last executing test programs: 1m54.56440428s ago: executing program 4 (id=5168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x7, 0x81, 0x8, 0x18, 0x10, 0xfffff801}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f00000000c0), &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x1, 0x8}) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000"], 0x5c}}, 0x0) (async, rerun: 64) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000007100)={@cgroup, 0xffffffffffffffff, 0x36, 0x1b}, 0x20) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x4, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, 0x0, 0x0, 0x2b2, 0x0, 0x20, 0x7c, 0x18}) 1m54.161960975s ago: executing program 4 (id=5170): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0xc) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) r7 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r6, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000, 0x0, r7}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000ffef00", [0x0, 0xffffffff9673e35d]}}) 1m52.119527814s ago: executing program 4 (id=5183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%6b\xaa\xe3\x8fa\x8e\xdc\xcc\xb5\x05\x83?3\xf1\x9c\'\x84J\xd8\x04\x12\x9f\x05\x00\x00\x00\x83\xd8\xaa\xb4\xaa\x871Ojc\\Ox\xcc\xa0e\xb3\x86\v\x83\x84\x9c\v\xb9\x92\f\xb9\x82\xeb\x1bXA7y\xb4\x18g\xec\xe7\xd9h\xf2U\x83e\xba\xfe\x80\xbe\x92\xb5\xe2 !@\v\xe8\xc0\x9f\xaf\xcc\xc6\\\xa3^#\xccZ\x19\'OPH&s\x94\x91\x03\xf6\xd6\xa3$\x02\xf8^f\f`', 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x8}, 0x8) fchdir(r4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006800010025bd7000feffffff0a0000000000000010000300"], 0x38}}, 0x40040d0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1m50.684321665s ago: executing program 4 (id=5186): mmap(&(0x7f00008c8000/0x4000)=nil, 0x4000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x8, [0x2, 0x200, 0x4, 0x147, 0x40, 0x7, 0x4, 0xa35]}, &(0x7f00000001c0)=0x14) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002b00)=[{{&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000980)=""/86, 0x56}, 0x1ff}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000002c00)=""/4105, 0x1009}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000600)=""/47, 0x2f}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x4, &(0x7f0000000400)=""/48, 0x30}, 0xfffffff3}, {{&(0x7f0000000780)=@nl, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000700)=""/23, 0x17}, {&(0x7f00000005c0)=""/10, 0xa}], 0x3, &(0x7f0000002a40)=""/153, 0x99}, 0x2}], 0x3, 0x2001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) socket$inet6(0xa, 0xa, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe", @ANYRES64=0x0], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{0x20002, 0x8}, {0x0}, &(0x7f0000002bc0)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x0, 0x3}}], 0x48}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) 1m47.580101937s ago: executing program 4 (id=5200): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@nested_load_code={0x12e, 0x78, {0x1, "43d9ea66b84f008ed048b81b56a489f1847f670f23c80f21f8350000f0000f23f867660f3882253dffffff66bad004b000ee430f07460fc7aa0700000048b8dd000000000000000f23d80f21f835800000100f23f8b92b0900000f320f76530f"}}, @cpuid={0x64, 0x18, {0x9, 0x539}}, @out_dx={0x6a, 0x28, {0x5591, 0x3, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}], 0xd0}) write(r0, &(0x7f0000000140), 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x8, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000001c0)) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000200), 0xe0000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@mcast2, @loopback, 0x1b, 0xc}}) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f00000002c0)=0x1, 0x4) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r3, &(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @pic={0x36, 0x6, 0x5, 0x80, 0xfc, 0x26, 0x16, 0x3, 0x7, 0x2, 0x4, 0xe6, 0x99, 0x62, 0x5, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {r5, r6}}, '.\x00'}) io_uring_setup(0x4489, &(0x7f00000006c0)={0x0, 0x153a, 0x20, 0x2, 0x3e4, 0x0, r4}) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000740)=""/194) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f0000000840)=0xa84d) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000005, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x110, &(0x7f0000000880)=0x6, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000004d40)={0x0, 0x0}) recvmmsg(r10, &(0x7f0000004c80)=[{{&(0x7f0000000900)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f0000000b40)=""/148, 0x94}, {&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)=""/177, 0xb1}, {&(0x7f0000000d80)=""/105, 0x69}, {&(0x7f0000000e00)=""/196, 0xc4}, {&(0x7f0000000f00)=""/212, 0xd4}], 0x8, &(0x7f0000001080)=""/45, 0x2d}, 0x8}, {{&(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003540)=[{&(0x7f0000001140)=""/13, 0xd}, {&(0x7f0000001180)=""/118, 0x76}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/222, 0xde}, {&(0x7f0000003380)=""/163, 0xa3}, {&(0x7f0000003440)=""/18, 0x12}, {&(0x7f0000003480)=""/181, 0xb5}], 0x9, &(0x7f0000003600)=""/89, 0x59}, 0xf}, {{&(0x7f0000003680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003700)=""/78, 0x4e}, {&(0x7f0000003780)}, {&(0x7f00000037c0)=""/226, 0xe2}, {&(0x7f00000038c0)=""/78, 0x4e}, {&(0x7f0000003940)=""/64, 0x40}, {&(0x7f0000003980)=""/67, 0x43}, {&(0x7f0000003a00)=""/19, 0x13}, {&(0x7f0000003a40)=""/76, 0x4c}, {&(0x7f0000003ac0)=""/81, 0x51}, {&(0x7f0000003b40)=""/85, 0x55}], 0xa, &(0x7f0000003c80)=""/4096, 0x1000}, 0x9}], 0x3, 0x2120, &(0x7f0000004d80)={r11, r12+60000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004dc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000004fc0)={{r2}, r14, 0x18, @unused=[0x5, 0x7, 0xfffffffffffffff9, 0x7], @subvolid=0x5}) r15 = syz_genetlink_get_family_id$team(&(0x7f0000006000), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000006100)={'syztnl2\x00', &(0x7f0000006040)={'sit0\x00', 0x0, 0x1, 0x8, 0x40, 0xffffffff, {{0x1e, 0x4, 0x1, 0x19, 0x78, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xb, 0xcb, [@loopback, @multicast2]}, @noop, @cipso={0x86, 0x24, 0x2, [{0x7, 0xc, "dbf57f68f990969c8554"}, {0x7, 0x7, "23dbac160e"}, {0x7, 0xb, "bfb85c03b41a4ab737"}]}, @timestamp_addr={0x44, 0x24, 0x68, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}, {@multicast2, 0x7}, {@local, 0x80000000}, {@rand_addr=0x64010100, 0x7fffffff}]}, @noop, @rr={0x7, 0x7, 0xce, [@local]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) getsockname$packet(r4, &(0x7f0000006140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006180)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r13, &(0x7f0000006700)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000066c0)={&(0x7f0000006480)={0x240, r15, 0x524, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x24001000}, 0x0) 1m47.320462738s ago: executing program 4 (id=5202): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000500000000000000000000000000000000000000000000000000ffffff90000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1m46.715027235s ago: executing program 32 (id=5202): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f00000000000000500000000000000000000000000000000000000000000000000ffffff90000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 10.144068614s ago: executing program 3 (id=5561): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$input_event(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x122) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@delqdisc={0x244, 0x25, 0xb20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {0x7, 0xfff3}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x118, 0x2, {{0x2, [0xc, 0xd, 0x2, 0xd, 0x0, 0x9, 0x1, 0xc, 0xd, 0x0, 0x9, 0x6, 0x6, 0x9, 0x7, 0xc], 0x1, [0x7, 0x8, 0x5, 0x1, 0x8, 0x3, 0x5a6, 0xb2, 0x8, 0x9, 0x800, 0x2, 0x40, 0xfb, 0xfffd, 0x6], [0xb, 0x6, 0xa, 0x4010, 0x2, 0x3, 0x223, 0xff, 0x9, 0x6, 0x2, 0xf2, 0x5, 0x81, 0x7]}, [@TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xffffffffffff8139}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0xb1e2}, {0xc, 0x3, 0x101}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x800}, {0xc, 0x3, 0x8001}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0x80}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x9}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}, @qdisc_kind_options=@q_htb={{0x8}, {0x3c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x166aeb0b}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x80}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x200, 0x1}}]}}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x1000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x80000000}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xe, 0x1, 0xe7, 0x1, 0x4, 0x8, 0x2}}, {0x8, 0x2, [0x1, 0x2]}}]}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x7f, 0xfefe, 0x0, 0x0, 0x5, 0x1ff, 0x4}}, {0xc, 0x2, [0x7b98, 0x5, 0x7, 0x5]}}, {{0x1c, 0x1, {0x0, 0x2, 0xffff, 0x9, 0x2, 0x5, 0x2, 0x1}}, {0x6, 0x2, [0x7f]}}]}]}, 0x244}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9}, {0x9, 0x3d9b}]}, 0x18, 0x1) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd07e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.860919444s ago: executing program 3 (id=5566): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010001fff00000000fedbdf2500200000", @ANYRES32=0x0, @ANYBLOB="81fdffff000000003c0012800b00010067656e65766500002c0002801400070000000000000000000000000000000001050009000100000008000b4000000009040006"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="48ed8ddd389dc99ef0a09e77e70d29e196dea855c8d3154d3d1dc2c23240b64c6056b1ec58b696e5877a6806237f2cfc68d6a6474bc04d186324841e0038c8c5084329b99e5c05d8e110b339d07f4f86f385a3fda7a16c4878ee90e969aeeea003652b9d1c6373807fb232c0d31c5a6978220dcd9ff5a0c2b6ebac9846cacdc3ee8f2af641468bde7f8e4a6a1042f3a79a9dd6ec3a0e3db02566718f282037a05b149d8ab7f0ec02241d873b", 0xac}], 0x1, 0xff, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r0, 0xc01064c5, &(0x7f00000001c0)={0x0}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xc0, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x94, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_virt_wifi\x00'}, @TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x9, 0x7, 0x3e, 0x800}, {0x9, 0x10, 0x5, 0x1}, {0x40, 0x80000001, 0xfffffffe, 0xffffffff}, {0x1, 0x5, 0x5127, 0x10001}]}}]}}]}, 0xc0}}, 0x24040084) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000040)=0x43) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x0, r10}, 0x10) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000240)=0x201802, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x1, r10, 0x0, r7}, 0x10) r12 = socket(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x400000000000235, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) 7.633740909s ago: executing program 1 (id=5570): epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r2, &(0x7f0000000700)=""/115, 0x73, 0x5) r3 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x1, 0x8, 0xe, 0x101, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x67, 0x0, 0x76, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}}}}}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x8, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000002300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_emit_ethernet(0xbe, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001400000000"], 0x38, 0x40044}}], 0x1, 0x4) syz_open_procfs(r10, &(0x7f0000000000)='attr/fscreate\x00') r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @loopback, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x110022, r14}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r2) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x529d1, 0x4240}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xffffba4f, 0x1}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) 6.868428972s ago: executing program 1 (id=5574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6, 0x2c, r4}, 0x10) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6000009, 0x11, r4, 0x100000000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000080)={@remote, r7}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) (async) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r10, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]}) (async) socket(0x840000000002, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01", @ANYRESOCT=r4, @ANYRES32=r10], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) 5.787997412s ago: executing program 2 (id=5579): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xbb, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"8697acf4", 0xb, 0x9, 0x0, 0x2, 0x1000006, 'U\x00', "1575a859", "0725eade", "f9fffff7", ["aabe8459c62224475593e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1", "00002ff59c7e1000"]}) 5.739450675s ago: executing program 3 (id=5580): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x2) 5.620148253s ago: executing program 2 (id=5581): socket$nl_route(0x10, 0x3, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x88ad, 0x0, 0x2, 0x40001333}, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001080)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xf992, {0x7, 0x2b, 0x4, 0x20000000, 0x23, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x40, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x18, 0xfffffffffffffffe, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0xb8, 0x0, 0x1, [{0x0, 0x46b7, 0x1, 0x4, '\x00'}, {0x5, 0x2, 0x1, 0x8, '\x00'}, {0x2, 0xcf8, 0x1, 0x50, 'u'}, {0x4, 0x7ff, 0x5, 0xa715, 'fuse\x00'}, {0x5, 0xfffffffffffffc00, 0xa, 0x5, '/dev/fuse\x00'}]}, &(0x7f0000000bc0)={0x150, 0x0, 0xd7, [{{0x4, 0x3, 0x9, 0x43c1, 0xb9, 0x430, {0x0, 0x7, 0xc5, 0x8, 0x2, 0x6, 0x3, 0xfffffffc, 0x3, 0x4000, 0xa44, r5, r6, 0x1, 0x7}}, {0x2, 0x4, 0x1, 0x4, '\x95'}}, {{0x1, 0x2, 0x7fffffff, 0x4, 0x8, 0x7, {0x5, 0x7fff, 0x1ff, 0x6a9, 0x1, 0x800, 0x57, 0x1f, 0xfffffbff, 0xc000, 0x10001, r5, 0x0, 0x0, 0x3}}, {0x1, 0x400, 0x2, 0x5, 'o['}}]}, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x5, {0x8, 0x0, 0x2, 0x8}}, 0x0}) dup3(r3, r7, 0x6700000000000000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xec) 5.618230559s ago: executing program 1 (id=5582): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) (async) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78, 0x0, r1, {0x3, 0x1, 0x0, {0x0, 0x2, 0x1, 0x5, 0xa37, 0x80000001, 0x1, 0x6, 0x3ff, 0x4000, 0x9, r2, r3, 0x8, 0xa60}}}, 0x78) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000200)='m', 0x1) (async, rerun: 64) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000003c0)=@v2={0x2, @adiantum, 0xb, '\x00', @d}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, 0x0) (rerun: 64) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000080)) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000200)=0x4) 5.297937036s ago: executing program 3 (id=5584): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) fanotify_init(0x4, 0x400) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup3(r10, r11, 0x80000) r13 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x80, 0x2, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r12, 0x0}) write$6lowpan_control(r12, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x7d, &(0x7f0000000400)=@assoc_value, &(0x7f0000000100)=0xffdd) 5.245280065s ago: executing program 2 (id=5585): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x42, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0xb, 0x4, 0x0, 0x400}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2042, 0xd7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_cmd={0x49, 0x10000, 0x4, 0x2, 0x5, 0x6, 0x6, 0x7, 0x7, 0x2, 0x6, 0x5d4c, 0x1, 0x2, 0x9, 0x0, [0x6, 0x4]}}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1b9) poll(&(0x7f0000000100)=[{r4, 0x804b}], 0x1, 0x3) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002400)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 4.699555168s ago: executing program 1 (id=5586): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_io_uring_setup(0x1244, &(0x7f0000000500)={0x0, 0xd5a5, 0x800, 0x2, 0xb8}, &(0x7f0000000400)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r7, 0x4b30, 0x8) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000002e22f66bc41255b8a56aac0040000701feffffff00000000017c0000040042800c00018006000600800a00000c0002800400148004002980"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 3.435697255s ago: executing program 0 (id=5588): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) fallocate(r1, 0x0, 0x460e, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x80108906, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x6}) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) (async) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) fallocate(r1, 0x0, 0x460e, 0x3) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCBRDELBR(r2, 0x80108906, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x6}) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) 3.328700859s ago: executing program 3 (id=5590): r0 = socket(0x3, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000006800010025bd7000feffffff0a000000000000000c000880080004007f000001060007000800000008000500", @ANYRES32=r1, @ANYBLOB="76941ddbc62db4545384785ddb327f400e5132af36cc696cba6fc1d7295b742eec974e1c832c49a3571bbf376ff0fddb9929"], 0x34}}, 0x40040d0) syz_usb_connect(0x5, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904000b2402010302057ff49bfd052406000105240000080624037f000109050602ff"], 0x0) 3.245370213s ago: executing program 0 (id=5591): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000440)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800480000340000000000069078ac141400ac1e0101070b0b8012c13be621c3ce0000010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780001"], 0x0) r3 = socket$inet(0x2b, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000002c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) syz_emit_ethernet(0x28, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa22bbbbbbbbbbbb88a8190081001b000805030e36a0865c1c021dc371b72229bb93b378610138b1b7af03d515cd43e47310d63da2adf9"], &(0x7f00000003c0)={0x0, 0x2, [0x7b3, 0xb5e, 0x5e0, 0xd1b]}) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x480, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES8=r1], 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x2242) lseek(r7, 0x952e, 0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) 3.176791704s ago: executing program 1 (id=5592): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7f, 0xffffffffffffffff, 0x80000}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000280)=""/50, 0x32}], 0x66, 0x5, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0) syz_usb_disconnect(r1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000fa0ca122bdd63ecf679467df91c09e8a722e34d7e484893f07be57c45fecf40ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e", 0x45}], 0x1) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62d01) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0) 3.141792274s ago: executing program 2 (id=5593): r0 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0]}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002080), 0x80000, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000600)={r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={r2, r3, r6, 0x7, 0x3, 0x0, 0x56ed, 0x92, 0x1, 0x2, 0x2, 0x4}) ftruncate(r0, 0x0) 3.139993993s ago: executing program 5 (id=5594): unshare(0x6a040000) r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x3, 0x980914, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x80010, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/3, 0x3}, {0x0}], 0x2}, 0x3}], 0x2, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0xffffffffffffff1f, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x4, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() fsopen(&(0x7f0000000280)='erofs\x00', 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000000c0)={{0x2, 0x4, 0x9}, 0x0, 0x100, 0x2, r3, 0x3, 0xff, 'syz0\x00', &(0x7f0000000040)=['/dev/video#\x00', 'net/snmp\x00', 'net/snmp\x00'], 0x1e}) r5 = syz_open_procfs(r3, &(0x7f0000000300)='net/snmp\x00') pread64(r5, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 3.048464869s ago: executing program 0 (id=5595): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc0405668, &(0x7f0000000000)={0x0, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000002000180600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000e16c1e7c15616"], 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000003c0)=0x10) 2.951830091s ago: executing program 2 (id=5596): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x10001, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18c) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, 0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x8000) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0xfffffff7, 0x1, 0x4, 0x4000, 0x9, {}, {0x2, 0x0, 0x6, 0x2e, 0x24, 0x1, "cac9dd50"}, 0x2, 0x4, {}, 0x6}) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0xa}, 0x10) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc}) semctl$SETALL(0x0, 0x0, 0x14, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153bdf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 2.480759191s ago: executing program 5 (id=5597): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x60) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000780)=""/140, 0x8c}, 0x800}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000003140)=""/237, 0xed}, {0x0}], 0x3, &(0x7f0000000900)=""/187, 0xbb}, 0x9}, {{&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001ac0)=""/118, 0x76}, {&(0x7f0000001b80)=""/192, 0xc0}, {&(0x7f00000009c0)=""/39, 0x27}, {&(0x7f0000001c40)=""/172, 0xac}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/42, 0x2a}, {&(0x7f0000002d40)=""/42, 0x2a}, {&(0x7f0000002d80)=""/130, 0x82}], 0x8, &(0x7f0000002ec0)=""/35, 0x23}, 0xd}, {{&(0x7f0000002f00)=@xdp, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f80)=""/249, 0xf9}], 0x1}, 0x40}, {{&(0x7f00000030c0)=@ax25={{}, [@remote, @bcast, @netrom, @bcast, @rose, @default, @remote, @netrom]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003d00)=""/4096, 0x1000}, {&(0x7f0000000040)=""/219, 0xdb}, {&(0x7f0000003240)=""/82, 0x52}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f0000003340)=""/134, 0x86}, {&(0x7f0000003400)=""/182, 0xb6}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/235, 0xeb}, {&(0x7f00000035c0)=""/254, 0xfe}, {&(0x7f00000036c0)=""/243, 0xf3}], 0xa, &(0x7f0000003880)=""/134, 0x86}, 0x4}, {{&(0x7f0000003940)=@l2, 0x80, &(0x7f0000003c00)=[{&(0x7f00000039c0)=""/34, 0x22}, {&(0x7f0000003a00)=""/63, 0x3f}, {&(0x7f0000003a40)=""/182, 0xb6}, {&(0x7f0000003b00)=""/254, 0xfe}], 0x4, &(0x7f0000005d00)=""/212, 0xd4}, 0x7}, {{&(0x7f0000003c40)=@ethernet, 0x80, &(0x7f0000007100)=[{&(0x7f0000005e00)=""/23, 0x17}, {&(0x7f0000005e40)=""/53, 0x35}, {&(0x7f0000005e80)=""/90, 0x5a}, {&(0x7f0000005f00)=""/222, 0xde}, {&(0x7f0000006000)=""/105, 0x69}, {&(0x7f0000006080)=""/51, 0x33}, {&(0x7f0000007680)=""/4096, 0x1000}, {&(0x7f00000070c0)=""/48, 0x30}], 0x8, &(0x7f0000007180)=""/94, 0x5e}, 0x3}, {{0x0, 0x0, &(0x7f00000073c0)=[{&(0x7f0000007200)=""/210, 0xd2}, {&(0x7f0000007300)=""/129, 0x81}], 0x2, &(0x7f0000007400)=""/102, 0x66}, 0x8}], 0x8, 0x143, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8090) r9 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) poll(&(0x7f0000000380)=[{r10}], 0x1, 0x20000080) ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000080)={r12, 0x3}, &(0x7f00000000c0)=0x8) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800, 0x0) openat$cgroup_ro(r13, &(0x7f0000000840)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440100001a00ffff2abd7040030000000a010101000000000000000000000000ac14142f000000000000000000000000000000004e240000000020a011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe3e4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000) 2.180593527s ago: executing program 5 (id=5598): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000050000000000000000000000000000000000000000000000000000000000030000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) 1.988482125s ago: executing program 0 (id=5599): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001002aaaaaaaaa00000008000400f2"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000002400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 1.522412872s ago: executing program 5 (id=5600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66b831008ee80ca4f08380000000009c66ba2000b008eec462919c630045fb66b824008ee08f69789698136000002e0f01c266baa100ec", 0x37}], 0x1, 0x11, 0x0, 0xfffffffffffffdcb) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r9 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r9, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.471565201s ago: executing program 0 (id=5601): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat2(r1, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x600440, 0x46, 0x2}, 0x18) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '\'#*#,\\:*}:'}, {0x20, '('}, {0x20, ']$,{'}, {}, {}, {0x20, '@}\'.@'}, {0x20, ',\\('}], 0xa, "571a44b49090e584e851f1bd331b6eea01"}, 0x3a) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000100)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x620000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r2, 0x738}, {r3, 0x3080}, {r2}, {r2, 0x100}, {r4}, {r2, 0x4040}], 0x6, &(0x7f0000000200)={r5, r6+60000000}, &(0x7f0000000240)={[0x4]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) r7 = syz_clone(0x400, &(0x7f00000002c0)="b4d3d6b0afe3ea2c6d76d13afd9df55af86f4c13cf924fa6d6cdd20c167f53b894c9cee068a081e1de580d67a2b6a7cbfbbc8d7088446a278128b17d2016da21bd4fb8d2e57c7c22df615c97259ee387741ef786ab9e578ccac01bc14fd8e43cd91e1e6c4a2f002eb2a8d4893123a135c356b41446461cd9a33280b5d8162195b83cd52d591036078f6d0606785e52a49b08c89a190b79efc3d55a7b1bae63aa337a0241682a1240bc6b20ff6e0fecca3e2ee5cea1eff2b15b87c2ee8290c97ccd0ec093f283896ee3351894b9b73be27a34a87e7e9dc68bbf802c53401f248d60592fb843cc6af5c6313d2b8a6a277a5276", 0xf2, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="d5f891771a424d1b57a61cda816f652afa050035081a9644e1d4cc34893cb6d857ef72d73db0888a36a8cba4ffcff9df5fd0b480b7e45fb90bfa167b9fdc46b1ad159c0a0ad5286ef22bb58d4d26a3bc95e3ff2e4e5fa3a88384170bc82acce328c90314725d9b68c5fc4b5f4d20dfc47fd4fa9934b0f95ad6a1d6fab7cdcdfc617b0b7d8e0d9e14d15de7ca08114ecd15b7559bdb98aeaa26531ebb34fba0a73f0632149c0ba29df7d3d329dab7b5585a1696a52742e8503e1436850f45") sched_getattr(r7, &(0x7f0000000500)={0x38}, 0x38, 0x0) ioprio_get$pid(0x2, r7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) r8 = socket$packet(0x11, 0x0, 0x300) recvmmsg(r8, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/59, 0x3b}], 0x1, &(0x7f0000000680)=""/122, 0x7a}, 0x8000}, {{&(0x7f0000000700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/175, 0xaf}], 0x3, &(0x7f00000009c0)=""/220, 0xdc}, 0x8}, {{&(0x7f0000000ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/44, 0x2c}, {&(0x7f0000000b80)=""/38, 0x26}], 0x2, &(0x7f0000000c00)=""/186, 0xba}, 0x3}, {{&(0x7f0000000cc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/129, 0x81}, {&(0x7f0000000e00)=""/95, 0x5f}], 0x2}, 0x81}], 0x4, 0x40000000, &(0x7f0000000fc0)={0x0, 0x3938700}) r9 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0, r9) futex(&(0x7f0000001100)=0x1, 0x6, 0x0, &(0x7f0000001140)={0x0, 0x3938700}, &(0x7f0000001180)=0x2, 0x2) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x68011, r1, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x0, &(0x7f00000011c0)=0x7, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r11, 0xc0505510, &(0x7f0000001400)={0xe95e, 0x7, 0x6, 0x3, &(0x7f0000001240)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000001480)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000014c0)={0x7, [0x5, 0x200, 0x7, 0x2, 0x5b, 0x200, 0xad4]}, &(0x7f0000001500)=0x12) recvmmsg(r1, &(0x7f0000007440)=[{{&(0x7f0000001540)=@alg, 0x80, &(0x7f0000002600)=[{&(0x7f00000015c0)=""/33, 0x21}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x2, &(0x7f0000002640)=""/85, 0x55}, 0xd}, {{&(0x7f00000026c0)=@caif=@dgm, 0x80, &(0x7f00000038c0)=[{&(0x7f0000002740)=""/165, 0xa5}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/103, 0x67}], 0x4, &(0x7f0000003900)=""/102, 0x66}, 0xffff}, {{&(0x7f0000003980)=@x25, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/153, 0x99}], 0x1}, 0x1}, {{&(0x7f0000003b00)=@ax25={{}, [@null, @remote, @bcast, @rose, @remote, @bcast, @default, @netrom]}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003b80)=""/54, 0x36}, {&(0x7f0000003bc0)=""/215, 0xd7}, {&(0x7f0000003cc0)=""/157, 0x9d}, {&(0x7f0000003d80)=""/254, 0xfe}, {&(0x7f0000003e80)=""/220, 0xdc}, {&(0x7f0000003f80)=""/19, 0x13}, {&(0x7f0000003fc0)=""/4, 0x4}], 0x7, &(0x7f0000004080)=""/14, 0xe}, 0xa}, {{&(0x7f00000040c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004140)=""/73, 0x49}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/96, 0x60}, {&(0x7f0000005240)=""/245, 0xf5}], 0x4, &(0x7f0000005380)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000006380)=@qipcrtr, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006400)=""/139, 0x8b}, {&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/175, 0xaf}, {&(0x7f0000006640)=""/117, 0x75}, {&(0x7f00000066c0)=""/240, 0xf0}, {&(0x7f00000067c0)=""/227, 0xe3}, {&(0x7f00000068c0)=""/223, 0xdf}], 0x7}, 0x8}, {{&(0x7f0000006a40)=@can, 0x80, &(0x7f0000006d40)=[{&(0x7f0000006ac0)=""/243, 0xf3}, {&(0x7f0000006bc0)=""/149, 0x95}, {&(0x7f0000006c80)=""/157, 0x9d}], 0x3}, 0xca}, {{&(0x7f0000006d80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006e00)=""/116, 0x74}, {&(0x7f0000006e80)=""/229, 0xe5}, {&(0x7f0000006f80)=""/191, 0xbf}], 0x3, &(0x7f0000007080)=""/39, 0x27}}, {{&(0x7f00000070c0)=@caif=@rfm, 0x80, &(0x7f0000007340)=[{&(0x7f0000007140)=""/6, 0x6}, {&(0x7f0000007180)=""/247, 0xf7}, {&(0x7f0000007280)=""/140, 0x8c}], 0x3, &(0x7f0000007380)=""/185, 0xb9}, 0x1000}], 0x9, 0x40000000, &(0x7f0000007680)) r12 = add_key$user(&(0x7f00000076c0), &(0x7f0000007700)={'syz', 0x3}, &(0x7f0000007740)="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", 0x1000, r9) r13 = add_key$keyring(&(0x7f00000087c0), &(0x7f0000008800)={'syz', 0x1}, 0x0, 0x0, r9) keyctl$search(0xa, r12, &(0x7f0000008740)='syzkaller\x00', &(0x7f0000008780)={'syz', 0x0}, r13) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008880), r0) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f00000089c0)={&(0x7f0000008840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000008980)={&(0x7f0000008900)={0x80, r14, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xea, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.420498712s ago: executing program 3 (id=5602): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf, 0x0, &(0x7f0000000480)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x88) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) unshare(0x66020000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f00000005c0)=[@nested_load_code={0x12e, 0x65, {0x3, "66baa10066b8080066ef0f0926650f01cbc4e3356ff2c440fe03420f01c56466420f5d55b3c403157a5e02dc66baf80cb880c08680ef66bafc0cb800800000ef440f20c03507000000440f22c0"}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x5a, {"f30fc7b608000000660f0d06670fc7610066baf80cb834c15b8cef66bafc0c66ed0f01c4f3460f09b918090000b8ba000000ba000000000f30f2440db6000000b8010000000f01d9a5"}}, @uexit={0x0, 0x18, 0x10000}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x107}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000380)=0x3) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x1ff, r1, 'id0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x10, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000000040)=""/47, 0x2f}], 0x2, &(0x7f00000004c0)=""/205, 0xcd}, 0x6}], 0x1, 0x10002, 0x0) 1.118437864s ago: executing program 5 (id=5603): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) timer_create(0x3, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x301}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_gettime(0x0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x301}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) timer_gettime(0x0, &(0x7f0000000140)) (async) 1.05243927s ago: executing program 0 (id=5604): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000002140)='./file0\x00', 0x3) r1 = syz_usb_connect(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="120133b20090492f21b9a4fbbac90200e70001094300"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 820.801147ms ago: executing program 5 (id=5605): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000800)={0x4, @output={0x0, 0x0, {0x8, 0x7}, 0x9}}) syz_usb_control_io(r0, 0x0, 0x0) 273.114757ms ago: executing program 2 (id=5606): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x9) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) pread64(r10, &(0x7f0000000480)=""/209, 0xd1, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) 0s ago: executing program 1 (id=5607): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_macvtap\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x401, 0x25, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, 0x23f63ef5816d2e48, 0x80, 0x5}}) kernel console output (not intermixed with test programs): 71.640306][T11347] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1371.677543][T11347] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1371.718469][T11347] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1371.760405][T11339] i2c i2c-3: ec100: i2c rd failed=-110 reg=33 [ 1371.787714][T11347] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1371.806300][T11347] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1371.868042][T11347] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1371.919174][T11347] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1371.957250][T11347] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1372.020379][T11347] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1372.100010][T11347] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1372.129890][T11347] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1372.228885][ T6553] usb 4-1: Failed to submit usb control message: -110 [ 1372.237050][T11347] usb 5-1: string descriptor 0 read error: -22 [ 1372.243785][T11347] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1372.249258][ T6553] usb 4-1: unable to send the bmi data to the device: -110 [ 1372.272981][ T6553] usb 4-1: unable to get target info from device [ 1372.281809][T11347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.291932][ T6553] usb 4-1: could not get target info (-110) [ 1372.324394][ T6553] usb 4-1: could not probe fw (-110) [ 1372.375050][T11347] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1372.927027][T16889] usb 5-1: USB disconnect, device number 120 [ 1373.095950][T11339] usb 4-1: USB disconnect, device number 32 [ 1373.409731][T25889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.428005][T25889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.515158][T11339] usb 3-1: USB disconnect, device number 106 [ 1373.720206][T16889] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1373.877296][T16889] usb 4-1: device descriptor read/64, error -71 [ 1374.427141][T16889] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1374.867686][T11347] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1374.937727][T16889] usb 4-1: device descriptor read/64, error -71 [ 1375.056899][T11347] usb 3-1: Using ep0 maxpacket: 32 [ 1375.071258][T16889] usb usb4-port1: attempt power cycle [ 1375.082367][T11347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.124308][T11347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.172671][T11347] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1375.209485][T11347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.249727][T11347] usb 3-1: config 0 descriptor?? [ 1375.303089][T11347] hub 3-1:0.0: USB hub found [ 1375.449761][T16889] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1375.477344][T16889] usb 4-1: device descriptor read/8, error -71 [ 1375.505124][T11347] hub 3-1:0.0: 1 port detected [ 1375.766953][T16889] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1375.797802][T16889] usb 4-1: device descriptor read/8, error -71 [ 1375.869321][T25912] dvmrp1: tun_chr_ioctl cmd 35108 [ 1375.908791][T16889] usb usb4-port1: unable to enumerate USB device [ 1375.919352][T25915] QAT: failed to copy from user cfg_data. [ 1375.988138][T25919] fuse: Unknown parameter 'Fd' [ 1376.216909][T16889] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1376.327921][T25923] vivid-000: disconnect [ 1376.336729][T25921] vivid-000: reconnect [ 1376.386918][T16889] usb 5-1: Using ep0 maxpacket: 32 [ 1376.405102][T16889] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1376.436174][T16889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.505634][T16889] usb 5-1: Product: syz [ 1376.518035][T16889] usb 5-1: Manufacturer: syz [ 1376.523304][T16889] usb 5-1: SerialNumber: syz [ 1376.531182][T16889] usb 5-1: config 0 descriptor?? [ 1376.545240][T16889] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1376.758451][T25909] loop2: detected capacity change from 0 to 7 [ 1376.777826][T22813] Dev loop2: unable to read RDB block 7 [ 1376.801400][T22813] loop2: unable to read partition table [ 1376.876275][T24054] usb 3-1: USB disconnect, device number 107 [ 1376.891510][T22813] loop2: partition table beyond EOD, truncated [ 1376.906097][T25909] Dev loop2: unable to read RDB block 7 [ 1376.912582][T25909] loop2: unable to read partition table [ 1376.976936][T25909] loop2: partition table beyond EOD, truncated [ 1377.067743][T16889] gspca_stk1135: reg_w 0x2 err -110 [ 1377.077750][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.087579][T16889] gspca_stk1135: Sensor write failed [ 1377.093182][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.101787][T25909] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1377.126764][T16889] gspca_stk1135: Sensor write failed [ 1377.146126][T25934] netlink: 'syz.3.5178': attribute type 4 has an invalid length. [ 1377.147095][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.179061][T16889] gspca_stk1135: Sensor read failed [ 1377.205906][T25934] netlink: 'syz.3.5178': attribute type 4 has an invalid length. [ 1377.206306][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.237104][T16889] gspca_stk1135: Sensor read failed [ 1377.243758][T16889] gspca_stk1135: Detected sensor type unknown (0x0) [ 1377.266239][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.365342][T16889] gspca_stk1135: Sensor read failed [ 1377.365367][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.365375][T16889] gspca_stk1135: Sensor read failed [ 1377.365390][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.365396][T16889] gspca_stk1135: Sensor write failed [ 1377.365410][T16889] gspca_stk1135: serial bus timeout: status=0x00 [ 1377.365416][T16889] gspca_stk1135: Sensor write failed [ 1377.365472][T16889] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 1377.387413][T16889] usb 5-1: USB disconnect, device number 121 [ 1377.632400][T25947] loop9: detected capacity change from 0 to 7 [ 1377.633383][T25947] Dev loop9: unable to read RDB block 7 [ 1377.633427][T25947] loop9: unable to read partition table [ 1377.633642][T25947] loop9: partition table beyond EOD, truncated [ 1377.633665][T25947] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1377.969968][T25957] netlink: 'syz.4.5183': attribute type 3 has an invalid length. [ 1378.391424][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1378.391444][ T30] audit: type=1326 audit(1764398321.753:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f18f749 code=0x7ffc0000 [ 1378.576535][ T30] audit: type=1326 audit(1764398321.753:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f7b1f18f749 code=0x7ffc0000 [ 1378.659374][ T30] audit: type=1326 audit(1764398321.753:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f18f749 code=0x7ffc0000 [ 1378.743890][ T30] audit: type=1326 audit(1764398321.753:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25958 comm="syz.3.5184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1f18f749 code=0x7ffc0000 [ 1379.624543][T25980] tipc: Started in network mode [ 1379.630208][T25980] tipc: Node identity 7a383f32cf73, cluster identity 4711 [ 1379.638247][T25980] tipc: Enabled bearer , priority 0 [ 1379.650573][T25979] syzkaller0: entered promiscuous mode [ 1379.661589][T25979] syzkaller0: entered allmulticast mode [ 1379.718187][T25979] tipc: Resetting bearer [ 1379.731416][T25977] tipc: Resetting bearer [ 1379.764325][T25977] tipc: Disabling bearer [ 1379.950201][T25990] kAFS: unable to lookup cell '(,' [ 1380.036743][T24054] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1380.189205][T24054] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1380.199357][T24054] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1380.221990][T24054] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1380.233202][T24054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1380.246912][T24054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1380.265846][T24054] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1380.286016][T24054] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1380.294708][T24054] usb 3-1: Product: syz [ 1380.299618][T24054] usb 3-1: Manufacturer: syz [ 1380.324818][T24054] cdc_wdm 3-1:1.0: skipping garbage [ 1380.334220][T24054] cdc_wdm 3-1:1.0: skipping garbage [ 1380.346010][T24054] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1380.353540][T24054] cdc_wdm 3-1:1.0: Unknown control protocol [ 1380.524145][T25986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.585687][T25986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.814177][T25991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.814973][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.829645][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.836843][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.843473][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.849835][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.856441][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.863019][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.869707][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.876199][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.882909][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.889479][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.896120][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.902627][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.904853][T25991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.909259][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.924480][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.931114][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.937696][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.944579][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.952422][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1380.959070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1380.966203][T24054] usb 3-1: USB disconnect, device number 108 [ 1382.309994][T26008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5199'. [ 1382.842513][ T6553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.890867][ T6553] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.991645][T26015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1383.020928][T26015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5203'. [ 1383.250112][ T6553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1383.273082][T26021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5205'. [ 1383.277628][ T6553] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.463754][T26028] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5206'. [ 1383.733114][ T6553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1383.803262][ T6553] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.094985][ T6553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.236431][ T6553] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.308922][T19686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1384.321436][T19686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1384.331751][T19686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1384.339991][T19686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1384.347907][T19686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1384.452731][T26040] syzkaller1: entered promiscuous mode [ 1384.458724][T26040] syzkaller1: entered allmulticast mode [ 1386.427297][T19686] Bluetooth: hci1: command tx timeout [ 1386.436404][ T30] audit: type=1326 audit(1764398329.883:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26063 comm="syz.2.5213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x0 [ 1386.649660][ T6553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.663305][ T6553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.674874][ T6553] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1386.689170][ T6553] bond0 (unregistering): Released all slaves [ 1386.727593][T26067] tipc: Started in network mode [ 1386.734622][T26067] tipc: Node identity 6eb8962e73ca, cluster identity 4711 [ 1386.747014][T26067] tipc: Enabled bearer , priority 0 [ 1386.760034][ T6553] : left promiscuous mode [ 1386.777653][T26068] syzkaller0: entered promiscuous mode [ 1386.783478][T26068] syzkaller0: entered allmulticast mode [ 1386.798519][T26071] tipc: Resetting bearer [ 1386.916961][T26063] tipc: Resetting bearer [ 1386.962975][T26063] tipc: Disabling bearer [ 1386.996894][ T6553] tipc: Disabling bearer [ 1387.004732][ T6553] tipc: Left network mode [ 1387.665117][T26041] chnl_net:caif_netlink_parms(): no params data found [ 1387.877169][ T6553] hsr_slave_0: left promiscuous mode [ 1387.913792][ T6553] hsr_slave_1: left promiscuous mode [ 1387.935433][ T6553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.963334][ T6553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.043415][ T6553] veth1_macvtap: left promiscuous mode [ 1388.057161][ T6553] veth0_macvtap: left promiscuous mode [ 1388.069859][ T6553] veth1_vlan: left promiscuous mode [ 1388.257712][T26116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5221'. [ 1388.286057][T26116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5221'. [ 1388.296047][T26116] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 1388.304593][T26116] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 1388.315119][T26116] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 1388.383769][T26116] input: syz1 as /devices/virtual/input/input198 [ 1388.468259][T19686] Bluetooth: hci1: command tx timeout [ 1389.226796][ T30] audit: type=1326 audit(1764398332.653:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26101 comm="syz.0.5219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac49b8f749 code=0x0 [ 1390.570303][T19686] Bluetooth: hci1: command tx timeout [ 1391.520257][T26135] syzkaller1: entered promiscuous mode [ 1391.526412][T26135] syzkaller1: entered allmulticast mode [ 1391.777272][T26041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.809902][T26041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.845916][T26041] bridge_slave_0: entered allmulticast mode [ 1391.855542][T26041] bridge_slave_0: entered promiscuous mode [ 1391.879401][T26041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.887761][T26041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.895993][T26041] bridge_slave_1: entered allmulticast mode [ 1391.904747][T26041] bridge_slave_1: entered promiscuous mode [ 1392.037482][T26041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.057526][T26041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.186333][ T6553] IPVS: stop unused estimator thread 0... [ 1392.208869][T26041] team0: Port device team_slave_0 added [ 1392.219472][T26041] team0: Port device team_slave_1 added [ 1392.484344][T26162] syzkaller1: entered promiscuous mode [ 1392.493442][T26162] syzkaller1: entered allmulticast mode [ 1392.567420][T26041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.583060][T26041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.660723][T19686] Bluetooth: hci1: command tx timeout [ 1392.687448][T26041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.732269][T26041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.747131][T26041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.805964][T26041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.985179][T26041] hsr_slave_0: entered promiscuous mode [ 1393.013557][T26041] hsr_slave_1: entered promiscuous mode [ 1393.649753][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'. [ 1393.701492][T26176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5232'. [ 1393.885942][T26173] openvswitch: netlink: Key type 5638 is out of range max 32 [ 1394.316898][T16889] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1394.459807][T26041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1394.514629][T16889] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x82 has invalid maxpacket 8 [ 1394.538135][T26041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1394.553737][T16889] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1394.588532][T26041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1394.601566][T16889] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1394.624693][T16889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.647736][T16889] usb 4-1: Product: п [ 1394.657147][T26041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1394.671248][T16889] usb 4-1: Manufacturer: В [ 1394.702270][T16889] usb 4-1: SerialNumber: syz [ 1394.744795][T26175] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1394.891714][T26041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.941161][T26041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.974273][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.981701][ T6558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.991251][T26208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5236'. [ 1395.033156][T21133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.040622][T21133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.259470][T16889] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1395.284643][T16889] usb 4-1: USB disconnect, device number 37 [ 1395.317022][T11360] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1395.450985][T26214] loop5: detected capacity change from 0 to 7 [ 1395.461958][T26041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.474913][ C0] blk_print_req_error: 10 callbacks suppressed [ 1395.474932][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.490629][ C0] buffer_io_error: 7 callbacks suppressed [ 1395.490647][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.506461][T11360] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1395.509039][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.523756][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.524900][T11360] usb 3-1: not running at top speed; connect to a high speed hub [ 1395.545571][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.554898][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.563138][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.572477][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.586071][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.599559][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.608912][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.612145][T26041] veth0_vlan: entered promiscuous mode [ 1395.623982][T11360] usb 3-1: config 15 has an invalid interface number: 38 but max is 0 [ 1395.626040][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.641907][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.643730][T11360] usb 3-1: config 15 has no interface number 0 [ 1395.658855][T11360] usb 3-1: config 15 interface 38 has no altsetting 0 [ 1395.659246][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.668432][T11360] usb 3-1: New USB device found, idVendor=049f, idProduct=505a, bcdDevice=17.c9 [ 1395.675023][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.692230][T26214] ldm_validate_partition_table(): Disk read failed. [ 1395.705247][T26041] veth1_vlan: entered promiscuous mode [ 1395.711454][T11360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.721671][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.730931][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.747987][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.757367][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.759681][T11360] usb 3-1: Product: syz [ 1395.771616][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 1395.781861][T26214] Dev loop5: unable to read RDB block 0 [ 1395.785382][T11360] usb 3-1: Manufacturer: syz [ 1395.793368][T11360] usb 3-1: SerialNumber: syz [ 1395.793643][T26214] loop5: unable to read partition table [ 1395.799162][T26214] loop5: partition table beyond EOD, truncated [ 1395.799199][T26214] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1395.862583][T26041] veth0_macvtap: entered promiscuous mode [ 1395.890370][T26041] veth1_macvtap: entered promiscuous mode [ 1395.948575][T26041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.989326][T26041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.018645][T11824] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.030370][T11824] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.062266][T11824] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.076063][T11360] cdc_subset 3-1:15.38: probe with driver cdc_subset failed with error -22 [ 1396.086344][T11824] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.103411][T11360] usb 3-1: USB disconnect, device number 109 [ 1396.270029][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.283394][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.323041][T21133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.333112][T21133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.392848][T26225] kAFS: unable to lookup cell '(,' [ 1396.926234][T26234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1396.932777][T26236] random: crng reseeded on system resumption [ 1396.956848][T26234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1397.066461][T26234] netlink: 'syz.1.5239': attribute type 1 has an invalid length. [ 1397.125226][T26234] netlink: 'syz.1.5239': attribute type 1 has an invalid length. [ 1397.144327][T26234] netlink: 'syz.1.5239': attribute type 1 has an invalid length. [ 1397.170004][T26244] input: syz1 as /devices/virtual/input/input199 [ 1397.788660][T26249] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1398.208525][T26258] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5243'. [ 1398.418322][T26265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5244'. [ 1398.728335][T26272] openvswitch: netlink: Message has 12 unknown bytes. [ 1399.067814][T16889] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1399.226718][T16889] usb 3-1: Using ep0 maxpacket: 16 [ 1399.240770][T16889] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1399.250514][T16889] usb 3-1: config 252 has no interface number 0 [ 1399.260929][T16889] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1399.353438][T16889] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1399.720913][T16889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.748420][T16889] usb 3-1: Product: syz [ 1399.830331][T16889] usb 3-1: Manufacturer: syz [ 1399.850390][T26285] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1400.061651][T16889] usb 3-1: SerialNumber: syz [ 1400.267629][T26296] netlink: 182 bytes leftover after parsing attributes in process `syz.5.5252'. [ 1400.303997][T16889] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1400.559800][T26271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.568317][T11360] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1400.576928][T26271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.719948][T26308] binfmt_misc: register: failed to install interpreter file ./file0 [ 1400.737066][T11360] usb 6-1: Using ep0 maxpacket: 8 [ 1400.746083][T11360] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1400.767116][T11360] usb 6-1: config 9 has an invalid interface number: 5 but max is 1 [ 1400.917104][T11360] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.935966][T11360] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1400.951286][T11360] usb 6-1: config 9 has no interface number 0 [ 1400.971812][T11360] usb 6-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 1400.990823][T11360] usb 6-1: config 9 interface 5 has no altsetting 0 [ 1401.004159][T11360] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1401.014684][T11360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.023637][T11360] usb 6-1: Product: syz [ 1401.028759][T11360] usb 6-1: Manufacturer: syz [ 1401.034379][T11360] usb 6-1: SerialNumber: syz [ 1401.103325][T26321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1401.113208][T26321] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5260'. [ 1401.122595][T26321] netlink: 'syz.0.5260': attribute type 1 has an invalid length. [ 1401.130990][T26321] netlink: 'syz.0.5260': attribute type 1 has an invalid length. [ 1401.139474][T26321] netlink: 'syz.0.5260': attribute type 1 has an invalid length. [ 1401.254887][T26321] input: syz1 as /devices/virtual/input/input200 [ 1401.349341][T21133] usb 3-1: Failed to submit usb control message: -110 [ 1401.493041][T11360] usb 6-1: USB disconnect, device number 2 [ 1401.541220][T21133] usb 3-1: unable to send the bmi data to the device: -110 [ 1401.678313][T21133] usb 3-1: unable to get target info from device [ 1401.685486][T21133] usb 3-1: could not get target info (-110) [ 1401.694591][T21133] usb 3-1: could not probe fw (-110) [ 1402.356839][T26339] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1402.677458][T11348] usb 3-1: USB disconnect, device number 110 [ 1403.486999][T11348] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1403.799621][T11348] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1403.809561][T11348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.824267][T11348] usb 3-1: Product: syz [ 1403.830540][T11348] usb 3-1: Manufacturer: syz [ 1403.835321][T11348] usb 3-1: SerialNumber: syz [ 1403.857761][T11348] usb 3-1: config 0 descriptor?? [ 1404.085779][T26352] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5266'. [ 1404.686565][T11348] usb 3-1: Firmware version (0.0) predates our first public release. [ 1404.736044][T11348] usb 3-1: Please update to version 0.2 or newer [ 1404.957603][T11360] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1404.970368][T26369] vivid-000: disconnect [ 1404.979759][T11348] usb 3-1: USB disconnect, device number 111 [ 1405.103136][T26367] vivid-000: reconnect [ 1405.107809][T11360] usb 2-1: Using ep0 maxpacket: 32 [ 1405.118900][T11360] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1405.176982][T11360] usb 2-1: config 0 has no interface number 0 [ 1405.193790][T11360] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1405.216209][T11360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.273372][T11360] usb 2-1: Product: syz [ 1405.313949][T11360] usb 2-1: Manufacturer: syz [ 1405.339196][T11360] usb 2-1: SerialNumber: syz [ 1405.390811][T11360] usb 2-1: config 0 descriptor?? [ 1405.411742][T11360] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1405.618110][T26358] warn_alloc: 1 callbacks suppressed [ 1405.618129][T26358] syz.1.5267: vmalloc error: size 4149248, failed to allocated page array size 8104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1405.662637][T26358] CPU: 1 UID: 0 PID: 26358 Comm: syz.1.5267 Not tainted syzkaller #0 PREEMPT(full) [ 1405.662669][T26358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1405.662682][T26358] Call Trace: [ 1405.662690][T26358] [ 1405.662699][T26358] dump_stack_lvl+0x189/0x250 [ 1405.662731][T26358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1405.662755][T26358] ? __pfx__printk+0x10/0x10 [ 1405.662774][T26358] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1405.662798][T26358] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1405.662823][T26358] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1405.662849][T26358] warn_alloc+0x214/0x310 [ 1405.662880][T26358] ? __pfx_warn_alloc+0x10/0x10 [ 1405.662914][T26358] ? __get_vm_area_node+0x28f/0x300 [ 1405.662938][T26358] ? vb2_vmalloc_alloc+0xef/0x340 [ 1405.662964][T26358] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1405.663018][T26358] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1405.663045][T26358] ? __kasan_kmalloc+0x93/0xb0 [ 1405.663077][T26358] vmalloc_user_noprof+0xad/0xf0 [ 1405.663102][T26358] ? vb2_vmalloc_alloc+0xef/0x340 [ 1405.663123][T26358] vb2_vmalloc_alloc+0xef/0x340 [ 1405.663143][T26358] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1405.663165][T26358] __vb2_queue_alloc+0x9c2/0x15a0 [ 1405.663209][T26358] vb2_core_reqbufs+0xc31/0x1420 [ 1405.663246][T26358] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1405.663265][T26358] ? vb2_verify_memory_type+0x1fc/0x570 [ 1405.663287][T26358] ? vb2_reqbufs+0x3a9/0x630 [ 1405.663314][T26358] v4l2_m2m_ioctl_reqbufs+0x10d/0x200 [ 1405.663341][T26358] __video_do_ioctl+0xa59/0xc10 [ 1405.663371][T26358] ? __pfx___video_do_ioctl+0x10/0x10 [ 1405.663404][T26358] video_usercopy+0x82d/0x1450 [ 1405.663433][T26358] ? __pfx___video_do_ioctl+0x10/0x10 [ 1405.663452][T26358] ? __pfx_video_usercopy+0x10/0x10 [ 1405.663488][T26358] ? __fget_files+0x3a0/0x420 [ 1405.663510][T26358] v4l2_ioctl+0x18d/0x1e0 [ 1405.663531][T26358] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1405.663551][T26358] __se_sys_ioctl+0xfc/0x170 [ 1405.663576][T26358] do_syscall_64+0xfa/0xfa0 [ 1405.663609][T26358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1405.663633][T26358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.663651][T26358] ? clear_bhb_loop+0x60/0xb0 [ 1405.663673][T26358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.663691][T26358] RIP: 0033:0x7f71c4b8f749 [ 1405.663708][T26358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.663724][T26358] RSP: 002b:00007f71c5a23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.663745][T26358] RAX: ffffffffffffffda RBX: 00007f71c4de5fa0 RCX: 00007f71c4b8f749 [ 1405.663759][T26358] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000006 [ 1405.663772][T26358] RBP: 00007f71c4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1405.663784][T26358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1405.663795][T26358] R13: 00007f71c4de6038 R14: 00007f71c4de5fa0 R15: 00007f71c4f0fa28 [ 1405.663827][T26358] [ 1405.663858][T26358] Mem-Info: [ 1405.985384][T26388] program syz.5.5270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1405.995491][T11360] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1406.078268][T11360] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1406.111721][T26358] active_anon:24621 inactive_anon:0 isolated_anon:0 [ 1406.111721][T26358] active_file:20676 inactive_file:40487 isolated_file:0 [ 1406.111721][T26358] unevictable:768 dirty:244 writeback:0 [ 1406.111721][T26358] slab_reclaimable:8810 slab_unreclaimable:108842 [ 1406.111721][T26358] mapped:31886 shmem:18830 pagetables:1598 [ 1406.111721][T26358] sec_pagetables:0 bounce:0 [ 1406.111721][T26358] kernel_misc_reclaimable:0 [ 1406.111721][T26358] free:1268141 free_pcp:9774 free_cma:0 [ 1406.278118][T26386] kAFS: unable to lookup cell '(,' [ 1406.293079][T26358] Node 0 active_anon:99184kB inactive_anon:0kB active_file:82704kB inactive_file:161748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139944kB dirty:972kB writeback:0kB shmem:73784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13492kB pagetables:6368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1406.590120][T26358] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1407.237086][T26358] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.267438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.500874][T26358] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1407.525715][T26358] Node 0 DMA32 free:1136660kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103940kB inactive_anon:0kB active_file:82704kB inactive_file:161748kB unevictable:1536kB writepending:272kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:30588kB local_pcp:17596kB free_cma:0kB [ 1407.622350][T26358] lowmem_reserve[]: 0 0 0 0 0 [ 1407.635505][T26358] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.813460][T26358] lowmem_reserve[]: 0 0 0 0 0 [ 1407.843393][T26358] Node 1 Normal free:3914784kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2496kB local_pcp:2496kB free_cma:0kB [ 1407.875901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.174173][T26358] lowmem_reserve[]: 0 0 0 0 0 [ 1408.183719][T26358] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1408.198822][T26358] Node 0 DMA32: 485*4kB (UME) 176*8kB (UME) 58*16kB (UM) 1659*32kB (UME) 776*64kB (UME) 326*128kB (UME) 227*256kB (UME) 80*512kB (UME) 48*1024kB (UME) 8*2048kB (UME) 201*4096kB (UM) = 1136660kB [ 1408.250346][T26358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.482324][T26358] Node 1 Normal: 184*4kB (UME) 42*8kB (UME) 49*16kB (UME) 255*32kB (UME) 110*64kB (UME) 29*128kB (UME) 9*256kB (UME) 3*512kB (UM) 1*1024kB (M) 3*2048kB (UME) 948*4096kB (M) = 3914784kB [ 1408.548550][T26358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.586823][T26358] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1408.636958][T26358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.669625][T26358] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1408.697368][T26358] 79995 total pagecache pages [ 1408.744899][T26358] 0 pages in swap cache [ 1408.787143][T26358] Free swap = 124996kB [ 1408.791384][T26358] Total swap = 124996kB [ 1408.795546][T26358] 2097051 pages RAM [ 1408.817149][T26358] 0 pages HighMem/MovableOnly [ 1408.847207][T26358] 424124 pages reserved [ 1408.851513][T26358] 0 pages cma reserved [ 1408.988311][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1408.996109][T11347] usb 2-1: USB disconnect, device number 31 [ 1409.004932][T11347] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1409.041116][T11347] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1409.140851][T11347] quatech2 2-1:0.51: device disconnected [ 1409.372170][T26432] fuse: Bad value for 'fd' [ 1409.453028][T26432] fuse: Bad value for 'user_id' [ 1409.489526][T26432] fuse: Bad value for 'user_id' [ 1410.116816][T16889] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1410.246526][T26459] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 1410.292893][T16889] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1410.312315][T16889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.337423][T26459] bond5: entered promiscuous mode [ 1410.344094][T26459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1410.349003][T16889] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1410.640295][T16889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.701587][T16889] usb 3-1: Product: syz [ 1410.723613][T16889] usb 3-1: Manufacturer: syz [ 1410.742256][T16889] usb 3-1: SerialNumber: syz [ 1410.776329][T16889] usb 3-1: config 0 descriptor?? [ 1410.836038][T16889] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 1410.873150][T16889] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1410.917192][T11360] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1411.032746][T16889] usb 3-1: USB disconnect, device number 112 [ 1411.097890][T11360] usb 4-1: Using ep0 maxpacket: 32 [ 1411.154584][T11360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.243602][T11360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.254216][T11360] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1411.267428][T11360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.294019][T11360] usb 4-1: config 0 descriptor?? [ 1411.657282][T23066] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1411.730802][T11360] usbhid 4-1:0.0: can't add hid device: -71 [ 1411.746526][T11360] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1411.764965][T11360] usb 4-1: USB disconnect, device number 38 [ 1411.819412][T26500] kAFS: unable to lookup cell '(,' [ 1411.859571][T23066] usb 6-1: config 7 has an invalid interface number: 252 but max is 0 [ 1411.873639][T23066] usb 6-1: config 7 has no interface number 0 [ 1411.881076][T23066] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has an invalid bInterval 232, changing to 4 [ 1411.920254][T23066] usb 6-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid maxpacket 64, setting to 0 [ 1411.936769][T16889] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1411.957307][T23066] usb 6-1: config 7 interface 252 has no altsetting 0 [ 1411.984895][T23066] usb 6-1: string descriptor 0 read error: -22 [ 1412.017369][T23066] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1412.042256][T23066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.076556][T23066] idmouse 6-1:7.252: Unable to find bulk-in endpoint. [ 1412.106923][T16889] usb 2-1: Using ep0 maxpacket: 8 [ 1412.117144][T16889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1412.144258][T16889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1412.180895][T16889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1412.218269][T16889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1412.299381][T16889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1412.333876][T26486] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1412.359621][T26486] bond1 (unregistering): Released all slaves [ 1412.394047][T16889] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1412.427735][T23066] usb 6-1: USB disconnect, device number 3 [ 1412.503746][T16889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.519488][T16889] usb 2-1: config 0 descriptor?? [ 1412.530923][T26491] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1412.696996][T26515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5295'. [ 1413.009169][T23066] usb 2-1: USB disconnect, device number 32 [ 1413.022669][T19686] Bluetooth: hci2: Opcode 0x0c03 failed: -19 [ 1413.398252][T26540] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5297'. [ 1413.903453][T26541] Invalid logical block size (5) [ 1414.947248][T11360] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1415.290324][T11360] usb 2-1: Using ep0 maxpacket: 8 [ 1415.398681][T11339] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1415.429305][T11360] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 1415.447559][T11360] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.474580][T11360] usb 2-1: config 127 has no interface number 1 [ 1415.515831][T11360] usb 2-1: config 127 interface 171 has no altsetting 0 [ 1415.537411][T11360] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1415.546948][T11360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.558763][T11360] usb 2-1: Product: syz [ 1415.563036][T11360] usb 2-1: Manufacturer: syz [ 1415.577185][T11360] usb 2-1: SerialNumber: syz [ 1415.603394][T11339] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.614103][T11339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1415.629886][T11339] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1415.644610][T11339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.709565][T11339] usb 6-1: config 0 descriptor?? [ 1416.130788][T26562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.142283][T26562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.228167][T11339] usbhid 6-1:0.0: can't add hid device: -71 [ 1416.245812][T11339] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1416.294953][T11339] usb 6-1: USB disconnect, device number 4 [ 1416.342075][T26573] netlink: 'syz.3.5306': attribute type 10 has an invalid length. [ 1416.391121][T26573] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1416.591518][T26580] loop9: detected capacity change from 0 to 7 [ 1416.600256][T22813] Dev loop9: unable to read RDB block 7 [ 1416.607160][T22813] loop9: unable to read partition table [ 1416.613426][T22813] loop9: partition table beyond EOD, truncated [ 1416.623090][T26580] Dev loop9: unable to read RDB block 7 [ 1416.634431][T26580] loop9: unable to read partition table [ 1416.644179][T26580] loop9: partition table beyond EOD, truncated [ 1416.655150][T26580] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1416.838896][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5310'. [ 1416.888094][T26587] netlink: 'syz.2.5311': attribute type 9 has an invalid length. [ 1416.908147][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1416.942415][T26589] netlink: 'syz.2.5311': attribute type 9 has an invalid length. [ 1416.948318][T26590] program syz.5.5312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.962845][T26587] hsr0: entered promiscuous mode [ 1416.971482][T26587] macvlan3: entered promiscuous mode [ 1416.981952][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1416.992457][T26587] macvlan3: entered allmulticast mode [ 1417.009636][T26587] hsr0: entered allmulticast mode [ 1417.023081][T26587] hsr_slave_0: entered allmulticast mode [ 1417.039445][T26587] hsr_slave_1: entered allmulticast mode [ 1417.058286][T26589] macvlan4: entered promiscuous mode [ 1417.063889][T26589] macvlan4: entered allmulticast mode [ 1417.097201][T11348] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1417.266742][T11347] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1417.287069][T11348] usb 4-1: Using ep0 maxpacket: 8 [ 1417.295697][T11348] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1417.310595][T11348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1417.322721][T11348] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1417.335684][T11348] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1417.349416][T11348] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1417.365340][T11348] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1417.376533][T11348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.427543][T11347] usb 6-1: Using ep0 maxpacket: 32 [ 1417.437114][T11347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.453248][T11347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1417.464015][T11347] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1417.474175][T11347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.509119][T11347] usb 6-1: config 0 descriptor?? [ 1417.520106][T11347] hub 6-1:0.0: USB hub found [ 1417.550337][T11360] xr_serial 2-1:127.171: xr_serial converter detected [ 1417.565054][T11360] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1417.588139][T11360] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1417.607390][T11348] usb 4-1: GET_CAPABILITIES returned 0 [ 1417.613342][T11348] usbtmc 4-1:16.0: can't read capabilities [ 1417.648605][T11360] usb 2-1: USB disconnect, device number 33 [ 1417.663781][T11360] xr_serial 2-1:127.171: device disconnected [ 1417.701773][T26599] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5316'. [ 1417.717722][T11347] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 1417.818362][T26585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.827488][T26585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.844264][T26585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.854358][T26585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.966932][T11339] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1418.131485][T11339] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 1418.134545][T11347] hid-generic 0003:046D:C31C.004F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1418.145766][T11339] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.165282][T11339] usb 3-1: config 8 has no interface number 0 [ 1418.172101][T11339] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1418.197410][T11339] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1418.206982][T11339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.215196][T11339] usb 3-1: Product: syz [ 1418.219874][T11339] usb 3-1: Manufacturer: syz [ 1418.224659][T11339] usb 3-1: SerialNumber: syz [ 1418.375741][T26602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.388268][T26602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.409323][T16889] usb 4-1: USB disconnect, device number 39 [ 1418.464270][T11339] usb 3-1: USB disconnect, device number 113 [ 1418.518723][ T1211] usb 6-1: USB disconnect, device number 5 [ 1418.638822][T26612] loop9: detected capacity change from 0 to 7 [ 1418.646138][T26612] Dev loop9: unable to read RDB block 7 [ 1418.653057][T26612] loop9: unable to read partition table [ 1418.659616][T26612] loop9: partition table beyond EOD, truncated [ 1418.666239][T26612] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1418.816787][T16889] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1418.946967][ T1211] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1418.954665][T16889] usb 4-1: device descriptor read/64, error -71 [ 1418.966991][T11360] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1419.118810][T11360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.118878][ T1211] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.130158][T11360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.142611][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1419.203746][T16889] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1419.208651][T11360] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1419.221435][T11360] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1419.222054][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1419.252295][ T1211] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1419.267479][T11360] usb 2-1: Manufacturer: syz [ 1419.269421][ T1211] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1419.274894][T11360] usb 2-1: config 0 descriptor?? [ 1419.281714][ T1211] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1419.281741][ T1211] usb 6-1: Manufacturer: syz [ 1419.358423][T16889] usb 4-1: device descriptor read/64, error -71 [ 1419.386983][ T1211] usb 6-1: config 0 descriptor?? [ 1419.484016][T16889] usb usb4-port1: attempt power cycle [ 1419.649240][T26614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1419.674571][T26614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1419.777273][ T1211] rc_core: IR keymap rc-hauppauge not found [ 1419.810052][ T1211] Registered IR keymap rc-empty [ 1419.833509][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.840618][T16889] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1419.902786][T26628] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5323'. [ 1419.926285][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.967128][T16889] usb 4-1: device descriptor read/8, error -71 [ 1420.027869][ T1211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1420.063978][ T1211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input201 [ 1420.095687][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.157011][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.187147][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.217726][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.241090][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.267104][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.286941][T16889] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1420.295080][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.317347][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.324296][T16889] usb 4-1: device descriptor read/8, error -71 [ 1420.340160][T11360] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0050/input/input202 [ 1420.379097][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.390259][T11360] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0050/input/input203 [ 1420.421767][T11360] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0050/input/input204 [ 1420.437702][ T1211] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1420.491518][ T1211] mceusb 6-1:0.0: Registered ࠌ with mce emulator interface version 1 [ 1420.501190][T16889] usb usb4-port1: unable to enumerate USB device [ 1420.511173][ T1211] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1420.530803][ T1211] usb 6-1: USB disconnect, device number 6 [ 1420.537220][T11360] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0050/input/input205 [ 1420.724282][T11360] uclogic 0003:256C:006D.0050: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 1420.789459][T11360] usb 2-1: USB disconnect, device number 34 [ 1421.037016][ T1211] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1421.046271][T26637] fido_id[26637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1421.191298][ T1211] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1421.210058][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.235961][ T1211] usb 6-1: Product: syz [ 1421.247595][ T1211] usb 6-1: Manufacturer: syz [ 1421.290258][ T1211] usb 6-1: SerialNumber: syz [ 1421.320658][ T1211] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1421.360153][T16889] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1421.497956][T26647] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1421.562910][T26648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5328'. [ 1421.716979][T11360] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1421.846909][T11360] usb 2-1: device descriptor read/64, error -71 [ 1422.059101][T11348] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1422.111357][T11360] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1422.223805][T24054] usb 6-1: USB disconnect, device number 7 [ 1422.267478][T11360] usb 2-1: device descriptor read/64, error -71 [ 1422.273809][T11348] usb 4-1: device descriptor read/64, error -71 [ 1422.387202][T11360] usb usb2-port1: attempt power cycle [ 1422.457156][T26669] overlayfs: missing 'lowerdir' [ 1422.485009][T16889] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1422.498493][T16889] ath9k_htc: Failed to initialize the device [ 1422.544275][T24054] usb 6-1: ath9k_htc: USB layer deinitialized [ 1422.557102][T11348] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1422.746867][T11348] usb 4-1: device descriptor read/64, error -71 [ 1422.837387][T11360] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1422.857878][T11348] usb usb4-port1: attempt power cycle [ 1422.863998][T11360] usb 2-1: device descriptor read/8, error -71 [ 1422.917045][T24054] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1423.086447][T24054] usb 6-1: Using ep0 maxpacket: 8 [ 1423.103222][T24054] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1423.111916][T11360] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1423.122823][T24054] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.177020][T11360] usb 2-1: device descriptor read/8, error -71 [ 1423.197997][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.204393][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.206749][T11348] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1423.228835][T24054] usb 6-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1423.297722][T11348] usb 4-1: device descriptor read/8, error -71 [ 1423.304433][T11360] usb usb2-port1: unable to enumerate USB device [ 1423.341488][T24054] usb 6-1: config 127 has no interface number 0 [ 1423.407302][T24054] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1423.431431][T24054] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1423.457246][T24054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.479449][T24054] usb 6-1: Product: syz [ 1423.483633][T24054] usb 6-1: Manufacturer: syz [ 1423.519478][T24054] usb 6-1: SerialNumber: syz [ 1423.567414][T11348] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1423.587432][T11348] usb 4-1: device descriptor read/8, error -71 [ 1423.639301][T26689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5337'. [ 1423.717199][T11348] usb usb4-port1: unable to enumerate USB device [ 1424.461148][T26696] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5339'. [ 1424.806969][T11360] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1424.967420][T11360] usb 2-1: Using ep0 maxpacket: 16 [ 1424.983668][T11360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.995670][T11360] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1425.013099][T11360] usb 2-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.00 [ 1425.023317][T11360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.034483][T26701] ALSA: mixer_oss: invalid OSS volume 'ZyM/jb-))Wu' [ 1425.037704][T11360] usb 2-1: config 0 descriptor?? [ 1425.090394][T26701] ALSA: mixer_oss: invalid OSS volume '?Թ痈Y{UD' [ 1425.147507][T26701] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 1425.197036][T26701] ALSA: mixer_oss: invalid OSS volume 'lg' [ 1425.203025][T26701] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 1425.219967][T26701] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 1425.229201][T26701] ALSA: mixer_oss: invalid OSS volume '' [ 1425.235153][T26701] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 1425.244433][T26701] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 1425.253288][T26701] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 1425.261860][T26701] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 1425.276414][T26701] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 1425.284212][T26701] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 1425.293422][T26701] ALSA: mixer_oss: invalid OSS volume 'x\E79@ar4b2]jG' [ 1425.497315][T24054] usb 6-1: USB disconnect, device number 8 [ 1425.834993][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 1425.950872][T11360] usbhid 2-1:0.0: can't add hid device: -71 [ 1425.958364][T11360] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1426.021036][T11360] usb 2-1: USB disconnect, device number 39 [ 1426.150526][T26723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1426.332178][T26729] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5349'. [ 1426.548165][T26728] loop4: detected capacity change from 0 to 7 [ 1426.615593][T22047] buffer_io_error: 10 callbacks suppressed [ 1426.615605][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1426.717894][T26735] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1426.806551][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1426.819952][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1426.831200][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1426.845090][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.089631][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.149986][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.169512][T22047] ldm_validate_partition_table(): Disk read failed. [ 1427.186854][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.195109][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.234530][T22047] Buffer I/O error on dev loop4, logical block 0, async page read [ 1427.263296][T22047] Dev loop4: unable to read RDB block 0 [ 1427.290187][T22047] loop4: unable to read partition table [ 1427.312055][T22047] loop4: partition table beyond EOD, truncated [ 1427.842886][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5355'. [ 1427.935567][T26753] netlink: 'syz.3.5357': attribute type 1 has an invalid length. [ 1427.944186][T26752] netlink: 'syz.3.5357': attribute type 1 has an invalid length. [ 1428.021816][T26752] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1428.032848][T26752] bond6: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 1428.071929][T26752] bond6: (slave vxcan1): making interface the new active one [ 1428.081333][T26752] bond6: (slave vxcan1): Enslaving as an active interface with an up link [ 1429.473296][T26769] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 1429.921048][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5362'. [ 1429.930269][T26780] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5362'. [ 1429.939372][T26780] netlink: 'syz.5.5362': attribute type 1 has an invalid length. [ 1429.947250][T26780] netlink: 'syz.5.5362': attribute type 1 has an invalid length. [ 1429.955111][T26780] netlink: 'syz.5.5362': attribute type 1 has an invalid length. [ 1430.159634][T26781] input: syz1 as /devices/virtual/input/input206 [ 1433.117018][T24054] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1433.267422][T24054] usb 2-1: Using ep0 maxpacket: 32 [ 1433.277437][T24054] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1433.292009][T24054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.359519][T24054] usb 2-1: config 0 descriptor?? [ 1433.478239][T26819] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1433.567651][T24054] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1433.598836][T24054] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1433.657363][T24054] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1433.664584][T24054] usb 2-1: media controller created [ 1433.801571][T24054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1433.969859][T24054] az6027: usb out operation failed. (-71) [ 1433.997283][T24054] az6027: usb out operation failed. (-71) [ 1434.004053][T24054] stb0899_attach: Driver disabled by Kconfig [ 1434.028316][T24054] az6027: no front-end attached [ 1434.028316][T24054] [ 1434.038525][T26829] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5373'. [ 1434.068595][T24054] az6027: usb out operation failed. (-71) [ 1434.151455][T24054] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1434.171738][T24054] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input207 [ 1434.206827][T11348] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1434.276472][T24054] dvb-usb: schedule remote query interval to 400 msecs. [ 1434.291831][T24054] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1434.327916][T24054] usb 2-1: USB disconnect, device number 40 [ 1434.450196][T11348] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.461676][T26844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1434.472995][T26845] kernel profiling enabled (shift: 63) [ 1434.479288][T26845] profiling shift: 63 too large [ 1434.500017][T16889] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1434.526992][T11348] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1434.538206][T24054] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1434.547164][T11348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.582719][T11348] usb 6-1: config 0 descriptor?? [ 1434.637066][T16889] usb 3-1: device descriptor read/64, error -71 [ 1434.735703][T26856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1434.857370][T24054] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1434.889853][ T30] audit: type=1326 audit(1764398378.343:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26859 comm="syz.0.5384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac49b8f749 code=0x0 [ 1434.912623][T16889] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1435.007797][T11348] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 1435.018872][T24054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.034001][T11348] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0051/input/input208 [ 1435.046405][T24054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.058790][T24054] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1435.058918][T16889] usb 3-1: device descriptor read/64, error -71 [ 1435.068008][T24054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.078483][T24054] usb 2-1: config 0 descriptor?? [ 1435.145719][T11348] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1435.198585][T16889] usb usb3-port1: attempt power cycle [ 1435.449466][ T1211] usb 6-1: USB disconnect, device number 9 [ 1435.491706][T26867] trusted_key: encrypted_key: keyword '' not recognized [ 1435.523364][T24054] hid-retrode 0003:0403:97C1.0052: item fetching failed at offset 5/7 [ 1435.546998][T16889] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 1435.549574][T24054] hid-retrode 0003:0403:97C1.0052: probe with driver hid-retrode failed with error -22 [ 1435.588498][T16889] usb 3-1: device descriptor read/8, error -71 [ 1435.708156][T26869] bond0: Caught tx_queue_len zero misconfig [ 1435.719544][T23066] usb 2-1: USB disconnect, device number 41 [ 1435.828871][T16889] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1435.863918][T16889] usb 3-1: device descriptor read/8, error -71 [ 1436.007016][T11347] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1436.025389][T16889] usb usb3-port1: unable to enumerate USB device [ 1436.304049][T11347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.317820][T11347] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1436.327300][T11347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.337298][T11347] usb 4-1: Product: syz [ 1436.343784][T11347] usb 4-1: Manufacturer: syz [ 1436.351465][T11347] usb 4-1: SerialNumber: syz [ 1436.364658][T11347] usb 4-1: config 0 descriptor?? [ 1436.382315][T11347] usb 4-1: no audio or video endpoints found [ 1436.687818][T26881] sit1: entered allmulticast mode [ 1436.884824][ T1211] usb 4-1: USB disconnect, device number 48 [ 1437.024713][T26886] ip6gretap0: entered promiscuous mode [ 1437.031342][T26886] macsec1: entered promiscuous mode [ 1437.070527][T26886] ip6gretap0: left promiscuous mode [ 1437.536487][T26905] input: syz1 as /devices/virtual/input/input209 [ 1437.554656][T26905] program syz.1.5393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.894523][T26911] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5396'. [ 1437.970321][T26913] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5395'. [ 1438.336913][T11348] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1438.721981][T11348] usb 6-1: Using ep0 maxpacket: 8 [ 1438.734952][T11348] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1438.743515][T11348] usb 6-1: config 0 has no interface number 0 [ 1438.754381][T11348] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1438.791533][T11348] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1438.803143][T11348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.838573][T26927] input: syz1 as /devices/virtual/input/input210 [ 1438.863143][T11348] usb 6-1: config 0 descriptor?? [ 1438.957179][ T1211] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1438.993493][T11348] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1439.123014][T26934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.136764][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 1439.159371][T26934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.176139][T11348] usb 6-1: USB disconnect, device number 10 [ 1439.237319][ T1211] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1439.270521][ T1211] usb 3-1: config 252 has no interface number 0 [ 1439.282116][ T1211] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1439.304735][ T1211] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1439.315994][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.326906][ T1211] usb 3-1: Product: syz [ 1439.331287][ T1211] usb 3-1: Manufacturer: syz [ 1439.336036][ T1211] usb 3-1: SerialNumber: syz [ 1439.369734][ T1211] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1439.571124][T26924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.586947][T26924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.011891][T26944] bond1: option min_links: invalid value (18446744073709551608) [ 1440.019942][T26944] bond1: option min_links: allowed values 0 - 2147483647 [ 1440.030189][T26944] bond1 (unregistering): Released all slaves [ 1440.387901][T21132] usb 3-1: Failed to submit usb control message: -110 [ 1440.396812][T21132] usb 3-1: unable to send the bmi data to the device: -110 [ 1440.408001][T21132] usb 3-1: unable to get target info from device [ 1440.415252][T21132] usb 3-1: could not get target info (-110) [ 1440.422718][T21132] usb 3-1: could not probe fw (-110) [ 1440.649110][T26960] syzkaller1: entered promiscuous mode [ 1440.654635][T26960] syzkaller1: entered allmulticast mode [ 1440.817372][ T1211] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1440.966754][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 1440.978354][ T1211] usb 2-1: config 222 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.000275][ T1211] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1441.009556][T23066] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1441.021719][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.186814][T23066] usb 4-1: Using ep0 maxpacket: 16 [ 1441.195602][T23066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.214257][T23066] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.225862][T23066] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1441.241645][T23066] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1441.268590][T23066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.289669][T23066] usb 4-1: config 0 descriptor?? [ 1441.449988][T11348] usb 3-1: USB disconnect, device number 118 [ 1441.794455][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.823076][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.833502][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.845647][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.855035][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.863427][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.872347][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.880916][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.889371][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.898656][T23066] microsoft 0003:045E:07DA.0053: unknown main item tag 0x0 [ 1441.933004][T23066] microsoft 0003:045E:07DA.0053: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1441.951331][T23066] microsoft 0003:045E:07DA.0053: no inputs found [ 1441.972362][T23066] microsoft 0003:045E:07DA.0053: could not initialize ff, continuing anyway [ 1441.993190][T23066] usb 4-1: USB disconnect, device number 49 [ 1442.031268][T17520] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1442.077788][T26971] fido_id[26971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1442.187638][T17520] usb 3-1: Using ep0 maxpacket: 16 [ 1442.195675][T17520] usb 3-1: config 0 has no interfaces? [ 1442.203438][T17520] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1442.213820][T17520] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1442.222719][T17520] usb 3-1: Manufacturer: syz [ 1442.237889][T17520] usb 3-1: config 0 descriptor?? [ 1442.726838][T26977] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5411'. [ 1443.677354][ T30] audit: type=1800 audit(1764398387.133:1327): pid=26982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5410" name="file1" dev="tmpfs" ino=2256 res=0 errno=0 [ 1443.698158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.157798][T26990] loop9: detected capacity change from 0 to 7 [ 1444.182605][T26990] Dev loop9: unable to read RDB block 7 [ 1444.221515][T26990] loop9: unable to read partition table [ 1444.228152][T26990] loop9: partition table beyond EOD, truncated [ 1444.234810][T26990] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1444.420081][T26995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.433846][ T1211] usb 2-1: string descriptor 0 read error: -71 [ 1444.445199][T26995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.469014][ T1211] usbhid 2-1:222.0: can't add hid device: -71 [ 1444.488363][ T1211] usbhid 2-1:222.0: probe with driver usbhid failed with error -71 [ 1444.504777][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1444.518091][ T1211] usb 2-1: USB disconnect, device number 42 [ 1444.607476][T17520] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1444.657105][T11348] usb 3-1: USB disconnect, device number 119 [ 1444.827465][T17520] usb 6-1: Using ep0 maxpacket: 8 [ 1444.845182][T27013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1444.854972][T27013] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1444.866475][T27013] netlink: 'syz.3.5418': attribute type 1 has an invalid length. [ 1444.875241][T27013] netlink: 'syz.3.5418': attribute type 1 has an invalid length. [ 1444.884574][T27013] netlink: 'syz.3.5418': attribute type 1 has an invalid length. [ 1444.896548][T17520] usb 6-1: no configurations [ 1444.908574][T17520] usb 6-1: can't read configurations, error -22 [ 1444.964028][T27013] input: syz1 as /devices/virtual/input/input212 [ 1445.057132][T17520] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1445.217245][T17520] usb 6-1: Using ep0 maxpacket: 8 [ 1445.318006][T17520] usb 6-1: no configurations [ 1445.347104][T17520] usb 6-1: can't read configurations, error -22 [ 1445.356785][ T1211] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1445.372979][T17520] usb usb6-port1: attempt power cycle [ 1445.546729][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 1445.561674][ T1211] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1445.570574][ T1211] usb 2-1: config 252 has no interface number 0 [ 1445.738634][ T1211] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1445.757407][T17520] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1445.773502][ T1211] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1445.783741][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.792665][ T1211] usb 2-1: Product: syz [ 1445.794519][T17520] usb 6-1: Using ep0 maxpacket: 8 [ 1445.802796][ T1211] usb 2-1: Manufacturer: syz [ 1445.805301][T17520] usb 6-1: no configurations [ 1445.812167][T17520] usb 6-1: can't read configurations, error -22 [ 1445.860026][ T1211] usb 2-1: SerialNumber: syz [ 1445.896181][ T1211] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1445.967144][T17520] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1446.007329][T17520] usb 6-1: Using ep0 maxpacket: 8 [ 1446.018027][ T30] audit: type=1326 audit(1764398389.463:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.057331][T17520] usb 6-1: no configurations [ 1446.064803][ T30] audit: type=1326 audit(1764398389.463:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.116884][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.127749][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.136093][T17520] usb 6-1: can't read configurations, error -22 [ 1446.141651][ T30] audit: type=1326 audit(1764398389.463:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.178024][ T30] audit: type=1326 audit(1764398389.473:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.195294][T17520] usb usb6-port1: unable to enumerate USB device [ 1446.258923][ T30] audit: type=1326 audit(1764398389.473:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.285574][ T30] audit: type=1326 audit(1764398389.473:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.328680][ T30] audit: type=1326 audit(1764398389.473:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.353656][ T30] audit: type=1326 audit(1764398389.473:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.378245][ T30] audit: type=1326 audit(1764398389.473:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27019 comm="syz.2.5421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c1498f749 code=0x7ffc0000 [ 1446.947651][ T6553] usb 2-1: Failed to submit usb control message: -110 [ 1446.955141][ T6553] usb 2-1: unable to send the bmi data to the device: -110 [ 1446.962915][ T6553] usb 2-1: unable to get target info from device [ 1446.977192][T17520] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1447.007189][ T6553] usb 2-1: could not get target info (-110) [ 1447.017661][ T6553] usb 2-1: could not probe fw (-110) [ 1447.157376][T17520] usb 3-1: Using ep0 maxpacket: 16 [ 1447.166073][T17520] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 1447.175152][T17520] usb 3-1: config 252 has no interface number 0 [ 1447.182267][T17520] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1447.209889][T17520] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1447.223017][T17520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.231790][T17520] usb 3-1: Product: syz [ 1447.236674][T17520] usb 3-1: Manufacturer: syz [ 1447.242698][T17520] usb 3-1: SerialNumber: syz [ 1447.401659][T17520] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1447.581979][T27032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.628741][T27032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.706832][T27043] loop9: detected capacity change from 0 to 7 [ 1447.713976][T27043] Dev loop9: unable to read RDB block 7 [ 1447.722635][T27043] loop9: unable to read partition table [ 1447.755322][T27043] loop9: partition table beyond EOD, truncated [ 1447.783766][T27043] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1448.086136][T11347] usb 2-1: USB disconnect, device number 43 [ 1448.236794][ T1211] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1448.392287][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 1448.400415][ T1211] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.412333][ T1211] usb 6-1: config 0 has no interfaces? [ 1448.423769][ T1211] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1448.445252][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.455381][ T1211] usb 6-1: Product: syz [ 1448.459849][ T1211] usb 6-1: Manufacturer: syz [ 1448.464879][ T1211] usb 6-1: SerialNumber: syz [ 1448.471856][T21132] usb 3-1: Failed to submit usb control message: -110 [ 1448.479738][T21132] usb 3-1: unable to send the bmi data to the device: -110 [ 1448.487585][T21132] usb 3-1: unable to get target info from device [ 1448.497966][T21132] usb 3-1: could not get target info (-110) [ 1448.504798][ T1211] usb 6-1: config 0 descriptor?? [ 1448.522330][T21132] usb 3-1: could not probe fw (-110) [ 1448.721170][T27045] loop2: detected capacity change from 0 to 7 [ 1448.730828][T22047] Dev loop2: unable to read RDB block 7 [ 1448.738421][T22047] loop2: unable to read partition table [ 1448.744620][T22047] loop2: partition table beyond EOD, truncated [ 1448.799769][T27045] Dev loop2: unable to read RDB block 7 [ 1448.815891][T27045] loop2: unable to read partition table [ 1448.822975][T27045] loop2: partition table beyond EOD, truncated [ 1448.839747][T27045] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1448.867469][T11348] usb 6-1: USB disconnect, device number 15 [ 1450.090966][T23066] usb 3-1: USB disconnect, device number 120 [ 1450.792987][T27052] Set syz1 is full, maxelem 65536 reached [ 1450.995738][T27076] netlink: 47 bytes leftover after parsing attributes in process `syz.5.5434'. [ 1451.586795][T23066] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1451.852272][T23066] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.872091][T23066] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1451.882107][T23066] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1451.895870][T23066] usb 3-1: Product: syz [ 1451.933321][T23066] usb 3-1: Manufacturer: syz [ 1451.963842][T23066] usb 3-1: SerialNumber: syz [ 1452.040983][T23066] usb 3-1: config 0 descriptor?? [ 1452.203080][T23066] gspca_main: conex-2.14.0 probing 0572:0041 [ 1453.181293][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1453.181311][ T30] audit: type=1326 audit(1764398396.613:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27065 comm="syz.3.5433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b1f18f749 code=0x0 [ 1453.958906][T23066] usb 3-1: USB disconnect, device number 121 [ 1454.130841][T27105] netlink: 'syz.3.5441': attribute type 13 has an invalid length. [ 1454.148393][T27105] netlink: 'syz.3.5441': attribute type 17 has an invalid length. [ 1454.273790][T27105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.281042][T27105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.288478][T27105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.295792][T27105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.395064][T27105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1454.636911][T23066] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1454.735567][T27116] Cannot find add_set index 0 as target [ 1454.769710][T23066] usb 2-1: device descriptor read/64, error -71 [ 1454.786899][T11348] usb 3-1: new low-speed USB device number 122 using dummy_hcd [ 1455.006775][T23066] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1455.098752][T11348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1455.222047][T23066] usb 2-1: device descriptor read/64, error -71 [ 1455.258304][T11348] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1455.266181][T11348] usb 3-1: can't read configurations, error -61 [ 1455.337382][T23066] usb usb2-port1: attempt power cycle [ 1455.406804][T11348] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 1455.563866][T11348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1455.586511][T11348] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1455.595482][T11348] usb 3-1: can't read configurations, error -61 [ 1455.632508][T11348] usb usb3-port1: attempt power cycle [ 1455.703169][T23066] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1455.727470][T23066] usb 2-1: device descriptor read/8, error -71 [ 1455.966774][T23066] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1455.997075][T11348] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1456.005190][T23066] usb 2-1: device descriptor read/8, error -71 [ 1456.021442][T11348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1456.087160][T11348] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1456.099224][T11348] usb 3-1: can't read configurations, error -61 [ 1456.137764][T23066] usb usb2-port1: unable to enumerate USB device [ 1456.247316][T11348] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1456.279501][T11348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1456.289318][T11348] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1456.297187][T11348] usb 3-1: can't read configurations, error -61 [ 1456.304071][T11348] usb usb3-port1: unable to enumerate USB device [ 1456.598648][T27134] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1456.926753][T23066] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1457.078959][T23066] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1457.090365][T23066] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1457.102710][T23066] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1457.119160][T23066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.151018][T27142] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1457.166996][T27142] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1457.179787][T23066] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1457.381012][T27156] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5455'. [ 1457.430411][T11339] usb 6-1: USB disconnect, device number 16 [ 1457.636804][ T1211] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1457.796762][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 1457.914714][ T1211] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.948384][ T1211] usb 4-1: config 0 has no interface number 0 [ 1458.079255][ T1211] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1458.088670][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.097399][ T1211] usb 4-1: Product: syz [ 1458.102112][ T1211] usb 4-1: Manufacturer: syz [ 1458.112109][ T1211] usb 4-1: SerialNumber: syz [ 1458.601096][ T1211] usb 4-1: config 0 descriptor?? [ 1458.658235][ T1211] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1458.682875][T27171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1458.858639][T27156] bridge0: port 3(syz_tun) entered blocking state [ 1458.866312][T27156] bridge0: port 3(syz_tun) entered disabled state [ 1458.876881][T27156] syz_tun: entered allmulticast mode [ 1458.892894][T27156] syz_tun: entered promiscuous mode [ 1458.903184][T27156] bridge0: port 3(syz_tun) entered blocking state [ 1458.911545][T27156] bridge0: port 3(syz_tun) entered forwarding state [ 1459.197104][ T1211] gspca_spca1528: reg_w err -110 [ 1459.218560][ T1211] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 1459.437754][T27174] netlink: 'syz.2.5459': attribute type 1 has an invalid length. [ 1459.699531][ T1211] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1459.968225][ T1211] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 1459.985715][ T1211] usb 6-1: config 0 has no interface number 1 [ 1460.013276][ T1211] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1460.035186][ T1211] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1460.061032][ T1211] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 1460.136119][T27196] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 1460.149104][T27196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5464'. [ 1460.177982][ T1211] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1460.206201][ T1211] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1460.244784][ T1211] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1460.267140][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.289290][ T1211] usb 6-1: Product: syz [ 1460.302294][ T1211] usb 6-1: Manufacturer: syz [ 1460.319706][ T1211] usb 6-1: SerialNumber: syz [ 1460.325751][T23066] usb 4-1: USB disconnect, device number 50 [ 1460.348775][ T1211] usb 6-1: config 0 descriptor?? [ 1460.354736][T27180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1460.367299][ T1211] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.450180][ T1211] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.730930][T27206] vivid-000: disconnect [ 1460.740482][T27202] vivid-000: reconnect [ 1460.771455][T17520] usb 6-1: USB disconnect, device number 17 [ 1461.005481][T21759] udevd[21759]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.036993][ T1211] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 1461.219598][ T1211] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1461.248495][ T1211] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1461.256469][ T1211] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1461.269192][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.466407][ T1211] usb 4-1: config 0 descriptor?? [ 1461.481030][T27208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1461.874900][T27232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5473'. [ 1461.979619][T27238] xt_NFQUEUE: number of total queues is 0 [ 1462.001683][ T1211] usbhid 4-1:0.0: can't add hid device: -71 [ 1462.011317][ T1211] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1462.106846][ T1211] usb 4-1: USB disconnect, device number 51 [ 1462.347780][T27253] vivid-000: disconnect [ 1462.365834][T27245] vivid-000: reconnect [ 1462.514594][ T30] audit: type=1326 audit(1764398405.963:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27256 comm="syz.5.5479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9af9d8f749 code=0x0 [ 1462.646807][T23066] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1462.886817][T23066] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.898482][T23066] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1462.917157][T23066] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1462.958951][T23066] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1463.120030][T23066] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1463.129735][T23066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.152344][T23066] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1463.171694][T23066] usb 3-1: invalid MIDI out EP 0 [ 1463.251121][T23066] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1463.377820][T23070] udevd[23070]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1464.047004][T11347] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1464.052562][T27294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1464.186839][T11347] usb 2-1: device descriptor read/64, error -71 [ 1464.426991][T11347] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1464.566799][T11347] usb 2-1: device descriptor read/64, error -71 [ 1464.665408][T27314] netlink: 'syz.5.5496': attribute type 5 has an invalid length. [ 1464.677374][T11347] usb usb2-port1: attempt power cycle [ 1464.685164][T27314] ip6erspan0: entered promiscuous mode [ 1464.691213][T11348] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1464.812246][T27318] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5497'. [ 1464.846813][T11348] usb 4-1: Using ep0 maxpacket: 16 [ 1464.859033][T11348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.876974][T11348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.900518][T11348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1464.930336][T11348] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1464.960205][T11348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.982869][T11348] usb 4-1: config 0 descriptor?? [ 1465.017917][T11347] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1465.047366][T11347] usb 2-1: device descriptor read/8, error -71 [ 1465.286792][T11347] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1465.296756][T23066] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1465.315413][T11347] usb 2-1: device descriptor read/8, error -71 [ 1465.415260][T11348] microsoft 0003:045E:07DA.0054: unknown main item tag 0x0 [ 1465.423280][T11348] microsoft 0003:045E:07DA.0054: item fetching failed at offset 28/34 [ 1465.432606][T11347] usb usb2-port1: unable to enumerate USB device [ 1465.442953][T11348] microsoft 0003:045E:07DA.0054: parse failed [ 1465.454592][T11348] microsoft 0003:045E:07DA.0054: probe with driver microsoft failed with error -22 [ 1465.517650][T23066] usb 6-1: Using ep0 maxpacket: 32 [ 1465.530491][T23066] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1465.544079][T23066] usb 6-1: config 0 has no interface number 0 [ 1465.555268][T23066] usb 6-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1465.567492][T23066] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1465.586120][T23066] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1465.603510][T23066] usb 6-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1465.616595][T16889] usb 4-1: USB disconnect, device number 52 [ 1465.637370][T23066] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1465.685119][T23066] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1465.694806][T23066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.703243][T23066] usb 6-1: Product: syz [ 1465.707736][T23066] usb 6-1: Manufacturer: syz [ 1465.712627][T23066] usb 6-1: SerialNumber: syz [ 1465.722630][T23066] usb 6-1: config 0 descriptor?? [ 1465.732669][T27325] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1465.945400][T27325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.955658][T27325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.990783][T23066] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 1466.019022][T23066] etas_es58x 6-1:0.219: could not retrieve the product info string [ 1466.031525][T11348] usb 3-1: USB disconnect, device number 126 [ 1466.059185][T23066] usb 6-1: USB disconnect, device number 18 [ 1466.081744][T23066] etas_es58x 6-1:0.219: Disconnecting syz syz [ 1466.602291][T27351] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1466.777379][T11348] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1467.048504][T11348] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1467.138638][T27360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1467.155659][T11348] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1467.223329][T11348] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1467.261135][T11348] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1467.346341][T11348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.443716][T11348] usb 6-1: config 0 descriptor?? [ 1467.458302][T27348] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1467.547860][ C0] hrtimer: interrupt took 2633224 ns [ 1467.662774][T27367] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1467.669442][T27367] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1467.715670][T27370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5510'. [ 1467.831642][T11348] usbhid 6-1:0.0: can't add hid device: -71 [ 1467.839375][T11348] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1467.889229][T11348] usb 6-1: USB disconnect, device number 19 [ 1467.998090][T27299] wlan0: Trigger new scan to find an IBSS to join [ 1468.050215][T27378] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5511'. [ 1468.207880][T27382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.246760][T23066] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1468.396796][T23066] usb 2-1: device descriptor read/64, error -71 [ 1468.626774][T11348] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1468.647106][T23066] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1468.776961][T23066] usb 2-1: device descriptor read/64, error -71 [ 1468.785743][T11348] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1468.804971][T11348] usb 4-1: not running at top speed; connect to a high speed hub [ 1468.816340][T11348] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 1468.826720][T11348] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.846757][T11348] usb 4-1: config 8 has no interface number 0 [ 1468.853162][T11348] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 1468.866804][T11348] usb 4-1: config 8 interface 24 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1468.866842][T16889] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1468.880282][T11348] usb 4-1: config 8 interface 24 has no altsetting 0 [ 1468.891779][T23066] usb usb2-port1: attempt power cycle [ 1468.897591][T11348] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1468.918391][T11348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.926859][T11348] usb 4-1: Product: syz [ 1468.931765][T11348] usb 4-1: Manufacturer: syz [ 1468.936369][T11348] usb 4-1: SerialNumber: syz [ 1469.066895][T16889] usb 3-1: Using ep0 maxpacket: 32 [ 1469.073996][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1469.084352][T16889] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1469.094444][T16889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.102656][T16889] usb 3-1: Product: syz [ 1469.109764][T16889] usb 3-1: Manufacturer: syz [ 1469.114539][T16889] usb 3-1: SerialNumber: syz [ 1469.124913][T16889] usb 3-1: config 0 descriptor?? [ 1469.160296][T27394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5517'. [ 1469.203568][T11348] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 1469.214382][T27394] vlan2: entered promiscuous mode [ 1469.220114][T27394] erspan0: entered promiscuous mode [ 1469.235681][T11348] usb 4-1: USB disconnect, device number 53 [ 1469.257798][T23066] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1469.277786][T23066] usb 2-1: device descriptor read/8, error -71 [ 1469.462581][T27401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5519'. [ 1469.528798][T23066] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1469.572891][T16889] gs_usb 3-1:0.0: Configuring for 89 interfaces [ 1469.595506][T23066] usb 2-1: device descriptor read/8, error -71 [ 1469.670991][T27401] team0: Port device team_slave_0 removed [ 1469.729649][T23066] usb usb2-port1: unable to enumerate USB device [ 1469.777256][T16889] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1469.827419][T27413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.836028][T27413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.863366][T16889] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1469.958852][T16889] usb 3-1: USB disconnect, device number 127 [ 1470.080831][T11348] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1470.248901][T11348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.274056][T11348] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1470.288192][T11348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.310328][T11348] usb 4-1: config 0 descriptor?? [ 1470.828225][T11348] lg-g15 0003:046D:C222.0055: unbalanced delimiter at end of report description [ 1470.862937][T11348] lg-g15 0003:046D:C222.0055: probe with driver lg-g15 failed with error -22 [ 1471.137924][T11348] usb 4-1: USB disconnect, device number 54 [ 1472.120130][T27449] ALSA: mixer_oss: invalid OSS volume 'qQ \\j|ɰstXj`p' [ 1472.141501][T27449] ALSA: mixer_oss: invalid OSS volume '.~DY45 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 c5 [ 1489.934063][T11347] RSP: 0018:ffffc9001b4ff5c0 EFLAGS: 00010293 [ 1489.940399][T11347] RAX: ffffffff82609181 RBX: ffff8880630c32d0 RCX: ffff88807af69e40 [ 1489.948729][T11347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1489.956789][T11347] RBP: 0000000000000000 R08: ffff8880630c32d3 R09: 1ffff1100c61865a [ 1489.964880][T11347] R10: dffffc0000000000 R11: ffffed100c61865b R12: ffff88802ed31628 [ 1489.973192][T11347] R13: 1ffff11005da62c6 R14: ffff88802ed31630 R15: 1ffff11005da62c5 [ 1489.981220][T11347] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 1489.990672][T11347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1489.997353][T11347] CR2: 0000200000267030 CR3: 000000007fb1e000 CR4: 00000000003526f0 [ 1490.005366][T11347] Call Trace: [ 1490.008989][T11347] [ 1490.010300][T11341] usb 6-1: config 0 descriptor?? [ 1490.011931][T11347] kobject_add_internal+0x632/0xb40 [ 1490.022138][T11347] kobject_add+0x155/0x220 [ 1490.026870][T11347] ? get_device_parent+0x255/0x3a0 [ 1490.031993][T11347] ? __pfx_kobject_add+0x10/0x10 [ 1490.037322][T11347] ? __kasan_kmalloc+0x93/0xb0 [ 1490.042153][T11347] ? kobject_init+0x83/0x1e0 [ 1490.046801][T11347] get_device_parent+0x316/0x3a0 [ 1490.051781][T11347] device_add+0x2e1/0xb50 [ 1490.056146][T11347] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1490.061949][T11347] ? kmem_cache_free+0x19b/0x690 [ 1490.062666][T27722] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1490.066975][T11347] _request_firmware+0xf83/0x15b0 [ 1490.077606][T11341] usb-storage 6-1:0.20: USB Mass Storage device detected [ 1490.079491][T11347] ? __pfx__request_firmware+0x10/0x10 [ 1490.091602][T11347] ? process_scheduled_works+0x9ef/0x17b0 [ 1490.097747][T11347] request_firmware_work_func+0xaf/0x1c0 [ 1490.103405][T11347] ? process_scheduled_works+0x9ef/0x17b0 [ 1490.109564][T11347] process_scheduled_works+0xae1/0x17b0 [ 1490.115130][T11347] ? __pfx_process_scheduled_works+0x10/0x10 [ 1490.121690][T11347] worker_thread+0x8a0/0xda0 [ 1490.126302][T11347] kthread+0x711/0x8a0 [ 1490.131178][T11347] ? __pfx_worker_thread+0x10/0x10 [ 1490.136320][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.141436][T11347] ? _raw_spin_unlock_irq+0x23/0x50 [ 1490.146837][T11347] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.152033][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.157306][T11347] ret_from_fork+0x4bc/0x870 [ 1490.161900][T11347] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.167171][T11347] ? __switch_to_asm+0x39/0x70 [ 1490.171927][T11347] ? __switch_to_asm+0x33/0x70 [ 1490.177122][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.181723][T11347] ret_from_fork_asm+0x1a/0x30 [ 1490.186506][T11347] [ 1490.189633][T11347] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1490.196910][T11347] CPU: 1 UID: 0 PID: 11347 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT(full) [ 1490.206433][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1490.216509][T11347] Workqueue: events request_firmware_work_func [ 1490.222667][T11347] Call Trace: [ 1490.225959][T11347] [ 1490.228881][T11347] dump_stack_lvl+0x99/0x250 [ 1490.233465][T11347] ? __asan_memcpy+0x40/0x70 [ 1490.238057][T11347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1490.243250][T11347] ? __pfx__printk+0x10/0x10 [ 1490.247832][T11347] vpanic+0x237/0x6d0 [ 1490.251804][T11347] ? __pfx_vpanic+0x10/0x10 [ 1490.256304][T11347] panic+0xb9/0xc0 [ 1490.260024][T11347] ? __pfx_panic+0x10/0x10 [ 1490.264435][T11347] __warn+0x31b/0x4b0 [ 1490.268413][T11347] ? kernfs_get+0x72/0x90 [ 1490.272906][T11347] ? kernfs_get+0x72/0x90 [ 1490.277235][T11347] report_bug+0x2be/0x4f0 [ 1490.281564][T11347] ? kernfs_get+0x72/0x90 [ 1490.285893][T11347] ? kernfs_get+0x72/0x90 [ 1490.290224][T11347] ? kernfs_get+0x74/0x90 [ 1490.294549][T11347] handle_bug+0x84/0x160 [ 1490.298785][T11347] exc_invalid_op+0x1a/0x50 [ 1490.303287][T11347] asm_exc_invalid_op+0x1a/0x20 [ 1490.308156][T11347] RIP: 0010:kernfs_get+0x72/0x90 [ 1490.313092][T11347] Code: e8 53 72 5f ff 48 89 df be 04 00 00 00 e8 c6 38 c5 ff f0 ff 03 eb 05 e8 3c 72 5f ff 5b 5d c3 cc cc cc cc cc e8 2f 72 5f ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 c5 [ 1490.332693][T11347] RSP: 0018:ffffc9001b4ff5c0 EFLAGS: 00010293 [ 1490.338780][T11347] RAX: ffffffff82609181 RBX: ffff8880630c32d0 RCX: ffff88807af69e40 [ 1490.346784][T11347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1490.354769][T11347] RBP: 0000000000000000 R08: ffff8880630c32d3 R09: 1ffff1100c61865a [ 1490.362737][T11347] R10: dffffc0000000000 R11: ffffed100c61865b R12: ffff88802ed31628 [ 1490.370708][T11347] R13: 1ffff11005da62c6 R14: ffff88802ed31630 R15: 1ffff11005da62c5 [ 1490.378719][T11347] ? kernfs_get+0x71/0x90 [ 1490.383062][T11347] kobject_add_internal+0x632/0xb40 [ 1490.388265][T11347] kobject_add+0x155/0x220 [ 1490.392679][T11347] ? get_device_parent+0x255/0x3a0 [ 1490.397791][T11347] ? __pfx_kobject_add+0x10/0x10 [ 1490.402722][T11347] ? __kasan_kmalloc+0x93/0xb0 [ 1490.407507][T11347] ? kobject_init+0x83/0x1e0 [ 1490.412100][T11347] get_device_parent+0x316/0x3a0 [ 1490.417130][T11347] device_add+0x2e1/0xb50 [ 1490.421463][T11347] firmware_fallback_sysfs+0x2e4/0x9b0 [ 1490.426917][T11347] ? kmem_cache_free+0x19b/0x690 [ 1490.431857][T11347] _request_firmware+0xf83/0x15b0 [ 1490.436899][T11347] ? __pfx__request_firmware+0x10/0x10 [ 1490.442363][T11347] ? process_scheduled_works+0x9ef/0x17b0 [ 1490.448083][T11347] request_firmware_work_func+0xaf/0x1c0 [ 1490.453725][T11347] ? process_scheduled_works+0x9ef/0x17b0 [ 1490.459448][T11347] process_scheduled_works+0xae1/0x17b0 [ 1490.465015][T11347] ? __pfx_process_scheduled_works+0x10/0x10 [ 1490.471013][T11347] worker_thread+0x8a0/0xda0 [ 1490.475622][T11347] kthread+0x711/0x8a0 [ 1490.479698][T11347] ? __pfx_worker_thread+0x10/0x10 [ 1490.484817][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.489409][T11347] ? _raw_spin_unlock_irq+0x23/0x50 [ 1490.494608][T11347] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.499820][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.504416][T11347] ret_from_fork+0x4bc/0x870 [ 1490.509006][T11347] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.514116][T11347] ? __switch_to_asm+0x39/0x70 [ 1490.518869][T11347] ? __switch_to_asm+0x33/0x70 [ 1490.523645][T11347] ? __pfx_kthread+0x10/0x10 [ 1490.528322][T11347] ret_from_fork_asm+0x1a/0x30 [ 1490.533096][T11347] [ 1490.536623][T11347] Kernel Offset: disabled [ 1490.540938][T11347] Rebooting in 86400 seconds..