last executing test programs: 8.987290269s ago: executing program 1 (id=458): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') read$FUSE(r4, &(0x7f0000000b40)={0x2020}, 0x2020) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x80000000, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x2000000000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c1200003f000701feffffff00000000017c0000040042800c00018006000600800a0000451202803f12148004", @ANYRES8=r6, @ANYRES8=r6], 0x126c}, 0x1, 0x0, 0x0, 0x4048051}, 0x40480c0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000001300)=[{0x7ff, 0x810, 0x0, 0x0}], 0x1}) 8.185643813s ago: executing program 0 (id=462): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x120, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="040910bc995fce1c8107070400", 0xd) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0xa976, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 7.991802556s ago: executing program 0 (id=463): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) gettid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, r4, 0x7, &(0x7f0000019080)=""/33}) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r9, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/55, 0x37}], 0x1}, 0x20003ff1}], 0x1, 0x183, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r6, 0x2afd, 0x308b, 0xc, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) 7.68438588s ago: executing program 1 (id=464): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf25030000002800018008000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)={0x30, 0x29, 0x1, {0x7fd0, [{{0x0, 0x0, 0x4}, 0x1004, 0xfe, 0xd, './file0/file0'}]}}, 0x30) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r3, &(0x7f00000000c0)=[{0x5, 0x1, 0x0, 0x0, @time, {}, {}, @result}], 0x1c) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf25030000002800018008000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000440)={0x30, 0x29, 0x1, {0x7fd0, [{{0x0, 0x0, 0x4}, 0x1004, 0xfe, 0xd, './file0/file0'}]}}, 0x30) (async) 6.606156739s ago: executing program 3 (id=469): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000000001010400000000141a00000200001024000180140001801a000100e00000010b000300"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r2 = socket(0x10, 0x2, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @void, @ipv4=@generic={{0x5, 0x4, 0x2, 0x6, 0x1c, 0x64, 0x0, 0xb, 0x32, 0x0, @rand_addr=0x64010104, @empty}, "3297e3ba0fa8a2e7"}}, 0x20) 5.856195725s ago: executing program 1 (id=474): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080)=0x26, 0x4) (async) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x10, 0x8000, 0xe, 0x81, {{0xa, 0x4, 0x0, 0x3d, 0x28, 0x68, 0x0, 0x2, 0x29, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x13, 0x34, [@loopback, @empty, @local, @multicast1]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'vxcan1\x00'}) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x30, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x401c, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff8}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa94ea09066dbd88a800008100000700dd600000000000c01faefcf20000000000000000000000000000000000000000000000000000000000000000000059f76865c337196ec3727fbac87ba28887ada8d3310ed6d6d1cfe5c64f552b8237a478b776b002276dd40740249fa7229a6f82b7d70cc87c3164c0a7179f03d0bf061e644368cbd30ec27f71d931f98ce4865a2c2ba734854bdcd1838cb3f52533a2aad8c9ef491ddb5dd66d7adb4c340e4acf835fedd0583ca81a9779a48f37579a241b32779ba7a6bc22786847558ed632a24f5d"], 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000028601080000000000000000000000000900020073797a320000000005000100060000000500050007000000050004000000000010000300686173683a69702c6d616300"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) write$FUSE_INIT(r3, 0x0, 0x1f) (async) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = syz_io_uring_setup(0x498, &(0x7f0000000380)={0x0, 0x7079, 0x400, 0x1, 0x29d}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) sched_setattr(0x0, 0x0, 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0xc, 0x4000, @fd_index=0x2, 0x6, 0x0, 0x0, 0x10, 0x0, {0x2}}) io_uring_enter(r8, 0x351a, 0x100, 0x0, 0x0, 0x0) 5.796601947s ago: executing program 1 (id=475): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x0, 0x2, 0x35, @mcast2, @loopback, 0x1, 0x10, 0x5, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r1, 0x40, 0x7800, 0xd, 0x7fff, {{0x8, 0x4, 0x3, 0x1, 0x20, 0x68, 0x0, 0x1, 0x2f, 0x0, @empty, @private=0xa010100, {[@end, @timestamp={0x44, 0x8, 0xa6, 0x0, 0x0, [0x9]}]}}}}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5d114b6e, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x1ff}, 0x8) sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x6, @private1, 0x4}, 0x1c) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x9, {{0xa, 0x4e24, 0x10001, @mcast1}}, {{0xa, 0x4e24, 0xd, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}}}, 0x108) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xf, 0x4}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000002) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x0, 0x4000) 5.519400967s ago: executing program 1 (id=476): fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x0) r3 = dup2(r2, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000001c0)={0x14000000}) read$FUSE(0xffffffffffffffff, &(0x7f0000004940)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r5 = syz_open_dev$media(&(0x7f0000000080), 0x2e17, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r7, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r7, 0x0, 0x9d4, 0x1}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000300)='0\x00', 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100de72ff073100"/20], 0x28}}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) 5.22437628s ago: executing program 3 (id=477): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x225e, 0x2, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000076c0)={0x14}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048854) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.047069621s ago: executing program 3 (id=478): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)=0x10001) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r3, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001, 0x7}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10000) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 0', 0x1b) read$dsp(r0, 0x0, 0x4c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) 4.787479961s ago: executing program 3 (id=479): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471"], 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x40, 0x32315659, 0x2, @discrete={0x40610f3e, 0xffffffff}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000600)="0f01c866baa100ed0f350f20e035010000000f22e0420f015f02c4a16c5f0783160726670f01cb66ba4100b8e1722676ef26363644d99dfd7f0000", 0x3b}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$FICLONE(r5, 0x40049409, r0) 4.576399151s ago: executing program 1 (id=480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x129341) fremovexattr(r4, &(0x7f0000000500)=@known='system.posix_acl_access\x00') recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x100010, r5, 0x1d46f000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) 4.358183299s ago: executing program 4 (id=481): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffff63fe}]}}]}, 0x3c}}, 0x2000d02d) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000100)={0x3, 0x6, 0x0, 0x6, 'syz1\x00', 0x731}) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) 3.610258898s ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000001800000000b702000014000000b7030000000000008500000005000000bf090000000000006609010000000000060000000b000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000500000056010000060000002c93000000000000b5030000000000008500000076837a701d0000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.448458633s ago: executing program 4 (id=483): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r0, 0x402, 0x20) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1", 0x1d}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x6}, {&(0x7f0000000200)=""/101, 0x61}], 0x2}, 0x2120) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) r4 = syz_io_uring_setup(0x1f25, &(0x7f0000001080)={0x0, 0x43989, 0x2, 0x2, 0xed, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.441489635s ago: executing program 0 (id=484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000240)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000240)=@x86={0x0, 0xe, 0x3, 0x0, 0x1, 0x4, 0xee, 0x5e, 0x3, 0x4, 0x2, 0x0, 0x0, 0x72, 0x7, 0x7, 0x4, 0x5, 0x1, '\x00', 0x5, 0x7}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x8340}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.21560976s ago: executing program 4 (id=485): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = userfaultfd(0x80000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)=@attr_other={0x0, 0x9, 0x4, &(0x7f0000000080)=0x4}) ioctl$FITHAW(r1, 0xc0045878) r3 = syz_io_uring_complete(0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x453, 0x200, 0x70bd2a, 0x25dfdbfb, "77b92b4ff1bea01b2a3fd769cb294496c9ee6f2aa11a3c24deef7ea0bf682b69ff8494e63a1174de78e3b99c4e45cb4af21bc5423e86629363645b6c107981d0fb770c84363e9b07dbd1f7ebf90e15035331001b53f552ae0d22ed4c60090163e56a50a64dd8b607eba36fd31a44f350dd4dbb3025c5c6d513121c964f7c7b126db920279486ffe641e005181ad7c0d2db002ebfaf30d21039b00063b75af48788b8184907013ffb29c0852527375b867a521f1c01ae88455afa6ed05e51781ae5602e6e8bb958c9df1334d8a9195742de98b3e9ef14e251b344352380e88ed2714189003b3e66d90c3c8d9ec34f5739bc0e2fe50d5324c3ee", ["", "", "", "", "", ""]}, 0x10c}, 0x1, 0x0, 0x0, 0x90}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5a1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8036d79a220e96}, 0x4040804) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000440)={0x6, {0x1, 0x5, 0x7, 0x5e00000}}) recvfrom(r0, &(0x7f0000000480)=""/167, 0xa7, 0x40002000, &(0x7f0000000540)=@un=@file={0x1, './file0\x00'}, 0x80) write$cgroup_pressure(r3, &(0x7f00000005c0)={'full', 0x20, 0xf, 0x20, 0x800000000000}, 0x2f) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000640), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xa, 0x200, 0x24, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x0, 0x1, {{0x34, 0x4, 0x2, 0x4, 0xd0, 0x67, 0x0, 0xf, 0x5e, 0x0, @multicast1, @private=0xa010102, {[@timestamp={0x44, 0x10, 0xaa, 0x0, 0x7, [0x0, 0xfff, 0xfffffff9]}, @noop, @ssrr={0x89, 0xf, 0x1b, [@rand_addr=0x64010101, @loopback, @multicast1]}, @lsrr={0x83, 0x1f, 0x90, [@multicast2, @multicast1, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x4d, 0x0, 0x0, [0xff, 0x200, 0x19, 0x7, 0x8]}, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b54}, {@remote, 0x9b}, {@broadcast, 0x7}, {@empty, 0x3}]}, @lsrr={0x83, 0xf, 0x2a, [@rand_addr=0x64010100, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2a, 0xfffffffffffffffc, [{0x0, 0xa, "d6f3766db5057b9c"}, {0x2, 0x8, "c499a4f9deb0"}, {0x0, 0x12, "6ffbc29f37c968d4b2e8db642c46c6bb"}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000008c0)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x7fb3, 0x2, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x94, 0x4, "07c3"}, @generic={0x44, 0x10, "7b344024e576c20e1a2c2cba62f1"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) getpeername$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0xfffff078, 0x17, @private0, @mcast1, 0x0, 0x10, 0x0, 0x661}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000f80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b00)={0x410, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x240, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x6, 0x3, 0x80}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x4, 0x8, 0x7, 0xa4}, {0x88, 0x8, 0x2, 0xfffffffa}, {0x1, 0x2, 0xfd, 0x80000000}, {0x5, 0x7f, 0xab, 0x68b95926}, {0x0, 0x3, 0x8, 0xffff}, {0x2, 0x6, 0x0, 0x7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb9}}}]}}, {{0x8, 0x1, r11}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8, 0x6, r13}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000fc0)=@x86={0x80, 0xb, 0xe6, 0x0, 0xcc, 0x5, 0x7f, 0x3, 0x2a, 0x7, 0x3, 0x9, 0x0, 0x8, 0x5c, 0x1, 0x8, 0x0, 0x5, '\x00', 0x50, 0x8}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r14, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x400c000) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001180), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r15, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x93cc]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x2, 0x11, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001340)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x60, '\x00', r10, @fallback=0x1d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x4, 0x7, 0x9, 0x100}, 0x10, 0x0, r3, 0x2, &(0x7f00000013c0)=[r3], &(0x7f0000001400)=[{0x3, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x3, 0x1}], 0x10, 0x8000}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001500)={'ip_vti0\x00', 0x200}) 2.988143849s ago: executing program 4 (id=486): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f00000000c0)=0x50000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x80000003}) syz_usb_connect$cdc_ncm(0x0, 0x77, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x8, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6f0625d1"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x6, 0x5, 0xb8}, {0x6, 0x24, 0x1a, 0xea8c, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x87, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x13, 0x58, 0x6, 0x10, 0x7f}, 0x2a, &(0x7f0000000100)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x6, 0xf2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xe, 0xf0}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "fda8a138cd43a0100b1d1125f27d41c9"}]}}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400316"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.95706112s ago: executing program 2 (id=487): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x8, @private0, 0x8001}}, 0xfff, 0x7ff}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r1, 0x9, 0x1, [0xd763]}, &(0x7f0000000180)=0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000280)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000340)={0xfffffff, 0x10001, 0x80000000, r7, 0x0, &(0x7f0000000300)={0x83550d6a9960af76, 0x6, '\x00', @string=&(0x7f00000002c0)=0x1}}) write$P9_RREADLINK(r6, &(0x7f0000000380)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000003c0)=0xfffffffffffffffa) r8 = add_key$fscrypt_provisioning(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r8, r4, r5) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000500)={r2, 0xd7, "a58d74ed51ac7b746b0904f8d71ff0d8a536fcdbd4bb1defd78cd538e63788ee6099492a432351681660c023dee958c2f6c431dc24d5a78336d249defcc1d78fb2f45668c9019e985ecfc5df0b3ad37854e5fd3e24415a445fe0d8b35c9ba2c3d01166b2be965e0e184dce60c5c8e4472df5ea297a28f3ed45c839bc92b2ca163fa88669989523c2341145036183b7749169550517b15080cf0d4093e85bb5eb2223c269ccdbad1cbcb615c43fe2802efbd6fa2fe341d2a9348e97c2c4656476a06a03b2f4cf773107254f275fe247d5f73dd40a7c5a61"}, &(0x7f0000000600)=0xdf) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000640)=r9, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x9a4, 0x0, 0xfffffffffffffffb}]}) keyctl$clear(0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r10, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000880)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000bc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@ipv6_getnexthop={0x4c, 0x6a, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r11}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r12}, @NHA_GROUPS={0x4}, @NHA_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044000}, 0x810) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000c00)=@sg0, r4, &(0x7f0000000c40)='./file0\x00') keyctl$unlink(0x9, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000c80)="9434a0438bc88430c7f282272c690916ac8e484d37fb79e4c6155eef968cd8e7df5ee6415b842ff552df4add07882fea21c7743660a49ae653cbfbfce2c3d1b32d56ae3556952e107e217baff8d891b9dc2d09b254bd3011bbbb161b90a9cd24ab210676a2e2a0e34632bbe23a99fcfebaaccd3567a14014c5930cf4c8bab37e6c815061eef2384f0d43fc1617e561a3a730830b26fae9f17d6ddd67f8de61ea6e45b29f6f2714732d43b2b29aff67a7550b5c232ad8a6d629608b42ca0e046d25", 0xc1}, {&(0x7f0000000d80)="7f762623baa424080cb447cbb26335efa77ee22e6b14a6d6184c8c9982e6aad9e00a8067e5185345f5aa5548640df0fe005b5333a95d3ef8ddae5754d11976c894d3d1b5b662e57ca5d7e28e7a1abefb7f777dd588e0430b401ab75483f7c84bda003b180c5f62b0d6cd4f9ded1745064e0de3e0219e490aab9265c96d738eee8c91d5d79e24de3672b2edcc55524ca0fbbecab283fd", 0x96}, {&(0x7f0000000e40)="11af07cb105d61d154824d95b65fe21cd2fbb71d9ad00f322b2b7b354c1a53387f84c7961c5054e0756735d7db3d46d71b4ec0025eb59427e81099a8de52", 0x3e}, {&(0x7f0000000e80)="fd5dd135ae99b800e45b299c3caea56a952d881be6f5a8f49e814f0443783644d415366731a31edebe602fc18da33378691f0bc85eebbfb6369bbf0bf3252282658d2542603ceb5333164f405aba21c3124ce28ac0ae2b1e277f16362e9b370a970b9f708578240776732b04cd981128b19b419abd3fd2fbd860157f8b189474b24a94868069347954faba9a922b2139329a4d68085c9a3ac00544f172c53126f487836fbd3ec4d9a4a9e5d0230e12c1a48813cc5e847d0fecfbcc2cc2c0c989738201f695d86980ee91a40624aa9247275c95145e955c4b3948", 0xda}, {&(0x7f0000000f80)="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", 0x1000}], 0x5, &(0x7f0000002000)="f913afd0cc08083971a92e931f570186e74191b83c2a74234b19a97151a4be59683d47f25719bee79f2951d2599fae53682d27496ed604dfc1eeb71174b92b487b560d932a70c4f0e769c657e4fe50e374e64eb3e168c80ee8015a20b5708604ba6a97999dff2a9463ded5b272c7432d08a29b251762d155083c03d8670d860cf699a79a88e34b179783f3ae5d711494027e5570f25176d53e8c8cddbf7cd024e5cf557a175dc1c560bcf202b1e7", 0xae, 0x4000}, 0x41) r13 = fsmount(r6, 0x1, 0x8) getdents64(r13, &(0x7f0000002100)=""/212, 0xd4) io_setup(0xfff, &(0x7f0000002200)=0x0) r15 = eventfd(0x4) r16 = eventfd(0x6) io_submit(r14, 0x7, &(0x7f0000002940)=[&(0x7f0000002340)={0x0, 0x0, 0x0, 0x5, 0x6, r10, &(0x7f0000002240)="a5b51e31d3bdd6ea9826cd51f5fbf0a0013c9a77a9f406f24040a9727bc95e9ad6b8ad89528c28042592aca52c996f057ab85c8dfdaad2073e94a34375fa9efb47cb53548e7feecc40f69092df00863f142598e944c4308e8004243ab8df712c74a4eade1868af798454d7cf1852be9717d2b8bdc5882ea90fbf17206ac8f8090a873cc21bdb5cade2c943c93b4b1ef4688049fc26fd0bb9d1933e34f112f45f550a61545c8aedf4b73023499bbdbb6889b5d7325323c6ca5304c1a9efd7b9fbda8d8b641a667dda7771df4c4765fe8e830445f4a274530c92631f9a9ded", 0xde, 0x2fe, 0x0, 0x1, r6}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x2, 0x401, r7, &(0x7f0000002380)="acd39f0f16cefa546d6c29bc502bb4b00c0664a2ef9625ab458feb05e5dfba25e243a38ef86d28af5e1716a5d1f4fe5cdfdee5b2f6c466045e4cf7d47a683ac07220dd409a0cd97afc015a03a4503ee4293015eace0d27260abfc8376cf40121eaac5d456b3ae5e50ff704adef8005d77b3db135520392d0af05cd71d3b1ad8f932f1d444bf52f4bdade7382e07c408e11c764e55ac5cbecf628ed1e4b94011e4e2f83abb7be7ace793b289ca90cfeacc73ec782e783250cb5ee61258e086340f6c26fa21806c4491267a48367a1ac267aacedde949181bf030ee3ff9bc2099e3e141d3bb4", 0xe5, 0x3, 0x0, 0x1}, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x3, 0xc65d, r7, &(0x7f00000024c0)="379ac178639e9354943d6461d08566bacbe29e57910c403c1354443ba03cd29a1e24debd839bd0279724db49e41da1cb5d36b0132219da11b6cd81ee419bac17cb0743c307ce97585fb44f0fe55be311219a91ef2615a2f83790b71736985132f6ff7577857c89a79111bf7b46c3016590ae16d24343", 0x76, 0x6, 0x0, 0x1, r13}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x7, 0xfff8, r6, &(0x7f0000002580)="9e006862d12a695744ae5eea2af0eb152dc154cb3937c29b93be1ad902f83fe9ee0cadf7c51322e45ec659a69ed312e64d9151686c35701eaad646b314922dc548c1d0d3a9987455e1338be0c59d3020e7801b99e604a957150ff9c068c6224ce899656fc178622fb39ad0b2f68a4d530fd067f88ac564c15547e5c34eca3f8c98299a38b08794462ecc1deb46c5c43f9f3ad8ae5ef07f12b10909502339e7d566233aaaab92c760c7", 0xa9, 0x0, 0x0, 0x4, r13}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x3784d426e5114d5f, 0x103c, r6, &(0x7f0000002680)="e7f364a71936f83c97013a2bb290495a93fa00cf3969b8a1f30456069c52517a4d0536d3a4dc16e7d7dd7c2f76e51b6007a0c84e19b4022aa4857fbe5cbd0ad5e4359a1611a72403acf6dd5255918cb4c6cd7a0415426ecb71150e35fb1652d1", 0x60, 0x9, 0x0, 0x0, r15}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x5, 0x77, r10, &(0x7f0000002740)="deaee998a8ff80634e0d81eb65aff89ade915cc1cdb82162d2800eb6d6720acf072c8e78381b68a09a630223c005998ab4980e51bf2f09fefb88507246f94bf9fb680514c07a850580d55b6f41be5b961eecd2470a8ea2ab746c9461f6faa4d814873941d3f18c8872d717f10dedf0068430243670181a94ec422057e4c06275abaff7d8bf8a2b5792ce872750cdaac8d911aa3199216c5fb8176a8ad39044e46339c94cf9d50a6dc5fda921bf0caa1f0fdb70ff40f434e8222a", 0xba, 0x7, 0x0, 0x0, r16}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x9aa363c2979ba6c4, 0x970, r7, &(0x7f0000002840)="e36c5c9241993128984dc1ff90d24c301656ce181d2b3a94c0967e9375415cae64065a420e03965d61d3530793f25022c6747ce1727db093236be9e35181231a08cfc9215fbc99cc3a46fc934c5bca63608fda253cdb4d6698a939814bf3c0b92582cf9fd5d0789258da26ba3a4313ec35973253043e927b283a2af5c25629bfdad0c93779e26cfaea864e497e651aefeb0ba3fa29625b71030546d398525e80e066382772fa36967294061381f0d5c0f0190d2411317093", 0xb8, 0x9, 0x0, 0x3, r13}]) syz_open_procfs$namespace(r3, &(0x7f0000002980)='ns/user\x00') 2.784678551s ago: executing program 0 (id=488): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x8]}, &(0x7f0000000200)=0x6) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r3, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010004"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$unix(r0, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) 2.749773162s ago: executing program 2 (id=489): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aa14c3f8a4aaaaaaaaaa97c4864ef7a308bc8f6d2066a332020000299078ac1414bbac14140c8907efe000006a8602000000"], 0x0) 2.604165293s ago: executing program 2 (id=490): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x2, 0x8]}, &(0x7f0000000100)=0x44) r1 = io_uring_setup(0x1297, &(0x7f0000000140)={0x0, 0x71f5, 0x1000, 0x3, 0x270}) io_uring_enter(r1, 0x7782, 0x5c31, 0x0, &(0x7f00000001c0)={[0xfff]}, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x40000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r7) sendmsg$FOU_CMD_DEL(r7, 0x0, 0x1) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000003e000701fcffffff00000100017c0000040042800c0006000600800a0000180002801400148008001480040001800800b7000000", @ANYRES32=0x0, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 2.531146539s ago: executing program 0 (id=491): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async) r2 = syz_io_uring_setup(0x15ef, &(0x7f00000000c0)={0x0, 0x44f5, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6}) (async) io_uring_enter(r2, 0x627, 0x4c1, 0x63, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a3000000000090003"], 0xa0}}, 0x8040) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000340)={"c6d93bb6a922a27734902bda52c1260f", 0x0, 0x0, {0x6, 0x5}, {0x3, 0x101}, 0x51, [0x0, 0xffffffffffffffff, 0x2, 0xbdc9, 0x5, 0x2, 0x1ff, 0x4, 0x4, 0x101, 0x9, 0x54, 0x7fffffff, 0xf, 0x4, 0x1]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002500), r9) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000600)={{r6}, r8, 0xb2017b037d96fc29, @inherit={0x60, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000fcffffffffffffff2900000000000000000000000000000007000000000000000600000000001900020000000000000016f0ffffffffffff01000000000000000300000000000000"]}, @subvolid=0x5}) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000140)={0x4, 0x0, 0x80009, 0x76, 0xc, "81ffffff00"}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000280)) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r11, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) (async) r12 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) sendfile(0xffffffffffffffff, r12, 0x0, 0x3a) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) 2.504359712s ago: executing program 3 (id=492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x50, r6, 0x7, 0x70bd29, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, ' \x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xc2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) close(r4) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000200), &(0x7f0000000300)={'L+', 0x401}, 0x16, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x1b}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000540)={0x0, r8, 0xd, 0x7, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f00000005c0)={&(0x7f0000000500)=@canfd={{0x1, 0x1, 0x1}, 0x6, 0x2, 0x0, 0x0, "cb17ddf9d99e3c64f91c67884953fecffed172a2744431cc2d86d0c72318fdabc512bcd92d1b75b15542959da00c24a760ac78de88d660648ad64c2782d48063"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x0, 0x3004, 0x59091fc, 0x2}, 0x0, 0x7, 0x0, 0xffffffff, 0x0}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ustat(0x10001, &(0x7f0000000600)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 1.414101679s ago: executing program 2 (id=493): openat$fb0(0xffffffffffffff9c, 0x0, 0x800, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYRES32], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000f40)={0x0, @rand_addr, @empty}, &(0x7f0000000f80)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001000)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000001f00)={0x608, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeca1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x0, 0x1, @user_linkup={{}, {0x0, 0x6, r7}}}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x1, 0x35, 0x5, 0xb}]}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x5, 0x3, 0xb, 0xffff}, {0x0, 0xf, 0x10, 0x8}, {0x6, 0x6, 0x81, 0x4}]}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x4, 0xf7, 0xffffffff}, {0x4, 0x44, 0xe, 0x9}]}}}, {0x38, 0x1, @activeport={{0x24}, {0xfffffffffffffe8e}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40003}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r6}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4985}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe43}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x608}}, 0x40000000) accept4(r0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4d0, 0xe0, 0x0, 0xffffffff, 0x208, 0x328, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x1ff, 0xde, 0x1, 0x0, "234f08b2d4bc9f6a060f8d3ad98f203d8676ccd6132936c4b4eb0622b47796822a5d459f771433f3fdb9c6be300aece5730305da5b912fdb24221dc0c21dabe1"}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff000000, 'nr0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x62, 0x0, 0x3}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x2, 0x0, 0xe}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @loopback, @multicast2, @port=0x4e24, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x484, 0x0, 0x0, 0x1}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x13, 0xb, [0x21, 0x3a, 0x29, 0x3b, 0x1d, 0x16, 0x3e, 0x30, 0x29, 0x3d, 0x4, 0x6, 0x24, 0xf, 0x14, 0x8], 0x2, 0x1ee4, 0x9}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x7, 0x5, 0x4, 0x2], 0x4, 0x2}}}, @common=@inet=@tos={{0x28}, {0x5e, 0xb}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @rand_addr=0x64010101, @local, @icmp_id=0x67, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000090002000000fedbdf250100000008000800", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.093698754s ago: executing program 2 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x80}, {0x5}, {0x6, 0x11, 0xd}, {0x8, 0xb, 0x5}}]}, 0x60}}, 0x40) lseek(r1, 0x101, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/22, 0xfffffffffe400000, 0x1000, 0x3ffffc, 0x1}, 0x18) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40c05}, 0x20048151) 974.220764ms ago: executing program 2 (id=495): r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a7, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 612.229448ms ago: executing program 0 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x101) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x36, 0xe, 0x89, 0xc, 0x2, 0xd, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff33}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x40000000000002, 0x7, 0xeab, 0x180, 0x0, 0x0, 0xf2, 0x9, 0x8, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',root', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 376.348645ms ago: executing program 4 (id=497): mkdir(&(0x7f0000000400)='./file0\x00', 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) r4 = dup2(r3, r2) read$FUSE(r4, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000180)=[{{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) getpeername(r5, &(0x7f0000000040)=@in={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x80) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000380)={@private, @initdev, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES8=r0, @ANYBLOB="000226bd7000fcdbdf2502000000080008000100000000000000000000000000080008000100000008000100de332ffa1c264ab46a8da84885f8595e90c9b7c1bfca52dda082955babc68698d7c0aa209f83ac17ce745b4dc0f0e543ee7d87966ce2c88ef8c0219168da3af53cbda4975a92489fd2a4c06b9a2e4b4c86f2ff079048a73425916f173cfecd86158c95a037198d3c25e90b2a8c60b371af895f5d", @ANYRES32=r7, @ANYBLOB="b2dfa5cf8be3811b020ecb124aaf8cdf72ff18a5730e85dca144e0611fd4f167fa5b98f467b5639deab6fe58f939d00e999574f6"], 0x40}, 0x1, 0x0, 0x0, 0x4000044}, 0x4028041) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000007b40)="fb9f", 0x2}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x2, 0x40000) write$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x6) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\xae\xcf\x0f\x00`\xcd', &(0x7f0000000b40)='//{o\xb2<\x1c\xcc\t\xf3\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf7\x8b\x9f~\xa0!;^\xe3$\x17\xaan\xdav\\\xe1\xfd\x98\x17^\xde\xae\x9f(\xa8B\x95#\xeb\xedv\x1c\xa6c\xc3%\x9e\xfa\x04\x82\x12#Ej\xfd\xdb\xae\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b HID v0.00 Device [sy] on syz0 [ 156.075562][ T30] audit: type=1326 audit(1760807451.981:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.081552][ T1208] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 156.122387][ T30] audit: type=1326 audit(1760807451.981:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.178510][ T3195] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 156.213489][ T1208] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input10 [ 156.246074][ T30] audit: type=1326 audit(1760807451.981:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.354435][ T30] audit: type=1326 audit(1760807451.981:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.364953][ T1208] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 156.410613][ T6974] fido_id[6974]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.414090][ T3195] usb 4-1: no configurations [ 156.432382][ T6976] netlink: 104 bytes leftover after parsing attributes in process `syz.0.232'. [ 156.466219][ T30] audit: type=1326 audit(1760807451.981:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.516673][ T3195] usb 4-1: can't read configurations, error -22 [ 156.550292][ T30] audit: type=1326 audit(1760807451.981:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.554703][ T1208] usb 2-1: USB disconnect, device number 11 [ 156.628629][ T30] audit: type=1326 audit(1760807451.981:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.663538][ T3195] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 156.727679][ T30] audit: type=1326 audit(1760807451.981:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.786612][ T30] audit: type=1326 audit(1760807451.981:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6970 comm="syz.0.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f09cf18efc9 code=0x7ffc0000 [ 156.812042][ T6982] fido_id[6982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.857674][ T3195] usb 4-1: no configurations [ 156.863134][ T3195] usb 4-1: can't read configurations, error -22 [ 156.873128][ T3195] usb usb4-port1: attempt power cycle [ 157.019223][ T5892] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 157.077742][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 157.286804][ T3195] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 157.308309][ T3195] usb 4-1: no configurations [ 157.313003][ T3195] usb 4-1: can't read configurations, error -22 [ 157.322350][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.331887][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.334667][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.359224][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 157.368790][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 157.377825][ T24] usb 5-1: SerialNumber: syz [ 157.384154][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 157.394886][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.439036][ T5892] usb 1-1: config 0 descriptor?? [ 157.456630][ T3195] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 157.498268][ T3195] usb 4-1: no configurations [ 157.503884][ T3195] usb 4-1: can't read configurations, error -22 [ 157.526973][ T3195] usb usb4-port1: unable to enumerate USB device [ 157.649865][ T24] usb 5-1: 0:2 : does not exist [ 157.668324][ T24] usb 5-1: USB disconnect, device number 28 [ 157.834151][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.847661][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.876352][ T6995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.888803][ T6995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.069383][ T5892] usbhid 1-1:0.0: can't add hid device: -71 [ 158.089154][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 158.112181][ T5892] usb 1-1: USB disconnect, device number 16 [ 158.223009][ T6737] udevd[6737]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.696541][ T3195] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 158.848983][ T3195] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 158.886195][ T3195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.918740][ T3195] usb 5-1: config 0 descriptor?? [ 158.936213][ T3195] pwc: Creative Labs Webcam Pro Ex detected. [ 159.140204][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.168301][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.277446][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.345275][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.492747][ T3195] pwc: Failed to set LED on/off time (-71) [ 159.510396][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.519930][ T3195] pwc: send_video_command error -71 [ 159.528910][ T3195] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 159.551829][ T3195] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 159.609100][ T3195] usb 5-1: USB disconnect, device number 29 [ 159.669427][ T24] usb 4-1: config 0 has an invalid interface number: 118 but max is 0 [ 159.679427][ T24] usb 4-1: config 0 has no interface number 0 [ 159.704820][ T24] usb 4-1: New USB device found, idVendor=1965, idProduct=0018, bcdDevice=42.18 [ 159.721961][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.745051][ T24] usb 4-1: Product: syz [ 159.745331][ T7024] tipc: Started in network mode [ 159.807853][ T7024] tipc: Node identity 22cbc2932bf1, cluster identity 4711 [ 159.815394][ T7024] tipc: Enabled bearer , priority 0 [ 159.819337][ T24] usb 4-1: Manufacturer: syz [ 159.837080][ T24] usb 4-1: SerialNumber: syz [ 159.850188][ T7022] syzkaller0: entered promiscuous mode [ 159.863833][ T7022] syzkaller0: entered allmulticast mode [ 159.863842][ T24] usb 4-1: config 0 descriptor?? [ 159.927478][ T5913] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.953246][ T7022] tipc: Resetting bearer [ 159.976697][ T7022] tipc: Disabling bearer [ 160.096545][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 160.107653][ T5913] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 160.117446][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.136642][ T5913] usb 3-1: Product: syz [ 160.142688][ T5913] usb 3-1: Manufacturer: syz [ 160.202215][ T5913] usb 3-1: SerialNumber: syz [ 160.227739][ T5913] r8152-cfgselector 3-1: Unknown version 0x0000 [ 160.227764][ T5913] r8152-cfgselector 3-1: config 0 descriptor?? [ 160.235837][ T24] usb 4-1: USB disconnect, device number 16 [ 160.406539][ T5892] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 160.431210][ T7041] netlink: 44 bytes leftover after parsing attributes in process `syz.1.248'. [ 160.462921][ T7021] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 160.476237][ T7021] bond2 (unregistering): Released all slaves [ 160.558621][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.248'. [ 160.575655][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.606511][ T5892] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 160.614036][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 160.629714][ T5892] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.656584][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 160.824819][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 160.840870][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.850127][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.877139][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 160.884967][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30 [ 160.907168][ T24] usb 4-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 160.959783][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.978568][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.024360][ T24] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 161.035083][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.123053][ T24] usb 4-1: Product: syz [ 161.128955][ T24] usb 4-1: Manufacturer: syz [ 161.134047][ T24] usb 4-1: SerialNumber: syz [ 161.163367][ T24] usb 4-1: config 0 descriptor?? [ 161.168940][ T5892] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.177082][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.302084][ T24] usb 4-1: cannot find UAC_HEADER [ 161.306520][ T5892] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.356012][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.377676][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.398280][ T5892] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 161.406805][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 161.443737][ T5892] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.455966][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.469988][ T5892] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 161.495874][ T5892] usb 1-1: string descriptor 0 read error: -22 [ 161.528998][ T5892] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 161.536744][ T24] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 161.549628][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.660862][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.763943][ T5892] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.819218][ T1208] usb 4-1: USB disconnect, device number 17 [ 162.429920][ T1208] usb 1-1: USB disconnect, device number 17 [ 162.462643][ T7052] adutux: No device or device unplugged -19 [ 162.923648][ T7065] batadv_slave_1: entered promiscuous mode [ 162.934136][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 162.949094][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.005592][ T7065] batadv_slave_1 (unregistering): left promiscuous mode [ 163.044316][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.311841][ T5913] r8152-cfgselector 3-1: Unknown version 0x0000 [ 163.318816][ T5913] r8152-cfgselector 3-1: bad CDC descriptors [ 163.402754][ T5913] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 163.439355][ T7071] batadv_slave_0: entered promiscuous mode [ 163.456614][ T1208] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 163.498805][ T7071] batadv_slave_0: left promiscuous mode [ 163.589944][ T7081] fuse: Unknown parameter 'group_id?00000000000000000000' [ 163.659986][ T1208] usb 5-1: device descriptor read/64, error -71 [ 163.807652][ T7081] nvme_fabrics: missing parameter 'transport=%s' [ 163.823877][ T7081] nvme_fabrics: missing parameter 'nqn=%s' [ 163.896619][ T1208] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 164.056599][ T1208] usb 5-1: device descriptor read/64, error -71 [ 164.076649][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 164.183666][ T1208] usb usb5-port1: attempt power cycle [ 164.206612][ T9] usb 1-1: device descriptor read/64, error -71 [ 164.502240][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.587123][ T1208] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 164.628138][ T1208] usb 5-1: device descriptor read/8, error -71 [ 164.716682][ T9] usb 1-1: device descriptor read/64, error -71 [ 164.900397][ T9] usb usb1-port1: attempt power cycle [ 164.966806][ T1208] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 164.997909][ T1208] usb 5-1: device descriptor read/8, error -71 [ 165.265873][ T1208] usb usb5-port1: unable to enumerate USB device [ 165.306755][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.335664][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 165.345108][ T7105] bridge_slave_0: default FDB implementation only supports local addresses [ 165.354158][ T9] usb 1-1: device descriptor read/8, error -71 [ 165.596562][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 165.657257][ T9] usb 1-1: device descriptor read/8, error -71 [ 165.773921][ T9] usb usb1-port1: unable to enumerate USB device [ 165.906214][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'. [ 165.965878][ T7113] bond2 (unregistering): Released all slaves [ 165.991657][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.014139][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.025306][ T3195] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.246813][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.514552][ T5906] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.523684][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 166.778646][ T7130] lo: entered allmulticast mode [ 166.794630][ T7130] lo: left allmulticast mode [ 166.819592][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 166.836790][ T3195] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 166.875245][ T7130] fuse: Unknown parameter '' [ 167.006947][ T3195] usb 5-1: device descriptor read/64, error -71 [ 167.227215][ T7139] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 167.256952][ T3195] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 167.310734][ T7145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.278'. [ 167.313542][ T7145] x_tables: duplicate underflow at hook 1 [ 167.383228][ T7138] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 167.420696][ T3195] usb 5-1: device descriptor read/64, error -71 [ 167.597830][ T3195] usb usb5-port1: attempt power cycle [ 167.692104][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 167.966576][ T3195] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 167.999904][ T3195] usb 5-1: device descriptor read/8, error -71 [ 168.086867][ T7162] fuse: Invalid uid '00000000000000035264' [ 168.306607][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 168.356575][ T3195] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 168.387201][ T3195] usb 5-1: device descriptor read/8, error -71 [ 168.436656][ T9] usb 1-1: device descriptor read/64, error -71 [ 168.507489][ T3195] usb usb5-port1: unable to enumerate USB device [ 168.687378][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 168.817064][ T7166] ptrace attach of "./syz-executor exec"[6208] was attempted by "./syz-executor exec"[7166] [ 168.842457][ T7166] netlink: 88 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.857165][ T9] usb 1-1: device descriptor read/64, error -71 [ 168.878120][ T7166] netlink: 'syz.3.282': attribute type 21 has an invalid length. [ 168.886296][ T7166] netlink: 128 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.900280][ T7166] netlink: 'syz.3.282': attribute type 4 has an invalid length. [ 168.908412][ T7166] netlink: 3 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.956161][ T7166] batadv1: entered promiscuous mode [ 168.968375][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.008072][ T7168] fuse: Bad value for 'group_id' [ 169.013363][ T7168] fuse: Bad value for 'group_id' [ 169.097027][ T9] usb usb1-port1: attempt power cycle [ 169.408427][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 169.436720][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 169.553528][ T7172] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 169.563795][ T5892] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.590298][ T9] usb 1-1: device descriptor read/8, error -71 [ 169.716988][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.736760][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 169.744033][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.753380][ T5892] usb 2-1: config index 0 descriptor too short (expected 8228, got 36) [ 169.767308][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.836579][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 170.067532][ T9] usb 1-1: device descriptor read/8, error -71 [ 170.098181][ T5892] usb 2-1: config 0 has no interfaces? [ 170.104823][ T5892] usb 2-1: language id specifier not provided by device, defaulting to English [ 170.124765][ T5892] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 170.186836][ T9] usb usb1-port1: unable to enumerate USB device [ 170.200270][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.217731][ T5892] usb 2-1: SerialNumber: syz [ 170.233212][ T5892] usb 2-1: config 0 descriptor?? [ 170.268768][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 170.295295][ T7180] input: syz0 as /devices/virtual/input/input11 [ 170.496346][ T5892] usb 2-1: USB disconnect, device number 12 [ 170.986681][ T5913] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 171.334531][ T5913] usb 4-1: device descriptor read/64, error -71 [ 171.596709][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.737662][ T5913] usb 4-1: device descriptor read/64, error -71 [ 171.881114][ T5913] usb usb4-port1: attempt power cycle [ 172.008877][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 172.021023][ T7209] netlink: 3068 bytes leftover after parsing attributes in process `syz.2.293'. [ 172.030799][ T7209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.293'. [ 172.190418][ T7219] binder: 7210:7219 ioctl c018620b 200000000240 returned -14 [ 172.198072][ T1208] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 172.270356][ T5913] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 172.318644][ T5913] usb 4-1: device descriptor read/8, error -71 [ 172.369008][ T1208] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 172.379036][ T1208] usb 2-1: can't read configurations, error -61 [ 172.507120][ T1208] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 172.566606][ T5892] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 172.574279][ T5913] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 172.597285][ T3195] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 172.597481][ T5913] usb 4-1: device descriptor read/8, error -71 [ 172.669332][ T1208] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 172.678264][ T1208] usb 2-1: can't read configurations, error -61 [ 172.685322][ T1208] usb usb2-port1: attempt power cycle [ 172.716968][ T5913] usb usb4-port1: unable to enumerate USB device [ 172.728575][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 172.737013][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 172.746043][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.756386][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.766727][ T3195] usb 1-1: Using ep0 maxpacket: 8 [ 172.774629][ T5892] usb 3-1: string descriptor 0 read error: -22 [ 172.775365][ T3195] usb 1-1: config 252 has an invalid interface number: 187 but max is 0 [ 172.782181][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.795390][ T3195] usb 1-1: config 252 has no interface number 0 [ 172.799095][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.805282][ T3195] usb 1-1: New USB device found, idVendor=07ca, idProduct=a867, bcdDevice=2d.22 [ 172.822542][ T3195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.844063][ T5892] usb 3-1: 0:2 : does not exist [ 173.026649][ T1208] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.053644][ T7227] CUSE: info not properly terminated [ 173.055304][ T1208] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 173.062146][ T5906] usb 1-1: USB disconnect, device number 26 [ 173.067372][ T1208] usb 2-1: can't read configurations, error -61 [ 173.176633][ T3195] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 173.216692][ T1208] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 173.242710][ T1208] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 173.251025][ T1208] usb 2-1: can't read configurations, error -61 [ 173.258767][ T1208] usb usb2-port1: unable to enumerate USB device [ 173.279443][ T5892] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.305524][ T5892] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 173.308740][ T3195] usb 5-1: device descriptor read/64, error -71 [ 173.351360][ T5892] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 173.366153][ T5892] usb 3-1: USB disconnect, device number 22 [ 173.575667][ T3195] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 173.716630][ T3195] usb 5-1: device descriptor read/64, error -71 [ 173.827027][ T3195] usb usb5-port1: attempt power cycle [ 173.856662][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 173.952542][ T7244] loop6: detected capacity change from 0 to 2640 [ 173.977530][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.987460][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.997600][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.006231][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.016051][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 174.021789][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.031136][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.040060][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.052374][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.060551][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.072667][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.082324][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.093909][ T6737] ldm_validate_partition_table(): Disk read failed. [ 174.103329][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.114706][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.127046][ T6737] Buffer I/O error on dev loop6, logical block 0, async page read [ 174.136269][ T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 174.155190][ T6737] Dev loop6: unable to read RDB block 0 [ 174.161453][ T6737] loop6: unable to read partition table [ 174.168444][ T3195] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 174.176156][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.189125][ T7244] ldm_validate_partition_table(): Disk read failed. [ 174.198654][ T3195] usb 5-1: device descriptor read/8, error -71 [ 174.201603][ T7244] Dev loop6: unable to read RDB block 0 [ 174.206097][ T24] usb 1-1: config 0 descriptor?? [ 174.211994][ T7244] loop6: unable to read partition table [ 174.238626][ T7244] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 174.446837][ T3195] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 174.467384][ T3195] usb 5-1: device descriptor read/8, error -71 [ 174.577248][ T3195] usb usb5-port1: unable to enumerate USB device [ 174.637508][ T24] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 174.645076][ T24] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 174.652610][ T24] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 174.660166][ T24] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 174.668172][ T24] hid-u2fzero 0003:10C4:8ACF.0006: unknown main item tag 0x0 [ 174.678760][ T24] hid-u2fzero 0003:10C4:8ACF.0006: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 174.694469][ T24] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero LED initialised [ 174.708028][ T24] hid-u2fzero 0003:10C4:8ACF.0006: U2F Zero RNG initialised [ 174.776667][ T1208] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 174.936774][ T1208] usb 3-1: Using ep0 maxpacket: 8 [ 174.960460][ T1208] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 175.139283][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.162018][ T1208] usb 3-1: Product: syz [ 175.171387][ T1208] usb 3-1: Manufacturer: syz [ 175.179777][ T1208] usb 3-1: SerialNumber: syz [ 175.191512][ T1208] usb 3-1: config 0 descriptor?? [ 175.209757][ T1208] gspca_main: se401-2.14.0 probing 047d:5003 [ 175.237494][ T7262] IPVS: length: 250 != 8 [ 175.604924][ T1208] gspca_se401: ExtraFeatures: 79 [ 175.610055][ T1208] gspca_se401: Frame size: 0x0 1/16th janggu [ 175.843796][ T7267] random: crng reseeded on system resumption [ 176.176952][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 176.176972][ T30] audit: type=1326 audit(1760807472.231:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.205520][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.313017][ T30] audit: type=1326 audit(1760807472.231:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.335380][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.410424][ T30] audit: type=1326 audit(1760807472.271:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.495358][ T30] audit: type=1326 audit(1760807472.271:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.517934][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.647123][ T5892] usb 1-1: USB disconnect, device number 27 [ 176.676654][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.695091][ T1208] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 176.707860][ T30] audit: type=1326 audit(1760807472.271:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.805067][ T30] audit: type=1326 audit(1760807472.271:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.870134][ T30] audit: type=1326 audit(1760807472.271:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.929323][ T30] audit: type=1326 audit(1760807472.271:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 176.951477][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.991343][ T30] audit: type=1326 audit(1760807472.271:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 177.063795][ T30] audit: type=1326 audit(1760807472.271:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.1.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 177.086623][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.870755][ T1208] usb 3-1: USB disconnect, device number 23 [ 177.906791][ T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 178.070766][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.126543][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 178.164903][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 178.195413][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.207010][ T24] usb 4-1: config 0 descriptor?? [ 178.295518][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 178.315127][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 178.345980][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 178.485680][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 178.497414][ T7298] dvb-usb: bulk message failed: -22 (2/0) [ 178.508118][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.515279][ T24] usb 4-1: media controller created [ 178.517647][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.656700][ T5917] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 178.670470][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.884813][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 178.894209][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 178.970337][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 179.068602][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 179.193619][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 179.301759][ T24] usb 4-1: USB disconnect, device number 22 [ 179.709911][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 180.643238][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 180.663763][ T7334] vlan2: entered promiscuous mode [ 180.716688][ T1208] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 180.887742][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 180.905672][ T1208] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.992568][ T1208] usb 3-1: config 0 has no interface number 0 [ 181.036773][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.049824][ T1208] usb 3-1: config 0 interface 184 has no altsetting 0 [ 181.216595][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 181.227798][ T1208] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 181.243376][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.253879][ T1208] usb 3-1: Product: syz [ 181.261102][ T1208] usb 3-1: Manufacturer: syz [ 181.282190][ T1208] usb 3-1: SerialNumber: syz [ 181.351949][ T1208] usb 3-1: config 0 descriptor?? [ 181.363439][ T1208] smsc75xx v1.0.0 [ 181.402954][ T24] usb 4-1: config 162 has an invalid interface number: 166 but max is 0 [ 181.425150][ T24] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 181.466811][ T24] usb 4-1: config 162 has no interface number 0 [ 181.477107][ T24] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 181.508574][ T24] usb 4-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 181.530743][ T24] usb 4-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.544444][ T24] usb 4-1: config 162 interface 166 has no altsetting 0 [ 181.611163][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 181.686542][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.312131][ T1208] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 182.346317][ T1208] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 182.366754][ T24] usb 4-1: Product: syz [ 182.372717][ T24] usb 4-1: Manufacturer: syz [ 182.376106][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 182.382420][ T24] usb 4-1: SerialNumber: syz [ 182.439732][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'. [ 182.479628][ T7342] netlink: 'syz.1.330': attribute type 21 has an invalid length. [ 182.678776][ T24] appledisplay 4-1:162.166: Could not find int-in endpoint [ 182.728566][ T24] usbhid 4-1:162.166: couldn't find an input interrupt endpoint [ 182.756733][ T5892] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 182.766874][ T24] usb 4-1: USB disconnect, device number 23 [ 182.852251][ T7356] veth0_to_team: entered promiscuous mode [ 182.879061][ T1208] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 182.893221][ T1208] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 182.915393][ T1208] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 182.926553][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 182.944850][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 182.959609][ T1208] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 182.977793][ T5892] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 182.997869][ T1208] usb 3-1: USB disconnect, device number 24 [ 183.008518][ T5892] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 183.041576][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 37164, setting to 1024 [ 183.060081][ T5892] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 183.073036][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.076738][ T3195] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 183.086216][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 183.104119][ T5892] usb 2-1: SerialNumber: syz [ 183.131010][ T7342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.131096][ T7342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.131154][ T7342] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.268591][ T3195] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.268648][ T3195] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.268675][ T3195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.273335][ T3195] usb 5-1: config 0 descriptor?? [ 183.309768][ T3195] pwc: Askey VC010 type 2 USB webcam detected. [ 183.386035][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 183.423791][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 183.499771][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 183.524478][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.570056][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.580182][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.596056][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.625004][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.643485][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.655238][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.668640][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.703949][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.715232][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.731958][ T7373] syz_tun: entered allmulticast mode [ 183.746136][ T7372] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.336' sets config #0 [ 183.777099][ T5917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 183.890234][ T7374] syz_tun: left allmulticast mode [ 183.939572][ T5917] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 183.952385][ T3195] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.964788][ T5917] usb 3-1: config 0 has no interface number 0 [ 183.977255][ T5917] usb 3-1: config 0 interface 11 has no altsetting 0 [ 183.993911][ T5917] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 184.003612][ T3195] pwc: recv_control_msg error -71 req 02 val 2700 [ 184.018711][ T3195] pwc: recv_control_msg error -71 req 02 val 2c00 [ 184.034602][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.044036][ T3195] pwc: recv_control_msg error -71 req 04 val 1000 [ 184.062876][ T3195] pwc: recv_control_msg error -71 req 04 val 1300 [ 184.077096][ T3195] pwc: recv_control_msg error -71 req 04 val 1400 [ 184.282654][ T5917] usb 3-1: config 0 descriptor?? [ 184.296182][ T3195] pwc: recv_control_msg error -71 req 02 val 2000 [ 184.308731][ T5917] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 184.317685][ T3195] pwc: recv_control_msg error -71 req 02 val 2100 [ 184.325630][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 184.342362][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 184.342612][ T3195] pwc: recv_control_msg error -71 req 04 val 1500 [ 184.364066][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 184.372197][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.380295][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 184.416636][ T3195] pwc: recv_control_msg error -71 req 02 val 2500 [ 184.429312][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 184.440834][ T3195] pwc: recv_control_msg error -71 req 02 val 2400 [ 184.450874][ T3195] pwc: recv_control_msg error -71 req 02 val 2600 [ 184.460275][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 184.494404][ T3195] pwc: recv_control_msg error -71 req 02 val 2900 [ 184.535061][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.543799][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 184.555418][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.578044][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 184.589386][ T3195] pwc: recv_control_msg error -71 req 02 val 2800 [ 184.604786][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 184.613528][ T3195] pwc: recv_control_msg error -71 req 04 val 1100 [ 184.626909][ T5892] usb 2-1: USB disconnect, device number 17 [ 184.652499][ T3195] pwc: recv_control_msg error -71 req 04 val 1200 [ 184.664814][ T5917] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 184.670630][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.692587][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 184.710231][ T3195] pwc: Registered as video103. [ 184.727975][ T24] usb 1-1: device descriptor read/64, error -71 [ 184.743200][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.747205][ T3195] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 184.761372][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 184.785664][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 184.835280][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 184.849388][ T3195] usb 5-1: USB disconnect, device number 42 [ 184.863563][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 184.874951][ T5917] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 184.893772][ T5917] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 184.977489][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 185.096601][ T5892] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.116828][ T24] usb 1-1: device descriptor read/64, error -71 [ 185.243021][ T5917] usb 3-1: USB disconnect, device number 25 [ 185.257022][ T5917] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 185.267173][ T24] usb usb1-port1: attempt power cycle [ 185.279130][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.287582][ T3195] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 185.296528][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.316423][ T5917] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 185.323780][ T5892] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 185.348962][ T5917] keyspan 3-1:0.11: device disconnected [ 185.382106][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.471166][ T3195] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.473885][ T5892] usb 2-1: config 0 descriptor?? [ 185.501214][ T3195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.517207][ T3195] usb 5-1: Product: syz [ 185.526054][ T3195] usb 5-1: Manufacturer: syz [ 185.532157][ T3195] usb 5-1: SerialNumber: syz [ 185.550789][ T3195] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.591328][ T5917] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.646997][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 185.667916][ T24] usb 1-1: device descriptor read/8, error -71 [ 185.906622][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 185.923367][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.933034][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.941441][ T24] usb 1-1: device descriptor read/8, error -71 [ 185.945763][ T5892] uclogic 0003:5543:0042.0007: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.1-1/input0 [ 186.067074][ T24] usb usb1-port1: unable to enumerate USB device [ 186.116376][ T7417] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 186.123234][ T7417] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.135118][ T7417] vhci_hcd vhci_hcd.0: Device attached [ 186.138373][ T9] usb 2-1: USB disconnect, device number 18 [ 186.212337][ T7419] vhci_hcd: connection closed [ 186.215616][ T50] vhci_hcd: stop threads [ 186.226375][ T50] vhci_hcd: release socket [ 186.231001][ T50] vhci_hcd: disconnect device [ 186.541426][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 186.541445][ T30] audit: type=1326 audit(1760807482.601:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.570172][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.580633][ T7424] IPVS: Scheduler module ip_vs_ not found [ 186.580883][ T30] audit: type=1326 audit(1760807482.601:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.615335][ T30] audit: type=1326 audit(1760807482.601:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.637567][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.644666][ T30] audit: type=1326 audit(1760807482.601:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.667080][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.696596][ T5917] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 186.704102][ T5917] ath9k_htc: Failed to initialize the device [ 186.716147][ T30] audit: type=1326 audit(1760807482.601:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.739567][ T30] audit: type=1326 audit(1760807482.601:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.815325][ T30] audit: type=1326 audit(1760807482.601:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.837559][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.865930][ T5917] usb 5-1: ath9k_htc: USB layer deinitialized [ 186.885382][ T30] audit: type=1326 audit(1760807482.601:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.945957][ T30] audit: type=1326 audit(1760807482.601:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 186.969195][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.005259][ T30] audit: type=1326 audit(1760807482.601:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6538efc9 code=0x7ffc0000 [ 187.113671][ T5892] usb 5-1: USB disconnect, device number 43 [ 187.427607][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 187.576588][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 187.583522][ T9] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 187.593627][ T9] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.606600][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 187.615642][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 187.636143][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.644551][ T9] usb 3-1: Product: syz [ 187.648959][ T9] usb 3-1: Manufacturer: syz [ 187.653563][ T9] usb 3-1: SerialNumber: syz [ 187.661224][ T7446] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.954363][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 189.074928][ T7469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.092932][ T7469] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 189.157165][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 189.169892][ T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 189.179434][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.190277][ T24] usb 1-1: Product: syz [ 189.195340][ T24] usb 1-1: Manufacturer: syz [ 189.201706][ T24] usb 1-1: SerialNumber: syz [ 189.218883][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 189.406036][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 189.424730][ T24] gspca_ov534_9: reg_w failed -71 [ 189.457404][ T7478] xfrm1: entered promiscuous mode [ 189.471424][ T7478] xfrm1: entered allmulticast mode [ 189.696597][ T5892] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 189.856537][ T24] gspca_ov534_9: Unknown sensor 0000 [ 189.856642][ T24] ov534_9 1-1:223.0: probe with driver ov534_9 failed with error -22 [ 189.876739][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 189.890963][ T24] usb 1-1: USB disconnect, device number 33 [ 189.902589][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.927021][ T5892] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 189.994263][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.043362][ T9] usb 3-1: USB disconnect, device number 26 [ 190.064103][ T5892] usb 5-1: Product: syz [ 190.083225][ T5892] usb 5-1: Manufacturer: syz [ 190.101730][ T5892] usb 5-1: SerialNumber: syz [ 190.132464][ T5892] usb 5-1: config 0 descriptor?? [ 190.346740][ T24] usb 5-1: USB disconnect, device number 44 [ 190.465449][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 190.686527][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 190.697876][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.736009][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.756657][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.786634][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.856673][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.918350][ T9] usb 3-1: config 0 descriptor?? [ 190.949031][ T9] hub 3-1:0.0: USB hub found [ 191.127268][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.148994][ T7493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 191.177327][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.188323][ T3195] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 191.271257][ T9] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 191.290617][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.342358][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.351976][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.357230][ T3195] usb 5-1: config 1 interface 0 has no altsetting 0 [ 191.362043][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.377317][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.398226][ T3195] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.40 [ 191.426862][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.438248][ T3195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.450289][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.482338][ T3195] usb 5-1: Product: 沽텸艵⚻㻋嫠ᘛ桸껙ᆿ扂Ǯⷘ♅ᶑ탢蛕ﱚ怭盗넳鿒뤴넺櫎咠⸦蒛⫑๣喂遷ڤ莽꒡쌵꼃沥슪蒐儩者ᅲ睸죏镀㾉袕ꎲ䳖Ʀ꣉殦ᖰ뇊폛擱沸 [ 191.493148][ T7505] kvm_intel: kvm [7504]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x65 [ 191.531875][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 191.538816][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.558223][ T7512] futex_wake_op: syz.3.369 tries to shift op by -1; fix this program [ 191.579791][ T3195] usb 5-1: Manufacturer: ‴풲縖Ц햾ⲩ醃֐雵ꊼᯄ䭳䮛▧늻㔶攚䭔ᮈ迏輥谎郂δ堯屹쿱㮒称둅赘겯殯 [ 191.601285][ T3195] usb 5-1: SerialNumber: Ў [ 191.607786][ T9] usb 3-1: USB disconnect, device number 27 [ 191.620415][ T7513] [U] .h0FwZ,iqgҏV2sO [ 191.632440][ T7513] [U] ` w*BBOLhU [ 191.637096][ T7513] [U] w$n|#%o.z\̧mРw [ 191.696582][ T7513] [U] R{ꫢ S [ 192.061124][ T3195] usbhid 5-1:1.0: can't add hid device: -71 [ 192.070732][ T3195] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 192.105386][ T3195] usb 5-1: USB disconnect, device number 45 [ 192.321064][ T7510] [U] [ 192.327115][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 192.387568][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 192.487463][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 192.494008][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 192.502257][ T9] usb 2-1: config 0 has no interface number 0 [ 192.509068][ T9] usb 2-1: config 0 interface 125 has no altsetting 0 [ 192.518931][ T9] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 192.529041][ T5892] usb 3-1: device descriptor read/64, error -71 [ 192.535444][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.543546][ T9] usb 2-1: Product: syz [ 192.549072][ T9] usb 2-1: Manufacturer: syz [ 192.553772][ T9] usb 2-1: SerialNumber: syz [ 192.561466][ T9] usb 2-1: config 0 descriptor?? [ 192.630642][ T3195] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 192.773634][ T9] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 192.792280][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 192.810298][ T3195] usb 4-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 192.831888][ T3195] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.845535][ T3195] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 192.858081][ T3195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.878039][ T3195] usb 4-1: config 0 descriptor?? [ 192.936560][ T5892] usb 3-1: device descriptor read/64, error -71 [ 193.048743][ T5892] usb usb3-port1: attempt power cycle [ 193.076614][ T5913] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 193.244141][ T5913] usb 5-1: config 9 has an invalid interface number: 51 but max is 1 [ 193.252687][ T5913] usb 5-1: config 9 has an invalid interface number: 73 but max is 1 [ 193.266921][ T5913] usb 5-1: config 9 has no interface number 0 [ 193.275618][ T5913] usb 5-1: config 9 has no interface number 1 [ 193.514981][ T5913] usb 5-1: config 9 interface 51 has no altsetting 0 [ 193.522077][ T5913] usb 5-1: config 9 interface 73 has no altsetting 0 [ 193.531795][ T5913] usb 5-1: New USB device found, idVendor=0499, idProduct=1001, bcdDevice=c4.19 [ 193.541224][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.550882][ T9] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 193.559690][ T5892] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 193.568287][ T5913] usb 5-1: Product: syz [ 193.573203][ T5913] usb 5-1: Manufacturer: syz [ 193.581435][ T5913] usb 5-1: SerialNumber: syz [ 193.589484][ T5892] usb 3-1: device descriptor read/8, error -71 [ 193.707494][ T9] usb 2-1: device descriptor read/64, error -71 [ 193.831941][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.839058][ T5892] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 193.847282][ T5913] usb 5-1: invalid MIDI in EP 0 [ 193.863446][ T5913] snd-usb-audio 5-1:9.51: probe with driver snd-usb-audio failed with error -22 [ 193.898529][ T5892] usb 3-1: device descriptor read/8, error -71 [ 193.917067][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 193.947639][ T5913] snd-usb-audio 5-1:9.73: probe with driver snd-usb-audio failed with error -2 [ 193.957092][ T9] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 193.970873][ T5913] usb 5-1: USB disconnect, device number 46 [ 193.992335][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:9.73/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.011262][ T5892] usb usb3-port1: unable to enumerate USB device [ 194.098153][ T9] usb 2-1: device descriptor read/64, error -71 [ 194.336572][ T9] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 194.368058][ T9] usb 2-1: device descriptor read/8, error -71 [ 194.602088][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.608675][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615100][ T9] usb 2-1: reset high-speed USB device number 19 using dummy_hcd [ 194.630176][ T3195] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 194.638202][ T5917] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 194.638378][ T9] usb 2-1: device descriptor read/8, error -71 [ 194.763668][ T9] ueagle-atm 2-1:0.125: usbatm_usb_probe: bind failed: -19! [ 194.781067][ T9] usb 2-1: USB disconnect, device number 19 [ 194.799487][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 194.806678][ T3195] usb 5-1: Using ep0 maxpacket: 16 [ 194.825282][ T3195] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.850218][ T5917] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 194.861860][ T3195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.873740][ T5917] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 194.896688][ T5917] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.910042][ T5917] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 194.924021][ T3195] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.926598][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 194.933182][ T3195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.949441][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.956101][ T5917] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 194.966025][ T3195] usb 5-1: Product: syz [ 194.970836][ T3195] usb 5-1: Manufacturer: syz [ 194.975524][ T3195] usb 5-1: SerialNumber: syz [ 194.980965][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.993953][ T3195] usb 5-1: config 0 descriptor?? [ 195.004447][ T5917] usb 1-1: config 0 descriptor?? [ 195.015330][ T3195] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.029447][ T3195] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 195.096571][ T9] usb 2-1: device descriptor read/64, error -71 [ 195.167398][ T7550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.379'. [ 195.398811][ T5906] usb 4-1: USB disconnect, device number 24 [ 195.504749][ T5917] microsoft 0003:045E:00F9.0008: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.0-1/input0 [ 195.546578][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 195.549169][ T5917] microsoft 0003:045E:00F9.0008: no inputs found [ 195.586698][ T5917] microsoft 0003:045E:00F9.0008: could not initialize ff, continuing anyway [ 195.706002][ T3195] em28xx 5-1:0.0: chip ID is em28178 [ 195.716608][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 195.722282][ T5917] usb 1-1: USB disconnect, device number 34 [ 195.744422][ T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.784127][ T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.842085][ T9] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 195.893950][ T7559] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 195.921597][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.929258][ T7559] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 195.942968][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 195.944977][ T5906] usb 5-1: USB disconnect, device number 47 [ 195.962576][ T5906] em28xx 5-1:0.0: Disconnecting em28xx [ 195.966693][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.996408][ T5906] em28xx 5-1:0.0: Freeing device [ 196.006319][ T9] usb 2-1: config 0 descriptor?? [ 196.628108][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 196.679716][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 196.732974][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.806734][ T9] usb 2-1: USB disconnect, device number 21 [ 196.829714][ T5913] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 196.842234][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.906660][ T5913] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 196.936541][ T5913] usb 4-1: config 1 has no interface number 1 [ 196.942712][ T5913] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.998636][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.008203][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.016231][ T5913] usb 4-1: Product: syz [ 197.041656][ T7579] pim6reg: entered allmulticast mode [ 197.047135][ T5913] usb 4-1: Manufacturer: syz [ 197.058450][ T5913] usb 4-1: SerialNumber: syz [ 197.107612][ T7579] pim6reg: left allmulticast mode [ 197.112987][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 197.170002][ T7587] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 197.405583][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.382'. [ 197.492720][ T5913] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 197.530403][ T5913] usb 4-1: MIDIStreaming interface descriptor not found [ 197.712384][ T5913] usb 4-1: USB disconnect, device number 25 [ 197.722007][ T7604] kvm: vcpu 0: requested 1088 ns lapic timer period limited to 200000 ns [ 197.776725][ T7611] netdevsim netdevsim1: Direct firmware load for . [ 197.776725][ T7611] failed with error -2 [ 197.793844][ T7604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3431573084 (3431573084 ns) > initial count (200000 ns). Using initial count to start timer. [ 197.827149][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.854392][ T7611] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 197.854392][ T7611] [ 198.149235][ T7618] qrtr: Invalid version 25 [ 198.285746][ T7594] syz.2.391 (7594): drop_caches: 2 [ 199.117973][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.507454][ T5892] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.678445][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.715400][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.787088][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.867225][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.916577][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.959810][ T5892] usb 2-1: config 0 descriptor?? [ 200.127013][ T3195] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 200.317297][ T3195] usb 1-1: Using ep0 maxpacket: 8 [ 200.332777][ T3195] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 200.370000][ T3195] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 200.380345][ T5892] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.395514][ T3195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.431825][ T3195] usb 1-1: Product: syz [ 200.445395][ T3195] usb 1-1: Manufacturer: syz [ 200.456030][ T3195] usb 1-1: SerialNumber: syz [ 200.479708][ T3195] usb 1-1: config 0 descriptor?? [ 200.510084][ T3195] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 200.534451][ T3195] usb 1-1: setting power ON [ 200.639240][ T3195] dvb-usb: bulk message failed: -22 (2/0) [ 200.660990][ T3195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.673069][ T3195] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 200.686659][ T3195] usb 1-1: media controller created [ 200.717541][ T7647] dvb-usb: bulk message failed: -22 (3/0) [ 200.733288][ T7667] trusted_key: encrypted_key: master key parameter 'sbiWlCҠ0bBaޱTgwHX}\hpzc+taGqvb@N%%ay' is invalid [ 200.826107][ T3195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.840280][ T7647] dvb-usb: bulk message failed: -22 (3/0) [ 200.863665][ T24] usb 2-1: USB disconnect, device number 22 [ 200.950295][ T5892] IPVS: starting estimator thread 0... [ 200.992532][ T3195] usb 1-1: selecting invalid altsetting 6 [ 201.001845][ T3195] usb 1-1: digital interface selection failed (-22) [ 201.046857][ T7672] IPVS: using max 34 ests per chain, 81600 per kthread [ 201.055443][ T3195] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 201.091042][ T3195] usb 1-1: setting power OFF [ 201.107085][ T3195] dvb-usb: bulk message failed: -22 (2/0) [ 201.126423][ T3195] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 201.177374][ T3195] (NULL device *): no alternate interface [ 201.279987][ T3195] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 201.310031][ T3195] usb 1-1: USB disconnect, device number 35 [ 201.316595][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 201.486728][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 201.494590][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 201.502557][ T24] usb 2-1: can't read configurations, error -61 [ 201.646649][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 201.664571][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.408'. [ 201.809697][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 201.815864][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 201.815883][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.836632][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 201.845424][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 201.855155][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 201.869209][ T24] usb 2-1: can't read configurations, error -61 [ 201.878710][ T24] usb usb2-port1: attempt power cycle [ 202.119070][ T7685] syzkaller1: entered promiscuous mode [ 202.141811][ T7685] syzkaller1: entered allmulticast mode [ 202.393952][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.426380][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.438961][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 202.490264][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 202.498693][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 202.506502][ T24] usb 2-1: can't read configurations, error -61 [ 202.616666][ T5892] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 202.654416][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 202.687327][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 202.695059][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 202.705550][ T24] usb 2-1: can't read configurations, error -61 [ 202.750408][ T24] usb usb2-port1: unable to enumerate USB device [ 203.216913][ T5913] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 203.476670][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 203.484150][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 203.496320][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 203.507133][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.515255][ T5913] usb 1-1: Product: syz [ 203.659769][ T5913] usb 1-1: Manufacturer: syz [ 203.672197][ T5913] usb 1-1: SerialNumber: syz [ 203.688767][ T5913] usb 1-1: config 0 descriptor?? [ 203.705700][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 203.723711][ T5913] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 203.843166][ T7715] netlink: 64 bytes leftover after parsing attributes in process `syz.2.417'. [ 204.169017][ T5913] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 204.626017][ T5913] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 204.672080][ T5913] em28xx 1-1:0.0: board has no eeprom [ 204.966611][ T5892] usb 5-1: device descriptor read/64, error -71 [ 204.986877][ T5913] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 205.004975][ T5913] em28xx 1-1:0.0: dvb set to bulk mode. [ 205.010992][ T5885] em28xx 1-1:0.0: Binding DVB extension [ 205.126622][ T5899] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 205.217760][ T5892] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 205.249114][ T5885] em28xx 1-1:0.0: Registering input extension [ 205.303222][ T5885] usb 1-1: USB disconnect, device number 36 [ 205.308251][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.338173][ T5885] em28xx 1-1:0.0: Disconnecting em28xx [ 205.349036][ T5885] em28xx 1-1:0.0: Closing input extension [ 205.377579][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.417738][ T5892] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 205.431205][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.433126][ T5899] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 205.449971][ T5892] usb 5-1: Product: syz [ 205.456746][ T5885] em28xx 1-1:0.0: Freeing device [ 205.467372][ T5892] usb 5-1: Manufacturer: syz [ 205.472012][ T5892] usb 5-1: SerialNumber: syz [ 205.512843][ T5892] usb 5-1: config 0 descriptor?? [ 205.543194][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.602160][ T5899] usb 3-1: config 0 descriptor?? [ 205.900394][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 205.976593][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 206.017706][ T7736] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 206.156985][ T5885] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 206.181691][ T5899] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 206.196865][ T5899] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 206.411785][ T5885] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 206.429258][ T5899] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 206.431457][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.662355][ T5885] usb 1-1: config 0 descriptor?? [ 206.699421][ T5885] cp210x 1-1:0.0: cp210x converter detected [ 207.028846][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.086030][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.134273][ T5899] cp2112 0003:10C4:EA90.000A: error reading lock byte: -32 [ 207.167287][ T5892] usb 5-1: Firmware version (0.0) predates our first public release. [ 207.175524][ T5892] usb 5-1: Please update to version 0.2 or newer [ 207.404268][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 207.478427][ T5885] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 207.486136][ T5885] cp210x 1-1:0.0: querying part number failed [ 207.556779][ T5885] usb 1-1: cp210x converter now attached to ttyUSB0 [ 207.566656][ T5899] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 207.704442][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'. [ 207.720068][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 207.720088][ T30] audit: type=1326 audit(1760807503.781:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 207.753478][ T30] audit: type=1326 audit(1760807503.811:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 207.800823][ T30] audit: type=1326 audit(1760807503.811:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 207.926132][ T30] audit: type=1326 audit(1760807503.811:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 207.959729][ T30] audit: type=1326 audit(1760807503.841:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 207.988151][ T30] audit: type=1326 audit(1760807503.841:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 208.012407][ T30] audit: type=1326 audit(1760807503.841:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 208.034632][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.043011][ T30] audit: type=1326 audit(1760807503.841:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 208.266531][ T5885] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 208.276835][ T30] audit: type=1326 audit(1760807503.841:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 208.403977][ T30] audit: type=1326 audit(1760807503.841:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7760 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa3c78efc9 code=0x7ffc0000 [ 208.469419][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 208.478099][ T5906] usb 3-1: USB disconnect, device number 32 [ 208.513603][ T5885] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 208.523279][ T7771] program syz.3.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.534335][ T5885] usb 2-1: config 0 has no interface number 0 [ 208.606593][ T5885] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 208.627835][ T9] usb 5-1: USB disconnect, device number 49 [ 208.836081][ T5885] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.860080][ T5885] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 208.883407][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.917625][ T5885] usb 2-1: Product: syz [ 208.926650][ T5885] usb 2-1: Manufacturer: syz [ 208.931940][ T5885] usb 2-1: SerialNumber: syz [ 208.968418][ T5885] usb 2-1: config 0 descriptor?? [ 208.974078][ T7766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.990341][ T7766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 208.999967][ T5913] usb 1-1: USB disconnect, device number 37 [ 209.067429][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.091271][ T5913] cp210x 1-1:0.0: device disconnected [ 209.233480][ T7766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 209.269085][ T5885] asix 2-1:0.251: probe with driver asix failed with error -71 [ 209.299412][ T7798] lo: entered allmulticast mode [ 209.325021][ T5885] usb 2-1: USB disconnect, device number 27 [ 209.486027][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 209.507181][ T7807] netlink: 'syz.1.435': attribute type 7 has an invalid length. [ 209.514978][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 209.528043][ T7798] lo: left allmulticast mode [ 209.611951][ T1099] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.621281][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 209.636096][ T1099] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.636569][ T7807] netlink: 'syz.1.435': attribute type 7 has an invalid length. [ 209.668935][ T1099] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.680094][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 209.695656][ T1099] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.965374][ T5885] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 210.136527][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 210.584016][ T7823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.609129][ T5885] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 210.689464][ T5885] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 210.707022][ T5892] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 210.719081][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.760745][ T5885] usb 1-1: Product: syz [ 210.765009][ T5885] usb 1-1: Manufacturer: syz [ 210.785583][ T5885] usb 1-1: SerialNumber: syz [ 210.813898][ T5885] usb 1-1: config 0 descriptor?? [ 210.853476][ T5885] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 210.880780][ T5892] usb 4-1: device descriptor read/64, error -71 [ 210.893392][ T5885] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 210.946749][ T5913] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 211.167793][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 211.190462][ T5913] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.259620][ T7814] input: syz1 as /devices/virtual/input/input17 [ 211.266858][ T5913] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.305085][ T5913] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.365238][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.383959][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.559719][ T5892] usb 4-1: device descriptor read/64, error -71 [ 211.602252][ T5913] usb 5-1: Product: syz [ 211.639605][ T5913] usb 5-1: Manufacturer: syz [ 211.660491][ T5913] usb 5-1: SerialNumber: syz [ 211.686941][ T5885] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 211.716063][ T5892] usb usb4-port1: attempt power cycle [ 211.725902][ T5913] hub 5-1:1.0: bad descriptor, ignoring hub [ 211.804041][ T5885] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 211.831190][ T5913] hub 5-1:1.0: probe with driver hub failed with error -5 [ 211.838818][ T5885] em28xx 1-1:0.0: board has no eeprom [ 211.950515][ T5885] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 212.025446][ T5885] em28xx 1-1:0.0: dvb set to bulk mode. [ 212.056132][ T1208] em28xx 1-1:0.0: Binding DVB extension [ 212.105258][ T5913] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 212.117298][ T5885] usb 1-1: USB disconnect, device number 38 [ 212.138432][ T5885] em28xx 1-1:0.0: Disconnecting em28xx [ 212.187683][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 212.269869][ T1208] em28xx 1-1:0.0: Registering input extension [ 212.276268][ T5892] usb 4-1: device descriptor read/8, error -71 [ 212.293065][ T5885] em28xx 1-1:0.0: Closing input extension [ 212.319409][ T5885] em28xx 1-1:0.0: Freeing device [ 212.569533][ T5892] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 212.647257][ T5892] usb 4-1: device descriptor read/8, error -71 [ 212.721748][ T7865] netdevsim netdevsim2: Direct firmware load for . [ 212.721748][ T7865] failed with error -2 [ 212.732567][ T7865] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 212.732567][ T7865] [ 212.767058][ T5892] usb usb4-port1: unable to enumerate USB device [ 213.126644][ T5892] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 213.344414][ T5892] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.359393][ T5892] usb 1-1: not running at top speed; connect to a high speed hub [ 213.400954][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.438868][ T5892] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 213.476551][ T5892] usb 1-1: config 1 has no interface number 1 [ 213.506787][ T5892] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 213.687401][ T5892] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 213.707485][ T5892] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.726812][ T1208] usb 5-1: USB disconnect, device number 50 [ 213.734890][ T1208] usblp0: removed [ 213.766514][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.786692][ T5892] usb 1-1: Product: syz [ 213.796821][ T5892] usb 1-1: Manufacturer: syz [ 213.801455][ T5892] usb 1-1: SerialNumber: syz [ 214.047378][ T5892] hub 1-1:1.0: Invalid hub with more than one config or interface [ 214.064684][ T5892] hub 1-1:1.0: probe with driver hub failed with error -22 [ 214.080237][ T5892] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 214.127836][ T5892] usb 1-1: USB disconnect, device number 39 [ 214.182577][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.556712][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.516801][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 256.040551][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.047130][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.636650][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.481404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.487910][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.920001][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.926912][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.276801][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.016548][ T5899] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 399.166611][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 399.173357][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 399.182114][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 399.193697][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 399.204881][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 399.214835][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 399.224562][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 399.235009][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 399.244986][ T5899] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 399.256792][ T5899] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 399.265844][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.273909][ T5899] usb 1-1: Product: syz [ 399.278110][ T5899] usb 1-1: Manufacturer: syz [ 399.283288][ T5899] usb 1-1: SerialNumber: syz [ 399.292031][ T5899] usb 1-1: config 0 descriptor?? [ 399.348013][ T7956] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.361992][ T7965] bond1: option arp_all_targets: invalid value (18446744073290121217) [ 399.378485][ T5899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.383410][ T7965] bond1 (unregistering): Released all slaves [ 399.415450][ T7970] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 399.451988][ T7970] netlink: 'syz.1.451': attribute type 12 has an invalid length. [ 399.461594][ T7970] netlink: 'syz.1.451': attribute type 29 has an invalid length. [ 399.481257][ T7970] netlink: 148 bytes leftover after parsing attributes in process `syz.1.451'. [ 399.485925][ T5899] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 399.510636][ T7970] netlink: 59 bytes leftover after parsing attributes in process `syz.1.451'. [ 399.586503][ T1208] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 399.601365][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.610898][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.789849][ T5892] usb 1-1: USB disconnect, device number 40 [ 399.817499][ T1208] usb 4-1: device descriptor read/64, error -71 [ 399.945158][ T7983] udevd[7983]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.945447][ T7989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.120134][ T1208] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 400.269799][ T7998] netdevsim netdevsim4: Direct firmware load for . [ 400.269799][ T7998] failed with error -2 [ 400.280630][ T7998] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 400.280630][ T7998] [ 400.316236][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 400.316236][ T1208] usb 4-1: device descriptor read/64, error -71 [ 400.457182][ T1208] usb usb4-port1: attempt power cycle [ 400.466531][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 400.529315][ T5899] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 400.633555][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.681911][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 400.692675][ T5899] pvrusb2: ********** [ 400.697099][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 400.707769][ T5899] pvrusb2: Important functionality might not be entirely working. [ 400.715827][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 400.732166][ T5899] pvrusb2: ********** [ 400.806595][ T1208] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 400.828140][ T1208] usb 4-1: device descriptor read/8, error -71 [ 400.875814][ T2343] pvrusb2: Invalid write control endpoint [ 401.122632][ T2343] pvrusb2: Invalid write control endpoint [ 401.129271][ T1208] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 401.137428][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 401.150667][ T5899] usb 2-1: USB disconnect, device number 28 [ 401.168043][ T1208] usb 4-1: device descriptor read/8, error -71 [ 401.186841][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 401.209890][ T8012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.288765][ T1208] usb usb4-port1: unable to enumerate USB device [ 401.300877][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 401.527589][ T2343] pvrusb2: Device being rendered inoperable [ 401.581218][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 401.603670][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 401.651948][ T2343] pvrusb2: Attached sub-driver cx25840 [ 401.667025][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 401.678618][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 401.819900][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e60800: rx timeout, send abort [ 402.016633][ T5899] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 402.111314][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 402.167230][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 402.178418][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 402.195502][ T5899] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 402.219980][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 402.243689][ T5899] usb 2-1: Product: syz [ 402.254066][ T5899] usb 2-1: Manufacturer: syz [ 402.266151][ T5899] usb 2-1: SerialNumber: syz [ 402.329571][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055e60800: abort rx timeout. Force session deactivation [ 402.340614][ T5899] usb 2-1: config 0 descriptor?? [ 402.482997][ T8036] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 402.512459][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 402.555407][ T8036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.469'. [ 402.594411][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 402.623808][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.464'. [ 402.819521][ T8048] binder: 8046:8048 ioctl 4018620d 0 returned -22 [ 402.959179][ T8052] binder: 8046:8052 ioctl 4018620d 0 returned -22 [ 402.974641][ T5899] usb 2-1: USB disconnect, device number 29 [ 403.359613][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.469'. [ 403.372922][ T8035] syzkaller1: entered promiscuous mode [ 403.378556][ T8035] syzkaller1: entered allmulticast mode [ 403.571541][ T8069] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 403.797707][ T8071] netlink: 'syz.3.477': attribute type 12 has an invalid length. [ 403.806136][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 403.835917][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.848168][ T8071] netlink: 'syz.3.477': attribute type 12 has an invalid length. [ 403.857681][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.895399][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.909755][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.529755][ T5899] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 404.718177][ T5899] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 404.726630][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.736943][ T5899] usb 4-1: config 0 has no interface number 0 [ 404.746289][ T5899] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 404.755814][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.768551][ T5899] usb 4-1: Product: syz [ 404.773318][ T5899] usb 4-1: Manufacturer: syz [ 404.788316][ T5899] usb 4-1: SerialNumber: syz [ 404.823713][ T5899] usb 4-1: config 0 descriptor?? [ 405.235773][ T5899] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 405.607516][ T8076] kvm: MONITOR instruction emulated as NOP! [ 405.811501][ T8094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.892498][ T5899] usb 4-1: USB disconnect, device number 34 [ 406.116822][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 406.225549][ T8103] __nla_validate_parse: 1 callbacks suppressed [ 406.225568][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 406.261254][ T8103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.346489][ T5899] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 406.364059][ T8108] loop9: detected capacity change from 0 to 7 [ 406.377151][ T8108] Dev loop9: unable to read RDB block 7 [ 406.381740][ T8103] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 406.413430][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 406.425310][ T8108] loop9: AHDI p1 p2 [ 406.449913][ T8108] loop9: partition table partially beyond EOD, truncated [ 406.549770][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 406.568143][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 406.599669][ T5899] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 406.616881][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 406.616900][ T30] audit: type=1326 audit(1760807702.671:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 406.656067][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.656108][ T30] audit: type=1326 audit(1760807702.671:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 406.688711][ T30] audit: type=1326 audit(1760807702.671:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 406.704138][ T5899] usb 5-1: config 0 descriptor?? [ 406.761905][ T30] audit: type=1326 audit(1760807702.671:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.120486][ T1208] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 407.190449][ T30] audit: type=1326 audit(1760807702.671:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.282156][ T30] audit: type=1326 audit(1760807702.711:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.309771][ T30] audit: type=1326 audit(1760807702.711:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.377198][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 407.403741][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.415109][ T30] audit: type=1326 audit(1760807702.711:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.417558][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.477630][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.531271][ T30] audit: type=1326 audit(1760807702.711:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.565977][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.699852][ T1208] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 407.720248][ T8119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.493'. [ 407.729275][ T8119] erspan0: entered promiscuous mode [ 407.732543][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.734654][ T8119] erspan0: entered allmulticast mode [ 407.746909][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.746942][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.755402][ T30] audit: type=1326 audit(1760807702.711:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8107 comm="syz.2.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c6b8efc9 code=0x7ffc0000 [ 407.782994][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.783330][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.827820][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.839837][ T8119] x_tables: duplicate underflow at hook 1 [ 407.866343][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.896439][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.903565][ T5899] acrux 0003:1A34:F705.000B: unknown main item tag 0x0 [ 407.911904][ T1208] usb 1-1: config 0 descriptor?? [ 407.981959][ T5899] acrux 0003:1A34:F705.000B: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.4-1/input0 [ 408.066489][ T5899] acrux 0003:1A34:F705.000B: no inputs found [ 408.072556][ T5899] acrux 0003:1A34:F705.000B: Failed to enable force feedback support, error: -19 [ 408.122875][ T8125] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 408.148740][ T8127] netlink: 14 bytes leftover after parsing attributes in process `syz.0.491'. [ 408.234454][ T8125] kvm: pic: non byte read [ 408.293662][ T1208] usbhid 1-1:0.0: can't add hid device: -71 [ 408.308582][ T8125] kvm: pic: non byte read [ 408.315609][ T1208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 408.382060][ T1208] usb 1-1: USB disconnect, device number 41 [ 408.386943][ T5899] usb 5-1: USB disconnect, device number 51 [ 408.428705][ T8125] Cannot find add_set index 1 as target [ 408.780102][ T8136] syzkaller1: entered promiscuous mode [ 408.806248][ T8136] syzkaller1: entered allmulticast mode [ 409.411678][ T8146] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 409.423612][ T8146] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 409.432900][ T8146] CPU: 0 UID: 0 PID: 8146 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT(full) [ 409.442083][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 409.452155][ T8146] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 409.458206][ T8146] Code: 80 3c 2f 00 74 08 48 89 df e8 f0 8a 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c5 8a 29 f7 4d 8b 2c 24 49 83 c5 [ 409.478181][ T8146] RSP: 0018:ffffc9001c1aef60 EFLAGS: 00010a06 [ 409.484421][ T8146] RAX: 1bd5a9d5a0000003 RBX: ffff888053400648 RCX: ffff88802a3d8000 [ 409.492385][ T8146] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 409.500342][ T8146] RBP: ffffc9001c1af2b0 R08: ffff88805340005f R09: 1ffff1100a68000b [ 409.508394][ T8146] R10: dffffc0000000000 R11: ffffed100a68000c R12: dead4ead00000018 [ 409.516531][ T8146] R13: dffffc0000000000 R14: ffff888053400000 R15: 1ffff1100a6800c9 [ 409.524589][ T8146] FS: 00007efd662466c0(0000) GS:ffff888125d0b000(0000) knlGS:0000000000000000 [ 409.533513][ T8146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.540174][ T8146] CR2: 000020000000e000 CR3: 000000007ede2000 CR4: 00000000003526f0 [ 409.548139][ T8146] Call Trace: [ 409.551409][ T8146] [ 409.554334][ T8146] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 409.559975][ T8146] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 409.565524][ T8146] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 409.571070][ T8146] ? __phys_addr+0xd3/0x180 [ 409.575563][ T8146] ? __kasan_kmalloc_large+0x85/0xa0 [ 409.580840][ T8146] ? rcu_is_watching+0x15/0xb0 [ 409.585609][ T8146] ? rcu_is_watching+0x15/0xb0 [ 409.590368][ T8146] ? trace_kmalloc+0x1f/0xd0 [ 409.594950][ T8146] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 409.601526][ T8146] ? __alloc_skb+0x142/0x2d0 [ 409.606114][ T8146] ? __build_skb_around+0x262/0x3f0 [ 409.611312][ T8146] smc_diag_dump+0x59/0xa0 [ 409.615815][ T8146] netlink_dump+0x6e4/0xe90 [ 409.620838][ T8146] ? __pfx_netlink_dump+0x10/0x10 [ 409.625858][ T8146] ? __netlink_lookup+0x7db/0x8a0 [ 409.630878][ T8146] ? netlink_lookup+0x30/0x200 [ 409.635631][ T8146] ? netlink_lookup+0x30/0x200 [ 409.640743][ T8146] ? netlink_lookup+0x30/0x200 [ 409.645516][ T8146] __netlink_dump_start+0x5cb/0x7e0 [ 409.650714][ T8146] smc_diag_handler_dump+0x178/0x210 [ 409.656029][ T8146] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 409.661833][ T8146] ? __pfx_smc_diag_dump+0x10/0x10 [ 409.666944][ T8146] ? sock_diag_lock_handler+0x19/0x290 [ 409.672394][ T8146] ? sock_diag_lock_handler+0x19/0x290 [ 409.677847][ T8146] sock_diag_rcv_msg+0x4cc/0x600 [ 409.682777][ T8146] netlink_rcv_skb+0x208/0x470 [ 409.687531][ T8146] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 409.692979][ T8146] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.698258][ T8146] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.703449][ T8146] netlink_unicast+0x82f/0x9e0 [ 409.708205][ T8146] ? __pfx_netlink_unicast+0x10/0x10 [ 409.713479][ T8146] ? netlink_sendmsg+0x642/0xb30 [ 409.718409][ T8146] ? skb_put+0x11b/0x210 [ 409.722649][ T8146] netlink_sendmsg+0x805/0xb30 [ 409.727433][ T8146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.732712][ T8146] ? aa_sock_msg_perm+0xf1/0x1d0 [ 409.737639][ T8146] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.742921][ T8146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.748198][ T8146] __sock_sendmsg+0x21c/0x270 [ 409.752887][ T8146] ____sys_sendmsg+0x505/0x830 [ 409.757653][ T8146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.762942][ T8146] ? import_iovec+0x74/0xa0 [ 409.767443][ T8146] ___sys_sendmsg+0x21f/0x2a0 [ 409.772128][ T8146] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.777347][ T8146] ? __fget_files+0x2a/0x420 [ 409.781967][ T8146] ? __fget_files+0x3a0/0x420 [ 409.787699][ T8146] __x64_sys_sendmsg+0x19b/0x260 [ 409.793409][ T8146] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.798860][ T8146] ? do_user_addr_fault+0xc85/0x1380 [ 409.804141][ T8146] ? do_syscall_64+0xbe/0xfa0 [ 409.809104][ T8146] do_syscall_64+0xfa/0xfa0 [ 409.813618][ T8146] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.819239][ T8146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.825998][ T8146] ? clear_bhb_loop+0x60/0xb0 [ 409.830690][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.836654][ T8146] RIP: 0033:0x7efd6538efc9 [ 409.841117][ T8146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.861156][ T8146] RSP: 002b:00007efd66246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.869567][ T8146] RAX: ffffffffffffffda RBX: 00007efd655e6090 RCX: 00007efd6538efc9 [ 409.877533][ T8146] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000005 [ 409.885497][ T8146] RBP: 00007efd65411f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.893568][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.901584][ T8146] R13: 00007efd655e6128 R14: 00007efd655e6090 R15: 00007efd6570fa28 [ 409.909618][ T8146] [ 409.912662][ T8146] Modules linked in: [ 409.916582][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.926927][ T8146] ---[ end trace 0000000000000000 ]--- [ 409.932953][ T8146] RIP: 0010:smc_diag_dump_proto+0x4bc/0x1fc0 [ 409.939019][ T8146] Code: 80 3c 2f 00 74 08 48 89 df e8 f0 8a 29 f7 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 c5 8a 29 f7 4d 8b 2c 24 49 83 c5 [ 409.958768][ T8146] RSP: 0018:ffffc9001c1aef60 EFLAGS: 00010a06 [ 409.964871][ T8146] RAX: 1bd5a9d5a0000003 RBX: ffff888053400648 RCX: ffff88802a3d8000 [ 409.972885][ T8146] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 409.980961][ T8146] RBP: ffffc9001c1af2b0 R08: ffff88805340005f R09: 1ffff1100a68000b [ 409.988999][ T8146] R10: dffffc0000000000 R11: ffffed100a68000c R12: dead4ead00000018 [ 409.997150][ T8146] R13: dffffc0000000000 R14: ffff888053400000 R15: 1ffff1100a6800c9 [ 410.005244][ T8146] FS: 00007efd662466c0(0000) GS:ffff888125d0b000(0000) knlGS:0000000000000000 [ 410.014402][ T8146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.021125][ T8146] CR2: 000020000000e000 CR3: 000000007ede2000 CR4: 00000000003526f0 [ 410.029257][ T8146] Kernel panic - not syncing: Fatal exception [ 410.035649][ T8146] Kernel Offset: disabled [ 410.039964][ T8146] Rebooting in 86400 seconds..