last executing test programs: 15m16.863612255s ago: executing program 3 (id=855): socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x10140, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010104}, 0xff}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) 15m15.483392684s ago: executing program 3 (id=859): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_usb_connect(0x3, 0x982, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb8, 0x42, 0xf0, 0x8, 0x565, 0x3, 0x538b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x970, 0x2, 0x7, 0x7, 0x80, 0x3, "", [{{0x9, 0x4, 0xa8, 0xfa, 0x6, 0x35, 0xe, 0xdd, 0x3, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0xb8, 0xf2, "aa84f0fd10"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x3, 0x67, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x6, 0xc, 0x8, 0x5, 0x40, 0x7f, [@generic={0x85, 0xe, "815202189ff9ca86903fb9bb1e0db0c1eb03edbc75cc2eb7e3dfc7a4a2323d915d1233e6a84ec1d93b31e8e100894cbc4ba62d7077175bc02a1e419df82844b8056b4e90f4b6214f228ce8d5a65415f33c3b96464b2683dcf503b1ef3ecb48c743075686aeb77dc1670e8abe3a82296b918a606a716d3004e07a597e4eba79abafe92c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x80, 0xbb, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x401}, @generic={0x71, 0xc, "f97a77304db7e230f9f55ed5665cfae87d50056ddd23201d36909f0f5c6e8cc91ef8905ba7c6e4819efe8771ea959f41f0fc858fe90c313d9c11a5143aa84567cf36cc9949e3eb9524332aa094bc4bd40c6d497bc8b66855700708cd74ea40a382f8abeb2e63a8a2956b4dd7dc2d0d"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0xd0, 0x3, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf3, 0x1}]}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x0, 0xc3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x3cb9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xa, 0x4, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}, @generic={0x53, 0x8, "d2b7b3fd3ce37903fbc9c82fb9bb6ec4b432d0b1a49bf7eecb6d9d0f21f9a5f7a51a2cf013c8a6f358a6e25ec92ed8c53efab90e29f79e68f7ef6d7553c958cd46eee22953e48f4b1533c19f3dcf031d12"}]}}]}}, {{0x9, 0x4, 0x2e, 0x1, 0x10, 0x73, 0xae, 0xb5, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x32}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0xf, '&'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x400, 0x3, 0x2, 0x74e, 0x9, 0x77}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x303, 0x6, 0x2, 0x7}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x5, 0x9]}]}, @hid_hid={0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xeb0}}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0xd4, 0x4, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x1000}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xe}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x7, 0xf0, 0x2c, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x48}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x0, 0xf9, 0xc, [@generic={0xd1, 0x31, "6a22b67f0dd1311db9525fec3a2b30fdecd23f280e8fe04a9476df25e9df76d9ca687e3d9553c6581c6ccaefd12c11ba93c30b04dbca80f2d3114f801c8bad31408fafeafd119ac5180035bad3e0bbade2d0741896a90f7d318c451d28a3f5b9a170fb73eb2bbab5a6b3907e26b01a5a96e03fad01ba8924676a212ff6a1311e9aa03c2b64a1eb1ae966b88f22385038821d87202b5468f809511686b192e2a8d350d4b7e9ac4a77f680d53a5ba1a483c3f9a2dc30f47b8a75779195c31cbeb3e0fe7ddd6227fbe630a4874c91b6c9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x5, 0x7, 0x1, [@generic={0xc5, 0x9, "891a51fe2f2691424dc0719580be7d3afddfac72eb98554de84812ca12a58b106ce3fd23d8eb5a3bf0288e8e2db14983834fb0145a94816c0d7fe7072460b836872cb6bf246326af9cbf99a2765b576a62baf03fc954853bed7a097b3e8ac13872c4a1afbcdb09e70c65266b6a8b5b19b05218ecfc2b8f23fd39079c44235ba3a3b7104008b81cddaa42e276ec8a4fcf32e1518f743b27cf91b3a1f15527588a69437bcec7d74f61bb57965de929253e9d7a3896538e0d13ec2a719e2e809d4138bc9f"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0x6, 0xfc, 0x9, [@generic={0x80, 0x22, "656aedf86ad3d8e7119e39587c75db09cf0fcf2a1e91efb49f0f62aeeb07891dcf57836eed14bfe38bab0cea780d8df17d248f0783f25933ceca3792772b4e30c3eeb3f39a0649e5c9075433ed0b8efba2da49c259ab48801035beae7fad012cd3a97b9d5f319c9b3fde2067a28f8a8de16344ef86f2bfe226473b8ecbab"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0x81, 0xa, 0x4, [@generic={0x48, 0x24, "84ced16878cc46acc9e178b38fc9d5fc981ca01bcef5e3fbab25557bd4d04c3cc558c04988800a74996968147ac55d42b04650e1b460d5ca701871152d3e409269a87f9624f3"}, @generic={0x4d, 0xc, "cf0d7ac16e4d33a15b43fa6c391bd6d62217b59b13347b5a7f5ff0cd096143cc14f451037d6f5e2ff0228c4b9c09f259390c5b5f3257b5eab89bc54817c3029ec6a246057aad2c3bea1f1b"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0xca, 0x7, 0x0, [@generic={0xb7, 0x24, "653bb12360b5252b14f60c7ed30d4c0ea2be8af77e78c8f97166d2b61bcf2f23b68407b03d1d2326e801b64328d949d12a820da1da61462452214abf4b877c1b73ac2e9ecdee43649da6675a503aac26a0af6ee58707f0a58206d12d0728504f637872f4730a7d88e622c500aa91684fdac77b501af8bb4c22b93074724f21e0ecc8ad3ca269910679c2c79ca794136746ddd68d03233adb030aa7ff9f6731287a46fa05103e8015f2ebb8369308ad8977146ddcf4"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x3, 0x3, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0xfe, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x6, 0x2, 0x9, [@generic={0xdf, 0x22, "5daf466125d13e751ff4aeae03adf2e44ba8932df9b54a86d24b09246628574711915f0f6b6c40d65537551abb460b5391f6516033a8204ad516cc2a5b4db8bef5aa7cff65343ee0d84d18fcb75623143f90953b4f4ebab0caaca7f57cef8188cdec20b32f31072412629a20de3363109e100db168d9f9c63d6c2d267c1ea8326fb78fdd97307add14b82d5bdd1ce2a3d89ee73186ee36af3480ba7221685a0fd0eb5fff5d5db6d21b52000c3261c40fac0098b0691d8b739ca5d110bf4c4ec34ba5a97a036f56785b07418f37dc9ffc73532e02682ae07501565dbd78"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x9d, 0xff, 0xb, [@generic={0x9c, 0xc, "93b6bd29a5f7da69ec4b48300204701d9fac367927435464d42fc1e8f0ca7ba07908570811cac982ed5f99bd19c8ac2e3e8e23c4dd0674733ee12f0c0ad51e2baa05d2a25877f02e7080a0da09b4f5037b81a7ea0e761b07401cf4c97b99e0cfe875ef691eaf33afe52172875afbf448037f947f9706d6a59d661986d59eba9e1ab8b3c0428d8626e1c8406163e32adefe771c438b505a97ede4"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0xe4, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf9}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x1, 0x6, 0xf, [@generic={0x93, 0x0, "394455db5cd3166ae8ee01bbb7847b18033223acda664fe54e18bc4b2a73a77f18eaec2e2b7e16c1c0eec5d08718c73250c2fb7a41c408522da48c06c47ca847dd681919a73235050e867f4df307a0d119b1ddfbec8e7635cca318857cc8f57f435cf2dd35b8e771036e4be2d1e4ea92fd894f151ad4baf7c6dfbd251fb432003f710fc6da8432fcc1b428d499d83d6983"}, @generic={0xdc, 0x23, "b7ed2191eca8baab7c27ffee463a0389d70fb7e2739a87350cdfe390123d58f490a34c12ed11f8d434ffb095caff9effc02db700ce2d863951d784bbf738aae95e68404171f058f2c0d594fd7b57b9d20c0e9f158d55b1915479f15944117be78083320e197eb31cc559c033cc2f342a386b4e753aa6f9b424a35539b989e8853bef0ded19488ac403cad416f8f2c382f4e9cd0b76c26acabe9467329bd48e1dc730550764b8c4a6a4f0fee36ba47d5384014a7f1f4d172442ff066a71899247cb7e9afd5977735f3245dbefead2d016d3dcbec8a1084053b2e4"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x5, 0x6, 0xb, [@generic={0x2, 0x23}, @generic={0x47, 0x7, "4bc5e849eed80832f12c605f731bb5c4809a52a9f318dd5b01c83d2762147490ea01e35e11ba28676bacab8d2ee1da746d15cf980bb968bdaff3dd9d2140b5e0344520873a"}]}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xa7e5dfbd9f63c85, 0x4, 0x80, 0x2, 0x40, 0x2a}, 0x8, &(0x7f0000000a40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x416}}, {0x49, &(0x7f0000000ac0)=@string={0x49, 0x3, "b185b06a86bf9085b6a59e2d9a346df852a7976c32098c92a3fc8d587a8a985e54de80a9ffd06e9ce4f3f82df117a8de373650cef768615d2d2fd8d3966902865c7a1e5cda80db"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x418}}, {0x19, &(0x7f0000000b80)=@string={0x19, 0x3, "a583de20413fcf21e8d31f06326f21212a3fe110ac87ad"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x140a}}, {0xcf, &(0x7f0000000c80)=@string={0xcf, 0x3, "d8ab10f89ea1955483092395e276e8ebc28cda72b263cb8bab6047b176bf24a5ab4b76a82954f35f12b65dd00b91651c4ba7e3992211f512fedf001bb7180980072590cb5fbf2e214c8334f054cb087b1de6848db5da8ac4ce993fa5d5ca90776f2f11c7fa866336f3559069bae8b8b8ef0a1776a81b6503c3f4570f6a2c2a56e5aa84ed0931ea82561d41a19f04c00102e8a4bb1829f8e05c88096c62be697ae41ee6e09f8b8c60b8273c94e789c25f9fb29ba3e5d03b29b3cdcfdaee114c561c682506466fcac5a391f7839b"}}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1358, &(0x7f0000000e00)={[{0x4e, 0x4e00, "0d3d63b7ab00cf5716636861ad7156734f6802367e7057f41834025215d1a02a7cf4daebdfbfa713ab8016cafe3031d234855bf722cd8e5fa7d63a6dbed9f58f17ecb9ba9683108e066c0930b640"}, {0x1000, 0x4e00, "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"}, {0xb7, 0x4e00, "0aa8bb65e743ec1effcf14d159085362c19f2dd1f88e10d1c9ffaacf9e3c4aaed602d53af7ed90fd2dd2e705d6eb0e35002df136b1273b639d6fd48d658ca9feda2650f34a20d746ca73e80c1a9dc54a4d4e5fa58e63b59c28d741fbc613e67c649c41c94bf8c24922349759d715074f468f85737d9e854eda6951b1ec5642ea18de97a0f12928571bb6c0b3a0c9950dd2aae0385595001d9ec9155edd9ee052eb96b0bfbd3d9d79d72f86f527bbe7a866819b9d1e5204"}, {0x2e, 0x4e00, "c10a5ba6903d351ea25ec35bd15c5c29044b2f565bb2269e9e7793b10f1792b730b008406c927f71962f18a105e7"}, {0x54, 0x4e00, "76009d38ae2545bd0266230288a9aa3325398e3f36b124d7546c437a66e5681b548df791eac9c1845f6a365fc7bbfc91bde34e74690adc4f6acbf18ab676aad8aeca2fd21d10baeed6f2f42f24fef586fa6270ea"}, {0xb3, 0x4e00, "23b37558232b3c6e590588c9264a861a09e4940fc6de2f3bc048e7bcfe9d9beb4effd303e0ccb23d670663d3eb95f5d6a2f09c188d22ae667b571b0695912403b37a321c502bfd51167929afafbee1b954457d05521bb0fb4363ba9df76f8ac08333a816f3202df1039fce38af936a81f86a53811f96539333a8b6bcf4713c62fdca22d67bcad1b8a54f14f2090bc85414f1c36da7c871dd2bb3de23a95148ca4085535361b7eda521a8abd682872193b76140"}, {0xfb, 0x4e00, "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"}]}) 15m13.959494407s ago: executing program 3 (id=864): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x1) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8806, &(0x7f00000002c0)=ANY=[@ANYBLOB="66643d5cf2b5324fd06d6bcd06bc3bd7f45b5c1517e2d9e978db42fed4dacbba3cd1ddb120a9d9349b78fb48bc5c537ff2962bf85a20e3546be4e8fd0f85e4c96cefc1da335e7c", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x35, 0x6, {{0x22, 0x4, 0x1, 0x22, 0x88, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x2, [{@local, 0x1000}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0xe7, [@local, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x44, 0x3, [{0x0, 0x3, 'P'}, {0x1, 0xc, "1612d27c1c1c41951ca4"}, {0x0, 0xe, "6db9bb14384ba1b96a4d3c81"}, {0x5, 0xb, "8b9a3362c18887ba6d"}, {0x0, 0x3, "e5"}, {0x0, 0x3, "13"}, {0x1, 0x10, "ddab8e3ae58544bd55123a622add"}]}]}}}}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async) close(r6) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x4, 0xb49, 0x9, 0x8, 0x0, 0x4}, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000500000008000b400000000054000480500001800800010066776400440002800800014000000011080001400000000b0800014000000010080001400000001308000340000000020800014020000017080002400000001008000340000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x2}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8480d1, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) fstat(r9, &(0x7f0000000080)) 15m13.50661314s ago: executing program 3 (id=866): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socket$unix(0x1, 0x1, 0x0) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 15m13.45525209s ago: executing program 3 (id=867): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={[], 0x20}, 0x0) 15m13.237039246s ago: executing program 3 (id=868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r7 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 15m12.567879048s ago: executing program 32 (id=868): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r7 = socket$kcm(0xa, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) sendmsg$sock(r7, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4-generic)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 12m1.064608398s ago: executing program 5 (id=1823): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474d, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) accept4$unix(r3, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e, 0x80800) recvmmsg(r1, &(0x7f00000003c0), 0x0, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000003c0)={'pim6reg0\x00', {0x2, 0x0, @local}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x9}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x1, 0x2c, 0x8, 0x0, 0x3}}, 0xffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000dab40cb65300f6f6d782a89a36d4e4957babe2c66efddf0bb50df4f83c86f00568081f8673f064e1b3b135d898c497c185d0e5276ea393b1ae4a89463fc2b27dfc2c36bad9c42ac197102e911cfba28ea75287ef6fc583f65dd5b7bc939bfe62adcd6c55103b667ac17aed2e34c058582091380d7040c80b24fd48f00a09c4d6b257f75810727357c400a796ca88810d4e0f9fdd6eea399a7e55778bbbe3eb1be1f20d4441a"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) mmap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x3000001, 0x2010, 0xffffffffffffffff, 0xa0595000) syncfs(r5) socket(0xa, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 12m0.293666465s ago: executing program 5 (id=1827): r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x21031000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x1}) rt_sigtimedwait(&(0x7f0000000040)={[0xfff]}, &(0x7f0000000080), &(0x7f0000000100)={0x0, 0x989680}, 0x8) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000180)={0x5, 0x1, 0x1, 0xf48, 0x3, 0x8, 0x48}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r4 = io_uring_setup(0x46f2, &(0x7f0000000240)={0x0, 0xb2f, 0x4, 0x1, 0x13e}) syz_io_uring_setup(0x1e0d, &(0x7f00000002c0)={0x0, 0xaba4, 0x8, 0x0, 0x240, 0x0, r4}, &(0x7f0000000340), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xf99}}, './file0\x00'}) ioctl$KVM_RUN(r5, 0xae80, 0x0) exit(0x400) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000400)={0x0, 0x8, 0x6, 0xfffffffffffffffe, 0x7fff, 0x6, 0x4, 0x80000000, 0x400, 0x7, 0x0, 0x1}) r6 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0xfff, 0x67, 0x7, 0xd, 0xfffffffffffffa80, r6}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f0000000540)={0x30000002}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8, 0x8}, {0x8, 0xfff3}, {0x0, 0xf}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48002) syz_open_dev$vim2m(&(0x7f00000006c0), 0xb, 0x2) ioctl$SNDRV_PCM_IOCTL_XRUN(r5, 0x4148, 0x0) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000700)) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000740)) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000b40)=0x1) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000b80), 0x180, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000cc0)=0xe8) r10 = getegid() fchown(r8, r9, r10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11m59.37911977s ago: executing program 5 (id=1835): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 11m59.365360258s ago: executing program 5 (id=1838): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000500)='./file0\x00') syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3b, 0x1333c135, 0x2, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30044800) sendmsg$sock(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) 11m56.226141335s ago: executing program 5 (id=1854): ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000001c0)={'wg0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x800000000000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a052404"], 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(r4, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x20000001) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x3}) syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010234000904010101010230000905010920000e00030a2525ffffff7f0c80010904020000010230"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r6], 0x38}}, 0x4000080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) socket$kcm(0x29, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xf7f, 0x0, 0x146, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x9af7, 0x0, 0x0, 0xfffffffffffffca4) 11m55.957552553s ago: executing program 5 (id=1855): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0x42792000) futex(&(0x7f0000000000)=0x2, 0x5, 0x200000, 0x0, 0x0, 0x0) 11m55.743939665s ago: executing program 33 (id=1855): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000009, 0x204031, 0xffffffffffffffff, 0x42792000) futex(&(0x7f0000000000)=0x2, 0x5, 0x200000, 0x0, 0x0, 0x0) 2m5.241606904s ago: executing program 0 (id=4599): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x226443) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x10, 0x400080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmmsg(0xffffffffffffffff, &(0x7f0000000880), 0x0, 0x45) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1_vlan\x00', 0x10) close(0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x1}, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') read$FUSE(r10, &(0x7f00000061c0)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020}, 0x2020) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f00000002c0)}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m4.502418786s ago: executing program 0 (id=4601): socket(0x23, 0x2, 0x4) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'dummy0\x00', {}, 0xd04}) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x4, @broadcast}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00') 2m4.428129304s ago: executing program 0 (id=4602): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(r2, 0x0, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x3, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x2c}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c20000090180c200001988a8420081003900080045da001c00660000a106"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c20000090180c200001988a8420081003900080045da001c00660000a106"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d97}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff026}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x74}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1100) socket$inet6_sctp(0xa, 0x5, 0x84) mq_open(&(0x7f0000000300)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z_\xce\xf6\\\xaaz\x99PZ\xc3.\xce\xdc\xd1{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5.`\xfd\xbek\xa4\xca\x80\xaf\x10\x9e\xc9\xeb6\xaf;\x1f\xa8\xf1\x95\x9b\x11:\xe5\xc9\vM[y\xcb#z\x99)\x02\xeeQ\x85N\xdb\xcb\xffl\'\x1dC\xfe3\xb4\v\xd3r\xa8\x7f\x82\xaa[\xf9\x19L\x8f\xaa\xd3a\x95\x9d\xe0\xae\xaf\x8f\x05\xb3\xcd\x8e\x17\xb7\xebK\xe5P\x16\xe3\xc0\xfc\xbe\xc8\xc2', 0x40, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x44840) sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x5) (async) sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x5) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r8, 0x0, 0x0) (async) write$P9_RVERSION(r8, 0x0, 0x0) 2m4.233328093s ago: executing program 0 (id=4604): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0xfffffffe, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000000c0)={&(0x7f0000000000)=0x2, 0x4, &(0x7f0000000340)=[{}, {}], &(0x7f0000000080)}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 2m4.09101118s ago: executing program 0 (id=4606): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lgetxattr(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xba, 0x21, 0x30, 0x20, 0x5ac, 0x22a, 0x5fef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x90, 0xe0, 0x2, "", [{{0x9, 0x4, 0xd0, 0x0, 0x2, 0x3, 0x23, 0x2, 0xfd, [], [{{0x9, 0x5, 0xd, 0x1, 0x10, 0xfc, 0x8, 0x5}}, {{0x9, 0x5, 0xb, 0xf, 0x40, 0x3, 0xc}}]}}]}}]}}, 0x0) 2m3.5183054s ago: executing program 0 (id=4609): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@assoc_value, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000180)=""/12, 0xc}], 0x2, &(0x7f0000000480)=""/122, 0x7a}, 0x40005c}, {{&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000680)=""/81, 0x51}], 0x2, &(0x7f0000000840)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f00000008c0)=@phonet, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000980)=""/53, 0x35}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000c00)=""/215, 0xd7}], 0x6}, 0x1}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r11, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r11}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 2m3.31982794s ago: executing program 34 (id=4609): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@assoc_value, 0x8) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000180)=""/12, 0xc}], 0x2, &(0x7f0000000480)=""/122, 0x7a}, 0x40005c}, {{&(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000680)=""/81, 0x51}], 0x2, &(0x7f0000000840)=""/108, 0x6c}, 0x7fffffff}, {{&(0x7f00000008c0)=@phonet, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/40, 0x28}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000980)=""/53, 0x35}, {&(0x7f00000009c0)=""/131, 0x83}, {&(0x7f0000000b40)=""/190, 0xbe}, {&(0x7f0000000c00)=""/215, 0xd7}], 0x6}, 0x1}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r11, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r11}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 6.155393713s ago: executing program 6 (id=5124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2a) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0x2}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) (async) sendmsg$nl_route(r3, 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r7, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async, rerun: 64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) 5.471394261s ago: executing program 6 (id=5127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf3b0c000000180005800c00028008000200be0d0000040001"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 5.39348669s ago: executing program 6 (id=5128): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x32da02, 0x108) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x45, &(0x7f0000000200)={0x0, 0x0}, 0x10) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x20, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x35}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047e55d1e84f00048006700000100ac1414aa89031e830393004310a4c600000000000000000000000000000000010000010077e00000000000000300000000000000049a2cab49523e004e7b4ac5a9981dc0230b52c712ef1eb2eb377f51a1180617bfd133dccb532dc1ce9bec0595f8cfc34dc2a0bebd42b6c49bd9d6b06ac69c50dc9485883b5bd9e62fd126de5588b737855184bfa50fc3879235e5b61a130f644262a3a6572b9cb3385a84a41a3862ea95f627a9f86aa1cf53e3763c37e138907bf8575374b9301a157a897f7eee7fad5d046d7b1834e493b5a6ffb706ef5b13f1ed730a3083fcac65343f29575f0b689dc9a9029bb2a035b620756585780cc14ed05854458fa46209c7756cff3d365588f80a51ddf69c23f64b17f7eb1fb41ae8d4fa18c22fb26663b290affcaca12e54f64315c0b67b01c9cc05decc770fa647fe664efe6d9004d8bb58863d6526ca9184cbd2051b7dc08cb651ab18b69f73df5f69fef8d8126d1e5f07f92764fc736faeaef870ee3c61847bd2db669ac8d660b196438d53dfb906d81162334724bbab1cc408b58cba408fd41d0d9a34f97ef45fde0d0896c28a34e504834b60cb5b15c8b7a7c8f0"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffd8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) r8 = fcntl$dupfd(r5, 0x0, r3) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@getstats={0x1c, 0x5e, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x2}}, 0x1c}}, 0x20024090) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000380)={0x7, 0x7, 0x7e, 0x3, 0x9, "9b6ec8186d29a10e"}) fcntl$lock(r0, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x10000000003, 0x4}) 4.062552721s ago: executing program 4 (id=5138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf3b0c000000180005800c00028008000200be0d0000040001"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 4.032445618s ago: executing program 4 (id=5139): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="2f10031420aa961da13b0800000400007fca", 0xfffffe3e, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x10}, 0x14) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000004c0)={{r7}, "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"}) poll(0x0, 0x0, 0x1ad) socketpair$unix(0x1, 0x3, 0x0, 0x0) 3.64094154s ago: executing program 7 (id=5142): r0 = userfaultfd(0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x52020000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'wg0\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 3.597757993s ago: executing program 1 (id=5144): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000004, 0x7}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480), 0x0, 0x7, 0x5) unshare(0x22020400) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0xe, 0x3) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e30253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x9, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000208000a40000000000900010073797a30000008000540001a0021246574140800014000000004140000001000010000000000000000000084000a0000000000000000f187f2eb71a704255ea2edaa6b848eb02d7a443f1128e8da1593dd0e35dc96a5e299b3f55e2a33de8ccd7223137aece56f496040566c44b7"], 0x9c}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000280)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c00000003000000000000020000000900010073797a30000000000900030073797a320000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000ac3003b69ac542bd4a02c69167abe12b0a8ee23cc43eeba770333374cf7bbedfdbbc5f00c28f6fe8caea2545a3160254963649ba0dba45447c048cf2ea315df7f07520c4bd40125465beec1afaf2daf3af370fb2b0c855ae3ebb9257b7bbd3be2b389d30d96ab"], 0x94}}, 0x0) 3.523225304s ago: executing program 4 (id=5145): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x3c}}, 0x0) 3.522437133s ago: executing program 4 (id=5146): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2c8, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4, 0x6, 0x3, 0x1, 0x400}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf2eaaf407c114bfd, 0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async, rerun: 64) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) bind$qrtr(r1, &(0x7f0000000780)={0x2a, 0x2, 0x2}, 0xc) (rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = dup3(r2, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000280)=""/41) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000580)={@mcast2, @loopback={0xb00000000000000}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffc, 0x1a0319}) (async) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x6, 0x0, 0x6, 0x0, 0x400000000000000b, 0x80910220}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='GPL\x00', 0x602c, 0xc6, &(0x7f0000000300)=""/198, 0x41000, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x20000000, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xc, 0x7, 0x30d}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r6 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) epoll_create1(0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (rerun: 64) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 3.48328534s ago: executing program 4 (id=5147): r0 = inotify_init() (async) r1 = epoll_create(0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8000012, 0x5, 0x0, 0x4, 0x7, 0x6, 0xfa11, 0xffefffff}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x5b}, 0x1, 0x0, 0x0, 0x20050805}, 0x20044060) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009"], 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) (async) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000140)='syzkaller0\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) (async) syz_io_uring_setup(0x1e1b, &(0x7f00000000c0)={0x0, 0x1019, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') 3.414637546s ago: executing program 1 (id=5148): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) 3.326885522s ago: executing program 1 (id=5150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200c40, 0x62) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) (async) timerfd_gettime(r2, 0x0) (async) ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0) 3.154003397s ago: executing program 1 (id=5152): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x10, 0x2, 0x0) 3.023145315s ago: executing program 1 (id=5153): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/44, 0x304000, 0x800, 0x2, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x48, r2, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @initial, @device_a, @random="40777a121acf", {0x7, 0x4}, "", @void, @value=@ver_80211n={0x0, 0x595, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000100)=[0x1, 0x1], &(0x7f00000001c0), 0x0) 2.777531833s ago: executing program 1 (id=5154): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xfd, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x8, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff0, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x7, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0x11, 0x1000000b, 0x10, 0x80000000, 0x9, 0xb50, 0x4, 0x800, 0x3, 0x2, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x80, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0xd0f, 0x2e, 0x9, 0x6, 0x2, 0x0, 0x3, 0x6, 0x7, 0x9, 0x0, 0x2, 0x7, 0x40, 0x7ff, 0x7ff, 0x7, 0x7, 0xc00, 0x89, 0x800, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d28, 0x10000, 0x8, 0x80, 0x6, 0x0, 0x4, 0x4c, 0x8000, 0x8, 0x5, 0xe66, 0x9, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x8, 0x1, 0x8d1, 0x3, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x3, 0x9], [0x2, 0x7, 0x6, 0x9, 0x8000, 0x1, 0xa, 0x7, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x3, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1a, 0x2, 0x800, 0x8, 0x9, 0x4, 0x243f, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x4, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x5, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0xfffffffd, 0xe, 0x2, 0x10000004, 0x5, 0x7, 0x0, 0x1, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xfffffff7, 0x6, 0x4, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xd, 0x40, 0x9, 0x0, 0x9, 0x1, 0x3, 0x7, 0x6, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) move_pages(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000000200), 0x2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df45208090503030000050881090502"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 2.747311153s ago: executing program 4 (id=5155): inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000340)=0xb42) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc4, 0x4e, 0x5a, 0x10, 0xc45, 0x800a, 0xdd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x4, 0x80, 0xae, "", [{{0x9, 0x4, 0x72, 0xa, 0x0, 0x74, 0x9f, 0xfa, 0x4}}]}}]}}, 0x0) fchdir(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r3, &(0x7f0000000040)=""/50, 0x32) getdents64(r3, 0x0, 0xffffffff00000018) r4 = openat(r3, &(0x7f0000000440)='./file0/file0\x00', 0x4400, 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000019580)=""/102369, 0x18fe1}], 0x1, 0x40003, 0x408006) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r8 = socket$inet(0x2, 0x1, 0xffffff80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x6c, r10, 0x10, 0x70bd26, 0x3, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x54, 0x4, "6cd346a8922f4a61a788dd7f7848978d3d2638b4778c86055bd17c605c7e3a715818e9a6102269d970b33c65d706e51573a221369ab247f13d615fbe16b5e04a033a15af0f5cdd27fa75a92589f6324d"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800d1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000003c0)) 2.457413777s ago: executing program 2 (id=5158): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x200000004, 0x7}, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480), 0x0, 0x7, 0x5) unshare(0x22020400) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='attr/fscreate\x00') lseek(r1, 0xe, 0x3) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e30253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x9, 0x7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000208000a40000000000900010073797a30000008000540001a0021246574140800014000000004140000001000010000000000000000000084000a0000000000000000f187f2eb71a704255ea2edaa6b848eb02d7a443f1128e8da1593dd0e35dc96a5e299b3f55e2a33de8ccd7223137aece56f496040566c44b7"], 0x9c}, 0x1, 0x0, 0x0, 0x40014}, 0x40) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000280)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c00000003000000000000020000000900010073797a30000000000900030073797a320000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000ac3003b69ac542bd4a02c69167abe12b0a8ee23cc43eeba770333374cf7bbedfdbbc5f00c28f6fe8caea2545a3160254963649ba0dba45447c048cf2ea315df7f07520c4bd40125465beec1afaf2daf3af370fb2b0c855ae3ebb9257b7bbd3be2b389d30d96ab"], 0x94}}, 0x0) 2.347702133s ago: executing program 6 (id=5159): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 2.286441822s ago: executing program 2 (id=5160): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_open_dev$vcsa(0x0, 0xffffffffffff92e3, 0x448202) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000006c0)=ANY=[], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa20000000000086dd6c2d010000198401000000000000000000020000000101"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x2, 0x2, 0x2, 0x2, 0xe64, 0xc72, 0x2]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) 2.195095348s ago: executing program 2 (id=5161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf3b0c000000180005800c00028008000200be0d0000040001"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) 2.192571331s ago: executing program 2 (id=5162): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x1, &(0x7f0000000540)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfed, &(0x7f0000001840)=""/4077, 0x41000}, 0x94) socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) (async) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) 1.441687115s ago: executing program 6 (id=5163): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c009900fb"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000300)={0x3c3, 0x7d, 0x0, {{0x500, 0x1fb, 0x0, 0x6a, {0x1}, 0x10000000, 0x2000000, 0x7, 0x0, 0x14, 'p%V\xff\xff\x81\x02\x00\x00\x00\x00\n\x007\xae_\xc1F\x00\x00', 0x81, 'pJ\x86\xce\xc6\x02\b!W\xe3\'.\x06\xeb\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xb7/K\x1a\x94\xe1\x8c\xb3\x04U\xd2\x9c7\x8e\b\xaf\x05\x1cn|\x02b\x93\xef\x8eG\xeeF\x9d\xdf\x02\xa9\xd2\x82 fw!\xd8\xef\x00\xe1\xb1\x18\"\r\r%\r\xd7\xd1\xda\x9a\x04\xca\xe3\xf2\x1e\x12\x9b\x9d\x9a9*\x8c\xc4Y\xaf(\xd1\x82\x00\xb5\xf3\xc17\xe9^n', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\x95\x00', 0x121, '\xf8\xf6~^\x9b\x8f\xfbqm\xcf1^\xca\x12\xe7Xv\xd7h\xa0\x02g\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86\xb8\xad4\x01\xb9\xbb\xab[\xfd#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00\x00\x00\x00\xbbe@\xaeJ\x8c\x1b\xc6+\xa4\x8e\xf4\xbe\x86a\x88\'\xab\xe7o!\xd1F\xb9\xc0-\x82K\xe7\xb1\xaf\xc3~\xf34p!\x9f\x94\xd7g\xb4\xca\xa0!\x04?w:H\xcd\x88^\xafBH\x94\t\xe4\x95\xae1\x82\xc2\xdf\xcd\x1b\xc9\xe6\x1f\xa3TT\xca\xdeX\xca\xd5\x1b\x17\xc8\x1da\xfb\xee\xb9\xe2\xcf\v`\xf3\xb4\x97\xc6\xe6J\xaf\xdd\xd3\xf6\xd5\x120Y3_\xf6t\xde\x8b\x9c\x04\x12\xa8\xf4 \xed\xf04\xd17\x8ac[_q\x05\xeb\xef\x9aF\xb6\xaa+\x04\xfe\x97\xdf\x12\xc9\xcd\x83r\xa6RN\xfb\x93>\x039\x1f\x16#^*\xe3z%\xfdk\t Ay\xdf\xcf`\xf8\x86\xc5\xf1i/\xc9\xe6\x90\xcf\x84\xd9\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np}\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x3c3) 1.308331179s ago: executing program 2 (id=5164): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000001c0)={@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x14}}, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, &(0x7f00000001c0)=0x5d) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) ioctl$UDMABUF_CREATE(r7, 0x40187542, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r3, 0x40106e80, &(0x7f0000000080)={0x3, 0x1}) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x3, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) unshare(0x22020600) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000080)="2e108ea768f2db304683775a7f2cdf7ffa698c7167ab83db04d28f0e5632c605f4734f06bebd0d199085a560180c17772accc042d8424f4c6855c70c0a7724b76ed37cddc52391b1256f2e7a5c8defcca76dd0a006fb04e0770ac1f3e07f527beaaba2fe205384f0ec0d0a", 0x6b}], 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 943.172818ms ago: executing program 7 (id=5165): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) landlock_restrict_self(r1, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000000140)=0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x0, 0x400}) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x6) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6c6882, 0x13d) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x3d, 0x0) landlock_restrict_self(r8, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r6, &(0x7f0000000000)='./file0\x00', 0x4) 570.959703ms ago: executing program 6 (id=5166): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_open_dev$video(&(0x7f0000000040), 0x200, 0x8402) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x80000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 378.439899ms ago: executing program 7 (id=5167): r0 = io_uring_setup(0x63b8, &(0x7f0000000000)={0x0, 0x60b8, 0x1, 0x0, 0x17}) syz_io_uring_setup(0x5032, &(0x7f0000000080)={0x0, 0x9e6, 0x1, 0x1, 0x2f7, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) r1 = semget(0x0, 0x2, 0x426) semop(r1, &(0x7f0000000180)=[{0x0, 0xc, 0x1000}, {0x3, 0x4154, 0x1000}, {0x4, 0xd7, 0x1000}], 0x3) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/21) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x8000000000000000, 0x410002) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000240)={0x66, ""/102}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000002c0)={0x1, 0x80000, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x7, 0x8, 0x2]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8}, @CTA_ZONE={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40810) timerfd_gettime(r3, &(0x7f0000000400)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000580)="7e2160a2fd19792c865f5d7bcc1fa0da0fa3c39e71f4dc5cb806f7bfa2873880c9554b49d4ff18e400b78dfbb029ede966cd82274a4c2796642ecef73c529ff4aebdcf8354916b71e5e0827996ff8c5b90c1254d3bdb57d83ae3dabb73f8abdfab10", 0x62}, {&(0x7f0000000600)="8b7962939576a4f68d7889ebdd60f99daf2528de09a216b29d01876c3e80f4262e9087b92f3aa6c48d459c4a7efde1e3209ee9e1cf58be2abcf24d1b36c6d9e5e2b86b0630f107ef", 0x48}], 0x2) bind$qrtr(r3, &(0x7f00000006c0)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000700), &(0x7f0000000740)=0x4) recvmsg(r3, &(0x7f0000001d80)={&(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/231, 0xe7}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/58, 0x3a}, {&(0x7f0000001a00)=""/240, 0xf0}, {&(0x7f0000001b00)=""/113, 0x71}, {&(0x7f0000001b80)=""/222, 0xde}], 0x7, &(0x7f0000001d00)=""/79, 0x4f}, 0x40000023) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001e00)={0x0, 0xc7, "cd6962b70035fd3978c455bd35cf9d8607521c9ba855bda8b4fb3b7b69a9b1977d22a52bb219caa09d4343ce5d61bcef2fc903af1c7adb31a46af89006dfc7b0c7fb7ed0039117e93dbc8552945f10a62dac83925be8e884580c96d224480009bd2a289ece21642eb14d53ab8985cc7590182535d42854e70719f82ad8017decdb4596972e0b2581e89934cf4df9beaad5761e891e0566ca2747dcb8d80ce0b5ee13dd7d8c7d1977fd9b5dd942bfe3a3187ba283e81a0b197252573c51b552b6baaca00c921292"}, &(0x7f0000001f00)=0xcf) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001f40)={r6, 0x679f3404, 0x80000001, 0x7}, 0x10) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000001f80)=[0xc, 0x1, 0x3, 0xaf]) syz_open_dev$sg(&(0x7f0000001fc0), 0x1, 0x1c1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = accept4$alg(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000002000), 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000002040)={r6, 0xfffa, 0x1, [0xc]}, &(0x7f0000002080)=0xa) statx(r3, &(0x7f00000020c0)='./file0\x00', 0x1000, 0x1, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000022c0), &(0x7f0000002300)=0x0, &(0x7f0000002340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000004e00)={0x680, 0xffffffffffffffda, 0x0, [{{0x4, 0x2, 0x80000001, 0x80, 0x4, 0x3, {0x3, 0x5, 0x2, 0xffffffffffff0000, 0x4, 0x2, 0x6, 0x7, 0x819, 0xc000, 0x7, r8, 0xee00, 0x10000}}, {0x2, 0x95e5, 0xa, 0x3, '/dev/fuse\x00'}}, {{0x4, 0x0, 0x0, 0xfffffffffffffff3, 0x21a12ece, 0x10000000, {0x2, 0x7, 0x1, 0x401, 0x7, 0xffffffffffffff02, 0x5, 0x80000000, 0x0, 0x4000, 0x2, r9, 0xffffffffffffffff, 0x1ff, 0x401}}, {0x5, 0x3, 0x3, 0xfffffffd, '}:-'}}, {{0x6, 0x2, 0x974, 0x3, 0x4, 0x80000000, {0x4, 0x1, 0x5, 0x8001, 0x75cc, 0xff, 0x3, 0x5, 0xfffffff7, 0x2000, 0x2, 0xee00, r10, 0x0, 0x2}}, {0x2, 0x0, 0x3, 0x80000001, '&^!'}}, {{0x2, 0x2, 0x5, 0x1fd, 0xff, 0x8000, {0x1, 0x5, 0x1, 0x7, 0x80, 0x9daa, 0x1, 0x7, 0x2, 0x8000, 0x3, 0x0, r11, 0x200, 0x1b8000}}, {0x5, 0x1ff, 0xa, 0x8, '/dev/fuse\x00'}}, {{0x3, 0x3, 0x0, 0x3, 0x7, 0x9, {0x2, 0x7, 0x9, 0x9, 0x8d0, 0x401, 0xf2, 0xffffffff, 0x7, 0x2000, 0xffff58f5, 0x0, 0x0, 0xb, 0x1}}, {0x4, 0x0, 0xd, 0x1, '0000:00:10.0\x00'}}, {{0x3, 0x5, 0x2, 0x7, 0x3, 0x1, {0x2, 0x8, 0x7f, 0x421, 0x1, 0x8, 0x8000, 0x2, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0xa2ba, 0x6}}, {0x2, 0x296, 0xa, 0x0, '/dev/fuse\x00'}}, {{0x2, 0x1, 0x8, 0x0, 0x9, 0xffffff00, {0x3, 0xe196, 0x9, 0xf, 0x1000, 0x10000000000000, 0xc0000000, 0x5, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x7d57, 0x3}}, {0x3, 0x5, 0x4, 0x8, 'pci\x00'}}, {{0x5, 0x0, 0x7fff, 0x9, 0x1, 0x3, {0x3, 0x4, 0x0, 0x5, 0x10001, 0x3d, 0x9, 0x3, 0x6, 0x0, 0x80, 0x0, 0x0, 0x5, 0xf996}}, {0x3, 0x5, 0x9, 0x200, '/dev/sg#\x00'}}, {{0x5, 0x3, 0x2, 0x9, 0x0, 0x9, {0x2, 0xffffffffffffffff, 0x5, 0xffffffffffffff31, 0x1, 0x5, 0xff, 0x8, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x4, 0x101}}, {0x5, 0x2, 0x9, 0x7, '\'-+[^},*+'}}, {{0x3, 0x2, 0x76e, 0xbf7, 0xa2d, 0x1000, {0x3, 0x8, 0xffffffff, 0x5, 0x5, 0xd, 0x4, 0x1, 0x4, 0x0, 0x40, 0x0, 0x0, 0x477, 0xd7}}, {0x1, 0x7ff, 0x3, 0x6e1, '/,\''}}]}, 0x680) 222.793677ms ago: executing program 7 (id=5168): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x8094) 145.524117ms ago: executing program 7 (id=5169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff0500030003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xf001}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x1000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0xe2a9}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0xff81}, {0x8, 0xb, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xd}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6174}, {0x8, 0xb, 0x8001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x2}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 22.972481ms ago: executing program 7 (id=5170): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 0s ago: executing program 2 (id=5171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$inet6(r1, 0x0, &(0x7f0000000580), 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) sendto$inet6(r1, &(0x7f0000000900)="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", 0x5d1, 0x8040, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)={0x2f, 0x4, '\x00', [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x4a344cdac0070770, 0x4, 0x3, 0x61, [0x400, 0x7fffffffffffffff]}}]}, 0x30) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000180)={"582a44d7d3849d82c59bef4b7b2e441553ca264f904fc7fb30e0fa87c489ddf274248ba9b13e02b482dc2ad358a4472f71a0a9397eaef16acb182678e0f2bf8c785c3251574e56109cbb4116403490b8c7d6be35a9361a99aa7bcc3e30339d3a06b255c60eab997b830f4cc1bf7eab5d566be1e1cf24082ac8e8d67b3371c80b23ddc8059418e4422b60e1ba7e495606d823640a10a1b6f29770c5f17a77cf8c62a9a75546bc54d45b8145901210daede45b9e8e8983501be6ac5b1c11e2ad5ba1717eb1f90b2733390931890a0a9bcf5236500df9efa1f0dffcf6c447bec19c2a18c8a84150e15eabc086481711351670489b5d6e02abd0f68b14049a4e019dab975ca0dbeb242f737115d709a6e977639fdf821dc55600051072674754004780b2f207dbf36cf5b5171da6d04ee32362e8e6d696233dd8ede2dbe77f2fc2ec0b7efc89c3e7f5d9b96315a29684778d3c2953b43651f195683299c9d429efb38cd6a67fe7349eb77dc347948d3bf06dcf16eeae0cb5437b35c59cb7aee88575b875b802197b30bd94e79ff69b8c2703cc9bf2f8d0046f2953015909cfdde4306365832dc14549c494dcf4baba2febaf142a8c3d2c5f8e2cf08638fd5f5c19253d422948681f29aa21dc7999caf9b001f9faba739dfd71421966d281ebbab0950c763586e123d9d74d57f9f8f414ef540097b27ad5adf88deaf30288ae9d236b7f84854366ddf8b7e1a1fe658477a7517f05818a7231639219e9b8d1f7ae63b5e071761196b4d69c38f2bedcb068d64202a05f76e19c214e8122bf276d2af600fecce0e74981c0c9ecc0c72e88dadd2e5731812c92d767bb8fc053786667a4d0b781012738d3d4b631577e15f7193f427eb32537cfaf30ce98784b0b1d6a2e65925ac0a0ed0f6ac6586098f55cf618f61561af36b00ae5fcd6ba5f80e95b18a05fffed494727140be494189a3d5f96ab07229b2c63dcdef43f601b24ee586af16169f19be9c6da123b3d47f77c0bba6f901e23f96c704af192f858ad0b9204d4dfc2ff4f8b823f9ca2fa2150cb42c088b871814628981670481348746fc4a152fea7ecf8372a82530e30831598888a08c61d130fc6b6f8df643dbe104832d349c2feb67a969a659c9b4a73c3dc927db6ec307f6f0138a5b6982fb6059b7204005bcb48a1c6c3fbcd0f076ad639a34167489a2a4feaf451b75401c4617d8a7888c5b3d25d18b707db2da4985d1f4fdf076f97031eed8fd3d9c7a3bfc569f860bff570ba012a3ca4e5e5b61e1b5a018d904d783156c42be758a8334818241fe2237512eb721ea6e39f60eb5df60461e955c9b3b3249b38bd7d3e7d5eecc42c122382ada1836101935bb886f5a860dec639085018fe502d4210d7d8f5f5e0018072e549213c749d2eded832eef4393295d070d1bbd053fbab939dfc03f12eb07224"}) sendto$inet6(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000f00)={0x0, &(0x7f00000005c0)=[@uexit={0x0, 0x18, 0xfffffffffffffffb}, @rdmsr={0x66, 0x18, {0x234}}, @in_dx={0x69, 0x20, {0x2fb9, 0x4}}, @set_irq_handler={0xc8, 0x20, {0xb2, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x6a, 0x2, 0x5, 0x3}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x100000001}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest16=0x808, 0x0, 0x9, 0x7}}, @wrmsr={0x65, 0x20, {0x2fd, 0x5}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x481e, 0x5, 0x885, 0x558}}, @cpuid={0x64, 0x18, {0x3, 0x6e9}}, @nested_vmresume={0x130, 0x18, 0x2}, @code={0xa, 0x5a, {"f341e10a410f0726420f013d00100000f23e36f26747f53e7c0036470f00983e6000000fc7790064660fc7773a48b868ffffffffffffff0f23d80f21f835400000500f23f8670f01c9"}}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @out_dx={0x6a, 0x28, {0x528a, 0x2, 0x689}}, @nested_amd_clgi={0x17f, 0x10}], 0x24a}) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000f40)={[0xfff, 0x1, 0xfffffffb, 0x6, 0x1ff, 0x3, 0x3, 0x8001, 0x8, 0x4, 0x100, 0x6, 0x8, 0x6, 0x1, 0x9, 0x8, 0x1, 0xfff, 0x1, 0x3, 0xdca, 0x3, 0x8, 0x0, 0x200, 0x99, 0x7, 0x4, 0x80, 0xffffff43, 0x5, 0x8, 0xa, 0x16e7ffaa, 0x6, 0xc27b, 0xdf9, 0x6, 0xffffffff, 0x8000, 0x7ff, 0x200, 0xf6b, 0x0, 0x4, 0x7, 0x7, 0x23, 0x2, 0xfffffffe, 0x200, 0xd, 0xffff0001, 0x8000, 0x6, 0x2, 0x6, 0x1, 0x8, 0x40000000, 0x3, 0x4, 0x1fe00000, 0x40000000, 0x200, 0xd56, 0x400, 0x2, 0x4, 0x0, 0xc, 0x8, 0xc, 0x7, 0x3, 0x3, 0x1, 0x101, 0x5, 0x50, 0x2, 0x3, 0x5, 0x9, 0x4, 0x24af, 0x20000, 0xc86, 0x7, 0x52e, 0x0, 0x4, 0x9, 0x1, 0x8, 0x2, 0x5, 0x400, 0x0, 0x6, 0x5, 0x6, 0x0, 0x8, 0x7, 0x140000, 0xffffffff, 0x4, 0xa6, 0x5, 0x3, 0x8, 0xc, 0x3, 0xfffffef1, 0x5, 0x7, 0x3, 0xc, 0xa, 0x8, 0x7, 0x2, 0x80, 0x4, 0x400, 0xc, 0xfff, 0x2, 0x1, 0x3, 0xf, 0x5, 0x2, 0x1, 0x3, 0x1, 0xfffffff7, 0x3, 0x8, 0x401, 0xffff0000, 0xd, 0x7fff, 0x2, 0x1, 0xff, 0x1ac1, 0x4, 0x3, 0x1, 0x3, 0xfffffff5, 0x101, 0x8, 0x7, 0x7fff, 0x5e95, 0x40, 0x3, 0x100, 0x2, 0xc1, 0x10000, 0x4, 0x9, 0x80, 0x2, 0xe, 0x8, 0x1c00, 0x9, 0x1, 0x0, 0x0, 0x5, 0xffffc502, 0x80000000, 0xfff, 0xffff, 0x9, 0x0, 0xf, 0x80000000, 0x1, 0x8, 0x6, 0x6, 0xb82, 0x412b, 0x4, 0xc, 0x1, 0x3, 0x6, 0x4, 0x80000001, 0x8000, 0x5, 0x1, 0x9, 0x7f, 0x6, 0x8, 0x10, 0x5, 0x4, 0x5, 0x0, 0x563e3ab, 0x3, 0xce8c, 0xac7, 0xef, 0x993, 0x7, 0x3, 0x5, 0x0, 0x9, 0x4c28, 0x1, 0x80000001, 0x2, 0x0, 0xa5, 0x1ff, 0x7d, 0x0, 0x9, 0x6c09e516, 0x80000000, 0x2e, 0x10, 0x3, 0x0, 0x8, 0x8, 0x81, 0x4, 0x3, 0xd, 0x800, 0x3, 0xffff, 0x0, 0xff, 0x54, 0x6, 0x1, 0xb9c, 0x6, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x1, 0x9, 0x0, 0xb73, 0x80000000, 0x0, 0x6, 0xd454, 0x9, 0xa00, 0x1, 0xffffff01, 0x7c, 0xf, 0x1, 0x6, 0x10000, 0x32, 0x1, 0xb0, 0x2, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x7fffffff, 0x80, 0x3, 0x53, 0x40, 0x3, 0xe, 0x0, 0x3ff, 0x7, 0x7, 0x7302, 0x5, 0x5, 0x56a, 0xa, 0x6, 0x4, 0x2, 0x9, 0x3416, 0x3, 0x101, 0x9, 0x1, 0x4, 0x156a3bf8, 0x9, 0x8, 0x6, 0x2, 0x3, 0x6284c388, 0x7fff, 0x0, 0xffff, 0x8, 0x5, 0x0, 0x0, 0x53, 0x0, 0x7fffffff, 0x5, 0x6, 0xfffffff7, 0x0, 0x1, 0x1, 0x1, 0x9, 0x3, 0x81, 0x9, 0x1, 0x8, 0x3, 0x46, 0xd, 0xfffffffc, 0x7ff, 0x6c, 0x8001, 0x3, 0xcb, 0x8b, 0xe, 0x7, 0x7fff, 0xfffffffd, 0x0, 0x3c4, 0xf4, 0x4, 0xffffffff, 0x5, 0x5, 0x7, 0x6, 0xd99, 0x242, 0x0, 0x1ff, 0x4, 0x9, 0x10, 0x0, 0x7, 0xd8a, 0xf1, 0x2, 0x1fc00, 0x7, 0x6, 0x9, 0x1, 0x100, 0x29, 0x18a, 0x10, 0x3, 0x4, 0x8, 0xfffffffa, 0x4, 0x6d5, 0x8, 0x8, 0x200, 0xfffff489, 0xb, 0x5, 0x14, 0x635, 0x9a, 0x200, 0x3, 0xffff, 0x6, 0xee8, 0x0, 0x8, 0x800, 0xff, 0x3ff, 0x6, 0x0, 0x5, 0x80, 0x7, 0xfc5, 0x7fffffff, 0x8, 0xe1, 0x6, 0x1, 0x2, 0xb361, 0xa, 0x8e, 0xfff, 0x2, 0x0, 0x6, 0x3, 0x2, 0x6, 0xe3c, 0x5, 0xfffffff8, 0x77c, 0x692a8955, 0x9, 0x81, 0x7, 0x1, 0x9, 0x1000000, 0x8000, 0xfffffffe, 0x5, 0x1, 0x8, 0x9, 0x0, 0xfffff17a, 0x3, 0x3, 0x0, 0xb67f2bb, 0x7, 0x0, 0x75eb, 0x0, 0x3, 0xfffffff7, 0x6, 0x0, 0x9, 0x5, 0x3ff, 0x8001, 0x200000, 0x4, 0x3, 0x39c1, 0x9, 0x8, 0x1ff, 0xfffffff8, 0x1000, 0x12, 0x4, 0x80000001, 0x68e, 0x3, 0x5, 0x7, 0x2, 0x101, 0x1, 0x9, 0x800, 0x6, 0x1, 0x4, 0x200, 0x10001, 0x40, 0x7, 0x4, 0x2, 0x7f, 0x7, 0x6, 0x9, 0x0, 0xab16, 0x1, 0x6, 0x9, 0x5, 0xffffffff, 0xfffffffa, 0x37, 0x8, 0x400, 0xb32, 0x28de, 0x4, 0x81, 0xc1d, 0x7f, 0xe5de, 0x7, 0x5, 0xfffffff8, 0x80, 0xfffffffe, 0x3, 0x100, 0x6, 0x528, 0x5cd, 0x8, 0x291, 0x7fffffff, 0x1, 0x7bf00d8d, 0x481, 0x9, 0x3, 0x2, 0x8, 0x2, 0x3, 0x3ff, 0x1ff, 0xb, 0x7ff, 0xf0ad, 0x8, 0xfffffffb, 0xb874, 0x7, 0x101, 0xfffffff0, 0x80000000, 0x3, 0x80, 0x0, 0x1, 0x7, 0x5, 0x0, 0xfffffff7, 0x81, 0x5, 0x8, 0x4, 0x4, 0x800, 0x0, 0x6, 0x8000, 0x0, 0x2, 0xee, 0x3, 0x1, 0x4, 0xf3, 0x10001, 0x3, 0x33062cdb, 0x8, 0x80, 0x4, 0x4, 0x7a, 0xfffffc01, 0x0, 0xb598, 0x2, 0x0, 0x7, 0x4, 0xe, 0x401, 0x1, 0xd28, 0x5, 0x7, 0xd, 0x80, 0x6, 0x2, 0x14, 0x39, 0x1, 0x95, 0x2400000, 0x7, 0x4, 0x9, 0x2, 0x8, 0x7fff, 0xbd, 0x8000, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x5, 0x1, 0x6, 0x1000, 0x9, 0x8, 0x1, 0xfffeffff, 0x2, 0x7, 0x0, 0x92, 0x7ca8bd2c, 0x80000001, 0xc01, 0x6, 0x10001, 0x2, 0xff, 0xfffffff8, 0x6, 0x7, 0x8, 0x7, 0xf, 0x9, 0x5, 0xd602, 0x1, 0x3893, 0xffff0001, 0x4e3692aa, 0x9, 0x6, 0x0, 0xfffffffc, 0x7, 0x8, 0x9, 0x11a222fd, 0x5, 0x4, 0xe, 0x3, 0x1000, 0x8, 0x6, 0x5081223f, 0x1, 0x1, 0x6, 0x0, 0xa05b, 0x43, 0x3, 0xfffffffc, 0x7fffffff, 0x4, 0x5, 0x7, 0x81, 0x1, 0x5, 0x10000, 0x7, 0x8, 0x8, 0x5, 0x10000, 0x4, 0x5, 0x80000000, 0x0, 0x401, 0x7, 0x9, 0x5, 0xe402, 0x8, 0x9, 0xffffffff, 0xa2, 0xd, 0x8, 0x8, 0x7, 0xe, 0xe0b, 0x8, 0x8, 0x7fffffff, 0x5, 0x7, 0x1, 0x5d3, 0x8, 0x1, 0xdf, 0xf3c1, 0xa96, 0x0, 0x0, 0x5, 0x10000, 0x8, 0x4, 0x13, 0x5, 0x1a, 0x6, 0xffffff81, 0xb, 0x2, 0x7af5, 0x5, 0x1, 0x101, 0x3, 0xffffffff, 0xb, 0xd, 0x1ff, 0x7, 0x10001, 0x100, 0xff, 0xc6, 0x5, 0xd9, 0x81, 0x194c31dd, 0x7fffffff, 0x7, 0x200, 0x80, 0x9, 0x7, 0x2, 0x400, 0x4, 0x9, 0x1000, 0x7, 0x1, 0x3, 0x2, 0x7, 0x2, 0x1, 0x2, 0x5, 0x735, 0x10001, 0xadc4, 0x0, 0x8, 0x72, 0x6, 0x1, 0x7, 0x1, 0x4, 0x2, 0x0, 0x8, 0x6, 0x7, 0x1, 0x0, 0x4, 0x7, 0x0, 0x6, 0x80000001, 0x56f, 0xefd, 0x5, 0x9, 0x8000, 0x5, 0x4, 0x9, 0x2040000, 0x9, 0x1000, 0x7ff, 0x2, 0x9, 0x1, 0x1, 0x80, 0xd, 0x7, 0x101, 0x3, 0x81, 0x8, 0xfffffffd, 0x9da, 0x1ff, 0x6a, 0x7, 0x0, 0x9, 0x9, 0x7fff, 0x4, 0x0, 0x0, 0x6, 0x9, 0x3, 0x19805e4c, 0x1cfd, 0x317, 0x4, 0x1, 0x2, 0x7, 0x4, 0xd, 0x0, 0x8, 0x81, 0x10000, 0xfff, 0x0, 0x172e, 0x8, 0x8, 0xdea06f4, 0xf7f, 0x8, 0x1fb26d6d, 0x1, 0x9, 0x4, 0xffffff05, 0x1000, 0x0, 0x5, 0x7, 0x2, 0xfffffffe, 0x71, 0x9, 0x4, 0xf, 0x326, 0x5, 0x10, 0x100, 0x5, 0xf, 0x0, 0x3, 0x4, 0x8000, 0x5, 0x6, 0x80, 0x8, 0x4, 0x6, 0x7, 0x7f, 0x6, 0x2, 0xc, 0x8, 0x0, 0x7, 0x7, 0x4, 0x1, 0x4, 0x10000, 0x3, 0x4e, 0x3ff, 0x5, 0x6e7, 0x40, 0xfff, 0x5000, 0xa6, 0x4, 0xff, 0xb2, 0x3, 0x2, 0x1, 0x6, 0x9, 0xa9a, 0x7, 0x4fbc3168, 0x7, 0x9, 0x40, 0xfff, 0xe4b3, 0x8, 0x2, 0x0, 0x9, 0x7fff, 0x40, 0xed42, 0x80ac, 0x6, 0x80, 0x1000, 0x32, 0x81, 0x1, 0x7, 0x6, 0x3, 0x40, 0x2, 0x8, 0x7f01, 0xffffff91, 0xe, 0x6, 0x3, 0xffffff7f, 0x1, 0xc, 0x7, 0x4, 0x9, 0x8, 0x5, 0x8, 0x6, 0x7d0dc567, 0x2, 0x4, 0x4, 0x8, 0x30, 0x1c0000, 0x4, 0xe8d, 0x81, 0x6, 0x7, 0xc29, 0x1, 0x1, 0x10001, 0x1, 0x9, 0x8, 0x800, 0x2, 0x9, 0x6, 0x9, 0xfffffffa, 0xfffffff9, 0x5, 0x9, 0x7fffffff, 0x6, 0x19c, 0x7, 0x0, 0xb, 0x0, 0xb, 0xc5, 0x8, 0x0, 0x6, 0x81, 0x7f, 0x4b, 0xcc3, 0x5, 0x791f00, 0x4, 0x9, 0x3, 0x0, 0x3, 0x4, 0x7, 0x8, 0x8, 0x2, 0x2, 0x5, 0x1, 0x8, 0xa990, 0x2, 0x229, 0x0, 0x7f, 0x5, 0x9]}) kernel console output (not intermixed with test programs): 2.379816][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1112.392607][ T24] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1112.401044][ T24] usb 8-1: config 0 has no interface number 0 [ 1112.407189][ T24] usb 8-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1112.422830][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1112.432569][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.440661][ T24] usb 8-1: Product: syz [ 1112.445295][ T24] usb 8-1: Manufacturer: syz [ 1112.449908][ T24] usb 8-1: SerialNumber: syz [ 1112.454885][T31248] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1112.465295][ T24] usb 8-1: config 0 descriptor?? [ 1112.474692][ T24] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1112.485666][ T24] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 1112.600787][T31248] usb 2-1: device descriptor read/64, error -71 [ 1112.678393][T17034] usb 8-1: USB disconnect, device number 15 [ 1112.840835][T31248] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1112.971005][T31248] usb 2-1: device descriptor read/64, error -71 [ 1113.010974][ T1541] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1113.081185][T31248] usb usb2-port1: attempt power cycle [ 1113.172368][ T1541] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1113.180784][ T1541] usb 3-1: config 0 has no interface number 0 [ 1113.189086][ T1541] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1113.198318][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.206849][ T1541] usb 3-1: Product: syz [ 1113.215069][ T1541] usb 3-1: Manufacturer: syz [ 1113.215985][ T24] usb 5-1: USB disconnect, device number 118 [ 1113.229922][ T1541] usb 3-1: SerialNumber: syz [ 1113.254566][ T1541] usb 3-1: config 0 descriptor?? [ 1113.358624][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1113.368759][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1113.392149][T13102] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.392256][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1113.404353][T13102] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.420315][T13102] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.426197][T31248] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1113.437559][T13102] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.465964][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1113.495041][T31248] usb 2-1: device descriptor read/8, error -71 [ 1113.588046][T32569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4750'. [ 1113.613643][T32572] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4751'. [ 1113.751786][T31248] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1113.771867][T31248] usb 2-1: device descriptor read/8, error -71 [ 1113.861043][ T24] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1113.881168][T31248] usb usb2-port1: unable to enumerate USB device [ 1114.005725][ T1541] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1114.013577][ T24] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1114.027454][ T1541] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1114.029911][ T24] usb 8-1: config 0 has no interface number 0 [ 1114.045422][ T24] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1114.056201][ T24] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1114.059664][ T1541] asix 3-1:0.251: probe with driver asix failed with error -5 [ 1114.065951][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.081017][ T1541] usb 3-1: USB disconnect, device number 41 [ 1114.082918][ T24] usb 8-1: Product: syz [ 1114.092481][ T24] usb 8-1: Manufacturer: syz [ 1114.097211][ T24] usb 8-1: SerialNumber: syz [ 1114.115002][ T24] usb 8-1: config 0 descriptor?? [ 1114.450963][T31248] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1114.602408][T31248] usb 5-1: Using ep0 maxpacket: 32 [ 1114.609501][T31248] usb 5-1: config 0 has no interfaces? [ 1114.617647][T31248] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1114.627381][T31248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.641026][T31248] usb 5-1: config 0 descriptor?? [ 1114.851180][T32604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.864993][T32604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.879010][T32604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.892956][T32604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.904392][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1114.904406][ T29] audit: type=1326 audit(1774706003.000:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32603 comm="syz.4.4755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x0 [ 1114.941803][ T29] audit: type=1326 audit(1774706003.040:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32603 comm="syz.4.4755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f33ac79c799 code=0x0 [ 1114.950088][ T24] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1114.987390][ T29] audit: type=1326 audit(1774706003.080:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32603 comm="syz.4.4755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x0 [ 1115.303753][T32657] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 1115.303753][T32657] program syz.2.4762 not setting count and/or reply_len properly [ 1115.362659][T32660] program syz.2.4762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1115.807038][T32687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.900580][T32688] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1116.095849][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.103784][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.440808][T31248] usb 5-1: USB disconnect, device number 119 [ 1116.629137][ T24] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1116.679961][ T24] usb 8-1: USB disconnect, device number 16 [ 1116.988908][T32737] loop2: detected capacity change from 0 to 7 [ 1116.996912][ T29] audit: type=1326 audit(1774706005.080:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.019987][ T29] audit: type=1326 audit(1774706005.080:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.023090][T17990] loop2: [ 1117.043889][ T29] audit: type=1326 audit(1774706005.080:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.060989][T17990] loop2: partition table partially beyond EOD, truncated [ 1117.080749][ T29] audit: type=1326 audit(1774706005.080:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.119458][ T29] audit: type=1326 audit(1774706005.080:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.154929][ T29] audit: type=1326 audit(1774706005.080:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.155617][T32737] loop2: [ 1117.189600][ T29] audit: type=1326 audit(1774706005.080:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32733 comm="syz.1.4776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1117.202089][T31248] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1117.239411][T32737] loop2: partition table partially beyond EOD, truncated [ 1117.403031][T31248] usb 5-1: config 0 has no interfaces? [ 1117.410516][T31248] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1117.421565][T31248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.430791][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1117.450869][T31248] usb 5-1: Product: syz [ 1117.455085][T31248] usb 5-1: Manufacturer: syz [ 1117.459693][T31248] usb 5-1: SerialNumber: syz [ 1117.484271][T31248] usb 5-1: config 0 descriptor?? [ 1117.580776][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1117.588041][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1117.597011][ T24] usb 3-1: config 8 has an invalid interface number: 12 but max is 1 [ 1117.605987][ T24] usb 3-1: config 8 has an invalid interface number: 254 but max is 1 [ 1117.620778][ T24] usb 3-1: config 8 has no interface number 0 [ 1117.626877][ T24] usb 3-1: config 8 has no interface number 1 [ 1117.640797][ T24] usb 3-1: config 8 interface 12 has no altsetting 0 [ 1117.647515][ T24] usb 3-1: config 8 interface 254 has no altsetting 0 [ 1117.663096][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5 [ 1117.672628][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.680631][ T24] usb 3-1: Product: syz [ 1117.685282][ T24] usb 3-1: Manufacturer: syz [ 1117.689892][ T24] usb 3-1: SerialNumber: syz [ 1120.922973][ T24] peak_usb 3-1:8.12 can0: unable to request usb[type=0 value=1] err=-71 [ 1120.940146][ T24] peak_usb 3-1:8.12: unable to read PCAN-Chip USB firmware info (err -71) [ 1121.141535][ T24] peak_usb 3-1:8.12: probe with driver peak_usb failed with error -71 [ 1121.202473][ T24] usb 3-1: USB disconnect, device number 42 [ 1121.477369][ T361] syzkaller0: entered promiscuous mode [ 1121.485392][ T361] syzkaller0: entered allmulticast mode [ 1121.535455][T31250] usb 5-1: USB disconnect, device number 120 [ 1121.640842][T31248] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1121.706737][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1121.706749][ T29] audit: type=1326 audit(1774706009.800:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.742672][ T29] audit: type=1326 audit(1774706009.840:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.767300][ T393] loop2: detected capacity change from 0 to 7 [ 1121.767342][ T29] audit: type=1326 audit(1774706009.840:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.860969][ T29] audit: type=1326 audit(1774706009.840:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.884338][ T29] audit: type=1326 audit(1774706009.840:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.910101][ T29] audit: type=1326 audit(1774706009.860:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.926605][ T393] loop2: [ 1121.936494][ T29] audit: type=1326 audit(1774706009.860:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1121.941717][ T393] loop2: partition table partially beyond EOD, [ 1121.970030][ T29] audit: type=1326 audit(1774706009.860:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1122.010463][ T29] audit: type=1326 audit(1774706009.860:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1122.034907][ T393] truncated [ 1122.069555][T31248] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1122.098031][T31248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.117286][ T29] audit: type=1326 audit(1774706009.860:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=392 comm="syz.1.4788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1122.139856][T31248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.206992][T31248] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1122.244309][T31248] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1122.273600][T31248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.351336][T31248] usb 8-1: config 0 descriptor?? [ 1122.391006][T31250] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1122.572312][T31250] usb 5-1: Using ep0 maxpacket: 16 [ 1122.601780][T31250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.613321][T31250] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1122.624170][T31250] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1122.635792][T31250] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 61 [ 1122.646483][T31250] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1122.664405][T31250] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.673719][T31250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1122.691612][T31250] usb 5-1: SerialNumber: syz [ 1122.705243][ T401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1122.717762][ T401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1122.770113][ T425] syzkaller0: entered promiscuous mode [ 1122.775827][ T425] syzkaller0: entered allmulticast mode [ 1122.788447][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.799246][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.807343][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.816646][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.834903][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.842701][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.852785][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.871580][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.879216][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.887593][T31248] plantronics 0003:047F:FFFF.005C: unknown main item tag 0x0 [ 1122.908459][T31248] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1123.204441][ T365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1123.711057][T17034] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1123.872693][T17034] usb 3-1: config 0 has no interfaces? [ 1123.883323][T17034] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1123.896016][T17034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.904553][T17034] usb 3-1: Product: syz [ 1123.908849][T17034] usb 3-1: Manufacturer: syz [ 1123.927306][T17034] usb 3-1: SerialNumber: syz [ 1123.945590][T17034] usb 3-1: config 0 descriptor?? [ 1124.170901][T31248] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 1124.313480][ T449] veth1_vlan: left promiscuous mode [ 1124.334206][T17034] usb 3-1: USB disconnect, device number 43 [ 1124.962392][T31248] usb 8-1: device descriptor read/64, error -71 [ 1125.207258][ T1000] tipc: Disabling bearer [ 1125.223452][T31250] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1125.229927][T31248] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 1125.300785][T31250] usb 5-1: USB disconnect, device number 121 [ 1125.538005][T31248] usb 8-1: device firmware changed [ 1125.549911][T17029] usb 8-1: USB disconnect, device number 17 [ 1125.597745][ T546] loop2: detected capacity change from 0 to 7 [ 1125.630624][ T546] loop2: [ 1125.652763][ T546] loop2: partition table partially beyond EOD, truncated [ 1125.730929][T17029] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1125.848662][ T572] syzkaller0: entered promiscuous mode [ 1125.854961][ T572] syzkaller0: entered allmulticast mode [ 1125.868928][ T572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1125.922529][T17029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.952159][T17029] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.990765][T17029] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1126.000446][T17029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.065117][T17029] usb 8-1: config 0 descriptor?? [ 1126.489438][T17029] usbhid 8-1:0.0: can't add hid device: -71 [ 1126.513192][T17029] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1126.586031][T17029] usb 8-1: USB disconnect, device number 18 [ 1126.970964][T31250] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1127.029944][ T644] netlink: 'syz.2.4812': attribute type 1 has an invalid length. [ 1127.154326][T31248] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1127.169835][T31250] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.220971][T31250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.282819][T31250] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1127.313060][T31250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.328562][T31250] usb 5-1: Product: syz [ 1127.340762][T31250] usb 5-1: Manufacturer: syz [ 1127.378333][T31250] usb 5-1: SerialNumber: syz [ 1127.488959][T31248] usb 8-1: config 0 has no interfaces? [ 1127.514653][T31248] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1127.534812][T31248] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.552651][T31248] usb 8-1: Product: syz [ 1127.559910][ T644] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4812'. [ 1127.561462][ T656] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1127.570052][T31248] usb 8-1: Manufacturer: syz [ 1127.588091][T31248] usb 8-1: SerialNumber: syz [ 1127.628422][ T656] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1127.636569][T31248] usb 8-1: config 0 descriptor?? [ 1127.772665][ T713] loop2: detected capacity change from 0 to 7 [ 1127.779572][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1127.779609][ T29] audit: type=1326 audit(1774706015.860:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1127.821522][ T713] loop2: [ 1127.826671][ T713] loop2: partition table partially beyond EOD, truncated [ 1127.851867][ T705] veth3: entered promiscuous mode [ 1127.893389][ T29] audit: type=1326 audit(1774706015.860:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1127.988198][ T29] audit: type=1326 audit(1774706015.860:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.028237][ T29] audit: type=1326 audit(1774706015.870:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.067098][ T622] veth1_vlan: left promiscuous mode [ 1128.072873][ T29] audit: type=1326 audit(1774706015.870:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.130303][T31248] usb 8-1: USB disconnect, device number 19 [ 1128.185678][ T29] audit: type=1326 audit(1774706015.870:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.234820][ T29] audit: type=1326 audit(1774706015.870:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.324946][ T29] audit: type=1326 audit(1774706015.870:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.372420][ T29] audit: type=1326 audit(1774706015.870:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.424459][ T29] audit: type=1326 audit(1774706015.870:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=712 comm="syz.6.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1128.562832][T31250] cdc_ncm 5-1:1.0: bind() failure [ 1128.571470][T31250] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1128.578794][T31250] cdc_ncm 5-1:1.1: bind() failure [ 1128.778072][ T1541] usb 5-1: USB disconnect, device number 122 [ 1128.821554][ T754] loop5: detected capacity change from 0 to 7 [ 1128.852761][ T754] Dev loop5: unable to read RDB block 7 [ 1128.858730][ T754] loop5: AHDI p1 p2 p3 [ 1128.880435][ T754] loop5: partition table partially beyond EOD, truncated [ 1128.915632][ T754] loop5: p1 start 926365495 is beyond EOD, truncated [ 1129.004094][ T754] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1129.308040][ T800] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1129.314598][ T800] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1129.341779][ T800] vhci_hcd vhci_hcd.0: Device attached [ 1129.388232][ T801] vhci_hcd: connection closed [ 1129.388493][T13100] vhci_hcd vhci_hcd.1: stop threads [ 1129.399250][T13100] vhci_hcd vhci_hcd.1: release socket [ 1129.476068][T13100] vhci_hcd vhci_hcd.1: disconnect device [ 1129.532159][T31248] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1129.671275][T31250] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1129.827586][T31250] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1129.843920][T31250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.200839][T17034] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1130.579569][T31250] usb 5-1: Product: syz [ 1130.584054][T31250] usb 5-1: Manufacturer: syz [ 1130.588662][T31250] usb 5-1: SerialNumber: syz [ 1130.603725][T31250] usb 5-1: config 0 descriptor?? [ 1130.617752][T31250] hub 5-1:0.0: bad descriptor, ignoring hub [ 1130.688718][ T830] netlink: 'syz.2.4825': attribute type 61 has an invalid length. [ 1130.688883][T31250] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1130.724297][T17034] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1130.731975][T31250] usbsevseg 5-1:0.0: USB 7 Segment device now attached [ 1130.740831][ T830] netlink: 'syz.2.4825': attribute type 62 has an invalid length. [ 1130.758457][T17034] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1130.816723][T17034] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1130.842160][T17034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.870809][T17034] usb 2-1: Product: syz [ 1130.880842][T17034] usb 2-1: Manufacturer: syz [ 1130.906764][T17034] usb 2-1: SerialNumber: syz [ 1130.941428][T17034] usb 2-1: config 0 descriptor?? [ 1130.947471][ T822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1131.150949][ T822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1131.184378][ T845] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 1131.364379][ T822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1131.375906][ T822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1131.563500][ T853] loop5: detected capacity change from 0 to 7 [ 1131.752524][ T853] Dev loop5: unable to read RDB block 7 [ 1131.769298][ T853] loop5: AHDI p1 p2 p3 [ 1131.775409][ T853] loop5: partition table partially beyond EOD, truncated [ 1131.783491][ T853] loop5: p1 start 926365495 is beyond EOD, truncated [ 1131.790287][ T853] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1132.053979][ T867] bond6: down delay (511) is not a multiple of miimon (8), value rounded to 504 ms [ 1132.073501][ T867] bond6: entered promiscuous mode [ 1132.078760][ T867] bond6: entered allmulticast mode [ 1132.096417][ T867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1132.104061][ T868] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1132.180789][T31248] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1132.209124][T17034] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1132.228841][T17034] dm9601 2-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:11:01:00:03 [ 1132.247130][T17034] usb 2-1: USB disconnect, device number 65 [ 1132.268121][T17034] dm9601 2-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 1132.341916][T31248] usb 3-1: Using ep0 maxpacket: 16 [ 1132.354243][T31248] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1132.382564][T31248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.412918][T31248] usb 3-1: Product: syz [ 1132.417523][T31248] usb 3-1: Manufacturer: syz [ 1132.422583][T31248] usb 3-1: SerialNumber: syz [ 1132.432250][T31248] usb 3-1: config 0 descriptor?? [ 1132.444525][T31248] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1132.533207][T17034] usb 5-1: USB disconnect, device number 123 [ 1132.539956][T17034] usbsevseg 5-1:0.0: USB 7 Segment now disconnected [ 1132.648853][ T965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.658606][ T965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.667590][T31248] usb 3-1: USB disconnect, device number 44 [ 1133.560844][T17034] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1133.641328][T31221] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1133.724976][T17034] usb 5-1: device descriptor read/64, error -71 [ 1133.790780][T31221] usb 2-1: device descriptor read/64, error -71 [ 1133.970854][T17034] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1134.040849][T31221] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1134.100816][T17034] usb 5-1: device descriptor read/64, error -71 [ 1134.133276][T31250] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1134.172550][T31221] usb 2-1: device descriptor read/64, error -71 [ 1134.211541][T17034] usb usb5-port1: attempt power cycle [ 1134.281418][T31221] usb usb2-port1: attempt power cycle [ 1134.310811][T31250] usb 8-1: Using ep0 maxpacket: 16 [ 1134.317875][T31250] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.328460][T31250] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1134.340945][T31250] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1134.350594][T31250] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1134.360407][T31250] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1134.375439][T31250] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1134.384567][T31250] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1134.390821][ T1541] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1134.392638][T31250] usb 8-1: Manufacturer: syz [ 1134.408499][T31250] usb 8-1: config 0 descriptor?? [ 1134.550795][T17034] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1134.558535][ T1541] usb 3-1: Using ep0 maxpacket: 8 [ 1134.565950][ T1541] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1134.574075][ T1541] usb 3-1: config 0 has no interface number 0 [ 1134.580172][ T1541] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1134.593271][ T1541] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1134.602539][T17034] usb 5-1: device descriptor read/8, error -71 [ 1134.608888][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1134.617122][ T1541] usb 3-1: Product: syz [ 1134.621984][T31221] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1134.634000][ T1541] usb 3-1: config 0 descriptor?? [ 1134.654726][ T1541] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 1134.665713][T31221] usb 2-1: device descriptor read/8, error -71 [ 1134.684281][T31250] rc_core: IR keymap rc-hauppauge not found [ 1134.690177][T31250] Registered IR keymap rc-empty [ 1134.697289][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.720985][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.742514][T31250] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1134.755583][T31250] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input93 [ 1134.771043][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.790876][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.811020][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.841148][T17034] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1134.841455][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.864736][ T1541] usb 3-1: USB disconnect, device number 45 [ 1134.870834][ C0] iowarrior 3-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 1134.871792][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.889945][T17034] usb 5-1: device descriptor read/8, error -71 [ 1134.900914][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.932070][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.940804][T31221] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1134.951455][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.962131][T31221] usb 2-1: device descriptor read/8, error -71 [ 1134.971046][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1134.991177][T31250] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1135.021877][T17034] usb usb5-port1: unable to enumerate USB device [ 1135.026275][T31250] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1135.057326][T31250] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1135.074261][T31221] usb usb2-port1: unable to enumerate USB device [ 1135.078886][T31250] usb 8-1: USB disconnect, device number 20 [ 1135.122720][ T1085] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4846'. [ 1135.362411][ T1541] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1135.520784][ T1541] usb 3-1: Using ep0 maxpacket: 8 [ 1135.527886][ T1541] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1135.537555][ T1541] usb 3-1: config 0 has no interface number 0 [ 1135.543949][ T1541] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.556100][ T1541] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1135.565497][ T1541] usb 3-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 1135.573719][ T1541] usb 3-1: Product: syz [ 1135.579788][ T1541] usb 3-1: config 0 descriptor?? [ 1135.596584][ T1541] iowarrior 3-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 1135.680477][ T1128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4850'. [ 1135.716003][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4850'. [ 1135.809194][T31243] usb 3-1: USB disconnect, device number 46 [ 1136.127863][ T1161] veth5: entered promiscuous mode [ 1136.355931][ T1184] tipc: Enabled bearer , priority 0 [ 1136.367523][ T1184] syzkaller0: entered promiscuous mode [ 1136.395677][ T1184] syzkaller0: entered allmulticast mode [ 1136.469314][ T1184] tipc: Resetting bearer [ 1136.476550][ T1178] tipc: Resetting bearer [ 1136.511297][ T1178] tipc: Disabling bearer [ 1136.993120][ T1209] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4860'. [ 1137.380833][T17034] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1137.582665][T17034] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 1137.601379][T17034] usb 3-1: config 0 has no interface number 0 [ 1137.623643][T17034] usb 3-1: config 0 interface 13 has no altsetting 0 [ 1137.645165][T17034] usb 3-1: Dual-Role OTG device on HNP port [ 1137.652853][T17034] usb 3-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice=1e.7a [ 1137.665729][T17034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.674505][T17034] usb 3-1: Product: syz [ 1137.679869][T17034] usb 3-1: Manufacturer: syz [ 1137.685132][T17034] usb 3-1: SerialNumber: syz [ 1137.696396][T17034] usb 3-1: config 0 descriptor?? [ 1137.965404][T17034] snd-usb-caiaq 3-1:0.13: can't set alt interface. [ 1137.976339][T17034] usb 3-1: unable to init card! (ret=-5) [ 1137.982431][T17034] snd-usb-caiaq 3-1:0.13: probe with driver snd-usb-caiaq failed with error -5 [ 1138.007494][T17034] usb 3-1: USB disconnect, device number 47 [ 1138.112940][ T1249] binder: 1248:1249 ioctl c0306201 2000000003c0 returned -14 [ 1138.371045][T17034] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1138.518255][ T1273] xt_bpf: check failed: parse error [ 1138.533470][T17034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.602815][T17034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.613106][T17034] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1138.660991][T17034] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1138.690642][T17034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.711802][T17034] usb 2-1: config 0 descriptor?? [ 1138.921166][T31250] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 1139.070459][T31221] hid_parser_main: 3 callbacks suppressed [ 1139.070500][T31221] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0 [ 1139.082861][T31250] usb 3-1: device descriptor read/64, error -71 [ 1139.103367][T31221] hid-generic 0000:0000:0000.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1139.134513][T17034] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1139.142831][ T1541] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1139.151240][T17034] plantronics 0003:047F:FFFF.005E: unknown main item tag 0x0 [ 1139.175430][T17034] plantronics 0003:047F:FFFF.005E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1139.314188][ T1541] usb 5-1: config 0 has no interfaces? [ 1139.320898][T31221] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1139.330631][ T1541] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1139.330766][T31250] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 1139.347275][ T1541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.347301][ T1541] usb 5-1: Product: syz [ 1139.360578][ T1541] usb 5-1: Manufacturer: syz [ 1139.365506][ T1541] usb 5-1: SerialNumber: syz [ 1139.373119][ T1541] usb 5-1: config 0 descriptor?? [ 1139.472292][T31221] usb 8-1: config 0 has no interfaces? [ 1139.478790][T31221] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1139.488020][T31221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1139.496132][T31221] usb 8-1: SerialNumber: syz [ 1139.501005][T31250] usb 3-1: device descriptor read/64, error -71 [ 1139.508601][T31221] usb 8-1: config 0 descriptor?? [ 1139.611438][T31250] usb usb3-port1: attempt power cycle [ 1139.619202][T31221] usb 5-1: USB disconnect, device number 2 [ 1139.943424][ T1541] usb 8-1: USB disconnect, device number 21 [ 1139.950828][T31250] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 1139.982483][T31250] usb 3-1: device descriptor read/8, error -71 [ 1140.239045][T31250] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 1140.281340][T31250] usb 3-1: device descriptor read/8, error -71 [ 1140.331952][ T1541] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1140.391366][T31250] usb usb3-port1: unable to enumerate USB device [ 1140.480871][T31221] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1140.490822][ T1541] usb 8-1: Using ep0 maxpacket: 8 [ 1140.499741][ T1541] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.513230][ T1541] usb 8-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1140.523202][ T1541] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.531421][ T1541] usb 8-1: Product: syz [ 1140.535659][ T1541] usb 8-1: Manufacturer: syz [ 1140.540244][ T1541] usb 8-1: SerialNumber: syz [ 1140.547676][ T1541] usb 8-1: config 0 descriptor?? [ 1140.557874][ T1541] usb 8-1: bad CDC descriptors [ 1140.563419][ T1541] usb 8-1: unsupported MDLM descriptors [ 1140.569460][ T1541] cdc_acm 8-1:0.0: Zero length descriptor references [ 1140.576590][ T1541] cdc_acm 8-1:0.0: probe with driver cdc_acm failed with error -22 [ 1140.610818][T31221] usb 5-1: device descriptor read/64, error -71 [ 1140.820146][ T1394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.821640][ T1394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.825374][ T1394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.826773][ T1394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.851011][T31221] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1140.913702][T31243] usb 8-1: USB disconnect, device number 22 [ 1140.980822][T31221] usb 5-1: device descriptor read/64, error -71 [ 1141.091093][T31221] usb usb5-port1: attempt power cycle [ 1141.153568][ T1410] kAFS: unable to lookup cell '' [ 1141.251772][T17034] usb 2-1: USB disconnect, device number 70 [ 1141.433082][T31221] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1141.462254][T31221] usb 5-1: device descriptor read/8, error -71 [ 1141.798901][T31221] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1141.861428][T31221] usb 5-1: device descriptor read/8, error -71 [ 1141.961401][T31248] hid-generic 0008:0081:0009.005F: reserved main item tag 0xd [ 1141.984323][T31221] usb usb5-port1: unable to enumerate USB device [ 1142.000926][T31248] hid-generic 0008:0081:0009.005F: item fetching failed at offset 28/32 [ 1142.013462][T31248] hid-generic 0008:0081:0009.005F: probe with driver hid-generic failed with error -22 [ 1142.633556][T31248] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1142.959860][T31248] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1142.981044][T31248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.997800][T31248] usb 8-1: config 0 descriptor?? [ 1143.031866][T31248] cp210x 8-1:0.0: cp210x converter detected [ 1143.297493][ T1512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4885'. [ 1143.310825][T31221] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1143.440856][T31221] usb 3-1: device descriptor read/64, error -71 [ 1143.591819][T31248] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1143.607103][T31248] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1143.680861][T31221] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1143.756766][ T1545] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4890'. [ 1143.821561][T31221] usb 3-1: device descriptor read/64, error -71 [ 1143.838655][ T1480] ip6gretap0: entered promiscuous mode [ 1143.844895][ T1480] macvtap1: entered promiscuous mode [ 1143.858816][ T1480] ip6gretap0: left promiscuous mode [ 1143.891094][T17035] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1143.941127][T31221] usb usb3-port1: attempt power cycle [ 1144.051686][T17035] usb 2-1: Using ep0 maxpacket: 32 [ 1144.058426][T17035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.069583][T17035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.079840][T17035] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1144.089487][T17035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.099588][T17035] usb 2-1: config 0 descriptor?? [ 1144.108754][T17035] hub 2-1:0.0: USB hub found [ 1144.180871][T17034] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1144.280840][T31221] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1144.302312][T31221] usb 3-1: device descriptor read/8, error -71 [ 1144.316113][T17035] hub 2-1:0.0: 1 port detected [ 1144.340754][T17034] usb 5-1: Using ep0 maxpacket: 32 [ 1144.347655][T17034] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1144.356800][T17034] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1144.367932][T17034] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1144.379128][T17034] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1144.392357][T17034] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1144.402393][T17034] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1144.413001][T17034] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1144.421622][T17034] usb 5-1: Product: syz [ 1144.425888][T17034] usb 5-1: Manufacturer: syz [ 1144.430579][T17034] usb 5-1: SerialNumber: syz [ 1144.438265][T17034] usb 5-1: config 0 descriptor?? [ 1144.446457][T17034] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1144.457222][T17034] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1144.540806][T31221] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1144.561276][T31221] usb 3-1: device descriptor read/8, error -71 [ 1144.664165][T31248] usb 5-1: USB disconnect, device number 7 [ 1144.676338][T31221] usb usb3-port1: unable to enumerate USB device [ 1144.686882][T31248] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1144.925383][T17035] hub 2-1:0.0: activate --> -90 [ 1145.262421][T17034] usb 8-1: USB disconnect, device number 23 [ 1145.299771][T17034] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1145.320501][T17034] cp210x 8-1:0.0: device disconnected [ 1145.490888][T31248] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1145.535248][T17035] usb 2-1-port1: cannot disable (err = -71) [ 1145.546122][T17035] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1145.553640][T31221] usb 2-1: USB disconnect, device number 71 [ 1145.560982][T17035] hub_port_connect: 3 callbacks suppressed [ 1145.561001][T17035] usb 2-1-port1: connect-debounce failed [ 1145.630801][T17034] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1145.643328][T31248] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1145.651686][T31248] usb 5-1: config 0 has no interface number 0 [ 1145.660093][T31248] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1145.669305][T31248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.677401][T31248] usb 5-1: Product: syz [ 1145.681896][T31248] usb 5-1: Manufacturer: syz [ 1145.686494][T31248] usb 5-1: SerialNumber: syz [ 1145.695843][T31248] usb 5-1: config 0 descriptor?? [ 1145.782481][T17034] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.792790][T17034] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1145.802213][T17034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.818217][T17034] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1145.909083][T31248] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 1145.919275][T31248] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 1145.928018][T31248] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 1145.936013][T31248] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 1145.947411][T31248] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1146.045133][ T1613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1146.270893][T31243] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1146.318376][T31221] usb 5-1: USB disconnect, device number 8 [ 1146.335032][T31221] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1146.346482][T31221] keyspan 5-1:0.133: device disconnected [ 1146.353586][ T1667] binder: 1664:1667 unknown command 0 [ 1146.359542][ T1667] binder: 1664:1667 ioctl c0306201 200000000080 returned -22 [ 1146.373997][ T1667] openvswitch: netlink: Flow key attribute not present in set flow. [ 1146.442959][T31243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.454016][T31243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.464129][T31243] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1146.477991][T31243] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1146.487854][T31243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.498620][T31243] usb 3-1: config 0 descriptor?? [ 1146.979234][T31243] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1147.401015][T17034] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -110 [ 1147.442974][T17034] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1147.454023][T17034] stv0680 8-1:4.0: last error: 86, command = 0x78 [ 1147.463926][T17034] usb 8-1: USB disconnect, device number 24 [ 1147.598654][T31248] usb 3-1: USB disconnect, device number 56 [ 1147.818049][ T29] audit: type=1800 audit(1774706035.910:4149): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4906" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1148.070414][ T1753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4909'. [ 1148.268083][ T1769] sctp: [Deprecated]: syz.4.4911 (pid 1769) Use of int in maxseg socket option. [ 1148.268083][ T1769] Use struct sctp_assoc_value instead [ 1148.288689][ T1771] x_tables: duplicate underflow at hook 1 [ 1148.294962][ T1769] sctp: [Deprecated]: syz.4.4911 (pid 1769) Use of int in maxseg socket option. [ 1148.294962][ T1769] Use struct sctp_assoc_value instead [ 1148.513372][ T1791] geneve2: left promiscuous mode [ 1148.519257][ T1791] bond2: left promiscuous mode [ 1148.558441][ T1791] syzkaller0: left promiscuous mode [ 1148.565036][ T1796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4916'. [ 1148.569357][ T1791] syzkaller0: left allmulticast mode [ 1148.588170][T17034] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1148.645889][ T1799] input: syz0 as /devices/virtual/input/input95 [ 1148.848750][T17034] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.898601][T17034] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1148.909633][T17034] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.923790][T17034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.952425][ T1776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1148.965427][T17034] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1149.131058][T17035] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1149.390013][T17034] usb 3-1: USB disconnect, device number 57 [ 1149.402006][T17035] usb 2-1: Using ep0 maxpacket: 8 [ 1149.560830][T17035] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.572695][ T1831] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1149.607700][T17035] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1149.635561][T17035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.664864][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1149.676911][T17035] usb 2-1: Product: syz [ 1149.688580][T17035] usb 2-1: Manufacturer: syz [ 1149.700893][T17035] usb 2-1: SerialNumber: syz [ 1149.727561][T17035] usb 2-1: config 0 descriptor?? [ 1149.740499][ T1831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1149.787087][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1150.281670][T31243] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1150.481627][T31243] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.535374][T31243] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.538191][ T1866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1150.699858][T17035] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1150.707827][ T1866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4921'. [ 1150.746181][T31243] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1150.773303][T31243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1150.807893][T31243] usb 5-1: SerialNumber: syz [ 1150.874463][T17035] usb 3-1: config 0 has no interfaces? [ 1150.880286][T17035] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1150.893778][T17035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.906956][T17035] usb 3-1: config 0 descriptor?? [ 1151.122801][T31250] usb 3-1: USB disconnect, device number 58 [ 1151.140514][ T1854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.149784][ T1854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.173355][ T1854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.182571][ T1854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.600938][T17035] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1151.763787][T17035] usb 3-1: config 0 has no interfaces? [ 1151.777439][T17035] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1151.797271][ T1909] binder: 1908:1909 ioctl c0306201 0 returned -14 [ 1151.798905][T17035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.820026][T17035] usb 3-1: config 0 descriptor?? [ 1152.048837][ T1541] usb 2-1: USB disconnect, device number 72 [ 1152.184670][ T1909] binder: 1908:1909 ioctl c0306201 0 returned -14 [ 1152.440828][ T1541] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1152.590816][ T1541] usb 2-1: Using ep0 maxpacket: 16 [ 1152.597704][ T1541] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1152.607486][ T1541] usb 2-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 1152.618198][ T1541] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1152.627221][ T1541] usb 2-1: config 1 has no interface number 1 [ 1152.633749][ T1541] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1152.647636][ T1541] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x2E, changing to 0xE [ 1152.659246][ T1541] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has an invalid bInterval 101, changing to 7 [ 1152.670567][ T1541] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 26214, setting to 1024 [ 1152.684975][ T1541] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1152.694839][ T1541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.702906][ T1541] usb 2-1: Product: syz [ 1152.707334][ T1541] usb 2-1: Manufacturer: syz [ 1152.712926][ T1541] usb 2-1: SerialNumber: syz [ 1152.985380][ T1541] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1153.002333][ T1541] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 1153.009862][ T1541] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1153.047858][T31243] usb 5-1: 0:2 : does not exist [ 1153.056256][T31243] usb 5-1: unit 255 not found! [ 1153.063301][ T1541] usb 2-1: USB disconnect, device number 73 [ 1153.198359][T31243] usb 5-1: USB disconnect, device number 9 [ 1153.311595][ T29] audit: type=1326 audit(1774706041.290:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1153.342278][T17035] usb 3-1: USB disconnect, device number 59 [ 1153.400639][ T7632] udevd[7632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1153.485168][ T29] audit: type=1326 audit(1774706041.290:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1153.543299][ T29] audit: type=1326 audit(1774706041.290:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1153.615538][ T29] audit: type=1326 audit(1774706041.290:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1153.699642][ T29] audit: type=1326 audit(1774706041.300:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1153.819975][ T29] audit: type=1326 audit(1774706041.300:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1154.270763][T31243] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1154.350942][ T29] audit: type=1326 audit(1774706041.300:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1154.414340][ T29] audit: type=1326 audit(1774706041.300:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f492919e007 code=0x7ffc0000 [ 1154.469033][ T29] audit: type=1326 audit(1774706041.300:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f492915cfce code=0x7ffc0000 [ 1154.551881][ T29] audit: type=1326 audit(1774706041.300:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1959 comm="syz.1.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f492915cfce code=0x7ffc0000 [ 1154.575387][T31243] usb 3-1: Using ep0 maxpacket: 16 [ 1154.582259][T31243] usb 3-1: config 0 has no interfaces? [ 1154.589628][T31243] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1154.599211][T31243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.607385][T31243] usb 3-1: Product: syz [ 1154.632289][T31243] usb 3-1: Manufacturer: syz [ 1154.636920][T31243] usb 3-1: SerialNumber: syz [ 1154.798866][T31243] usb 3-1: config 0 descriptor?? [ 1155.668667][ T2051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.707191][ T2051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.861553][T17034] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1155.890948][T17035] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1156.023434][T17034] usb 5-1: config 0 has no interfaces? [ 1156.033572][T17034] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1156.042861][T17035] usb 2-1: Using ep0 maxpacket: 16 [ 1156.048255][T17034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.057719][T17034] usb 5-1: Product: syz [ 1156.062761][T17035] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.078226][T17034] usb 5-1: Manufacturer: syz [ 1156.085495][T17035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.106106][T17034] usb 5-1: SerialNumber: syz [ 1156.117768][T17034] usb 5-1: config 0 descriptor?? [ 1156.125289][T17035] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1156.163667][T17035] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1156.178665][T17035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.221361][T17035] usb 2-1: config 0 descriptor?? [ 1156.419816][T17034] usb 5-1: USB disconnect, device number 10 [ 1156.623130][T17034] usb 3-1: USB disconnect, device number 60 [ 1156.667944][T17035] nintendo 0003:057E:2019.0061: unknown main item tag 0x0 [ 1156.686624][T17035] nintendo 0003:057E:2019.0061: unknown main item tag 0x0 [ 1156.697394][T17035] nintendo 0003:057E:2019.0061: unknown main item tag 0x0 [ 1156.706518][T17035] nintendo 0003:057E:2019.0061: unknown main item tag 0x0 [ 1156.716260][T17035] nintendo 0003:057E:2019.0061: unknown main item tag 0x0 [ 1156.743132][T17035] nintendo 0003:057E:2019.0061: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 1156.821523][T17035] nintendo 0003:057E:2019.0061: Failed to get joycon info; ret=-38 [ 1156.846027][ T2059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4941'. [ 1156.857858][T17035] nintendo 0003:057E:2019.0061: Failed to retrieve controller info; ret=-38 [ 1156.909472][T17035] nintendo 0003:057E:2019.0061: Failed to initialize controller; ret=-38 [ 1156.966822][T17035] nintendo 0003:057E:2019.0061: probe - fail = -38 [ 1157.006805][T17035] nintendo 0003:057E:2019.0061: probe with driver nintendo failed with error -38 [ 1157.068567][T17035] usb 2-1: USB disconnect, device number 74 [ 1157.807673][ T2136] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4945'. [ 1157.987566][ T2144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1158.031686][ T2144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.267512][ T2154] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 2154 comm: syz.7.4948) [ 1158.563872][ T2165] syzkaller1: entered promiscuous mode [ 1158.575032][ T2165] syzkaller1: entered allmulticast mode [ 1158.798388][ T2176] binder_alloc: binder_alloc_mmap_handler: 2170 200000ffd000-200000fff000 already mapped failed -16 [ 1158.954808][ T2183] loop5: detected capacity change from 0 to 7 [ 1158.972604][ T2183] Dev loop5: unable to read RDB block 7 [ 1158.978205][ T2183] loop5: AHDI p1 p2 p3 [ 1159.030863][ T2183] loop5: partition table partially beyond EOD, truncated [ 1159.039551][ T2183] loop5: p1 start 926365495 is beyond EOD, truncated [ 1159.054682][ T2188] macsec0: entered promiscuous mode [ 1159.060073][ T2188] macsec0: entered allmulticast mode [ 1159.065554][ T2188] veth1_macvtap: entered allmulticast mode [ 1159.073576][ T2183] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1159.376312][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 1159.376329][ T29] audit: type=1326 audit(1774706047.470:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.442738][ T29] audit: type=1326 audit(1774706047.510:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.526119][ T29] audit: type=1326 audit(1774706047.510:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.530789][T31250] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1159.564399][ T29] audit: type=1326 audit(1774706047.510:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.619555][ T29] audit: type=1326 audit(1774706047.510:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.650938][T17035] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1159.668645][ T29] audit: type=1326 audit(1774706047.510:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.771951][ T29] audit: type=1326 audit(1774706047.510:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.775427][T31250] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1159.794955][ T29] audit: type=1326 audit(1774706047.510:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.827552][ T29] audit: type=1326 audit(1774706047.510:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.850342][ T29] audit: type=1326 audit(1774706047.510:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2208 comm="syz.6.4960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99bd99c799 code=0x7ffc0000 [ 1159.850813][T31250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.882988][T17035] usb 2-1: config 0 has no interfaces? [ 1159.890334][T17035] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1159.900130][T17035] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.908196][T17035] usb 2-1: Product: syz [ 1159.912691][T17035] usb 2-1: Manufacturer: syz [ 1159.917328][T17035] usb 2-1: SerialNumber: syz [ 1159.944273][T17035] usb 2-1: config 0 descriptor?? [ 1159.976869][T31250] usb 3-1: Product: syz [ 1159.982340][T31250] usb 3-1: Manufacturer: syz [ 1159.986958][T31250] usb 3-1: SerialNumber: syz [ 1160.020816][T31243] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1160.172640][T31243] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1160.182832][T31243] usb 8-1: string descriptor 0 read error: -22 [ 1160.189094][T31243] usb 8-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1160.198761][ T2203] veth1_vlan: left promiscuous mode [ 1160.198896][T31243] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.217943][T17029] usb 2-1: USB disconnect, device number 75 [ 1160.271489][T17035] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1160.422881][T17035] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1160.432353][T17035] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 255, using maximum allowed: 30 [ 1160.443672][T17035] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1160.455072][T17035] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 1160.468372][T17035] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1160.478140][T17035] usb 5-1: string descriptor 0 read error: -22 [ 1160.484564][T17035] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 1160.493775][T17035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.651167][ T2245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.662464][ T2245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.677328][T31243] chicony 0003:04F2:1123.0062: collection stack underflow [ 1160.684939][T31243] chicony 0003:04F2:1123.0062: item 0 0 0 12 parsing failed [ 1160.693073][T31243] chicony 0003:04F2:1123.0062: Chicony hid parse failed: -22 [ 1160.700575][T31243] chicony 0003:04F2:1123.0062: probe with driver chicony failed with error -22 [ 1160.794572][ T2273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1160.804798][ T2273] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1160.868371][T31250] rtl8150 3-1:1.0: eth13: rtl8150 is detected [ 1160.881006][T17034] usb 8-1: USB disconnect, device number 25 [ 1160.918204][ T2253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.942464][ T2253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.051370][T17035] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0458:5012.0063/input/input96 [ 1161.105019][ T2202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.123933][ T2202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.157650][T17035] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:0458:5012.0063/input/input97 [ 1161.186121][T17034] usb 3-1: USB disconnect, device number 61 [ 1161.193260][ T2253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.223699][ T2253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.376840][T17035] kye 0003:0458:5012.0063: input,hiddev0,hidraw0: USB HID vff.7f Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 1161.516598][T17035] usb 5-1: USB disconnect, device number 11 [ 1162.190876][ T1541] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1162.371157][ T1541] usb 8-1: Using ep0 maxpacket: 16 [ 1162.380345][ T1541] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1162.398674][ T1541] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1162.408087][ T1541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.441782][ T1541] usb 8-1: config 0 descriptor?? [ 1162.463482][ T1541] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1162.741033][ T1541] usb 8-1: USB disconnect, device number 26 [ 1163.080823][T31250] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1163.241579][ T2485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1163.270038][T31250] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1163.303291][T31250] usb 2-1: not running at top speed; connect to a high speed hub [ 1163.339050][T31250] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.377755][T31250] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1163.389204][ T2491] misc userio: Invalid payload size [ 1163.399100][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1163.418973][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4981'. [ 1163.422793][T31250] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 1163.460786][T31250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.515047][ T2501] misc userio: Invalid payload size [ 1163.517744][T31250] usb 2-1: Product: syz [ 1163.527846][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1163.537517][ T2502] netem: invalid attributes len -7 [ 1163.542852][ T2502] netem: change failed [ 1163.621667][ T2491] misc userio: The device must be registered before sending interrupts [ 1163.632689][T31250] usb 2-1: Manufacturer: syz [ 1163.637294][T31250] usb 2-1: SerialNumber: syz [ 1163.951311][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.983117][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.044650][ T2458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.057541][ T2458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.101782][T31250] usb 2-1: USB disconnect, device number 76 [ 1164.270915][T17029] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1164.430817][T17029] usb 8-1: Using ep0 maxpacket: 8 [ 1164.438015][T17029] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1164.446672][T17029] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.457038][T17029] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1164.468031][T17029] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.508352][T17029] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.554864][T17029] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1164.579059][T17029] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.590863][T31250] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1164.750899][T31250] usb 5-1: Using ep0 maxpacket: 16 [ 1164.778858][T31250] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.819979][T31250] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1164.844649][T17029] usb 8-1: GET_CAPABILITIES returned 0 [ 1164.850215][T17029] usbtmc 8-1:16.0: can't read capabilities [ 1164.873130][T31250] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 6 [ 1164.891034][ T2555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1164.907655][T31250] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1164.953196][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1164.986778][T31250] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1165.041553][ T2565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4986'. [ 1165.067286][T31250] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.082643][ T2565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.105254][ T2532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1165.117435][ T2532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1165.135389][T31250] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1165.192948][ T2565] bridge_slave_1 (unregistering): left allmulticast mode [ 1165.200568][ T2565] bridge_slave_1 (unregistering): left promiscuous mode [ 1165.207863][ T2565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.356700][ T2532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.402709][ T2532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.423656][T31250] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1165.457736][T31250] usb 5-1: USB disconnect, device number 12 [ 1166.022360][ T2626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4991'. [ 1166.188940][ T2630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4992'. [ 1166.240476][ T2630] bridge2: port 1(gretap1) entered blocking state [ 1166.247423][ T2630] bridge2: port 1(gretap1) entered disabled state [ 1166.254482][ T2630] gretap1: entered allmulticast mode [ 1166.261870][ T2630] gretap1: entered promiscuous mode [ 1166.292612][ T2630] macvlan0: entered promiscuous mode [ 1166.298192][ T2630] macvlan0: entered allmulticast mode [ 1166.308437][ T2630] bridge2: port 2(macvlan0) entered blocking state [ 1166.318592][ T2630] bridge2: port 2(macvlan0) entered disabled state [ 1166.777106][ T2646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4993'. [ 1166.790139][ T2645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1167.112459][ T2650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1167.165797][ T2650] netdevsim netdevsim6: Direct firmware load for .. failed with error -2 [ 1167.181842][ T2650] netdevsim netdevsim6: Falling back to sysfs fallback for: .. [ 1167.259605][T31243] usb 8-1: USB disconnect, device number 27 [ 1167.374422][ T2660] binder: 2658:2660 ioctl c0306201 200000000100 returned -14 [ 1167.750766][T31250] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1167.900904][T31243] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1167.921003][T31250] usb 2-1: device descriptor read/64, error -71 [ 1168.068178][ T2712] xt_hashlimit: size too large, truncated to 1048576 [ 1168.112424][T31243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.128085][T31243] usb 5-1: config 0 has no interfaces? [ 1168.159375][T31243] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1168.169561][T31250] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1168.198854][T31243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.240316][T31243] usb 5-1: config 0 descriptor?? [ 1168.320780][T31250] usb 2-1: device descriptor read/64, error -71 [ 1168.441657][T31250] usb usb2-port1: attempt power cycle [ 1168.790847][T31250] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1168.811406][T31250] usb 2-1: device descriptor read/8, error -71 [ 1169.010875][ T1541] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1169.060800][T31250] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1169.081555][T31250] usb 2-1: device descriptor read/8, error -71 [ 1169.162281][ T1541] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1169.175244][ T1541] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1169.191121][T31250] usb usb2-port1: unable to enumerate USB device [ 1169.203192][ T1541] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1169.212684][ T1541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.220977][ T1541] usb 3-1: Product: syz [ 1169.225152][ T1541] usb 3-1: Manufacturer: syz [ 1169.229749][ T1541] usb 3-1: SerialNumber: syz [ 1169.247427][ T1541] cdc_ncm 3-1:1.0: skipping garbage [ 1169.252818][ T1541] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1169.259679][ T1541] cdc_ncm 3-1:1.0: bind() failure [ 1169.272003][ T1541] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1169.278899][ T1541] cdc_ncm 3-1:1.1: bind() failure [ 1169.448537][ T2763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.457407][ T2763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.560902][T31250] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1169.724307][T31250] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1169.733547][T31250] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.742323][T31250] usb 8-1: Product: syz [ 1169.746534][T31250] usb 8-1: Manufacturer: syz [ 1169.751413][T31250] usb 8-1: SerialNumber: syz [ 1169.972772][T31243] usb 3-1: USB disconnect, device number 62 [ 1170.166274][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1170.180312][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1170.360873][T31243] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1170.500835][T31243] usb 3-1: device descriptor read/64, error -71 [ 1170.652160][T17029] usb 5-1: USB disconnect, device number 13 [ 1170.699543][ T2802] tipc: New replicast peer: 255.255.255.255 [ 1170.706182][ T2802] tipc: Enabled bearer , priority 10 [ 1170.715126][ T2802] __nla_validate_parse: 3 callbacks suppressed [ 1170.715149][ T2802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5012'. [ 1170.737085][ T2802] tipc: Disabling bearer [ 1170.750895][T31243] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1170.805546][ T2802] loop6: detected capacity change from 0 to 2640 [ 1170.862794][ T2803] loop6: detected capacity change from 2640 to 524288000 [ 1170.862794][ T2802] buffer_io_error: 7 callbacks suppressed [ 1170.862814][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.883889][T31243] usb 3-1: device descriptor read/64, error -71 [ 1170.890335][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.898615][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.900873][T17034] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1170.906969][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.922540][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.930483][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.938506][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.946506][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.954729][ T2802] ldm_validate_partition_table(): Disk read failed. [ 1170.961510][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.969459][ T2802] Buffer I/O error on dev loop6, logical block 0, async page read [ 1170.977442][ T2802] Dev loop6: unable to read RDB block 0 [ 1170.983392][ T2802] loop6: unable to read partition table [ 1170.990987][T31243] usb usb3-port1: attempt power cycle [ 1170.998878][ T2802] loop_reread_partitions: partition scan of loop6 (irc VUXGZtM<I i8NL W@Q6%) failed (rc=-5) [ 1171.090844][T17034] usb 2-1: Using ep0 maxpacket: 16 [ 1171.096586][ T5193] ldm_validate_partition_table(): Disk read failed. [ 1171.105959][T17034] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1171.132942][ T5193] Dev loop6: unable to read RDB block 0 [ 1171.139234][ T5193] loop6: unable to read partition table [ 1171.145167][T17034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1171.172725][T17034] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1171.183549][T17034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.192435][T17034] usb 2-1: Product: syz [ 1171.196618][T17034] usb 2-1: Manufacturer: syz [ 1171.201369][T17034] usb 2-1: SerialNumber: syz [ 1171.209998][T17034] usb 2-1: config 0 descriptor?? [ 1171.223391][T17034] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1171.233565][T17034] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1171.331148][T31243] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1171.362624][T31243] usb 3-1: device descriptor read/8, error -71 [ 1171.371918][ T5193] ldm_validate_partition_table(): Disk read failed. [ 1171.378727][ T5193] Dev loop6: unable to read RDB block 0 [ 1171.386021][ T5193] loop6: unable to read partition table [ 1171.480273][ T2844] loop7: detected capacity change from 0 to 16384 [ 1171.503628][T17034] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1171.510095][T17034] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1171.511229][ T2845] loop7: detected capacity change from 16384 to 0 [ 1171.518825][T17034] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1171.531761][T17034] em28xx 2-1:0.0: No AC97 audio processor [ 1171.578630][T17034] usb 2-1: USB disconnect, device number 81 [ 1171.598958][T17034] em28xx 2-1:0.0: Disconnecting em28xx [ 1171.612938][T31243] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1171.627632][T17034] em28xx 2-1:0.0: Freeing device [ 1171.652981][T31243] usb 3-1: device descriptor read/8, error -71 [ 1171.762381][T31243] usb usb3-port1: unable to enumerate USB device [ 1171.910806][ T1541] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1172.002823][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1172.015907][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1172.020791][T17034] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1172.029840][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1172.047750][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1172.057461][T31250] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1172.060845][ T1541] usb 5-1: Using ep0 maxpacket: 32 [ 1172.073442][T31250] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1172.074322][ T1541] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1172.088536][T31250] usb 8-1: USB disconnect, device number 28 [ 1172.094730][ T1541] usb 5-1: config 0 has no interface number 0 [ 1172.108212][ T1541] usb 5-1: config 0 interface 188 altsetting 0 endpoint 0x82 has invalid maxpacket 24864, setting to 1024 [ 1172.121390][ T1541] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1172.137745][ T1541] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1172.149506][ T1541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.158595][ T1541] usb 5-1: Product: syz [ 1172.163926][ T1541] usb 5-1: Manufacturer: syz [ 1172.168627][ T1541] usb 5-1: SerialNumber: syz [ 1172.177787][ T1541] usb 5-1: config 0 descriptor?? [ 1172.184253][ T2869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1172.185174][T17034] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1172.201646][T17034] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1172.209891][T17034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1172.218842][T17034] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1172.229968][T17034] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1172.242118][T17034] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1172.258080][T17034] usb 2-1: string descriptor 0 read error: -22 [ 1172.264489][T17034] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1172.273967][T17034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.284359][T17034] usb 2-1: config 0 descriptor?? [ 1172.293267][T17034] hub 2-1:0.0: bad descriptor, ignoring hub [ 1172.299661][T17034] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1172.402280][ T2869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1172.654053][ T1541] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1172.675478][ T1541] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1172.837717][ T2907] binder: 2904:2907 ioctl c0306201 0 returned -14 [ 1173.550796][T31250] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1173.822399][T31250] usb 3-1: config 0 has no interfaces? [ 1173.830092][T31250] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1173.840416][T31250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.858983][T31250] usb 3-1: Product: syz [ 1173.867583][T31250] usb 3-1: Manufacturer: syz [ 1173.875133][T31250] usb 3-1: SerialNumber: syz [ 1173.894694][T31250] usb 3-1: config 0 descriptor?? [ 1174.109964][ T1541] usb 3-1: USB disconnect, device number 67 [ 1174.323870][T17034] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1174.482623][T17034] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1174.493709][T17034] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.504852][T17034] usb 8-1: config 0 has no interface number 0 [ 1174.511772][T17034] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1174.522561][T17034] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.551845][T17034] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1174.563672][T17034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.572846][T17034] usb 8-1: Product: syz [ 1174.574814][ T2970] xt_l2tp: wrong L2TP version: 0 [ 1174.577554][T17034] usb 8-1: Manufacturer: syz [ 1174.587292][T17034] usb 8-1: SerialNumber: syz [ 1174.599276][T17034] usb 8-1: config 0 descriptor?? [ 1174.608368][ T2970] team_slave_0: entered allmulticast mode [ 1174.684184][ T1541] usb 5-1: USB disconnect, device number 14 [ 1174.804320][ T2987] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1174.813377][T17034] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1174.844912][T17034] usb 8-1: USB disconnect, device number 29 [ 1174.853720][ T2998] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1175.074106][ T3015] blktrace: Concurrent blktraces are not allowed on loop4 [ 1175.236315][ T3043] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1175.392806][T31248] usb 2-1: USB disconnect, device number 82 [ 1175.426013][ T29] audit: type=1326 audit(1774706063.520:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.452507][ T29] audit: type=1326 audit(1774706063.520:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.478712][ T3059] loop2: detected capacity change from 0 to 7 [ 1175.488006][ T3059] loop2: [ 1175.492118][ T29] audit: type=1326 audit(1774706063.520:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.516278][ T3059] loop2: partition table partially beyond EOD, truncated [ 1175.549918][ T29] audit: type=1326 audit(1774706063.520:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.616139][ T29] audit: type=1326 audit(1774706063.520:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.644833][ T29] audit: type=1326 audit(1774706063.520:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.668832][ T29] audit: type=1326 audit(1774706063.520:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.701403][T31248] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1175.732289][ T29] audit: type=1326 audit(1774706063.520:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.804031][ T29] audit: type=1326 audit(1774706063.520:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.863679][T31248] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1175.874117][ T29] audit: type=1326 audit(1774706063.520:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3055 comm="syz.7.5032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1175.897200][T31248] usb 2-1: not running at top speed; connect to a high speed hub [ 1175.907929][T31248] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1175.919432][T31248] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1175.934099][T31248] usb 2-1: string descriptor 0 read error: -22 [ 1175.941253][T31248] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 1175.950332][T31248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.981759][T17034] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1175.982429][ T3007] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1176.090910][T31243] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1176.149009][T17034] usb 5-1: config 0 has no interfaces? [ 1176.158181][T17034] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1176.167676][T17034] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.175793][T17034] usb 5-1: Product: syz [ 1176.180255][T17034] usb 5-1: Manufacturer: syz [ 1176.184992][T17034] usb 5-1: SerialNumber: syz [ 1176.193531][T17034] usb 5-1: config 0 descriptor?? [ 1176.270807][T31243] usb 8-1: Using ep0 maxpacket: 8 [ 1176.276406][T31243] usb 8-1: no configurations [ 1176.281544][T31243] usb 8-1: can't read configurations, error -22 [ 1176.407532][T17029] usb 5-1: USB disconnect, device number 15 [ 1176.421224][T31243] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1176.460062][ T3007] syzkaller0: entered promiscuous mode [ 1176.467778][ T3007] syzkaller0: entered allmulticast mode [ 1176.479154][ T3007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.489166][ T3007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.573928][T31248] usbhid 2-1:1.0: can't add hid device: -71 [ 1176.584417][T31248] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1176.595086][T31248] usb 2-1: USB disconnect, device number 83 [ 1176.601106][T31243] usb 8-1: Using ep0 maxpacket: 8 [ 1176.609079][T31243] usb 8-1: no configurations [ 1176.615387][T31243] usb 8-1: can't read configurations, error -22 [ 1176.623791][T31243] usb usb8-port1: attempt power cycle [ 1176.951292][ T3142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1176.961110][T31243] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1177.011439][T31243] usb 8-1: Using ep0 maxpacket: 8 [ 1177.022829][T31243] usb 8-1: no configurations [ 1177.027459][T31243] usb 8-1: can't read configurations, error -22 [ 1177.074020][ T3147] loop2: detected capacity change from 0 to 7 [ 1177.083718][ T7632] Dev loop2: unable to read RDB block 7 [ 1177.089322][ T7632] loop2: unable to read partition table [ 1177.095841][ T7632] loop2: partition table beyond EOD, truncated [ 1177.107956][ T3147] Dev loop2: unable to read RDB block 7 [ 1177.132152][ T3147] loop2: unable to read partition table [ 1177.138849][ T3147] loop2: partition table beyond EOD, truncated [ 1177.156960][ T3147] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1177.182564][T31243] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1177.212417][T31243] usb 8-1: Using ep0 maxpacket: 8 [ 1177.222706][T31243] usb 8-1: no configurations [ 1177.227328][T31243] usb 8-1: can't read configurations, error -22 [ 1177.238179][T31243] usb usb8-port1: unable to enumerate USB device [ 1177.533745][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.540166][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.551076][T31221] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1177.680822][T31221] usb 2-1: device descriptor read/64, error -71 [ 1178.000774][T31221] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1178.139385][T31221] usb 2-1: device descriptor read/64, error -71 [ 1178.251035][T31221] usb usb2-port1: attempt power cycle [ 1178.590768][T31221] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1178.612609][T31221] usb 2-1: device descriptor read/8, error -71 [ 1178.811493][ T3188] loop2: detected capacity change from 0 to 7 [ 1178.819507][ T3188] loop2: [ 1178.822602][ T3188] loop2: partition table partially beyond EOD, truncated [ 1178.851871][T31221] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1178.887811][T31221] usb 2-1: device descriptor read/8, error -71 [ 1179.072771][T31221] usb usb2-port1: unable to enumerate USB device [ 1179.580543][ T3225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1180.252068][ T1541] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1180.264188][ T3237] loop2: detected capacity change from 0 to 7 [ 1180.303340][ T7632] Dev loop2: unable to read RDB block 7 [ 1180.314949][ T7632] loop2: unable to read partition table [ 1180.337706][ T7632] loop2: partition table beyond EOD, truncated [ 1180.362602][ T3237] Dev loop2: unable to read RDB block 7 [ 1180.375366][ T3237] loop2: unable to read partition table [ 1180.410539][ T3237] loop2: partition table beyond EOD, truncated [ 1180.416371][ T1541] usb 8-1: Using ep0 maxpacket: 32 [ 1180.453542][ T1541] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 1180.464764][ T3237] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1180.517566][ T1541] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 1180.562956][ T1541] usb 8-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 1180.593462][ T1541] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.647824][ T1541] usb 8-1: Product: syz [ 1180.677289][ T1541] usb 8-1: Manufacturer: syz [ 1180.704440][ T1541] usb 8-1: SerialNumber: syz [ 1180.843888][ T3253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5054'. [ 1180.856573][ T3253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5054'. [ 1180.867208][ T3253] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1180.894492][ T3255] blktrace: Concurrent blktraces are not allowed on loop4 [ 1180.971101][ T1541] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1180.980137][ T1541] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1181.104514][ T3267] loop2: detected capacity change from 0 to 7 [ 1181.110756][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1181.110772][ T29] audit: type=1326 audit(1774706069.200:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.138739][ T1541] usb 8-1: unit 130 not found! [ 1181.143950][ T3267] loop2: [ 1181.143976][ T3267] loop2: partition table partially beyond EOD, truncated [ 1181.203291][ T29] audit: type=1326 audit(1774706069.200:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.274912][ T29] audit: type=1326 audit(1774706069.200:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.312715][ T3285] Scaler: ================= START STATUS ================= [ 1181.321061][T31243] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 1181.342431][ T3285] Scaler: ================== END STATUS ================== [ 1181.359754][ T29] audit: type=1326 audit(1774706069.200:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.408518][ T29] audit: type=1326 audit(1774706069.200:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.410016][ T3285] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5059'. [ 1181.450532][ T29] audit: type=1326 audit(1774706069.200:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.478262][ T29] audit: type=1326 audit(1774706069.200:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.484591][ T1541] usb 8-1: USB disconnect, device number 34 [ 1181.546211][T31243] usb 3-1: Invalid ep0 maxpacket: 64 [ 1181.565584][ T29] audit: type=1326 audit(1774706069.200:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.612706][ T7632] udevd[7632]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1181.627682][ T29] audit: type=1326 audit(1774706069.200:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.654242][ T29] audit: type=1326 audit(1774706069.200:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3266 comm="syz.1.5057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492919c799 code=0x7ffc0000 [ 1181.711165][T31243] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1181.901141][T17029] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1181.940804][T31243] usb 3-1: Invalid ep0 maxpacket: 64 [ 1181.950101][T31243] usb usb3-port1: attempt power cycle [ 1182.080744][T17029] usb 5-1: Using ep0 maxpacket: 32 [ 1182.092511][T17029] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1182.115086][T17029] usb 5-1: config 0 has no interface number 0 [ 1182.133492][T17029] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1182.153520][T17029] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1182.185247][T17029] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1182.200954][T17029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.215015][T17029] usb 5-1: Product: syz [ 1182.222650][T17029] usb 5-1: Manufacturer: syz [ 1182.233995][T17029] usb 5-1: SerialNumber: syz [ 1182.248488][T17029] usb 5-1: config 0 descriptor?? [ 1182.301721][T31243] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 1182.346049][T31243] usb 3-1: Invalid ep0 maxpacket: 64 [ 1182.480830][T31243] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 1182.500754][ T1541] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1182.508889][T31243] usb 3-1: Invalid ep0 maxpacket: 64 [ 1182.516751][T31243] usb usb3-port1: unable to enumerate USB device [ 1182.652967][ T1541] usb 2-1: Using ep0 maxpacket: 16 [ 1182.660321][ T1541] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.671565][ T1541] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1182.678330][ T1541] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1182.687964][ T1541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.709089][ T1541] usb 2-1: config 0 descriptor?? [ 1182.878537][T17029] appletouch 5-1:0.85: Geyser mode initialized. [ 1182.886831][T17029] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input99 [ 1182.931530][ T1541] mcp2221 0003:04D8:00DD.0064: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1183.088845][ T1541] usb 5-1: USB disconnect, device number 16 [ 1183.111702][ T1541] appletouch 5-1:0.85: input: appletouch disconnected [ 1183.329458][T17029] usb 2-1: USB disconnect, device number 88 [ 1183.862639][ T1541] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1183.948679][ T3391] loop2: detected capacity change from 0 to 7 [ 1183.956766][ T3391] loop2: [ 1183.959746][ T3391] loop2: partition table partially beyond EOD, truncated [ 1184.030824][ T1541] usb 5-1: Using ep0 maxpacket: 32 [ 1184.045515][ T1541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.069386][ T1541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.156143][ T1541] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1184.182321][ T1541] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.208886][ T1541] usb 5-1: config 0 descriptor?? [ 1184.218044][ T3404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5071'. [ 1184.561039][ T3420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5073'. [ 1184.677599][ T1541] savu 0003:1E7D:2D5A.0065: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1184.968800][ T1541] usb 5-1: USB disconnect, device number 17 [ 1186.041994][ T3484] sit0: entered promiscuous mode [ 1186.054876][ T3484] netlink: 'syz.1.5082': attribute type 1 has an invalid length. [ 1186.079584][ T3487] xt_hashlimit: size too large, truncated to 1048576 [ 1186.080938][ T3484] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1186.145656][ T3489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1186.230835][ T1541] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1186.390843][ T1541] usb 8-1: Using ep0 maxpacket: 8 [ 1186.399439][ T1541] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1186.409343][ T1541] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.419207][ T1541] usb 8-1: Product: syz [ 1186.423486][ T1541] usb 8-1: Manufacturer: syz [ 1186.428095][ T1541] usb 8-1: SerialNumber: syz [ 1186.435640][ T1541] usb 8-1: config 0 descriptor?? [ 1186.444306][ T1541] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1186.540924][T17029] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1186.711013][T17029] usb 3-1: Using ep0 maxpacket: 8 [ 1186.736070][T17029] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1186.750580][T17029] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1186.760583][T17029] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1186.770823][T17029] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1186.781594][T17029] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1186.794768][T17029] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1186.803962][T17029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.980790][T31243] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1187.021957][T17029] usb 3-1: GET_CAPABILITIES returned 0 [ 1187.027607][T17029] usbtmc 3-1:16.0: can't read capabilities [ 1187.132380][T31243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.143578][T31243] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1187.155797][T31243] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1187.164991][T31243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.173203][T31243] usb 2-1: Product: syz [ 1187.177512][T31243] usb 2-1: Manufacturer: syz [ 1187.182188][T31243] usb 2-1: SerialNumber: syz [ 1187.194457][T31243] cdc_mbim 2-1:1.0: skipping garbage [ 1187.289462][T17029] usb 3-1: USB disconnect, device number 73 [ 1187.393014][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.406226][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.417033][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.427915][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.439407][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.452741][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.464040][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.476600][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.488358][ T3516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.499107][ T3516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.520385][ T3515] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1187.783431][T31243] cdc_mbim 2-1:1.0: bind() failure [ 1187.813833][T31243] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1187.834044][T31243] cdc_ncm 2-1:1.1: bind() failure [ 1187.859091][T31243] usb 2-1: USB disconnect, device number 89 [ 1187.892955][ T3568] vlan0: entered allmulticast mode [ 1187.901664][ T3568] team0: entered allmulticast mode [ 1187.906810][ T3568] team_slave_1: entered allmulticast mode [ 1188.370899][T17034] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1188.489119][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 1188.489136][ T29] audit: type=1326 audit(1774706076.580:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.528675][ T29] audit: type=1326 audit(1774706076.580:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.542670][T17034] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1188.551582][ T29] audit: type=1326 audit(1774706076.620:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.583968][T17034] usb 3-1: config 0 has no interface number 0 [ 1188.584002][ T29] audit: type=1326 audit(1774706076.620:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.590115][T17034] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.613429][ T29] audit: type=1326 audit(1774706076.620:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.654461][ T29] audit: type=1326 audit(1774706076.620:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.677607][ T29] audit: type=1326 audit(1774706076.620:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.702434][T17034] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.703211][ T29] audit: type=1326 audit(1774706076.620:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.713515][ T29] audit: type=1326 audit(1774706076.620:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33ac79c799 code=0x7ffc0000 [ 1188.735679][T17034] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1188.767191][ T29] audit: type=1326 audit(1774706076.620:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3589 comm="syz.4.5095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33ac75cfce code=0x7ffc0000 [ 1188.809225][T17034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.825678][T17034] usb 3-1: config 0 descriptor?? [ 1188.983051][ T1541] gspca_sonixj: reg_w1 err -110 [ 1189.021044][ T1541] sonixj 8-1:0.0: probe with driver sonixj failed with error -110 [ 1189.103787][ T3616] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5098'. [ 1189.276386][T17034] prodikeys 0003:041E:2801.0066: item fetching failed at offset 5/7 [ 1189.306712][T17034] prodikeys 0003:041E:2801.0066: hid parse failed [ 1189.323494][T17034] prodikeys 0003:041E:2801.0066: probe with driver prodikeys failed with error -22 [ 1189.977851][ T3637] fuse: Bad value for 'fd' [ 1190.109904][ T3634] ptrace attach of "./syz-executor exec"[13381] was attempted by "./syz-executor exec"[3634] [ 1190.271555][T31248] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1190.431302][T31248] usb 5-1: Using ep0 maxpacket: 16 [ 1190.442958][T31248] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1190.452336][T31248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.460376][T31248] usb 5-1: Product: syz [ 1190.468039][T31248] usb 5-1: Manufacturer: syz [ 1190.473102][T31248] usb 5-1: SerialNumber: syz [ 1190.509003][T31248] usb 5-1: config 0 descriptor?? [ 1190.523664][T31248] as10x_usb: device has been detected [ 1190.535194][T31248] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1190.555775][T31248] usb 5-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 1190.595258][T31248] as10x_usb: error during firmware upload part1 [ 1190.602336][T31248] Registered device Sky IT Digital Key (green led) [ 1190.737149][ T3633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5102'. [ 1190.990093][T17034] usb 8-1: USB disconnect, device number 35 [ 1191.194476][ T1541] usb 3-1: USB disconnect, device number 74 [ 1191.401154][T17034] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1191.583163][T17034] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.595726][T17034] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1191.605824][T17034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.655264][T17034] usb 8-1: config 0 descriptor?? [ 1191.663879][T17034] pwc: Askey VC010 type 2 USB webcam detected. [ 1191.874258][T17034] pwc: send_video_command error -71 [ 1191.886777][T17034] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1191.909518][T17034] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1191.965028][T17034] usb 8-1: USB disconnect, device number 36 [ 1192.270813][T17034] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1192.405796][ T3741] loop2: detected capacity change from 0 to 7 [ 1192.413829][ T3741] loop2: [ 1192.416790][ T3741] loop2: partition table partially beyond EOD, truncated [ 1192.432510][T17034] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.450952][T17034] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1192.473357][T17034] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.499214][T17034] usb 8-1: config 0 descriptor?? [ 1192.514016][T17034] pwc: Askey VC010 type 2 USB webcam detected. [ 1192.658158][T31248] usb 5-1: USB disconnect, device number 18 [ 1192.687698][T31248] Unregistered device Sky IT Digital Key (green led) [ 1192.738163][T31248] as10x_usb: device has been disconnected [ 1193.118789][T17034] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1193.149471][T17034] pwc: recv_control_msg error -71 req 02 val 2700 [ 1193.176959][T17034] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1193.187491][T17034] pwc: recv_control_msg error -71 req 04 val 1000 [ 1193.322471][T17034] pwc: recv_control_msg error -71 req 04 val 1300 [ 1193.339013][T17034] pwc: recv_control_msg error -71 req 04 val 1400 [ 1193.369697][T17034] pwc: recv_control_msg error -71 req 02 val 2000 [ 1193.380743][T17034] pwc: recv_control_msg error -71 req 02 val 2100 [ 1193.392861][ T3794] syzkaller0: entered promiscuous mode [ 1193.398998][T17034] pwc: recv_control_msg error -71 req 04 val 1500 [ 1193.406344][ T3794] syzkaller0: entered allmulticast mode [ 1193.408141][T17034] pwc: recv_control_msg error -71 req 02 val 2500 [ 1193.419980][T17034] pwc: recv_control_msg error -71 req 02 val 2400 [ 1193.430222][T17034] pwc: recv_control_msg error -71 req 02 val 2600 [ 1193.438672][T17034] pwc: recv_control_msg error -71 req 02 val 2900 [ 1193.448798][T17034] pwc: recv_control_msg error -71 req 02 val 2800 [ 1193.459578][T17034] pwc: recv_control_msg error -71 req 04 val 1100 [ 1193.469232][T17034] pwc: recv_control_msg error -71 req 04 val 1200 [ 1193.480047][T17034] pwc: Registered as video103. [ 1193.511642][T17034] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input100 [ 1193.558525][T17034] usb 8-1: USB disconnect, device number 37 [ 1193.590798][T31248] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1193.762537][T31248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.780499][T31248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.804598][T31248] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1193.818303][T31248] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1193.827541][T31248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.850437][T31248] usb 5-1: config 0 descriptor?? [ 1193.870768][T31243] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1194.000486][ T3839] usb usb9: usbfs: process 3839 (syz.7.5122) did not claim interface 0 before use [ 1194.031122][T31243] usb 3-1: Using ep0 maxpacket: 32 [ 1194.038153][T31243] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1194.050197][T31243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.069644][T31243] usb 3-1: config 0 has no interface number 0 [ 1194.083409][T31243] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1194.124813][T31243] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1194.144055][T31243] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1194.170829][T31243] usb 3-1: Product: syz [ 1194.175159][T31243] usb 3-1: Manufacturer: syz [ 1194.264866][ T3799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.283799][T31243] usb 3-1: config 0 descriptor?? [ 1194.292135][ T3799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.382454][T31248] kovaplus 0003:1E7D:2D50.0067: item fetching failed at offset 3/5 [ 1194.393056][T31248] kovaplus 0003:1E7D:2D50.0067: parse failed [ 1194.399561][T31248] kovaplus 0003:1E7D:2D50.0067: probe with driver kovaplus failed with error -22 [ 1194.593135][ T1541] usb 5-1: USB disconnect, device number 19 [ 1194.687197][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 1194.687213][ T29] audit: type=1326 audit(1774706082.780:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1194.777188][ T29] audit: type=1326 audit(1774706082.780:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1194.846534][ T29] audit: type=1326 audit(1774706082.780:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1194.906869][ T29] audit: type=1326 audit(1774706082.780:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1194.978616][ T29] audit: type=1326 audit(1774706082.780:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1195.003049][ T29] audit: type=1326 audit(1774706082.780:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1195.026253][ T29] audit: type=1326 audit(1774706082.820:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3875 comm="syz.7.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e679c799 code=0x7ffc0000 [ 1195.180495][ T3892] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5129'. [ 1195.200784][T31248] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1195.352526][T31248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.364159][T31248] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.396584][T31248] usb 8-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1195.406005][T31248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.420253][T31248] usb 8-1: config 0 descriptor?? [ 1195.554716][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5132'. [ 1195.564377][ T3911] netlink: 'syz.4.5132': attribute type 15 has an invalid length. [ 1195.572663][ T3911] netlink: 'syz.4.5132': attribute type 18 has an invalid length. [ 1195.632183][ T3912] netlink: 'syz.7.5126': attribute type 4 has an invalid length. [ 1195.640173][ T3880] netlink: 'syz.7.5126': attribute type 4 has an invalid length. [ 1195.861612][T31248] uclogic 0003:5543:0042.0068: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.7-1/input0 [ 1196.054839][ T1541] usb 8-1: USB disconnect, device number 38 [ 1196.176612][ T3931] random: crng reseeded on system resumption [ 1196.226107][ T3933] binder: 3932:3933 ioctl aece 0 returned -22 [ 1196.360102][ T3944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5137'. [ 1196.645281][T31248] usb 3-1: USB disconnect, device number 75 [ 1196.955646][ T3978] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5144'. [ 1197.020878][ T1541] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1197.182986][ T1541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.215929][ T1541] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1197.240781][ T1541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.276562][ T1541] usb 8-1: config 0 descriptor?? [ 1197.510312][ T1541] usbhid 8-1:0.0: can't add hid device: -71 [ 1197.526902][ T1541] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1197.579732][ T1541] usb 8-1: USB disconnect, device number 39 [ 1198.040774][T31248] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1198.060818][T31221] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1198.068519][ T1541] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 1198.127212][ T4050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1198.171586][T31248] usb 2-1: device descriptor read/64, error -71 [ 1198.260770][T31221] usb 5-1: Using ep0 maxpacket: 16 [ 1198.274009][ T1541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1198.292614][ T1541] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 88, setting to 64 [ 1198.305097][T31221] usb 5-1: config 3 has an invalid interface number: 114 but max is 0 [ 1198.313646][ T1541] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1198.322896][T31221] usb 5-1: config 3 has no interface number 0 [ 1198.328982][T31221] usb 5-1: config 3 interface 114 has no altsetting 0 [ 1198.335835][ T1541] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.353130][T31221] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3 [ 1198.362370][ T1541] usb 8-1: config 0 descriptor?? [ 1198.367867][T31221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.367963][ T3970] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1198.375985][T31221] usb 5-1: Product: syz [ 1198.387351][T31221] usb 5-1: Manufacturer: syz [ 1198.393233][ T1541] hub 8-1:0.0: USB hub found [ 1198.398698][T31221] usb 5-1: SerialNumber: syz [ 1198.410808][T31248] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1198.540756][T31248] usb 2-1: device descriptor read/64, error -71 [ 1198.590546][ T1541] hub 8-1:0.0: 1 port detected [ 1198.651469][T31248] usb usb2-port1: attempt power cycle [ 1198.791188][ T1541] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 1198.798890][ T1541] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 1198.811474][ T1541] usbhid 8-1:0.0: can't add hid device: -71 [ 1198.817484][ T1541] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1198.842620][ T1541] usb 8-1: USB disconnect, device number 40 [ 1198.990849][T31248] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1199.021479][T31248] usb 2-1: device descriptor read/8, error -71 [ 1199.260891][T31248] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1199.301337][T31248] usb 2-1: device descriptor read/8, error -71 [ 1199.396836][ T4089] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1199.410772][ T4089] [U] .h0FwZ,iqgҏV2sO [ 1199.416863][ T4089] [U] ` w*BBOLhU [ 1199.421368][ T4089] [U] w$n|#%o.z\̧mРw [ 1199.428805][ T4089] [U] R{ꫢ S [ 1199.433065][T31248] usb usb2-port1: unable to enumerate USB device [ 1200.093450][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.610309][ T4121] [ 1200.612665][ T4121] ===================================================== [ 1200.619578][ T4121] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1200.627023][ T4121] syzkaller #0 Tainted: G L [ 1200.632976][ T4121] ----------------------------------------------------- [ 1200.639880][ T4121] syz.2.5171/4121 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1200.647486][ T4121] ffff88805831f0c0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1200.656167][ T4121] [ 1200.656167][ T4121] and this task is already holding: [ 1200.663511][ T4121] ffff88807c1a7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1200.673231][ T4121] which would create a new lock dependency: [ 1200.679097][ T4121] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1200.687160][ T4121] [ 1200.687160][ T4121] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1200.696582][ T4121] (&dev->event_lock#2){..-.}-{3:3} [ 1200.696604][ T4121] [ 1200.696604][ T4121] ... which became SOFTIRQ-irq-safe at: [ 1200.709448][ T4121] lock_acquire+0xf0/0x2e0 [ 1200.713936][ T4121] _raw_spin_lock_irqsave+0x40/0x60 [ 1200.719206][ T4121] input_event+0x76/0xe0 [ 1200.723522][ T4121] hidinput_report_event+0xa1/0x100 [ 1200.728814][ T4121] hid_report_raw_event+0x150f/0x1730 [ 1200.734258][ T4121] hid_input_report+0x44b/0x580 [ 1200.739176][ T4121] hid_irq_in+0x47e/0x6d0 [ 1200.743574][ T4121] __usb_hcd_giveback_urb+0x376/0x540 [ 1200.749015][ T4121] dummy_timer+0xbbd/0x45d0 [ 1200.753595][ T4121] __hrtimer_run_queues+0x53a/0xcc0 [ 1200.758877][ T4121] hrtimer_run_softirq+0x182/0x5a0 [ 1200.764063][ T4121] handle_softirqs+0x22a/0x870 [ 1200.768902][ T4121] __irq_exit_rcu+0x5f/0x150 [ 1200.773650][ T4121] irq_exit_rcu+0x9/0x30 [ 1200.777965][ T4121] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1200.783674][ T4121] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1200.789726][ T4121] pv_native_safe_halt+0xf/0x20 [ 1200.794646][ T4121] default_idle+0x9/0x20 [ 1200.798966][ T4121] default_idle_call+0x72/0xb0 [ 1200.803804][ T4121] do_idle+0x36a/0x5f0 [ 1200.807954][ T4121] cpu_startup_entry+0x43/0x60 [ 1200.812794][ T4121] rest_init+0x2de/0x300 [ 1200.817113][ T4121] start_kernel+0x385/0x3d0 [ 1200.821690][ T4121] x86_64_start_reservations+0x24/0x30 [ 1200.827214][ T4121] x86_64_start_kernel+0x143/0x1c0 [ 1200.832393][ T4121] common_startup_64+0x13e/0x147 [ 1200.837397][ T4121] [ 1200.837397][ T4121] to a SOFTIRQ-irq-unsafe lock: [ 1200.844391][ T4121] (tasklist_lock){.+.+}-{3:3} [ 1200.844415][ T4121] [ 1200.844415][ T4121] ... which became SOFTIRQ-irq-unsafe at: [ 1200.857007][ T4121] ... [ 1200.857015][ T4121] lock_acquire+0xf0/0x2e0 [ 1200.864062][ T4121] _raw_read_lock+0x36/0x50 [ 1200.868637][ T4121] __do_wait+0xde/0x740 [ 1200.872862][ T4121] do_wait+0x1e7/0x540 [ 1200.876999][ T4121] kernel_wait+0xd6/0x1c0 [ 1200.881396][ T4121] call_usermodehelper_exec_work+0xbe/0x230 [ 1200.887361][ T4121] process_scheduled_works+0xb6e/0x18c0 [ 1200.892975][ T4121] worker_thread+0xa53/0xfc0 [ 1200.897637][ T4121] kthread+0x388/0x470 [ 1200.901773][ T4121] ret_from_fork+0x51e/0xb90 [ 1200.906435][ T4121] ret_from_fork_asm+0x1a/0x30 [ 1200.911272][ T4121] [ 1200.911272][ T4121] other info that might help us debug this: [ 1200.911272][ T4121] [ 1200.921480][ T4121] Chain exists of: [ 1200.921480][ T4121] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1200.921480][ T4121] [ 1200.935030][ T4121] Possible interrupt unsafe locking scenario: [ 1200.935030][ T4121] [ 1200.943327][ T4121] CPU0 CPU1 [ 1200.948675][ T4121] ---- ---- [ 1200.954018][ T4121] lock(tasklist_lock); [ 1200.958244][ T4121] local_irq_disable(); [ 1200.964976][ T4121] lock(&dev->event_lock#2); [ 1200.972159][ T4121] lock(&client->buffer_lock); [ 1200.979514][ T4121] [ 1200.982947][ T4121] lock(&dev->event_lock#2); [ 1200.987784][ T4121] [ 1200.987784][ T4121] *** DEADLOCK *** [ 1200.987784][ T4121] [ 1200.995905][ T4121] 7 locks held by syz.2.5171/4121: [ 1201.000993][ T4121] #0: ffff88802c04b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1201.010116][ T4121] #1: ffff88801eb06230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1201.020199][ T4121] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1201.029844][ T4121] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1201.039403][ T4121] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1201.048519][ T4121] #5: ffff88807c1a7028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1201.058678][ T4121] #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1201.067715][ T4121] [ 1201.067715][ T4121] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1201.078096][ T4121] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1201.083733][ T4121] IN-SOFTIRQ-W at: [ 1201.087780][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.094005][ T4121] _raw_spin_lock_irqsave+0x40/0x60 [ 1201.101020][ T4121] input_event+0x76/0xe0 [ 1201.107080][ T4121] hidinput_report_event+0xa1/0x100 [ 1201.114171][ T4121] hid_report_raw_event+0x150f/0x1730 [ 1201.121352][ T4121] hid_input_report+0x44b/0x580 [ 1201.128009][ T4121] hid_irq_in+0x47e/0x6d0 [ 1201.134146][ T4121] __usb_hcd_giveback_urb+0x376/0x540 [ 1201.141329][ T4121] dummy_timer+0xbbd/0x45d0 [ 1201.147642][ T4121] __hrtimer_run_queues+0x53a/0xcc0 [ 1201.154651][ T4121] hrtimer_run_softirq+0x182/0x5a0 [ 1201.161578][ T4121] handle_softirqs+0x22a/0x870 [ 1201.168154][ T4121] __irq_exit_rcu+0x5f/0x150 [ 1201.174549][ T4121] irq_exit_rcu+0x9/0x30 [ 1201.180600][ T4121] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1201.188041][ T4121] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1201.195825][ T4121] pv_native_safe_halt+0xf/0x20 [ 1201.202488][ T4121] default_idle+0x9/0x20 [ 1201.208541][ T4121] default_idle_call+0x72/0xb0 [ 1201.215118][ T4121] do_idle+0x36a/0x5f0 [ 1201.220997][ T4121] cpu_startup_entry+0x43/0x60 [ 1201.227571][ T4121] rest_init+0x2de/0x300 [ 1201.233625][ T4121] start_kernel+0x385/0x3d0 [ 1201.239936][ T4121] x86_64_start_reservations+0x24/0x30 [ 1201.247200][ T4121] x86_64_start_kernel+0x143/0x1c0 [ 1201.254117][ T4121] common_startup_64+0x13e/0x147 [ 1201.260861][ T4121] INITIAL USE at: [ 1201.264823][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.270960][ T4121] _raw_spin_lock_irqsave+0x40/0x60 [ 1201.277881][ T4121] input_inject_event+0xa5/0x340 [ 1201.284558][ T4121] kbd_led_trigger_activate+0xbc/0x100 [ 1201.291752][ T4121] led_trigger_set+0x535/0x960 [ 1201.298242][ T4121] led_trigger_set_default+0x260/0x2a0 [ 1201.305426][ T4121] led_classdev_register_ext+0x787/0x9c0 [ 1201.312816][ T4121] input_leds_connect+0x517/0x790 [ 1201.319569][ T4121] input_register_device+0xd00/0x1160 [ 1201.326668][ T4121] atkbd_connect+0x731/0xa50 [ 1201.332976][ T4121] serio_driver_probe+0x82/0xd0 [ 1201.339560][ T4121] really_probe+0x267/0xaf0 [ 1201.345807][ T4121] __driver_probe_device+0x18c/0x320 [ 1201.352828][ T4121] driver_probe_device+0x4f/0x240 [ 1201.359671][ T4121] __driver_attach+0x34c/0x640 [ 1201.366161][ T4121] bus_for_each_dev+0x23b/0x2c0 [ 1201.372730][ T4121] serio_handle_event+0x20a/0xdd0 [ 1201.379470][ T4121] process_scheduled_works+0xb6e/0x18c0 [ 1201.386739][ T4121] worker_thread+0xa53/0xfc0 [ 1201.393053][ T4121] kthread+0x388/0x470 [ 1201.398840][ T4121] ret_from_fork+0x51e/0xb90 [ 1201.405150][ T4121] ret_from_fork_asm+0x1a/0x30 [ 1201.411809][ T4121] } [ 1201.414373][ T4121] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1201.423518][ T4121] -> (&client->buffer_lock){....}-{3:3} { [ 1201.429238][ T4121] INITIAL USE at: [ 1201.433113][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.439078][ T4121] _raw_spin_lock+0x2e/0x40 [ 1201.445123][ T4121] evdev_pass_values+0xb9/0xbd0 [ 1201.451516][ T4121] evdev_events+0x1e6/0x340 [ 1201.457562][ T4121] input_pass_values+0x288/0x890 [ 1201.464048][ T4121] input_event_dispose+0x330/0x6b0 [ 1201.470717][ T4121] input_inject_event+0x1dd/0x340 [ 1201.477304][ T4121] evdev_write+0x325/0x4c0 [ 1201.483270][ T4121] vfs_write+0x29a/0xb90 [ 1201.489067][ T4121] ksys_write+0x150/0x270 [ 1201.494942][ T4121] do_syscall_64+0x14d/0xf80 [ 1201.501082][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.508521][ T4121] } [ 1201.511008][ T4121] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1201.519148][ T4121] ... acquired at: [ 1201.522926][ T4121] _raw_spin_lock+0x2e/0x40 [ 1201.527581][ T4121] evdev_pass_values+0xb9/0xbd0 [ 1201.532587][ T4121] evdev_events+0x1e6/0x340 [ 1201.537245][ T4121] input_pass_values+0x288/0x890 [ 1201.542343][ T4121] input_event_dispose+0x330/0x6b0 [ 1201.547613][ T4121] input_inject_event+0x1dd/0x340 [ 1201.552806][ T4121] evdev_write+0x325/0x4c0 [ 1201.557374][ T4121] vfs_write+0x29a/0xb90 [ 1201.561774][ T4121] ksys_write+0x150/0x270 [ 1201.566258][ T4121] do_syscall_64+0x14d/0xf80 [ 1201.571005][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.577055][ T4121] [ 1201.579360][ T4121] [ 1201.579360][ T4121] the dependencies between the lock to be acquired [ 1201.579368][ T4121] and SOFTIRQ-irq-unsafe lock: [ 1201.592847][ T4121] -> (tasklist_lock){.+.+}-{3:3} { [ 1201.598129][ T4121] HARDIRQ-ON-R at: [ 1201.602263][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.608663][ T4121] _raw_read_lock+0x36/0x50 [ 1201.615145][ T4121] __do_wait+0xde/0x740 [ 1201.621321][ T4121] do_wait+0x1e7/0x540 [ 1201.627368][ T4121] kernel_wait+0xd6/0x1c0 [ 1201.633690][ T4121] call_usermodehelper_exec_work+0xbe/0x230 [ 1201.641565][ T4121] process_scheduled_works+0xb6e/0x18c0 [ 1201.649090][ T4121] worker_thread+0xa53/0xfc0 [ 1201.655665][ T4121] kthread+0x388/0x470 [ 1201.661717][ T4121] ret_from_fork+0x51e/0xb90 [ 1201.668288][ T4121] ret_from_fork_asm+0x1a/0x30 [ 1201.675038][ T4121] SOFTIRQ-ON-R at: [ 1201.679172][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.685570][ T4121] _raw_read_lock+0x36/0x50 [ 1201.692051][ T4121] __do_wait+0xde/0x740 [ 1201.698186][ T4121] do_wait+0x1e7/0x540 [ 1201.704234][ T4121] kernel_wait+0xd6/0x1c0 [ 1201.710543][ T4121] call_usermodehelper_exec_work+0xbe/0x230 [ 1201.718421][ T4121] process_scheduled_works+0xb6e/0x18c0 [ 1201.725949][ T4121] worker_thread+0xa53/0xfc0 [ 1201.732525][ T4121] kthread+0x388/0x470 [ 1201.738574][ T4121] ret_from_fork+0x51e/0xb90 [ 1201.745147][ T4121] ret_from_fork_asm+0x1a/0x30 [ 1201.751895][ T4121] INITIAL USE at: [ 1201.755944][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.762252][ T4121] _raw_write_lock_irq+0x3d/0x50 [ 1201.769078][ T4121] copy_process+0x247a/0x3cd0 [ 1201.775650][ T4121] kernel_clone+0x248/0x8e0 [ 1201.782048][ T4121] user_mode_thread+0x110/0x180 [ 1201.788793][ T4121] rest_init+0x23/0x300 [ 1201.794843][ T4121] start_kernel+0x385/0x3d0 [ 1201.801240][ T4121] x86_64_start_reservations+0x24/0x30 [ 1201.808589][ T4121] x86_64_start_kernel+0x143/0x1c0 [ 1201.816201][ T4121] common_startup_64+0x13e/0x147 [ 1201.823031][ T4121] INITIAL READ USE at: [ 1201.827515][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.834261][ T4121] _raw_read_lock+0x36/0x50 [ 1201.841094][ T4121] __do_wait+0xde/0x740 [ 1201.847576][ T4121] do_wait+0x1e7/0x540 [ 1201.853970][ T4121] kernel_wait+0xd6/0x1c0 [ 1201.860626][ T4121] call_usermodehelper_exec_work+0xbe/0x230 [ 1201.868858][ T4121] process_scheduled_works+0xb6e/0x18c0 [ 1201.876732][ T4121] worker_thread+0xa53/0xfc0 [ 1201.883736][ T4121] kthread+0x388/0x470 [ 1201.890217][ T4121] ret_from_fork+0x51e/0xb90 [ 1201.897134][ T4121] ret_from_fork_asm+0x1a/0x30 [ 1201.904229][ T4121] } [ 1201.906884][ T4121] ... key at: [] tasklist_lock+0x18/0x40 [ 1201.914762][ T4121] ... acquired at: [ 1201.918715][ T4121] _raw_read_lock+0x36/0x50 [ 1201.923375][ T4121] send_sigio+0x101/0x370 [ 1201.927864][ T4121] kill_fasync+0x24d/0x4d0 [ 1201.932436][ T4121] lease_break_callback+0x26/0x30 [ 1201.937616][ T4121] __break_lease+0x81c/0x1e80 [ 1201.942454][ T4121] vfs_truncate+0x449/0x540 [ 1201.947111][ T4121] do_sys_truncate+0xf3/0x1c0 [ 1201.951943][ T4121] __x64_sys_truncate+0x5b/0x70 [ 1201.956949][ T4121] do_syscall_64+0x14d/0xf80 [ 1201.961695][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.967740][ T4121] [ 1201.970040][ T4121] -> (&f_owner->lock){....}-{3:3} { [ 1201.975320][ T4121] INITIAL USE at: [ 1201.979285][ T4121] lock_acquire+0xf0/0x2e0 [ 1201.985429][ T4121] _raw_write_lock_irq+0x3d/0x50 [ 1201.992086][ T4121] __f_setown+0x67/0x370 [ 1201.998044][ T4121] f_setown+0x23a/0x300 [ 1202.003915][ T4121] sock_ioctl+0x615/0x7f0 [ 1202.009977][ T4121] __se_sys_ioctl+0xfc/0x170 [ 1202.016631][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.022942][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.030552][ T4121] INITIAL READ USE at: [ 1202.034949][ T4121] lock_acquire+0xf0/0x2e0 [ 1202.041520][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.048879][ T4121] send_sigio+0x38/0x370 [ 1202.055292][ T4121] kill_fasync+0x24d/0x4d0 [ 1202.061875][ T4121] lease_break_callback+0x26/0x30 [ 1202.069059][ T4121] __break_lease+0x81c/0x1e80 [ 1202.075898][ T4121] do_dentry_open+0x1010/0x14e0 [ 1202.082908][ T4121] vfs_open+0x3b/0x340 [ 1202.089132][ T4121] path_openat+0x2e08/0x3860 [ 1202.095875][ T4121] do_file_open+0x23e/0x4a0 [ 1202.102531][ T4121] do_sys_openat2+0x113/0x200 [ 1202.109367][ T4121] __x64_sys_creat+0x8f/0xc0 [ 1202.116119][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.122867][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.130911][ T4121] } [ 1202.133479][ T4121] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1202.142403][ T4121] ... acquired at: [ 1202.146270][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.151624][ T4121] send_sigio+0x38/0x370 [ 1202.156031][ T4121] kill_fasync+0x24d/0x4d0 [ 1202.160602][ T4121] lease_break_callback+0x26/0x30 [ 1202.165788][ T4121] __break_lease+0x81c/0x1e80 [ 1202.170624][ T4121] do_dentry_open+0x1010/0x14e0 [ 1202.175647][ T4121] vfs_open+0x3b/0x340 [ 1202.179887][ T4121] path_openat+0x2e08/0x3860 [ 1202.184632][ T4121] do_file_open+0x23e/0x4a0 [ 1202.189293][ T4121] do_sys_openat2+0x113/0x200 [ 1202.194131][ T4121] __x64_sys_creat+0x8f/0xc0 [ 1202.198880][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.203626][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.209683][ T4121] [ 1202.211985][ T4121] -> (&new->fa_lock){...-}-{3:3} { [ 1202.217099][ T4121] IN-SOFTIRQ-R at: [ 1202.221057][ T4121] lock_acquire+0xf0/0x2e0 [ 1202.227110][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.233940][ T4121] kill_fasync+0x199/0x4d0 [ 1202.239987][ T4121] sock_wake_async+0x137/0x160 [ 1202.246390][ T4121] sock_def_readable+0x3c1/0x580 [ 1202.252965][ T4121] tcp_data_queue+0x1e2e/0x5e50 [ 1202.259451][ T4121] tcp_rcv_established+0xf45/0x2740 [ 1202.266372][ T4121] tcp_v4_do_rcv+0xa90/0x1430 [ 1202.272689][ T4121] tcp_v4_rcv+0x2825/0x31f0 [ 1202.278823][ T4121] ip_protocol_deliver_rcu+0x221/0x440 [ 1202.285919][ T4121] ip_local_deliver_finish+0x3bb/0x6f0 [ 1202.293014][ T4121] NF_HOOK+0x336/0x3c0 [ 1202.298730][ T4121] NF_HOOK+0x336/0x3c0 [ 1202.304461][ T4121] process_backlog+0xaa3/0x1950 [ 1202.310975][ T4121] __napi_poll+0xae/0x340 [ 1202.316954][ T4121] net_rx_action+0x627/0xf70 [ 1202.323178][ T4121] handle_softirqs+0x22a/0x870 [ 1202.329587][ T4121] do_softirq+0x76/0xd0 [ 1202.335467][ T4121] __local_bh_enable_ip+0xf8/0x130 [ 1202.342214][ T4121] sk_stream_wait_memory+0x72b/0xf80 [ 1202.349136][ T4121] tcp_sendmsg_locked+0x23ba/0x5490 [ 1202.355972][ T4121] tcp_sendmsg+0x2f/0x50 [ 1202.361857][ T4121] __sys_sendto+0x5de/0x710 [ 1202.367996][ T4121] __x64_sys_sendto+0xde/0x100 [ 1202.374392][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.380620][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.388150][ T4121] INITIAL USE at: [ 1202.392030][ T4121] lock_acquire+0xf0/0x2e0 [ 1202.397995][ T4121] _raw_write_lock_irq+0x3d/0x50 [ 1202.404482][ T4121] fasync_remove_entry+0xf1/0x1c0 [ 1202.411052][ T4121] lease_modify+0x4f7/0x6c0 [ 1202.417109][ T4121] locks_remove_file+0x5f0/0xf70 [ 1202.423592][ T4121] __fput+0x3ae/0xa70 [ 1202.429126][ T4121] task_work_run+0x1d9/0x270 [ 1202.435259][ T4121] exit_to_user_mode_loop+0xed/0x480 [ 1202.442091][ T4121] do_syscall_64+0x32d/0xf80 [ 1202.448229][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.455667][ T4121] INITIAL READ USE at: [ 1202.460071][ T4121] lock_acquire+0xf0/0x2e0 [ 1202.466474][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.473657][ T4121] kill_fasync+0x199/0x4d0 [ 1202.480052][ T4121] lease_break_callback+0x26/0x30 [ 1202.487057][ T4121] __break_lease+0x81c/0x1e80 [ 1202.493819][ T4121] do_dentry_open+0x1010/0x14e0 [ 1202.500674][ T4121] vfs_open+0x3b/0x340 [ 1202.506744][ T4121] path_openat+0x2e08/0x3860 [ 1202.513329][ T4121] do_file_open+0x23e/0x4a0 [ 1202.519829][ T4121] do_sys_openat2+0x113/0x200 [ 1202.526516][ T4121] __x64_sys_creat+0x8f/0xc0 [ 1202.533104][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.539680][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.547554][ T4121] } [ 1202.550036][ T4121] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1202.558698][ T4121] ... acquired at: [ 1202.562482][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.567835][ T4121] kill_fasync+0x199/0x4d0 [ 1202.572407][ T4121] evdev_pass_values+0x627/0xbd0 [ 1202.577503][ T4121] evdev_events+0x1e6/0x340 [ 1202.582165][ T4121] input_pass_values+0x288/0x890 [ 1202.587264][ T4121] input_event_dispose+0x330/0x6b0 [ 1202.592540][ T4121] input_inject_event+0x1dd/0x340 [ 1202.597726][ T4121] evdev_write+0x325/0x4c0 [ 1202.602322][ T4121] vfs_write+0x29a/0xb90 [ 1202.606723][ T4121] ksys_write+0x150/0x270 [ 1202.611210][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.615959][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.622007][ T4121] [ 1202.624313][ T4121] [ 1202.624313][ T4121] stack backtrace: [ 1202.630183][ T4121] CPU: 0 UID: 0 PID: 4121 Comm: syz.2.5171 Tainted: G L syzkaller #0 PREEMPT(full) [ 1202.630206][ T4121] Tainted: [L]=SOFTLOCKUP [ 1202.630211][ T4121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1202.630221][ T4121] Call Trace: [ 1202.630230][ T4121] [ 1202.630238][ T4121] dump_stack_lvl+0xe8/0x150 [ 1202.630259][ T4121] __lock_acquire+0x2a94/0x2cf0 [ 1202.630299][ T4121] lock_acquire+0xf0/0x2e0 [ 1202.630317][ T4121] ? kill_fasync+0x199/0x4d0 [ 1202.630336][ T4121] _raw_read_lock_irqsave+0x48/0x60 [ 1202.630353][ T4121] ? kill_fasync+0x199/0x4d0 [ 1202.630368][ T4121] kill_fasync+0x199/0x4d0 [ 1202.630384][ T4121] ? kill_fasync+0x53/0x4d0 [ 1202.630399][ T4121] evdev_pass_values+0x627/0xbd0 [ 1202.630416][ T4121] ? evdev_pass_values+0x5b1/0xbd0 [ 1202.630432][ T4121] evdev_events+0x1e6/0x340 [ 1202.630445][ T4121] ? evdev_events+0x79/0x340 [ 1202.630458][ T4121] ? input_pass_values+0x8d/0x890 [ 1202.630479][ T4121] input_pass_values+0x288/0x890 [ 1202.630503][ T4121] ? input_handle_event+0x70c/0xf30 [ 1202.630526][ T4121] input_event_dispose+0x330/0x6b0 [ 1202.630546][ T4121] input_inject_event+0x1dd/0x340 [ 1202.630564][ T4121] ? input_inject_event+0xb6/0x340 [ 1202.630582][ T4121] evdev_write+0x325/0x4c0 [ 1202.630597][ T4121] ? __pfx_evdev_write+0x10/0x10 [ 1202.630612][ T4121] ? bpf_lsm_file_permission+0x9/0x20 [ 1202.630631][ T4121] ? security_file_permission+0x75/0x260 [ 1202.630653][ T4121] ? rw_verify_area+0x255/0x4d0 [ 1202.630668][ T4121] ? __pfx_evdev_write+0x10/0x10 [ 1202.630682][ T4121] vfs_write+0x29a/0xb90 [ 1202.630699][ T4121] ? __pfx_vfs_write+0x10/0x10 [ 1202.630715][ T4121] ? __fget_files+0x2a/0x420 [ 1202.630736][ T4121] ? __fget_files+0x2a/0x420 [ 1202.630756][ T4121] ? __fget_files+0x3a0/0x420 [ 1202.630776][ T4121] ? __fget_files+0x2a/0x420 [ 1202.630798][ T4121] ksys_write+0x150/0x270 [ 1202.630814][ T4121] ? __pfx_ksys_write+0x10/0x10 [ 1202.630832][ T4121] do_syscall_64+0x14d/0xf80 [ 1202.630849][ T4121] ? trace_irq_disable+0x3b/0x150 [ 1202.630862][ T4121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.630877][ T4121] ? clear_bhb_loop+0x40/0x90 [ 1202.630893][ T4121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.630908][ T4121] RIP: 0033:0x7f0669d9c799 [ 1202.630923][ T4121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.630937][ T4121] RSP: 002b:00007f066ac38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1202.630955][ T4121] RAX: ffffffffffffffda RBX: 00007f066a016090 RCX: 00007f0669d9c799 [ 1202.630966][ T4121] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000005 [ 1202.630976][ T4121] RBP: 00007f0669e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1202.630985][ T4121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.630995][ T4121] R13: 00007f066a016128 R14: 00007f066a016090 R15: 00007f066a13fa48 [ 1202.631010][ T4121] [ 1203.192094][T31221] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1203.198685][T31221] gspca_sn9c2028: read1 error -71 [ 1203.204205][T31221] gspca_sn9c2028: read1 error -71 [ 1203.209536][T31221] gspca_sn9c2028: read1 error -71 [ 1203.215522][T31221] sn9c2028 5-1:3.114: probe with driver sn9c2028 failed with error -71 [ 1203.225730][T31221] usb 5-1: USB disconnect, device number 20 [ 1203.321087][T31248] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1203.471994][T31248] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1203.481173][T31248] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.490200][T31248] usb 8-1: config 0 descriptor?? [ 1203.498922][T31248] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1203.559344][T31248] gspca_cpia1: usb_control_msg 05, error -71 [ 1203.567359][T31248] gspca_cpia1: usb_control_msg 01, error -71 [ 1203.574646][T31248] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 1203.586818][T31248] usb 8-1: USB disconnect, device number 41