last executing test programs: 4m58.712970665s ago: executing program 1 (id=144): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001a00010a"], 0x14}}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0xffffffffffffffda, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x3, 0x81, 0x7, 0x0, 0x0, 0x40, 0xfffffffd}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r4, r0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 4m58.682987052s ago: executing program 1 (id=149): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00dabe00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 4m58.423570496s ago: executing program 1 (id=154): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) (async) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc038563c, &(0x7f0000000340)={0x180000000, 0x0, "119f04669489f733dcaa932034233bff3aba43d2103e2984dea6e200"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) syz_open_dev$radio(&(0x7f00000001c0), 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 4m55.977072848s ago: executing program 1 (id=166): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x30004000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(r0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4008014) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff00000500160089"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r5}) (async) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa2234c2"], 0x0) 4m55.641343753s ago: executing program 1 (id=167): socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r1, 0x1, &(0x7f0000000140)="6a76b5ff9a427fa160adbfbf103c8080304706d59573a86f68d1752aaa12ef548bba71df3013786cd130930f19d48f8d95c5188f86fc6821c89282d08e", 0x3d, 0x2}) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f00000002c0)}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000001800)=""/173, 0xad}], 0x9}}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001a00)=""/240, 0xf0}, {&(0x7f0000001b00)=""/66, 0x42}, {&(0x7f0000000500)}, {&(0x7f0000001b80)=""/123, 0x7b}, {&(0x7f0000001c00)=""/154, 0x9a}, {&(0x7f0000003440)=""/165, 0xa5}, {&(0x7f0000001d80)=""/182, 0xb6}, {&(0x7f0000001e40)=""/85, 0x55}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/73, 0x49}], 0xa, &(0x7f0000003000)=""/153, 0x99}, 0x6e}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000003140)=""/102, 0x66}, {&(0x7f00000031c0)=""/117, 0x75}], 0x4, &(0x7f0000003280)=""/221, 0xdd}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030002000000000000000005000000030006000000000002000000ac1414000022000005000000000000000002fffffffb03000500000000000257f07b49e8ccb3d85daacd1b074948e987d403a28350f9da000000000000"], 0x50}}, 0x0) (async) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x8001}, 0x1c) 4m45.572086942s ago: executing program 0 (id=203): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x1a1300) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) unshare(0x26020480) syz_io_uring_setup(0x4e8, &(0x7f0000000700)={0x0, 0x70d5, 0x10100, 0x1}, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 4m45.02464819s ago: executing program 0 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x0, 0x25dfdbfb, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r5]) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="efeecb5351698c6dd1713b1092bd39ff2326c06aee0d3d6a8302ab3cca7588228794d8b4581d9530550b2c3898cd351000cc112bfd0a39f8ff815db02b2aa57aed68b296ee450a78f9911cf7968f3f9f963216f4bab3264dbff1ecf0d477f343ade45e48d1d746f168098e889682602e4d2d1fc0407675e3e9b1b7990d33076a58557b053f893bb8de652795dd7eac9aa0b80df257", @ANYRES16=r2], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) (async) r8 = socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x11}, {0xffe6, 0xb}, {0x1, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m44.329025773s ago: executing program 0 (id=205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) setuid(0xee01) tkill(0x0, 0x13) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0xfffd, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800800000000000b80000003600"/24], 0xffffffaa}, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000000)='logfs\x00', 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x7, 0x8, 0x40, 0x3}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x1000084, 0x81, &(0x7f00000002c0)="1a0000000200000080f35df21c447452781492e24c352f9d75d7c7c5088e271a0bec2484bbf4ff26442453b78400e6eb8d2d1efbf39c884e0c481f2e043440171c4ae5b49ede1f4035f7aa4517d9765052b548f9024b9b0d389d1670da2fd0552c246f058f9822fcfb5acd5fb0957a76ae5fe20b573f3d1c882f20e28ce5c05faf6b82cb92c3ce4339cd", 0x8a) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) syz_open_dev$evdev(0x0, 0x8b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x12000021) 4m41.159064935s ago: executing program 0 (id=212): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_emit_ethernet(0x52, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@end, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private, 0x1000004}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002400000000808"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m40.53410379s ago: executing program 32 (id=167): socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x11, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x2, 0x0, r1, 0x1, &(0x7f0000000140)="6a76b5ff9a427fa160adbfbf103c8080304706d59573a86f68d1752aaa12ef548bba71df3013786cd130930f19d48f8d95c5188f86fc6821c89282d08e", 0x3d, 0x2}) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000001600)=""/114, 0x72}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f00000002c0)}, {&(0x7f0000000440)=""/8, 0x8}, {&(0x7f0000001800)=""/173, 0xad}], 0x9}}, {{&(0x7f0000001980)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001a00)=""/240, 0xf0}, {&(0x7f0000001b00)=""/66, 0x42}, {&(0x7f0000000500)}, {&(0x7f0000001b80)=""/123, 0x7b}, {&(0x7f0000001c00)=""/154, 0x9a}, {&(0x7f0000003440)=""/165, 0xa5}, {&(0x7f0000001d80)=""/182, 0xb6}, {&(0x7f0000001e40)=""/85, 0x55}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/73, 0x49}], 0xa, &(0x7f0000003000)=""/153, 0x99}, 0x6e}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000003140)=""/102, 0x66}, {&(0x7f00000031c0)=""/117, 0x75}], 0x4, &(0x7f0000003280)=""/221, 0xdd}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030002000000000000000005000000030006000000000002000000ac1414000022000005000000000000000002fffffffb03000500000000000257f07b49e8ccb3d85daacd1b074948e987d403a28350f9da000000000000"], 0x50}}, 0x0) (async) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e23, 0xaec, @loopback, 0x8001}, 0x1c) 4m40.095884598s ago: executing program 0 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {0x8}, {}, {}, {0x0, 0x5, 0x0, 0x9}]}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$video(0x0, 0xc407, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="66baf80cb84c701484ef66bafc0c66edb919080000b80a000000ba000000000f30c4e15d6d07c4e17b703e1766b8eb000f00d8f34066b835010f00d80fc7280f01f2c744240000400000c744240214d3ffffc7442406000000000f011c24", 0x5e}], 0x1, 0x67, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xa, 0x40, 0x4, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{}, {}, {}, {0x8}, {}, {}, {0x0, 0x5, 0x0, 0x9}]}) (async) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1000}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_open_dev$video(0x0, 0xc407, 0x800) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) (async) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="66baf80cb84c701484ef66bafc0c66edb919080000b80a000000ba000000000f30c4e15d6d07c4e17b703e1766b8eb000f00d8f34066b835010f00d80fc7280f01f2c744240000400000c744240214d3ffffc7442406000000000f011c24", 0x5e}], 0x1, 0x67, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xa, 0x40, 0x4, '\x00', 0xc94}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 4m39.47709771s ago: executing program 0 (id=218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x1) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000140)) capset(&(0x7f0000000300)={0x20080522, r3}, &(0x7f0000000340)={0xf, 0x401, 0x80000000, 0xfffffff9, 0x6, 0x9}) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m38.558223064s ago: executing program 33 (id=218): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x1) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000140)) capset(&(0x7f0000000300)={0x20080522, r3}, &(0x7f0000000340)={0xf, 0x401, 0x80000000, 0xfffffff9, 0x6, 0x9}) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 13.325749374s ago: executing program 2 (id=1084): r0 = syz_usb_connect(0x5, 0x3d, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xb1, 0xfb, 0x66, 0x10, 0x91e, 0x3, 0x35bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x8, 0x5, 0x40, 0x4, [{{0x9, 0x4, 0xce, 0x1, 0x2, 0x6f, 0xda, 0xd, 0x0, [@generic={0x7, 0x5, "f71f22810b"}], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x1, 0x3, 0x40}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x5, 0x9}}]}}]}}]}}, 0x0) setreuid(0x0, 0xffffffffffffffff) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x813}}}, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='([\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r1, 0x94, 0xed}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000200)="05cadc4e1c557fe4df5936e16b53b6cc5f6f3d1e7d3194bead1c855aa9c0f0bd64396468c97121dffd742b4e1c381c5b73af97d1f549973030c03860e45ce75c43bd1e4533f736a5df4ed6aa151b5cab401766347686e07ab1f2cb916d5576693782f740942bcf28638752b23772222d878bea2acdf39ed0514e9edb4ffead1f8ed63840a537837aa4723b950a690608e8715dd7", &(0x7f00000002c0)=""/237) 11.649628594s ago: executing program 6 (id=1089): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) close(r1) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) close(r2) (async) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) (async) 11.560799206s ago: executing program 2 (id=1090): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x0) 11.227597094s ago: executing program 6 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f00000003c0)={0x5, 0xd6, 0x7fffffff, 0x7, 0xffffffde, 0x344f, "8bec21e1382c329131320f813d6d7ab7", 0x0, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0xc2003, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000100)="7bf458e12fa4441b4b9a3c89900ad7868beea69bf17dc75383238308bf2e568384be3822a28268264ab0763485f029173f6055074d2a80c4f36b6498e3a38e726354e41a21b4d8900bdded521e33eebf10d1ebf55fa217784662be00da83e94c69e8691d944f3b0d7279d38c56d36a1c19fe9c2b981def269b28ea81eb9e856b0d8b25eb961e8b", 0x87}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @multicast1}, @time_exceeded={0x3, 0x24, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x7, 0xff, 0x2f, 0x0, @multicast2, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x5) timer_settime(0x0, 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x1}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x24, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r8, 0x1, 0x100000000, 0x80000000) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000340)={0x7, 0x7, 0xf5f}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048840}, 0x44000) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x10) 9.817065919s ago: executing program 3 (id=1093): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xa8, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40081}, 0x40014) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f00000006c0)=0x400, 0x4) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.700636783s ago: executing program 4 (id=1094): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x1, @dev, 0x9}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000140)={0x100, r6}, 0x0) openat2(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r5, 0x0) shmctl$IPC_RMID(0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="a905000000007464000100000000", 0xe}, {0x0, 0x33}, {&(0x7f00000000c0)="d6976d1a0a08772151e1a1fddfbf8270c1d5c7fff805d7faa08f2c8bc356b2", 0x1f}], 0x3}}], 0x1, 0x24004044) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@private=0xa010102, 0x4e23, 0x8, 0x4e22, 0x0, 0x2, 0x0, 0x80, 0x3c}, {0x0, 0x5, 0x31, 0x200, 0xb801, 0xa6f, 0x3, 0x2a}, {0x81, 0x390b8798, 0x3, 0xdca8}, 0xfffffffe, 0x10, 0x2, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d5, 0x2b}, 0xa, @in6=@remote, 0x3505, 0x4, 0x520f297193e84447, 0x2, 0x8d1, 0x73b4, 0x417c5be3}}, 0xe8) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) 9.576968738s ago: executing program 6 (id=1095): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$evdev(0x0, 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0xffff, 0xa, 0x1ff, 0x20001}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x1fa, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4040}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [], [0x83], [0x0, 0x9, 0x0, 0x2c8], [0x40000000000, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xf) writev(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x122}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 8.21387821s ago: executing program 2 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000e01b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.368309418s ago: executing program 6 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="2e0000b75dfe7088e6b62aa1f8484300b5505129642a7e2e94000000000000000000000000000000c205fb8d99f4127c9d18e6b62c09caf0147ddc65891d1b4691ae68686d364731887d5a5d87f11f2b780366ff7e224aa9416749c55656a0c07b6821188a2d182ccb19e75fbecc56f200eb4041dd4e278d0d50fb66a21cd7472eaf9b2c93a3876d01000000000000009167ae0a20118e63692dcd7d94c9f407af9a52322a49e3f7de000049c1b7a06f973211d85bc75096f7f8975c0922c5cd5bcaa15a5126fd701644fb20936d518f69cc", 0xd2}, {&(0x7f0000000240)="9edd40e5abd50cbae431967539ca6e3f336971387a4b5dc9abe1a04500ba625a42540022603715c2981656b4e3ef11d906d0464e879c60fcd2fea42189093b741c4d860253ae100fc00377508201fabf9bb2b65605839c9eee37375b881857e2443987560b1aafdc2f0e39228eb5151920adbbe786ac9790feca7a1b42e60fcf5a0a229cdd4b20cc8c5312ba6c328d6bed2ca76bfe734727d17c19588734caeed2ce331c2d10d34f", 0xa8}], 0x2}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x1, "d569e861dd2f1aeb7ee8589325f457a0c04b14100000000096ba216b1e8ac19e", 0x32344d59}) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0xfffffe01) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="f5", 0x1}, {&(0x7f00000004c0)="39a999a7e9c2433fb77c8c2694da6d4bd4692b56ebb2a7db683f9581dc78d11cc52edcb75057cf0d4f20954b86505f831aeaae384589709a5df12eb5a9b4737791423b47367353b528e9fdaa60105dc6e486455e7e561283dc7e9072e7939cdbd9876f966784bc09e090c5cb51685819ed079e901ee38065", 0x78}], 0x2}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @mcast1, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f", 0x25}, {&(0x7f0000000580)="7cd14bd937dfc869af", 0x9}], 0x2}, 0x0) 7.35813625s ago: executing program 2 (id=1099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a19f70000000000010902240001000020000904000001030002000921000000012207000905810308"], 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x10d) r4 = syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x7}, 0x6e) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r10 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380), &(0x7f0000000200)=0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000001c0)=ANY=[@ANYRES16=r9, @ANYRES64=r11, @ANYRES16, @ANYRESHEX=r10], 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x1114, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x10f3, 0x8c, 0x0, 0x1, [@generic="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", @typed={0x8, 0x61, 0x0, 0x0, @pid=r4}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="25075fe6d5d06683c708e80fbd8d51980a19747a92c8f07dcd9e6e7e814eea7fbf938f7f41c0b5aba0857a07b5e0313b84ae21dca9c2dd0e22757042450b1475a47a038559d7431182db6aa107d0089bf7f7b564899147", @nested={0x8, 0x127, 0x0, 0x1, [@nested={0x4, 0x102}]}, @typed={0x6b, 0x18, 0x0, 0x0, @binary="52b3af412cfb66a1b98f9bc138229af469a8913d143c54c3b85ee2f6746f305675b7e6c45f3fb533ee0bd3c5b62d27dde1de96ce1512d65361f11e34b723019f18c4556d44202e8d9a54af85a284f5467fa777d369fcd727f3498a862f077520c1f591c2c3c97d"}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r9}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x1114}}, 0x8004) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x8da, 0x9, 0xfb, 0x9, 0x5, 0x4, 0x81, 0x8, 0x9, 0x77, 0x0, 0x316}, {0x81, 0x3, 0x10, 0xfe, 0x2, 0x7, 0x3, 0x9e, 0x7, 0x3b, 0xa6, 0xfe, 0x10000000}, {0x1c38, 0x9, 0x80, 0x5, 0x0, 0x6, 0x9, 0x6, 0x3, 0x8, 0x4, 0x0, 0x68d}], 0x8}) io_uring_setup(0x483b, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f}) close_range(r0, 0xffffffffffffffff, 0x0) 7.031773011s ago: executing program 5 (id=1100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r0 = mq_open(&(0x7f0000000740)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r0, &(0x7f00000004c0)={0x800, 0x10, 0xa, 0x3000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c001480080007"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d3b", 0x2}], 0x1}}], 0x1, 0x4000001) r5 = dup(r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ffff017c00000400fc800c00018006000600800a00000800028004001580080093be1e0e93eb8477f22b8972090098c7b0f6c7f3c312531f77acf86d0b0d0000000800088004004880"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) (async) mq_open(&(0x7f0000000740)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) mq_getsetattr(r0, &(0x7f00000004c0)={0x800, 0x10, 0xa, 0x3000}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c00018006000600800a0000110002800c001480080007"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) (async) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040)=0x5, 0x4) (async) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="1d3b", 0x2}], 0x1}}], 0x1, 0x4000001) (async) dup(r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ffff017c00000400fc800c00018006000600800a00000800028004001580080093be1e0e93eb8477f22b8972090098c7b0f6c7f3c312531f77acf86d0b0d0000000800088004004880"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) 6.998296598s ago: executing program 3 (id=1101): syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000f300000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) poll(&(0x7f0000000040), 0x55, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x14) r3 = syz_io_uring_setup(0x10c, &(0x7f0000001280)={0x0, 0xb28b, 0x800, 0xfffffffc, 0x20002, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0x10001, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, 0xffffffffffffffff, 0x3, {0x3b4, 0x9}, 0x6}, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000700)={0xfffd, {{0x2, 0x4e22, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}}, 0x108) 6.725517518s ago: executing program 6 (id=1102): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xd3, 0xcb, 0xef, 0x20, 0x41e, 0x5, 0x58e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x1, [{{0x9, 0x4, 0x1, 0xd, 0x0, 0xa0, 0x60, 0x13, 0xe6}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = dup(r0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000900)={{0x2, 0x100, 0x8, 0x6, 0x8b, 0x3}, 0x38, [0x10001, 0x9e0, 0x2, 0x3, 0x5, 0x8, 0x3, 0xffff9ebb, 0x3, 0x32, 0x200, 0x7, 0x80000000, 0xffffffff, 0x58e, 0x2, 0x5, 0x400, 0x5, 0x6, 0xa0f3, 0x3, 0x5, 0x891, 0x5, 0x5, 0x75d, 0x5, 0x3, 0x4, 0x7, 0x8, 0x7, 0x200, 0x1, 0x436b, 0x8001, 0x4, 0x1, 0x4a61, 0xe, 0x9646, 0x9188, 0x1, 0x7, 0x8, 0xd, 0x4, 0xeb2b, 0x1e6, 0x9, 0x1, 0x3, 0xffff, 0x5, 0x7, 0x80, 0x8, 0x2, 0x400, 0x400, 0x772, 0x5, 0xae9, 0xf, 0x43, 0x4, 0x7, 0x7, 0xe3d2, 0x0, 0xd95, 0x9e5, 0x0, 0x7, 0x3, 0xcc22, 0x5, 0x6, 0x1, 0x0, 0x0, 0xb203, 0x4, 0x6, 0x3, 0x80000001, 0x101, 0x2, 0xcf8, 0x39e3, 0x2, 0x100, 0x6884, 0x10000, 0x6c, 0x0, 0x10, 0x8001, 0x8000, 0x100, 0x1c0000, 0x1b8, 0x200, 0x2, 0x5, 0x64d, 0x9, 0x9, 0x3, 0xe6, 0x9, 0x9, 0xfffffffa, 0xfffffffc, 0x5, 0x2d6a, 0x53, 0x8, 0x1, 0x9, 0xffffffff, 0x2, 0x9, 0x9, 0x8, 0x49ee, 0x0, 0x5, 0xfffffff7, 0x1, 0x5, 0xc00, 0x9, 0x400, 0x200, 0x8, 0x1, 0x5, 0x6, 0xcca2, 0x0, 0x2, 0x400, 0x3, 0x4d, 0x5, 0x1369ff6c, 0x1, 0x5, 0x0, 0x7, 0xfffffffd, 0x1000, 0x2800, 0x59, 0x32, 0x1, 0x7, 0x3, 0x4, 0x0, 0xffffffc0, 0x7, 0xa9d4, 0xa9, 0xfffffffc, 0x7bb5, 0x1, 0x40, 0x3, 0x2, 0x0, 0x8, 0x7ff, 0x6, 0x8, 0x3, 0x9, 0x5, 0x100, 0xffff, 0x7, 0x1, 0x6, 0xffffd117, 0x200, 0xfffff800, 0xb, 0x6, 0x1, 0x10, 0x17f, 0x1, 0x9, 0x15, 0x8, 0x3, 0xfffffbff, 0x57e, 0x7ff, 0x4, 0x200, 0x0, 0x6, 0x7, 0x101, 0x5, 0x7, 0x6, 0x7, 0x139, 0x3, 0x8, 0xfffffffc, 0x401, 0x44, 0x80000001, 0x47f, 0xb, 0x9, 0x80, 0xfffffffc, 0x6, 0x8, 0x0, 0x3, 0x5, 0xffffffff, 0x6, 0x7, 0x6, 0x1, 0x5, 0x6, 0x1, 0x3, 0x7f, 0x0, 0x5, 0x7, 0x6, 0x3, 0xfff, 0x8000, 0x80, 0x2, 0x7, 0x0, 0x0, 0x8, 0x1, 0x9, 0xffffffff, 0x80000001, 0x8, 0x6, 0x9, 0x7, 0x1, 0xfc01, 0x9, 0x40, 0x5, 0x9, 0xc, 0x4, 0x1, 0x0, 0x7b20, 0x2, 0x7, 0x9, 0x401, 0x3, 0x7, 0x0, 0x80, 0xffff, 0x679, 0x3, 0x800, 0x2, 0x29e1f798, 0x9, 0x40, 0xffff, 0x5, 0x4, 0xfffff61e, 0x6, 0xffffffff, 0xf, 0x8, 0x3, 0x0, 0x5, 0x7fffffff, 0x81, 0x1, 0x7, 0x4e, 0x6, 0x0, 0x100, 0x7, 0x5, 0x0, 0x1, 0xc, 0x4, 0x8, 0x2, 0x4, 0x2, 0x6, 0x9c15, 0x9, 0x1, 0x2, 0x3e3, 0xfffffffe, 0x40, 0xb5, 0x40, 0xfffffe01, 0x2, 0x3, 0x8, 0x2, 0x42, 0x6000000, 0x7, 0x6, 0xbe, 0x8, 0x1, 0x6, 0x9, 0x7ff, 0x793, 0x40, 0x1, 0x2, 0x691b89e0, 0x0, 0xd016, 0x7335, 0x401, 0x3, 0x2, 0x7, 0x8001, 0x8, 0x4, 0x4, 0x6, 0x890, 0x85a, 0x1000, 0x1, 0x1000, 0x1, 0x7fff, 0x4, 0xb, 0x8, 0x7f, 0x2, 0x10, 0x4, 0x6, 0x0, 0x0, 0x2, 0x9, 0xca3, 0x400, 0xd87a, 0x9, 0xfffffff0, 0x2, 0x3, 0xd20, 0x7, 0x9, 0x9, 0x5c7f, 0x3, 0x8, 0x4, 0x7, 0xfffffffb, 0x3, 0xa, 0x4, 0x0, 0x5, 0x1, 0x400, 0x7fffffff, 0x101, 0xf, 0xcf56, 0x4, 0x8001, 0xfff, 0x81, 0x401, 0x8, 0x9, 0x1, 0x7, 0x5, 0x2, 0x8, 0x3a, 0x5, 0x81, 0x8, 0x100, 0x6, 0x200, 0xbbd, 0x9, 0x8, 0x1000, 0x4d347dc9, 0x9, 0x12, 0x22, 0x80000000, 0xff, 0x3, 0x7, 0x8255, 0x7, 0x8, 0x2, 0x6, 0xe, 0x5, 0x1, 0x9, 0x2, 0x3, 0x0, 0x7fffffff, 0x7, 0x70f, 0x8, 0xfffff8d0, 0x1, 0x1, 0x5, 0xfffffffb, 0x6, 0x6, 0x3, 0x1, 0x800, 0xc0000000, 0x14, 0x647, 0x1ff, 0x100000, 0x3, 0xf5f, 0x2, 0x0, 0x1, 0x3ff, 0x8, 0x0, 0x4, 0x89, 0x7, 0x2, 0x4, 0x200, 0x5, 0x100, 0xbf5b, 0x6c, 0x2, 0x3f2, 0xfffffff8, 0xebf1, 0xfffffff7, 0x7, 0x2, 0x4, 0x7fffffff, 0x800, 0x0, 0x6, 0xdc2e, 0x6, 0x3000, 0x6, 0x966, 0x4, 0x80000001, 0x40, 0x4, 0x0, 0x5, 0x40000000, 0x0, 0x1b4, 0x3, 0x81, 0x1ff, 0x3ff, 0x0, 0xff, 0xfff, 0x8, 0x80000000, 0x9, 0x3, 0x10000, 0x1ff, 0x6, 0x5, 0x7fff, 0xfffffff7, 0x5, 0x5, 0x6, 0x1, 0x5, 0x3ff, 0xafa, 0x0, 0x1, 0x4, 0xf8, 0x1ff, 0x0, 0x2, 0xa, 0x91700000, 0x7, 0x100, 0xe, 0x0, 0x400, 0x9, 0x8, 0xff, 0xff, 0x2, 0x9, 0x3, 0x5, 0x8, 0xa, 0x1, 0xd, 0x40, 0x3, 0x2, 0x8000, 0xf31, 0x2, 0x3800, 0x1, 0x6, 0xfffffff8, 0x35, 0x7, 0x3ff, 0x80, 0x8, 0x28, 0xd9, 0x0, 0xff, 0x825, 0x0, 0xffffffe5, 0x3, 0x2, 0x8b, 0x0, 0x0, 0x9, 0x8, 0x6, 0x5, 0x4, 0x4, 0x11a, 0x4, 0xdf1, 0x6, 0x0, 0xfffff7e7, 0x7f, 0x1, 0x101, 0x0, 0x5, 0x3, 0x1ff, 0x2, 0x1, 0x3, 0x8, 0x4, 0x6, 0x6, 0x5, 0x0, 0xb, 0xa, 0xda, 0x1, 0x8bd3, 0x3, 0x8eb, 0x3, 0x8, 0x4, 0x730e, 0x1, 0x8001, 0x8, 0xb, 0x7, 0x800, 0xe, 0x27a, 0x8001, 0x8000, 0x1, 0x0, 0x4, 0x80, 0x800, 0xfffffcce, 0x1, 0x1, 0x5, 0x8, 0x7, 0x9, 0x1, 0x5, 0x2, 0xd, 0x7, 0xe46, 0x5, 0x81, 0x1, 0xfffffffe, 0x401, 0x5, 0x7476, 0x80, 0x8, 0xfffffffa, 0x6, 0x3cd1d30c, 0x6, 0x9, 0x8, 0x2, 0x80000001, 0x715, 0x0, 0x6, 0x5, 0xfffffffe, 0x10000, 0x800, 0x1, 0x3, 0x6371, 0x5, 0x27, 0x6, 0xffff, 0x8, 0x8, 0x2, 0x33, 0x10000, 0xe, 0x6, 0xf, 0x40, 0x62, 0x4, 0x0, 0x0, 0x8001, 0x404000, 0x0, 0x5, 0xa76, 0x0, 0x133, 0x6, 0xfffffff5, 0x80000001, 0x5, 0x2, 0x1e84, 0x2, 0xd683, 0xffff7fff, 0x1a, 0x0, 0x4, 0x9, 0x8, 0xf30, 0x1000, 0xffff, 0x1, 0x5, 0x7, 0x5, 0x70, 0xdd6, 0x2, 0x5, 0x3, 0x3, 0xd768, 0x6, 0x80000001, 0x4, 0x9, 0x400, 0x6, 0x5, 0x3, 0x7, 0x6, 0x1, 0xfffffe01, 0x1, 0x56a, 0x8, 0x1, 0x6, 0x7, 0x4, 0x5, 0xffff3373, 0x1000, 0x1, 0x7, 0x0, 0xde, 0x6, 0x7, 0x6, 0x3ff, 0x0, 0x0, 0x3f, 0x7f, 0x676, 0x7fffffff, 0xeef2, 0x4, 0x7, 0xf, 0x6b89, 0x3, 0x3, 0x0, 0x58, 0xe09, 0x7, 0xfff, 0x100, 0x80000001, 0x3, 0x5ed13e6, 0x6, 0x240e, 0x23530000, 0x7, 0x800, 0x4, 0x0, 0x7, 0x80, 0x2, 0x3, 0x10001, 0xd21, 0x40b, 0x5, 0x5, 0xa, 0x9, 0x5, 0x3, 0x0, 0xb, 0x5162, 0x400, 0x9, 0x55, 0x4, 0x1, 0x3, 0x5, 0x1, 0x3, 0x3, 0x4, 0x7, 0x7, 0x81, 0x7fffffff, 0x6, 0x1, 0x9, 0x3, 0x0, 0x8, 0xb, 0x3, 0xd9, 0xfff, 0xffffffff, 0x67c5, 0x8, 0x6, 0x7, 0x3, 0x3, 0x8, 0x3, 0x5, 0x1, 0x7, 0x80000001, 0x2, 0x6, 0x40000000, 0x2, 0xffffffff, 0x0, 0x5, 0x8, 0x5, 0x9, 0x0, 0x4, 0x1f, 0x400, 0x8748, 0x1, 0x80000001, 0x10, 0xe, 0x541f, 0x400, 0x95c0, 0x3, 0x6, 0x66193156, 0x5, 0xa45, 0x4, 0xa, 0x5, 0x8001, 0x4, 0x0, 0x13286ba2, 0x5, 0x7, 0xb6, 0x431b3201, 0x2, 0x6, 0x8000, 0x4, 0xa161, 0x1, 0x6, 0x8, 0x20f, 0x1, 0x2, 0x7, 0x3, 0xfff, 0x101, 0x6, 0xc, 0xfffff623, 0x7, 0xdc1, 0x281, 0x8, 0x113, 0x401, 0xfffffffe, 0x163, 0x369, 0x4107, 0x7fff, 0x3, 0x80, 0xa2, 0x2, 0x4, 0xfffffff7, 0x5, 0x3, 0x1000, 0xe, 0x2, 0xbe, 0x7f, 0xffffffd2, 0x800, 0x2, 0x1, 0xfffffff9, 0xf6, 0xe0, 0x2, 0x6, 0x8001, 0x3, 0x979b, 0x8, 0x0, 0x3, 0x2, 0x6, 0x5b, 0xf, 0x1, 0x7, 0x0, 0x6, 0x86, 0x6, 0x9, 0x7ff, 0x4, 0xf, 0x6, 0x1, 0x5, 0x1, 0x4, 0x2a45, 0xe, 0x2, 0xfffffffc, 0x0, 0xffff, 0x7f, 0x9, 0x4, 0x0, 0xfffffffa, 0x0, 0x1, 0x3f, 0x2, 0x2, 0x4, 0x1, 0x9b04, 0x8, 0x1, 0x26a70f05, 0x8, 0x9, 0xb71, 0x4, 0x9, 0x4a, 0x2, 0x10, 0x0, 0xfffffffb, 0x7, 0x7, 0x1bf, 0xba9, 0x1, 0x1, 0x9, 0x9, 0xf95, 0x1, 0x3, 0x6, 0xffffffff, 0x8, 0x79721913, 0xfff, 0x5c0, 0x0, 0xc4b, 0x3, 0x10, 0x400, 0x6, 0x3, 0x6, 0x6776, 0x400, 0x4, 0x47, 0x70, 0x1, 0x3]}) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x40) 6.68968111s ago: executing program 5 (id=1103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = epoll_create1(0x0) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10100) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x13) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000080), 0x10) r7 = fsopen(&(0x7f0000000080)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000000c0)='\x02~yT\b=\xc4U\xddmk\x184\x04\x8c\b):\x8b\x1bJ\xa9\xe4\x9e\xbb<\xc3\x9fFw\xc4\x98\xeb\x9f\xf9\xafK\a\xf6\xa9i\x1d\xd40T^\x9b\xe8s\x80\x143\x85\xb7\xa7V#\xeec\x1d\xc1\x83\xfa\x83\xfe\xfc\xd32\xa2#\xf8\x8e7@Xg\x9cam|\x89\xee7\xd1\xe2$\xfa\x12\xff\x8d\xd5[\x9a\xa0\xd4\x9eS\xdb\x04\x8f\xbd\xbd#<\xe8B\xa6\xc8-\xa0\x8c\xaa\xc4R<\xa9cAf\x05\xe6 \xf0e\x02\xc5\x84\xb6\xe1\x97\x9e63\xf3\xc1\xe8\x19\x94\xe7\xbf\xc1k\xee\x94\xf3\xc1s(\x87\xe6\x04.p\x98;\x91\xd8\x99L\x9e\"\x84*a', 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000000), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x8, 0x5000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x5c}}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb000001c}) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0xa}, @TCA_FQ_PIE_BYTEMODE={0x8}]}}]}, 0x44}}, 0x0) 6.523067677s ago: executing program 4 (id=1104): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) 6.357516249s ago: executing program 5 (id=1105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) (async) sendto$inet(r6, 0x0, 0x0, 0x800, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r6, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f00000000c0), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}}, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="08000500060000000c0017800400070004"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r10, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xaf}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x40080) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 6.04768241s ago: executing program 4 (id=1106): r0 = socket(0x1, 0x80000, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x7, 0xa000, 0x8000000, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x64, 0x0, 0x5, 0x29, 0x0, @loopback, @broadcast}}}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 5.946809742s ago: executing program 3 (id=1107): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r3}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@mcast1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x6, 0x0, 0x100, 0x6, 0x110022}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000100)=@ll={0x11, 0x1, r6, 0x1, 0xb, 0x6, @multicast}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000080)="2705670f28665a6dfcfc002f86dd", 0xe}], 0x1}, 0x4000141) r7 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x13, 0x8}, 0x20) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) 5.733774182s ago: executing program 4 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x37, {0x37, 0x1, "157c95b50f163a57e3d8fcb2a77073cfd9c8db2500e51e2d28d3ebb8bdc9b4115380c5417bd4188524db0d763c13ce9359fc232d67"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0xada087d9f9ce7a91, 0x82, "754bb935818953e4bfc40affc8293800ae7b19e3ebe597ce4b0a1a37c2ba689fb751981c9cde1bf5c20eb300f9e451202d30f22ee26fe31172690f4c91ea7395486ce8a46b93841cf37fda2734a57c1a750dc0e34d8bda0bd66842a4a25315b275fa761c54090822040ffe3925de29a67568f3e195ef2b639fc39097c1ad01797988"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0305602, &(0x7f0000000100)={0x1, 0x300, {0x0, 0x40000000, 0x3006}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) (async) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) 5.733410566s ago: executing program 5 (id=1109): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$evdev(0x0, 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3, 0x0, 0x1fa, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4040}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [], [0x83], [0x0, 0x9, 0x0, 0x2c8], [0x40000000000, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xf) writev(r4, &(0x7f0000000080)=[{&(0x7f00000004c0)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000005cc98463c667b3f922e6009b661b0175e8e86af305bb147e34426c0d03efd8aec52a1efa4bfc9558d43362f77a3c3d5fc159e0d45499e0f31277743054024b31a5f37dd6b946ed7cdcdd173f54aad89b2b09e94f4c25847bcdd11fc9ea6c0a7097dd7eab8fabcd5cbcd2c2458ddd7ed001c968137b778f3c452d02bc2b4a76ce5131453cd17354fe99deae2154107964afcb375341a6b59d476ff549ec719057fc60274adb2b3dc1811feb8be3c391a4195843e4eed1b4b9cd5aa8bc3c6a20499f10352417faacc53888c9c30546599846e00887ed3ee0438edf", 0x122}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 4.604289417s ago: executing program 6 (id=1110): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) readv(r0, &(0x7f0000000680)=[{0x0}, {0x0, 0x45}, {&(0x7f0000000200)=""/158, 0x9e}], 0x3) syz_emit_ethernet(0x6f, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="3cf5a5c50042ea80316fd116a12442758162abb2403f90c602d5f4ecd9663927b6ef5c9fbd1d75f1c8becf5ed19deb57cfcb412c225442b60f38e918c7f5eae59158b34f48"}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x2}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904000001020900000524"], 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x20, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x2, 0x0, 0x4}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.143527336s ago: executing program 3 (id=1111): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d30001280200001810a00010071756f7461000000100002800c00014000000000800000010c0001800700010063740000080003400000011014"], 0xbc}}, 0x20050800) r2 = io_uring_setup(0x2f00, &(0x7f0000000940)={0x0, 0xe8e2, 0x400, 0x20000, 0x3}) rseq(&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x5b, 0x80}, 0x6}, 0x20, 0x1, 0x0) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000009c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0xfffffffd, @rand_addr=' \x01\x00', 0x6}, @in={0x2, 0x4e24, @remote}]}, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x4, 0x8e, [0x2, 0x4, 0x4, 0x4, 0x9, 0xffffffffffffffff], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/142}, &(0x7f00000002c0)=0x78) socket(0x25, 0x4, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2b, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x9}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x488, [0x200000000480, 0x0, 0x0, 0x2000000006cc, 0x200000000802], 0x0, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB="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"/1160]}, 0x500) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x8, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.73792316s ago: executing program 5 (id=1112): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x20000) r1 = fanotify_init(0x200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4a000, 0x40000}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x14}]}, 0x28}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1179e7b200", @ANYRES16=r10, @ANYBLOB="030327bd7000fbdbdf252a000000"], 0x21}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6ecdab21de6f128b}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x23c, r10, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x7}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x401}, {0x8, 0x13, 0x28812ce4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9000}, {0x6, 0x11, 0x5f5}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xed5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x14}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xa71e}, {0x8, 0x13, 0xe}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0xf0}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4040880) r11 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, 0x0, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fanotify_mark(r1, 0x101, 0x8000011, r8, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x4) 3.634951505s ago: executing program 2 (id=1113): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd09000084", @ANYRES32, @ANYBLOB="e3ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6c, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2a86dd6000000000283afffe800000000000000000000042d100bbfe8000000000000000000000000000aa89009078000000000000000000000000000000000000000000000000000000000000000000000001"], 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r6, &(0x7f000000e8c0)=[{{&(0x7f0000000380)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f0000000480)="4d68d4ec350339b0897ff0586c7d108d094c4479fa9573e24f368f815b699623b8644866c792c3a8eda0ec1a30725f2ca3d941c7cee407c1f2e54856893e6433749db6a8c6c989f0919557fbe1789cbfc7c7f4137d72176fdb6c41a626658731aff4b1d6dfa8a9ac0af79d0a262f0ba08a817f480b586b037a613401550fd3b1300d558fbcc68e5ac60b359bebad7f19d1981727ab09f31e452d9aa7155a64e3", 0xa0}, {&(0x7f00000001c0)="7f1215b7bacb1271199ce4101bb4a2f3f62ac0914315a210910210cede3f", 0x1e}, {&(0x7f0000000640)="a136a2cf5e42afb1637827497995b7c18ad2a56ccccb2164d3f0deea1d06e4dad0a2cff9d0f8ca8eee643b96a5484bf0c86b0a1c0e44833fd4462c3f8f299af0e60f23cd51e7c2d44b52a90b60f62bd249c6197b6de7447eb83237ce24b769c26984370b1b763dbcf2b1713f2714fc85054770df30941804619e03f01d7cdc5d9291fc4394cc1343d38e45a2a5143e062256cbee7b7e", 0x96}, {&(0x7f0000000700)="bceaf2eb2520920f9a8187d6fbad1516c88aca257722d3c35a1ad2f18c99b26c6660c14f5ac72e7299144a36ec8a9250defb90a2699cb89f2777bccf228e6e1623f2f87c204cdded2d90602808075fe37eb8afa7e29eb8612b8835367998d2f03432bd8e6051499422ff453630bfaa395a86a199efa8e1859c4c3f5b0982493e775d8dcfc59c7110e48a62a14421ef2b981ca5fd9c0f1ef5b9e85b9fab10cbe61a7367e8002f66b93b9ca996bb", 0xad}, {&(0x7f00000008c0)="6a9a21d0c8fc106c16b95146908270e3ff6068760dcfecfb77053b87cf76eae20da370e15226d4704a541cac7740cc2891fe331327d3771937cf4908191cf3d59f02c133075c1d33df6a966ca4408a377c2e920a7a0073095b07546d6cd6b9c3be49f43f309e1b28837dd1bd657c097fadec422f6edeea6586030772dea7c924cb93049b9122951379", 0x89}], 0x7, &(0x7f0000001f40)=[@rights={{0x1c, 0x1, 0x1, [r6, r1, r3]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r2, r6, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0, 0x40010}}, {{&(0x7f0000002000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f000000d480)=[{&(0x7f000000c280)="159aadfa176a080f67b566f8205dfdae1b8b20c9eda35a90a33c9b222adc13a271db4ab01fcd3a6f52002519dbf017271b6d291e73bdf2b7460d2025974d75b397e5d9b6bb3ba571aa89484af883e3bd57d2d4062d1a60390442fb0b6c266144dfed7a3159020924aec3f631b90086ab6caa6cad805b1cc1db0ded69a2af63d08ff6999797740bac1d07c440104656ec6d81aaeec5754941ef72f03ec939f2dadcd90ed6f69be4d382946ed12ae8910bc54f2a50c3f18d3fd0055643548955e953d88de84ee7c92be446b145d397b6c69cd0ee39c7c23bcd24f1beb07b2e12293cd43f886538145e00dd68fa1a421b", 0xef}, {&(0x7f000000c380)="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", 0x1000}, {&(0x7f000000d380)="b058cb19035331dc2d1b3c74e3f9201777111f93258773b0d9578c9a5712234375ddaeb1b5bf679811e18285c959a18e8fca4e3e9aafa37588a00943ff5c61de7d38c8dec2b313a338499a58f5ba55abc618132360284e40037598ef91c7d9e9d1d9a80d9ce8bca67c0d2c63381edc2c8ee3941bd5b34c091180bdf848321db05895fda66014b90c6b4e1df11dd730f4d5da3569e913342a37d19c725bcf392641b3037ac8f26ea2c124c62f12e8e7f72c588f7aa5597299e326d3db1bf240bc8a6721fbb2", 0xc5}], 0x3, &(0x7f000000d4c0)=[@cred={{0x1c}}], 0x20, 0x8000}}, {{&(0x7f000000d500)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000e680)=[{&(0x7f000000d580)="eae819c37e4fcce087b2a24128094f5f04088d33aa1aaf89ecbe27a0fa57a1c845adfbecbf0ad76498c45331b3172dd5c397d0f2eeba33f9a01419778d4b7638fdf3a88ea23b65e8e20a134425268a38fd8cc87c9e68c594ab21311bc3f3dd5113ab1a066b012a536c9c575308458460c06c14314cc97963e64919737b7f1f1f7d093747ce7767a7f9f8167992c603fdf088ef4c9c4dbde138ef91595799bae14d22255bcdc0ad9c9721dc5df375649d25beab2f4e6c586550d086281698104b65fc985ce7ca957b651fa04b010755bd5186", 0xd2}, {&(0x7f000000d680)="16707ca4a8715fcada0a74f621fc5e84e6a9f0c7b519a68018bf3a9350a667f2ec84a34ee94f2e6219539a980b41301fe9b6bf0857fdf3b9558bf3290233de571719aab75530e92b5a0307948e2d631294595d47f137b33e0704e2e7237eef1bfdb650257f11f0beaa3bd15cade0a8f3ae33ce7bd5f89365a1a67dfdae4b73a7a58f96c410264fb90920ab50749ee80fc3f039448579beb61a0601958889c9b820c191eb7d7ed9d8d19f26ef5037636fe6791cd96ee922b67adb80fdfb420025902a7a4a3142b0d2878158a8b6a0026ffc750c213b642949e86194cb1ffbcd6869a86943142f09c12b9441cab4a1404b2320a46f625144215fcb2efbbd92950347df4f87d16dbd3d1fdf85b22660a749b529a4a7dc7a0ed225aa449a37d4ffd84cd9189389d9dfd69201a631c0a836e19845f63c320f230a7e0c94572373622bd1d8fe2504cb582c8c23f59b062de1633f33296107a7cc671e849ec19b68ab8610959688d7fc325c3c8fec0b03ede1556b60a9a1c15a37e14fda4cf8e8397c484008eb7909996425a87390651771cac37386174966514e58086924b4dda84802bf4ddcf76b25731657e24cae907548d38f8559563eae32f106a762bdbf42261da3e01a31f2e6766d2cb3d974a589e43c8a780d845d7667d75dc07ee571333e6b3590212e5357281d263a743fe52666cf93bd15069b67374e468c55addee5ed0ac48606ee88d5ccc3407e48373304600d6aeed8479d4b0083411ccf0da173fcf5079662933836d1a88d07f866c093a1c086e9703a70e7cd553a302665dceff6a339fe96c6c35a26bc1bc97191f0805a2dc14d3d1ec550cd5f8149747c0ee6f9f7d3bcd8d1d36772a771937bc0bdf9ec9130015d4ba27d7c4a1b76233cb26bdfcdd90eae93f0efbd5135e9725839195866feff114276fc52b9b19b9c9399f5c8e2dc1e3e6c794f7ca95c10fdb3e140bbdd5c1c94cd2e1e647a1b3aca6f2d8091458ae0abd9682e6cdc2cd7040f9d6835d450715bef2a864b1813aab187c019318acc213c1daaad2f71f70810f3835a42025b6ed5a6a7110d432428cffdc8afde879025a89385744009ed6c7ba5e54155d483e15f75d7ab8c479fc17c437a342af038e4380a894e1d870599c586ada3e2f96a13b89df8627fba0921d217628dfb0b69f02d846979a8f8ea7bfbda061d3b1ac3de6df817077b858749c52e238683a20d10d40e8b828ded3f06fb9bdcb62fae217863b54ce1399851b62db394bdd2396b4894e62581540f4bc2a7e3e4e84d7813d04be1a213fa3b5dca4195cc9c442a3efd24150ecf29dedda737a3c17b5908150680451446b69b2efbd1991b8cc7cb73f2a56bca607ba0090746cd5c0fd5fca634816c34a010bcb679cfec481ab075dd3bea65888eacf48ba40fc8f98adca510e36ba26ff90638da1cbcee9ccc5c024f376541cc1a28652670d6607311826d0dea7ce742b86647b0502a3be70b5ff8b49e13525b4e18b8fa783521cd5f70b56945699680f1267a47837e36b9eb0e178a8b410cf42180a6f47e60b83dc95d8fc87ef7c8eca1c8ee853f29dabff42700a0caccf6cee4cbbc03cf81f9338493ed90e657725a8b06ce090e139c0ed8ab3745830c9ceb1d89c6a0491ded46367d5822dc8204cef2d78e3f712784d3db8b8676a9960e3bc8cf1505ce5b311627c906777b1bea65dc2faa285123468aba732dc4eed853ac86ed282ea9bb8f92081ef7cdd03e47e947aa96162d43f8383cdcae0b55c7725bf1f145a529d10905a180af75ee7e6161db485d902837a9bec26cb8c34e4fe5f2eca36348d8cf9d2f57a9b81ee30594603094439ff0df04e004570d4eb8c3e516af95931eb55fc8a31de0af6a0f8d3ed9a7662c62ac00f53afee93cd6a6631443b0621d8358770290fced6a865f32e81e0164a4cec47c29671c51eeb470117c3d2daab65b00e50e1b15c8abe1003fa4a15a2c6a7d7f13fb2d5e75cbd2c9f0e1c177130b68ce95c040f1d2154afe2105fe6bd793e773617f7b4242e6494f61ec7e76ebc10a3b4b2ea10ef54f65e4a2ae15b74e575ecafd7fb799c9d7164c8aa76df3c96eb024edfffcba6994a528a42434e51f3edf5c5c504d6441894061b764c93d56f659be1127e085b4ef7e56366a85552d4f0fe7bf9da54acbbeac9a048d318bb92505c7ccf92417ca82be4494642ba988d15e1971ea2af6231dabc34ecff5dbd09e4ae5be3c13b501fd41d025f785266b4b0ceea1a8e25392bdeb547516cc859bf2d17274f98016a3fa204148d20e4ae83d3a404614ceedfe3da1eca1fe0346668a14a524ef3bea895ed830585334a3745b06863bcc1a7b0e7c49f5539bf2ba1326e3b3a1e05a9e13de113c5f71d3e7f25a8fe7054eac4f095ca18b0a16267e11cc12482b9f48d9d10a6540184e8d4665710134150b22c90e961932da7192e1735126dfc431034b875abd6ebee53373c2d37dc4c1fcd8a7f1af18b2c48f42beacbf88fc4aa286cabd6466c3668557a0cc96678142e4036c0c2b9915647132556b321e6b18d5c46f50423ac884696a6035e277280e56b397448f71969740eb19d2b67b19a903f348eef0edea0a37169f72e7cc8edef679f0640c52084281e9776c1175def8a749630308ac6ab6d6f114e32b1b091c32bbedcf674970263bbeb1ad30150ade766b78a61c20a780012f978a067bf4aa05f492f8d8179c156e03c9379310664edfeafa2b788cd7332c4359e776d2e3a9dcde44daea847450a222360576b307e9964a9ab98fbbd47428188a22df918e7193bb99c7867b77bd557b38fdc171e6433121eb74f09759d67cccbf4bf1d13adbf19079165923ae4f7f5c467f2ba1128501edaabd3bae3ab7c3fb1a529332e97bc6e4c8b106b3c7afe4fc4262d6d1b3afe3f3f9bc720f3cc47a2880acc9fd1cead06e8e46678ec56ff25d34cee60664280a101d2ceab815bbcc260a58b113d769f66834d22f52a54ed3746d96cba5ddb6be7c2ee0e3628872c8d616c77bf8347c9df21522afa2b0f7e762aa39e8f3e7024049866f8eabddd452e447830b4a86f4086c8f9552e06f7775dcff36d4ec3930bebaf58f39a83c939b946e154482b20f31327db816cd01ed00b2de4cb8e947dd2af3823efa2bcd475eec0a7340b6fa1bb88448d75b7c5dd3776f7f153785b67eac7e45f89fb6d3cbf2f9f0930447adb35dac2f68bee6eaf5c937dfe52fa5731a368fa3572895822022674fa10f12a6603251f6075fc7b850de420ce664db5e88c49fb5d31746cc163d2b62b4630ae6bfd2ad028fd5a4eaad575b9cd2d3a9c14dee1bf6e803d54daaa2651f074caac76101b201cd459c7da5fd8ad3cae0ad5e7af0c1269838f2b82ba5744103fd4ce7c2b92b89597af8c6faa51e4249e5e7100a410c43575d77271a6247978db010013db6d88e15e125431ebf6bb7fefe25f48ae7515b80823ceba78e154ee60262ca30aaae1f01e242ebbe7d13007f8b237a5a58943685658183d8de14950a67c105799817c2e9886a520906109a3b894a957087302b65f802fc5e020ff986902b2fbb723f761d103bcc42cebc3084a46a968c9d57d7a7f4951a1738231e56b8134e4ff97a6a8ddc9ce62542596dc65416fc3dabcc0a86c3333be1696865ec78f34df1435e663c4e8e04219175282425494d18e0bd21f3272f7b677a16a78da40e85b3dd67324f0bb225cd07e9e54aa85e30c94eac703d7b7f5440a017dc66fcc929245eb9732c4c00a29d27e8d617d5b1fccbb6b2e7fb69b6bc402326ca0b4601d2e179d052aae622e7197896167d9315390c4ed40578cdf6e00f45cac46811d68febf31c238ad2288bbe1cfbac1a8be01889add88f02646bb5b49593da7c77c0a0174d6db7e52816796b3a894e7efe4ec346c31e875095663fa5ed4d94a586103e9ddd16c57d456779723a0146ce72c95ced7668cfafc64dcf68d73cd27506567ac7bf1a0fee74f6831aca166fd73f00f079427bb965b9aae445124dccad7d4f32b4c1f3a465022006b351e87d9c712e71fa70885705f32259f61a82092c6cd3fcabc41025e0d91224459e59fcd6331728bb4281bf5ae58ed24735578af45d4fbf621a45b3d00434d03282adfe41425b52eec3148c8a731816dfc88a9c3922bc71ce78b842bda05464149cbff99eb5084fc1fc6fb8568034cc897f989d62285b763abf4fa14a154a9bdd991894a4166f507fac19b45b7c8b5331335dffa96673a2d2b5363109fb2a665bd2d7ddbf6488cae22490c5145d4f30dbb3d216ff8e008c7a1e51346875d884ff11a44b93cb7b9b26ee389748ba300e088888e849313dfa069b956ab1f2b20b4c7bd8bb5d9881b0d35cf6a0746ff8cf612f6021d79845798890056542d00cb3ea56ac8855f712bfb9e4ec599c68ff7e09c34b6e0ec8a0eae439e6a66740bf6528b24b06ad97026099029cb71a75f32a5c68bdb0b5e982662236ad0f9cf7ccb314a0a21ddf0b598c6a2e25cb76044016399be7997634904d964d2950db197839a855f0aec28370d4528b9aab69ec1cbbde2a434d9dac3abb2d292ebfc408a501d47364e246c15825c5e62f8c1cca698b3cf5767f916e4094ae392046015c1f297a190974d45b633e58859d329bc0b86b89829de223c1366944b2773bac364468a971ca50aa14c80dda4e23ca015e56e7cac9d50d5c695a668e4312c3697045ef2b0334a274294ac7a7de2b98ce1da866a0e05554321e3898fe4114dcc88ae8640aeb7dde20265c8b3da71855fba80fb1a137ea520f6536b09cd0aa6a9e04e272b80a0a19e1d8248d604c08966db510283c6484c00c0411ca20b4128a2c11f90ef473d894efb5d9fba99ef012c846db11c5616d4f9a2e3d0d4e5ed28acd960bf4672219840ba5a58abd1fa42f43fe736e542a5e1d1a96801b9962b17a857c11615a38261980b5d5f6feafe889a552daed362bfe59409581ba3f0a9aff91519b9c0ee9f3b7c2ecc12e57c3c5aaba1972fef105b6439791cc31b710c85ad3ef25cc08497b3b972c11f765b36acdbce003cee7410e2c78068b02cc2aef6edf4cfa3481e35e7923ccb9da12a8f86e40f5c376228802de09e7cc1c7ddd103493f983033877bd15b9bbe91abd8e06283917bbc318dc027c6d20b2d7aa8edb80cbd32d0ec246827d1d8a005d9fd467f324cf13eafb41f3534a1fd22b29f6b6ba881fc05ca4141fe2588db5e427165487fa25e05a3d5495af2d342e628cae0432e2d4fac66772eac346adeef7f23ab76ff3cd1414b8b290274cab8f8ac4a3c50c7003639b219f300cb41df71a1e351acbf078a66dca18e9db02021bf72dabbe85817105ee8ed948dd649922ebe965d51003d167d537f6826aeb5339577c8113a1c432531a53e2b378c608651ebd51bc3247efab04f64b9619e8d2e83e2094732ed561e2d8414c2354eed12b50e9fcb70c3949d83629f762efe86360681332eff9ca5f1e3e902cfdd73a6d2624a21a10abf44c650c85d55ae1d6ef242dcd34cab35f7e7f6435e22cac91352d8d25cd58dddf22bbf7d79853dfe678f08fa0b198d1636abe3eed2fe4677d95e6790a548f84d73185613cfa6952009126b3253bf21c12e38aeb46ba33b5d58ac06b0aa403ffdaf2869bfd51c5f9287c5d8ac89ca55674d53fcd1ec2cc71007139f0d6cc3932c2802b9fffa55f3d11c5e717ce31c047dde9879ae1a2acd990dcfdc4961ebe86cc5c83cb50fb28e30ca2a7704abcefa3a70ec5cff7507a8d1091def67620b1579f37a0a845b2ffce0f4724ff816ecb41ae59", 0x1000}], 0x2, &(0x7f000000e780)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r4, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110, 0x4840}}], 0x3, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) (async) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) (async) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000600)) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) (async) socket$kcm(0x10, 0x100000000002, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0x0, 0x3}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) 3.124865946s ago: executing program 3 (id=1114): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.933622108s ago: executing program 4 (id=1115): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc140, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) sendmsg$TIPC_NL_LINK_SET(r3, 0x0, 0x400c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, 0x0) ioctl$UI_SET_MSCBIT(r5, 0x40045568, 0x11) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc0585605, &(0x7f0000000540)={0x0, 0x1, @stop_pts=0x6f}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x1000}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r8, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r9, &(0x7f0000001300)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x86c2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="58e9d602828a1478f02c740201ac33a621468552c7c0b45449d976aa4bebb3e2e1d8beb3f65828b1d0d3225c4d1e4c2b6f5cd78a341c8201e7c647025bb5fe31dcabf066379a13969da4e82a85dabe92a0657ec338908cec871e9b83f53a8cbca272f24fe5e9099b1c9fe1e3c0f042ee503a62fedc9101ccb1c882b6184577ef559dd964d2bcaa0bc0bf5062ec2d8ec9903453cb0d675e4c408b450451add67dd76b483940f810cdecddd5b71ef8f0b12c6e7e72bc63581ac2c7ac50f9921a30301ee67ee654072051415f85ccc720d90022694a0b1d29092f490af7fe4cedcc78377d4a", 0xe4}, {&(0x7f0000000240)="1321f6d9e1517f4394af1fc693af1d08fbea0235970d78779e16ed98625e4672ae76de30", 0x24}], 0x2}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x27}, 0xcd8}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000440)="8dea3951fe04c7fe6b80ff48f6125badf019981bc528497ee1994f3892da872a58c5e1af7b039f106c22ad207341a51517b86e72168874084f069c01ffbb2e529d571b564af22262a5cb762216dd5aca1dc317b920bcb695ae6d89cc27c32956ad0507ea2d753547bc71267737644718d8cb998e22f27ff2b22f6dd8fd09d2b99f499dfc9446ded456aff253a0a70254a5", 0x91}, {&(0x7f00000005c0)}, {&(0x7f0000000500)="8c6e1b45e81b46462c1fad8a639d45aaf72c", 0x12}, {&(0x7f0000000640)="b133eaded0c3086acf766db7aa977a0a4546171d83612406e530b3f3b44a165abd3b7fe5397ca39a13b79c4015b51d8234022b1a430042577ea82168dc09b56d3ed1dcf006a0bd9fc8ce66f8946cd6cc0cb74c8d33bff303e97ddabe6f24aac509eb2a6c4f7081f2f6e57fee678ee79fc4ff7f67bf124aac9f6578182961f1c09ba58f", 0x83}, {&(0x7f0000000700)="227a04c6dcb62780a964b721acbe75742c3feb104af058b8a3a8e4ba9b762a9ec4989d438e02a6dfe5a655eb0f2e46e38f6b80e852c92d4815741cb5a8a32f04234ee66cf8f4584b2cdd85ed778d28e2407243a4cef46677f59362e83c775d175a8d162ac13c1bfea82be490eb20f2711b75bd5959f90b54704d096d87a5b1ec75aa3c9e671342372b2d8de17df4d5ce0ff53648adea02835e9f1d673df0ffd4e1689b944f798764671e56a83db47c47f41b382aa535a274fb90", 0xba}, {&(0x7f00000007c0)="5b5eba5139222e368f7a0864e191000a69cb5e3cb627ffce9868ceb8b0869a3b3d404a02ee5fa2da7c50fc0fe41607f0f16bbaf1803becf7da9b58a87fba8a27c8e5a0ac99e5313fff428226d26f17a92f260ddccf9b780882cb3f3817d7cea921c6c57bc840ebcb7842f50fbeff2eadbe", 0x71}], 0x6, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}], 0x28}}, {{&(0x7f0000000980)={0xa, 0x4e20, 0x7169, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x88, 0x19, '\x00', [@generic={0x3, 0xb0, "e77efbd0aaf73e13067302844807aadf9036ddddcc510cd4114668d2a5296473d1cf26a4b25886b63997242d1d164be662c80ffc6222e875e3f206d980d8abf94138c7b07a458bf036d03e87cc6ec280ab82df192dea7c1896bc7232ce37e803d3b0846942926ab88d32d5e3d17c0b6b8168c807f4a8ddb8e1d6a517759b62c59beb1cae8788b9c32c77c85fbc2513c302f5932889edc3df1b4c74da10348145a46ed7d5fc2c69fc89e56f31733fdefb"}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x80000000}]}}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0xc, 0x18, '\x00', [@generic={0x9, 0x4d, "fa492151f3f138bc21e9fea068251a470f6bd8dfbaba47ccc8c82e93829b0028a96816e8dba7c87b0a0d74e4cc9596beb909f91c2ad085cfadbc10cd137b858670b123072efa7d615d10a13526"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2f}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0xd, 0x4d79, [0xed6, 0x6, 0x2, 0x10000]}}]}}}], 0x1e8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)="106eba54c42b477fbbd9c057837b7e186d73ab36f5a8e720fc990eb4ea76d956c25c4025aa56e2fb4286fb8af6ec206b3e1140bd081ed469b26839e77d4d5f2bde60341db2ff4ea021e0472a9ea419b7a0376e526241db6913", 0x59}, {&(0x7f0000001400)="38919ca237547266c78662fefdfc8568d96709bb528179ea83f805fa86202f7f74355deb93882a14e5a594087557401ae9fc265f219a96e46ef1be163ac9c26c9afef20780ecb5fadb048b9784369fedd4217872a7fdc963924053efa8fea8088f9a34d6a2e4465a01301903badcc0724267929d717adfa31cfc9f3cfadefea3f2839234f3fff5a80ff949d8ac57c747d48b09b110f4d618895c95b74e9232807b305b74ff143179be053494ad7f4f0543d549e38274e28c24ebcffad8428ffaeea8a89b2fb9590dff04a449", 0xcc}], 0x2, &(0x7f00000012c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0x496}}], 0x30}}], 0x4, 0x20004810) 2.351710368s ago: executing program 5 (id=1116): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) read$FUSE(r2, &(0x7f0000001300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r3, {0x7, 0x2b, 0x0, 0xdbbd3c9c5c9deed7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x50) write$UHID_INPUT(r2, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x20) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYRES16], 0x0) syz_usb_disconnect(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff9251"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x27) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000003340)={0x29, 0x4, 0x0, {0x3, 0xffffffff, 0x1, 0x0, [0x0]}}, 0x29) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_ep_write(r6, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000001280)={0x5, 0x1, 0x2, 0x0, 0x3}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e657665000034000280050003000300000005000400ab000000050009000106000005000a0001000000050009"], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_usb_ep_write(r6, 0x80, 0xb8, &(0x7f00000011c0)="12393c4ebf2315747b3fa1325f81d952d59191993ebccb22289569d670312545e962f4ccd632db3845e40952ceb509c1d88557f2c086f09c17ce3f3b135851b91af14df37dd0f97cfe8d75271ee7637393fc5e2b3af5c26e291706da99c44957ecc578345d6d3942cf44c29874ec11a93fd7358d40ba9625b067b407296cbd4b854dc4ca2523f949d7a00264b084528a40b576c6110dcbd14251ac57c0892b6ee4dad47f5b3d3f72ba2e49de3f1c078187d49cb72daf5d8c") ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000012c0)) 1.581331794s ago: executing program 2 (id=1117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmmsg$unix(r0, &(0x7f0000002c00)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)='h', 0x1}, {&(0x7f0000000440)="e14e8d9e3a0d629e3ea302dbf8e3cb79364e78cf3f843379a56bc14c5340f8ef87e6cdf2b7d8766d81c0b6b99964b9a8d92fa6916edea4dbb81320ab883c8f46034302192d70fc9cfc17d0086aca2361267d7d52bbb45894b59114d231c2dccf7b71d35630ee5602af58597c5547761ccc6761e1de76d1a3e8aeab114d853a34bd51dd961bfba51ce3500d5886faa7877ae2ce62be15f3a2e7c84b3798103efe108ec1049d7d65", 0xa7}, {&(0x7f0000000700)="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", 0xfa}, {&(0x7f0000000500)="73813061ec57e1972e9f74d8ff3d1092da0a12c6fee81a02bfe2d5b7d137e313ddad64c5aa4879a1a8daf1ee90e6abdc89bc95b2f9a9d0935cff0ff84d7892f299489bdf855b27d288ba0bd6ce4f2aa65a87bfe00eb6862b8e00830a0cee66bf0fec6e76fec58634a125008f6f64eae6a335fca5519ad1801decaea93c257637911d08a5117f50ffd27f594e658d0a67f6c71cf57e4d061b3c1440a47dd1", 0x9e}, {&(0x7f0000000380)="40f5e784655114cdd5ad5a8336", 0xd}, {&(0x7f0000000800)="cdcbfa90cf7b90fe57926ba83b1d4183c8fa8d2140d3c914cfa4248e8ea6870ba5e1901377a55e6717c5b39ed93fb6e1d048f65d748431f23341f9bf43cc9519b58b1a1dc4434829a873ac4a0f26c4c305754e869d6cf4bb77924d06fe76a85405950292ae33b112a072ca08ee94124233648f1b455f37ce2643b796470987fb8c5976122f82ae5ff9b788098b8cc7bfd9c9ee39f450580e3fcd71b7636b35d96194d378969a25e2167b0f734bb5a04355807e5eec1daf079bf3b877aca9ed807c74bac76aaae003eab44a3880879fd4a3277fca2825b336245166583f70b4a5690f7f2c92e7", 0xe6}], 0x6, &(0x7f0000000ac0)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r1]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, r1]}}], 0x88, 0x20}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c00)="c4cbaf018e65a9d3887393514ea4a57ef87459a45e63d13577a8df51a7aaf26b20e1291355e81ef21655b231527a6d05f69c37cb884a6d0889178ecb02dfb609c3802a5a2dc9c456ef7a4d83de90ab561b7e6679eedc91dd52c4f05bc0879be5411e02400c52baf4d84430e45c115b695621289bbc82b2451d9fdeea310afc414995db53646ff67a630fba678a001b43fe74f76abfd070d0", 0x98}, {&(0x7f0000000cc0)="25bef2a00bb5bf13d971a1a0f9e7606e6c9c1f9cdc6c37c8961c57bbdfbc028cb5bc698ee1c222b47ea8fa742cf115b1184eede717d550da559f4a8bf3194df526abb6acc769948d5e69487fc7dfdc52998577db510c6caab996dea4e062c0dd842ed712b7025012299f8fbdc435542a669c7055aa29d7425460f57d6f86264dd3083075ed7455e9ded65097122e36ecabe7c05f7e863ea56d5b7e91919f6164d8f6157fe3537c39a3c043c2ff568f15057356e44b0c552e5e0b3f693620f868e19620c40fe637c4c6b0bc03d594e80cf9e2bb13f55b544d85ee6b4c727de2d0bcab1cea24578f1579f3cac180b7d4", 0xef}, {&(0x7f0000000dc0)="0b6c9014c12b757946867289d75b6f08ce559bc15d611519c76b648860d59912", 0x20}], 0x3, &(0x7f0000000f80)=[@cred={{0x1c}}], 0x20, 0x200400c0}}, {{&(0x7f0000000fc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)="5bede59e1860255c04792cfde6c64d180b4bed84b07bd9c31c6aaf96c2597a5761df2ab7633b516d78307b9b2d4101e3d23512ed551a8f389918608c1a239ed18ab5b382d281de5023d867448201817407443514ba68b466fe9fb45df61667878e4001ac326604a01cbd97ada80334d273750be7ac0c90bc753a56d68bd9c2e920f40d03418ec565b366ee47dc4d40669eb48f524c75b4cc049417c4482daeb59a15a2268880e8f11331ef260ddb04407024ca1350fca1d65c3efe7d106abe453c7041df1943b57ebb29e44b8b64f78a8f1d0360a1873a4b3bdb6cd2319b681f1a9bfd453db379339fa089", 0xeb}, {&(0x7f0000001140)="0c4fad48a9da281e4d21951a90529d353d1ffbdcdcb98ae581a2dec1b8397cf58b779f23e897cd31f2e9e5f036bdf35eaf927091e140652488707f2b1b86cc9d0d83e2fc45dda41500ea6a5ee89168b2cf3e15016b5934037b18a59d5c6af72f82d8e8f4c285aa10e146a73c79a342918350b42237de816eeeb8b1c81df73a949f5e979be0920b2d178fb2a60cfaf82a85bebf457e403dcb45231de0b3a02a5fcd34a8b845748476fef45aac63939bc346968509b0e7cdb76414c3eded13c30538aa2d430ac19b6bf40b1900", 0xcc}], 0x2, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20048000}}, {{&(0x7f00000012c0)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001340)="2def45ae18f92a752f66a2d66f64ac45fcda7f29c6491033b4f8162bda10a557c93132808fe3e243c0c31b598a0c5dcb5263c0eac17ce493e16c57f0d16b70142e197a05a888a4a44dd01126d35f850915f3922ebe323a40d4ce6646c10b70bdac858ca5d68e45b4bba51de568e231144a6c70ac42a6b6c187f80b17dbd6e9e01d5a933ec3f0d4ef064f083d48ebdba327631016a28253514cd6f995a9c24dd4eca6ce4ba31f70aab7c09de3bcd3973c491036989a770a7885ffc3ba5f", 0xbd}, {&(0x7f0000001400)="f6b4371a94308f504ec410dac28301fcec92d7b694c53afe1b30828ba4ce7876c1f6098938ad795c59d4af80f4f7cb8c5bed4affb72b357b33ba9c23912496508bc3f3b109402895d94db26188e0b45702463b3ec782968ef8049062946f5d4793a7e43ad396e9d21d7b531178973bda878d7821628336577ac68bcd0e4e2d87058505917ed70d9c3267b16147bc78d7477c4168ffe6070ae6ad16470584fc7770e0fb8455c896bf1f53269664999b9ab4a51cb3c4822c2fcf9ed1c9c041a5fffb43238309aeec4d65d3e5ae29a3316bb64eb54e75dd678ff01617bbaf44", 0xde}, {&(0x7f0000001540)="23274996ea33c8671429294cd66d39cc5d6c15d1b20c2e554a9f37ace0d802b524a6558e601dc01af22e030d380df652d7228ed83b13eea9ef908a57a2c3d6644b124ab9298c8aebdec64097582a748602272046f6bf64d633daaba260f32e56b6512f57af8c80eb1fcbf05aa624df54b6e7bb8e3e750240c1c2e5a79d8615c1ccf6bd05e13b434a5182", 0x8a}, {&(0x7f0000001600)="d41043746a9336090549f8ed904cc4ae0d29eeb3f5fdc68c826979a6184b4e57778f5bf2f3cc1a51963ac0c3aeaa80dc7aa6c68c2a5a622a5c3770888485acb1c9f852f009c2ce65fb4bb7357f00a60af165cbe726ab96a6c5ecf2eaf85bd61d0cf862bc2ee5ffed41cebabdc4b7199ab8608531545ed71981b55f013dea1a344dcb7d1d52e57bd12a0797ce5beb35bc941abe580343a41667c8d4732f071addf4226f25d0e9fc4521a4b825090adaf6192a50e616e67fac2a193db12cd8753246ea397562b5cd0c7bd861e4737002e52c161b554ecb3fb7a176247317977e3a9d3d3e8d4eeba66128117fafd92b7e64841a948bd17cec1e8fc3c6519b8568a99a72a899828b823fdf5673cddd26da766a96064dfda240af665e1da86e8444903a681738b3ac29fb07b62416caa96fe4a703524ea3fd0c42e770877325368b35337cec02cbf2dcf8b8543c01eb19f50af95da0362adc58b73818c60b47f797e2e479f24408892eccfe40b37eb706aa03a5127d674dadbd0d8a74356b1e0b739171ffdcc69a5444df2368637549436e16abbdab79a2a7ad1290495bbd64bf84d05748bfda0cc7c6d0463666a53cf048bfddf06693a8da98e99386789ed433ae0c62d07906358bc4e63b1b30546ddb1c2cbcd00e60bef89f00d5e2ed8a0ebf47701ef974886b1f7d4ce5f6c0c3abc477573d5261e5e3dd4cc3224204aeb3e6648b5ad7f2b71aa9b7ff0d38b257dbf3272b7ffebebbe43bb50fcacb353a0d757f04ebf0982e6d449900143c92f75310e537be911f68670a5bb57cf3d5f006245094c3fcb93a0a323b814428324a59ccd4114bf548e3bfd1d3173c03a6be0de90cc91a3cd10aca60e65e01310657570ba5a40bd32de742ce15b13677e7cbc9055d21920005713367fe54474b38e3169fe8ee38388c0721fc7ea01794f0e7fbf5f5380ffdadb43c700da85d487edabd0bca7635222fe686a36e8cbd39215e01120e55b73fac9578a7c7dab74d443d55edcd666ce701cd640ca4469c9a1c6d3f87106af83aee61463acac9086db14875437cdb8add5178cb0f36e414b96af0cbc6a26c7aac7732cfe0236d68da680eb98ddd7eb5abbd089d9955e2184aeadf2f51266d16b9732070b24831e82bb0a8aa105aab1b0645e7f9adfb3a7638b0aa8fd24a8374fd1f6d540e6c84c7fba2af1b8589d5af58888ab7f651ca450b79cdcfc1766e84f48fcb6e4211b36eafd083e5e760765f218acfad0b104dbd1ed974dc9b9be00d220ce0946bca1d685b8db17539ea0524e54fa96e3faae6c4cfbe5d1aa2d51c6a243a57f9fdf537f45395db00f000ee95af34d891942846c12453c5d155edafef2767376fb5706ccc71b8d965ab16b36835a6fa4236b4514eecb86349c97f3e6549ae9c22a8ecc7aeff1065b1ae9ebc28a3b39009f34c5b13632a1507fa14d3234ab75e3f92e07d1b7b5fa6e013867f5de13f1f0c67c9b6f4e1783c41679a3f4e2eb1f293628090fd489f57ba4c7ee23e251a321910b21d14d5b5be68f18078a4908eb00777fae13137fc5c6e072987d6d5e2034ba0d28ec6ccaa56958010e3aca10fa2336ff55e03f76255c1f7edf56d42af73072351db7fa3e9def864ec4b67f850f713460b248950162c85c2d25a722c8a74ebf02146103d4b94d6c5cdad01de205adbaac1ef0ef61a1729eeb32111b208f928cd15313a9a11a3c50dba1a2b67baff3977f32977c87cabd177faf8821c0fa9068467a6e4b33c81dfc3cda8b46ea7d962418afc9c86d0cf0231b7b777f251cf98a048035c9ee70b5ba6e7aeb9d658ef00169caaa3923ee820d27049f652303e01ad1e9eb73cd960b9ee693ebe0a76b8c7d4418003381ece2a0ecd072750fc16ff38a81d2b1ab6dfdfcbb6761d2c86606ce3d9bb8ac51d2b02e4cc0a55f6095ac03e5c0e9a9b28c7221074a3344d08b1e36e0d3a692fda63e473fec58f6aaaad3c89510ea9eed692a6e76403afe1621f254f5539062f4b94ef52100852ade049a50f81825d3afba5fecf454757929adf835774e842b3ec66195f9a7c068969d7502d7506fb87c4e9d9a05d3815a07e773c3a8183e10b1ef78b25841a3cb536670a49c5b147513c59476d58071a8ffda314d1a2cf017265b1bbc9c8f28e041716190c274fcb5be3eb71d84d21dcb1494bcd8dd73d57f27ae8fc5b947c5eeeaeea84285d5ecff7580f3d0d8160715d8a9ff3711aeb0f6f153f0bcfa2d2736505b9ef7c268f6dbc9b6797a94d3350d5ec1ebeeb00561c3b7f678e7e87df19d0bc8f54b93eed1fb5da252616b8f0550d5548eca1bb778af94208dba990d184746d1518ac25021ce26b1bcb7eb34cf4415d3e0fbd194f57494691df24caa229c9137c2fd86d690ebcedb4866fcbb599e05de7c19ff0b2b9599669ac28571b1d3995e67f55e53ab4ec0982e62a43471e152c9d47468b79fe5edc85e0c696cb7ac513859b8d150026cbea165b7770ec138cad4aae166e4e025e7ec21b1ac7ca34a503e8933518b30c4d063c768877c9d0ae5ef3c0dafc3645e5730dda25fa5fd4e4ab7218e3bf11d768953ff5b776c0e418eee7627852d4264ba229873806047d800691245a18fe9f4cf1f402d97856401b3e67fb7978c3153d8b9e994e61c425a2a585be07ef5cf40347db0e752c41b572c0bca6f164e27f5d9dfbf79660ae43854b56f60a3f72b4645afbf744e74edcfb2c35e95a2c283b3ab0952a9985da9df0575c76b8da45690e28265c969be7ceb02a805f0994f72e2ce8f099537a21aba23a1e251dae8b4ee121b97a20cc8b6925eb78548d8f4e698f50edf6e5efd2b1c8c2692698553467d4f0836d45c945addde539d4f0c71b2f725fd9696b80c399f3d652592f98cb89fd037d9261611f5ccf84863f071e5b66f9b4209b11047d533986af2036e0f7bd0acf4cad375d0f00525ce7ac9a66a01df56020647ad1b2761a80f931272a9a2663a4e997df4020937b241b63c6291a7004fdacbdcacb065a5731587422c8441ef929fc77e6703d756fed72139644464e6feb4336a2f28a30635c45e5044f33dad76ddb0978f7d10bce253fc811f64fe1caa366cb99175bb3e1b51cb110e999e4d7a2473f77ccd6b08a0e1648760ef780e976b7a4e475b4b78a407e3a9ef7b4ad09510e065143cf2f01eb27bfe195388590eafc620bf25000d73a04247990ac30d5ab1b6caa31e3140f07d22640e8ac7eae66cfa837e8f30ec05914114159d6d81d26e548352019a3f7da97f24ae252251f67b0a5e97d7e58f1b504dc2442d348707c9a4ade5922927fd6cdf6abafde559a90b0124303d8d414d7f775c29a8d6b070cbb98d566e43f23642e0f9f752cf8a425c0045ea974c59763b7517c7936677741743434949bb5b94af23270580e2a920703217146442221e20655d2a81cafe3aee1fbad63d6a31e4bbebd37d9767e7c01f5130f7d755112604a99e10f959bd3bea53f43f05776f248b0952ad3ffd76f753b96a03cf279550fcd1d38d303fac8c4842dd1252a277847e76f9e8177114b0449a566ff87557a57e232ff534a9cdf8ce1414959cf4c2d0d245e51a2cbe6e06bd5b4f285cfd46b6c7e8a018552baa7d4c365431eb7a33941b91ea5398702c00dc038c256ccbcde1500b5a0d6313346d9e2d17175e7a344690a926b73ac62985d737f3ab10beb55e8fd664be017b3451efdf6dc89b0b6b94dace73cdecaffcbe076271898ffd81576be5ea86afe29fc21b721657d06444a1ea3bf6fd7e02f1b98dc8639b2e7d53c696b2813671618f9dfb53b7e8046977e098fa0bc73c5120f04135ccc60d9f123177ce6e7d2ffd9236698d4532f10f0752ec310c3fc809a997f7c700a4a4aafa84abdd25d6ef2f9006ced2206deb26166c82363627e2172e60bfb271f5c558d84bd2debbfd15b4f7f270dc29c380b557aba20f3284e35144046577b58a40db00149be3448eb87a28928ab4d81c93559e382b4f498f8063b315e78a7dbf8d642e3b77b581659e79054ce14117c9285cda705d5e14bd95bc11d423bedc4c275bede488e842217a3820db4ca1db11ec61af3280f3d4ff85ec51a15c634ded098710fce5eee4012b6e726b129ac48323cf7b2ad690940fa901e91acc6a19fe3d6f8fa4efac702431f50acb6e2bbdf5c4567ac0a5f17d7f2bcb1a8aaf2f93e56555a6f767e513b4adfcc1fcb9ce9c2b19ffc5551271b5c14caa3ffe46af77ec8f5a7542d7f3f8af964f7db0db4b104a60004fa9a7d2d2b6c988400038d5e694b01d3436c1ef50b7e2d0521c807a98af6ff73d8437b65c43550d850743a1c3f12891db5c4540102bdea08d3e5859a6bb01b00f9b2dee80747c2f718c5be4c8973428b69b09fedc79cf3ce00b58b49cd05204e89ca271ad98d6b32959d737b1003e700258937d53596763b4eff848547930ea2cb03a7df27edfe84ede368bca281f2328671b210c3a1b30599de7b0a529573d1b2c9ed0427c81577f5e6eaeb0215ee1a0db36309df722ed6f7737e371686871b6104e0663baea5b8ae1f361d6dea489a50a971aaf7eea502cfa5a0ce82ee0c0fa71b5dbb2f0549aaad95f2b482c289b57314afcf865b3dc6c4b705d075840d40c5f7ecef166b29808fb794ed63ec7b3c6d65c2909442849264b53e0cdfafe380dcd30dda69d1913d093424d30963e7228b54296237c30f743fe9498e4c4f03ff4b79d517fe825783884f5690e5b55fc34bb6853c57fa41c36305e8c52a3bd5a8538c14026be90edadafcdcaba52292a40cb6b6e6ec34ddeb59a25f10b31c5961bb467c5f236aaab681a57adc2a554310eb8a37efcaae9088ac9831ea85d8dad5b43b654b09cadde4641186560329d757892e21045e0e5969450af8667e88e39520e294afe23b334c19336042fa8c456663f089037ede30b36c793ce83b33043bc25fe7c0a356b3c01896da7f9e1a601cdd06099ecde6ed705cd6413be6bfb93c63dc1ef0c91679ce738b58a5b44c7c078fc0bfee3236bcd6377273734aa8542847cc7c9a8251f32d3c56ae7d62340952f65b244825489eb008a51ee785a9603d74b270857702660e58a9e1c75742f7572dcbb86011627a33913c015a37e5ba595ec9e3b0a8ef7e41c7f16351112c0f191572811f8099ee30a2e1a667a1a5966be7871c7a1c3d0c2e6094bf9e223d390f260f487f1d0e737d9c0740e58c45553dc2ca733f378da5a94d6be4ba5dc763438654282de7fd98de99f05b535b23786122b049fa92c941ee06b985086a6589081f58b7c9455976824b9db9a8d5092f11690bd0b0f17c621e97d435df692e658bac7570ab62565c4d9e93a02c1412eb13e5cb0a3166e25de35746c24450d5dac6efc7e6fd62f7ed7142f1c36f2b3b67de0c7026fa9dd8ee6bf56d90e05e9243a4d2b87774892853c2d3dd25316c6f44b16e5416544e6ff34b46fb59a0a90f5fd4512381f6e0b4c82bc55e7a574c6483bd4f1abacfcb3be20aeb252a6447b32227be205978f22d81e3f706fd4300f4adecec224debf112d7f764c7b5b0ca88c721c011ea533d2bb14b18a9220cee263d8588fb2746027592fbcdf298259beb09a1f34706ca39785109ae36310ff63370b7d09a569417f6d772db769b0176eec78418d897352e6fb59a9166ca3924c4c7444f9cb7db34f00ff827c67ae3fd19191b9ba0fa9a5f81050fb7c8bfbbb7440419c612c17a753f3ac05e24eaa456ec69744207cf6940bf4ba3ed4fad40cd336bfaa98477c939964307a5a333bdfc70a1cbcf9673a4d9ce8c5ae43256cb1363ce", 0x1000}, {&(0x7f0000002600)="791aca3de86c58ad5cc34bcc8c22b777f2e43a3cdf4f2188364060634bc3b070144b0d5a833bb61e032ea3c96c127d0f09ed058811197d5e99750d9bdb69f43bbbdcc9e65abd39a68460770a47a347106b72338fc2df9d83ae3b592bc53bd430966155a43909f5f9707a4fe67e6a51415b39a87ca82338ce4dcf0b5645676ad7f8afb9b8ba19fa1287423c064c862951bad72d06267a5481dd3da60c5aaf0b3452b3723b9d152f5104ed765ed3ed54971bd5e9a76eab0068ab07", 0xba}, {&(0x7f00000026c0)="dce50fe03228052a527a9c831c831b888a6def40a9770d1ed4b0ba7746c7ce4d8b258b01623381ad525d725817a5573c8a52614dbd22b0188fa45e4b09c62b810bd69f4664203ced232f1911c0fa78ee7a7b7465db7126", 0x57}, {&(0x7f0000002740)="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", 0xff}, {&(0x7f0000002840)="c904fe91b58c3ceedb1babe6e9abea9d305d3fac2179bd2be917123c0d8742249aba8134d4bf0260a70e8701716861368a9f0bd6770ff647e375524ed739ded9525bd55643679b877982ee8901dbf72223bd5cdd722de9419ff6c176fc90113884bc967db08774a134d1995a861d6b9ef3864be521dc8df916af86a504f2e2d840305e96723f44a119d137f9d559a357cd927f8d394914e9703aabe49b0ff0448bd38baa024c5657dd34182d7caf2fccadda911e359d44b5869af29fdc0aeb68999d389a5e221d9b93d2659208ec10eee97f9c7afd", 0xd5}, {&(0x7f0000002940)="b15dc6c9d47a278863fa8f3d5e9ab66f336c6ffd4b90bd1422dcaf5af02242df26291cdda9a901266b9c7abd2c2c8c0362ab1079c6416f0b58e48c88ffa5cce566e9397f97a4233065feabcbd1ad7a1f5f6ac5659a7fdf5acaf1f60c87350dbf82572716a6cfb46afdb52116ac16565b681f62767df14a9ed3ca4950d2b8cd76f8a00d7589fbb568f85b9dcecb35d642083816f80ce05d984ebee7", 0x9b}, {&(0x7f0000002a00)="f5ece42f9d5f87ffab9a08fe2ec468c5e634bf0aa28d2c1231dae091700bb8dfee89a6367a659433319427894d348596aececa9715b4bf9233498f45d3a3095773ce6efc031796", 0x47}], 0xa, &(0x7f0000002b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001800000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4}}], 0x4, 0x24080004) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$PPPIOCSCOMPRESS(r4, 0x4010744d) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f000000080003003ba4fe749e2a4d0d539584094cd580a3b6c3b1d5d74b3b275518a43d96be8585c1997e235618c8a281f510b4b676a64559b6a34d273af38724a57a0b948ae5cb6a", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="00000000000000000000005ea2b052d64d02123a7c1a7a0071e5420d6ec700d8a0b376385b872708b961ca501d637d0c862b897bf5362f99fa70f97f0c20ca2c990130ca2949ed46114d2f4d4f78e8401a7db6f95bbc5d86400143717baab23eef47462dc9de3a1c6d6be81a6145acf0b09be3ffc2294dcfa8bd3b5cf1628d5205471cf974d1293a2ebcb5bf52ed3aa90ef98e5cc1edebaf5a400a9ac298c0b11caf80fc7e584f79f79a06313fe52380d43b4e0112", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r9}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 217.794421ms ago: executing program 3 (id=1118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00', 0xc}], 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x7fe2, 0x1, 0x100, 0xffffffffffffffff, 0x10000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r3, 0x0, 0x0}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000600)={0x5, 0x0, [{0x1, 0x0, 0xffff3353, 0x7bcb992e, 0x2}, {0xd, 0x20000, 0x30b5, 0x7fffffff, 0x34900}, {0x40000000, 0x6, 0x7, 0x2, 0x101}, {0x0, 0x3, 0xffffff04, 0x2, 0x5}, {0x7, 0xffff, 0x9, 0x1, 0x8}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd9, 0xd0, 0xc0, 0x10, 0x1a0a, 0x104, 0xddd4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe2, 0x3e, 0x60}}]}}]}}, 0x0) 0s ago: executing program 4 (id=1119): r0 = syz_io_uring_setup(0x5ab8, &(0x7f00000008c0)={0x0, 0x4278, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)) io_uring_enter(r0, 0x678, 0x5, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1], 0x0) kernel console output (not intermixed with test programs): 6727][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.145310][ T9] usb 5-1: Product: syz [ 342.149526][ T9] usb 5-1: Manufacturer: å¾—ã‡©ážˆè¬†â¿¢ï‘ [ 342.155872][ T9] usb 5-1: SerialNumber: syz [ 342.164907][ T9128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 342.171530][ T5877] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 342.321637][ T5877] usb 3-1: device descriptor read/64, error -71 [ 342.384715][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 342.473173][ T9128] openvswitch: netlink: Flow actions attr not present in new flow. [ 342.640395][ T5977] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 342.709831][ T5977] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.734045][ T5877] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 343.021314][ T5877] usb 3-1: device descriptor read/64, error -71 [ 343.143110][ T5877] usb usb3-port1: attempt power cycle [ 343.429927][ T9] usb 5-1: USB disconnect, device number 52 [ 343.511339][ T5877] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 343.582180][ T5877] usb 3-1: device descriptor read/8, error -71 [ 343.850347][ T5877] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 343.966423][ T5877] usb 3-1: device descriptor read/8, error -71 [ 344.139515][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 344.168691][ T5877] usb usb3-port1: unable to enumerate USB device [ 344.472609][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.733'. [ 345.111839][ T9170] loop4: detected capacity change from 0 to 7 [ 345.126620][ T9170] Dev loop4: unable to read RDB block 7 [ 345.149919][ T9170] loop4: unable to read partition table [ 345.159623][ T9172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.735'. [ 345.169278][ T9170] loop4: partition table beyond EOD, truncated [ 345.187994][ T9170] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 345.197423][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 345.355883][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 345.391265][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.439464][ T9] usb 5-1: Product: syz [ 345.449600][ T9] usb 5-1: Manufacturer: syz [ 345.480654][ T9] usb 5-1: SerialNumber: syz [ 345.544190][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 345.561030][ T981] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 345.871557][ T5929] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 346.062748][ T9182] syzkaller0: entered promiscuous mode [ 346.064531][ T5929] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 346.068564][ T9182] syzkaller0: entered allmulticast mode [ 346.207520][ T5929] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 346.239184][ T5929] usb 4-1: config 171 has no interface number 0 [ 346.243721][ T9168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.254744][ T5929] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 346.279190][ T9168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.320890][ T5929] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 64 [ 346.341597][ T5977] usb 5-1: USB disconnect, device number 53 [ 346.368006][ T5929] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 346.471965][ T5929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 346.497863][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.548565][ T5929] usb 4-1: Product: syz [ 346.570877][ T5929] usb 4-1: Manufacturer: syz [ 346.589227][ T5929] usb 4-1: SerialNumber: syz [ 346.627030][ T9175] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 346.702265][ T981] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 346.791754][ T981] ath9k_htc: Failed to initialize the device [ 347.033506][ T5977] usb 5-1: ath9k_htc: USB layer deinitialized [ 347.241405][ T5966] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 347.306625][ T9195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 347.403290][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 347.457438][ T5966] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 347.466967][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.475474][ T5966] usb 6-1: Product: syz [ 347.479831][ T5966] usb 6-1: Manufacturer: syz [ 347.486652][ T5966] usb 6-1: SerialNumber: syz [ 347.560996][ T5966] usb 6-1: config 0 descriptor?? [ 347.621505][ T920] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 347.731670][ T5929] ath6kl: Failed to submit usb control message: -110 [ 347.747163][ T5929] ath6kl: unable to send the bmi data to the device: -110 [ 347.764914][ T5929] ath6kl: Unable to send get target info: -110 [ 347.771545][ T920] usb 3-1: Using ep0 maxpacket: 8 [ 347.784175][ T5966] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 347.793991][ T5966] eb 9a 47 80 9b f8 7a f0 [ 347.794331][ T5929] ath6kl: Failed to init ath6kl core: -110 [ 347.806491][ T920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 347.809741][ T5929] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 347.816332][ T920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 347.837565][ T5966] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 347.857197][ T920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 347.892308][ T920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 347.913022][ T920] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 347.923889][ T920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.934015][ T920] usb 3-1: Product: syz [ 347.947516][ T920] usb 3-1: Manufacturer: syz [ 347.954288][ T920] usb 3-1: SerialNumber: syz [ 347.972045][ T920] usb 3-1: config 0 descriptor?? [ 347.995265][ T920] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 348.198507][ T5966] usb 3-1: USB disconnect, device number 41 [ 348.406251][ T5951] usb 6-1: USB disconnect, device number 18 [ 348.470520][ T9205] program syz.6.745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.500439][ T5966] usb 4-1: USB disconnect, device number 34 [ 348.526819][ T9205] IPv6: addrconf: prefix option has invalid lifetime [ 348.791373][ T920] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 348.946698][ T920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 348.960859][ T920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.969068][ T920] usb 5-1: Product: syz [ 348.973390][ T5936] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 348.976179][ T920] usb 5-1: Manufacturer: syz [ 348.986762][ T920] usb 5-1: SerialNumber: syz [ 349.017756][ T920] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 349.060532][ T5951] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 349.167185][ T5936] usb 7-1: device descriptor read/64, error -71 [ 349.823381][ T9210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.823378][ T5936] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 349.860625][ T9210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.962070][ T5966] usb 5-1: USB disconnect, device number 54 [ 349.981730][ T5936] usb 7-1: device descriptor read/64, error -71 [ 350.299510][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 350.314458][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 350.321282][ T5951] usb 5-1: Service connection timeout for: 256 [ 350.333972][ T5951] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 350.344056][ T5951] ath9k_htc: Failed to initialize the device [ 350.350376][ T5966] usb 5-1: ath9k_htc: USB layer deinitialized [ 350.423843][ T5936] usb usb7-port1: attempt power cycle [ 350.792747][ T5936] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 350.832375][ T5936] usb 7-1: device descriptor read/8, error -71 [ 350.859526][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 351.015500][ T9237] netlink: 'syz.4.753': attribute type 2 has an invalid length. [ 351.112270][ T5936] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 351.163632][ T5936] usb 7-1: device descriptor read/8, error -71 [ 351.293264][ T5936] usb usb7-port1: unable to enumerate USB device [ 351.309465][ T981] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 351.504141][ T981] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.562367][ T981] usb 5-1: config 0 has no interface number 0 [ 351.899803][ T981] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 351.914086][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.927242][ T981] usb 5-1: config 0 descriptor?? [ 351.939832][ T981] usb 5-1: selecting invalid altsetting 1 [ 351.954673][ T981] dvb_ttusb_budget: ttusb_init_controller: error [ 351.975059][ T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 352.126553][ T981] DVB: Unable to find symbol cx22700_attach() [ 352.467859][ T981] DVB: Unable to find symbol tda10046_attach() [ 352.506321][ T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 352.547813][ T981] usb 5-1: USB disconnect, device number 55 [ 353.743498][ T9278] fuse: Unknown parameter '0x0000000000000006ÿÿ00000000000000000000' [ 353.891419][ T5951] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 354.073786][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 354.210985][ T5951] usb 6-1: New USB device found, idVendor=5543, idProduct=0be1, bcdDevice= 0.00 [ 354.252341][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.304455][ T5951] usb 6-1: config 0 descriptor?? [ 354.334241][ T9275] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 354.753666][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.775517][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.852670][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.099255][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.131643][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 355.131663][ T30] audit: type=1400 audit(1755998469.376:172): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9274 comm="syz.5.764" [ 355.175639][ T5951] usbhid 6-1:0.0: can't add hid device: -71 [ 355.285993][ T5951] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 355.323821][ T9280] gtp0: entered promiscuous mode [ 355.426750][ T5951] usb 6-1: USB disconnect, device number 19 [ 355.793704][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 355.825968][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 356.325774][ T9307] ALSA: mixer_oss: invalid index 40000 [ 356.472357][ T5951] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 356.641414][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 356.654182][ T5951] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 356.683914][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.804809][ T5951] usb 5-1: config 0 descriptor?? [ 356.875939][ T9313] tipc: Enabled bearer , priority 0 [ 356.883681][ T9313] syzkaller0: entered promiscuous mode [ 356.889409][ T9313] syzkaller0: entered allmulticast mode [ 356.962776][ T9313] tipc: Resetting bearer [ 356.980749][ T9312] tipc: Resetting bearer [ 357.017355][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 357.051990][ T9312] tipc: Disabling bearer [ 357.066203][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 357.183528][ T5951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 357.190779][ T5951] usb 5-1: media controller created [ 357.255972][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.177126][ T5951] az6027: usb out operation failed. (-110) [ 360.215026][ T5951] stb0899_attach: Driver disabled by Kconfig [ 360.244660][ T5951] az6027: no front-end attached [ 360.244660][ T5951] [ 360.290681][ T5951] az6027: usb out operation failed. (-32) [ 360.335449][ T5951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 360.411149][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 360.525615][ T5951] dvb-usb: schedule remote query interval to 400 msecs. [ 360.570336][ T5951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 360.935814][ T5951] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 361.035994][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 361.149791][ T5951] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 361.169978][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.190106][ T5951] usb 4-1: Product: syz [ 361.207587][ T5951] usb 4-1: Manufacturer: syz [ 361.224990][ T5951] usb 4-1: SerialNumber: syz [ 361.246973][ T5951] usb 4-1: config 0 descriptor?? [ 361.266679][ T5951] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 361.378854][ T981] usb 5-1: USB disconnect, device number 56 [ 361.383827][ T9363] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 361.430939][ T9363] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 361.488866][ T9363] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 361.594834][ T981] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 361.860790][ T9378] tipc: New replicast peer: 0.0.0.0 [ 361.875379][ T9378] tipc: Enabled bearer , priority 10 [ 362.106663][ T981] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 362.261372][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 362.268991][ T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 362.284463][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 362.349430][ T5951] gspca_sunplus: reg_r err -71 [ 362.391469][ T5951] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 362.451144][ T981] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 362.464885][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.476143][ T5951] usb 4-1: USB disconnect, device number 35 [ 362.485495][ T981] usb 5-1: Product: syz [ 362.510365][ T981] usb 5-1: Manufacturer: syz [ 362.518732][ T981] usb 5-1: SerialNumber: syz [ 362.553603][ T981] usb 5-1: config 0 descriptor?? [ 362.569115][ T981] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 362.587554][ T981] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 362.853427][ T981] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 362.860711][ T981] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 362.873556][ T981] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 362.880689][ T981] em28xx 5-1:0.0: No AC97 audio processor [ 362.904816][ T981] usb 5-1: USB disconnect, device number 57 [ 362.934336][ T981] em28xx 5-1:0.0: Disconnecting em28xx [ 362.958491][ T981] em28xx 5-1:0.0: Freeing device [ 363.895788][ T30] audit: type=1326 audit(1755998478.146:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.3.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x0 [ 365.520578][ T9433] fuse: Unknown parameter 'user_id00000000000000000000' [ 365.731608][ T920] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 365.893715][ T920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.918209][ T920] usb 7-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 365.984932][ T920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.035378][ T920] usb 7-1: config 0 descriptor?? [ 366.481626][ T5966] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 366.621477][ T5966] usb 5-1: device descriptor read/64, error -71 [ 366.732013][ T5951] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 366.749605][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.760101][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.812898][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.823020][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.855273][ T9447] netlink: 4348 bytes leftover after parsing attributes in process `syz.6.798'. [ 366.945856][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 366.959860][ T5951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.976371][ T5951] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 366.986148][ T5966] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 366.996630][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.020942][ T5951] usb 6-1: config 0 descriptor?? [ 367.045067][ T5951] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 367.145766][ T5966] usb 5-1: device descriptor read/64, error -71 [ 367.206099][ T920] usbhid 7-1:0.0: can't add hid device: -71 [ 367.224281][ T920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 367.248797][ T920] usb 7-1: USB disconnect, device number 20 [ 367.354271][ T5966] usb usb5-port1: attempt power cycle [ 367.931470][ T5966] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 367.973560][ T5966] usb 5-1: device descriptor read/8, error -71 [ 368.225446][ T5966] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 368.277202][ T5966] usb 5-1: device descriptor read/8, error -71 [ 368.391812][ T5966] usb usb5-port1: unable to enumerate USB device [ 368.880401][ T9452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.899689][ T9473] fuse: Unknown parameter 'user_id00000000000000000000' [ 368.907812][ T9452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.934824][ T981] usb 6-1: USB disconnect, device number 20 [ 369.094229][ T5936] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 369.192061][ T9482] netlink: 136 bytes leftover after parsing attributes in process `syz.6.812'. [ 369.225911][ T9482] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 369.265647][ T5936] usb 4-1: config index 0 descriptor too short (expected 126, got 72) [ 369.279321][ T5936] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.300745][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.322778][ T5936] usb 4-1: Product: syz [ 369.327081][ T5936] usb 4-1: Manufacturer: syz [ 369.337820][ T5936] usb 4-1: SerialNumber: syz [ 369.360624][ T5936] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.391438][ T5929] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.611434][ T44] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 369.847389][ T44] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 369.856951][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.897306][ T44] usb 7-1: config 0 descriptor?? [ 370.256020][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.312162][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.559084][ T9471] sctp: [Deprecated]: syz.3.809 (pid 9471) Use of int in maxseg socket option. [ 370.559084][ T9471] Use struct sctp_assoc_value instead [ 370.611495][ T5929] usb 4-1: Service connection timeout for: 256 [ 370.617908][ T5929] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 370.748889][ T9509] tipc: Enabling of bearer rejected, failed to enable media [ 370.884738][ T5929] ath9k_htc: Failed to initialize the device [ 370.981275][ T5929] usb 4-1: ath9k_htc: USB layer deinitialized [ 371.623018][ T5951] usb 4-1: USB disconnect, device number 36 [ 371.801433][ T5966] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 371.976598][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.989480][ T5966] usb 5-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 372.025846][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.073338][ T5966] usb 5-1: config 0 descriptor?? [ 372.197096][ T44] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.211457][ T44] [drm:udl_init] *ERROR* Selecting channel failed [ 372.328401][ T44] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 372.761474][ T44] [drm] Initialized udl on minor 2 [ 372.774799][ T9524] fuse: Bad value for 'fd' [ 372.807458][ T44] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 372.828825][ T44] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 372.861637][ T5951] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 372.880929][ T44] usb 7-1: USB disconnect, device number 21 [ 372.948719][ T5951] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 373.225224][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.236437][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.306853][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.315711][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.364216][ T30] audit: type=1800 audit(1755998487.586:174): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.824" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 373.511329][ T9547] lo: entered promiscuous mode [ 373.516911][ T9547] tunl0: entered promiscuous mode [ 373.522850][ T9547] gre0: entered promiscuous mode [ 373.569173][ T9525] netlink: 4348 bytes leftover after parsing attributes in process `syz.4.821'. [ 373.660148][ T9547] gretap0: entered promiscuous mode [ 373.667574][ T9547] erspan0: entered promiscuous mode [ 373.690704][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 373.767878][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 373.797150][ T9547] ip_vti0: entered promiscuous mode [ 373.807305][ T9547] ip6_vti0: entered promiscuous mode [ 373.815331][ T9547] sit0: entered promiscuous mode [ 373.822473][ T9547] ip6tnl0: entered promiscuous mode [ 373.829188][ T9547] ip6gre0: entered promiscuous mode [ 373.835935][ T9547] syz_tun: entered promiscuous mode [ 373.842818][ T9547] ip6gretap0: entered promiscuous mode [ 373.849810][ T9547] bridge0: entered promiscuous mode [ 373.856206][ T9547] vcan0: entered promiscuous mode [ 373.862120][ T9547] bond0: entered promiscuous mode [ 373.867530][ T9547] bond_slave_0: entered promiscuous mode [ 373.874185][ T9547] bond_slave_1: entered promiscuous mode [ 373.880347][ T9547] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 373.889597][ T9547] team0: entered promiscuous mode [ 373.895426][ T9547] team_slave_0: entered promiscuous mode [ 373.902244][ T9547] team_slave_1: entered promiscuous mode [ 373.910693][ T9547] dummy0: entered promiscuous mode [ 373.917554][ T9547] nlmon0: entered promiscuous mode [ 373.967326][ T5966] usb 5-1: USB disconnect, device number 62 [ 374.004555][ T9547] caif0: entered promiscuous mode [ 374.012983][ T9547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.138549][ T9566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.241310][ T5929] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 377.443025][ T9599] loop2: detected capacity change from 0 to 7 [ 377.470700][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.480074][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.495941][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.505158][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.537030][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.546250][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.558323][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.567546][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.577384][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.586626][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.618039][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.627306][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.635647][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.644857][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.653015][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.662259][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.670180][ T9599] ldm_validate_partition_table(): Disk read failed. [ 377.682435][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.691740][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.700824][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 377.710030][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 377.726831][ T9599] Dev loop2: unable to read RDB block 0 [ 377.750445][ T9599] loop2: unable to read partition table [ 377.792277][ T9599] loop2: partition table beyond EOD, truncated [ 377.808882][ T9599] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 378.154734][ T30] audit: type=1400 audit(1755998492.406:175): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name="changehat" pid=9602 comm="syz.2.839" [ 379.461463][ T5936] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 379.631368][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 379.650681][ T5936] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.682256][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.745524][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.775168][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.804907][ T5936] usb 5-1: Product: syz [ 379.813972][ T5936] usb 5-1: Manufacturer: syz [ 379.833640][ T5936] usb 5-1: SerialNumber: syz [ 380.075552][ T9640] fuse: Unknown parameter '[¦ŽV¾"ÍrÄ€ï$' [ 380.269630][ T5936] usb 5-1: 0:2 : does not exist [ 380.690043][ T5936] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 380.805728][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.854'. [ 380.834157][ T5936] usb 5-1: USB disconnect, device number 63 [ 381.030223][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.121438][ T5966] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 381.551737][ T5966] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 381.575839][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 381.681800][ T5951] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 381.927175][ T5966] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 381.937243][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.968542][ T5966] usb 7-1: config 0 descriptor?? [ 382.081441][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 382.088477][ T5951] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 382.104303][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.180467][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.223178][ T9652] netlink: 104 bytes leftover after parsing attributes in process `syz.6.854'. [ 382.336290][ T5936] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 382.421823][ T5951] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 382.508087][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.521364][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 382.547145][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.564807][ T5936] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 382.567475][ T5951] usb 3-1: Product: syz [ 382.731270][ T5951] usb 3-1: Manufacturer: syz [ 382.741262][ T5951] usb 3-1: SerialNumber: syz [ 382.751555][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.752698][ T5951] usb 3-1: config 0 descriptor?? [ 382.786086][ T5936] usb 5-1: config 0 descriptor?? [ 382.836265][ T5951] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 382.929959][ T5966] ath6kl: Failed to submit usb control message: -71 [ 382.951299][ T5966] ath6kl: unable to send the bmi data to the device: -71 [ 382.969822][ T5966] ath6kl: Unable to send get target info: -71 [ 383.031357][ T5966] ath6kl: Failed to init ath6kl core: -71 [ 383.072656][ T5966] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 383.115279][ T9657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 383.149044][ T5966] usb 7-1: USB disconnect, device number 22 [ 383.224917][ T5936] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 383.511714][ T5936] usb 5-1: USB disconnect, device number 64 [ 383.894675][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.901029][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.001384][ T981] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 384.116434][ T5966] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 384.161362][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 384.170457][ T981] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 384.183547][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 384.197541][ T981] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 384.207734][ T5936] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 384.215496][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.233867][ T981] usb 4-1: Product: syz [ 384.238903][ T981] usb 4-1: Manufacturer: syz [ 384.246428][ T981] usb 4-1: SerialNumber: syz [ 384.255486][ T981] usb 4-1: config 0 descriptor?? [ 384.266458][ T981] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 384.276159][ T981] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 384.284210][ T5966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.296724][ T5966] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.310347][ T5966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.320377][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.401300][ T5936] usb 7-1: Using ep0 maxpacket: 16 [ 384.401403][ T5951] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 384.409107][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.424497][ T5936] usb 7-1: config 0 has no interfaces? [ 384.431775][ T5936] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.441074][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 384.449261][ T5936] usb 7-1: SerialNumber: syz [ 384.459761][ T5936] usb 7-1: config 0 descriptor?? [ 384.542730][ T981] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 384.544359][ T5966] usb 6-1: usb_control_msg returned -32 [ 384.554465][ T981] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 384.559239][ T981] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 384.571094][ T5966] usbtmc 6-1:16.0: can't read capabilities [ 384.574980][ T981] em28xx 4-1:0.0: No AC97 audio processor [ 384.583534][ T5951] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 384.596489][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.604846][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'. [ 384.604968][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.863'. [ 384.623334][ T981] usb 4-1: USB disconnect, device number 38 [ 384.626214][ T5951] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 384.644488][ T981] em28xx 4-1:0.0: Disconnecting em28xx [ 384.656700][ T981] em28xx 4-1:0.0: Freeing device [ 384.784321][ T5966] usb 3-1: USB disconnect, device number 42 [ 384.814115][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.823390][ T5951] usb 5-1: Product: syz [ 384.827591][ T5951] usb 5-1: Manufacturer: syz [ 384.857639][ T5951] usb 5-1: SerialNumber: syz [ 384.865589][ T5951] usb 5-1: config 0 descriptor?? [ 384.879308][ T9684] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 384.921526][ T5951] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 384.932907][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 384.953913][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 384.963689][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 384.974012][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 384.981899][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 384.989723][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 385.007534][ T5951] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 385.047069][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 385.061868][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 385.069619][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 385.107010][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 385.134915][ T5951] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 385.148306][ T5951] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 385.180860][ T5951] usb 5-1: USB disconnect, device number 65 [ 385.207002][ T5951] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 385.238278][ T5951] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 385.261695][ T5951] keyspan 5-1:0.0: device disconnected [ 385.909338][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.919507][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.992649][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 386.141345][ T5936] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 386.161335][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 386.168459][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 386.180195][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 386.193871][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 386.203161][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.211272][ T9] usb 3-1: Product: syz [ 386.215543][ T9] usb 3-1: Manufacturer: syz [ 386.227087][ T9] usb 3-1: SerialNumber: syz [ 386.245116][ T9] usb 3-1: config 0 descriptor?? [ 386.264103][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 386.273589][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 386.301597][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 386.317871][ T5936] usb 5-1: unable to get BOS descriptor or descriptor too short [ 386.339185][ T5936] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.357619][ T5936] usb 5-1: config 1 interface 0 has no altsetting 0 [ 386.367515][ T5936] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.40 [ 386.378676][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.386865][ T5936] usb 5-1: Product: syz [ 386.391393][ T5936] usb 5-1: Manufacturer: syz [ 386.396033][ T5936] usb 5-1: SerialNumber: syz [ 386.640687][ T5936] usbhid 5-1:1.0: can't add hid device: -71 [ 386.651096][ T5936] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 386.666268][ T5936] usb 5-1: USB disconnect, device number 66 [ 386.684485][ T5929] usb 7-1: USB disconnect, device number 23 [ 386.803972][ T9721] vlan0: entered promiscuous mode [ 386.867085][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 386.877920][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 386.929448][ T5929] usb 6-1: USB disconnect, device number 21 [ 387.500173][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 387.705201][ T5936] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 387.871473][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 387.979006][ T5936] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 387.991645][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.039501][ T5936] usb 7-1: config 0 descriptor?? [ 388.075858][ T5936] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 388.257569][ T5936] gspca_vc032x: reg_r err -32 [ 388.265901][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.301607][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.335918][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 388.346083][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 388.360543][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.375596][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 388.391280][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.399818][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 388.407856][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.421139][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.430498][ T9] usb 3-1: USB disconnect, device number 43 [ 388.447411][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.463089][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.478777][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.792317][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.860022][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.877191][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.910004][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.937466][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 388.967750][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.034197][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.088796][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.098689][ T5936] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.117102][ T5936] gspca_vc032x: Unknown sensor... [ 389.132998][ T5936] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 389.621677][ T5936] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 389.789594][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.798988][ T5936] usb 3-1: not running at top speed; connect to a high speed hub [ 389.823942][ T5936] usb 3-1: config 5 has an invalid interface number: 246 but max is 0 [ 389.841233][ T5936] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 389.886220][ T5936] usb 3-1: config 5 has no interface number 0 [ 389.898353][ T5951] usb 7-1: USB disconnect, device number 24 [ 389.910857][ T5936] usb 3-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 389.961319][ T5936] usb 3-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.016045][ T5936] usb 3-1: config 5 interface 246 has no altsetting 0 [ 390.020951][ T9764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.879'. [ 390.096010][ T5936] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 390.115390][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.144899][ T5936] usb 3-1: Product: syz [ 390.164449][ T5936] usb 3-1: Manufacturer: syz [ 390.169408][ T5936] usb 3-1: SerialNumber: syz [ 390.182140][ T9772] netlink: 'syz.6.880': attribute type 1 has an invalid length. [ 390.475474][ T9750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.486223][ T9750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.583222][ T5936] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.611244][ T1143] usb 3-1: Failed to submit usb control message: -71 [ 390.679476][ T1143] usb 3-1: unable to send the bmi data to the device: -71 [ 390.706475][ T5936] usb 3-1: USB disconnect, device number 44 [ 390.738930][ T1143] usb 3-1: unable to get target info from device [ 390.771577][ T1143] usb 3-1: could not get target info (-71) [ 390.779755][ T1143] usb 3-1: could not probe fw (-71) [ 392.481559][ T5936] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 392.693748][ T5936] usb 7-1: not running at top speed; connect to a high speed hub [ 392.712782][ T5936] usb 7-1: config 3 has an invalid interface number: 197 but max is 0 [ 392.721390][ T5966] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 392.723640][ T5936] usb 7-1: config 3 has no interface number 0 [ 392.755201][ T5936] usb 7-1: config 3 interface 197 has no altsetting 0 [ 392.767764][ T5936] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=48.27 [ 392.787189][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.804150][ T5936] usb 7-1: Product: syz [ 392.811731][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 392.833955][ T5936] usb 7-1: Manufacturer: syz [ 392.842111][ T5936] usb 7-1: SerialNumber: syz [ 392.912065][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.934923][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.972279][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.992358][ T5966] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.006102][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.032159][ T5966] usb 4-1: config 0 descriptor?? [ 393.117975][ T9] usb 6-1: config 0 has no interfaces? [ 393.128643][ T9] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 393.141609][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.163601][ T9] usb 6-1: Product: syz [ 393.180674][ T5936] radio-si470x 7-1:3.197: could not find interrupt in endpoint [ 393.192486][ T9] usb 6-1: Manufacturer: syz [ 393.197135][ T9] usb 6-1: SerialNumber: syz [ 393.214856][ T5936] radio-si470x 7-1:3.197: probe with driver radio-si470x failed with error -5 [ 393.229716][ T9] usb 6-1: config 0 descriptor?? [ 393.237263][ T5936] usbhid 7-1:3.197: couldn't find an input interrupt endpoint [ 393.304246][ T5936] usb 7-1: USB disconnect, device number 25 [ 393.364355][ T5951] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 393.541789][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 393.568727][ T5951] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 393.577389][ T5951] usb 5-1: config 2 has no interface number 0 [ 393.590955][ T5951] usb 5-1: config 2 interface 31 has no altsetting 0 [ 393.625345][ T5951] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 393.636161][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.747730][ T5951] usb 5-1: Product: syz [ 393.849647][ T5951] usb 5-1: Manufacturer: syz [ 393.900331][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.6.897'. [ 393.913712][ T5951] usb 5-1: SerialNumber: syz [ 394.267852][ T5951] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 395.012229][ T44] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 395.151401][ T44] usb 7-1: device descriptor read/64, error -71 [ 395.391490][ T44] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 395.522858][ T5951] usb 6-1: USB disconnect, device number 22 [ 395.542672][ T44] usb 7-1: device descriptor read/64, error -71 [ 395.661798][ T44] usb usb7-port1: attempt power cycle [ 395.830937][ T5966] usbhid 4-1:0.0: can't add hid device: -71 [ 395.839747][ T5966] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 395.920025][ T5966] usb 4-1: USB disconnect, device number 40 [ 396.052731][ T44] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 396.428635][ T44] usb 7-1: device descriptor read/8, error -71 [ 396.437008][ T9848] syzkaller0: entered promiscuous mode [ 396.442936][ T9848] syzkaller0: entered allmulticast mode [ 396.705261][ T44] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 396.782846][ T44] usb 7-1: device descriptor read/8, error -71 [ 396.845579][ T920] usb 5-1: USB disconnect, device number 67 [ 396.894586][ T44] usb usb7-port1: unable to enumerate USB device [ 397.491434][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 397.940612][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 397.949770][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'. [ 398.093827][ T9868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.146155][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 398.215931][ T44] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 398.396820][ T44] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 398.465917][ T44] usb 4-1: config 135 has no interface number 0 [ 398.477822][ T44] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.561973][ T9871] tipc: Enabled bearer , priority 0 [ 398.569303][ T9871] syzkaller0: entered promiscuous mode [ 398.578189][ T9871] syzkaller0: entered allmulticast mode [ 398.604488][ T44] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 398.629872][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.648607][ T44] usb 4-1: Product: syz [ 398.655440][ T9873] tipc: Resetting bearer [ 398.743133][ T44] usb 4-1: Manufacturer: syz [ 398.747884][ T44] usb 4-1: SerialNumber: syz [ 398.922448][ T44] uvcvideo 4-1:135.230: probe with driver uvcvideo failed with error -22 [ 398.923631][ T5877] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 399.061325][ T5936] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 399.166713][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.187814][ T5877] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 399.218092][ T5877] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 399.240653][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 399.260702][ T5936] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 399.269900][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.278892][ T5936] usb 3-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 399.311461][ T5936] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 399.328636][ T5877] usb 7-1: config 0 descriptor?? [ 399.340188][ T5936] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 399.373690][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.404136][ T9] usb 5-1: device descriptor read/64, error -71 [ 399.472317][ T5936] usb 3-1: config 0 descriptor?? [ 399.641358][ T5936] tipc: Node number set to 587110529 [ 399.701326][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 399.772406][ T5877] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 399.783498][ T5951] usb 3-1: USB disconnect, device number 45 [ 399.831306][ T9] usb 5-1: device descriptor read/64, error -71 [ 399.942727][ T9] usb usb5-port1: attempt power cycle [ 399.969079][ T5877] kovaplus 0003:1E7D:2D50.000F: couldn't init struct kovaplus_device [ 399.982443][ T9870] tipc: Resetting bearer [ 399.990953][ T5877] kovaplus 0003:1E7D:2D50.000F: couldn't install mouse [ 400.025615][ T9870] tipc: Disabling bearer [ 400.037121][ T5877] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -71 [ 400.067374][ T5877] usb 7-1: USB disconnect, device number 30 [ 400.311295][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 400.332066][ T9] usb 5-1: device descriptor read/8, error -71 [ 400.554355][ T981] usb 4-1: USB disconnect, device number 41 [ 400.582044][ T9] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 400.625147][ T9] usb 5-1: device descriptor read/8, error -71 [ 400.742546][ T9] usb usb5-port1: unable to enumerate USB device [ 401.030036][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 401.101302][ T5951] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 401.183829][ T920] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 401.201352][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 401.209171][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 401.221295][ T9] usb 3-1: config 0 has no interface number 0 [ 401.231715][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 401.243192][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.251388][ T9] usb 3-1: Product: syz [ 401.255615][ T9] usb 3-1: Manufacturer: syz [ 401.260644][ T9] usb 3-1: SerialNumber: syz [ 401.274762][ T5951] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 401.286451][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.295175][ T5951] usb 7-1: Product: syz [ 401.296131][ T9] usb 3-1: config 0 descriptor?? [ 401.300367][ T5951] usb 7-1: Manufacturer: syz [ 401.313126][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 401.322077][ T920] usb 4-1: device descriptor read/64, error -71 [ 401.365353][ T9] usb 3-1: selecting invalid altsetting 1 [ 401.371311][ T5951] usb 7-1: SerialNumber: syz [ 401.372612][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 401.391655][ T5951] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 401.406347][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 401.419780][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 401.425342][ T44] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 401.441167][ T9] usb 3-1: media controller created [ 401.527204][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.537616][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.571004][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.579476][ T920] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 401.731687][ T920] usb 4-1: device descriptor read/64, error -71 [ 401.786006][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 401.795598][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 401.803862][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 401.878941][ T920] usb usb4-port1: attempt power cycle [ 401.879577][ T9] usb 3-1: USB disconnect, device number 46 [ 402.049497][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.081973][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.197228][ T5951] usb 7-1: USB disconnect, device number 31 [ 402.288228][ T9917] kvm: pic: non byte write [ 402.391727][ T920] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 402.410091][ T9926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.447969][ T920] usb 4-1: device descriptor read/8, error -71 [ 402.541339][ T44] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 402.548365][ T44] ath9k_htc: Failed to initialize the device [ 402.570721][ T5951] usb 7-1: ath9k_htc: USB layer deinitialized [ 402.762817][ T920] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 402.843488][ T920] usb 4-1: device descriptor read/8, error -71 [ 402.995004][ T5951] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 403.141457][ T920] usb usb4-port1: unable to enumerate USB device [ 403.311386][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 403.323606][ T5951] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 403.358642][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.410462][ T5951] pvrusb2: Hardware description: Terratec Grabster AV400 [ 403.428561][ T5951] pvrusb2: ********** [ 403.438685][ T5951] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 403.456704][ T5951] pvrusb2: Important functionality might not be entirely working. [ 403.467511][ T5951] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 403.498218][ T5951] pvrusb2: ********** [ 403.634375][ T2347] pvrusb2: Invalid write control endpoint [ 403.875741][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.918'. [ 404.069440][ T2347] pvrusb2: Invalid write control endpoint [ 404.083038][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 404.106878][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 404.128447][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 404.155228][ T2347] pvrusb2: Device being rendered inoperable [ 404.171713][ T9921] pvrusb2: Attempted to execute control transfer when device not ok [ 404.185930][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 404.202915][ T5877] usb 7-1: USB disconnect, device number 32 [ 404.215027][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 404.251074][ T2347] pvrusb2: Attached sub-driver cx25840 [ 404.270448][ T9949] bridge0: port 3(netdevsim0) entered blocking state [ 404.278037][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.281786][ T9949] bridge0: port 3(netdevsim0) entered disabled state [ 404.292477][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 404.368252][ T9949] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 404.405217][ T9949] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 404.439625][ T9949] bridge0: port 3(netdevsim0) entered blocking state [ 404.446867][ T9949] bridge0: port 3(netdevsim0) entered forwarding state [ 404.617590][ T9959] syzkaller0: entered promiscuous mode [ 404.623383][ T9959] syzkaller0: entered allmulticast mode [ 406.800822][T10000] tipc: Enabled bearer , priority 0 [ 407.732400][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.934'. [ 407.814321][T10000] tipc: Resetting bearer [ 407.839181][T10019] loop4: detected capacity change from 0 to 7 [ 407.848204][T10019] Dev loop4: unable to read RDB block 7 [ 407.855979][T10019] loop4: unable to read partition table [ 407.865777][T10019] loop4: partition table beyond EOD, truncated [ 407.874806][T10019] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 407.896702][ T9998] tipc: Disabling bearer [ 408.731918][ T5877] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 408.771477][ T981] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 408.953001][ T5877] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.973637][ T5877] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.985163][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 409.174018][ T981] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 409.183450][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.202137][ T981] usb 4-1: Product: syz [ 409.206650][ T981] usb 4-1: Manufacturer: syz [ 409.213995][ T5877] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.230196][ T981] usb 4-1: SerialNumber: syz [ 409.235547][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.254942][ T981] usb 4-1: config 0 descriptor?? [ 409.270201][ T5877] usb 7-1: Product: Ô ã’°ë¡âŸ½â¿’糽Ꙭ钱牃á®î‡¬î²¨ì˜£ë¤’⻾㔽ﵞ჌魉툟﵆킾觕í”伥∨龜䉓酽鈑î¯ä¡¸î²ˆå¯—ṧ㬽粶അë ä«½çŸ„맂ﳤℤ奷ꖹ棣€ë™ë”‘쬠뢱ꎽ潀붗鈚ã¶ë‘«í‹§á»§â›‹å“轷෇跠è´ê¿–ꆈä´ä¨à¶¢í•·å°‰à´‹å¶¼è¾îŽŒå¿° [ 409.301979][ T981] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 409.336469][ T5877] usb 7-1: Manufacturer: 鵽轪묚跃ꢨ쨥댡닅毇ážï¥äᕢ칈余㭥悒峭瘑鑥饶Ẇ軖∆ϟϔ퉬柽貺ꮨ꼑㻣첰퀅슟ꋉ챡⯥쇪à±î§‹â¥³ç¿â…ˆãƒ¢ê–‹î­„镫觊é¹ê®œí–ºï¼´á”—쉢᳻é¡ì°»è·¥ã—¥å‰¦ãŠ›ä¤á„+팂⠲ꉇ扚å˜ì‘‡ë§‚昴攄뉚ꓜ쑘㈼ᓳè“䖮莑äŒë½§ä¤³ë»¹äœ‰æŒ•ê¬› [ 409.588022][ T5877] usb 7-1: SerialNumber: о [ 409.773991][T10044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.944'. [ 409.821637][ T981] gspca_sonixj: reg_w1 err -110 [ 409.829489][ T981] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 410.450340][ T5877] usb 7-1: 0:2 : does not exist [ 410.803197][ T5877] usb 7-1: USB disconnect, device number 33 [ 410.843600][ T5951] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 411.001546][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 411.017426][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.026212][ T5951] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 411.152525][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.252982][ T5951] usb 3-1: Product: syz [ 411.274236][ T5951] usb 3-1: Manufacturer: syz [ 411.293722][ T5951] usb 3-1: SerialNumber: syz [ 411.351713][ T5877] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 411.521550][ T5877] usb 7-1: device descriptor read/64, error -71 [ 411.700102][ T5951] usb_ehset_test 3-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 411.797807][ T5951] usb 3-1: USB disconnect, device number 47 [ 411.841483][ T5877] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 411.871024][T10058] loop4: detected capacity change from 0 to 7 [ 411.880038][ T981] usb 4-1: USB disconnect, device number 46 [ 411.891818][T10058] Dev loop4: unable to read RDB block 7 [ 411.915357][T10058] loop4: unable to read partition table [ 411.944112][T10058] loop4: partition table beyond EOD, truncated [ 411.966976][T10058] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.021319][ T5877] usb 7-1: device descriptor read/64, error -71 [ 412.085118][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.952'. [ 412.153334][ T5877] usb usb7-port1: attempt power cycle [ 412.485049][ T30] audit: type=1326 audit(1755998526.736:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.511414][ T5877] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 412.523077][ T30] audit: type=1326 audit(1755998526.736:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.548806][ T5877] usb 7-1: device descriptor read/8, error -71 [ 412.568107][ T981] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 412.580604][ T30] audit: type=1326 audit(1755998526.736:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.748055][ T30] audit: type=1326 audit(1755998526.736:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.772001][ T30] audit: type=1326 audit(1755998526.736:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.931591][ T5877] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 412.948036][ T30] audit: type=1326 audit(1755998526.736:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 412.974329][ T981] usb 5-1: Using ep0 maxpacket: 8 [ 412.984162][ T981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.001270][ T981] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 413.001960][ T30] audit: type=1326 audit(1755998526.736:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 413.011955][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.082736][ T5951] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 413.111105][ T30] audit: type=1326 audit(1755998526.736:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 413.272416][ T5877] usb 7-1: device descriptor read/8, error -71 [ 413.363268][ T981] usb 5-1: config 0 descriptor?? [ 413.378845][ T981] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 413.390574][ T5877] usb usb7-port1: unable to enumerate USB device [ 413.410339][ T5951] usb 4-1: config 0 has no interfaces? [ 413.443066][ T5951] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.471341][ T30] audit: type=1326 audit(1755998526.736:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 413.515240][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.545822][ T5951] usb 4-1: Product: syz [ 413.555571][ T5951] usb 4-1: Manufacturer: syz [ 413.571525][ T5936] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 413.603126][ T981] usb 5-1: USB disconnect, device number 72 [ 413.686215][ T5951] usb 4-1: SerialNumber: syz [ 413.721098][ T30] audit: type=1326 audit(1755998526.746:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10075 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7419d8ebe9 code=0x7ffc0000 [ 413.756746][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 413.766415][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.778280][ T5951] usb 4-1: config 0 descriptor?? [ 413.793536][ T5936] usb 3-1: Product: syz [ 413.803065][ T5936] usb 3-1: Manufacturer: syz [ 413.807673][ T5936] usb 3-1: SerialNumber: syz [ 413.898629][ T5936] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 413.926571][ T981] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 414.025036][T10089] program syz.5.961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.367492][ T5877] usb 3-1: USB disconnect, device number 48 [ 414.493208][T10102] loop4: detected capacity change from 0 to 7 [ 414.526998][T10102] Dev loop4: unable to read RDB block 7 [ 414.532803][T10102] loop4: unable to read partition table [ 414.538761][T10102] loop4: partition table beyond EOD, truncated [ 414.545160][T10102] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 414.660357][ T5936] usb 4-1: USB disconnect, device number 47 [ 414.871540][ T5966] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 415.113378][ T5966] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 415.121784][ T5966] usb 5-1: config 0 has no interface number 0 [ 415.128637][ T5966] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 415.137805][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.184579][ T981] usb 3-1: Service connection timeout for: 256 [ 415.190799][ T981] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 415.191854][ T5966] usb 5-1: config 0 descriptor?? [ 415.311626][ T981] ath9k_htc: Failed to initialize the device [ 415.339083][T10119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.354136][ T5877] usb 3-1: ath9k_htc: USB layer deinitialized [ 415.571454][T10113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 415.578182][T10113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 415.640975][T10113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.651700][T10113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 415.668921][T10113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.679339][T10113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.704549][T10113] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.710687][T10113] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 415.720848][T10113] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 415.728187][T10113] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 415.981317][ T5951] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 416.011591][ T5936] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 416.091894][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 416.163626][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 416.176117][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 416.193426][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.203110][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.211869][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 416.218127][ T5936] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 416.237227][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.238931][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.292091][ T5951] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 416.302708][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.319551][ T5936] usb 3-1: config 0 descriptor?? [ 416.327318][T10120] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 416.351995][ T5951] usb 7-1: config 0 descriptor?? [ 416.441431][ T5877] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 416.563059][ T5951] usb 7-1: string descriptor 0 read error: -71 [ 416.571479][ T5877] usb 6-1: device descriptor read/64, error -71 [ 416.582917][ T5951] as10x_usb: device has been detected [ 416.613085][ T5951] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 416.654781][ T5951] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 416.827976][ T5951] as10x_usb: error during firmware upload part1 [ 416.845290][ T5951] Registered device nBox DVB-T Dongle [ 416.849983][ T5951] usb 7-1: USB disconnect, device number 38 [ 416.851415][ T5877] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 416.869162][ T5871] Bluetooth: hci0: command 0x0406 tx timeout [ 416.950876][ T5951] Unregistered device nBox DVB-T Dongle [ 416.958257][ T5951] as10x_usb: device has been disconnected [ 417.011504][ T5877] usb 6-1: device descriptor read/64, error -71 [ 417.126190][ T5877] usb usb6-port1: attempt power cycle [ 417.394401][ T5951] usb 5-1: USB disconnect, device number 73 [ 417.418097][ T5936] ath6kl: Failed to submit usb control message: -110 [ 417.436032][ T5936] ath6kl: unable to send the bmi data to the device: -110 [ 417.463915][ T5936] ath6kl: Unable to send get target info: -110 [ 417.483102][ T5936] ath6kl: Failed to init ath6kl core: -110 [ 417.495596][ T5936] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 417.527148][ T5877] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 417.583285][ T5877] usb 6-1: device descriptor read/8, error -71 [ 417.652386][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 417.732559][ T5871] Bluetooth: hci5: command 0x0405 tx timeout [ 417.738816][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 417.740467][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 417.852198][ T5877] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 417.912317][ T5877] usb 6-1: device descriptor read/8, error -71 [ 418.024818][ T5936] usb 3-1: USB disconnect, device number 49 [ 418.043982][ T5877] usb usb6-port1: unable to enumerate USB device [ 418.450641][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 418.450661][ T30] audit: type=1326 audit(1755998532.696:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 418.491774][ T30] audit: type=1326 audit(1755998532.696:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 418.522335][ T5936] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 418.684503][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.699379][ T5936] usb 3-1: not running at top speed; connect to a high speed hub [ 418.727418][ T5936] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023 [ 418.756093][ T5936] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 418.819677][ T5936] usb 3-1: Dual-Role OTG device on HNP port [ 418.839932][ T5936] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.879776][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.914656][ T5936] usb 3-1: Product: syz [ 418.919242][ T5936] usb 3-1: Manufacturer: syz [ 418.928608][ T5936] usb 3-1: SerialNumber: syz [ 418.933416][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 419.194165][T10157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.194647][T10166] vlan3: entered promiscuous mode [ 419.232536][T10157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.241715][T10166] vlan3: entered allmulticast mode [ 419.246954][T10166] bridge0: entered allmulticast mode [ 419.359977][ T5936] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 419.377972][ T5936] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 419.480247][ T5936] usb 3-1: USB disconnect, device number 50 [ 419.521710][ T5966] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 419.559773][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.714192][ T5966] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.729047][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.741596][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 419.754476][ T5966] usb 7-1: config 0 descriptor?? [ 419.763901][ T5966] cp210x 7-1:0.0: cp210x converter detected [ 419.811518][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 419.817748][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 419.824825][ T5866] Bluetooth: hci5: command 0x0405 tx timeout [ 419.901324][ T5951] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 420.052824][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 420.066990][ T5951] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 420.076166][ T5951] usb 5-1: config 0 has no interface number 0 [ 420.086973][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.098312][ T5951] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 420.110620][ T5951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.123493][ T5951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 420.133607][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.149241][ T5951] usb 5-1: config 0 descriptor?? [ 420.191113][ T5966] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 420.204309][ T5951] ldusb 5-1:0.55: Interrupt out endpoint not found (using control endpoint instead) [ 420.221458][ T5951] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 420.347347][ T5966] usb 7-1: cp210x converter now attached to ttyUSB0 [ 420.423889][T10172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.455553][T10172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.536196][ T5966] usb 7-1: USB disconnect, device number 39 [ 420.556893][ T5966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 420.601995][ T5966] cp210x 7-1:0.0: device disconnected [ 420.651482][ T30] audit: type=1326 audit(1755998534.896:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 420.686827][ T30] audit: type=1326 audit(1755998534.896:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 420.709242][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.732973][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.757015][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.800945][ T5951] usb 5-1: USB disconnect, device number 74 [ 420.822834][ T30] audit: type=1326 audit(1755998534.896:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 420.845111][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.910229][ T5951] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 420.938875][ T30] audit: type=1326 audit(1755998534.906:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 421.031394][ T30] audit: type=1326 audit(1755998534.906:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 421.059044][ T30] audit: type=1326 audit(1755998534.906:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 421.131359][ T30] audit: type=1326 audit(1755998534.906:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 421.201451][ T30] audit: type=1326 audit(1755998534.906:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 422.354391][T10214] netlink: 'syz.2.992': attribute type 2 has an invalid length. [ 422.363765][T10214] netlink: 119 bytes leftover after parsing attributes in process `syz.2.992'. [ 423.017581][ T5936] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 423.191486][ T5936] usb 3-1: device descriptor read/64, error -71 [ 423.441326][ T5936] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 423.454300][ T30] kauditd_printk_skb: 1715 callbacks suppressed [ 423.454331][ T30] audit: type=1326 audit(1755998537.696:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 423.544266][ T30] audit: type=1326 audit(1755998537.706:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 423.623707][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.999'. [ 423.636368][T10237] tipc: MTU too low for tipc bearer [ 423.644678][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.651300][ T30] audit: type=1326 audit(1755998537.706:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 423.685216][ T5936] usb 3-1: device descriptor read/64, error -71 [ 423.789114][ T30] audit: type=1326 audit(1755998537.706:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 423.814478][ T5936] usb usb3-port1: attempt power cycle [ 423.881257][ T30] audit: type=1326 audit(1755998537.706:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 423.941427][ T30] audit: type=1326 audit(1755998537.706:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 424.001488][ T30] audit: type=1326 audit(1755998537.706:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 424.078794][ T30] audit: type=1326 audit(1755998537.706:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 424.111809][ T30] audit: type=1326 audit(1755998537.706:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 424.199101][ T30] audit: type=1326 audit(1755998537.706:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.6.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc402f8ebe9 code=0x7ff00000 [ 424.231486][ T5936] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 424.241305][ T920] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 424.262197][ T5936] usb 3-1: device descriptor read/8, error -71 [ 424.381447][ T920] usb 5-1: device descriptor read/64, error -71 [ 424.531509][ T5936] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 424.612147][ T5936] usb 3-1: device descriptor read/8, error -71 [ 424.671385][ T920] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 424.731752][ T5936] usb usb3-port1: unable to enumerate USB device [ 424.839777][ T920] usb 5-1: device descriptor read/64, error -71 [ 424.962852][ T920] usb usb5-port1: attempt power cycle [ 425.239214][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 425.253109][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 425.263390][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 425.281333][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 425.291081][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 425.333925][ T5966] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 425.342394][ T920] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 425.361806][ T920] usb 5-1: device descriptor read/8, error -71 [ 425.491529][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 425.500808][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.523075][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.544171][ T5966] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 425.553763][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.569583][ T5966] usb 6-1: config 0 descriptor?? [ 425.710274][ T920] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 425.726274][ T5966] hub 6-1:0.0: USB hub found [ 425.743308][ T920] usb 5-1: device descriptor read/8, error -71 [ 425.794692][ T5966] hub 6-1:0.0: 26 ports detected [ 425.847489][ T5966] hub 6-1:0.0: insufficient power available to use all downstream ports [ 425.856813][ T920] usb usb5-port1: unable to enumerate USB device [ 425.864273][T10263] fuse: Unknown parameter 'uf' [ 426.151531][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 426.323609][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 426.336616][ T5929] usb 3-1: config 1 has an invalid descriptor of length 186, skipping remainder of the config [ 426.365910][ T5929] usb 3-1: config 1 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 426.419597][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0 [ 426.445109][ T5929] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=51.fb [ 426.456568][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.486079][ T5929] usb 3-1: Product: syz [ 426.510658][ T5929] usb 3-1: Manufacturer: syz [ 426.530407][ T5929] usb 3-1: SerialNumber: syz [ 426.795496][T10263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.846409][T10263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.939730][ T5966] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 426.957072][ T5966] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 427.006335][ T5966] usbhid 6-1:0.0: can't add hid device: -32 [ 427.026418][ T5966] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 427.942023][T10279] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.948412][T10279] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.955100][T10279] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.989218][T10279] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.000623][ T5929] pxrc 3-1:1.0: Could not find endpoint [ 428.021976][T10279] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 428.071598][ T5966] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 428.087375][ T5929] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 428.164769][ T5929] usb 3-1: USB disconnect, device number 55 [ 428.252802][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 428.263537][ T5966] usb 5-1: config index 0 descriptor too short (expected 65242, got 27) [ 428.277876][ T5966] usb 5-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 428.292253][ T5966] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 428.319646][ T5966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.329436][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.346311][ T5966] usb 5-1: Product: syz [ 428.357573][ T5966] usb 5-1: Manufacturer: syz [ 428.369762][ T5966] usb 5-1: SerialNumber: syz [ 428.421327][ T44] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 428.425988][ T5877] usb 6-1: USB disconnect, device number 27 [ 428.581426][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 428.590284][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.625317][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.641370][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 428.661346][ T44] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 428.672245][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.722732][ T44] usb 4-1: config 0 descriptor?? [ 429.203227][ T5877] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 429.496938][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 429.510779][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 429.540803][ T44] usb 4-1: USB disconnect, device number 48 [ 429.560489][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 429.590604][T10298] : entered promiscuous mode [ 429.658060][ T5877] usb 6-1: Using ep0 maxpacket: 8 [ 429.683846][ T5877] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 429.694327][ T5877] usb 6-1: config 2 has no interface number 0 [ 429.701500][ T5877] usb 6-1: config 2 interface 31 has no altsetting 0 [ 429.743685][ T5877] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 429.806272][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.887016][ T5877] usb 6-1: Product: syz [ 429.918922][ T5877] usb 6-1: Manufacturer: syz [ 429.930234][ T5877] usb 6-1: SerialNumber: syz [ 429.972604][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 429.972712][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 429.978916][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 430.005187][ T5877] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 430.052036][ T5867] Bluetooth: hci5: command 0x0405 tx timeout [ 430.058189][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 430.282584][T10301] trusted_key: encrypted_key: keyword 'new›¥Ü' not recognized [ 430.419344][ T5966] usb 5-1: USB disconnect, device number 79 [ 430.563681][ T5975] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 430.670067][T10303] loop4: detected capacity change from 0 to 7 [ 430.684963][ T6616] Dev loop4: unable to read RDB block 7 [ 430.690737][ T6616] loop4: unable to read partition table [ 430.701828][ T6616] loop4: partition table beyond EOD, truncated [ 430.722667][T10303] Dev loop4: unable to read RDB block 7 [ 430.730291][T10303] loop4: unable to read partition table [ 430.740498][T10303] loop4: partition table beyond EOD, truncated [ 430.750211][T10303] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 430.765335][ T5975] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.786518][ T5975] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.889813][ T5975] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.934875][ T5975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.968172][T10305] tipc: Can't bind to reserved service type 2 [ 431.012472][T10306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.089653][T10306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.183511][ T5975] usb 4-1: usb_control_msg returned -32 [ 431.221958][ T5975] usbtmc 4-1:16.0: can't read capabilities [ 431.241280][ T5877] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 431.431906][ T5877] usb 7-1: Using ep0 maxpacket: 8 [ 431.441096][ T5877] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.452315][ T5877] usb 7-1: config 4 interface 0 has no altsetting 0 [ 431.462879][ T5877] usb 7-1: string descriptor 0 read error: -22 [ 431.469368][ T5877] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 431.487029][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.530071][ T5877] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 431.588750][ T5877] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 431.628889][ T5877] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 431.664726][ T5877] usb 7-1: media controller created [ 431.689712][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 431.735702][ T5877] zl10353_read_register: readreg error (reg=127, ret==0) [ 431.963682][ T5877] usb 7-1: USB disconnect, device number 40 [ 432.085827][ T9] usb 6-1: USB disconnect, device number 28 [ 432.202846][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 432.596467][T10336] binder: 10334:10336 ioctl c0306201 200000000380 returned -22 [ 432.606361][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 432.620264][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1025'. [ 432.687587][ T5929] IPVS: starting estimator thread 0... [ 432.781371][T10341] IPVS: using max 38 ests per chain, 91200 per kthread [ 433.165101][T10351] loop4: detected capacity change from 0 to 7 [ 433.182171][ T6616] Dev loop4: unable to read RDB block 7 [ 433.189044][ T6616] loop4: unable to read partition table [ 433.195297][T10345] loop2: detected capacity change from 0 to 7 [ 433.229408][ T6616] loop4: partition table beyond EOD, truncated [ 433.403972][ T9] usb 4-1: USB disconnect, device number 49 [ 433.405118][ T6980] Dev loop2: unable to read RDB block 7 [ 433.416423][T10351] Dev loop4: unable to read RDB block 7 [ 433.422634][T10351] loop4: unable to read partition table [ 433.432373][ T6980] loop2: unable to read partition table [ 433.438471][ T6980] loop2: partition table beyond EOD, truncated [ 433.440678][T10351] loop4: partition table beyond EOD, [ 433.452830][T10345] Dev loop2: unable to read RDB block 7 [ 433.481592][T10351] truncated [ 433.489427][T10345] loop2: unable to read partition table [ 433.497578][T10351] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 433.593923][T10345] loop2: partition table beyond EOD, truncated [ 433.610346][T10345] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 434.761293][ T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 435.082385][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 435.092003][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.129256][T10368] input: syz1 as /devices/virtual/input/input21 [ 435.137564][ T9] usb 6-1: config 0 descriptor?? [ 435.761545][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1034'. [ 436.441033][T10390] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 436.493442][T10392] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 436.701151][ T5929] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 436.873668][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.884112][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.898649][ T5929] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.920759][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 436.939294][ T5929] usb 4-1: SerialNumber: syz [ 436.994002][ T9] usb 6-1: Cannot set autoneg [ 436.999006][ T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 437.029764][ T9] usb 6-1: USB disconnect, device number 29 [ 437.163390][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.181920][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.218321][ T5929] usb 4-1: 0:2 : does not exist [ 437.309999][ T5929] usb 4-1: USB disconnect, device number 50 [ 437.320290][T10398] loop4: detected capacity change from 0 to 7 [ 437.413488][T10398] Dev loop4: unable to read RDB block 7 [ 437.426369][T10398] loop4: unable to read partition table [ 437.439584][T10398] loop4: partition table beyond EOD, truncated [ 437.456469][T10398] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 437.681292][ T44] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 438.013323][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.111520][ T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 438.143151][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.159030][ T44] usb 3-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 438.286325][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'. [ 438.311313][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.321413][ T5929] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 438.398832][ T9] usb 6-1: config 0 has an invalid interface number: 40 but max is 0 [ 438.419419][ T9] usb 6-1: config 0 has no interface number 0 [ 438.419458][ T44] usb 3-1: config 0 descriptor?? [ 438.563359][ T9] usb 6-1: too many endpoints for config 0 interface 40 altsetting 48: 120, using maximum allowed: 30 [ 438.708590][ T5929] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.728576][ T9] usb 6-1: config 0 interface 40 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 438.743417][ T5929] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.801314][ T5929] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.821289][ T9] usb 6-1: config 0 interface 40 has no altsetting 0 [ 439.008472][ T5929] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 439.026082][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.040209][ T9] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 439.049686][ T5929] usb 7-1: Product: syz [ 439.054037][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.121308][ T5929] usb 7-1: Manufacturer: syz [ 439.125973][ T5929] usb 7-1: SerialNumber: syz [ 439.134986][ T9] usb 6-1: Product: syz [ 439.155164][ T9] usb 6-1: Manufacturer: syz [ 439.164884][ T9] usb 6-1: SerialNumber: syz [ 439.191615][ T5929] hub 7-1:1.0: bad descriptor, ignoring hub [ 439.299461][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.308967][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.340178][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.352258][ T5929] hub 7-1:1.0: probe with driver hub failed with error -5 [ 439.508504][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.517433][ T9] usb 6-1: config 0 descriptor?? [ 439.524434][T10418] netlink: 4348 bytes leftover after parsing attributes in process `syz.2.1042'. [ 439.574243][ T5929] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 439.593491][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 439.599563][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 439.746277][ T44] usb 3-1: USB disconnect, device number 56 [ 439.939481][ T9] usb 6-1: USB disconnect, device number 30 [ 440.591435][ T44] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 440.895571][ T44] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.000346][ T44] usb 4-1: config 0 has no interface number 0 [ 441.119205][ T44] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 441.144414][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.163904][ T44] usb 4-1: Product: syz [ 441.173953][ T44] usb 4-1: Manufacturer: syz [ 441.183267][ T44] usb 4-1: SerialNumber: syz [ 441.215737][ T44] usb 4-1: config 0 descriptor?? [ 441.412990][T10443] loop4: detected capacity change from 0 to 7 [ 441.439757][ T44] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 441.452229][T10443] Dev loop4: unable to read RDB block 7 [ 441.462569][ T44] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 441.490271][T10443] loop4: unable to read partition table [ 441.496480][T10443] loop4: partition table beyond EOD, truncated [ 441.503362][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 441.513978][T10443] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 441.530121][ T44] usb 4-1: media controller created [ 441.676355][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.782005][ T44] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 441.882023][ T44] usb 4-1: USB disconnect, device number 51 [ 442.081476][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 442.221370][ T9] usb 6-1: device descriptor read/64, error -71 [ 442.241880][ T5951] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 442.561431][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 443.128214][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 443.141281][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 443.153166][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 443.163647][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 443.177273][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 443.250876][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.293068][ T5951] usb 3-1: config 0 descriptor?? [ 443.321347][ T9] usb 6-1: device descriptor read/64, error -71 [ 443.495382][ T9] usb usb6-port1: attempt power cycle [ 443.529625][ T5951] hdpvr 3-1:0.0: firmware version 0x8 dated ¥)†#´–¶jnÛý [ 443.842815][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 443.892127][ T9] usb 6-1: device descriptor read/8, error -71 [ 444.256805][ T5975] usb 7-1: USB disconnect, device number 41 [ 444.311285][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 444.314056][ T5975] usblp0: removed [ 444.532296][ T9] usb 6-1: device descriptor read/8, error -71 [ 444.565434][ T5951] hdpvr 3-1:0.0: Could not setup controls [ 444.593180][ T5951] hdpvr 3-1:0.0: registering videodev failed [ 444.635648][ T5951] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 444.671600][ T9] usb usb6-port1: unable to enumerate USB device [ 444.676089][ T5951] usb 3-1: USB disconnect, device number 57 [ 444.908414][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 445.009231][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 445.336494][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.343056][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.656537][T10478] bridge_slave_1: left allmulticast mode [ 445.664028][T10478] bridge_slave_1: left promiscuous mode [ 445.673890][T10478] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.849199][T10478] bridge_slave_0: left allmulticast mode [ 446.195826][T10478] bridge_slave_0: left promiscuous mode [ 446.206069][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.220032][T10485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.551514][T10491] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 447.721381][T10491] usb 7-1: Using ep0 maxpacket: 16 [ 447.745830][T10491] usb 7-1: config 0 has no interfaces? [ 447.755591][T10491] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 447.777141][T10491] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 447.785581][T10491] usb 7-1: Manufacturer: syz [ 447.812726][T10491] usb 7-1: config 0 descriptor?? [ 447.829725][T10507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1068'. [ 447.991398][ T5966] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 448.228827][ T5966] usb 6-1: config 2 has an invalid interface number: 190 but max is 0 [ 448.238512][ T5966] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 448.273174][ T5966] usb 6-1: config 2 has no interface number 0 [ 448.280790][ T5966] usb 6-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.307054][ T5966] usb 6-1: string descriptor 0 read error: -22 [ 448.313520][ T5975] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 448.331640][ T5966] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 448.355994][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.491367][ T5975] usb 5-1: Using ep0 maxpacket: 16 [ 448.782688][T10528] syzkaller0: entered promiscuous mode [ 448.851387][T10528] syzkaller0: entered allmulticast mode [ 448.933942][ T5966] (null): keene_cmd_main failed (-110) [ 448.959020][ T5966] video4linux radio48: keene_cmd_main failed (-32) [ 448.976909][ T5966] radio-keene 6-1:2.190: V4L2 device registered as radio48 [ 449.164938][ T5966] usb 6-1: USB disconnect, device number 35 [ 449.277520][ T981] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 449.445864][ T981] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.463287][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 449.477794][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 449.549029][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.589878][ T981] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.620415][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.676559][ T981] usb 4-1: config 0 descriptor?? [ 450.156737][ T981] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 450.224865][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1074'. [ 450.279879][T10536] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1074'. [ 450.364766][ T981] usb 7-1: USB disconnect, device number 42 [ 450.645183][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1075'. [ 450.734866][T10541] netlink: 'syz.6.1075': attribute type 10 has an invalid length. [ 451.005617][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.017384][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.207718][T10541] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 451.231288][T10541] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 451.626384][T10541] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 451.881401][ T5966] usb 4-1: reset high-speed USB device number 52 using dummy_hcd [ 452.230156][T10548] netlink: 'syz.6.1076': attribute type 7 has an invalid length. [ 452.647024][ T5975] usb 5-1: unable to get BOS descriptor or descriptor too short [ 452.659779][ T5975] usb 5-1: no configurations [ 452.664622][ T5975] usb 5-1: can't read configurations, error -22 [ 452.803042][ T5951] usb 4-1: USB disconnect, device number 52 [ 453.027782][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 453.027802][ T30] audit: type=1326 audit(1755998567.276:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.064608][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1078'. [ 453.207045][T10554] bridge_slave_0: left allmulticast mode [ 453.244872][T10554] bridge_slave_0: left promiscuous mode [ 453.250610][ T30] audit: type=1326 audit(1755998567.276:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.341493][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.371085][T10554] bridge_slave_1: left allmulticast mode [ 453.414202][T10559] loop6: detected capacity change from 0 to 7 [ 453.423172][T10559] Dev loop6: unable to read RDB block 7 [ 453.429865][T10559] loop6: unable to read partition table [ 453.436247][ T30] audit: type=1326 audit(1755998567.316:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f542678d457 code=0x7ffc0000 [ 453.465238][T10559] loop6: partition table beyond EOD, truncated [ 453.473235][T10554] bridge_slave_1: left promiscuous mode [ 453.479422][T10559] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 453.579046][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.585620][ T30] audit: type=1326 audit(1755998567.316:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.670311][T10554] bond0: (slave bond_slave_0): Releasing backup interface [ 453.722679][ T30] audit: type=1326 audit(1755998567.316:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.784203][ T30] audit: type=1326 audit(1755998567.316:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.831018][T10554] bond0: (slave bond_slave_1): Releasing backup interface [ 453.881590][ T30] audit: type=1326 audit(1755998567.316:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.909323][ T30] audit: type=1326 audit(1755998567.316:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 453.948654][ T30] audit: type=1326 audit(1755998567.336:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10553 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f542678ebe9 code=0x7ffc0000 [ 454.013807][T10554] team0: Port device team_slave_0 removed [ 454.055100][T10554] team0: Port device team_slave_1 removed [ 454.094915][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.118720][T10554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.178703][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.209479][T10554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.151256][ T5966] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 455.271393][ T981] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 455.311322][ T5966] usb 3-1: Using ep0 maxpacket: 16 [ 455.322713][T10591] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 455.343957][ T5966] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 455.374693][ T5966] usb 3-1: config 8 has no interface number 0 [ 455.381008][ T5966] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 455.395498][ T5966] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 455.413485][ T5966] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 455.424838][ T5966] usb 3-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.438433][ T5966] usb 3-1: config 8 interface 206 has no altsetting 0 [ 455.445792][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.459324][ T5966] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 455.464808][ T981] usb 4-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 455.468872][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.493928][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.501747][ T5966] usb 3-1: Product: syz [ 455.510727][ T5966] usb 3-1: Manufacturer: syz [ 455.516574][ T5966] usb 3-1: SerialNumber: syz [ 455.532837][ T981] usb 4-1: config 0 descriptor?? [ 455.601677][T10491] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 455.647600][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 455.660368][T10594] syzkaller0: entered promiscuous mode [ 455.674432][T10594] syzkaller0: entered allmulticast mode [ 455.748479][ T5966] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 455.774141][ T5966] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 455.791444][T10491] usb 6-1: Using ep0 maxpacket: 16 [ 455.801879][T10491] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 455.810305][T10491] usb 6-1: config 0 has no interface number 0 [ 455.820080][T10491] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 455.871220][T10491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.879316][T10491] usb 6-1: Product: syz [ 456.001078][ T5966] usb 3-1: USB disconnect, device number 58 [ 456.012020][T10491] usb 6-1: Manufacturer: syz [ 456.021353][T10491] usb 6-1: SerialNumber: syz [ 456.044142][T10491] usb 6-1: config 0 descriptor?? [ 456.066951][T10491] radioshark2 6-1:0.206: Invalid radioSHARK2 device [ 456.181263][T10491] radioshark2 6-1:0.206: probe with driver radioshark2 failed with error -22 [ 456.205616][T10491] usbhid 6-1:0.206: couldn't find an input interrupt endpoint [ 456.215021][ T5966] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 456.254131][T10596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.265062][T10596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.324144][ T5966] garmin_gps 3-1:8.206: device disconnected [ 456.360428][T10592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.419974][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.434495][T10592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.459697][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.530175][T10596] netlink: 4348 bytes leftover after parsing attributes in process `syz.3.1085'. [ 456.580671][ T5936] usb 6-1: USB disconnect, device number 36 [ 456.889546][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 456.917599][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 456.984458][ T981] usb 4-1: USB disconnect, device number 53 [ 457.182156][ T5966] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 457.311798][ T5966] usb 3-1: device descriptor read/64, error -71 [ 457.551302][ T5966] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 457.644254][T10618] kvm: user requested TSC rate below hardware speed [ 457.711398][ T5966] usb 3-1: device descriptor read/64, error -71 [ 457.822411][ T5966] usb usb3-port1: attempt power cycle [ 457.876822][T10602] ptrace attach of "./syz-executor exec"[5882] was attempted by "./syz-executor exec"[10602] [ 458.248019][ T5966] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 458.289888][ T5966] usb 3-1: device descriptor read/8, error -71 [ 458.622383][ T5966] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 458.692384][ T5966] usb 3-1: device descriptor read/8, error -71 [ 458.912342][ T5966] usb usb3-port1: unable to enumerate USB device [ 460.210099][T10641] netlink: 'syz.5.1096': attribute type 23 has an invalid length. [ 461.201364][ T5966] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 461.242646][T10646] netlink: 'syz.6.1098': attribute type 10 has an invalid length. [ 461.313326][T10651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.354369][T10651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.372738][ T5966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 461.414118][ T5966] usb 3-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 461.452243][T10650] loop2: detected capacity change from 0 to 7 [ 461.461288][ T5966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.481127][T10650] Dev loop2: unable to read RDB block 7 [ 461.486913][T10650] loop2: unable to read partition table [ 461.520170][ T5966] usb 3-1: config 0 descriptor?? [ 461.525615][T10650] loop2: partition table beyond EOD, truncated [ 461.563779][T10650] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 461.843071][ T5880] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 461.941867][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1105'. [ 462.145316][ T5880] usb 7-1: not running at top speed; connect to a high speed hub [ 462.185265][ T5880] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 462.193832][ T5880] usb 7-1: config 0 has no interface number 0 [ 462.199955][ T5880] usb 7-1: config 0 interface 1 has no altsetting 0 [ 462.292228][ T5880] usb 7-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=58.e0 [ 462.331234][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.345279][ T5880] usb 7-1: Product: syz [ 462.359250][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.368690][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.386408][ T5880] usb 7-1: Manufacturer: syz [ 462.396531][ T5880] usb 7-1: SerialNumber: syz [ 462.435285][ T5880] usb 7-1: config 0 descriptor?? [ 462.443262][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.484655][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.509845][ T981] IPVS: starting estimator thread 0... [ 462.573859][T10670] netlink: 4348 bytes leftover after parsing attributes in process `syz.2.1099'. [ 462.612450][T10681] IPVS: using max 30 ests per chain, 72000 per kthread [ 462.755527][T10491] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 462.789761][ T5966] usbhid 3-1:0.0: can't add hid device: -71 [ 462.800256][ T5966] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 462.804948][ T5880] snd-usb-audio 7-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 462.827904][ T5880] usb 7-1: USB disconnect, device number 43 [ 462.876707][ T5966] usb 3-1: USB disconnect, device number 63 [ 462.918847][ T981] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 462.952238][T10491] usb 4-1: Using ep0 maxpacket: 32 [ 462.972458][T10491] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 462.982712][ T6616] udevd[6616]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.998849][T10491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.025281][T10491] usb 4-1: config 0 descriptor?? [ 463.065493][T10491] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 463.079010][T10491] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 463.097555][T10491] dvb_usb_anysee 4-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 463.231626][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.250781][ T981] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 463.284067][ T5880] usb 4-1: USB disconnect, device number 54 [ 463.331893][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.724083][ T981] usb 5-1: config 0 descriptor?? [ 463.969206][ T981] usbhid 5-1:0.0: can't add hid device: -71 [ 463.981881][ T981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 464.007121][ T981] usb 5-1: USB disconnect, device number 82 [ 464.121281][ T5975] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 464.303354][ T5975] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.331457][ T5975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.365103][ T5975] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.401255][ T5975] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 464.424479][ T5975] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.440328][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.461503][ T5975] usb 7-1: Product: syz [ 464.465685][ T5975] usb 7-1: Manufacturer: syz [ 464.496569][ T5975] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 464.518651][ T981] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 464.609325][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 464.691389][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 464.708030][ T5867] Bluetooth: hci5: adv larger than maximum supported [ 464.708075][ T5867] Bluetooth: hci5: Malformed LE Event: 0x0d [ 464.727566][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.738677][ T981] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 464.751057][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.763453][ T981] usb 5-1: config 0 descriptor?? [ 464.774035][ T981] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.785615][ T981] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 464.845967][T10705] syzkaller0: entered promiscuous mode [ 464.857599][T10705] syzkaller0: entered allmulticast mode [ 464.901475][ T5880] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 465.103288][ T5880] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 465.125417][ T5880] usb 3-1: config 1 has no interface number 0 [ 465.146713][ T5880] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 465.183559][ T5880] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 465.205764][ T5880] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.219920][ T5929] usb 5-1: USB disconnect, device number 83 [ 465.244273][ T5929] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 465.254851][ T5880] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 465.648742][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.657856][ T5880] usb 3-1: Product: syz [ 465.662247][ T5880] usb 3-1: Manufacturer: syz [ 465.666888][ T5880] usb 3-1: SerialNumber: syz [ 465.759882][T10704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.139138][T10719] overlayfs: missing 'lowerdir' [ 466.165658][T10704] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 466.552765][T10725] veth1_macvtap: left promiscuous mode [ 466.559296][ T5880] usb 3-1: Incompatible driver and firmware versions [ 466.570728][T10725] macsec0: entered promiscuous mode [ 466.589003][T10725] macsec0: entered allmulticast mode [ 466.653410][T10725] veth1_macvtap: entered promiscuous mode [ 466.706209][T10725] veth1_macvtap: entered allmulticast mode [ 466.732819][ T5880] usb 3-1: USB disconnect, device number 64 [ 466.767910][T10725] macsec0: left promiscuous mode [ 466.799610][T10725] macsec0: left allmulticast mode [ 466.826329][T10725] veth1_macvtap: left allmulticast mode [ 466.974903][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 468.011323][ T5880] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 468.185861][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.227229][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 468.286867][ T5880] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 468.296488][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 468.305720][ T5880] usb 6-1: SerialNumber: syz [ 468.367204][ T5880] usb 6-1: 0:2 : does not exist [ 468.374525][ T5880] usb 6-1: unit 255 not found! [ 468.421853][ T5975] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 468.564913][ T5975] usb 4-1: device descriptor read/64, error -71 [ 468.591734][ T5951] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 468.744598][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 468.757020][ T5951] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 468.759333][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.769761][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 240, changing to 11 [ 468.778255][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.815123][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 8520, setting to 1024 [ 468.826746][ T5975] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 468.831141][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.837676][ T5951] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 468.860824][ T5951] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 468.869792][ T5951] usb 5-1: Manufacturer: syz [ 468.878336][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.887426][ T5951] usb 5-1: config 0 descriptor?? [ 468.896123][ T5951] smsusb:smsusb_probe: board id=9, interface number 0 [ 468.922832][ T5951] smsusb:siano_media_device_register: media controller created [ 468.933358][ T5951] usb 5-1: BOGUS urb xfer, pipe 3 != type 1 [ 468.939300][ T5951] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 468.954786][ T5951] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 468.962906][ T5975] usb 4-1: device descriptor read/64, error -71 [ 468.979393][ T5951] ------------[ cut here ]------------ [ 468.985014][ T5951] WARNING: CPU: 1 PID: 5951 at mm/slub.c:4790 free_large_kmalloc+0x15c/0x1f0 [ 468.993899][ T5951] Modules linked in: [ 468.998105][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 469.007555][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.019376][ T5951] Workqueue: usb_hub_wq hub_event [ 469.024572][ T5951] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 469.030444][ T5951] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 de fd 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 c6 38 64 09 cc 90 <0f> 0b 90 65 48 8b 05 b9 fd 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 469.050418][ T5951] RSP: 0018:ffffc9000468eb00 EFLAGS: 00010206 [ 469.056903][ T5951] RAX: 00000000ff000000 RBX: ffffea00016b1880 RCX: 0000000000000000 [ 469.064959][ T5951] RDX: ffffc90019e58000 RSI: ffff88805ac62000 RDI: ffffea00016b1880 [ 469.073384][ T5951] RBP: 0000000000000100 R08: ffff888030d05a03 R09: 1ffff110061a0b40 [ 469.081466][ T5951] R10: dffffc0000000000 R11: ffffed10061a0b41 R12: 1ffff1100ab96a82 [ 469.089476][ T5951] R13: 0000000000000000 R14: ffff888030d05a60 R15: dffffc0000000000 [ 469.097916][ T5951] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 469.107100][ T5951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.113827][ T5951] CR2: 00002000000012c8 CR3: 0000000030cd8000 CR4: 00000000003526f0 [ 469.121944][ T5951] Call Trace: [ 469.125266][ T5951] [ 469.128243][ T5951] usb_free_urb+0xd0/0x120 [ 469.132807][ T5951] smsusb_term_device+0x1d6/0x3b0 [ 469.137909][ T5951] smsusb_probe+0x1a04/0x2060 [ 469.142754][ T5951] ? __pfx_smsusb_probe+0x10/0x10 [ 469.147842][ T5951] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 469.153497][ T5951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.159480][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.165981][ T5951] ? __pm_runtime_set_status+0x785/0xa50 [ 469.171768][ T5951] usb_probe_interface+0x668/0xc30 [ 469.177047][ T5951] ? __pfx_usb_probe_interface+0x10/0x10 [ 469.182887][ T5951] really_probe+0x26d/0x9e0 [ 469.187444][ T5951] __driver_probe_device+0x18c/0x2f0 [ 469.192864][ T5951] driver_probe_device+0x4f/0x430 [ 469.198022][ T5951] __device_attach_driver+0x2ce/0x530 [ 469.203525][ T5951] bus_for_each_drv+0x24e/0x2e0 [ 469.208423][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 469.214393][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 469.219935][ T5951] __device_attach+0x2b8/0x400 [ 469.224879][ T5951] ? __pfx___device_attach+0x10/0x10 [ 469.230238][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 469.235534][ T5951] bus_probe_device+0x185/0x260 [ 469.240506][ T5951] device_add+0x7b6/0xb50 [ 469.244971][ T5951] usb_set_configuration+0x1a87/0x20e0 [ 469.250501][ T5951] usb_generic_driver_probe+0x8d/0x150 [ 469.256100][ T5951] usb_probe_device+0x1c4/0x390 [ 469.261028][ T5951] ? __pfx_usb_probe_device+0x10/0x10 [ 469.266523][ T5951] really_probe+0x26d/0x9e0 [ 469.271074][ T5951] __driver_probe_device+0x18c/0x2f0 [ 469.276433][ T5951] driver_probe_device+0x4f/0x430 [ 469.281557][ T5951] __device_attach_driver+0x2ce/0x530 [ 469.286971][ T5951] bus_for_each_drv+0x24e/0x2e0 [ 469.291913][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 469.297943][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 469.303467][ T5951] __device_attach+0x2b8/0x400 [ 469.308302][ T5951] ? __pfx___device_attach+0x10/0x10 [ 469.313835][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 469.319092][ T5951] bus_probe_device+0x185/0x260 [ 469.324101][ T5951] device_add+0x7b6/0xb50 [ 469.328476][ T5951] usb_new_device+0xa39/0x16f0 [ 469.333388][ T5951] ? __pfx_usb_new_device+0x10/0x10 [ 469.338664][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.343994][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.349241][ T5951] hub_event+0x2958/0x4a20 [ 469.353839][ T5951] ? __pfx_hub_event+0x10/0x10 [ 469.358674][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.364531][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.369775][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.375619][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.381458][ T5951] process_scheduled_works+0xae1/0x17b0 [ 469.387081][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.393194][ T5951] worker_thread+0x8a0/0xda0 [ 469.397911][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.404411][ T5951] ? __kthread_parkme+0x7b/0x200 [ 469.409430][ T5951] kthread+0x70e/0x8a0 [ 469.413689][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 469.418849][ T5951] ? __pfx_kthread+0x10/0x10 [ 469.423589][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.428856][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.434198][ T5951] ? __pfx_kthread+0x10/0x10 [ 469.438872][ T5951] ret_from_fork+0x3f9/0x770 [ 469.443587][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 469.448741][ T5951] ? __switch_to_asm+0x39/0x70 [ 469.453625][ T5951] ? __switch_to_asm+0x33/0x70 [ 469.458434][ T5951] ? __pfx_kthread+0x10/0x10 [ 469.463150][ T5951] ret_from_fork_asm+0x1a/0x30 [ 469.467984][ T5951] [ 469.471240][ T5951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 469.478593][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 469.488014][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.498095][ T5951] Workqueue: usb_hub_wq hub_event [ 469.503149][ T5951] Call Trace: [ 469.506447][ T5951] [ 469.509390][ T5951] dump_stack_lvl+0x99/0x250 [ 469.513994][ T5951] ? __asan_memcpy+0x40/0x70 [ 469.518627][ T5951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.523844][ T5951] ? __pfx__printk+0x10/0x10 [ 469.528460][ T5951] vpanic+0x281/0x750 [ 469.532456][ T5951] ? __pfx__printk+0x10/0x10 [ 469.537069][ T5951] ? __pfx_vpanic+0x10/0x10 [ 469.541610][ T5951] ? is_bpf_text_address+0x26/0x2b0 [ 469.546847][ T5951] panic+0xb9/0xc0 [ 469.550581][ T5951] ? __pfx_panic+0x10/0x10 [ 469.555028][ T5951] __warn+0x31b/0x4b0 [ 469.559023][ T5951] ? free_large_kmalloc+0x15c/0x1f0 [ 469.564247][ T5951] ? free_large_kmalloc+0x15c/0x1f0 [ 469.569461][ T5951] report_bug+0x2be/0x4f0 [ 469.573807][ T5951] ? free_large_kmalloc+0x15c/0x1f0 [ 469.579031][ T5951] ? free_large_kmalloc+0x15c/0x1f0 [ 469.584244][ T5951] ? free_large_kmalloc+0x15e/0x1f0 [ 469.589461][ T5951] handle_bug+0x84/0x160 [ 469.593713][ T5951] exc_invalid_op+0x1a/0x50 [ 469.598230][ T5951] asm_exc_invalid_op+0x1a/0x20 [ 469.603087][ T5951] RIP: 0010:free_large_kmalloc+0x15c/0x1f0 [ 469.608915][ T5951] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 de fd 87 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 c6 38 64 09 cc 90 <0f> 0b 90 65 48 8b 05 b9 fd 87 10 48 3b 44 24 08 75 32 48 89 df 48 [ 469.628573][ T5951] RSP: 0018:ffffc9000468eb00 EFLAGS: 00010206 [ 469.634663][ T5951] RAX: 00000000ff000000 RBX: ffffea00016b1880 RCX: 0000000000000000 [ 469.642646][ T5951] RDX: ffffc90019e58000 RSI: ffff88805ac62000 RDI: ffffea00016b1880 [ 469.650630][ T5951] RBP: 0000000000000100 R08: ffff888030d05a03 R09: 1ffff110061a0b40 [ 469.658619][ T5951] R10: dffffc0000000000 R11: ffffed10061a0b41 R12: 1ffff1100ab96a82 [ 469.666598][ T5951] R13: 0000000000000000 R14: ffff888030d05a60 R15: dffffc0000000000 [ 469.674606][ T5951] usb_free_urb+0xd0/0x120 [ 469.679040][ T5951] smsusb_term_device+0x1d6/0x3b0 [ 469.684084][ T5951] smsusb_probe+0x1a04/0x2060 [ 469.688795][ T5951] ? __pfx_smsusb_probe+0x10/0x10 [ 469.693852][ T5951] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 469.699438][ T5951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 469.705352][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.711706][ T5951] ? __pm_runtime_set_status+0x785/0xa50 [ 469.717356][ T5951] usb_probe_interface+0x668/0xc30 [ 469.722497][ T5951] ? __pfx_usb_probe_interface+0x10/0x10 [ 469.728146][ T5951] really_probe+0x26d/0x9e0 [ 469.732677][ T5951] __driver_probe_device+0x18c/0x2f0 [ 469.737992][ T5951] driver_probe_device+0x4f/0x430 [ 469.743060][ T5951] __device_attach_driver+0x2ce/0x530 [ 469.748469][ T5951] bus_for_each_drv+0x24e/0x2e0 [ 469.753344][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 469.759257][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 469.764675][ T5951] __device_attach+0x2b8/0x400 [ 469.769449][ T5951] ? __pfx___device_attach+0x10/0x10 [ 469.774759][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 469.779977][ T5951] bus_probe_device+0x185/0x260 [ 469.784855][ T5951] device_add+0x7b6/0xb50 [ 469.789202][ T5951] usb_set_configuration+0x1a87/0x20e0 [ 469.794707][ T5951] usb_generic_driver_probe+0x8d/0x150 [ 469.800182][ T5951] usb_probe_device+0x1c4/0x390 [ 469.805057][ T5951] ? __pfx_usb_probe_device+0x10/0x10 [ 469.810442][ T5951] really_probe+0x26d/0x9e0 [ 469.814966][ T5951] __driver_probe_device+0x18c/0x2f0 [ 469.820286][ T5951] driver_probe_device+0x4f/0x430 [ 469.825325][ T5951] __device_attach_driver+0x2ce/0x530 [ 469.830717][ T5951] bus_for_each_drv+0x24e/0x2e0 [ 469.835586][ T5951] ? __pfx___device_attach_driver+0x10/0x10 [ 469.841495][ T5951] ? __pfx_bus_for_each_drv+0x10/0x10 [ 469.846895][ T5951] __device_attach+0x2b8/0x400 [ 469.851669][ T5951] ? __pfx___device_attach+0x10/0x10 [ 469.856968][ T5951] ? do_raw_spin_unlock+0x122/0x240 [ 469.862187][ T5951] bus_probe_device+0x185/0x260 [ 469.867068][ T5951] device_add+0x7b6/0xb50 [ 469.871410][ T5951] usb_new_device+0xa39/0x16f0 [ 469.876197][ T5951] ? __pfx_usb_new_device+0x10/0x10 [ 469.881493][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.886712][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.891955][ T5951] hub_event+0x2958/0x4a20 [ 469.896446][ T5951] ? __pfx_hub_event+0x10/0x10 [ 469.901229][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.906967][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.912185][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.917912][ T5951] ? process_scheduled_works+0x9ef/0x17b0 [ 469.923648][ T5951] process_scheduled_works+0xae1/0x17b0 [ 469.929233][ T5951] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.935242][ T5951] worker_thread+0x8a0/0xda0 [ 469.939855][ T5951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 469.946215][ T5951] ? __kthread_parkme+0x7b/0x200 [ 469.951180][ T5951] kthread+0x70e/0x8a0 [ 469.955270][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 469.960391][ T5951] ? __pfx_kthread+0x10/0x10 [ 469.965173][ T5951] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.970390][ T5951] ? lockdep_hardirqs_on+0x9c/0x150 [ 469.975625][ T5951] ? __pfx_kthread+0x10/0x10 [ 469.980242][ T5951] ret_from_fork+0x3f9/0x770 [ 469.984848][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 469.989974][ T5951] ? __switch_to_asm+0x39/0x70 [ 469.994756][ T5951] ? __switch_to_asm+0x33/0x70 [ 469.999538][ T5951] ? __pfx_kthread+0x10/0x10 [ 470.004147][ T5951] ret_from_fork_asm+0x1a/0x30 [ 470.008945][ T5951] [ 470.012388][ T5951] Kernel Offset: disabled [ 470.016726][ T5951] Rebooting in 86400 seconds..