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xeeef0000}}, "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", "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x10d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200000000000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x50}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x4000ffe, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc044) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='usrquota', 0x0, r4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/176) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000080)="640fc735a3907872c4c265df2366b81e000f00d066b872008ee866ba200066b8002866ef660f72e300667900660f3a62a9ca000000020f00c7ea00400000e600"}], 0x15, 0x4, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xeeef0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x10d) (async) 1.555811369s ago: executing program 2 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000140)={0xc}) (async) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x48, 0x20fe, 0x6, 0x7, 0x4c, 0x9, 0x2, 0xc3, 0x4, 0x81, 0x5, 0x5, 0x9}, {0x711, 0x4, 0x8, 0x1, 0x33, 0xc, 0x7, 0x6, 0xfc, 0xa0, 0x84, 0xbb, 0x3}, {0xfffffffc, 0xe0, 0xc, 0x2, 0x3, 0x3, 0x2, 0xf, 0x8, 0xf, 0x7, 0x3, 0x9}], 0x2}) 1.43905372s ago: executing program 4 (id=514): syz_emit_ethernet(0x116b, &(0x7f00000013c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, 'n 3', 0x1135, 0x6, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@dstopts={0x33, 0x8, '\x00', [@generic={0x3, 0x44, "e994fcb72e4f94e213bd07939a973cc674587e6e9876b16a9d940593c5ec493d7d32b5501b06c95134aeacd53f0fc662a0dd0b280858f8a3c6427ed930c8c1e2313cb5cd"}]}, @fragment={0x2c, 0x0, 0x1, 0x0, 0x0, 0x1, 0x67}, @fragment={0x67, 0x0, 0x1, 0x1, 0x0, 0x8, 0x66}, @dstopts={0x16, 0x214, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x15, 0xa, [0x0, 0x8000000000000001, 0x3, 0x211f, 0x0, 0x598eb95, 0x7, 0x3, 0x1d4, 0x3]}}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @generic={0x5, 0x1000, "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"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x8, [0x2, 0x8]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x5}]}], @payload_direct={{{{0x25, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x2, 0xb183, 0x0, 0x2, 0xf, 0x3, 0x3, 0x8001, 0x7, 0x0, 0x4e20, 0x4e23}, 0x4, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) pipe(&(0x7f0000000200)) (async) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x40004) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 1.314698425s ago: executing program 1 (id=515): pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5760, 0x0) write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1.301456841s ago: executing program 4 (id=516): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) fsopen(&(0x7f00000001c0)='iso9660\x00', 0x0) (async) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000016c0)=""/171, 0xab}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000000140)=""/19, 0x13}, {&(0x7f00000018c0)=""/175, 0xaf}, {&(0x7f0000000300)=""/212, 0xd4}], 0x5}}], 0x1, 0x40010122, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7", 0x12, 0xfffffffffffffffe) (async, rerun: 64) syz_emit_ethernet(0x52, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001480)=ANY=[@ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async, rerun: 64) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async, rerun: 32) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async, rerun: 32) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r7, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) (async, rerun: 32) fsetxattr$security_capability(r3, &(0x7f00000014c0), &(0x7f0000001500)=@v3={0x3000000, [{0x48, 0xb}, {0x5, 0x6}], r9}, 0x18, 0x2) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030400000000000000000000fff8", @ANYRES32=0x0, @ANYBLOB="0004010000840000200012800b00010065727370616e000010000280040012000800040000000000"], 0x40}}, 0x810) 1.295514934s ago: executing program 2 (id=517): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000600)={0x80, 0x2, 0xc8, 0x80, 0x6, 0x8}) membarrier(0x8, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000580)=""/4096, &(0x7f0000001580)=0x1000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0xfc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009870310881061000e9ab00000001090212000100000000090400000026af0700d742f3d5e9ae4c1f385370ebe399d736eba2327948da8313958a2553928532941d647c4d196f175468ee4177f54cc4c47908ad92ed31e0fa1c9b88176f701705992a82d379709dddf0e774e595e41831bdf9ad4e94c127d559d9b20a0678b6571fa8009f7e67bd842fe4304e5450b7d16ea007f0f37df0ea797645062a92c489c3ce793bdaa021b816988ba261b3d46d668839d2f0741c961352c7497ffba459486a7a09e745426507c5b26c51749bff082037e5c6034fd1"], 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x83) listen(r8, 0x3) r9 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}) io_uring_enter(r9, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x7d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0xf, 0x80, 0x4d, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "6c1f0ed5"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0xa, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5b9a, 0x6, 0xd5}, @dmm={0x7, 0x24, 0x14, 0x0, 0x7b}, @mbim={0xc, 0x24, 0x1b, 0x9c, 0x8, 0x80, 0x25, 0x6, 0x1}, @acm={0x4, 0x24, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0xe}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x10, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xfc, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xf3}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xc, 0xa0, 0x7, 0x8, 0x7}, 0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3200031c100a3104000000000f09000000ff00f0000000303fff00003f00000a1003000b008b09d50507500208660400"], 0x5, [{0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "e8be87514d186cfe5b7036dab71d98e7ef1910f6a8124473113fabf71f914419297e60b0899a7cbaa00765d8aceaf609fa3d26e27e5bcb78753a3e"}}, {0xcf, &(0x7f0000000240)=@string={0xcf, 0x3, "ca81e4c7fb941072bac6f473f302e96bb2fa26445b590a165dcf294c567630b23118786c4843a929f8e4799afac8d1cc221009d891be6cb873c973cb07c94bd21b2046def1b117dd56939d26243a06af9af0224f429ead379194f84ce3914a20699f594317f667e7d813bd489e11a3b91e0fbdb40be5d5a3d3c2eb38ccb3c9a7a3812ea86507fc20cb028790760c9a6871cfb1056dafead2d5cdb1f66d53fb9e9f7ca94463fe17a14eff7587e61de890feefa0c3365501c5560f6b5c38497117f6f8e7f305fd0132a47b6494d5"}}, {0x8e, &(0x7f0000000340)=@string={0x8e, 0x3, "b440d458a2500e31e70ab36e5c64d1fe6ea22473056b09e86e43d984a4ea19ecc51b88061c9f226346593dd2ef97295832713b43593e9f4a91fd53adc9778b3120b015c19d10bdb1e43ad5ef4fd00260c9b57439e0256ec26a88fc533b32c4c831fb939af46f17db449fcc8bba6260175d84a9ec981de056d97f7247684be369aa3e12728569ed34a287dfd3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}, {0xad, &(0x7f0000000440)=ANY=[@ANYBLOB="ad03d773b825751a61f95780de69110a1a121ebdce49fc92acd204228b364be2580f7336f0fbda016fb2a8d2bf082dc5041b9072ed2abf1dfdb1bad87cc23025e9b7cfe9f9c1921741af781996c40594c457d1eb19d92ba0f84592c39fd2d6daf23838cf0cf9b6a45d2c8b38b24503862c8710ec76c00560e1a1c111abe597cec26beeefba46c140b6631f645267291e77ca3c60a9ad5776af56306da7c123ab46f46e16203c7c"]}]}) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 1.157662139s ago: executing program 4 (id=518): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) landlock_restrict_self(0xffffffffffffffff, 0x1) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}], 0x1, &(0x7f0000000200), 0x0, 0x0) 1.054543266s ago: executing program 3 (id=519): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@delchain={0x24, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x6}, {0xfff1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000000), 0x4) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r5, 0x8000}], 0x1, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) 1.023509694s ago: executing program 1 (id=520): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x2400c850}, 0x800) r3 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000001d00)={0x6071d56f, 0x0, "b058b584c75da73d1f7600450b8add59e9665ce1d040fef200"}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') io_uring_enter(0xffffffffffffffff, 0x2deb, 0x5f8b, 0x6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x404884c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000240)=""/183) r7 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/../file0/file0\x00', 0x32800, 0x100) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) close(r7) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) 1.019145472s ago: executing program 5 (id=521): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setfsgid(0x0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"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", 0xfffffffffffffd6a}}, 0x1006) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x1, 0x0) fchdir(r6) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)=0x0) write$FUSE_STATX(r6, &(0x7f0000000140)={0x130, 0x0, 0x0, {0x7, 0x100010, 0x0, '\x00', {0x100, 0x101, 0xc1b9, 0x3, r7, 0xee00, 0x1000, '\x00', 0x0, 0xab6, 0x2, 0x100000000, {0x1}, {0x7, 0x5242}, {0x6, 0x4}, {0x2, 0x2}, 0x989, 0x19e, 0x1bc, 0x4}}}, 0x130) 822.964145ms ago: executing program 4 (id=522): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1a, 0x20000028, 0x0) 274.577972ms ago: executing program 4 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$vim2m(0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) chdir(&(0x7f0000000040)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r3 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xec27, 0x8, 0x20001, 0x40000337}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x847ba, 0xbb69, 0xe, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close(r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x842000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) pipe(&(0x7f0000000040)) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x81, 0x26527fdc, 0x50, @remote, @dev={0xfe, 0x80, '\x00', 0x34}, 0x10, 0x7800, 0x9, 0x3}}) 263.76617ms ago: executing program 2 (id=524): syz_usb_connect(0x5, 0x35, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x54, 0x5e, 0xd, 0x20, 0x499, 0x6bb7, 0x682f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xff, 0x70, 0x79, 0x0, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x21, 0x1, 0x26, 0xff}]}], [{{0x9, 0x5, 0x85, 0x3, 0x8, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd26, 0x8400002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x1, 0x0, 0x80000000, 0x5, {0x8, 0x0, 0x0, 0x5e1f, 0x76, 0xec}, {0x6, 0x1, 0x8, 0x2, 0x400}, 0x10, 0x7, 0x8}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7ff, 0x8, 0x9, 0x1, 0x4edb, 0x7, 0xc, 0x0, 0x9, 0x6, 0x7, 0x4, 0x7, 0x9, 0x8, 0x0, 0x3, 0x6f, 0x1, 0xb, 0x6, 0x9, 0xa, 0xacef, 0x7, 0x8, 0xfffffffe, 0x170, 0x3, 0x9, 0x3, 0x8, 0x6, 0x9, 0xfffffffc, 0x81, 0xa56, 0x4, 0x2, 0x4, 0xfff, 0x5, 0x5, 0x4, 0x40, 0x1, 0x129d, 0x3, 0xff17, 0xfdb, 0x2, 0x1000, 0x3, 0x1, 0x3, 0x9, 0x0, 0x1ff, 0x1, 0x8, 0x1, 0x7, 0x2d, 0x5, 0x2, 0x4, 0x6, 0x2, 0x9, 0x1, 0x5, 0xfffff820, 0x200, 0xffff, 0x7a, 0x44, 0xe, 0x1, 0x8, 0xc7, 0x8, 0x0, 0x81, 0xffffddc4, 0xff, 0x6, 0x2, 0x1, 0x5, 0x8001, 0x3, 0xff, 0xfffffff9, 0x8930, 0x3, 0x400, 0x8, 0x3, 0x101, 0x8, 0x6, 0x7fffffff, 0x8, 0x4, 0x8, 0x987c, 0x1, 0x2, 0x1, 0xf983, 0x8, 0x800, 0x2, 0x2, 0x7, 0x3, 0x44, 0xd, 0x80, 0x0, 0xfffffffd, 0x7, 0x9d5, 0xa, 0x1, 0x2, 0x6, 0x4, 0x5c, 0xb01, 0x4, 0x7, 0xc, 0x4, 0x0, 0x3, 0xfffffff9, 0x4, 0xb, 0x800, 0xd95, 0xa, 0x9, 0x2, 0x7, 0x4, 0x7fffffff, 0xe1b, 0xd6, 0xffffffff, 0x2, 0x6, 0x3, 0x2, 0xfffffff5, 0x5, 0xffffffff, 0x5, 0x6, 0x1, 0x1dc, 0x4, 0x8, 0x3, 0x10000, 0x7484, 0xcd1f, 0x7fff, 0x1000, 0x2, 0x400, 0x9, 0x6, 0xffffffff, 0x5, 0x1000, 0xe0eb, 0x1000, 0x0, 0xf2f, 0x10, 0xfff000, 0x4, 0x3, 0xfff, 0x5, 0x0, 0xb, 0x1, 0x8, 0x1, 0x3, 0xfff, 0x0, 0x5, 0x3c, 0x7ff, 0x1a1f, 0x12, 0x7, 0x8, 0x1, 0x5, 0x9, 0x7, 0x7, 0x527, 0x7, 0x1, 0xd05e, 0x3ff00000, 0x9, 0x7ff, 0x1, 0x6, 0x6, 0xfffffff0, 0x5cc3d99f, 0x2, 0x0, 0x3, 0x6, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x9, 0x80, 0x3, 0xca, 0x3, 0x9, 0x3, 0x47bcb6ac, 0x5, 0x6, 0x33a46000, 0xaf3a, 0xdb00, 0x3ff, 0x40, 0x2028, 0xe6f9, 0x2, 0x7, 0x1, 0x6, 0x400, 0x568, 0xe18, 0x3, 0x1, 0x4, 0x10000]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) (async, rerun: 32) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) close_range(r0, r1, 0x0) r6 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x480401) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x1, 0x5, 0x2, "bb3610f6bee6be43f29e6d147e33566895f5c9d008f083e26fbea53f70c086ce", 0x41495043}) 152.99892ms ago: executing program 5 (id=525): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x10041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x4}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000002c0)={0x1, 0x0, 0x20, 0x16, 0x9, &(0x7f0000000680)}) r4 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) listen(0xffffffffffffffff, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x4000, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000002060108000000000000000000008f47e653e307c7e73c4364400000140007800800114000000004050015000d0000000500010006000000050005000a00000005000400000000000d000300686173683a6e6574000000000900020073797a3200000000"], 0x68}}, 0x0) 0s ago: executing program 1 (id=526): syz_emit_ethernet(0xae, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3f844b", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}, {0x18, 0x1, "00f5ffffff00"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ T5897] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 149.148794][ T5899] usb 3-1: config 9 interface 35 altsetting 3 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 149.160147][ T5897] asix 4-1:0.0: probe with driver asix failed with error -32 [ 149.176697][ T5899] usb 3-1: config 9 interface 35 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 149.201592][ T5899] usb 3-1: config 9 interface 35 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 149.221221][ T5899] usb 3-1: config 9 interface 35 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 149.238823][ T5899] usb 3-1: config 9 interface 35 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 149.257896][ T5899] usb 3-1: config 9 interface 35 altsetting 3 has 10 endpoint descriptors, different from the interface descriptor's value: 15 [ 149.288082][ T5899] usb 3-1: too many endpoints for config 9 interface 157 altsetting 163: 154, using maximum allowed: 30 [ 149.314651][ T5899] usb 3-1: config 9 interface 157 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 149.331765][ T5899] usb 3-1: config 9 interface 157 altsetting 163 endpoint 0x8 has invalid maxpacket 16, setting to 8 [ 149.347435][ T5899] usb 3-1: config 9 interface 157 altsetting 163 has 2 endpoint descriptors, different from the interface descriptor's value: 154 [ 149.376039][ T5899] usb 3-1: too many endpoints for config 9 interface 162 altsetting 199: 174, using maximum allowed: 30 [ 149.401506][ T5899] usb 3-1: config 9 interface 162 altsetting 199 has a duplicate endpoint with address 0x4, skipping [ 149.430566][ T5899] usb 3-1: config 9 interface 162 altsetting 199 has a duplicate endpoint with address 0x1, skipping [ 149.449398][ T5899] usb 3-1: config 9 interface 162 altsetting 199 has a duplicate endpoint with address 0x4, skipping [ 149.476625][ T5899] usb 3-1: config 9 interface 162 altsetting 199 has 3 endpoint descriptors, different from the interface descriptor's value: 174 [ 149.500505][ T5899] usb 3-1: config 9 interface 250 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 149.526911][ T5899] usb 3-1: config 9 interface 250 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 0 [ 149.570802][ T5899] usb 3-1: config 9 interface 250 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 149.587955][ T5899] usb 3-1: config 9 interface 250 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 149.601564][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 149.612929][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 149.624184][ T5899] usb 3-1: config 9 interface 4 altsetting 1 endpoint 0xE has invalid maxpacket 511, setting to 8 [ 149.636963][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 149.647986][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 149.665080][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 149.676157][ T5899] usb 3-1: config 9 interface 4 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 0 [ 149.690316][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has an endpoint descriptor with address 0x47, changing to 0x7 [ 149.702230][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 149.713369][ T5899] usb 3-1: config 9 interface 4 altsetting 1 endpoint 0xB has invalid maxpacket 32, setting to 0 [ 149.736506][ T5899] usb 3-1: config 9 interface 4 altsetting 1 endpoint 0x2 has invalid maxpacket 128, setting to 8 [ 149.754643][ T5899] usb 3-1: config 9 interface 4 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 149.775645][ T5899] usb 3-1: config 9 interface 35 has no altsetting 0 [ 149.785775][ T5899] usb 3-1: config 9 interface 157 has no altsetting 0 [ 149.808609][ T5899] usb 3-1: config 9 interface 162 has no altsetting 0 [ 149.825727][ T5899] usb 3-1: config 9 interface 250 has no altsetting 0 [ 149.845369][ T5899] usb 3-1: config 9 interface 4 has no altsetting 0 [ 150.009872][ T5846] Bluetooth: hci3: command tx timeout [ 150.081562][ T6071] team0 (unregistering): Port device team_slave_1 removed [ 150.392379][ T6071] team0 (unregistering): Port device team_slave_0 removed [ 150.598971][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 150.977261][ T43] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.988064][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.041516][ T43] usb 2-1: Product: syz [ 151.051639][ T43] usb 2-1: Manufacturer: syz [ 151.089076][ T43] usb 2-1: SerialNumber: syz [ 151.157335][ T5936] usb 4-1: USB disconnect, device number 23 [ 151.190149][ T43] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.379065][ T5899] usb 3-1: New USB device found, idVendor=413c, idProduct=81d0, bcdDevice=b1.5f [ 151.388173][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.561635][ T5899] usb 3-1: can't set config #9, error -71 [ 151.620025][ T5899] usb 3-1: USB disconnect, device number 21 [ 151.921402][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.089205][ T5846] Bluetooth: hci3: command tx timeout [ 152.973151][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 152.995392][ T24] ath9k_htc: Failed to initialize the device [ 153.225344][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 153.592646][ T6778] kAFS: unparsable volume name [ 153.752510][ T6640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.795454][ T6640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.811094][ T6640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.832844][ T6640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 154.648948][ T6805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.315941][ T43] usb 2-1: USB disconnect, device number 18 [ 155.698323][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 155.906229][ T30] audit: type=1326 audit(1749495488.638:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87418e929 code=0x7ffc0000 [ 155.994143][ T30] audit: type=1326 audit(1749495488.678:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87418e929 code=0x7ffc0000 [ 156.016914][ T30] audit: type=1326 audit(1749495488.708:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.048884][ T30] audit: type=1326 audit(1749495488.708:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.071659][ T30] audit: type=1326 audit(1749495488.708:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.094760][ T30] audit: type=1326 audit(1749495488.708:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.133462][ T30] audit: type=1326 audit(1749495488.708:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.192395][ T30] audit: type=1326 audit(1749495488.708:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.299730][ T30] audit: type=1326 audit(1749495488.708:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.384895][ T30] audit: type=1326 audit(1749495488.708:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6818 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd87412ab19 code=0x7ffc0000 [ 156.636790][ T6640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.745501][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.851164][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.859176][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.913466][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.920709][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.948787][ T5936] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 157.388878][ T5936] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 157.404069][ T6640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.420417][ T5936] usb 3-1: config 3 has no interface number 0 [ 157.437062][ T5936] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 157.583352][ T5936] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 157.609645][ T5936] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 157.626800][ T6640] veth0_vlan: entered promiscuous mode [ 157.633090][ T5936] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 157.648819][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 157.652138][ T6640] veth1_vlan: entered promiscuous mode [ 157.662688][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.679474][ T6831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.928223][ T6640] veth0_macvtap: entered promiscuous mode [ 157.952813][ T6640] veth1_macvtap: entered promiscuous mode [ 158.048863][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 158.172849][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.267382][ T6640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.397898][ T6640] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.427711][ T6640] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.451731][ T5898] usb 5-1: config 0 has no interfaces? [ 158.489530][ T6640] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.531360][ T6640] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.688940][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 158.743819][ T5898] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.754035][ T9] usb 2-1: device descriptor read/all, error -71 [ 158.782526][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.815561][ T5898] usb 5-1: Product: syz [ 158.842751][ T5898] usb 5-1: Manufacturer: syz [ 158.975746][ T5898] usb 5-1: SerialNumber: syz [ 159.039913][ T5936] usb 3-1: string descriptor 0 read error: -71 [ 159.046886][ T5936] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 159.126413][ T5936] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 159.191348][ T5936] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 159.202825][ T5898] usb 5-1: config 0 descriptor?? [ 159.269250][ T5936] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 159.289396][ T5936] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 159.329250][ T5936] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 159.372531][ T5936] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 159.401939][ T5936] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 159.466201][ T5936] usb 3-1: USB disconnect, device number 22 [ 159.487093][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.518369][ T5936] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 159.562274][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.589982][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.600336][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.649041][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 159.658856][ T5936] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 159.710281][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 159.721842][ T5936] keyspan 3-1:3.168: device disconnected [ 159.986674][ T6874] loop8: detected capacity change from 0 to 1 [ 160.023421][ T5988] Dev loop8: unable to read RDB block 1 [ 160.030674][ T5988] loop8: unable to read partition table [ 160.045846][ T5988] loop8: partition table beyond EOD, truncated [ 160.069520][ T6874] Dev loop8: unable to read RDB block 1 [ 160.085055][ T6874] loop8: unable to read partition table [ 160.103997][ T6874] loop8: partition table beyond EOD, truncated [ 160.110869][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 160.119771][ T6874] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 160.255813][ T6075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.280660][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.309949][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.321658][ T6075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.350144][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 160.395686][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.434258][ T24] usb 2-1: config 0 descriptor?? [ 160.638279][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 161.332984][ T6889] binder: 6887:6889 ioctl c018620c 200000000900 returned -1 [ 162.081218][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 162.126295][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 162.249323][ T24] usb 2-1: USB disconnect, device number 21 [ 162.752764][ T5899] usb 5-1: USB disconnect, device number 17 [ 162.758908][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 162.838939][ T5897] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 162.930463][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 162.955408][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.998876][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.037345][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.064730][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.091431][ T5897] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 163.172093][ T5897] usb 3-1: can't read configurations, error -71 [ 163.188764][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.201071][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.244337][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 163.254529][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.317108][ T6922] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 163.326486][ T6922] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 163.362639][ T24] usb 2-1: Manufacturer: syz [ 163.467345][ T24] usb 2-1: config 0 descriptor?? [ 164.087109][ T6933] trusted_key: encrypted_key: insufficient parameters specified [ 164.108789][ T24] rc_core: IR keymap rc-hauppauge not found [ 164.114745][ T24] Registered IR keymap rc-empty [ 164.154321][ T6933] netlink: 'syz.4.218': attribute type 4 has an invalid length. [ 164.169477][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 164.190484][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 164.249668][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 164.657450][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 164.837537][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 164.939079][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 164.988879][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.030536][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.069530][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.109948][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.148852][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.179623][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.239626][ T1221] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 165.248871][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.291231][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 165.334431][ T24] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 165.354174][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 165.409353][ T24] usb 2-1: USB disconnect, device number 22 [ 165.418812][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 165.442065][ T1221] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 165.464362][ T1221] usb 4-1: config 0 has no interface number 0 [ 165.481451][ T1221] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 165.509469][ T1221] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 165.538031][ T1221] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 165.566754][ T1221] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 165.585768][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.612424][ T1221] usb 4-1: Product: syz [ 165.622396][ T1221] usb 4-1: Manufacturer: syz [ 165.627439][ T1221] usb 4-1: SerialNumber: syz [ 165.660413][ T1221] usb 4-1: config 0 descriptor?? [ 165.675140][ T6953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 165.702832][ T1221] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.69/input/input14 [ 165.808953][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 165.891438][ T5191] bcm5974 4-1:0.69: could not read from device [ 165.939962][ T5191] bcm5974 4-1:0.69: could not read from device [ 166.005735][ T24] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 166.045568][ T5191] bcm5974 4-1:0.69: could not read from device [ 166.076397][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 166.099121][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.125015][ T1221] usb 4-1: USB disconnect, device number 24 [ 166.169243][ T5191] bcm5974 4-1:0.69: could not read from device [ 166.253760][ T24] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 166.402214][ T6981] netlink: 'syz.4.229': attribute type 21 has an invalid length. [ 166.448962][ T5936] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 166.598795][ T5936] usb 3-1: device descriptor read/64, error -71 [ 166.772946][ T6987] trusted_key: encrypted_key: master key parameter is missing [ 166.858914][ T5936] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 167.020042][ T5936] usb 3-1: device descriptor read/64, error -71 [ 167.088829][ T1221] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.158821][ T5936] usb usb3-port1: attempt power cycle [ 167.348887][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 167.358570][ T1221] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.375220][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.498561][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.552749][ T5936] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 167.575495][ T1221] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.670923][ T1221] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.692253][ T5936] usb 3-1: device descriptor read/8, error -71 [ 167.740736][ T1221] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.799205][ T1221] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.823095][ T1221] usb 6-1: Manufacturer: syz [ 167.847972][ T1221] usb 6-1: config 0 descriptor?? [ 167.972746][ T5936] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 168.028225][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 168.068600][ T5936] usb 3-1: device descriptor read/8, error -71 [ 168.204532][ T5936] usb usb3-port1: unable to enumerate USB device [ 168.378974][ T1221] rc_core: IR keymap rc-hauppauge not found [ 168.424505][ T1221] Registered IR keymap rc-empty [ 168.447090][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.508857][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.553304][ T1221] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 168.609793][ T1221] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 168.672243][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.708923][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 168.718788][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.747836][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.764886][ T5897] usb 2-1: USB disconnect, device number 23 [ 168.822034][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.877565][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.923353][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 168.941551][ T5899] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 168.978245][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.988403][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 169.021145][ T5899] usb 5-1: config 0 descriptor?? [ 169.035590][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 169.078936][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 169.093853][ T7032] syz.1.238 uses obsolete (PF_INET,SOCK_PACKET) [ 169.129383][ T1221] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 169.170298][ T1221] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 169.215960][ T1221] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 169.255269][ T1221] usb 6-1: USB disconnect, device number 2 [ 169.696939][ T5899] usb 5-1: Cannot set autoneg [ 169.721614][ T5899] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 169.728940][ T5936] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 169.787050][ T5899] usb 5-1: USB disconnect, device number 18 [ 169.845833][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.243'. [ 169.931217][ T5936] usb 3-1: device descriptor read/64, error -71 [ 169.937368][ T7060] loop7: detected capacity change from 0 to 16384 [ 170.009197][ T1221] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 170.178846][ T5936] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 170.192787][ T1221] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 170.228894][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.254374][ T1221] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 170.269148][ T5899] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 170.298977][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.322441][ T1221] usb 2-1: config 0 descriptor?? [ 170.350419][ T5936] usb 3-1: device descriptor read/64, error -71 [ 170.460831][ T5899] usb 4-1: config index 0 descriptor too short (expected 30049, got 36) [ 170.481849][ T5899] usb 4-1: config 116 has too many interfaces: 108, using maximum allowed: 32 [ 170.497870][ T5899] usb 4-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config [ 170.509236][ T5936] usb usb3-port1: attempt power cycle [ 170.515892][ T5899] usb 4-1: config 116 has 0 interfaces, different from the descriptor's value: 108 [ 170.528130][ T5899] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 170.542101][ T1221] ath6kl: Failed to submit usb control message: -71 [ 170.548740][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.548767][ T5899] usb 4-1: Product: syz [ 170.548783][ T5899] usb 4-1: Manufacturer: syz [ 170.548798][ T5899] usb 4-1: SerialNumber: syz [ 170.612263][ T1221] ath6kl: unable to send the bmi data to the device: -71 [ 170.637613][ T1221] ath6kl: Unable to send get target info: -71 [ 170.674486][ T1221] ath6kl: Failed to init ath6kl core: -71 [ 170.687330][ T1221] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 170.731316][ T1221] usb 2-1: USB disconnect, device number 24 [ 170.770903][ T7084] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.801788][ T7084] I/O error, dev loop7, sector 72 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 170.863428][ T7084] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0 [ 170.871431][ T5936] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 170.907990][ T7084] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 170.922392][ T5936] usb 3-1: device descriptor read/8, error -71 [ 170.952849][ T7084] I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.987749][ T7084] Buffer I/O error on dev loop7, logical block 6, async page read [ 171.048907][ T5899] usb 4-1: USB disconnect, device number 25 [ 171.190749][ T5936] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 171.228814][ T5898] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 171.235051][ T5936] usb 3-1: device descriptor read/8, error -71 [ 171.390857][ T5936] usb usb3-port1: unable to enumerate USB device [ 171.418941][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 171.440554][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.487424][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.488843][ T1221] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 171.522511][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 171.558749][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 171.584980][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.618206][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 171.644384][ T5898] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 171.663487][ T5898] usb 5-1: Manufacturer: syz [ 171.679935][ T5898] usb 5-1: config 0 descriptor?? [ 171.693948][ T1221] usb 2-1: Using ep0 maxpacket: 32 [ 171.718418][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.735925][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.770841][ T1221] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 171.789714][ T1221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.819226][ T1221] usb 2-1: config 0 descriptor?? [ 172.125899][ T5898] rc_core: IR keymap rc-hauppauge not found [ 172.156622][ T5898] Registered IR keymap rc-empty [ 172.164729][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.198866][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.260425][ T5898] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 172.282776][ T1221] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 172.296757][ T5898] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 172.352178][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.425092][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.478911][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.521842][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.537850][ T5925] usb 2-1: USB disconnect, device number 25 [ 172.594975][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.658917][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.669133][ T1221] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 172.698401][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.706736][ T7142] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.724576][ T7137] fido_id[7137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.750548][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.996877][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.050096][ T5898] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.104458][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 173.132517][ T5898] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 173.137975][ T1221] usb 6-1: unable to get BOS descriptor or descriptor too short [ 173.154095][ T1221] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 173.162394][ T1221] usb 6-1: config 7 has no interface number 0 [ 173.168500][ T1221] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 173.214633][ T5898] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.266373][ T5898] usb 5-1: USB disconnect, device number 19 [ 173.268576][ T1221] usb 6-1: config 7 interface 187 has no altsetting 0 [ 173.335359][ T1221] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 173.354969][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.425769][ T1221] usb 6-1: Product: syz [ 173.468765][ T1221] usb 6-1: Manufacturer: syz [ 173.484817][ T1221] usb 6-1: SerialNumber: syz [ 173.501210][ T7131] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 173.579831][ T7156] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 173.589402][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 173.597709][ T7161] mmap: syz.4.263 (7161) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.715126][ T1221] usb 6-1: Limiting number of CPorts to U8_MAX [ 173.745416][ T1221] usb 6-1: Unknown endpoint type found, address 0x07 [ 173.791527][ T1221] usb 6-1: Not enough endpoints found in device, aborting! [ 174.273151][ T7171] netlink: 165 bytes leftover after parsing attributes in process `syz.2.264'. [ 175.164122][ T5898] usb 6-1: USB disconnect, device number 4 [ 175.247346][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 175.296506][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 175.630453][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056b31000: rx timeout, send abort [ 175.640756][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b31000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 175.769912][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 175.999739][ T7206] mac80211_hwsim hwsim15 : renamed from wlan1 (while UP) [ 176.059084][ T1221] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 176.219704][ T1221] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 176.237846][ T1221] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 176.247409][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.338788][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 176.369909][ T1221] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 176.400949][ T1221] usb 3-1: No valid video chain found. [ 176.483606][ T1221] usb 3-1: USB disconnect, device number 33 [ 176.504907][ T24] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 176.521066][ T24] usb 6-1: config 0 has no interface number 0 [ 176.544439][ T24] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=32.00 [ 176.585104][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.624337][ T24] usb 6-1: Product: syz [ 176.637934][ T24] usb 6-1: Manufacturer: syz [ 176.647739][ T24] usb 6-1: SerialNumber: syz [ 176.670066][ T24] usb 6-1: config 0 descriptor?? [ 176.689704][ T24] ftdi_sio 6-1:0.12: FTDI USB Serial Device converter detected [ 176.699335][ T24] usb 6-1: Detected FT233HP [ 176.893261][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 176.905913][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 176.924656][ T24] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 176.944469][ T24] usb 6-1: USB disconnect, device number 5 [ 176.965139][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 176.971200][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 177.048536][ T24] ftdi_sio 6-1:0.12: device disconnected [ 177.179178][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 177.218643][ T5899] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 177.396280][ T5899] usb 5-1: config 8 has no interface number 0 [ 177.416042][ T5899] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 177.469073][ T5899] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 177.535782][ T5899] usb 5-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 177.580871][ T5899] usb 5-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.699035][ T5899] usb 5-1: config 8 interface 206 has no altsetting 0 [ 177.762552][ T5899] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 177.798560][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.876357][ T5899] usb 5-1: Product: syz [ 177.886952][ T5899] usb 5-1: Manufacturer: syz [ 177.905709][ T5899] usb 5-1: SerialNumber: syz [ 178.048806][ T5925] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 178.447632][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.469389][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.493270][ T5899] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 178.508797][ T1221] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 178.522580][ T5899] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 178.572094][ T5925] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.612697][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.639297][ T5925] usb 6-1: Product: syz [ 178.643519][ T5925] usb 6-1: Manufacturer: syz [ 178.668554][ T5925] usb 6-1: SerialNumber: syz [ 178.705911][ T5925] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 178.717813][ T9] usb 5-1: USB disconnect, device number 20 [ 178.733812][ T5936] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.742921][ T1221] usb 3-1: Using ep0 maxpacket: 8 [ 178.754529][ T1221] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 178.775553][ T1221] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.818061][ T1221] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.825833][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 178.874572][ T1221] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.895951][ T9] garmin_gps 5-1:8.206: device disconnected [ 178.928754][ T1221] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.978789][ T1221] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.025229][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.170450][ T24] usb 6-1: USB disconnect, device number 6 [ 179.262040][ T1221] usb 3-1: usb_control_msg returned -32 [ 179.267896][ T1221] usbtmc 3-1:16.0: can't read capabilities [ 179.609335][ T7265] netlink: 'syz.4.286': attribute type 21 has an invalid length. [ 179.624601][ T7266] usbtmc 3-1:16.0: control status returned 0 [ 179.639344][ T7265] netlink: 'syz.4.286': attribute type 6 has an invalid length. [ 179.647038][ T7265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.286'. [ 179.769299][ T5936] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 179.788543][ T5936] ath9k_htc: Failed to initialize the device [ 179.813675][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 179.854323][ T1221] usb 3-1: USB disconnect, device number 34 [ 179.913876][ T7277] netlink: 14564 bytes leftover after parsing attributes in process `syz.5.290'. [ 180.253518][ T7287] warning: `syz.3.292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.266809][ T7287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.292'. [ 180.329304][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'. [ 180.758789][ T5898] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 181.023316][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 181.088953][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 181.120361][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.147901][ T5898] usb 4-1: config 0 has no interfaces? [ 181.189261][ T5898] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 181.255655][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.313829][ T5898] usb 4-1: Manufacturer: 璼ච⹏皶ᅝၴ㻠ⲁ貥鿽緼蜅솴墨ꕈ돌褁뻺蒝㢠ᱵ๔ቼ⍘䶅㸛犅癍关홃鯝︼椋ꬕ퓣蘊뽥㴽㺊˼ష챟ᾆ돳精㏅ᦣ鏉蹩쏶磐嬭ꦋ걕鯢ꇮْ켖饋䀍䦾兮鏽漬 [ 181.396271][ T7318] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 181.460825][ T7318] syzkaller0: owner set to 0 [ 181.520226][ T5898] usb 4-1: SerialNumber: syz [ 181.541329][ T5898] usb 4-1: config 0 descriptor?? [ 181.803613][ T7331] netlink: 'syz.4.301': attribute type 27 has an invalid length. [ 181.851496][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.979328][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.105785][ T1212] usb 4-1: USB disconnect, device number 26 [ 182.337993][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.346300][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.984559][ T7350] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 183.359574][ T7356] FAULT_INJECTION: forcing a failure. [ 183.359574][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 183.466660][ T7356] CPU: 1 UID: 0 PID: 7356 Comm: syz.2.305 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 183.466691][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.466704][ T7356] Call Trace: [ 183.466713][ T7356] [ 183.466722][ T7356] dump_stack_lvl+0x189/0x250 [ 183.466773][ T7356] ? __pfx____ratelimit+0x10/0x10 [ 183.466805][ T7356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.466838][ T7356] ? __pfx__printk+0x10/0x10 [ 183.466866][ T7356] ? __pfx___might_resched+0x10/0x10 [ 183.466898][ T7356] ? fs_reclaim_acquire+0x7d/0x100 [ 183.466928][ T7356] should_fail_ex+0x414/0x560 [ 183.466960][ T7356] should_failslab+0xa8/0x100 [ 183.466984][ T7356] kmem_cache_alloc_noprof+0x73/0x3c0 [ 183.467016][ T7356] ? fuse_get_req+0x7b9/0x10b0 [ 183.467052][ T7356] fuse_get_req+0x7b9/0x10b0 [ 183.467095][ T7356] ? __pfx_fuse_get_req+0x10/0x10 [ 183.467126][ T7356] ? __pfx_autoremove_wake_function+0x10/0x10 [ 183.467155][ T7356] ? kernel_text_address+0xa5/0xe0 [ 183.467182][ T7356] ? __kernel_text_address+0xd/0x40 [ 183.467207][ T7356] ? unwind_get_return_address+0x4d/0x90 [ 183.467242][ T7356] __fuse_simple_request+0x2aa/0x18d0 [ 183.467283][ T7356] ? __pfx___fuse_simple_request+0x10/0x10 [ 183.467316][ T7356] ? stack_depot_save_flags+0x40/0x900 [ 183.467352][ T7356] ? kasan_save_track+0x4f/0x80 [ 183.467379][ T7356] ? kasan_save_track+0x3e/0x80 [ 183.467405][ T7356] ? kasan_save_free_info+0x46/0x50 [ 183.467429][ T7356] ? __kasan_slab_free+0x62/0x70 [ 183.467445][ T7356] ? kmem_cache_free+0x18f/0x400 [ 183.467462][ T7356] ? user_path_at+0x44/0x60 [ 183.467486][ T7356] ? __se_sys_chdir+0x91/0x280 [ 183.467506][ T7356] ? do_syscall_64+0xfa/0x3b0 [ 183.467531][ T7356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.467562][ T7356] fuse_permission+0x855/0xdc0 [ 183.467598][ T7356] ? __pfx_fuse_permission+0x10/0x10 [ 183.467637][ T7356] ? kasan_quarantine_put+0xdd/0x220 [ 183.467668][ T7356] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.467704][ T7356] ? user_path_at+0x44/0x60 [ 183.467733][ T7356] inode_permission+0x285/0x470 [ 183.467757][ T7356] ? __pfx_fuse_permission+0x10/0x10 [ 183.467785][ T7356] __se_sys_chdir+0x107/0x280 [ 183.467807][ T7356] ? __pfx___se_sys_chdir+0x10/0x10 [ 183.467827][ T7356] ? rcu_is_watching+0x15/0xb0 [ 183.467865][ T7356] ? do_syscall_64+0xbe/0x3b0 [ 183.467888][ T7356] do_syscall_64+0xfa/0x3b0 [ 183.467906][ T7356] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.467936][ T7356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.467957][ T7356] ? clear_bhb_loop+0x60/0xb0 [ 183.467981][ T7356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.468001][ T7356] RIP: 0033:0x7f0bb658e929 [ 183.468037][ T7356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.468054][ T7356] RSP: 002b:00007f0bb73a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 183.468082][ T7356] RAX: ffffffffffffffda RBX: 00007f0bb67b5fa0 RCX: 00007f0bb658e929 [ 183.468096][ T7356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 183.468108][ T7356] RBP: 00007f0bb73a4090 R08: 0000000000000000 R09: 0000000000000000 [ 183.468120][ T7356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.468131][ T7356] R13: 0000000000000000 R14: 00007f0bb67b5fa0 R15: 00007f0bb68dfa28 [ 183.468160][ T7356] [ 183.934409][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.949151][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.948740][ T7331] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.054722][ T7331] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.064684][ T7331] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.073945][ T7331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.453358][ T7417] bridge_slave_0: left allmulticast mode [ 186.474932][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.317'. [ 186.491477][ T7417] bridge_slave_0: left promiscuous mode [ 186.498017][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.531107][ T7417] bridge_slave_1: left allmulticast mode [ 186.536771][ T7417] bridge_slave_1: left promiscuous mode [ 186.543219][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.565239][ T7417] bond0: (slave bond_slave_0): Releasing backup interface [ 186.570458][ T43] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 186.585150][ T7417] bond0: (slave bond_slave_1): Releasing backup interface [ 186.607159][ T7417] team0: Port device team_slave_0 removed [ 186.620405][ T7417] team0: Port device team_slave_1 removed [ 186.628567][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.644512][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.657255][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.666530][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.677440][ T7424] FAULT_INJECTION: forcing a failure. [ 186.677440][ T7424] name failslab, interval 1, probability 0, space 0, times 0 [ 186.693959][ T7424] CPU: 0 UID: 0 PID: 7424 Comm: syz.4.318 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 186.693986][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.693999][ T7424] Call Trace: [ 186.694007][ T7424] [ 186.694016][ T7424] dump_stack_lvl+0x189/0x250 [ 186.694057][ T7424] ? __pfx____ratelimit+0x10/0x10 [ 186.694090][ T7424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.694122][ T7424] ? __pfx__printk+0x10/0x10 [ 186.694149][ T7424] ? __pfx___might_resched+0x10/0x10 [ 186.694187][ T7424] should_fail_ex+0x414/0x560 [ 186.694217][ T7424] should_failslab+0xa8/0x100 [ 186.694242][ T7424] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.694274][ T7424] ? getname_flags+0xb8/0x540 [ 186.694301][ T7424] getname_flags+0xb8/0x540 [ 186.694323][ T7424] ? dput+0x37/0x2b0 [ 186.694350][ T7424] user_path_at+0x24/0x60 [ 186.694378][ T7424] __se_sys_chdir+0x152/0x280 [ 186.694400][ T7424] ? __pfx___se_sys_chdir+0x10/0x10 [ 186.694420][ T7424] ? rcu_is_watching+0x15/0xb0 [ 186.694454][ T7424] ? do_syscall_64+0xbe/0x3b0 [ 186.694478][ T7424] do_syscall_64+0xfa/0x3b0 [ 186.694508][ T7424] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.694537][ T7424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.694556][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 186.694580][ T7424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.694622][ T7424] RIP: 0033:0x7f729878e929 [ 186.694640][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.694658][ T7424] RSP: 002b:00007f7299695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 186.694680][ T7424] RAX: ffffffffffffffda RBX: 00007f72989b5fa0 RCX: 00007f729878e929 [ 186.694696][ T7424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 186.694709][ T7424] RBP: 00007f7299695090 R08: 0000000000000000 R09: 0000000000000000 [ 186.694722][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.694734][ T7424] R13: 0000000000000000 R14: 00007f72989b5fa0 R15: 00007f7298adfa28 [ 186.694779][ T7424] [ 186.718993][ T7378] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 186.956890][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.034832][ T43] usb 2-1: can't read configurations, error -61 [ 187.179335][ T43] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 187.192001][ T7378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.216410][ T7378] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.236962][ T7378] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.248298][ T7378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.263272][ T7378] usb 6-1: SerialNumber: syz [ 187.389865][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.403512][ T43] usb 2-1: can't read configurations, error -61 [ 187.419826][ T43] usb usb2-port1: attempt power cycle [ 187.769558][ T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 187.802628][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.816043][ T43] usb 2-1: can't read configurations, error -61 [ 187.949115][ T43] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 188.073912][ T7378] usb 6-1: 0:2 : does not exist [ 188.082472][ T43] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.099490][ T43] usb 2-1: can't read configurations, error -61 [ 188.174197][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 188.179546][ T43] usb usb2-port1: unable to enumerate USB device [ 188.229197][ T7378] usb 6-1: USB disconnect, device number 7 [ 188.394650][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.408389][ T7465] netlink: 'syz.3.324': attribute type 21 has an invalid length. [ 188.418638][ T7465] netlink: 128 bytes leftover after parsing attributes in process `syz.3.324'. [ 188.430281][ T7465] netlink: 'syz.3.324': attribute type 6 has an invalid length. [ 188.468945][ T7465] netlink: 3 bytes leftover after parsing attributes in process `syz.3.324'. [ 188.748837][ T7378] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.175921][ T7378] usb 5-1: Using ep0 maxpacket: 16 [ 189.236189][ T7479] netlink: 182 bytes leftover after parsing attributes in process `syz.5.326'. [ 189.336197][ T7469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.406098][ T7469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.568797][ T1221] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.759520][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 189.783085][ T1221] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 189.833105][ T1221] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 189.848953][ T7343] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 189.864682][ T1221] usb 6-1: can't read configurations, error -61 [ 189.882276][ T7497] FAULT_INJECTION: forcing a failure. [ 189.882276][ T7497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.897958][ T7497] CPU: 0 UID: 0 PID: 7497 Comm: syz.2.330 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 189.897984][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.897996][ T7497] Call Trace: [ 189.898005][ T7497] [ 189.898013][ T7497] dump_stack_lvl+0x189/0x250 [ 189.898052][ T7497] ? __pfx____ratelimit+0x10/0x10 [ 189.898093][ T7497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.898126][ T7497] ? __pfx__printk+0x10/0x10 [ 189.898161][ T7497] should_fail_ex+0x414/0x560 [ 189.898194][ T7497] strncpy_from_user+0x36/0x290 [ 189.898226][ T7497] getname_flags+0xf3/0x540 [ 189.898256][ T7497] user_path_at+0x24/0x60 [ 189.898285][ T7497] __se_sys_chdir+0x152/0x280 [ 189.898308][ T7497] ? __pfx___se_sys_chdir+0x10/0x10 [ 189.898330][ T7497] ? rcu_is_watching+0x15/0xb0 [ 189.898367][ T7497] ? do_syscall_64+0xbe/0x3b0 [ 189.898390][ T7497] do_syscall_64+0xfa/0x3b0 [ 189.898409][ T7497] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.898440][ T7497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.898462][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 189.898488][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.898508][ T7497] RIP: 0033:0x7f0bb658e929 [ 189.898526][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.898543][ T7497] RSP: 002b:00007f0bb73a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 189.898566][ T7497] RAX: ffffffffffffffda RBX: 00007f0bb67b5fa0 RCX: 00007f0bb658e929 [ 189.898580][ T7497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 189.898594][ T7497] RBP: 00007f0bb73a4090 R08: 0000000000000000 R09: 0000000000000000 [ 189.898607][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.898619][ T7497] R13: 0000000000000000 R14: 00007f0bb67b5fa0 R15: 00007f0bb68dfa28 [ 189.898649][ T7497] [ 190.238921][ T7343] usb 2-1: Using ep0 maxpacket: 8 [ 190.250214][ T7343] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 190.259436][ T7343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.270196][ T7343] usb 2-1: config 0 descriptor?? [ 190.360738][ T1221] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.571340][ T7514] fuse: Unknown parameter 'gro3p_id00000000000000000000' [ 190.749018][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 190.771452][ T1221] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 190.817138][ T1221] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 190.825770][ T1221] usb 6-1: can't read configurations, error -61 [ 190.851690][ T1221] usb usb6-port1: attempt power cycle [ 190.864850][ T7517] netlink: 'syz.3.332': attribute type 3 has an invalid length. [ 191.228965][ T1221] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 191.273546][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 191.334808][ T1221] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 191.359248][ T1221] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 191.379413][ T1221] usb 6-1: can't read configurations, error -61 [ 191.448989][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 191.519665][ T1221] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 191.570157][ T1221] usb 6-1: Using ep0 maxpacket: 16 [ 191.614191][ T9] usb 4-1: config 2 has an invalid interface number: 10 but max is 0 [ 191.614235][ T1221] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 191.643200][ T9] usb 4-1: config 2 has an invalid interface descriptor of length 2, skipping [ 191.682630][ T9] usb 4-1: config 2 has no interface number 0 [ 191.691864][ T1221] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 191.718884][ T9] usb 4-1: config 2 interface 10 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 191.722712][ T1221] usb 6-1: can't read configurations, error -61 [ 191.766642][ T9] usb 4-1: config 2 interface 10 altsetting 12 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 191.766706][ T1221] usb usb6-port1: unable to enumerate USB device [ 191.817013][ T9] usb 4-1: config 2 interface 10 has no altsetting 0 [ 191.850750][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.0c [ 191.868048][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.908463][ T9] usb 4-1: Product: syz [ 191.912982][ T9] usb 4-1: Manufacturer: syz [ 191.928023][ T9] usb 4-1: SerialNumber: syz [ 192.130039][ T7378] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.152748][ T7378] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 192.180276][ T9] ums-isd200 4-1:2.10: USB Mass Storage device detected [ 192.181006][ T7378] usb 5-1: can't read configurations, error -71 [ 192.377862][ T9] usb 4-1: USB disconnect, device number 27 [ 192.806293][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.097804][ T7343] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.126804][ T7343] asix 2-1:0.0: probe with driver asix failed with error -71 [ 193.199096][ T43] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 193.199801][ T7343] usb 2-1: USB disconnect, device number 30 [ 193.303031][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.341'. [ 193.399867][ T43] usb 3-1: config 0 has an invalid interface number: 181 but max is 0 [ 193.408062][ T43] usb 3-1: config 0 has no interface number 0 [ 193.457430][ T43] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d5.70 [ 193.468521][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.488341][ T43] usb 3-1: Product: syz [ 193.498495][ T43] usb 3-1: Manufacturer: syz [ 193.508640][ T43] usb 3-1: SerialNumber: syz [ 193.538879][ T43] usb 3-1: config 0 descriptor?? [ 193.580101][ T43] kl5kusb105 3-1:0.181: KL5KUSB105D / PalmConnect converter detected [ 193.614539][ T43] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 193.682564][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'. [ 193.710752][ T7574] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 193.733732][ T7574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.759424][ T43] usb 3-1: USB disconnect, device number 35 [ 193.815063][ T43] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 193.875660][ T43] kl5kusb105 3-1:0.181: device disconnected [ 194.162657][ T7588] netlink: 'syz.1.348': attribute type 30 has an invalid length. [ 194.178364][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.184933][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.519131][ T43] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 194.588770][ T7343] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 194.679022][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 194.685831][ T43] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 194.695304][ T43] usb 5-1: config 0 has no interface number 0 [ 194.707043][ T43] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 194.716362][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.724614][ T43] usb 5-1: Product: syz [ 194.730351][ T43] usb 5-1: Manufacturer: syz [ 194.735026][ T43] usb 5-1: SerialNumber: syz [ 194.738910][ T7344] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 194.744152][ T43] usb 5-1: config 0 descriptor?? [ 194.754870][ T7343] usb 2-1: Using ep0 maxpacket: 8 [ 194.772946][ T7343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.785933][ T7343] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 7 [ 194.798631][ T7343] usb 2-1: config 1 interface 1 has no altsetting 0 [ 194.806023][ T43] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 194.814077][ T7343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.831781][ T7343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.840018][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 194.847253][ T7343] usb 2-1: Product: syz [ 194.855825][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.878522][ T7343] usb 2-1: Manufacturer: syz [ 194.884084][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.895418][ T7343] usb 2-1: SerialNumber: syz [ 194.901206][ T9] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 194.912800][ T7344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.923559][ T7344] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 194.937062][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.947713][ T7344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 194.960146][ T9] usb 3-1: config 0 descriptor?? [ 194.965477][ T7344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 194.983835][ T43] usb 5-1: USB disconnect, device number 23 [ 194.997850][ T7344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.021901][ T7344] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 195.033800][ T7344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 195.044571][ T7344] usb 4-1: Product: syz [ 195.049190][ T7344] usb 4-1: Manufacturer: syz [ 195.054118][ T7344] usb 4-1: SerialNumber: syz [ 195.075216][ T7344] usb 4-1: config 0 descriptor?? [ 195.174925][ T7343] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 195.195059][ T7343] usb 2-1: 2:1 : sample bitwidth 46 in over sample bytes 2 [ 195.218615][ T7343] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 195.275568][ T7343] usb 2-1: USB disconnect, device number 31 [ 195.288975][ T7344] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 195.307073][ T7344] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 195.365578][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 195.406343][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 195.414847][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 195.444427][ T9] usb 3-1: USB disconnect, device number 36 [ 195.491523][ T7344] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 195.504934][ T7344] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 195.528409][ T7344] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 195.693516][ T7344] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 195.752373][ T30] kauditd_printk_skb: 579 callbacks suppressed [ 195.752415][ T30] audit: type=1326 audit(1749495528.488:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7616 comm="syz.1.358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd87418e929 code=0x0 [ 195.840498][ T7620] ======================================================= [ 195.840498][ T7620] WARNING: The mand mount option has been deprecated and [ 195.840498][ T7620] and is ignored by this kernel. Remove the mand [ 195.840498][ T7620] option from the mount to silence this warning. [ 195.840498][ T7620] ======================================================= [ 195.895193][ T7622] netlink: 32 bytes leftover after parsing attributes in process `syz.5.360'. [ 195.938924][ T7343] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 196.101736][ T7343] usb 5-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22 [ 196.127711][ T7343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.151087][ T7343] usb 5-1: config 0 descriptor?? [ 196.166019][ T7343] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 196.236583][ T7638] loop7: detected capacity change from 0 to 16384 [ 196.309147][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 196.366697][ T7343] gspca_sn9c20x: Write register 1000 failed -71 [ 196.382078][ T7343] gspca_sn9c20x: Device initialization failed [ 196.397103][ T7343] gspca_sn9c20x 5-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 196.431306][ T7343] usb 5-1: USB disconnect, device number 24 [ 196.501372][ T43] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 196.514713][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.524170][ T43] usb 6-1: Product: syz [ 196.529058][ T43] usb 6-1: Manufacturer: syz [ 196.533936][ T43] usb 6-1: SerialNumber: syz [ 196.549066][ T43] usb 6-1: config 0 descriptor?? [ 196.731594][ T7344] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 196.881052][ T7344] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 197.015915][ T7344] usb 4-1: USB disconnect, device number 28 [ 197.051648][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.089276][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.248881][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 197.325577][ T7344] usb 6-1: USB disconnect, device number 12 [ 197.455143][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.706456][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.764982][ T43] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 197.788270][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.816627][ T43] usb 3-1: Product: syz [ 197.841572][ T43] usb 3-1: Manufacturer: syz [ 197.871769][ T43] usb 3-1: SerialNumber: syz [ 197.881256][ T43] usb 3-1: config 0 descriptor?? [ 197.905153][ T43] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 197.919395][ T43] usb 3-1: No valid video chain found. [ 198.249563][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 198.270795][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 198.344877][ T7675] erspan0: entered promiscuous mode [ 198.355600][ T7675] erspan0: left promiscuous mode [ 198.478778][ T7344] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 198.631848][ T7344] usb 6-1: Using ep0 maxpacket: 32 [ 198.889732][ T7344] usb 6-1: unable to get BOS descriptor or descriptor too short [ 198.890649][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 198.905969][ T7344] usb 6-1: no configurations [ 198.918346][ T7344] usb 6-1: can't read configurations, error -22 [ 199.128828][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 199.147898][ T43] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 199.164623][ T43] usb 5-1: config 0 has no interface number 0 [ 199.180283][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.195879][ T43] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 199.218382][ T43] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.316861][ T43] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.330344][ T43] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 199.339727][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.354262][ T43] usb 5-1: config 0 descriptor?? [ 199.380431][ T43] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 199.989839][ T7695] Cannot find del_set index 0 as target [ 200.233989][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.405553][ T7343] usb 3-1: USB disconnect, device number 37 [ 200.412400][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.038929][ T7343] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 201.252065][ T7343] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 201.288525][ T7343] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 201.322400][ T7343] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 201.333761][ T7343] usb 3-1: config 1 interface 0 has no altsetting 0 [ 201.352863][ T7343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.362159][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.388223][ T7343] usb 3-1: Product: syz [ 201.419718][ T7343] usb 3-1: Manufacturer: syz [ 201.451921][ T7343] usb 3-1: SerialNumber: syz [ 201.519104][ T43] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 201.702575][ T43] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 201.712571][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.738978][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.790163][ T7344] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 201.836286][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.844045][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.898349][ T43] usb 6-1: config 0 descriptor?? [ 201.983232][ T43] usb 6-1: selecting invalid altsetting 3 [ 202.000685][ T1221] usb 5-1: USB disconnect, device number 25 [ 202.008264][ T7344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.029589][ T43] comedi comedi0: could not set alternate setting 3 in high speed [ 202.037465][ T43] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 202.047097][ T7344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.079487][ T1221] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 202.082819][ T7344] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.100050][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.108326][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.120104][ T43] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 202.126484][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.155120][ T7344] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.186600][ T43] usb 6-1: USB disconnect, device number 15 [ 202.207349][ T7344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.251038][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.265415][ T7344] usb 2-1: config 0 descriptor?? [ 202.295702][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.325292][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.339961][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.368979][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.376440][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.389162][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.396722][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.404765][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.409595][ T7360] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 202.416659][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.432513][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.447147][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.454926][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.459685][ T7343] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 202.463003][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.480118][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.487628][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.497186][ T7378] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 202.508638][ T7343] usb 3-1: USB disconnect, device number 38 [ 202.526147][ T7378] hid-generic FFF9:0000:0203.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 202.573782][ T5988] udevd[5988]: setting mode of /dev/bus/usb/003/038 to 020664 failed: No such file or directory [ 202.603335][ T5988] udevd[5988]: setting owner of /dev/bus/usb/003/038 to uid=0, gid=0 failed: No such file or directory [ 202.618979][ T7360] usb 4-1: Using ep0 maxpacket: 16 [ 202.629025][ T7360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.659187][ T7360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.692982][ T7344] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 202.701290][ T7360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.738373][ T7731] fido_id[7731]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.755437][ T7344] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 202.773802][ T7360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 202.816670][ T7360] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.874338][ T7360] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.884807][ T7735] fuse: Bad value for 'user_id' [ 202.895638][ T7735] fuse: Bad value for 'user_id' [ 202.906934][ T7360] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.926090][ T7360] usb 4-1: Manufacturer: syz [ 202.951008][ T7360] usb 4-1: config 0 descriptor?? [ 203.108522][ T7710] hfs: unable to load iocharset "io#harsetcard#" [ 203.118800][ T43] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 203.298729][ T7360] rc_core: IR keymap rc-hauppauge not found [ 203.304707][ T7360] Registered IR keymap rc-empty [ 203.311282][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 203.324575][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.338562][ T43] usb 6-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.359316][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.390644][ T43] usb 6-1: config 1 interface 0 has no altsetting 0 [ 203.410006][ T43] usb 6-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.40 [ 203.419476][ T7378] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 203.431688][ T7360] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 203.442334][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.468997][ T43] usb 6-1: Product: Я [ 203.480878][ T43] usb 6-1: Manufacturer: Ѕ [ 203.496902][ T43] usb 6-1: SerialNumber: 錴痋厖䇺灚㋏Ἒ찰잂歯崺쯽ﶕ鴯柃瘥懪皘ŋ韎쭆ᴦ댦ƺඁ婟֥썒⫻攜诳궉疕鎵ꩯꮶൟ쁽밫癅撨봍㢕㎷繆擙霁慵鑉ᣦ錐⌸絚䜅䑋䀹㸿澛磯㧇欪琽뙒킡섙ਾ㉽ꈨঋ껪ᢪ暈첞飗勸꾒풁槵囏椞샏禫眼⍶폺᧗䑩䒍ģꢠ᥅珺ﻤ [ 203.529774][ T7360] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 203.588189][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.639192][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.711555][ T1221] usb 2-1: USB disconnect, device number 32 [ 203.721635][ T7378] usb 5-1: Using ep0 maxpacket: 16 [ 203.742804][ T7378] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.748116][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.786123][ T7378] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.811163][ T7736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 203.818885][ T7343] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 203.832044][ T7378] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 203.832262][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.890390][ T7378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.896333][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.938880][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 203.950147][ T7378] usb 5-1: config 0 descriptor?? [ 203.978890][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.008977][ T7343] usb 3-1: Using ep0 maxpacket: 16 [ 204.018817][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.031916][ T7343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.036001][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.046800][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.060857][ T7343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.078530][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.107875][ T7343] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.66 [ 204.114648][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.126730][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.135823][ T7360] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 204.148613][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.167078][ T7343] usb 3-1: Product: syz [ 204.175081][ T7378] usb 5-1: string descriptor 0 read error: -71 [ 204.180489][ T7343] usb 3-1: Manufacturer: syz [ 204.193896][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.204000][ T7360] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 204.218755][ T7343] usb 3-1: SerialNumber: syz [ 204.230215][ T7378] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 204.240376][ T7360] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 204.272695][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.296097][ T5191] bcm5974 5-1:0.0: could not read from device [ 204.314416][ T5191] bcm5974 5-1:0.0: could not read from device [ 204.319101][ T5191] bcm5974 5-1:0.0: could not read from device [ 204.340949][ T5191] bcm5974 5-1:0.0: could not read from device [ 204.353864][ T7378] usb 5-1: USB disconnect, device number 26 [ 204.381723][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.423824][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.473921][ T5191] bcm5974 5-1:0.0: could not read from device [ 204.657488][ T43] usbhid 6-1:1.0: can't add hid device: -71 [ 204.676740][ T43] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 204.748093][ T43] usb 6-1: USB disconnect, device number 16 [ 204.880787][ T7343] usb 3-1: unknown interface protocol 0x56, assuming v1 [ 204.895201][ T7343] usb 3-1: cannot find UAC_HEADER [ 204.950841][ T7343] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.976355][ T7343] usb 3-1: USB disconnect, device number 39 [ 205.046148][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.139020][ T7360] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 205.252726][ T43] usb 4-1: USB disconnect, device number 29 [ 205.315573][ T7360] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.345286][ T7360] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.387292][ T7360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.444414][ T7360] usb 5-1: config 0 descriptor?? [ 205.483721][ T7360] pwc: Askey VC010 type 2 USB webcam detected. [ 205.628148][ T7805] netlink: 27 bytes leftover after parsing attributes in process `syz.2.398'. [ 205.719140][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 205.882486][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 205.889973][ T7360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 205.899384][ T7378] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 205.910193][ T43] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 205.921653][ T43] usb 4-1: config 0 has no interface number 0 [ 205.928351][ T7360] pwc: recv_control_msg error -32 req 02 val 2700 [ 205.935323][ T43] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 205.946579][ T7360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 205.956609][ T7360] pwc: recv_control_msg error -32 req 04 val 1000 [ 205.960529][ T43] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 205.974986][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.979065][ T7360] pwc: recv_control_msg error -32 req 04 val 1300 [ 206.000398][ T43] usb 4-1: Product: syz [ 206.004748][ T43] usb 4-1: Manufacturer: syz [ 206.004770][ T7360] pwc: recv_control_msg error -32 req 04 val 1400 [ 206.021204][ T43] usb 4-1: SerialNumber: syz [ 206.042483][ T43] usb 4-1: config 0 descriptor?? [ 206.049191][ T7798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.051916][ T7360] pwc: recv_control_msg error -32 req 02 val 2000 [ 206.081604][ T7378] usb 3-1: Using ep0 maxpacket: 16 [ 206.091960][ T7360] pwc: recv_control_msg error -32 req 02 val 2100 [ 206.103221][ T7378] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.105226][ T7360] pwc: recv_control_msg error -32 req 04 val 1500 [ 206.127734][ T7818] netlink: 48 bytes leftover after parsing attributes in process `syz.1.400'. [ 206.146911][ T7378] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.189436][ T7360] pwc: recv_control_msg error -32 req 02 val 2500 [ 206.199791][ T7783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.223371][ T7360] pwc: recv_control_msg error -32 req 02 val 2400 [ 206.229147][ T7378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 206.251411][ T7783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.273845][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.292742][ T7822] netlink: 'syz.5.401': attribute type 39 has an invalid length. [ 206.298882][ T7378] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 206.319486][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.338756][ T7378] usb 3-1: Product: syz [ 206.343023][ T7378] usb 3-1: Manufacturer: syz [ 206.357369][ T7798] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 206.411087][ T7378] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 206.446549][ T7360] pwc: recv_control_msg error -71 req 02 val 2600 [ 206.474643][ T7360] pwc: recv_control_msg error -71 req 02 val 2900 [ 206.506651][ T7360] pwc: recv_control_msg error -71 req 02 val 2800 [ 206.522787][ T43] net1080 4-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 82:c2:90:f1:96:c1 [ 206.535743][ T7360] pwc: recv_control_msg error -71 req 04 val 1100 [ 206.570941][ T7360] pwc: recv_control_msg error -71 req 04 val 1200 [ 206.609510][ T43] usb 3-1: USB disconnect, device number 40 [ 206.610008][ T7360] pwc: Registered as video103. [ 206.654506][ T7360] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 206.733974][ T7360] usb 5-1: USB disconnect, device number 27 [ 206.814260][ T7833] veth1_to_bridge: entered allmulticast mode [ 207.538947][ T7858] veth0_to_batadv: entered promiscuous mode [ 207.632426][ T7858] veth0_to_batadv: left promiscuous mode [ 208.395852][ T7344] usb 4-1: USB disconnect, device number 30 [ 208.417105][ T7344] net1080 4-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 208.418939][ T5925] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 208.609195][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 208.640827][ T5925] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 208.680869][ T5925] usb 5-1: config 0 has no interface number 0 [ 208.721952][ T5925] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 208.773411][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.802056][ T5925] usb 5-1: Product: syz [ 208.818764][ T5925] usb 5-1: Manufacturer: syz [ 208.838726][ T5925] usb 5-1: SerialNumber: syz [ 208.880210][ T5925] usb 5-1: config 0 descriptor?? [ 208.915306][ T5925] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 209.198870][ T7344] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 209.349292][ T7344] usb 4-1: device descriptor read/64, error -71 [ 209.434466][ T7890] sctp: [Deprecated]: syz.2.413 (pid 7890) Use of int in maxseg socket option. [ 209.434466][ T7890] Use struct sctp_assoc_value instead [ 209.515578][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 209.610581][ T7344] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 209.782746][ T7344] usb 4-1: device descriptor read/64, error -71 [ 209.942591][ T7344] usb usb4-port1: attempt power cycle [ 210.115487][ T5925] usb 5-1: qt2_attach - failed to power on unit: -71 [ 210.143051][ T5925] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 210.207946][ T5925] usb 5-1: USB disconnect, device number 28 [ 210.320180][ T7344] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 210.379547][ T7344] usb 4-1: device descriptor read/8, error -71 [ 210.599469][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 210.631218][ T7344] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 210.688417][ T7344] usb 4-1: device descriptor read/8, error -71 [ 210.822951][ T7344] usb usb4-port1: unable to enumerate USB device [ 210.849181][ T7343] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 211.178850][ T7343] usb 2-1: Using ep0 maxpacket: 16 [ 211.193117][ T7343] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.215715][ T7343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.236470][ T7343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.277579][ T7343] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.292301][ T7343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.322812][ T7343] usb 2-1: Product: syz [ 211.386676][ T7343] usb 2-1: Manufacturer: syz [ 211.556569][ T7343] usb 2-1: SerialNumber: syz [ 211.598806][ T7378] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 211.790222][ T7378] usb 6-1: config 0 has no interfaces? [ 211.804378][ T7378] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.813865][ T7378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.834723][ T7378] usb 6-1: Product: syz [ 211.847514][ T7378] usb 6-1: Manufacturer: syz [ 211.872107][ T7378] usb 6-1: SerialNumber: syz [ 211.905500][ T7378] usb 6-1: config 0 descriptor?? [ 211.997122][ T7343] usb 2-1: 0:2 : does not exist [ 212.162666][ T7924] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.421'. [ 212.175944][ T7924] program syz.5.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.185798][ T7924] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 212.397834][ T30] audit: type=1326 audit(1749495545.118:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 212.545007][ T30] audit: type=1326 audit(1749495545.118:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 212.685074][ T30] audit: type=1326 audit(1749495545.118:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 212.800672][ T7343] usb 2-1: USB disconnect, device number 33 [ 212.809024][ T30] audit: type=1326 audit(1749495545.118:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 212.898619][ T30] audit: type=1326 audit(1749495545.118:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 212.995234][ T30] audit: type=1326 audit(1749495545.118:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 213.129350][ T30] audit: type=1326 audit(1749495545.118:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 213.237328][ T30] audit: type=1326 audit(1749495545.118:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 213.305382][ T30] audit: type=1326 audit(1749495545.118:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 213.444695][ T30] audit: type=1326 audit(1749495545.118:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.4.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 213.823880][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.427'. [ 213.910438][ T7343] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 214.168761][ T7343] usb 4-1: Using ep0 maxpacket: 32 [ 214.190648][ T7343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.360750][ T7343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.414442][ T7343] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 214.473035][ T7343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.739816][ T7343] usb 4-1: config 0 descriptor?? [ 215.217255][ T7344] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 215.295930][ T7343] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 215.398940][ T7344] usb 5-1: Using ep0 maxpacket: 16 [ 215.417731][ T7344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.448858][ T7360] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 215.488768][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 215.516062][ T7344] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 215.534170][ T7378] usb 6-1: USB disconnect, device number 17 [ 215.592609][ T7942] netlink: 52 bytes leftover after parsing attributes in process `syz.3.425'. [ 215.613320][ T7344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.660346][ T7344] usb 5-1: config 0 descriptor?? [ 215.678928][ T7360] usb 3-1: Using ep0 maxpacket: 16 [ 215.700156][ T7360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.763902][ T7360] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 215.782392][ T7360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.802027][ T7360] usb 3-1: Product: syz [ 215.817817][ T7360] usb 3-1: Manufacturer: syz [ 215.832335][ T7360] usb 3-1: SerialNumber: syz [ 215.867899][ T7360] usb 3-1: config 0 descriptor?? [ 215.888139][ T7360] hub 3-1:0.0: bad descriptor, ignoring hub [ 215.900840][ T7360] hub 3-1:0.0: probe with driver hub failed with error -5 [ 215.927466][ T7360] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 216.105082][ T7344] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 216.126928][ T7344] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 216.141373][ T7344] uclogic 0003:5543:0005.0007: unknown main item tag 0x0 [ 216.177610][ T7344] uclogic 0003:5543:0005.0007: No inputs registered, leaving [ 216.213469][ T7344] uclogic 0003:5543:0005.0007: hidraw1: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 216.306910][ T7344] usb 5-1: USB disconnect, device number 29 [ 216.308899][ T1221] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 216.465626][ T7981] fido_id[7981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 216.731365][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 216.731382][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 216.731423][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 216.742756][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 216.759096][ T7378] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 217.075049][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 217.125602][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 217.610323][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 217.828781][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 217.836272][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 217.883758][ T43] usb 6-1: config 2 has an invalid interface number: 9 but max is 0 [ 217.909176][ T43] usb 6-1: config 2 has no interface number 0 [ 217.994575][ T43] usb 6-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32 [ 218.005372][ T43] usb 6-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 218.017505][ T43] usb 6-1: config 2 interface 9 has no altsetting 0 [ 218.026725][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97 [ 218.036759][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.047037][ T8006] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 218.089452][ T43] usb 6-1: Product: syz [ 218.122710][ T43] usb 6-1: Manufacturer: syz [ 218.127362][ T43] usb 6-1: SerialNumber: syz [ 218.136358][ T7999] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 218.366261][ T43] pn533_usb 6-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint [ 218.397089][ T5925] usb 4-1: USB disconnect, device number 35 [ 218.434872][ T43] usb 6-1: USB disconnect, device number 19 [ 218.653055][ T8014] vivid-004: disconnect [ 218.826355][ T8022] vivid-004: reconnect [ 218.870632][ T5925] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 219.061944][ T5925] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 219.079552][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.101068][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.118567][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.147343][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.169668][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 219.189654][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.236009][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.253566][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.265627][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.311250][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.325963][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.345536][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.360371][ T43] usb 5-1: device descriptor read/64, error -71 [ 219.452599][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.498582][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.526254][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.581233][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.599822][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.609434][ T7343] usb 3-1: USB disconnect, device number 41 [ 219.630569][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.656375][ T43] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 219.674862][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.684848][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.698004][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.712505][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.735439][ T5925] usb 4-1: config 0 has an invalid descriptor of length 127, skipping remainder of the config [ 219.747097][ T5925] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.787265][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.810008][ T5925] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.6b [ 219.820172][ T43] usb 5-1: device descriptor read/64, error -71 [ 219.889092][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.929120][ T43] usb usb5-port1: attempt power cycle [ 219.942761][ T5925] usb 4-1: config 0 descriptor?? [ 219.960312][ T5925] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 220.268993][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 220.302150][ T43] usb 5-1: device descriptor read/8, error -71 [ 220.718850][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 220.740217][ T43] usb 5-1: device descriptor read/8, error -71 [ 220.879135][ T43] usb usb5-port1: unable to enumerate USB device [ 221.398810][ T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 221.428078][ T7360] usb 4-1: USB disconnect, device number 36 [ 221.581474][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 221.591762][ T9] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.625499][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 221.647893][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.40 [ 221.658768][ T7343] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 221.670443][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.717211][ T9] usb 2-1: Product: syz [ 221.729320][ T9] usb 2-1: Manufacturer: Ⰺ [ 221.747599][ T9] usb 2-1: SerialNumber: syz [ 221.822504][ T7343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.834130][ T7343] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.852837][ T7343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.879561][ T7343] usb 3-1: config 0 descriptor?? [ 221.892655][ T7343] pwc: Askey VC010 type 2 USB webcam detected. [ 221.988830][ T7360] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 222.150907][ T8056] input: syz1 as /devices/virtual/input/input24 [ 222.185254][ T7360] usb 4-1: Using ep0 maxpacket: 8 [ 222.192327][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.205032][ T7360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 222.217574][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.260024][ T7360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.288800][ T7360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.312372][ T7343] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.330969][ T9] usbhid 2-1:1.0: can't add hid device: -71 [ 222.339484][ T7360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 222.366026][ T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 222.374342][ T7343] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.392777][ T7360] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 222.403745][ T7343] pwc: recv_control_msg error -32 req 02 val 2c00 [ 222.414868][ T9] usb 2-1: USB disconnect, device number 35 [ 222.424691][ T7343] pwc: recv_control_msg error -32 req 04 val 1000 [ 222.443614][ T7360] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 222.455324][ T7343] pwc: recv_control_msg error -32 req 04 val 1300 [ 222.470344][ T7360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.515059][ T7360] usb 4-1: config 0 descriptor?? [ 222.537473][ T8053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 222.630233][ T8059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.683476][ T7343] pwc: recv_control_msg error -32 req 02 val 2000 [ 222.691825][ T7343] pwc: recv_control_msg error -32 req 02 val 2100 [ 222.703305][ T7343] pwc: recv_control_msg error -32 req 04 val 1500 [ 222.711580][ T7343] pwc: recv_control_msg error -32 req 02 val 2500 [ 222.729959][ T7343] pwc: recv_control_msg error -32 req 02 val 2400 [ 222.743438][ T7343] pwc: recv_control_msg error -32 req 02 val 2600 [ 222.754489][ T7343] pwc: recv_control_msg error -32 req 02 val 2900 [ 222.763353][ T7343] pwc: recv_control_msg error -32 req 02 val 2800 [ 222.835447][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.914129][ T5846] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.920992][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.929134][ T5846] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.936002][ T5846] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.942913][ T5846] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.950058][ T5846] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.985550][ T7343] pwc: recv_control_msg error -71 req 04 val 1200 [ 223.009041][ T7343] pwc: Registered as video103. [ 223.060942][ T7343] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 223.100517][ T7343] usb 3-1: USB disconnect, device number 42 [ 223.161974][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.220472][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.320962][ T8070] program syz.4.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.476126][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 223.483748][ T7378] usb 4-1: USB disconnect, device number 37 [ 224.389334][ T7343] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 224.518815][ T7378] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 224.554540][ T7343] usb 3-1: device descriptor read/64, error -71 [ 224.698748][ T7378] usb 4-1: Using ep0 maxpacket: 32 [ 224.723588][ T7378] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 224.753588][ T7378] usb 4-1: config 4 has no interface number 0 [ 224.776157][ T7378] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.818746][ T7378] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.838906][ T7343] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 224.848758][ T7378] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.877048][ T7378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.953365][ T7378] hub 4-1:4.128: USB hub found [ 225.038903][ T7343] usb 3-1: device descriptor read/64, error -71 [ 225.151583][ T7378] hub 4-1:4.128: 2 ports detected [ 225.156720][ T7378] hub 4-1:4.128: Using single TT (err -22) [ 225.189312][ T7343] usb usb3-port1: attempt power cycle [ 225.399786][ T7378] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 225.502384][ T7378] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 225.563323][ T7378] usb 4-1: USB disconnect, device number 38 [ 225.609649][ T7343] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 225.639271][ T7343] usb 3-1: device descriptor read/8, error -71 [ 225.902258][ T7343] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 225.958882][ T7360] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 225.975304][ T7343] usb 3-1: device descriptor read/8, error -71 [ 226.099497][ T7343] usb usb3-port1: unable to enumerate USB device [ 226.169395][ T7360] usb 2-1: Using ep0 maxpacket: 16 [ 226.178023][ T7360] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 226.248996][ T7360] usb 2-1: config 253 has no interface number 0 [ 226.258855][ T7360] usb 2-1: config 253 interface 184 has no altsetting 0 [ 226.282240][ T7360] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 226.291740][ T7360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.299898][ T7360] usb 2-1: Product: syz [ 226.309725][ T7360] usb 2-1: Manufacturer: syz [ 226.335669][ T7360] usb 2-1: SerialNumber: syz [ 226.348796][ T7378] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 226.371533][ T7360] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 226.510458][ T7378] usb 4-1: Using ep0 maxpacket: 8 [ 226.552585][ T7378] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 226.563782][ T7378] usb 4-1: config 127 has no interface number 1 [ 226.587904][ T7378] usb 4-1: config 127 interface 171 has no altsetting 0 [ 226.595506][ T7360] usb 2-1: USB disconnect, device number 36 [ 226.596072][ T7378] usb 4-1: config 127 interface 0 has no altsetting 0 [ 226.633097][ T7378] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 226.680023][ T7378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.692652][ T7378] usb 4-1: Product: syz [ 226.710409][ T7378] usb 4-1: Manufacturer: syz [ 226.718533][ T7378] usb 4-1: SerialNumber: syz [ 226.963796][ T7378] xr_serial 4-1:127.171: xr_serial converter detected [ 227.028962][ T7378] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 227.057806][ T7378] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 227.088053][ T7378] usb 4-1: USB disconnect, device number 39 [ 227.127253][ T7378] xr_serial 4-1:127.171: device disconnected [ 227.259266][ T7360] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 227.398877][ T7360] usb 5-1: device descriptor read/64, error -71 [ 227.431439][ T8105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.471'. [ 227.695495][ T7360] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 227.702831][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 227.734563][ T8112] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.861700][ T7360] usb 5-1: device descriptor read/64, error -71 [ 227.974203][ T8119] loop6: detected capacity change from 0 to 524287999 [ 227.984078][ T7360] usb usb5-port1: attempt power cycle [ 228.000579][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.021641][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.045113][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.079253][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.090199][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.098241][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.106927][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.115484][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.149010][ T8119] ldm_validate_partition_table(): Disk read failed. [ 228.164400][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.179077][ T8119] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.188897][ T8119] Dev loop6: unable to read RDB block 0 [ 228.194798][ T8119] loop6: unable to read partition table [ 228.212113][ T8120] fuse: Unknown parameter '' [ 228.269619][ T8119] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 228.360355][ T7360] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 228.413551][ T7360] usb 5-1: device descriptor read/8, error -71 [ 228.718768][ T7360] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 228.718837][ T5925] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 228.797761][ T7360] usb 5-1: device descriptor read/8, error -71 [ 228.909214][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 228.921508][ T5925] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.929170][ T7360] usb usb5-port1: unable to enumerate USB device [ 228.963086][ T5925] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.026907][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.037035][ T5925] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 229.057601][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.099204][ T5925] usb 4-1: config 0 descriptor?? [ 229.109335][ T7343] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 229.272520][ T7343] usb 2-1: Using ep0 maxpacket: 32 [ 229.310347][ T7343] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 229.333910][ T5925] usbhid 4-1:0.0: can't add hid device: -71 [ 229.340716][ T5925] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 229.369011][ T5925] usb 4-1: USB disconnect, device number 40 [ 229.372994][ T7343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.396311][ T7343] usb 2-1: config 0 has no interface number 0 [ 229.402651][ T7343] usb 2-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.417860][ T7343] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 229.427412][ T7343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.458815][ T7343] usb 2-1: Product: syz [ 229.463016][ T7343] usb 2-1: Manufacturer: syz [ 229.480910][ T7343] usb 2-1: SerialNumber: syz [ 229.516331][ T7343] usb 2-1: config 0 descriptor?? [ 230.653240][ T5925] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 230.768934][ T7360] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 230.776595][ T7361] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 230.830022][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 230.846250][ T5925] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 230.873592][ T5925] usb 5-1: config 0 has no interface number 0 [ 230.899344][ T5925] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 230.909576][ T5925] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 230.921088][ T5925] usb 5-1: config 0 interface 41 has no altsetting 0 [ 230.930660][ T5925] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 230.940792][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.967963][ T5925] usb 5-1: Product: syz [ 230.979864][ T7360] usb 3-1: Using ep0 maxpacket: 16 [ 230.984277][ T5925] usb 5-1: Manufacturer: syz [ 230.988031][ T7361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 231.006049][ T7361] usb 4-1: not running at top speed; connect to a high speed hub [ 231.022072][ T7360] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 231.025009][ T5925] usb 5-1: SerialNumber: syz [ 231.048498][ T5925] usb 5-1: config 0 descriptor?? [ 231.059802][ T8143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.072250][ T7361] usb 4-1: config 6 has an invalid interface number: 30 but max is 0 [ 231.085213][ T7360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.094667][ T7361] usb 4-1: config 6 has no interface number 0 [ 231.104898][ T7360] usb 3-1: Product: syz [ 231.109199][ T7361] usb 4-1: config 6 interface 30 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 231.120983][ T7360] usb 3-1: Manufacturer: syz [ 231.123669][ T8143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.132846][ T7360] usb 3-1: SerialNumber: syz [ 231.138403][ T7361] usb 4-1: config 6 interface 30 altsetting 0 endpoint 0x7 has invalid maxpacket 40968, setting to 64 [ 231.165406][ T7361] usb 4-1: config 6 interface 30 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.179876][ T7360] r8152-cfgselector 3-1: Unknown version 0x0000 [ 231.189037][ T7360] r8152-cfgselector 3-1: config 0 descriptor?? [ 231.197680][ T7361] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11 [ 231.234662][ T7361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.275505][ T7361] usb 4-1: Product: syz [ 231.294540][ T7361] usb 4-1: Manufacturer: syz [ 231.314750][ T7361] usb 4-1: SerialNumber: syz [ 231.353250][ T8145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.406448][ T8143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.414184][ T8143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.843667][ T5925] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 232.019704][ T7343] usb 2-1: USB disconnect, device number 37 [ 232.141126][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.369155][ T7361] usbtest 4-1:6.30: usb test device [ 233.377656][ T7361] usbtest 4-1:6.30: full-speed {control in/out iso-out} tests (+alt) [ 233.432087][ T7361] usb 4-1: USB disconnect, device number 41 [ 233.906370][ T5925] r8152-cfgselector 3-1: USB disconnect, device number 47 [ 234.051092][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.076503][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.098875][ T7378] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 234.227352][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 234.251085][ T7378] usb 2-1: device descriptor read/64, error -71 [ 234.264307][ T7361] usb 5-1: USB disconnect, device number 38 [ 234.519027][ T7378] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 234.670048][ T7378] usb 2-1: device descriptor read/64, error -71 [ 234.678842][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 234.758821][ T7360] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 234.809461][ T7378] usb usb2-port1: attempt power cycle [ 234.850931][ T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 234.866371][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.887354][ T9] usb 3-1: config 0 descriptor?? [ 234.961852][ T7360] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 1023 [ 234.988807][ T7360] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 234.990935][ T1212] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 235.001671][ T7360] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 0 [ 235.023730][ T7360] usb 5-1: config 0 interface 0 has no altsetting 0 [ 235.035870][ T7360] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 235.048177][ T7360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.058022][ T7360] usb 5-1: Product: syz [ 235.083500][ T7360] usb 5-1: Manufacturer: syz [ 235.088203][ T7360] usb 5-1: SerialNumber: syz [ 235.143286][ T9] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 235.148826][ T7378] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 235.154926][ T7360] usb 5-1: config 0 descriptor?? [ 235.172355][ T1212] usb 6-1: Using ep0 maxpacket: 16 [ 235.181203][ T8190] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 235.211057][ T1212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.246666][ T1212] usb 6-1: config 0 interface 0 has no altsetting 0 [ 235.269496][ T7378] usb 2-1: device descriptor read/8, error -71 [ 235.284930][ T1212] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 235.299008][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.333684][ T1212] usb 6-1: Product: syz [ 235.348184][ T1212] usb 6-1: Manufacturer: syz [ 235.369839][ T1212] usb 6-1: SerialNumber: syz [ 235.397774][ T1212] usb 6-1: config 0 descriptor?? [ 235.440050][ T1212] hub 6-1:0.0: bad descriptor, ignoring hub [ 235.477510][ T5925] usb 3-1: USB disconnect, device number 48 [ 235.496398][ T1212] hub 6-1:0.0: probe with driver hub failed with error -5 [ 235.512867][ T7378] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 235.560069][ T1212] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 235.590811][ T7378] usb 2-1: device descriptor read/8, error -71 [ 235.642530][ T13] usb 6-1: Failed to submit usb control message: -71 [ 235.661723][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 235.669477][ T13] usb 6-1: unable to get target info from device [ 235.676075][ T13] usb 6-1: could not get target info (-71) [ 235.683282][ T13] usb 6-1: could not probe fw (-71) [ 235.690377][ T1212] usb 6-1: USB disconnect, device number 20 [ 235.729561][ T7378] usb usb2-port1: unable to enumerate USB device [ 235.978763][ T5925] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 236.116382][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.3.502'. [ 236.279568][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 236.302803][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 236.315524][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.503'. [ 236.328189][ T5925] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 236.332017][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.503'. [ 236.340008][ T5925] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.365818][ T5925] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 236.375493][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 236.383981][ T5925] usb 3-1: Product: syz [ 236.388346][ T5925] usb 3-1: Manufacturer: syz [ 236.396743][ T5925] usb 3-1: SerialNumber: syz [ 236.421647][ T5925] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 236.528860][ T7378] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 236.633723][ T8219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.642784][ T8219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.653910][ T9] usb 3-1: USB disconnect, device number 49 [ 236.659974][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 236.672813][ T7378] usb 4-1: device descriptor read/64, error -71 [ 236.687594][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 236.821437][ T7360] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 236.921953][ T7378] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 236.992555][ T7360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.003783][ T7360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.013631][ T7360] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 237.022868][ T7360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.039513][ T7360] usb 6-1: config 0 descriptor?? [ 237.060145][ T7378] usb 4-1: device descriptor read/64, error -71 [ 237.179441][ T7378] usb usb4-port1: attempt power cycle [ 237.526624][ T7360] usbhid 6-1:0.0: can't add hid device: -71 [ 237.533184][ T7360] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 237.599282][ T7378] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 237.610062][ T7360] usb 6-1: USB disconnect, device number 21 [ 237.679454][ T7378] usb 4-1: device descriptor read/8, error -71 [ 237.683599][ T7343] usb 5-1: USB disconnect, device number 39 [ 237.938899][ T7378] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 237.961428][ T8244] program syz.2.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.017164][ T7378] usb 4-1: device descriptor read/8, error -71 [ 238.139795][ T7378] usb usb4-port1: unable to enumerate USB device [ 239.428808][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 239.428827][ T30] audit: type=1400 audit(1749495572.148:624): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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audit: type=1326 audit(1749495572.488:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729872ab19 code=0x7ffc0000 [ 239.846425][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.993985][ T30] audit: type=1326 audit(1749495572.608:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 240.079162][ T30] audit: type=1326 audit(1749495572.608:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 240.101820][ T30] audit: type=1326 audit(1749495572.608:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729872ab19 code=0x7ffc0000 [ 240.158742][ T30] audit: type=1326 audit(1749495572.608:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 240.275374][ T30] audit: type=1326 audit(1749495572.618:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729872ab19 code=0x7ffc0000 [ 240.379119][ T30] audit: type=1326 audit(1749495572.618:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729872ab19 code=0x7ffc0000 [ 240.392975][ T8309] ------------[ cut here ]------------ [ 240.406962][ T8309] memcpy: detected field-spanning write (size 20) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 240.421275][ T8309] WARNING: CPU: 1 PID: 8309 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 240.430837][ T8309] Modules linked in: [ 240.434912][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.1.526 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 240.445178][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.455338][ T8309] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 240.461063][ T8309] Code: cc e8 40 81 a4 f7 c6 05 2c 2e 6f 05 01 90 b9 10 00 00 00 48 c7 c7 a0 5d 9f 8c 4c 89 fe 48 c7 c2 c0 64 9f 8c e8 2d 2c 68 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 0e 81 a4 f7 44 89 e6 48 c7 c7 c0 d8 [ 240.480763][ T8309] RSP: 0018:ffffc9001d5d6b30 EFLAGS: 00010246 [ 240.486940][ T8309] RAX: 23962acde2440e00 RBX: ffff888056a68c50 RCX: 0000000000080000 [ 240.495059][ T8309] RDX: ffffc9000c0eb000 RSI: 000000000001df83 RDI: 000000000001df84 [ 240.497370][ T30] audit: type=1326 audit(1749495572.618:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729878e929 code=0x7ffc0000 [ 240.503092][ T8309] RBP: 0000000000000007 R08: 0000000000000003 R09: 0000000000000004 [ 240.503112][ T8309] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: 0000000000000014 [ 240.503129][ T8309] R13: 1ffff92003abad89 R14: ffffc9001d5d6c64 R15: 0000000000000014 [ 240.503146][ T8309] FS: 00007fd8750776c0(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 240.503166][ T8309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.503194][ T8309] CR2: 00007fd875076f98 CR3: 0000000077ada000 CR4: 00000000003526f0 [ 240.503214][ T8309] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.525355][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.587246][ T8309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.595312][ T8309] Call Trace: [ 240.598619][ T8309] [ 240.601618][ T8309] ip6_route_info_create+0x4af/0x860 [ 240.607087][ T8309] ip6_route_add+0x28/0x190 [ 240.611680][ T8309] addrconf_prefix_route+0x210/0x2c0 [ 240.617010][ T8309] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 240.622947][ T8309] ? addrconf_get_prefix_route+0xf2/0x760 [ 240.628742][ T8309] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 240.634936][ T8309] ? in6_dev_get+0x1a/0x290 [ 240.639543][ T8309] ? in6_dev_get+0x1a/0x290 [ 240.644088][ T8309] addrconf_prefix_rcv+0x60b/0x1610 [ 240.648322][ T30] audit: type=1326 audit(1749495572.618:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8294 comm="syz.4.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f729872ab19 code=0x7ffc0000 [ 240.649429][ T8309] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 240.649498][ T8309] ndisc_router_discovery+0x2015/0x35f0 [ 240.649560][ T8309] ? ndisc_router_discovery+0x6f0/0x35f0 [ 240.649588][ T8309] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 240.649634][ T8309] ? skb_checksum+0x7c1/0x8c0 [ 240.649684][ T8309] ? ndisc_rcv+0x4aa/0x730 [ 240.649714][ T8309] icmpv6_rcv+0x139a/0x1c80 [ 240.671755][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.715020][ T8309] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 240.720517][ T8309] ? __pfx_icmpv6_rcv+0x10/0x10 [ 240.725417][ T8309] ip6_protocol_deliver_rcu+0xe08/0x15c0 [ 240.731186][ T8309] ip6_input_finish+0xde/0x190 [ 240.736013][ T8309] NF_HOOK+0x30c/0x3a0 [ 240.740217][ T8309] ? __pfx_ip6_input_finish+0x10/0x10 [ 240.745655][ T8309] ? NF_HOOK+0x9a/0x3a0 [ 240.749896][ T8309] ? __pfx_NF_HOOK+0x10/0x10 [ 240.754569][ T8309] ? __pfx_ip6_input_finish+0x10/0x10 [ 240.760038][ T8309] ip6_input+0x16a/0x270 [ 240.764334][ T8309] ? ip6_input+0x23/0x270 [ 240.768751][ T8309] ip6_mc_input+0x79a/0xbe0 [ 240.773348][ T8309] ? __pfx_ip6_mc_input+0x10/0x10 [ 240.778422][ T8309] ? skb_dst+0x71/0xd0 [ 240.782683][ T8309] ? ip6_rcv_finish+0x29a/0x2d0 [ 240.787620][ T8309] NF_HOOK+0x30c/0x3a0 [ 240.791790][ T8309] ? skb_orphan+0x4c/0xd0 [ 240.796172][ T8309] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 240.801630][ T8309] ? NF_HOOK+0x9a/0x3a0 [ 240.805859][ T8309] ? __pfx_NF_HOOK+0x10/0x10 [ 240.810552][ T8309] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 240.815818][ T8309] __netif_receive_skb+0xd3/0x380 [ 240.820944][ T8309] ? netif_receive_skb+0x115/0x790 [ 240.826105][ T8309] netif_receive_skb+0x1cb/0x790 [ 240.831130][ T8309] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 240.837019][ T8309] ? __pfx_netif_receive_skb+0x10/0x10 [ 240.842595][ T8309] ? tun_rx_batched+0x160/0x730 [ 240.847502][ T8309] tun_rx_batched+0x1b9/0x730 [ 240.852272][ T8309] ? __lock_acquire+0xab9/0xd20 [ 240.857209][ T8309] ? __pfx_tun_rx_batched+0x10/0x10 [ 240.862514][ T8309] ? tun_get_user+0x2549/0x3ce0 [ 240.867434][ T8309] tun_get_user+0x298e/0x3ce0 [ 240.872222][ T8309] ? tun_get_user+0x693/0x3ce0 [ 240.877040][ T8309] ? tun_get_user+0x2549/0x3ce0 [ 240.882017][ T8309] ? aa_file_perm+0x11f/0xed0 [ 240.886767][ T8309] ? __pfx_tun_get_user+0x10/0x10 [ 240.891875][ T8309] ? aa_file_perm+0x3e7/0xed0 [ 240.896614][ T8309] ? page_table_check_set+0x18d/0x730 [ 240.902096][ T8309] ? ref_tracker_alloc+0x318/0x460 [ 240.907277][ T8309] ? __lock_acquire+0xab9/0xd20 [ 240.912223][ T8309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 240.917745][ T8309] ? tun_get+0x1c/0x2f0 [ 240.922028][ T8309] ? tun_get+0x1c/0x2f0 [ 240.926324][ T8309] ? tun_get+0x1c/0x2f0 [ 240.930564][ T8309] tun_chr_write_iter+0x113/0x200 [ 240.935635][ T8309] vfs_write+0x548/0xa90 [ 240.939981][ T8309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 240.945580][ T8309] ? __pfx_vfs_write+0x10/0x10 [ 240.950449][ T8309] ? __fget_files+0x2a/0x420 [ 240.955115][ T8309] ksys_write+0x145/0x250 [ 240.955357][ T8317] netlink: 'syz.5.525': attribute type 20 has an invalid length. [ 240.959513][ T8309] ? __pfx_ksys_write+0x10/0x10 [ 240.959545][ T8309] ? do_syscall_64+0xbe/0x3b0 [ 240.959573][ T8309] do_syscall_64+0xfa/0x3b0 [ 240.959594][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.959629][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.959651][ T8309] ? clear_bhb_loop+0x60/0xb0 [ 240.959680][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.959702][ T8309] RIP: 0033:0x7fd87418d3df [ 241.007972][ T8309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 241.027716][ T8309] RSP: 002b:00007fd875077000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 241.036242][ T8309] RAX: ffffffffffffffda RBX: 00007fd8743b5fa0 RCX: 00007fd87418d3df [ 241.044291][ T8309] RDX: 00000000000000ae RSI: 0000200000000000 RDI: 00000000000000c8 [ 241.052353][ T8309] RBP: 00007fd874210b39 R08: 0000000000000000 R09: 0000000000000000 [ 241.060415][ T8309] R10: 00000000000000ae R11: 0000000000000293 R12: 0000000000000000 [ 241.068441][ T8309] R13: 0000000000000001 R14: 00007fd8743b5fa0 R15: 00007fd8744dfa28 [ 241.076525][ T8309] [ 241.079618][ T8309] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.086930][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.1.526 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 241.097111][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.107200][ T8309] Call Trace: [ 241.110503][ T8309] [ 241.113452][ T8309] dump_stack_lvl+0x99/0x250 [ 241.118066][ T8309] ? __asan_memcpy+0x40/0x70 [ 241.122681][ T8309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.127903][ T8309] ? __pfx__printk+0x10/0x10 [ 241.132517][ T8309] panic+0x2db/0x790 [ 241.136441][ T8309] ? __pfx_panic+0x10/0x10 [ 241.140891][ T8309] __warn+0x31b/0x4b0 [ 241.144892][ T8309] ? ipv6_addr_prefix+0x124/0x1d0 [ 241.149961][ T8309] ? ipv6_addr_prefix+0x124/0x1d0 [ 241.155009][ T8309] report_bug+0x2be/0x4f0 [ 241.159363][ T8309] ? ipv6_addr_prefix+0x124/0x1d0 [ 241.164404][ T8309] ? ipv6_addr_prefix+0x124/0x1d0 [ 241.169448][ T8309] ? ipv6_addr_prefix+0x126/0x1d0 [ 241.174496][ T8309] handle_bug+0x84/0x160 [ 241.178759][ T8309] exc_invalid_op+0x1a/0x50 [ 241.183297][ T8309] asm_exc_invalid_op+0x1a/0x20 [ 241.188159][ T8309] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 241.193815][ T8309] Code: cc e8 40 81 a4 f7 c6 05 2c 2e 6f 05 01 90 b9 10 00 00 00 48 c7 c7 a0 5d 9f 8c 4c 89 fe 48 c7 c2 c0 64 9f 8c e8 2d 2c 68 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 0e 81 a4 f7 44 89 e6 48 c7 c7 c0 d8 [ 241.213439][ T8309] RSP: 0018:ffffc9001d5d6b30 EFLAGS: 00010246 [ 241.219524][ T8309] RAX: 23962acde2440e00 RBX: ffff888056a68c50 RCX: 0000000000080000 [ 241.227512][ T8309] RDX: ffffc9000c0eb000 RSI: 000000000001df83 RDI: 000000000001df84 [ 241.235500][ T8309] RBP: 0000000000000007 R08: 0000000000000003 R09: 0000000000000004 [ 241.243485][ T8309] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: 0000000000000014 [ 241.251469][ T8309] R13: 1ffff92003abad89 R14: ffffc9001d5d6c64 R15: 0000000000000014 [ 241.259476][ T8309] ip6_route_info_create+0x4af/0x860 [ 241.264786][ T8309] ip6_route_add+0x28/0x190 [ 241.269308][ T8309] addrconf_prefix_route+0x210/0x2c0 [ 241.274607][ T8309] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 241.280442][ T8309] ? addrconf_get_prefix_route+0xf2/0x760 [ 241.286177][ T8309] ? __pfx_addrconf_get_prefix_route+0x10/0x10 [ 241.292345][ T8309] ? in6_dev_get+0x1a/0x290 [ 241.296856][ T8309] ? in6_dev_get+0x1a/0x290 [ 241.301386][ T8309] addrconf_prefix_rcv+0x60b/0x1610 [ 241.306618][ T8309] ? __pfx_addrconf_prefix_rcv+0x10/0x10 [ 241.312277][ T8309] ndisc_router_discovery+0x2015/0x35f0 [ 241.317851][ T8309] ? ndisc_router_discovery+0x6f0/0x35f0 [ 241.323493][ T8309] ? __pfx_ndisc_router_discovery+0x10/0x10 [ 241.329420][ T8309] ? skb_checksum+0x7c1/0x8c0 [ 241.334141][ T8309] ? ndisc_rcv+0x4aa/0x730 [ 241.338572][ T8309] icmpv6_rcv+0x139a/0x1c80 [ 241.343093][ T8309] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 241.348402][ T8309] ? __pfx_icmpv6_rcv+0x10/0x10 [ 241.353258][ T8309] ip6_protocol_deliver_rcu+0xe08/0x15c0 [ 241.358933][ T8309] ip6_input_finish+0xde/0x190 [ 241.363725][ T8309] NF_HOOK+0x30c/0x3a0 [ 241.367814][ T8309] ? __pfx_ip6_input_finish+0x10/0x10 [ 241.373207][ T8309] ? NF_HOOK+0x9a/0x3a0 [ 241.377383][ T8309] ? __pfx_NF_HOOK+0x10/0x10 [ 241.382004][ T8309] ? __pfx_ip6_input_finish+0x10/0x10 [ 241.387419][ T8309] ip6_input+0x16a/0x270 [ 241.391681][ T8309] ? ip6_input+0x23/0x270 [ 241.396035][ T8309] ip6_mc_input+0x79a/0xbe0 [ 241.400567][ T8309] ? __pfx_ip6_mc_input+0x10/0x10 [ 241.405622][ T8309] ? skb_dst+0x71/0xd0 [ 241.409711][ T8309] ? ip6_rcv_finish+0x29a/0x2d0 [ 241.414581][ T8309] NF_HOOK+0x30c/0x3a0 [ 241.418669][ T8309] ? skb_orphan+0x4c/0xd0 [ 241.423023][ T8309] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 241.428238][ T8309] ? NF_HOOK+0x9a/0x3a0 [ 241.432420][ T8309] ? __pfx_NF_HOOK+0x10/0x10 [ 241.437035][ T8309] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 241.442266][ T8309] __netif_receive_skb+0xd3/0x380 [ 241.447312][ T8309] ? netif_receive_skb+0x115/0x790 [ 241.452448][ T8309] netif_receive_skb+0x1cb/0x790 [ 241.457412][ T8309] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 241.463244][ T8309] ? __pfx_netif_receive_skb+0x10/0x10 [ 241.468733][ T8309] ? tun_rx_batched+0x160/0x730 [ 241.473648][ T8309] tun_rx_batched+0x1b9/0x730 [ 241.478354][ T8309] ? __lock_acquire+0xab9/0xd20 [ 241.483240][ T8309] ? __pfx_tun_rx_batched+0x10/0x10 [ 241.488470][ T8309] ? tun_get_user+0x2549/0x3ce0 [ 241.493351][ T8309] tun_get_user+0x298e/0x3ce0 [ 241.498049][ T8309] ? tun_get_user+0x693/0x3ce0 [ 241.502836][ T8309] ? tun_get_user+0x2549/0x3ce0 [ 241.507720][ T8309] ? aa_file_perm+0x11f/0xed0 [ 241.512427][ T8309] ? __pfx_tun_get_user+0x10/0x10 [ 241.517475][ T8309] ? aa_file_perm+0x3e7/0xed0 [ 241.522174][ T8309] ? page_table_check_set+0x18d/0x730 [ 241.527573][ T8309] ? ref_tracker_alloc+0x318/0x460 [ 241.532707][ T8309] ? __lock_acquire+0xab9/0xd20 [ 241.537581][ T8309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 241.543067][ T8309] ? tun_get+0x1c/0x2f0 [ 241.547271][ T8309] ? tun_get+0x1c/0x2f0 [ 241.551460][ T8309] ? tun_get+0x1c/0x2f0 [ 241.555640][ T8309] tun_chr_write_iter+0x113/0x200 [ 241.560705][ T8309] vfs_write+0x548/0xa90 [ 241.565064][ T8309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 241.570710][ T8309] ? __pfx_vfs_write+0x10/0x10 [ 241.575503][ T8309] ? __fget_files+0x2a/0x420 [ 241.580228][ T8309] ksys_write+0x145/0x250 [ 241.584587][ T8309] ? __pfx_ksys_write+0x10/0x10 [ 241.589453][ T8309] ? do_syscall_64+0xbe/0x3b0 [ 241.594147][ T8309] do_syscall_64+0xfa/0x3b0 [ 241.598680][ T8309] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.603925][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.609998][ T8309] ? clear_bhb_loop+0x60/0xb0 [ 241.614707][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.620625][ T8309] RIP: 0033:0x7fd87418d3df [ 241.625060][ T8309] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 241.644686][ T8309] RSP: 002b:00007fd875077000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 241.653129][ T8309] RAX: ffffffffffffffda RBX: 00007fd8743b5fa0 RCX: 00007fd87418d3df [ 241.661129][ T8309] RDX: 00000000000000ae RSI: 0000200000000000 RDI: 00000000000000c8 [ 241.669123][ T8309] RBP: 00007fd874210b39 R08: 0000000000000000 R09: 0000000000000000 [ 241.677104][ T8309] R10: 00000000000000ae R11: 0000000000000293 R12: 0000000000000000 [ 241.685082][ T8309] R13: 0000000000000001 R14: 00007fd8743b5fa0 R15: 00007fd8744dfa28 [ 241.693080][ T8309] [ 241.696461][ T8309] Kernel Offset: disabled [ 241.700798][ T8309] Rebooting in 86400 seconds..