last executing test programs: 1m26.438370616s ago: executing program 0 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x40700}]}) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x40700}]}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000300)) (async) getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r8, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) 1m25.930603199s ago: executing program 0 (id=406): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x5, 0xa, 0x2, 0x0, 0x81}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa, 0x0, 0x0, 0x80}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.424133032s ago: executing program 0 (id=408): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x4000}, {0x0}, {0x0, 0x0, 0x1}, {0x0}]}, 0x4, 0x2}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x4000}, {0x0}, {0x0, 0x0, 0x1}, {0x0}]}, 0x4, 0x2}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce60300c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35179bd223ec839bc16ee78076e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e898d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f192daa94a0c556f3218ce740068725c37074e468ee207d0f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9f74fbe9c3c6fca5cbfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e26183524cf5cc1b83d34889f40159e800ea2474b540500a30b23bcee46762e2c93bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ff80e87adf394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0b2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869ba2f3caba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958ad009995ae166deb9856291a43a6f7eb2e32cefbf463789e1f79b8d4c22be89f44b032dad13007b82e6044f643fc8cd0e30c378b4a88c39c117d27326850a7c3b570863f532c218b10af13d7be949870c9920c2d2a53b384e88862ee92fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a25468e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361f399d7c091d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8fc90f000000000000eef2e5eb804b9d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e84256f2d62d03cab53aa50c3e6000000000000000000000000000000000000283cbeeb000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edf0a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab517124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e030000000000000000000000e14908d973262569d0d6ce62cf3a30aa342f960e838fa39b97e0bf1bc6482bb99717d37b7a54d1e9d794b527a8317efbb1d5f9988e00283c36089e9ab5ee537124396e2964776eb5f02b739260b1371c97158d84ecfd6fadede98c608f4fab805c43e8eaa367f1bf2fad8ccdb058e16c810ddcc543ae417a92f0de850d4180ff08bd2857ebfef435ad23a0cc7bfe8a7928cd9d4ed249cdfc7fcdcf5275c93483be5ebb81af35375e441b09c908e45df79d3b00f031b0ec1e9f3683ded75b1fc9f72af8d690356f9bd26e8ee631b5775b60659ef1aeb789b54aad2004eea0ff225f69a62632574a2a135aa6313aabb5a7fe3ed2a77579ceb4d4af57252a4e8b3aa2a1edb8d6e79eb4aa8b9e9c470d7b53d6d2fd095119a441e19d348e8a774808dbde6b1d4ff83ff3ba6ebfaa4d48f8ce0577e20ea2fe2213946e416d0e08c15016b39eeac426be0a69014bd81d9adb00"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce60300c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35179bd223ec839bc16ee78076e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e898d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f192daa94a0c556f3218ce740068725c37074e468ee207d0f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9f74fbe9c3c6fca5cbfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e26183524cf5cc1b83d34889f40159e800ea2474b540500a30b23bcee46762e2c93bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ff80e87adf394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0b2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869ba2f3caba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958ad009995ae166deb9856291a43a6f7eb2e32cefbf463789e1f79b8d4c22be89f44b032dad13007b82e6044f643fc8cd0e30c378b4a88c39c117d27326850a7c3b570863f532c218b10af13d7be949870c9920c2d2a53b384e88862ee92fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a25468e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361f399d7c091d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8fc90f000000000000eef2e5eb804b9d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e84256f2d62d03cab53aa50c3e6000000000000000000000000000000000000283cbeeb000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edf0a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab517124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e030000000000000000000000e14908d973262569d0d6ce62cf3a30aa342f960e838fa39b97e0bf1bc6482bb99717d37b7a54d1e9d794b527a8317efbb1d5f9988e00283c36089e9ab5ee537124396e2964776eb5f02b739260b1371c97158d84ecfd6fadede98c608f4fab805c43e8eaa367f1bf2fad8ccdb058e16c810ddcc543ae417a92f0de850d4180ff08bd2857ebfef435ad23a0cc7bfe8a7928cd9d4ed249cdfc7fcdcf5275c93483be5ebb81af35375e441b09c908e45df79d3b00f031b0ec1e9f3683ded75b1fc9f72af8d690356f9bd26e8ee631b5775b60659ef1aeb789b54aad2004eea0ff225f69a62632574a2a135aa6313aabb5a7fe3ed2a77579ceb4d4af57252a4e8b3aa2a1edb8d6e79eb4aa8b9e9c470d7b53d6d2fd095119a441e19d348e8a774808dbde6b1d4ff83ff3ba6ebfaa4d48f8ce0577e20ea2fe2213946e416d0e08c15016b39eeac426be0a69014bd81d9adb00"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000c00)={0x9, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f00000003c0)="76389e147583ddd0569ba56a5cfd5588", 0x0, 0x20f7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x48902) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=0xc000c) (async) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000040)=0xc000c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m24.421603552s ago: executing program 0 (id=414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x109d01, 0x0) preadv2(r3, 0x0, 0x0, 0xfffffff9, 0x1000, 0x6) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000440)=0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmmsg$unix(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="49ae708c27209b6cd513337fb85dc880"}, {&(0x7f0000000340)="c19f26ce55adfddb062e8747319f2e7c03110267f014946f5eeccec937a7bd6964903e12116fc45c5eba85cb53ce8ad7012ddc42f51b7d8afb7421d4e8a33f9111a86f014c6d4e8ed3e8a43a6fd4fde72afde507b3430c3714d09d9539a68eaf2ac42110c4dde5f1921e474a8da3bf8cda8ab551371e9a4ffa5819fa6ae3988b99e7503dc5abd6d59785c19f4316544d3914b756a1d7f65caf4abd3f5f0f512d07b0d35f"}, {&(0x7f0000000480)="2c71b7726ff879670af7e10148733edc4454583be4b52e976742aa26cc5124c6b5fc129360962358b1211e95ba2e6c873ce54b16a07509d6860748c014a1fdfcdf58840b3dc08254ee0d91ea75eb9088e8de21b95234d81055c67ec34adb88926ae6fd0d8db3f07abb3a6a05ecfa375c8960fc62c3b43c9174a8e2771c64af8aa22e066f61ef885d8e086aa0ddcdbf126ea533f766ce6d3dbaffe7ccc62abd0609b6299842eed38d596567ce959b5ee4dac4537b55d20378df28"}], 0x0, &(0x7f00000008c0)=[@cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}}, @rights={{0x0, 0x1, 0x1, [r1]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r4, r1, r3, r3, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r0, r2, r1, r1, r2, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r2, r1, r1]}}, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}], 0x0, 0xc0}}], 0x372, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x800454e0, &(0x7f00000000c0)=0xfffffffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m23.356748151s ago: executing program 0 (id=422): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20040891) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d105012000060102"], 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) 1m23.154366066s ago: executing program 0 (id=424): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$media(&(0x7f0000000280), 0xde, 0x8001) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) (async) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) (rerun: 64) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000380)="86eac203a0d6ae3cf1d186d3a09c6023486d8a5a668c32a3ac5b3436b6ea8a03f16b78ca0fac0c56574b2b6fcbba93f02527dfde7c231123718786e6c15956a9cf8e7b00f76b031c46c3e436d3b4ffdb229231c9aabd849fe0f4e1bd9ddc2b3cd325fc3260e63fcb209d4cf364065de6f0da8c205691fde002398f436138b4e0bc7559a1dbc1a90374b88717ff24e83bc128acf4ccb8b2bd", 0x98}], 0x1, 0x1, 0xffff6423, 0x8dabb090da4815c6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x1, @mcast1, 0x1}, r3, 0x8001}}, 0x48) (async, rerun: 32) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m22.507769522s ago: executing program 32 (id=424): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$media(&(0x7f0000000280), 0xde, 0x8001) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) (async) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) (rerun: 64) pwritev2(r2, &(0x7f0000000540)=[{&(0x7f0000000380)="86eac203a0d6ae3cf1d186d3a09c6023486d8a5a668c32a3ac5b3436b6ea8a03f16b78ca0fac0c56574b2b6fcbba93f02527dfde7c231123718786e6c15956a9cf8e7b00f76b031c46c3e436d3b4ffdb229231c9aabd849fe0f4e1bd9ddc2b3cd325fc3260e63fcb209d4cf364065de6f0da8c205691fde002398f436138b4e0bc7559a1dbc1a90374b88717ff24e83bc128acf4ccb8b2bd", 0x98}], 0x1, 0x1, 0xffff6423, 0x8dabb090da4815c6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x1, @mcast1, 0x1}, r3, 0x8001}}, 0x48) (async, rerun: 32) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async, rerun: 32) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 58.258310189s ago: executing program 5 (id=516): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x60, 0x320, 0x180, 0x0, 0x4, 0x0, {0x3ff, 0x9, 0x1}, {0x350, 0x20002, 0xffffffff}, {0x3ff}, {0x4, 0x4000353}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x4}) 57.992993031s ago: executing program 5 (id=517): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="9f01000083667d1040206402d18c6d4f370176421b000100000000090400000190f19c000905f3ed7010f420e4999a9a9c75e54ec5360efedd64d443f17de5ed599fdc304a829c6a83a0ec95eeee408d18244e38f88bc5db0b0b02d67a5eed15f11d62641d39665f2cca9d1ef2d1b9ebcb"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00V'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000a008000094c1cf67801fab6acb1798ffbf8a0ef295e5378482e7375908880c0e8f0d8cf09da21377529b90cf4e995ce18b344bb0f0c080a649cd107173d0fd8726728dfe2c00af4eb1baab66d71bb615723a36ac6368a157f967f6d910646fa69b7113a8a05"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, &(0x7f0000000940)={0x14, &(0x7f0000000440)={0x20, 0x21, 0x7b, {0x7b, 0x22, "f97085fa1dcdc36323f7564db883459968db48bdbe510cbad1a9691766a3767b47d9fd926296e2ae97ff17e2af86f635d100ce606233b463411e3441b2f394fd689906143b4eee5b38b1a725dfc7e807ab558f8b95f32124643c60526abc2ff8e27a85df019d67443f1425027e1260343b48e8af6d22eaa4b5"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="0003c9000000c903f8d830bed02fdff8fb098ce2056c39cf7981b55c454e8db48d0a065cc33e08fd170e5a0f82414db6a5d35bf44e6e30cdc20c292fee8ec39e5ae57200958f82bb21c6eab0cb4bd638ecf559a62c34479ae20b6b037d2b67f330de7757567df22d398d65d75542201a7377a4c659fb696e1a504788dbda5431a9d9052006b0b68e0268f6b07668d7b84e4cdbac046ba920414dba103c625dbe0cf8b71ae552b0756d29f2ad64bc8c442ff615d5d3507c99fefeb524ae2267bcc543d635dc2fe53f00000000000000"]}, &(0x7f0000000b80)={0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)={0x0, 0xa, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b00)=ANY=[@ANYBLOB="c00508000000bb"], &(0x7f0000000b40)={0x40, 0x5, 0x3, "c9a631"}}) (async, rerun: 32) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1, 0x5, 0x7) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r7, 0x10, 0x1, @ib={0x1b, 0x7e, 0x4, {"50cce2d6ccb69d54bf35842a65b5fc9d"}, 0x3ff, 0xffffffffbc1d422f, 0x1}}}, 0xa0) (async, rerun: 64) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="ea84825ba0ff89be"], 0x0, 0x0}, 0x0) (rerun: 64) 54.814092351s ago: executing program 5 (id=528): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f00001b8000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0xffffc000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000840)={&(0x7f0000000780)=[{&(0x7f0000000280)="5a1922e32f449db021cecb3096c81d4924ee82bf12390952f629c52af8585b4c7a06646dee4f6ef13673da2f8bcddb57b7df8dd0f952685a6b71c80e8b57534db572d74e2a3801015d6c817c59924017f787f27191be51cedd8ecfc9f1f19900000000000000001599349b012af32c136186b6c660e130ecdb2eadda271b88e78509e01a9245f97dd9f80fa44403733ecb0d0f3025973bf46a7c302126fd9e5e59624c2683c27f10fdaa92a44fe128da0577bba6a0b01de102497355f5aeef0b9728a49b3a1f3efab8984ad6a4e614e4dd", 0xd1}, {&(0x7f0000000380)="3acbf426510efa222d2040fd327a1cc936d0d01f611f19ce3a038d332d2d7e589dbc5d3898d3525d91be5f9d2829eae62ca7b739", 0x34}, {&(0x7f00000003c0)="89456df3dd712408db30bd9944babf9dcf36e11d4616891a663bd6560400c97dce1bacbfe8c0a738347a6003f2be11b9c58eb9", 0x33}, {&(0x7f0000000400)="3cf065c612acc701bd1db65994d45c09007c944158a5dde1b6fba438d34ee066e1ae28fd7b1ad1509265db5211f5310f11a0cde81f19e08d4c57de4db77a93886c21703f0df7494622752b752cf87b68d457134d36411325eb", 0x59}, {&(0x7f0000000480)="6ad2974baece099d35c36bb1a44fdd75815bf431dedb23c220021a9522e4a0dd27c9f41d529b05a54dbd6aea603b3da2b8541f623b4d597c235e7d729cdd92adb60c766c8978ea2e0f44", 0x4a}, {&(0x7f0000000500)="d29839a7ab2efe5141d0b24d30e8e94303d8c08d82", 0x15}, {&(0x7f0000000540)="fb99ce9d214f5f19be926c5a9e08e2ebada12eacf636329300d3d2993209aa1709cd405dddcf3d9e3e77f10f98bb976874089c8b2d5f79c476657945367faa", 0x3f}, {&(0x7f0000000100)="6bbe26ce9a4f9d17c53647e5ad099615e45d4c", 0x13}, {&(0x7f00000008c0)="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", 0xfc}, {&(0x7f00000006c0)="ecad2fd524d3700e98efc2bc9c96f22003855162c836d7537f0814697223c386497b1d738a9c33fbe94fdd97b90acdda78e3d80af3961f1671a8f9ee204acf620e2d0a9b9e50686e637b032d6f6f681fd8c58b96572583ae6bd464daf12c19557a4ba0b8376be9accd661ddae2bf55335f5cbf53c44016668e4a835b010ac2e8a50f71c60f9dc3979c445809de2080bb0ec2b18f51a508ae8056a316e089c62302d8", 0xa2}], 0xa, 0x1, 0x0, 0x5, 0x2000000005, 0x5, 0x6, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r6, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r7, 0xa7ae6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) symlink(0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) ptrace(0x10, r8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$setregs(0x1a, r8, 0xc, &(0x7f0000000000)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r6, 0x7c80, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5201"], 0x3e, 0x0, 0x0) 52.867854465s ago: executing program 5 (id=534): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x6, 0x0) write$sndseq(r2, 0x0, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$key(0xf, 0x3, 0x2) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x30, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r9 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1e) r10 = dup(r7) write$binfmt_elf64(r10, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], 0x178) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fa212200000096090006a844070c0200002a00428b0a2452528d83000000000b09007a150b5d8c3dda"], 0x0}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x28b7, 0x4) migrate_pages(0x0, 0xffff, 0x0, &(0x7f0000000040)=0x400000000000008) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x126) 49.766476779s ago: executing program 5 (id=550): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000001740)={{0x2, 0x100, 0x8, 0x5, 0x7, 0x5}, 0x2cf, [0x5, 0xfd1, 0x0, 0xfffffffc, 0x3, 0x2, 0xd, 0x400000, 0x1ff, 0x6, 0xfff, 0x800, 0xa, 0x5, 0x2, 0x8, 0x7ff, 0x200, 0x8, 0x6, 0xbc10, 0x9, 0x3, 0x3, 0x1, 0x8d1, 0x4, 0x3, 0x0, 0xe9d4, 0x4, 0x0, 0x4, 0x63a, 0x2, 0xd, 0x8, 0x8a800, 0x80, 0x6, 0xa, 0x1b0, 0x0, 0x8, 0xfffff9b7, 0xff, 0x7, 0x2, 0xfa, 0x3, 0x5e2, 0xffffffc0, 0x6, 0x2, 0xfffffffc, 0x6ee0, 0xf, 0x5, 0x16c9fc0a, 0x7, 0x27d38e92, 0x5, 0x2, 0x1, 0xf2, 0x4, 0x5, 0x7, 0x9, 0x6, 0xfc1, 0xe8, 0x0, 0x1, 0x2, 0x1, 0x1, 0x9, 0x1, 0xffffc56c, 0x6, 0x63, 0x6, 0x80, 0x3, 0x152, 0x52, 0x2, 0x3, 0xcf0, 0x1, 0x5f7d7f0b, 0x3, 0x4, 0x1, 0x1, 0x3b, 0x5, 0x5, 0x0, 0x5, 0x913, 0x4805d5d9, 0x3, 0x8000000, 0x58, 0x4, 0x1ff, 0x6, 0x5, 0x2, 0x2, 0x1, 0x6, 0x5, 0x400, 0x10001, 0x800, 0x200, 0x476b, 0xfffffc00, 0x7fff, 0xee, 0x8, 0x9, 0x8, 0x1, 0x9, 0x2, 0xffff0001, 0x80000000, 0x1, 0x0, 0x3, 0x3, 0x7, 0x5, 0x3, 0xb05, 0x9, 0x7, 0x8, 0x2, 0x7fff, 0x2, 0x0, 0x2, 0x5, 0x9, 0xc5e, 0xa8, 0xb, 0x4, 0x2fd4, 0x1, 0x10001, 0x6, 0x0, 0x7fff, 0x1, 0x8001, 0x5, 0x3a, 0x5, 0x2b, 0x4, 0x1, 0x10000, 0xca7a, 0x80000000, 0xb, 0x3, 0x1, 0xcb, 0x2, 0xfb59, 0x8001, 0x7e9, 0x8, 0x0, 0x7ff, 0x0, 0xd5, 0x3, 0xffff, 0x0, 0xffffff00, 0x2, 0x7, 0x8, 0x4, 0x432, 0x7, 0x9, 0x5, 0x1, 0xd, 0x2, 0x80000001, 0x6, 0x400, 0x5, 0x1, 0x6, 0xf6d3, 0x7, 0x4f, 0x2, 0x1, 0x10000, 0x43, 0x3b, 0xb1, 0x0, 0xff, 0x385, 0x800, 0x400, 0x0, 0x2, 0xe, 0x896, 0x7d, 0xe, 0x1, 0x80000001, 0x0, 0x1, 0x6, 0xffffffff, 0xc, 0x10000, 0xfffffe28, 0xfffffff5, 0x4, 0x5, 0x8, 0x8, 0x0, 0x546b, 0x7, 0x7, 0x1, 0xcd, 0x7fffffff, 0xffffff80, 0x5, 0x18, 0x0, 0x9, 0x9, 0x8, 0xfba4, 0x6, 0xd, 0x80000000, 0x9, 0x92, 0x4, 0xf, 0x2, 0xda, 0x1, 0x3, 0x7fff, 0x0, 0x131, 0x0, 0xfffffffa, 0x1, 0x1, 0x7, 0x1, 0x3, 0x6, 0x8, 0xff, 0x7, 0x7, 0x8, 0x1a5, 0x7, 0x80000000, 0xfffffff7, 0x4, 0x8f, 0x10000, 0x100, 0x80, 0x1, 0xb42, 0x795, 0x9, 0x2, 0x5, 0x69b8, 0x3, 0x401, 0x101, 0x7, 0x8, 0x6, 0x5, 0x5f, 0x9, 0x2, 0xd62, 0x1cb800, 0xaf8, 0xc65, 0x100, 0x5, 0x200, 0x3, 0x3, 0x1, 0x6, 0x401, 0x3, 0x10001, 0x8, 0x6, 0x7, 0x2, 0x3, 0x389429be, 0x401, 0x1, 0x6, 0x4, 0x7, 0x4, 0xfff, 0xa, 0xcaaf, 0x5, 0x3, 0x8, 0x0, 0x3, 0x1, 0x8, 0x5, 0x5, 0x80000000, 0x0, 0x5, 0xa7f, 0xe, 0x7, 0x4, 0x80, 0x7, 0x3, 0x3, 0x7, 0x1ad, 0x2, 0x0, 0x5, 0x10, 0x6, 0x10, 0x4, 0xf6, 0x384, 0x9, 0x5, 0x4, 0x6, 0x10001, 0x0, 0x1ff, 0x1, 0x9, 0x200, 0x3247, 0x6, 0xfffffff9, 0x5, 0x1, 0xda5, 0x1, 0x2, 0x6, 0xd, 0x4, 0x61de, 0x8, 0x21b, 0x80000000, 0x8, 0x18a7, 0x1ff, 0x7, 0x0, 0x3, 0x400, 0x1, 0x1, 0xaa, 0xa, 0xc, 0x3, 0x5, 0x3ff, 0x6, 0xf, 0x7f, 0x8, 0x4, 0x3, 0x40, 0xfffffffd, 0x8, 0x7c, 0x9, 0x0, 0x8, 0x400, 0xee, 0xffffffff, 0x1, 0x6, 0x6, 0x0, 0x7, 0x8, 0x8, 0x6, 0x80, 0x9, 0x0, 0x2, 0x6, 0xe08, 0xa, 0x96d1, 0x5, 0x6, 0x3, 0xb, 0x3, 0x6, 0x8, 0x5, 0x7f, 0x101, 0x4b, 0xff, 0x0, 0x50f, 0x5b, 0x0, 0x6, 0x1e4, 0x2b7, 0x1, 0x0, 0x13, 0x101, 0xd, 0x8, 0x8, 0x9a, 0x8, 0x401, 0x100, 0x2, 0x9, 0x371f, 0x5, 0x1, 0x7, 0xa93, 0x1, 0x7, 0x8, 0x4, 0x6, 0x7, 0x1, 0x2, 0x3, 0x4, 0x101, 0x10001, 0x10, 0x7f, 0x9, 0x6, 0xd, 0x9, 0xb36, 0xf0, 0x5, 0x5, 0x2, 0x10, 0x8b7, 0x2, 0x9, 0x6, 0x5, 0x9, 0x2, 0x8, 0x4b, 0x4df4cf30, 0x7fffffff, 0x0, 0x5, 0xfffeffff, 0x5, 0x9, 0x591bce37, 0x0, 0x1ff00, 0x3285, 0x6, 0x4000000, 0x80000001, 0xfa7, 0xb8, 0x5f89a940, 0x20, 0xe59f, 0x46, 0x5, 0x1f, 0x1, 0x40, 0x80000000, 0x7, 0x1, 0x8, 0x3, 0xffff2cb8, 0x0, 0x0, 0x9, 0x80000000, 0x0, 0x3, 0x0, 0x6, 0x70000, 0x71e1, 0xffff, 0xc9e, 0x7fff, 0xd, 0x5, 0x1, 0x4e5, 0x7c5fdc4c, 0x5, 0x48d, 0x7, 0x4, 0xfffffffb, 0x700, 0x1, 0x4, 0xfffffffc, 0x4, 0x3, 0x9, 0x9, 0x7, 0x5, 0x7ff, 0x0, 0x7f, 0x4, 0x200, 0x4, 0xb, 0x3, 0x1, 0x4ab, 0xfff, 0x1, 0x4, 0x92dd, 0x0, 0x0, 0xffff, 0x0, 0xed60, 0x586, 0x4, 0x3000000, 0x6, 0x6, 0x1, 0x3, 0x3, 0x2e8, 0xab7a, 0x7f, 0x3, 0x8, 0xf, 0x5f, 0x6, 0x4000, 0x1, 0x9, 0x1, 0x9, 0x1, 0x80000000, 0xa, 0x0, 0x101, 0x9, 0x7, 0x400, 0x10, 0xfffffffd, 0x2, 0x8, 0x6, 0x8, 0x1, 0x6, 0x7, 0xffffc000, 0xb54, 0x0, 0x2, 0x4, 0x608, 0x3, 0x8, 0x6, 0x3a, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x3f7d3e9f, 0x5bca, 0x401, 0x10, 0x8, 0x1, 0x6, 0x9, 0x7, 0x2, 0x4e, 0x1000, 0xd419, 0x5, 0xc0, 0x1, 0x9, 0x4, 0x7f, 0x7, 0x6, 0x3, 0x7, 0x0, 0x12820a69, 0xff, 0x3, 0x10, 0xffff, 0x8000800, 0x7, 0x3, 0x2, 0x9, 0x9, 0x1, 0x10000, 0x2, 0x1, 0x0, 0xfffffffd, 0x101, 0x0, 0x9, 0x7c, 0x1, 0x7, 0x80000001, 0x2, 0x5bcb810c, 0x5, 0x1d65, 0x3, 0x6, 0x2, 0x2, 0x800, 0x2, 0x8, 0x2384, 0x400, 0x1, 0x6, 0x2ae, 0x7, 0x2, 0x8, 0x4, 0x8, 0xe, 0x80, 0x10000, 0x5, 0x6, 0x5, 0x40, 0x8, 0x5, 0x2, 0x4, 0x2, 0x9, 0x4, 0x4, 0xffffff9d, 0x400, 0x2, 0xffffffff, 0x7, 0x401, 0x7, 0x40, 0x9, 0x9, 0xffffff80, 0xe, 0x9, 0x9, 0x401, 0x99e, 0x3, 0x3, 0x81, 0x101, 0x80000001, 0x0, 0x7, 0xfff, 0x5, 0x8000, 0x0, 0x7, 0x0, 0x7, 0x5, 0x1, 0x0, 0xff, 0x6, 0xd, 0x3, 0x0, 0x6, 0x2, 0x7, 0x0, 0x7, 0x3, 0x6, 0x8, 0x9, 0x8, 0x8000, 0xf, 0xfe2, 0x6, 0x26b1, 0x0, 0x7, 0x4, 0x200, 0xb, 0xc8, 0x4, 0x7fffffff, 0x5, 0x5668, 0x6, 0x8001, 0xfffff466, 0x6, 0x1, 0x0, 0xb, 0x400, 0x200, 0x10001, 0x3a8, 0x8, 0x2, 0x8, 0x3, 0x9, 0x5, 0x3, 0x7ff, 0x79, 0x2, 0x80, 0x7, 0x80, 0x6, 0x10, 0x478, 0x8, 0x3, 0x80000000, 0x6, 0x3, 0x0, 0x6, 0x7, 0x881d, 0xf8, 0xebe6, 0x7f, 0x7fff, 0x7ff, 0x4, 0x7, 0x800, 0x17, 0x0, 0x3ff, 0xffff, 0x9, 0xfff, 0x10, 0x6, 0x1, 0xffff, 0x5d15f75e, 0x9, 0xfff, 0x4, 0x2, 0xfffffffd, 0x484, 0x400, 0x3, 0x7, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0x2, 0x8, 0x5, 0x1, 0x3, 0x1, 0x7fffffff, 0x6, 0x9000000, 0x200, 0x2, 0x1, 0x46c8, 0x6, 0x8000, 0x1, 0xf1e, 0xb416, 0xb6b, 0x7, 0x1, 0x5, 0x3, 0x8, 0xffff, 0x7, 0x6, 0x1, 0x9ec, 0xc, 0x81, 0xc7e, 0x1, 0x2a4, 0x3, 0x8, 0x8, 0x0, 0x1, 0x9, 0x8dd6, 0x80000001, 0x0, 0xb50, 0x3, 0x200, 0x7, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9, 0x2, 0x9, 0x0, 0x4, 0x8, 0x7, 0x8, 0x2, 0x5598, 0xffff, 0xe57, 0xfffff016, 0xfff, 0x6d028a56, 0xff, 0x7, 0x6, 0x4, 0x6, 0x383e, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x1, 0xc0cd, 0x8, 0x10001, 0x4, 0x3, 0x7, 0x238, 0xf8f4, 0xd, 0x22, 0x3, 0x6, 0x400, 0x3, 0x7a4, 0x5, 0x3, 0x3, 0x4, 0x4, 0x0, 0x7b, 0x9, 0x5, 0x9, 0x8, 0x1, 0x3, 0xfff, 0x31a4, 0xfff, 0x3, 0x5, 0x7f, 0x8, 0xdf, 0x3, 0x9, 0x5, 0x79f, 0x7, 0x4, 0x4, 0xf5, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x5, 0x200, 0x2, 0x1fc00, 0x2, 0x10001, 0xfffff800, 0xfffffffc, 0xe, 0x6, 0x101, 0x4, 0x9, 0x5, 0x8, 0x8000, 0x5, 0xc22, 0x31, 0x6, 0x5, 0x1000, 0x80000001, 0x9, 0x279, 0x6, 0x0, 0xfffffffa, 0x3, 0x0, 0x2, 0xa, 0xbab, 0x1, 0x8c16]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="bed9c3fe8bc63f5ce9"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x83, 0x1, '\a'}, 0x0, 0x0}) 49.384389566s ago: executing program 5 (id=553): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1a9100, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0xc1105511, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffffc, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x5], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x78, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x8, 0x6d01, 0x5, 0x3b, 0x1, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x4, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 49.02356083s ago: executing program 33 (id=553): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1a9100, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0xc1105511, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffffc, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x100, 0x1f461e2c, 0x5, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c76, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x5], [0x10000007, 0x8, 0x80, 0x8000, 0x0, 0x8, 0x129432e2, 0xcb, 0xf6, 0xb, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x87, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x315, 0x78, 0x62, 0x73b, 0xfffffe00, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7f, 0x5f31, 0x4, 0x0, 0x4, 0x2, 0x9, 0x20000004, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x0, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8ce, 0x9, 0x1, 0x1, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x6, 0x5, 0x8, 0x86, 0x3, 0x1000000c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x7, 0x8, 0x6d01, 0x5, 0x3b, 0x1, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x4ccd, 0x7, 0x53cf697b, 0x7, 0x6, 0x54fe12d3, 0xc2, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x4, 0x5, 0x0, 0x800003, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x0, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0xfe, 0x9602, 0xa, 0x97f, 0x1, 0x6, 0x1, 0x10000, 0x2, 0x8, 0x2b91, 0x4, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0x8001, 0xfff]}, 0x45c) unshare(0x2a020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 11.000833056s ago: executing program 2 (id=709): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xb00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffffa, "1f13de91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000300)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = getpid() r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x46, &(0x7f0000000080)={0x0, 0x0}, 0x10) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000014c0)={{0x4, 0x5, 0x6, 0x4, 'syz1\x00', 0x80000001}, 0x3, 0x400, 0x8, r5, 0x1, 0x7ff, 'syz0\x00', &(0x7f0000001480)=['!.%^\x00'], 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect$uac2(0x5, 0x97, &(0x7f0000002b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x8, 0x40, 0x9b, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0xf4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x3, 0x404, 0x9, 0x6, 0xf6, 0x4, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x80, 0x7f, {0x8, 0x25, 0x1, 0x82, 0x30, 0x3c, 0x356}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x17, 0x7d, 0x2, 0x3, 0x8, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xa, 0x7f, 0x3, {0x8, 0x25, 0x1, 0x0, 0x0, 0x29, 0x6}}}}}}}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x14, &(0x7f0000002c80)={0x5, 0xf, 0x14, 0x2, [@ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0xf00, 0x5}]}}) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r10, 0x5b03, 0x0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r12, r11, 0xff, 0x0) vmsplice(r13, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 10.291738133s ago: executing program 4 (id=711): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 10.148313465s ago: executing program 4 (id=713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffffff0000000005, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp6\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x4000090) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) read$FUSE(r2, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10f) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000540)={{0x2, 0x80}, 'port0\x00', 0x8, 0x800, 0xffffb182, 0x9, 0xef3, 0x0, 0x6, 0x0, 0x9, 0xe4}) r8 = syz_open_procfs(r7, &(0x7f0000000100)='net/unix\x00') sendmsg$nl_xfrm(r8, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) 8.728339518s ago: executing program 4 (id=716): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = epoll_create1(0x80000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x16}) poll(&(0x7f0000001300)=[{r1, 0x2000}], 0x1, 0x7) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=@setlink={0x44, 0x13, 0x5, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8}, @IFLA_CARRIER={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0x8000000000000000}]}) syz_usb_control_io$hid(r3, 0x0, 0x0) 7.82711338s ago: executing program 2 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) tee(r1, r4, 0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c00058008"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_ROPEN(r9, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x20, 0x2}, 0x1}}, 0x18) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) accept4$tipc(r1, &(0x7f0000000240), &(0x7f00000003c0)=0x10, 0x80000) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r11, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/109, 0x6d}], 0x3}, 0x10}], 0x1, 0x40010132, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 6.924522301s ago: executing program 2 (id=723): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa300000000000b0703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 6.777740642s ago: executing program 2 (id=724): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) (async) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) semget$private(0x0, 0x0, 0x20) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000005c0)={0x7, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000002200), 0x44000, 0x0) read$FUSE(r0, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008120"], 0xfeffffff) 6.615490373s ago: executing program 3 (id=726): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x449) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x178, r2, 0x10, 0x70bc26, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc6}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20048004}, 0x2400c040) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1) 6.436641597s ago: executing program 4 (id=727): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff70790008340201210126ff0905850308"], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8000) r3 = syz_open_dev$video(&(0x7f0000000280), 0x7fffffff, 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x70bd2b, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x862b01) ioctl$EVIOCSFF(r9, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x7ff, {0xffff, 0x1}, {0x45, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x80cb, 0x9}, {0x81, 0x1, 0x1, 0x7, 0x6, 0x1}]}) write$char_usb(r9, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000005e5214d7fdbf019b"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000001c0)={0x9, {0xe, 0x7, 0xc647, 0xfff}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 6.434899562s ago: executing program 3 (id=728): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fchdir(0xffffffffffffffff) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) socket(0xb, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x3b, 0x5, 0x8, 0x1, 0x0, 0x1, 0x4, 0xfffffe0000000001, 0xffffff64, 0xfffffffc}, 0x0) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) capset(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="3801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0x138}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000800), 0x0, 0x101100) poll(&(0x7f0000000840)=[{r5, 0x700}], 0x1, 0x7f) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee", 0x51) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) setresgid(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x280, 0x3, 0x31324d4e, 0x6, 0x0, 0x3, 0x9, 0xfeedcafe, 0x2, 0x3}}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r7, 0x40045730, &(0x7f0000000080)) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000100)) syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) 6.414960206s ago: executing program 2 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000a98000/0x400000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="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", 0x402, r5}, 0x38) syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x30, r6, 0x30d, 0x70bd27, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x577}]}]}, 0x30}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r5}, 0x38) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10804) socket$unix(0x1, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) 5.903954996s ago: executing program 1 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="27031c002d0f1400020000000000000002ee1680ca82973d2bd4b80ac1f0536b0cd7f802c9b46a3938941004f6c4b17715883cc2b0b474f28247f067a20fa88f1952693d", 0x44}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc6", 0xda}, {&(0x7f0000000800)="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", 0xe0b}, {&(0x7f0000000240)="00d80d000000000000c6ecf8ed51219fcbcf21b4b83e17c815bbc5ce1f0f9b3f80ef3d", 0x23}], 0x4}, 0x24000008) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="4030000000005737d7d1b9fd457c143be9eaf3330f87da26006243959cceb014521d5907cc6733b0f8452d63bc2ab78fb0be72502e4e4b98883a4e9419b170684bf47955f3072c675cf909e3761821cf0411b8e42508db935442fac5d7b1aa920d52cc248804e5ed444226e2e322963934efaa54954274d33737976770ac6c0e0e5e8e6df98d99798480e6dd78e1c5da150a56a7d0392bc9b9a26ad19e78279ee8433e5402f979b91afc4725dd42abbcd781f452d7fd41f17efdb5256a2bd5487be81215a796f4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) preadv2(r6, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/45, 0x2d}], 0x1, 0xfff, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 2.879975693s ago: executing program 2 (id=736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a0000001400078008001140000000000500150020000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000015000300686173683a69702c706f72742c6e6574"], 0x78}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2.747956089s ago: executing program 1 (id=737): r0 = inotify_init1(0x0) dup(r0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8108}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x8) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async) fcntl$notify(r1, 0x402, 0x8000003d) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) 2.671171003s ago: executing program 3 (id=738): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) mmap(&(0x7f000086c000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x8, 0x31424752, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) close(r9) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r10, 0x29, 0x8, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000300)={0x3, "cfc95c4160541264bce1ee6807894bbf76b78bb7038b0a07d513bbf69ee3bcd2", 0x4, 0x0, 0x9, 0x7, 0x4, 0x0, 0x9, 0x100}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r10, 0xc0805841, &(0x7f0000000280)={0xfffff73b, 0x3, 0x8, 0x7, 0x4}) syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x26, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0x9, 0x24, 0x9, 0x2, 0x2, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) 2.524093809s ago: executing program 6 (id=739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4071}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103c02, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0x20000034) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x5) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f6"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.249422345s ago: executing program 1 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x84) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000002b80)='./file0\x00', 0x3) 2.239631346s ago: executing program 4 (id=741): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x10000041, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x4000000a1d, 0x800000000000009, 0x5, 0x0, 0x3, 0x2, 0x5], 0x54000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f29668405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0x8, 0xd328, 0x0, 0x9, 0x4, 0xcc6, 0x80000001, 0x7, 0xffffffffffffff04, 0xffffffff, 0x4, 0x37, 0xa, 0xffff, 0xb5b], 0xffffffff, 0x11040}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r5, 0x7b3, &(0x7f0000000180)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) io_uring_enter(r7, 0x429a, 0x13e1, 0x41, &(0x7f0000000080)={[0xfe]}, 0x8) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.832260365s ago: executing program 1 (id=742): syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x1, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8) 1.224477629s ago: executing program 6 (id=743): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x7fffffff, 0x7a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100), &(0x7f0000000140), 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2c, 0x0, 0x7fffffff, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="300000001d000000", @ANYRES32, @ANYBLOB="af499d78642975317b0b56692ee4beb5c5a82c9471ab0d3c6d7f351ee47b07a7dfa6db66eff73b5586bc2bc436b91145b06597f5e4950033abd2f4670d715b08670b4ff42fc049c323a4277e7307e13e36b38edda1255600b97a94412700f1f2f3d55b5b8e7e7e07da0bb5eebca7f524c30b", @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="300000001d000000", @ANYRES32, @ANYBLOB="af499d78642975317b0b56692ee4beb5c5a82c9471ab0d3c6d7f351ee47b07a7dfa6db66eff73b5586bc2bc436b91145b06597f5e4950033abd2f4670d715b08670b4ff42fc049c323a4277e7307e13e36b38edda1255600b97a94412700f1f2f3d55b5b8e7e7e07da0bb5eebca7f524c30b", @ANYRES32, @ANYBLOB, @ANYRES64=r3], 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r4, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) (async) write$tcp_mem(r4, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r3}}, 0x1c) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @val=@tcx={@void, @value=r4, @void, @void, r3}}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x1000, 0x8}, 0xc) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x1000, 0x8}, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/zoneinfo\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="020000005d000000", @ANYRES32, @ANYBLOB="81860010000000000000daae2ec1158ede16f472c530746374dcb964055d0c4d26a89839fee4b7c5c18da99805e6c9b18ad65e6b93f4", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r3], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x10, 0xfffffffd}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) personality(0x500006) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @string=&(0x7f0000000140)}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @string=&(0x7f0000000140)}}) 1.059185606s ago: executing program 1 (id=744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x9, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x8, 0x9d0, 0x38416761, 0x5, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x2, 0x5}}) tee(r1, r4, 0x8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c00058008"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_ROPEN(r9, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x20, 0x2}, 0x1}}, 0x18) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) accept4$tipc(r1, &(0x7f0000000240), &(0x7f00000003c0)=0x10, 0x80000) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r11, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/109, 0x6d}], 0x3}, 0x10}], 0x1, 0x40010132, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 875.496508ms ago: executing program 6 (id=745): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x12, "045499ddcde403e48efcd481ffa7bb790f2d3a3d4500", "3e009c93938e9f9b23eab1502bdbeddc4aec10fa878e1b7b9700", "2bc15739a02b801e68ba8446a73ccfb0ee9082262689a9cbd7362debb8601d1e", "3d771e8033c517b4ecb49b85624ff99614ee20c02e3a8e562d3d6af1bbc9e1ca", "a29157ef062ecc5b78a56b83bdec6b4ec3539b6a1069a07391c6bc59e3480386", "451f955ff4d438a31a1c376c", 0x101, 0x1, 0x1000, 0x6, 0xfffffffe}}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x3) 638.035508ms ago: executing program 6 (id=746): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r3, 0xfffffe4d}}, 0x48) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000007600)) sendmmsg$inet(r2, 0x0, 0x0, 0x81) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040001000000000000ac1414bbbbbbbbbbbbbbac1414"], 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 572.610314ms ago: executing program 3 (id=747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000052000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'ip6_vti0\x00', @local}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff6, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x3, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r7, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r9 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f000034c000/0x2000)=nil, &(0x7f0000a7b000/0xc000)=nil, 0xed, &(0x7f0000000180)=[{0x5, 0x8, 0x4}], 0x1, 0x7ff, 0x12, 0x8, 0x2c, 0x40}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 352.173086ms ago: executing program 6 (id=748): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0xe, 0xd, 0x1, 0x0, "a048fc95daf621e6c604"}]}], {0x14}}, 0xa8}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa}, 0x4800) 313.437095ms ago: executing program 3 (id=749): add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 293.803935ms ago: executing program 6 (id=750): r0 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "0e60fc60df245ffd819c0197473533792b34c3b046449b060e71a680f5fe09bd8a307f75e5d2ddd7373ba682b3f1a33524d42a466959b0228f0af5b2ce175ba1", 0x29}, 0x48, 0xfffffffffffffffe) add_key$user(&(0x7f0000000240), &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000800)="905386d40943b7cf0a761fbf60cd5fef6cc4bac923a33296340eeef5fddc6effc78d2b92ad4429ed0e1821cd2c71480a09b06a36be85f5b88635353b22d8ae5e14958b3e1f40991f4c18e216b31575646abf8ba6a7403c81", 0x58, r0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r1}, &(0x7f0000001380)=""/4093, 0xffd, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000040)=0xc) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) syz_usb_connect$cdc_ecm(0x4, 0x5e, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x87, 0xa0, 0x6, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x8, 0x24, 0x6, 0x0, 0x0, "1396e9"}, {0x5, 0x24, 0x0, 0x2f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xffff, 0x6, 0x51}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xaa, 0x0, 0xb9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x86, 0x27, 0x0, 0x40, 0x7}, 0xbf, &(0x7f0000000140)={0x5, 0xf, 0xbf, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x8001, 0xff00, 0xb16c, [0xf]}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x5, 0xf}, @generic={0x77, 0x10, 0xb, "6f39280a8fd5de04cde416cf77365c8d5fb3b69df5a75bb44ebc92a6fa50e0fbabc18b5a28037b9b61920507d981e37616d003929ddf35c7af1ae630a4dd333693979a964bb1d6e95fdda1842e00f33fb96db0fb932a328330971b2378c0a4e31b97c7749319319a03c85b0ebbd47847366ca9ea"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "e6e2c49b4b8f13ebf4e301948ef866c8"}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x0, 0x1100, 0x2, [0x0]}]}, 0x6, [{0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "70b3f8a25c4edd7dfae478eec6b164c3ba403c22e564c866960286fae60e35c88e0a417a33728f8059adf328b136531ced80ea074e1459b1f84758"}}, {0xe9, &(0x7f0000000380)=@string={0xe9, 0x3, "36dc97e21736b482a9d5b6019f716a4af4ce13fc93837add7f0741ddeabcf46c0ef6e99962a966e5967f57dbe854ccc64bf1d5910995a4c53215d3a66ca673600655edf26b820acccf5e81742acc539c031c8e24a0d52a1ec032844865af2f3583689d7a33df3313762b53326de8b1e4e1666e2f19dfecb3c0136d8729bb824b302b2c94a6dc685cfd956680dcf2f74cbcd4e69a8686c933420f58690202bdbc45ba5a3fe490cecee4d43529ba7d95bfdb33393a5d475042552e1f57187d2fb7ddedeed05312260d947c802669b7bedcdf77060a12ec6d1e6c32e94a3586df1f0a179a657dd149"}}, {0x73, &(0x7f00000006c0)=ANY=[@ANYBLOB="730347856d83a1be6ee12a929ff2b0756adb224df459bee3d2d955671d5e2f77a9d2e6139ae2fee2fe79378ffd66008cf8b417393b9703e03d50bef7c4fca4327857236deac283ddeddf22ffffffffffffffff47beb7315519e5a3c1497176e5be02a32083daf80be86ce79794d139f7f381252151b184ae694e241c655763ab381c5c67f9fd7241b8ce8e12e7393ab9b78feeffa39c1a3ea7eff892f3907b02787000f10cdc395b429e0152a6962cfbd45a8c036feba84b916f1ff8bdcdab4bff48d222ba71d4b95e3bb53ba6a18311"]}, {0x18, &(0x7f0000000500)=@string={0x18, 0x3, "5e88615bdc3b5d2368eaa1c0eddd71f3a1c684c3b411"}}, {0xb1, &(0x7f0000000540)=@string={0xb1, 0x3, "e41e0e72401925cc0e8648680ecf002e230b6346dcedb8eecedfe4f85f276c88b573dbc2d3a4e92c2465fefaf12a3f9aa6e0f0f2d852f5d62f41a4b743b1d7aee97d89fe95a1ea36f07283c686c53a7b913dd39af984b644e72b57a79845db34248c362316e3b0f551b2a82ecb3238651b69a3ba56a7ad5172b54b17ee28981d56993131852d5f56fee6529b051648e8a8c1ddd8673fac5e142a92e0d5f72865831e0a95f7855ac8140df84b797abf"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x447}}]}) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8}) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000300)=[{0x5, 0x92f5, 0x0, 0x0}, {0x7f, 0x1, 0x0, 0x0}], 0x2}) 242.581238ms ago: executing program 3 (id=751): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040d904c2a000000000000109022400010000e80b09040921fd7f000122ea00090581038936000000a9cd8a1ef33180a4e081d493387c5cb73e405abaf2258b6aca371a0a5f2aae815ec68311c6d5b152ee05647669a254a1d0dffab90a370550d9cf1a74ec63fcc33766c6651281192168e4deff56a193cdff9827a1590b90b8d7ed6e26d6d28c00000000000000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x30) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000380)={0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1003}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000003c0)={0x0, 0x17, 0xf4, "2363c81a1abc01f7d6129c0a6005dc54db093a09f36dcafd6a229fbe3eced67317a0e8ad44207a59733e8398c8fc58e8e8e738415752b43b12b7ddedc05063b4fd5695ae5a0dc5f5dc0e46f58e97b401f9ca8597a79f8a7c8fed8d59c96c46492ea2144a76476e6aed844d63ec1a95a8422c13eee7f4426c0613a08797ea5576e2a58afe17fa68d1fc4917fa26752eb9fcb34429bae37fb4644df7cc7587ebda03963aecfd1f7c9f15195c896bec7ba011cab22e45cc75463c9492080bb7208f1f00a32951b0a0ac198ed8bbdbabc304b761ee2a3e67601e4dd912e8b97068c746c6abeca1200832c6fc946d85037c130913f0c6"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "b2508f86c65140be15181bcd27c2a2bbcc4ba08aca6c85b74affe9bc3fae73bc874035a15003c9afed07c1d5aca1c0720f4de5c6d4237489d47271c93e21671f768cb0f4dd575498fe5eac33dad3a0977c76a4ea76390f364ae20905f8a6ac9ebb2892d799bfa86ad3c0604bd1407ae85045e213124a953d5316a34c63836c7badda5c44999fda2b5aed8719cfec82680e6d7eb4337ad75947dc42f08d5fa3365b1b3c487bca55b08d8fecc1867222bf0f1f401c58e05123f40df5649a7f7e422326e0313bbdda810487335583e69d5540f59fca0e5b91f0aa93ed072615e707737ea15ad4fc14a7e2b6b890bd0c67f845ee331e79724756356d9c7e78eb2b9ffbaa2094b7156903b5b57a866138b05e83f84d845ee35c935482d67cf54d2537c1172ecaeb3e4628b7fdd44bfad42e118d797a90af896852af6a3b48efe90fc24d7233dfe667489baffa3103df0e4ff0f68a661a73bb42e6979b15a4d6b4398d45f2c2fb31d34c339a12fd24c2fa9d83b15732f3dd751483740ec954b99b3ee50bf00421e1e8bdacde3cc3e76ddddce0ba30722541f188c212922ede6c8328941feb5b3f04972ed4b0dc8a9dfd52548044a110cbe02fcc4f7a1227936011efb1ac9c7809889e2980c508576bac09e96cc67089cc4bd0651dad18761a49c553a469e17d37b463d27495359204018fe6e3508a79c7cf02b6105b27e073743dc0cb463cbba8a6654c4bec705a9a9df58b41b857348b8133b57bcd68e4bf53d77eedf31600583b7f737c94f8ac282d96fa3ec69ad20a76af42fd8aa62812b35af27bea9f6134011750ae185b56dc68f71bd5bfe2dfb9e3637b52afa0c1a22f8d7d014085112d6bb37a58ffb3693c67797005d8e67d8c67b68a973383cf3cd336b725c4e6f983f6a724018a36e375f5790e4d32f0b7d8445672911f4f050209d5fd526c6b24507c96898621bfc508b20c1aa50bc4d5d17914cd78b7bae28343aaf10fa8d679a98b889a9f0fda5ef8d4dbfa40f78eb08a541ddc7d976855bbef1985974623b4226b25fbbf0a34324607cb2d6112e795b0b18cbd1950d8251f63a5c542fe8dd3f49125b2449f48e867e596fccfea86581388f8884158e2d4f41a1c37ae6798886f485bb4ba0201bd67a6f02cbee393e00eb3cc6f1d0f8100d33d149d6dbd67f4a7068a5725b44237e61f1a53386a1ebddba6496d861bb5d9cfc89496177fdf7797cf4d663007292623dadfec01f98d096f10c847cfdbd5305e8a8cb1321d07b069cbaddf429407cfc9110148449e3e77a90c5ef9d46bc67fd35e043c5cbf66d09d408df2218c5052e41058c5f3ddd385970cbf7c212136649cbdeb9a6097cebf07a4c548678bb4dea47ee12ea267dbc9571f9f0c0eaed92f189412c00530fbaf927311cabab95a50c298cbf93fc7b948f614f4e80e5239139fc92f604d"}, &(0x7f0000000980)=ANY=[@ANYBLOB='!\x00\x00\x00 \x00']}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="00000400000010000edc"], 0x0, 0x0, 0x0, 0x0, 0x0}) clock_getres(0x9, 0x0) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x31}, @padn, @ra={0x5, 0x2, 0x4}]}]}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000190001002dbd70000000000080201000001100050043000008000f0003"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4e, {0x2, 0x4e21, @broadcast}, 'dummy0\x00'}) 83.89641ms ago: executing program 1 (id=752): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000004c0)=ANY=[]) unshare(0x10200) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x7fd, 0x3}, 0x0) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x5, &(0x7f00000005c0)=""/219}) io_uring_setup(0x1bfb, &(0x7f0000000040)={0x0, 0x970, 0x200, 0x0, 0x396}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x14}, 0x1, 0x2}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0x3f}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 0s ago: executing program 4 (id=753): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000480)={r1, @in={{0x2, 0x4e20, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0x1, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048010) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) pidfd_send_signal(r6, 0x21, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000140)=""/58, &(0x7f0000000180)=0x3a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x10, 0x1, {0x22, 0x21}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0xab, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x16, 0x0, 0x0, @private=0xa010102}}}}}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b000a05240000000d240f010000000000000000000624070000000905810340000000000905820208000000000905", @ANYBLOB="24ea"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 4][ T5952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.559549][ T5825] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 467.602324][ T5825] usb 2-1: no configurations [ 467.611332][ T5825] usb 2-1: can't read configurations, error -22 [ 467.640482][ T5825] usb usb2-port1: unable to enumerate USB device [ 467.668301][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.680201][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.698954][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.715422][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.730239][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.780254][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.788939][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.800737][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.839301][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.850344][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.299811][ T5952] bridge_slave_1: left allmulticast mode [ 468.321229][ T5952] bridge_slave_1: left promiscuous mode [ 468.344310][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.392107][ T5952] bridge_slave_0: left allmulticast mode [ 468.411095][ T5952] bridge_slave_0: left promiscuous mode [ 468.426603][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.450775][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 468.618270][ T5887] usb 4-1: device descriptor read/64, error -71 [ 468.903746][ T5887] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 469.060166][ T5887] usb 4-1: device descriptor read/64, error -71 [ 469.097999][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 469.144915][ T5952] bond1 (unregistering): (slave gretap1): Releasing active interface [ 469.185414][ T5887] usb usb4-port1: attempt power cycle [ 469.301836][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.340827][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.368733][ T10] usb 5-1: Product: syz [ 469.386683][ T10] usb 5-1: Manufacturer: syz [ 469.400596][ T10] usb 5-1: SerialNumber: syz [ 469.455876][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.588265][ T5887] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 469.651452][ T5887] usb 4-1: device descriptor read/8, error -71 [ 469.663345][ T5968] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.674458][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.688992][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.701970][ T5952] bond0 (unregistering): Released all slaves [ 469.714096][ T5952] bond1 (unregistering): Released all slaves [ 469.734628][ T5952] bond2 (unregistering): Released all slaves [ 469.775695][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 469.869667][ T5960] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 469.899183][ T50] Bluetooth: hci0: command tx timeout [ 469.906716][ T5887] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 469.949658][ T5887] usb 4-1: device descriptor read/8, error -71 [ 469.976653][ T5952] tipc: Left network mode [ 470.030023][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.043069][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.055503][ T5960] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 470.065019][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.082343][ T5887] usb usb4-port1: unable to enumerate USB device [ 470.099351][ T5960] usb 2-1: config 0 descriptor?? [ 470.280959][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 470.342108][ T5951] usb 5-1: USB disconnect, device number 53 [ 470.536595][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.556878][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.576296][ T5960] usbhid 2-1:0.0: can't add hid device: -71 [ 470.591364][ T5960] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 470.640661][ T5960] usb 2-1: USB disconnect, device number 38 [ 470.778100][ T5968] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 470.791427][ T5952] hsr_slave_0: left promiscuous mode [ 470.792827][ T5968] ath9k_htc: Failed to initialize the device [ 470.805128][ T5952] hsr_slave_1: left promiscuous mode [ 470.813058][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.821208][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.830319][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.837779][ T5952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.846156][ T5951] usb 5-1: ath9k_htc: USB layer deinitialized [ 470.921935][ T5952] veth1_macvtap: left promiscuous mode [ 470.942930][ T5952] veth0_macvtap: left promiscuous mode [ 470.970181][ T5952] veth1_vlan: left promiscuous mode [ 470.986075][ T5952] veth0_vlan: left promiscuous mode [ 471.341452][ T5951] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 471.498519][ T5951] usb 5-1: device descriptor read/64, error -71 [ 471.599114][ T7721] netlink: 'syz.3.435': attribute type 11 has an invalid length. [ 471.759426][ T5951] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 471.780413][ T807] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 471.919447][ T5951] usb 5-1: device descriptor read/64, error -71 [ 471.977995][ T50] Bluetooth: hci0: command tx timeout [ 472.001147][ T5952] team0 (unregistering): Port device team_slave_1 removed [ 472.048390][ T5951] usb usb5-port1: attempt power cycle [ 472.061472][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 472.292924][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.393491][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.478019][ T5951] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 472.597445][ T7647] bridge_slave_0: entered allmulticast mode [ 472.743778][ T5951] usb 5-1: device descriptor read/8, error -71 [ 472.899277][ T7647] bridge_slave_0: entered promiscuous mode [ 473.174860][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 473.599462][ T5951] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 473.630792][ T5951] usb 5-1: device descriptor read/8, error -71 [ 473.788412][ T5951] usb usb5-port1: unable to enumerate USB device [ 473.971682][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.000845][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.041791][ T7647] bridge_slave_1: entered allmulticast mode [ 474.059812][ T50] Bluetooth: hci0: command tx timeout [ 474.078925][ T7647] bridge_slave_1: entered promiscuous mode [ 474.258406][ T5887] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 474.304689][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.319271][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.450210][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 474.486225][ T5887] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.501692][ T7647] team0: Port device team_slave_0 added [ 474.512458][ T5887] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.525997][ T7647] team0: Port device team_slave_1 added [ 474.545282][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 474.565147][ T5887] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 474.606802][ T5887] usb 4-1: Product: syz [ 474.632451][ T5887] usb 4-1: Manufacturer: syz [ 474.692469][ T5887] hub 4-1:4.0: USB hub found [ 474.716522][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.730463][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.759255][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.792722][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.800633][ T7750] netlink: 'syz.1.443': attribute type 1 has an invalid length. [ 474.840143][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.892352][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.919369][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.947549][ T5887] hub 4-1:4.0: 2 ports detected [ 474.960860][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.105700][ T7750] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 475.385624][ T7647] hsr_slave_0: entered promiscuous mode [ 475.437627][ T7647] hsr_slave_1: entered promiscuous mode [ 475.984011][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 475.996619][ T5887] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 476.000723][ T7779] sctp: [Deprecated]: syz.2.447 (pid 7779) Use of int in maxseg socket option. [ 476.000723][ T7779] Use struct sctp_assoc_value instead [ 476.049878][ T5887] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 476.100589][ T5887] usb 4-1: USB disconnect, device number 36 [ 476.138968][ T50] Bluetooth: hci0: command tx timeout [ 476.219657][ T7770] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 476.771014][ T7647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 476.835510][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.863756][ T7647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 476.903372][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.922874][ T7647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.953552][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 476.953571][ T30] audit: type=1326 audit(1776934703.696:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 476.994400][ T30] audit: type=1326 audit(1776934703.736:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.030348][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.042191][ T30] audit: type=1326 audit(1776934703.746:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.058234][ T5887] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 477.077160][ T7647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 477.120099][ T7647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.134649][ T30] audit: type=1326 audit(1776934703.766:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.178935][ T7799] syzkaller0: entered promiscuous mode [ 477.203600][ T7799] syzkaller0: entered allmulticast mode [ 477.230699][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 477.253805][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.453'. [ 477.259107][ T30] audit: type=1326 audit(1776934703.766:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.266393][ T5887] usb 4-1: device descriptor read/64, error -71 [ 477.332458][ T30] audit: type=1326 audit(1776934703.766:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.379108][ T7810] team0: entered promiscuous mode [ 477.389911][ T7810] team_slave_0: entered promiscuous mode [ 477.395887][ T30] audit: type=1326 audit(1776934703.766:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.396394][ T7810] team_slave_1: entered promiscuous mode [ 477.430255][ T7810] bond0: entered promiscuous mode [ 477.449093][ T7810] bond_slave_0: entered promiscuous mode [ 477.465718][ T30] audit: type=1326 audit(1776934703.766:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.496677][ T7810] bond_slave_1: entered promiscuous mode [ 477.516867][ T30] audit: type=1326 audit(1776934703.766:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.558032][ T30] audit: type=1326 audit(1776934703.766:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x7ffc0000 [ 477.584104][ T5887] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 477.596064][ T7810] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 477.728125][ T5887] usb 4-1: device descriptor read/64, error -71 [ 477.796502][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4 [ 477.838983][ T5887] usb usb4-port1: attempt power cycle [ 477.956534][ T7647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.042230][ T7647] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.082752][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.090009][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.116502][ T7833] dlm: non-version read from control device 0 [ 478.150470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.157650][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.208015][ T5887] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 478.249473][ T5887] usb 4-1: device descriptor read/8, error -71 [ 478.299324][ T5968] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 478.401539][ T7647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.467999][ T5968] usb 3-1: Using ep0 maxpacket: 16 [ 478.478465][ T7647] veth0_vlan: entered promiscuous mode [ 478.492389][ T5968] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 478.502786][ T5887] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 478.511598][ T7647] veth1_vlan: entered promiscuous mode [ 478.527205][ T5968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.552909][ T5887] usb 4-1: device descriptor read/8, error -71 [ 478.576453][ T5968] usb 3-1: config 0 descriptor?? [ 478.606704][ T5968] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 478.653854][ T7647] veth0_macvtap: entered promiscuous mode [ 478.676014][ T7647] veth1_macvtap: entered promiscuous mode [ 478.679770][ T5887] usb usb4-port1: unable to enumerate USB device [ 478.735038][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.759183][ T7647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.782642][ T5971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.800542][ T5968] usb 3-1: Detected FT232A [ 478.805666][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 478.834479][ T5971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.845121][ T5968] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 478.898306][ T5971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.924066][ T5971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.126154][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.152186][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.273773][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.295579][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.368385][ T5887] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 479.533118][ T5887] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 479.542834][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.551119][ T5887] usb 2-1: Product: syz [ 479.555676][ T5887] usb 2-1: Manufacturer: syz [ 479.560494][ T5887] usb 2-1: SerialNumber: syz [ 479.571272][ T5825] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 479.575031][ T5887] usb 2-1: config 0 descriptor?? [ 479.596067][ T5944] usb 3-1: USB disconnect, device number 34 [ 479.604638][ T5887] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 479.636962][ T5944] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 479.672863][ T5944] ftdi_sio 3-1:0.0: device disconnected [ 479.748910][ T5825] usb 5-1: no configurations [ 479.753631][ T5825] usb 5-1: can't read configurations, error -22 [ 479.816850][ T7840] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 479.825199][ T7840] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 479.833472][ T7840] kvm: requested 191923 ns i8254 timer period limited to 200000 ns [ 479.841840][ T7840] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 479.849828][ T7840] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 479.857870][ T7840] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 479.865985][ T7840] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 479.874176][ T7840] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 479.905697][ T7840] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 479.923396][ T7840] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 479.943570][ T7855] netlink: 9 bytes leftover after parsing attributes in process `syz.3.459'. [ 479.949717][ T5959] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 479.960437][ T5825] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 479.970469][ T7855] gretap0: entered promiscuous mode [ 479.987799][ T5887] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 480.000924][ T7855] netlink: 5 bytes leftover after parsing attributes in process `syz.3.459'. [ 480.015251][ T5887] sq905c 2-1:0.0: Get version command failed [ 480.029373][ T5887] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 480.037776][ T7855] 0ªî{X¹¦: renamed from gretap0 [ 480.052663][ T5887] usb 2-1: USB disconnect, device number 40 [ 480.062218][ T7855] 0ªî{X¹¦: left promiscuous mode [ 480.077153][ T7855] 0ªî{X¹¦: entered allmulticast mode [ 480.101194][ T7855] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 480.138455][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 480.147844][ T5825] usb 5-1: no configurations [ 480.159451][ T5959] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 480.173866][ T5825] usb 5-1: can't read configurations, error -22 [ 480.190354][ T5959] usb 6-1: config 0 has no interface number 0 [ 480.197005][ T5825] usb usb5-port1: attempt power cycle [ 480.212459][ T5959] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 480.225398][ T5959] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 480.236549][ T5959] usb 6-1: config 0 interface 41 has no altsetting 0 [ 480.246190][ T5959] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 480.257573][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.265844][ T5959] usb 6-1: Product: syz [ 480.270596][ T5959] usb 6-1: Manufacturer: syz [ 480.275256][ T5959] usb 6-1: SerialNumber: syz [ 480.296262][ T5959] usb 6-1: config 0 descriptor?? [ 480.310648][ T7851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.322877][ T7851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.411649][ T7860] program syz.3.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.553810][ T7851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.561246][ T5825] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 480.586767][ T7851] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 480.599684][ T5825] usb 5-1: no configurations [ 480.604591][ T5825] usb 5-1: can't read configurations, error -22 [ 480.660152][ T7866] syzkaller0: entered promiscuous mode [ 480.665768][ T7866] syzkaller0: entered allmulticast mode [ 480.748695][ T5825] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 480.770087][ T5825] usb 5-1: no configurations [ 480.776483][ T5825] usb 5-1: can't read configurations, error -22 [ 480.785102][ T5825] usb usb5-port1: unable to enumerate USB device [ 480.799739][ T5959] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32 [ 480.883170][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 480.892584][ T7868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.464'. [ 481.718733][ T5887] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 481.793797][ T7884] geneve2: entered promiscuous mode [ 481.877987][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 481.885108][ T5887] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 481.893587][ T5887] usb 3-1: config 2 has no interface number 0 [ 481.900656][ T5887] usb 3-1: config 2 interface 88 has no altsetting 0 [ 481.910814][ T5887] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 481.921267][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.929506][ T5887] usb 3-1: Product: syz [ 481.933815][ T5887] usb 3-1: Manufacturer: syz [ 481.938657][ T5887] usb 3-1: SerialNumber: syz [ 482.088063][ T5959] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 482.201245][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.211848][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.221631][ T5959] usb 4-1: device descriptor read/64, error -71 [ 482.448063][ T5968] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 482.468021][ T5959] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 482.598097][ T5959] usb 4-1: device descriptor read/64, error -71 [ 482.608101][ T5968] usb 2-1: Using ep0 maxpacket: 8 [ 482.622654][ T5968] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 482.633283][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.641623][ T5968] usb 2-1: Product: syz [ 482.646109][ T5968] usb 2-1: Manufacturer: syz [ 482.651022][ T5968] usb 2-1: SerialNumber: syz [ 482.659011][ T5968] usb 2-1: config 0 descriptor?? [ 482.718634][ T5959] usb usb4-port1: attempt power cycle [ 482.747600][ T5967] usb 6-1: USB disconnect, device number 2 [ 482.870794][ T5968] usb read operation failed. (-71) [ 482.885125][ T5968] usb write operation failed. (-71) [ 482.891872][ T5968] usb write operation failed. (-71) [ 482.897839][ T5968] usb write operation failed. (-71) [ 482.903729][ T5968] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 482.916467][ T5968] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 482.926932][ T5968] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 483.058075][ T5959] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 483.089792][ T5959] usb 4-1: device descriptor read/8, error -71 [ 483.224732][ T5887] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 483.248703][ T5887] asix 3-1:2.88: probe with driver asix failed with error -71 [ 483.286528][ T5887] usb 3-1: USB disconnect, device number 35 [ 483.305032][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.332024][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.347800][ T5959] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 483.369226][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.392163][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.408024][ T5959] usb 4-1: device descriptor read/8, error -71 [ 483.418818][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.448407][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.468329][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.508639][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.532570][ T7911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.536492][ T5959] usb usb4-port1: unable to enumerate USB device [ 483.570544][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.595759][ T7903] kvm_intel: kvm [7902]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x37 [ 483.929385][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 484.008869][ T5959] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 484.197788][ T7922] bond2: entered allmulticast mode [ 484.449457][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.482'. [ 484.908884][ T5967] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 485.078695][ T5967] usb 5-1: no configurations [ 485.093558][ T5967] usb 5-1: can't read configurations, error -22 [ 485.148066][ T5959] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 485.238060][ T5967] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 485.319040][ T5959] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 485.338468][ T5959] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 485.362983][ T5959] usb 3-1: Product: syz [ 485.376961][ T5959] usb 3-1: Manufacturer: syz [ 485.392590][ T5959] usb 3-1: SerialNumber: syz [ 485.413906][ T5959] usb 3-1: config 0 descriptor?? [ 485.430724][ T5959] ch341 3-1:0.0: ch341-uart converter detected [ 485.432587][ T5967] usb 5-1: no configurations [ 485.474645][ T5967] usb 5-1: can't read configurations, error -22 [ 485.505004][ T5967] usb usb5-port1: attempt power cycle [ 485.508324][ T29] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 485.632024][ T5959] usb 3-1: failed to receive control message: -121 [ 485.639013][ T5959] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 485.687988][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 485.696652][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 485.705716][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.716579][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 485.733818][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.745496][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.759364][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 485.769074][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.790262][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 485.842332][ T5944] usb 3-1: USB disconnect, device number 37 [ 485.860271][ T5944] ch341 3-1:0.0: device disconnected [ 485.868231][ T5967] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 485.900615][ T5967] usb 5-1: no configurations [ 485.905533][ T5967] usb 5-1: can't read configurations, error -22 [ 485.958041][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 485.966821][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 485.983482][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 485.991632][ T29] usb 4-1: usb_control_msg returned -32 [ 485.999351][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.007545][ T10] usb 6-1: Product: syz [ 486.011155][ T29] usbtmc 4-1:16.0: can't read capabilities [ 486.018481][ T10] usb 6-1: Manufacturer: syz [ 486.023197][ T10] usb 6-1: SerialNumber: syz [ 486.034917][ T10] usb 6-1: config 0 descriptor?? [ 486.040412][ T5967] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 486.081312][ T5967] usb 5-1: no configurations [ 486.091566][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 486.102321][ T5967] usb 5-1: can't read configurations, error -22 [ 486.111838][ T5967] usb usb5-port1: unable to enumerate USB device [ 486.122797][ T10] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 486.193383][ T5967] usb 4-1: USB disconnect, device number 45 [ 486.211954][ T7954] usbtmc 4-1:16.0: usb_control_msg returned -19 [ 486.702841][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 486.738165][ T5967] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 486.900399][ T5967] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 486.917716][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.935797][ T5967] usb 4-1: config 0 descriptor?? [ 487.134028][ T10] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 487.148350][ T10] em28xx 6-1:0.0: board has no eeprom [ 487.162380][ T5967] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 487.362201][ T5967] [drm:udl_init] *ERROR* Selecting channel failed [ 487.393030][ T5967] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 487.400389][ T5967] [drm] Initialized udl on minor 2 [ 487.413159][ T5967] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 487.427154][ T5967] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 487.448306][ T5967] usb 4-1: USB disconnect, device number 46 [ 487.457006][ T807] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 487.465575][ T10] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 487.479699][ T10] em28xx 6-1:0.0: dvb set to bulk mode. [ 487.493031][ T5970] em28xx 6-1:0.0: Binding DVB extension [ 487.500415][ T807] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 487.726275][ T7991] fuse: Bad value for 'fd' [ 487.797552][ T29] usb 6-1: USB disconnect, device number 3 [ 487.813614][ T29] em28xx 6-1:0.0: Disconnecting em28xx [ 487.871254][ T8000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2400480786 (153630770304 ns) > initial count (137169231808 ns). Using initial count to start timer. [ 487.893210][ T5970] em28xx 6-1:0.0: Registering input extension [ 487.904239][ T29] em28xx 6-1:0.0: Closing input extension [ 487.907168][ T8000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.001323][ T29] em28xx 6-1:0.0: Freeing device [ 488.019042][ T5825] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 488.188139][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 488.207438][ T5825] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 488.227282][ T5825] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 488.252169][ T5825] usb 3-1: config 0 has no interface number 0 [ 488.271653][ T5825] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 488.306009][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 488.306027][ T30] audit: type=1800 audit(1776934715.046:336): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.501" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 488.333109][ T5825] usb 3-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 488.355056][ T5825] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 488.373079][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.412500][ T5825] usb 3-1: config 0 descriptor?? [ 488.434602][ T7997] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 488.485663][ T8012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.502'. [ 488.981930][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 489.127543][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.178682][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.181195][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.206792][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.236902][ T8023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.278160][ T8023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.348077][ T29] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 489.509973][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.525843][ T29] usb 4-1: not running at top speed; connect to a high speed hub [ 489.547653][ T29] usb 4-1: config 133 has an invalid interface number: 190 but max is 0 [ 489.565518][ T29] usb 4-1: config 133 has no interface number 0 [ 489.582936][ T29] usb 4-1: config 133 interface 190 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 489.612280][ T29] usb 4-1: config 133 interface 190 has no altsetting 0 [ 489.629394][ T29] usb 4-1: New USB device found, idVendor=083a, idProduct=4507, bcdDevice=31.24 [ 489.642246][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.664009][ T29] usb 4-1: Product: syz [ 489.672999][ T29] usb 4-1: Manufacturer: syz [ 489.683282][ T29] usb 4-1: SerialNumber: syz [ 489.934709][ T29] usb 4-1: Could not find all expected endpoints [ 489.966539][ T29] usb 4-1: USB disconnect, device number 47 [ 490.551126][ T30] audit: type=1326 audit(1776934717.296:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.579653][ T5970] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 490.640203][ T30] audit: type=1326 audit(1776934717.296:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.662697][ T30] audit: type=1326 audit(1776934717.296:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.685153][ T30] audit: type=1326 audit(1776934717.296:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.722431][ T30] audit: type=1326 audit(1776934717.296:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.779103][ T5970] usb 5-1: no configurations [ 490.783986][ T12] wlan0: Trigger new scan to find an IBSS to join [ 490.789689][ T30] audit: type=1326 audit(1776934717.296:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.795835][ T5970] usb 5-1: can't read configurations, error -22 [ 490.885085][ T30] audit: type=1326 audit(1776934717.296:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 490.926443][ T29] usb 3-1: USB disconnect, device number 38 [ 490.970779][ T30] audit: type=1326 audit(1776934717.326:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 491.001040][ T5970] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 491.028025][ T30] audit: type=1326 audit(1776934717.326:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8053 comm="syz.1.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 491.198171][ T5970] usb 5-1: no configurations [ 491.210161][ T5970] usb 5-1: can't read configurations, error -22 [ 491.239140][ T5970] usb usb5-port1: attempt power cycle [ 491.318738][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 491.333730][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 491.373741][ T8079] team0: entered promiscuous mode [ 491.385833][ T8079] team_slave_0: entered promiscuous mode [ 491.405712][ T8079] team_slave_1: entered promiscuous mode [ 491.426922][ T8079] bond0: entered promiscuous mode [ 491.438496][ T8079] bond_slave_0: entered promiscuous mode [ 491.452543][ T8079] bond_slave_1: entered promiscuous mode [ 491.470381][ T8079] debugfs: 'hsr1' already exists in 'hsr' [ 491.494500][ T8079] Cannot create hsr debugfs directory [ 491.512068][ T8079] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 491.598228][ T5970] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 491.639545][ T5970] usb 5-1: no configurations [ 491.657919][ T5970] usb 5-1: can't read configurations, error -22 [ 491.810051][ T5970] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 491.869681][ T5970] usb 5-1: no configurations [ 491.886339][ T5970] usb 5-1: can't read configurations, error -22 [ 491.895549][ T5970] usb usb5-port1: unable to enumerate USB device [ 492.019941][ T5967] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 492.108517][ T5825] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 492.200852][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 492.208635][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.220568][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.233145][ T5967] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 492.242714][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.256489][ T5967] usb 6-1: config 0 descriptor?? [ 492.269605][ T5825] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 492.286184][ T5825] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 492.298710][ T5825] usb 4-1: config 128 has no interface number 0 [ 492.308306][ T29] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 492.319212][ T5825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 492.330250][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.342667][ T5825] usb 4-1: Product: syz [ 492.346911][ T5825] usb 4-1: Manufacturer: syz [ 492.352185][ T5825] usb 4-1: SerialNumber: syz [ 492.488077][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 492.496413][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.512302][ T29] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 492.527337][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.541125][ T29] usb 3-1: config 0 descriptor?? [ 492.557061][ T29] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 492.574654][ T5944] usb 4-1: USB disconnect, device number 48 [ 492.761504][ T10] usb 3-1: USB disconnect, device number 39 [ 492.903766][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.920497][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.934133][ T5967] usb 6-1: string descriptor 0 read error: -32 [ 492.976506][ T5967] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 492.990499][ T5967] letsketch 0003:6161:4D15.0008: probe with driver letsketch failed with error -32 [ 493.030455][ T5944] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 493.188070][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 493.195033][ T5944] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 493.203404][ T5944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 493.213417][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 493.223246][ T5944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 493.233266][ T5944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 493.243370][ T5944] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.257067][ T5944] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 493.266356][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.280342][ T5944] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 493.443100][ T8133] loop7: detected capacity change from 0 to 7 [ 493.450129][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.450166][ C0] buffer_io_error: 11 callbacks suppressed [ 493.450179][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.452602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.452626][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.453357][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.453379][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.453652][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.453681][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.453929][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.453949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.454135][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.454160][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.454336][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.454362][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.454465][ T8133] ldm_validate_partition_table(): Disk read failed. [ 493.454665][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.454697][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.461458][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.461490][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.461691][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.461716][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 493.462031][ T8133] Dev loop7: unable to read RDB block 0 [ 493.465177][ T8133] loop7: unable to read partition table [ 493.465349][ T8133] loop7: partition table beyond EOD, truncated [ 493.465632][ T8133] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 493.821073][ T34] wlan0: Trigger new scan to find an IBSS to join [ 494.877207][ T10] usb 6-1: USB disconnect, device number 4 [ 495.263306][ T29] usb 4-1: USB disconnect, device number 49 [ 495.371197][ T8155] batadv_slave_0: Caught tx_queue_len zero misconfig [ 495.385391][ T8166] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.531'. [ 495.412609][ T8166] netlink: 12296 bytes leftover after parsing attributes in process `syz.3.531'. [ 495.431617][ T8166] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.531'. [ 495.540969][ T30] audit: type=1326 audit(1776934722.286:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.604425][ T30] audit: type=1326 audit(1776934722.286:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.672763][ T30] audit: type=1326 audit(1776934722.286:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.730509][ T30] audit: type=1326 audit(1776934722.286:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7943d5d04e code=0x7ffc0000 [ 495.819573][ T30] audit: type=1326 audit(1776934722.286:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.897045][ T30] audit: type=1326 audit(1776934722.316:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.951229][ T30] audit: type=1326 audit(1776934722.316:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 495.988027][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 495.999210][ T30] audit: type=1326 audit(1776934722.316:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 496.052323][ T30] audit: type=1326 audit(1776934722.316:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 496.137426][ T30] audit: type=1326 audit(1776934722.316:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.5.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7943d9c819 code=0x7ffc0000 [ 496.209916][ T10] usb 4-1: no configurations [ 496.218445][ T10] usb 4-1: can't read configurations, error -22 [ 496.368042][ T10] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 496.528955][ T10] usb 4-1: no configurations [ 496.536109][ T10] usb 4-1: can't read configurations, error -22 [ 496.555840][ T10] usb usb4-port1: attempt power cycle [ 496.703516][ T8159] fuse: Bad value for 'group_id' [ 496.718010][ T8159] fuse: Bad value for 'group_id' [ 496.858578][ T12] wlan0: Trigger new scan to find an IBSS to join [ 496.918031][ T10] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 496.951200][ T10] usb 4-1: no configurations [ 496.956058][ T10] usb 4-1: can't read configurations, error -22 [ 497.088113][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 497.120307][ T10] usb 4-1: no configurations [ 497.126552][ T10] usb 4-1: can't read configurations, error -22 [ 497.145143][ T10] usb usb4-port1: unable to enumerate USB device [ 497.178052][ T5967] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 497.318044][ T5967] usb 6-1: device descriptor read/64, error -71 [ 497.486893][ T8187] FAULT_INJECTION: forcing a failure. [ 497.486893][ T8187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.502950][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.4.537 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.502982][ T8187] Tainted: [L]=SOFTLOCKUP [ 497.502988][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.502997][ T8187] Call Trace: [ 497.503003][ T8187] [ 497.503009][ T8187] dump_stack_lvl+0xe8/0x150 [ 497.503037][ T8187] should_fail_ex+0x412/0x560 [ 497.503065][ T8187] _copy_from_iter+0x1d3/0x1670 [ 497.503080][ T8187] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 497.503104][ T8187] ? __pfx_policy_nodemask+0x10/0x10 [ 497.503127][ T8187] ? __pfx__copy_from_iter+0x10/0x10 [ 497.503144][ T8187] ? alloc_pages_mpol+0x3c0/0x490 [ 497.503170][ T8187] copy_page_from_iter+0x220/0x2d0 [ 497.503188][ T8187] tun_get_user+0x1bf7/0x43e0 [ 497.503213][ T8187] ? tun_get_user+0x8aa/0x43e0 [ 497.503249][ T8187] ? aa_file_perm+0x50e/0x15e0 [ 497.503266][ T8187] ? __pfx_tun_get_user+0x10/0x10 [ 497.503290][ T8187] ? __lock_acquire+0x6b5/0x2cf0 [ 497.503341][ T8187] ? ref_tracker_alloc+0x35c/0x4c0 [ 497.503367][ T8187] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 497.503392][ T8187] ? tun_get+0x1c/0x2f0 [ 497.503418][ T8187] ? tun_get+0x1c/0x2f0 [ 497.503443][ T8187] ? tun_get+0x1c/0x2f0 [ 497.503463][ T8187] ? tun_get+0x1c/0x2f0 [ 497.503493][ T8187] tun_chr_write_iter+0x113/0x200 [ 497.503517][ T8187] vfs_write+0x61d/0xb90 [ 497.503542][ T8187] ? __pfx_vfs_write+0x10/0x10 [ 497.503567][ T8187] ? __fget_files+0x2a/0x420 [ 497.503588][ T8187] ksys_write+0x150/0x270 [ 497.503607][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 497.503631][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503647][ T8187] do_syscall_64+0x15f/0xf80 [ 497.503667][ T8187] ? trace_irq_disable+0x3b/0x140 [ 497.503686][ T8187] ? clear_bhb_loop+0x40/0x90 [ 497.503704][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.503718][ T8187] RIP: 0033:0x7fad5c75d04e [ 497.503732][ T8187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 497.503745][ T8187] RSP: 002b:00007fad5d5f9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 497.503761][ T8187] RAX: ffffffffffffffda RBX: 00007fad5d5fa6c0 RCX: 00007fad5c75d04e [ 497.503772][ T8187] RDX: 0000000000000016 RSI: 0000200000000200 RDI: 00000000000000c8 [ 497.503782][ T8187] RBP: 00007fad5d5fa090 R08: 0000000000000000 R09: 0000000000000000 [ 497.503791][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.503800][ T8187] R13: 00007fad5ca16038 R14: 00007fad5ca15fa0 R15: 00007fad5cb3fa48 [ 497.503822][ T8187] [ 497.570978][ T5967] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.838349][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.940413][ T5967] usb 6-1: device descriptor read/64, error -71 [ 497.983241][ T8196] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 498.010879][ T8196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.022451][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 498.042184][ T8196] bond2: (slave bridge1): making interface the new active one [ 498.050686][ T8196] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 498.060296][ T5967] usb usb6-port1: attempt power cycle [ 498.226955][ T8204] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.542'. [ 498.258121][ T8204] netlink: 12296 bytes leftover after parsing attributes in process `syz.2.542'. [ 498.273426][ T8204] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.542'. [ 498.395653][ T8211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.545'. [ 498.408315][ T5967] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 498.440508][ T5967] usb 6-1: device descriptor read/8, error -71 [ 498.598107][ T5970] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 498.668119][ T29] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 498.688472][ T5967] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 498.708402][ T5967] usb 6-1: device descriptor read/8, error -71 [ 498.770761][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 498.785858][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.799338][ T5970] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 498.808754][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.818363][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 498.818984][ T5967] usb usb6-port1: unable to enumerate USB device [ 498.833807][ T5970] usb 5-1: config 0 descriptor?? [ 498.848033][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 498.859205][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 498.869679][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 498.882666][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.904329][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.915050][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.993460][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 499.002661][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 499.160506][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.180539][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.204483][ T29] usb 3-1: GET_CAPABILITIES returned c4 [ 499.219050][ T29] usbtmc 3-1:16.0: can't read capabilities [ 499.414486][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.423920][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.433047][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.442173][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.460081][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.468951][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 499.469297][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.484269][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.489478][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 499.493482][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.511432][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.511494][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.511542][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.511589][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.511931][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.557258][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.566467][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.584726][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 499.626523][ T5970] usb 5-1: USB disconnect, device number 70 [ 500.298303][ T5971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.318070][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 500.466640][ T5971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.480067][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 500.489129][ T10] usb 4-1: config 0 has no interfaces? [ 500.497761][ T10] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 500.508096][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.518450][ T10] usb 4-1: Product: syz [ 500.522803][ T10] usb 4-1: Manufacturer: syz [ 500.527555][ T10] usb 4-1: SerialNumber: syz [ 500.550873][ T10] usb 4-1: config 0 descriptor?? [ 500.637084][ T5971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.760542][ T5971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.786063][ T29] usb 4-1: USB disconnect, device number 54 [ 500.889276][ T5890] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 500.902746][ T5890] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 500.915949][ T5890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 500.930254][ T5890] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 500.940235][ T5890] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.068699][ T8240] __nla_validate_parse: 1 callbacks suppressed [ 501.068721][ T8240] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.555'. [ 501.085204][ T8240] netlink: 12296 bytes leftover after parsing attributes in process `syz.4.555'. [ 501.101323][ T8240] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.555'. [ 501.203581][ T5971] bridge_slave_1: left allmulticast mode [ 501.218876][ T5971] bridge_slave_1: left promiscuous mode [ 501.227261][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.253831][ T5971] bridge_slave_0: left allmulticast mode [ 501.268536][ T5971] bridge_slave_0: left promiscuous mode [ 501.279037][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.390711][ T29] usb 3-1: USB disconnect, device number 40 [ 501.426666][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.433165][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.634234][ T8252] fuse: Bad value for 'fd' [ 501.699645][ T8257] fuse: Bad value for 'user_id' [ 501.710709][ T8257] fuse: Bad value for 'user_id' [ 501.957182][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.002981][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.034231][ T5971] bond0 (unregistering): Released all slaves [ 502.168965][ T5970] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 502.339691][ T5970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 5632, setting to 1024 [ 502.361789][ T5970] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 502.380793][ T5970] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 502.426663][ T5970] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.479062][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.519849][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 502.530440][ T5970] usb 3-1: Product: syz [ 502.547646][ T5970] usb 3-1: Manufacturer: syz [ 502.576593][ T5970] usb 3-1: SerialNumber: syz [ 502.794890][ T8238] chnl_net:caif_netlink_parms(): no params data found [ 502.832918][ T8271] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 502.984217][ T5971] hsr_slave_0: left promiscuous mode [ 503.000333][ T5971] hsr_slave_1: left promiscuous mode [ 503.011875][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.019461][ T50] Bluetooth: hci0: command tx timeout [ 503.026740][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.037386][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.048274][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.090273][ T5971] veth1_macvtap: left promiscuous mode [ 503.095884][ T5971] veth0_macvtap: left promiscuous mode [ 503.105374][ T5971] veth1_vlan: left promiscuous mode [ 503.111906][ T5971] veth0_vlan: left promiscuous mode [ 503.542011][ T8271] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 503.956798][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 503.993185][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 504.244301][ T8290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.288867][ T5505] 8021q: adding VLAN 0 to HW filter on device eth6 [ 504.553183][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.596989][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.649042][ T8238] bridge_slave_0: entered allmulticast mode [ 504.670070][ T8238] bridge_slave_0: entered promiscuous mode [ 504.720600][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.728848][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.737340][ T8238] bridge_slave_1: entered allmulticast mode [ 504.754251][ T8238] bridge_slave_1: entered promiscuous mode [ 504.976384][ T5970] cdc_ncm 3-1:1.0: bind() failure [ 505.030991][ T8321] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.565'. [ 505.056400][ T8321] netlink: 12296 bytes leftover after parsing attributes in process `syz.4.565'. [ 505.098026][ T50] Bluetooth: hci0: command tx timeout [ 505.144379][ T5970] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 505.156721][ T8321] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.565'. [ 505.157347][ T5970] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 505.188469][ T5970] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 505.201147][ T5970] usb 3-1: USB disconnect, device number 41 [ 505.301330][ T8238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.371126][ T8238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.518055][ T8238] team0: Port device team_slave_0 added [ 505.547553][ T8238] team0: Port device team_slave_1 added [ 505.701688][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.721235][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.723001][ T5970] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 505.840720][ T8238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.915435][ T8238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.959614][ T8238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.990816][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 506.052318][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 506.081153][ T8238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.084646][ T5970] usb 3-1: config 3 has an invalid interface number: 212 but max is 0 [ 506.139384][ T5970] usb 3-1: config 3 has no interface number 0 [ 506.163668][ T5970] usb 3-1: config 3 interface 212 has no altsetting 0 [ 506.187570][ T5970] usb 3-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=c1.67 [ 506.215236][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.255566][ T5970] usb 3-1: Product: syz [ 506.265561][ T5970] usb 3-1: Manufacturer: syz [ 506.277243][ T5970] usb 3-1: SerialNumber: syz [ 506.504450][ T5970] rndis_host 3-1:3.212: More than one union descriptor, skipping ... [ 506.532586][ T5970] rndis_host 3-1:3.212: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 506.578094][ T5970] cdc_acm 3-1:3.212: More than one union descriptor, skipping ... [ 506.603450][ T8356] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 506.619032][ T5970] usb 3-1: USB disconnect, device number 42 [ 506.637019][ T5505] 8021q: adding VLAN 0 to HW filter on device eth7 [ 506.817511][ T8238] hsr_slave_0: entered promiscuous mode [ 506.825049][ T8238] hsr_slave_1: entered promiscuous mode [ 506.991374][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 506.991393][ T30] audit: type=1326 audit(1776934733.736:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8352 comm="syz.4.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad5c79c819 code=0x0 [ 507.073089][ T8362] trusted_key: encrypted_key: insufficient parameters specified [ 507.183866][ T50] Bluetooth: hci0: command tx timeout [ 507.338147][ T29] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 507.491363][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 507.522775][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.550797][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 507.581758][ T29] usb 4-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 507.598157][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.609112][ T29] usb 4-1: Product: syz [ 507.613353][ T29] usb 4-1: Manufacturer: syz [ 507.618410][ T29] usb 4-1: SerialNumber: syz [ 507.683452][ T8238] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 507.696728][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.705413][ T8238] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 507.718464][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.726745][ T8238] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 507.739075][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.739190][ T5967] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 507.750689][ T8238] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 507.766658][ T8238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.798470][ T5970] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 507.855922][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.881857][ T29] usb 4-1: MIDIStreaming interface descriptor not found [ 507.919142][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 507.927136][ T5967] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 507.949135][ T5967] usb 3-1: config 0 has no interface number 0 [ 507.955421][ T5505] 8021q: adding VLAN 0 to HW filter on device eth8 [ 507.962669][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 507.971328][ T5967] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 507.984878][ T5970] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 507.998021][ T5970] usb 5-1: config 0 has no interface number 0 [ 508.004177][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.009504][ T8238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.012786][ T5970] usb 5-1: config 0 interface 12 has no altsetting 0 [ 508.025734][ T5967] usb 3-1: Product: syz [ 508.030039][ T5967] usb 3-1: Manufacturer: syz [ 508.034669][ T5967] usb 3-1: SerialNumber: syz [ 508.041829][ T5970] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 508.061307][ T5967] usb 3-1: config 0 descriptor?? [ 508.070243][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.093851][ T5970] usb 5-1: Product: syz [ 508.102399][ T8238] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.108712][ T5970] usb 5-1: Manufacturer: syz [ 508.113736][ T5970] usb 5-1: SerialNumber: syz [ 508.131272][ T29] usb 4-1: USB disconnect, device number 55 [ 508.142804][ T5970] usb 5-1: config 0 descriptor?? [ 508.160845][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.168045][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.215111][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.222356][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.254634][ T8392] udevd[8392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.503951][ T8238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.518381][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 508.546716][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 508.587784][ T8397] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.577'. [ 508.601203][ T8397] netlink: 12296 bytes leftover after parsing attributes in process `syz.3.577'. [ 508.613975][ T8397] netlink: 1040 bytes leftover after parsing attributes in process `syz.3.577'. [ 508.655832][ T8238] veth0_vlan: entered promiscuous mode [ 508.688390][ T8238] veth1_vlan: entered promiscuous mode [ 508.735250][ T8238] veth0_macvtap: entered promiscuous mode [ 508.751155][ T8238] veth1_macvtap: entered promiscuous mode [ 508.772770][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 508.785582][ T5967] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 508.807130][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.830631][ T8238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.885138][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.896340][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.918808][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.936149][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.018363][ T5970] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 509.050285][ T5970] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 509.057764][ T5970] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 509.067116][ T5970] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 509.082302][ T5970] usb 5-1: USB disconnect, device number 71 [ 509.135724][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.152018][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.187696][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.196298][ T5967] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 509.205204][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.258147][ T50] Bluetooth: hci0: command tx timeout [ 509.359965][ T5967] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 509.372695][ T5967] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.384434][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.393075][ T5967] usb 4-1: Product: syz [ 509.397418][ T5967] usb 4-1: Manufacturer: syz [ 509.404733][ T5967] usb 4-1: SerialNumber: syz [ 509.660688][ T8403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.287480][ T8403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.517783][ T5967] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 510.543971][ T5967] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 510.570813][ T5967] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 510.619681][ T5944] usb 3-1: USB disconnect, device number 43 [ 510.728568][ T5967] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 510.824738][ T5967] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 510.874212][ T30] audit: type=1326 audit(1776934737.616:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.2.584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa8fb9c819 code=0x0 [ 510.907179][ T5967] usb 4-1: USB disconnect, device number 56 [ 510.920785][ T5967] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 511.188404][ T29] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 511.363661][ T29] usb 3-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 511.380723][ T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 511.392209][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 511.403952][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.415314][ T8431] usb usb8: usbfs: process 8431 (syz.4.583) did not claim interface 0 before use [ 511.435032][ T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.449581][ T29] usb 3-1: Product: syz [ 511.454036][ T29] usb 3-1: Manufacturer: syz [ 511.462820][ T29] usb 3-1: SerialNumber: syz [ 511.479577][ T29] usb 3-1: config 0 descriptor?? [ 511.491265][ T8434] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.515861][ T29] usb 3-1: selecting invalid altsetting 0 [ 511.542076][ T8437] macvlan0: entered promiscuous mode [ 511.563451][ T8437] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 511.734449][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.777186][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.926601][ T5944] usb 3-1: USB disconnect, device number 44 [ 512.133271][ T8444] netlink: 1040 bytes leftover after parsing attributes in process `syz.6.587'. [ 512.153138][ T8444] netlink: 12296 bytes leftover after parsing attributes in process `syz.6.587'. [ 512.184473][ T8444] netlink: 1040 bytes leftover after parsing attributes in process `syz.6.587'. [ 512.409714][ T29] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 512.437140][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.6.591'. [ 512.460547][ T8457] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 512.469097][ T8457] macsec1: entered promiscuous mode [ 512.474560][ T8457] macsec1: entered allmulticast mode [ 512.479986][ T8457] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 512.490045][ T8457] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 512.500820][ T8457] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 512.508282][ T8457] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 512.578935][ T29] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 512.588772][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.598188][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.610378][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.632544][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.644617][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.668799][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.677411][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.688451][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.699827][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.709495][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.719079][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.730636][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.741347][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.750816][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.764634][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.775003][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.784929][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.796729][ T8460] loop7: detected capacity change from 0 to 16384 [ 512.804904][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.813441][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.823092][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.835088][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.845786][ T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 512.856252][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 512.895806][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 512.913946][ T29] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 512.925048][ T29] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 512.934062][ T29] usb 4-1: Product: syz [ 512.946653][ C1] blk_print_req_error: 10 callbacks suppressed [ 512.946673][ C1] I/O error, dev loop7, sector 14336 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 512.963029][ C1] I/O error, dev loop7, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 512.964654][ C0] I/O error, dev loop7, sector 14336 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 512.982374][ C0] buffer_io_error: 10 callbacks suppressed [ 512.982391][ C0] Buffer I/O error on dev loop7, logical block 1792, async page read [ 512.999399][ T29] usb 4-1: Manufacturer: syz [ 513.004646][ T8461] loop7: detected capacity change from 16384 to 0 [ 513.011600][ T29] usb 4-1: SerialNumber: syz [ 513.033288][ T29] usb 4-1: config 0 descriptor?? [ 513.052661][ T29] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 513.178667][ T5967] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 513.333250][ T5967] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 513.347839][ T5967] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 513.359004][ T5967] usb 7-1: config 220 interface 0 has no altsetting 0 [ 513.369238][ T5967] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 513.379244][ T5967] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.387386][ T5967] usb 7-1: Product: syz [ 513.392342][ T5967] usb 7-1: Manufacturer: syz [ 513.397368][ T5967] usb 7-1: SerialNumber: syz [ 513.485026][ T29] usb 4-1: USB disconnect, device number 57 [ 513.502429][ T29] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 513.636806][ T30] audit: type=1326 audit(1776934740.376:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 513.663422][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.673077][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.687643][ T30] audit: type=1326 audit(1776934740.406:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 513.762204][ T30] audit: type=1326 audit(1776934740.406:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 513.804656][ T30] audit: type=1326 audit(1776934740.406:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 513.831167][ T30] audit: type=1326 audit(1776934740.406:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 513.904079][ T30] audit: type=1326 audit(1776934740.406:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9db5d04e code=0x7ffc0000 [ 513.964755][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.596'. [ 513.985331][ T30] audit: type=1326 audit(1776934740.406:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9db9c4ab code=0x7ffc0000 [ 514.016011][ T5967] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 514.027435][ T5967] uvcvideo 7-1:220.0: No valid video chain found. [ 514.048641][ T5967] usb 7-1: USB disconnect, device number 2 [ 514.068953][ T30] audit: type=1326 audit(1776934740.406:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f9db9c4ab code=0x7ffc0000 [ 514.127554][ T30] audit: type=1326 audit(1776934740.426:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 514.187357][ T30] audit: type=1326 audit(1776934740.426:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8459 comm="syz.6.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 514.557909][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.608307][ T8486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.980499][ T8501] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.600'. [ 515.031106][ T8501] netlink: 12296 bytes leftover after parsing attributes in process `syz.2.600'. [ 515.065498][ T8501] netlink: 1040 bytes leftover after parsing attributes in process `syz.2.600'. [ 515.545954][ T8508] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.602'. [ 515.582767][ T8508] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.602'. [ 515.642792][ T8507] can: request_module (can-proto-0) failed. [ 515.658091][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 515.811251][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 515.824542][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 515.837383][ T29] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 515.849053][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.861779][ T8517] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 515.873389][ T29] usb 7-1: config 0 descriptor?? [ 516.096255][ T29] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 517.417517][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 517.459040][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 518.162226][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.4.616'. [ 518.378491][ T8561] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 518.452295][ T5959] usb 7-1: USB disconnect, device number 3 [ 518.778155][ T5967] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 518.968188][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 518.975564][ T5967] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 518.984277][ T5967] usb 5-1: config 0 has no interface number 0 [ 518.990961][ T5967] usb 5-1: config 0 interface 12 has no altsetting 0 [ 518.998120][ T5825] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 519.007801][ T5967] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 519.025616][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.042853][ T5967] usb 5-1: Product: syz [ 519.053194][ T5967] usb 5-1: Manufacturer: syz [ 519.069776][ T5967] usb 5-1: SerialNumber: syz [ 519.091029][ T5967] usb 5-1: config 0 descriptor?? [ 519.155876][ T8585] xt_hashlimit: size too large, truncated to 1048576 [ 519.170513][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 519.193475][ T5825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.227212][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.250530][ T5825] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 519.266570][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.275078][ T5825] usb 4-1: Product: syz [ 519.279350][ T5825] usb 4-1: Manufacturer: syz [ 519.284002][ T5825] usb 4-1: SerialNumber: syz [ 519.300196][ T5825] usb 4-1: selecting invalid altsetting 1 [ 519.306680][ T5825] usb 4-1: unit 6 not found! [ 519.923345][ T5967] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 519.950731][ T5967] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 519.974919][ T5967] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 519.995629][ T5967] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 520.030668][ T5967] usb 5-1: USB disconnect, device number 72 [ 520.560455][ T8626] fuse: Bad value for 'fd' [ 520.838040][ T5967] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 520.875137][ T8634] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 521.018046][ T8404] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 521.032467][ T5967] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.071378][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.096012][ T5967] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 521.127555][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 521.155914][ T5967] usb 5-1: Product: syz [ 521.164793][ T5967] usb 5-1: Manufacturer: syz [ 521.177403][ T5967] usb 5-1: SerialNumber: syz [ 521.213929][ T8404] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 521.236208][ T5967] usb 5-1: config 0 descriptor?? [ 521.253169][ T8404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.287555][ T8404] usb 7-1: Product: syz [ 521.296267][ T8404] usb 7-1: Manufacturer: syz [ 521.313162][ T8404] usb 7-1: SerialNumber: syz [ 521.334885][ T8404] usb 7-1: config 0 descriptor?? [ 521.346345][ T8404] hub 7-1:0.0: bad descriptor, ignoring hub [ 521.358306][ T8404] hub 7-1:0.0: probe with driver hub failed with error -5 [ 521.554785][ T8404] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 521.577330][ T8404] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 521.604376][ T8404] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 521.616992][ T8404] usb 7-1: media controller created [ 521.658596][ T5887] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 521.722131][ T8404] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 521.840399][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.888802][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.935618][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 521.976774][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.999805][ T8404] DVB: Unable to find symbol dib7000p_attach() [ 522.006555][ T5887] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 522.015728][ T8404] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 522.031548][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.052066][ T5887] usb 3-1: config 0 descriptor?? [ 522.130869][ T8642] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 522.195908][ T5825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 522.215246][ T5967] usb 5-1: selecting invalid altsetting 0 [ 522.246389][ T5825] usb 4-1: USB disconnect, device number 58 [ 522.257992][ T8404] rc_core: IR keymap rc-dib0700-rc5 not found [ 522.272024][ T8404] Registered IR keymap rc-empty [ 522.295702][ T8404] dvb-usb: could not initialize remote control. [ 522.313691][ T8404] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 522.443364][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.496528][ T5967] usb 5-1: USB disconnect, device number 73 [ 522.648008][ T5825] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 522.818573][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 522.846522][ T5825] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.885315][ T5825] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.922112][ T5825] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 522.943978][ T5825] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 522.963673][ T5825] usb 4-1: Product: syz [ 522.974080][ T5825] usb 4-1: Manufacturer: syz [ 523.015452][ T5825] hub 4-1:4.0: USB hub found [ 523.278597][ T5825] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 523.582047][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.592540][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.600001][ T8656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.722518][ T8404] usb 7-1: USB disconnect, device number 4 [ 523.750314][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 523.764964][ T5967] usb 4-1: USB disconnect, device number 59 [ 523.781640][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 523.830330][ T5887] usb 3-1: USB disconnect, device number 45 [ 523.905476][ T8404] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 524.268970][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 524.268984][ T30] audit: type=1326 audit(1776934751.016:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.300798][ T30] audit: type=1326 audit(1776934751.046:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.328883][ T30] audit: type=1326 audit(1776934751.046:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.384468][ T30] audit: type=1326 audit(1776934751.046:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.421941][ T30] audit: type=1326 audit(1776934751.046:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.468052][ T30] audit: type=1326 audit(1776934751.056:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.510350][ T30] audit: type=1326 audit(1776934751.056:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.544556][ T30] audit: type=1326 audit(1776934751.066:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.573857][ T30] audit: type=1326 audit(1776934751.076:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.597430][ T30] audit: type=1326 audit(1776934751.076:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7eff4cd9c819 code=0x7ffc0000 [ 524.727679][ T8684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.634'. [ 525.267957][ T5825] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 525.430605][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 525.453090][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 525.491103][ T5825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 525.519759][ T5825] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 525.529386][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.537542][ T5825] usb 7-1: Product: syz [ 525.542933][ T5825] usb 7-1: Manufacturer: syz [ 525.547694][ T5825] usb 7-1: SerialNumber: syz [ 525.561262][ T5825] usb 7-1: config 0 descriptor?? [ 525.576590][ T8692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 525.591166][ T8692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 525.610900][ T5825] usb 7-1: ucan: probing device on interface #0 [ 525.783774][ T8718] ip6gre1: entered allmulticast mode [ 525.837594][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 525.847305][ T8718] geneve2: entered promiscuous mode [ 526.267569][ T5825] ucan 7-1:0.0: probe with driver ucan failed with error -22 [ 526.398411][ T8736] tipc: Started in network mode [ 526.413124][ T8736] tipc: Node identity 4e1c749b8e75, cluster identity 4711 [ 526.430292][ T8736] tipc: Enabled bearer , priority 0 [ 526.443619][ T8736] syzkaller0: entered promiscuous mode [ 526.455217][ T8736] syzkaller0: entered allmulticast mode [ 526.482300][ T8736] tipc: Resetting bearer [ 526.504178][ T8735] tipc: Resetting bearer [ 526.543454][ T8735] tipc: Disabling bearer [ 527.136906][ T8741] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 527.181559][ T8744] TC_ACT_REPEAT abuse ? [ 528.056775][ T8404] usb 7-1: USB disconnect, device number 5 [ 528.199708][ T50] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 529.021251][ T8781] tipc: Started in network mode [ 529.060642][ T8781] tipc: Node identity aa094ab1d1b1, cluster identity 4711 [ 529.080430][ T8781] tipc: Enabled bearer , priority 0 [ 529.100532][ T8782] syzkaller0: entered promiscuous mode [ 529.114347][ T8782] syzkaller0: entered allmulticast mode [ 529.141420][ T8781] tipc: Resetting bearer [ 529.164634][ T8778] tipc: Resetting bearer [ 529.207164][ T8778] tipc: Disabling bearer [ 529.827434][ T8788] pim6reg: entered allmulticast mode [ 529.866200][ T8790] pim6reg: left allmulticast mode [ 530.220750][ T5971] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 530.263747][ T8796] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 530.282031][ T8796] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 530.655567][ T8812] snd_aloop snd_aloop.0: control 5:6:44:syz1:-2147483647 is already present [ 530.804445][ T8819] tipc: Enabled bearer , priority 0 [ 530.835286][ T8819] syzkaller0: entered promiscuous mode [ 530.855888][ T8819] syzkaller0: entered allmulticast mode [ 530.881157][ T8819] tipc: Resetting bearer [ 530.948444][ T8818] tipc: Resetting bearer [ 530.978830][ T8818] tipc: Disabling bearer [ 531.383063][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 531.411056][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.678'. [ 531.454225][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 531.502028][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.678'. [ 531.758054][ T8404] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 531.955282][ T8404] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.972101][ T8404] usb 4-1: not running at top speed; connect to a high speed hub [ 531.993475][ T8404] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 532.009563][ T8404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.027019][ T8404] usb 4-1: Product: syz [ 532.037407][ T8404] usb 4-1: Manufacturer: syz [ 532.046708][ T8404] usb 4-1: SerialNumber: syz [ 532.081578][ T8404] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 532.272765][ T8842] openvswitch: netlink: Key type 134 is out of range max 32 [ 532.502390][ T8404] usb 4-1: unit 3 not found! [ 532.514271][ T8404] usb 4-1: unit 13 not found! [ 532.526904][ T8404] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8213); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 532.575369][ T8404] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 532.794504][ T8404] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 532.854552][ T8404] usb 4-1: USB disconnect, device number 60 [ 532.952275][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.273296][ T8863] snd_aloop snd_aloop.0: control 5:6:45:syz1:-2147483647 is already present [ 533.288293][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 533.448295][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 533.466026][ T29] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 533.488865][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.516275][ T29] usb 5-1: config 0 descriptor?? [ 533.605915][ T8867] tipc: Enabled bearer , priority 0 [ 533.640767][ T8867] syzkaller0: entered promiscuous mode [ 533.677948][ T8867] syzkaller0: entered allmulticast mode [ 533.716239][ T8867] tipc: Resetting bearer [ 533.743624][ T29] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 533.766151][ T8866] tipc: Resetting bearer [ 533.810307][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 533.823684][ T29] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 533.833105][ T29] usb 5-1: media controller created [ 533.855615][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.882672][ T8866] tipc: Disabling bearer [ 533.892442][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.895646][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.088080][ T5825] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 534.247605][ T8877] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.256657][ T8877] IPv6: NLM_F_CREATE should be set when creating new route [ 534.264116][ T8877] IPv6: NLM_F_CREATE should be set when creating new route [ 534.302822][ T5825] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.312257][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.328257][ T5825] usb 7-1: Product: syz [ 534.332655][ T5825] usb 7-1: Manufacturer: syz [ 534.342855][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 534.351832][ T5825] usb 7-1: SerialNumber: syz [ 534.578515][ T29] az6027: usb out operation failed. (-71) [ 534.585877][ T29] stb0899_attach: Driver disabled by Kconfig [ 534.617138][ T29] az6027: no front-end attached [ 534.617138][ T29] [ 534.654932][ T29] az6027: usb out operation failed. (-71) [ 534.677117][ T29] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 534.729387][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 534.766355][ T29] dvb-usb: schedule remote query interval to 400 msecs. [ 534.793467][ T29] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 534.877047][ T29] usb 5-1: USB disconnect, device number 74 [ 535.103924][ T5825] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 535.124332][ T5825] cdc_ncm 7-1:1.0: bind() failure [ 535.193725][ T5825] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 535.228821][ T29] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 535.237427][ T5825] cdc_ncm 7-1:1.1: bind() failure [ 535.299961][ T5825] usb 7-1: USB disconnect, device number 6 [ 535.660256][ T5825] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 535.802769][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 535.828717][ T5825] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 535.844185][ T5825] usb 7-1: config 0 has no interface number 0 [ 535.866717][ T5825] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 535.887651][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.916188][ T5825] usb 7-1: Product: syz [ 535.928946][ T5825] usb 7-1: Manufacturer: syz [ 535.942572][ T5825] usb 7-1: SerialNumber: syz [ 535.979745][ T5825] usb 7-1: config 0 descriptor?? [ 536.198294][ T807] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 536.341153][ T30] kauditd_printk_skb: 214 callbacks suppressed [ 536.341188][ T30] audit: type=1326 audit(1776934763.086:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.382161][ T30] audit: type=1326 audit(1776934763.116:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.409415][ T30] audit: type=1326 audit(1776934763.116:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.434223][ T30] audit: type=1326 audit(1776934763.116:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.458258][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 536.498459][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.524881][ T30] audit: type=1326 audit(1776934763.116:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.589925][ T807] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 536.603758][ T30] audit: type=1326 audit(1776934763.126:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.639448][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.666063][ T30] audit: type=1326 audit(1776934763.126:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.693136][ T807] usb 5-1: Product: syz [ 536.697248][ T30] audit: type=1326 audit(1776934763.126:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.697385][ T30] audit: type=1326 audit(1776934763.126:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.752288][ T8921] netlink: 9 bytes leftover after parsing attributes in process `syz.1.701'. [ 536.769208][ T8921] 0·: renamed from hsr_slave_1 (while UP) [ 536.776335][ T30] audit: type=1326 audit(1776934763.176:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8916 comm="syz.2.699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 536.804782][ T8921] 0·: entered allmulticast mode [ 536.810664][ T8921] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 536.871921][ T807] usb 5-1: Manufacturer: syz [ 536.884401][ T807] usb 5-1: SerialNumber: syz [ 537.011386][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 537.048053][ T5887] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 537.177135][ T807] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 537.211624][ T807] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 537.228551][ T5887] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 537.244208][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.262723][ T5825] usb 7-1: Firmware version (0.0) predates our first public release. [ 537.273597][ T5825] usb 7-1: Please update to version 0.2 or newer [ 537.304961][ T5887] usb 3-1: config 0 has no interface number 0 [ 537.330053][ T5887] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 537.375338][ T5887] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 537.438754][ T5887] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 537.477564][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.504954][ T5887] usb 3-1: Product: syz [ 537.513556][ T807] usb 5-1: USB disconnect, device number 75 [ 537.526027][ T5887] usb 3-1: Manufacturer: syz [ 537.561126][ T5887] usb 3-1: SerialNumber: syz [ 537.605541][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.631966][ T5887] usb 3-1: config 0 descriptor?? [ 538.070998][ T5887] usb 3-1: USB disconnect, device number 46 [ 538.136364][ T8941] syzkaller0: entered promiscuous mode [ 538.143060][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 538.201977][ T8936] No such timeout policy "syz1" [ 538.338115][ T5825] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 538.392491][ T5887] usb 7-1: USB disconnect, device number 7 [ 538.508241][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 538.521751][ T5825] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 538.547228][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.572046][ T5825] usb 4-1: Product: syz [ 538.578287][ T5825] usb 4-1: Manufacturer: syz [ 538.588777][ T5825] usb 4-1: SerialNumber: syz [ 538.613773][ T5825] usb 4-1: config 0 descriptor?? [ 538.631746][ T5825] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 538.886759][ T8956] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 539.138161][ T5944] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 539.298415][ T5944] usb 3-1: device descriptor read/64, error -71 [ 539.558184][ T5944] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 539.708447][ T5944] usb 3-1: device descriptor read/64, error -71 [ 539.773481][ T8969] fuse: Bad value for 'fd' [ 539.860386][ T5944] usb usb3-port1: attempt power cycle [ 539.886051][ T8969] ipip0: entered promiscuous mode [ 539.891790][ T8969] ipip0: entered allmulticast mode [ 540.208017][ T5944] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 540.239083][ T5944] usb 3-1: device descriptor read/8, error -71 [ 540.258089][ T5825] gspca_ov534_9: reg_r err -32 [ 540.508033][ T5944] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 540.518353][ T5825] gspca_ov534_9: Unknown sensor 0000 [ 540.518424][ T5825] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 540.568963][ T5944] usb 3-1: device descriptor read/8, error -71 [ 540.691464][ T5944] usb usb3-port1: unable to enumerate USB device [ 540.729994][ T8979] syzkaller0: entered promiscuous mode [ 540.747965][ T8979] syzkaller0: entered allmulticast mode [ 541.291587][ T5825] usb 4-1: USB disconnect, device number 61 [ 541.425390][ T8986] sock: sock_set_timeout: `syz.3.718' (pid 8986) tries to set negative timeout [ 541.469857][ T807] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 541.628206][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 541.640599][ T807] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 541.653903][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.662450][ T807] usb 5-1: Product: syz [ 541.666832][ T807] usb 5-1: Manufacturer: syz [ 541.672313][ T807] usb 5-1: SerialNumber: syz [ 541.683194][ T807] usb 5-1: config 0 descriptor?? [ 541.819597][ T5944] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 541.894897][ T807] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.991199][ T5944] usb 4-1: not running at top speed; connect to a high speed hub [ 542.001301][ T5944] usb 4-1: config 1 interface 0 altsetting 163 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.016258][ T5944] usb 4-1: config 1 interface 0 has no altsetting 0 [ 542.027758][ T5944] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0a, bcdDevice= 0.40 [ 542.041915][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.050260][ T5944] usb 4-1: Product: syz [ 542.055737][ T5944] usb 4-1: Manufacturer: syz [ 542.061209][ T5944] usb 4-1: SerialNumber: syz [ 542.339809][ T8982] bridge_slave_1: left allmulticast mode [ 542.353138][ T8982] bridge_slave_1: left promiscuous mode [ 542.365742][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.397210][ T8982] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 542.515248][ T5944] usbhid 4-1:1.0: can't add hid device: -71 [ 542.522791][ T5944] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 542.536483][ T5944] usb 4-1: USB disconnect, device number 62 [ 542.642326][ T807] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 542.662754][ T807] usb 5-1: USB disconnect, device number 76 [ 542.801637][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 542.801668][ T30] audit: type=1326 audit(1776934769.546:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 542.838933][ T30] audit: type=1326 audit(1776934769.546:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 542.888163][ T30] audit: type=1326 audit(1776934769.576:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 542.915233][ T30] audit: type=1326 audit(1776934769.586:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 542.941217][ T30] audit: type=1326 audit(1776934769.586:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 543.003549][ T30] audit: type=1326 audit(1776934769.586:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 543.044005][ T30] audit: type=1326 audit(1776934769.606:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 543.122460][ T30] audit: type=1326 audit(1776934769.606:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 543.168686][ T30] audit: type=1326 audit(1776934769.606:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.2.723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffa8fb9c819 code=0x7ffc0000 [ 543.510282][ T9021] netlink: 128 bytes leftover after parsing attributes in process `syz.3.728'. [ 543.658051][ T5825] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 543.668516][ T5887] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 543.829960][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 543.832570][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 543.846000][ T5825] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 543.853047][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.858870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 543.870801][ T5825] usb 5-1: config 0 has no interface number 0 [ 543.877178][ T5825] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 543.896894][ T5887] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 543.909079][ T5825] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 543.910767][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.936672][ T5887] usb 3-1: Product: syz [ 543.941688][ T5887] usb 3-1: Manufacturer: syz [ 543.946538][ T5887] usb 3-1: SerialNumber: syz [ 543.950014][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.960165][ T5944] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 543.980657][ T5825] usb 5-1: Product: syz [ 543.987789][ T5825] usb 5-1: Manufacturer: syz [ 543.996047][ T5825] usb 5-1: SerialNumber: syz [ 544.013068][ T5825] usb 5-1: config 0 descriptor?? [ 544.107987][ T5944] usb 4-1: device descriptor read/64, error -71 [ 544.232297][ T8393] udevd[8393]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.357958][ T5944] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 544.398681][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.412856][ T9028] batadv_slave_0: entered promiscuous mode [ 544.508061][ T5944] usb 4-1: device descriptor read/64, error -71 [ 544.629910][ T5944] usb usb4-port1: attempt power cycle [ 544.978225][ T5944] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 545.023570][ T5944] usb 4-1: device descriptor read/8, error -71 [ 545.279322][ T5944] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 545.324160][ T5944] usb 4-1: device descriptor read/8, error -71 [ 545.449533][ T5944] usb usb4-port1: unable to enumerate USB device [ 545.482855][ T9032] snd_aloop snd_aloop.0: control 5:6:4:syz1:-2147483647 is already present [ 546.625197][ T30] audit: type=1326 audit(1776934773.366:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9037 comm="syz.6.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9db9c819 code=0x7ffc0000 [ 546.707105][ T5887] usb 3-1: selecting invalid altsetting 1 [ 547.117152][ T5887] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 547.170941][ T5887] usb 3-1: USB disconnect, device number 51 [ 547.195512][ T9045] fuse: Bad value for 'fd' [ 547.245739][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 547.323910][ T9055] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 547.435783][ T5944] usb 5-1: USB disconnect, device number 77 [ 547.511936][ T9055] bond2: entered promiscuous mode [ 547.529976][ T9055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.672758][ T5968] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 547.699026][ T5887] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 547.710354][ T9058] vlan3: entered allmulticast mode [ 547.715584][ T9058] bond2: entered allmulticast mode [ 547.744185][ T5968] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 547.795494][ T5968] usb 2-1: USB disconnect, device number 41 [ 547.892620][ T5887] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 547.908035][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.924702][ T9059] bond2: (slave bridge2): making interface the new active one [ 547.942492][ T9059] bridge2: entered promiscuous mode [ 547.943921][ T5887] usb 3-1: Product: syz [ 547.949056][ T9059] bridge2: entered allmulticast mode [ 547.971494][ T5887] usb 3-1: Manufacturer: syz [ 547.976249][ T9059] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 547.995539][ T5887] usb 3-1: SerialNumber: syz [ 548.024883][ T5887] usb 3-1: config 0 descriptor?? [ 548.029486][ T29] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 548.037500][ T5944] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 548.063435][ T5887] hub 3-1:0.0: bad descriptor, ignoring hub [ 548.078197][ T5887] hub 3-1:0.0: probe with driver hub failed with error -5 [ 548.205619][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 548.216814][ T5944] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.232515][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 548.242255][ T5944] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.249128][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.261457][ T29] usb 4-1: Product: syz [ 548.265944][ T5944] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.277329][ T5887] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 548.285428][ T29] usb 4-1: Manufacturer: syz [ 548.285453][ T29] usb 4-1: SerialNumber: syz [ 548.295170][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.318114][ T29] usb 4-1: selecting invalid altsetting 1 [ 548.330157][ T5944] usb 5-1: Product: syz [ 548.335813][ T29] usb 4-1: unit 6 not found! [ 548.341102][ T5944] usb 5-1: Manufacturer: syz [ 548.346912][ T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 548.356413][ T5944] usb 5-1: SerialNumber: syz [ 548.376922][ T5944] usb 5-1: config 0 descriptor?? [ 548.387044][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.387571][ T29] usb 4-1: selecting invalid altsetting 1 [ 548.418224][ T5944] usb 5-1: selecting invalid altsetting 0 [ 548.437276][ T5887] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 548.457548][ T5887] usb 3-1: media controller created [ 548.489903][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.575206][ T29] usb 4-1: unit 6 not found! [ 548.599097][ T9072] kernel profiling enabled (shift: 63) [ 548.606345][ T29] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 548.614387][ T5887] DVB: Unable to find symbol dib7000p_attach() [ 548.636118][ T9072] profiling shift: 63 too large [ 548.643960][ T5887] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 548.663569][ T9073] kernel profiling enabled (shift: 63) [ 548.681427][ T9073] profiling shift: 63 too large [ 548.687720][ T29] usb 4-1: selecting invalid altsetting 1 [ 548.709717][ T5968] usb 5-1: USB disconnect, device number 78 [ 548.713862][ T29] usb 4-1: unit 6 not found! [ 548.786935][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 548.838148][ T5887] rc_core: IR keymap rc-dib0700-rc5 not found [ 548.848307][ T5887] Registered IR keymap rc-empty [ 548.870611][ T5887] dvb-usb: could not initialize remote control. [ 548.884578][ T5887] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 548.973071][ T29] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 549.002521][ T29] usb 4-1: USB disconnect, device number 67 [ 549.076205][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 549.244857][ T9085] tipc: Enabled bearer , priority 0 [ 549.254282][ T9085] ip6_vti0: entered allmulticast mode [ 549.289214][ T9085] tipc: Resetting bearer [ 549.311556][ T9083] tipc: Disabling bearer [ 549.760257][ T5968] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 549.780865][ T8404] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 549.917964][ T5968] usb 7-1: Using ep0 maxpacket: 32 [ 549.927357][ T5968] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 549.937138][ T5968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.945671][ T5968] usb 7-1: Product: syz [ 549.950360][ T5968] usb 7-1: Manufacturer: syz [ 549.955387][ T5968] usb 7-1: SerialNumber: syz [ 549.960925][ T8404] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 549.971460][ T5968] usb 7-1: config 0 descriptor?? [ 549.977367][ T8404] usb 4-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config [ 549.990791][ T8404] usb 4-1: config 0 has no interface number 0 [ 549.993835][ T5968] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 550.009502][ T8404] usb 4-1: too many endpoints for config 0 interface 9 altsetting 33: 253, using maximum allowed: 30 [ 550.021707][ T5968] dvb-usb: bulk message failed: -22 (4/0) [ 550.029214][ T5887] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 550.036825][ T8404] usb 4-1: config 0 interface 9 altsetting 33 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 550.050098][ T5968] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 550.065614][ T8404] usb 4-1: config 0 interface 9 has no altsetting 0 [ 550.072869][ T5968] dvb-usb: bulk message failed: -22 (5/0) [ 550.080056][ T5968] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 550.090358][ T8404] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 550.101507][ T8404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.112964][ T5968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 550.125522][ T5968] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 550.135171][ T5968] usb 7-1: media controller created [ 550.141925][ T8404] usb 4-1: config 0 descriptor?? [ 550.170334][ T5968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.197055][ T5968] usb 7-1: selecting invalid altsetting 3 [ 550.203011][ T5968] ttusb2: set interface to alts=3 failed [ 550.231954][ T5887] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 550.252199][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.268854][ T5887] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 550.290433][ T5968] DVB: Unable to find symbol tda10086_attach() [ 550.296760][ T9104] ------------[ cut here ]------------ [ 550.302847][ T9104] usb 3-1: BOGUS control dir, pipe 80003480 doesn't match bRequestType c0 [ 550.311702][ T9104] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.6.750/9104 [ 550.322141][ T9104] Modules linked in: [ 550.326397][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.6.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.337239][ T9104] Tainted: [L]=SOFTLOCKUP [ 550.341840][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.352055][ T9104] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 550.357724][ T9104] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 550.377489][ T9104] RSP: 0018:ffffc900015f7948 EFLAGS: 00010246 [ 550.383806][ T9104] RAX: 0000000000000000 RBX: ffff8880782e8200 RCX: 0000000080003480 [ 550.392498][ T9104] RDX: ffff8880280a7bc0 RSI: ffffffff8c80a360 RDI: ffffffff9040e2e0 [ 550.400864][ T9104] RBP: 1ffff11005014f24 R08: 00000000000000c0 R09: 0000000000000000 [ 550.408962][ T9104] R10: ffffc900015f7a40 R11: fffff520002bef54 R12: ffff888035c50100 [ 550.417133][ T9104] R13: ffff8880280a7920 R14: 0000000080003480 R15: ffff8880280a7bc0 [ 550.425305][ T9104] FS: 00007f4f9bdd56c0(0000) GS:ffff888125214000(0000) knlGS:0000000000000000 [ 550.434364][ T9104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.441049][ T9104] CR2: 0000000000000000 CR3: 0000000050a2a000 CR4: 00000000003526f0 [ 550.449125][ T9104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000036 [ 550.457137][ T9104] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 550.465600][ T9104] Call Trace: [ 550.468934][ T9104] [ 550.471903][ T9104] ? __init_swait_queue_head+0xa9/0x150 [ 550.477598][ T9104] usb_start_wait_urb+0x13f/0x5b0 [ 550.482726][ T9104] ? rcu_is_watching+0x15/0xb0 [ 550.487536][ T9104] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 550.493542][ T9104] ? trace_kmalloc+0x2a/0xf0 [ 550.498410][ T9104] usb_control_msg+0x234/0x3e0 [ 550.503210][ T9104] dib0700_i2c_xfer+0xbb2/0xf80 [ 550.508125][ T9104] ? preempt_schedule_thunk+0x16/0x30 [ 550.513649][ T9104] __i2c_transfer+0x79a/0x1f70 [ 550.518533][ T9104] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 550.524505][ T9104] ? i2c_transfer+0xc8/0x2d0 [ 550.529156][ T9104] i2c_transfer+0x1cc/0x2d0 [ 550.533724][ T9104] i2cdev_ioctl_rdwr+0x460/0x740 [ 550.538819][ T9104] i2cdev_ioctl+0x6a5/0x880 [ 550.543370][ T9104] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 550.548485][ T9104] ? __fget_files+0x3a0/0x420 [ 550.553229][ T9104] ? __fget_files+0x2a/0x420 [ 550.557977][ T9104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 550.562962][ T9104] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 550.568082][ T9104] __se_sys_ioctl+0xfc/0x170 [ 550.572712][ T9104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.578837][ T9104] do_syscall_64+0x15f/0xf80 [ 550.583458][ T9104] ? trace_irq_disable+0x3b/0x140 [ 550.588529][ T9104] ? clear_bhb_loop+0x40/0x90 [ 550.593600][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.599860][ T9104] RIP: 0033:0x7f4f9db9c819 [ 550.604329][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.624033][ T9104] RSP: 002b:00007f4f9bdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.632544][ T9104] RAX: ffffffffffffffda RBX: 00007f4f9de16090 RCX: 00007f4f9db9c819 [ 550.640612][ T9104] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000006 [ 550.648706][ T9104] RBP: 00007f4f9dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 550.656736][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.664786][ T9104] R13: 00007f4f9de16128 R14: 00007f4f9de16090 R15: 00007f4f9df3fa48 [ 550.672807][ T9104] [ 550.675866][ T9104] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 550.683167][ T9104] CPU: 0 UID: 0 PID: 9104 Comm: syz.6.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.693927][ T9104] Tainted: [L]=SOFTLOCKUP [ 550.698260][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.708343][ T9104] Call Trace: [ 550.711626][ T9104] [ 550.714559][ T9104] vpanic+0x56c/0xa60 [ 550.718580][ T9104] ? __pfx__printk+0x10/0x10 [ 550.723274][ T9104] ? __pfx_vpanic+0x10/0x10 [ 550.727803][ T9104] ? is_bpf_text_address+0x292/0x2b0 [ 550.733134][ T9104] ? is_bpf_text_address+0x26/0x2b0 [ 550.738375][ T9104] panic+0xc5/0xd0 [ 550.742118][ T9104] ? __pfx_panic+0x10/0x10 [ 550.746556][ T9104] __warn+0x315/0x4c0 [ 550.750539][ T9104] ? usb_submit_urb+0x1053/0x18b0 [ 550.755569][ T9104] ? usb_submit_urb+0x1053/0x18b0 [ 550.760596][ T9104] __report_bug+0x29a/0x540 [ 550.765119][ T9104] ? usb_submit_urb+0x1053/0x18b0 [ 550.770147][ T9104] ? __pfx___report_bug+0x10/0x10 [ 550.775279][ T9104] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.780501][ T9104] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 550.786334][ T9104] report_bug_entry+0x19a/0x290 [ 550.791209][ T9104] ? usb_submit_urb+0x1115/0x18b0 [ 550.796241][ T9104] ? usb_submit_urb+0x111a/0x18b0 [ 550.801270][ T9104] handle_bug+0xce/0x200 [ 550.805540][ T9104] exc_invalid_op+0x1a/0x50 [ 550.810048][ T9104] asm_exc_invalid_op+0x1a/0x20 [ 550.814911][ T9104] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 550.820547][ T9104] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 550.840158][ T9104] RSP: 0018:ffffc900015f7948 EFLAGS: 00010246 [ 550.846234][ T9104] RAX: 0000000000000000 RBX: ffff8880782e8200 RCX: 0000000080003480 [ 550.854221][ T9104] RDX: ffff8880280a7bc0 RSI: ffffffff8c80a360 RDI: ffffffff9040e2e0 [ 550.862206][ T9104] RBP: 1ffff11005014f24 R08: 00000000000000c0 R09: 0000000000000000 [ 550.870188][ T9104] R10: ffffc900015f7a40 R11: fffff520002bef54 R12: ffff888035c50100 [ 550.878168][ T9104] R13: ffff8880280a7920 R14: 0000000080003480 R15: ffff8880280a7bc0 [ 550.886171][ T9104] ? usb_submit_urb+0x10a4/0x18b0 [ 550.891226][ T9104] ? __init_swait_queue_head+0xa9/0x150 [ 550.896808][ T9104] usb_start_wait_urb+0x13f/0x5b0 [ 550.901836][ T9104] ? rcu_is_watching+0x15/0xb0 [ 550.906607][ T9104] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 550.912154][ T9104] ? trace_kmalloc+0x2a/0xf0 [ 550.916762][ T9104] usb_control_msg+0x234/0x3e0 [ 550.921534][ T9104] dib0700_i2c_xfer+0xbb2/0xf80 [ 550.926398][ T9104] ? preempt_schedule_thunk+0x16/0x30 [ 550.931788][ T9104] __i2c_transfer+0x79a/0x1f70 [ 550.936567][ T9104] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 550.942381][ T9104] ? i2c_transfer+0xc8/0x2d0 [ 550.946998][ T9104] i2c_transfer+0x1cc/0x2d0 [ 550.951533][ T9104] i2cdev_ioctl_rdwr+0x460/0x740 [ 550.956481][ T9104] i2cdev_ioctl+0x6a5/0x880 [ 550.961017][ T9104] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 550.966058][ T9104] ? __fget_files+0x3a0/0x420 [ 550.970755][ T9104] ? __fget_files+0x2a/0x420 [ 550.975349][ T9104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 550.980296][ T9104] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 550.985336][ T9104] __se_sys_ioctl+0xfc/0x170 [ 550.989936][ T9104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.996017][ T9104] do_syscall_64+0x15f/0xf80 [ 551.000619][ T9104] ? trace_irq_disable+0x3b/0x140 [ 551.005650][ T9104] ? clear_bhb_loop+0x40/0x90 [ 551.010334][ T9104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.016254][ T9104] RIP: 0033:0x7f4f9db9c819 [ 551.020686][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.040381][ T9104] RSP: 002b:00007f4f9bdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.048803][ T9104] RAX: ffffffffffffffda RBX: 00007f4f9de16090 RCX: 00007f4f9db9c819 [ 551.056777][ T9104] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000006 [ 551.064780][ T9104] RBP: 00007f4f9dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 551.072749][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.080720][ T9104] R13: 00007f4f9de16128 R14: 00007f4f9de16090 R15: 00007f4f9df3fa48 [ 551.088712][ T9104] [ 551.092538][ T9104] Kernel Offset: disabled [ 551.096867][ T9104] Rebooting in 86400 seconds..