last executing test programs: 11m43.348277518s ago: executing program 1 (id=545): r0 = socket(0xa, 0x3, 0x3a) (async) syz_clone(0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f81bf5372729e612f3650b0066ad7d4b7e4c5d3ebe7cba055541cce304ca6bed7443bbffbeeab8c8961d1d0ede4003b30dac34be96b03f73fa1e060476d9c935ed69eb3c5eb73a62f8e7f6df52401e500dc673458cc7adf6d76a9cb5bb8d6e5988529aafb600f433d9d031552727936f31dee09784e9217353fa845f5802f278bf8eca8a233f89bc4225b991c532f8edd2d37c05aaf6205b3cbc5908b87f69bc97fd12088f0d851b3df9e1515f32905afedeb35fce8fda481c14407dd89336") (async) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000440)={0xbe, 0x0, 0x1}) (rerun: 64) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='team0\x00', 0x0, r0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x1, 0x4, 0x60, 0x7f, 0x17, "9f9413a4d68de2d71b63e573229ac6de50806c"}) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) (async) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4, r7, 0x800}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)) (async, rerun: 64) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1b}, @flat=@handle={0x73682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) write$P9_RLCREATE(r11, &(0x7f0000000400)={0x18, 0xf, 0x2, {{0x4, 0x2, 0x7}, 0x2}}, 0x18) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r8, 0x230d}, 0xc) 11m42.724808968s ago: executing program 1 (id=547): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x104, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 11m42.147008359s ago: executing program 1 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @my=0x0, 0x0, 0x2, 0x5c, 0x8}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) close(r0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') syz_usbip_server_init(0x1) r4 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0xd, @win={{0x0, 0x1ff, 0x0, 0x3}, 0x3, 0x908, &(0x7f0000000200)={{0x1dde, 0x5, 0x401, 0x3}, &(0x7f0000000100)={{0x9, 0x8b, 0x7, 0x4}}}, 0x8001, &(0x7f0000000480)="7c5044ff48b5a5419b778f211d4857e0331f46cf426f95dcee85f3d0fab81fce734801b55de624db774600fcc832f05d88b4a6687bbc009e0fe2d942e883c6c74d97b71fe520439c0f8efade73057a3cdfd90ea1a2810d40e096138733c13a09980557fdc15d58faf780fca932d03ef0419e3f7e451cb738c6edbc87baca7051ee9391af25bb940561516dec92efea2b8dcdc3f7852645", 0x8}}) syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d0101400001020301090278"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x3f, 0x2, 0x0, "8baadc68379dd10000419d6bc2cb00"}) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000004060101000000000000000003000005050001"], 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f0000000080)={0xe, 0x102, 0x2, {0x9, 0x1, 0x9, 0x6}}) 11m39.950218424s ago: executing program 1 (id=561): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = socket(0x1f, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0xe, 0x8, 0xffffffff, 0xffff, 0x101, 0x916b, 0x7}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000580), 0x4) r4 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x40) r5 = accept(r3, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000300)=0x80) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000340)=@phonet={0x23, 0x7, 0x2, 0x9}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="1a136889bc5289a380263f8e6775d6d42154b4ad5c9bda891d40eb2545028cb636a1638b01843129c4cd0d8c122c5cb9d68464cc03bad65cc2ff097817f8aa86586f621da16e2577bf832cbf70eb4b53cc440408071b675185a88ca7d3af52f06a42c248dccab5bbfea4bec3fef3f60e9cf22e6ff4c28c77db1de0c0f20775bdb9c12ff5e2577db690fa88209495f343dfe7a3e9a5e9e62181f031ab47da36b0285762dd", 0xa4}], 0x1, &(0x7f00000005c0)=[{0xc0, 0x118, 0x9, "854ff05835d48d8280dd23f5ec30cba1b2866607bf4edf2f1127d0b451a6de46c9f3a9529b4115af0b44b52497a7735a9b8553193db72cbd1558f5db917311aefdfa1ce5528f28dde9347170dadef50dc4536dced04ac6169a485edfad1d707258e4e13435eeb9db6748e1d888337818fe6d7c6bf9105fd23dc50aaf81380d1a40eba36155c3d688a3f54e434414bddc83473dd93dae9b33ac0c1ac0c26c967dac4a7b06df16d65d7a0c3aff47"}, {0xe8, 0x103, 0x0, "ae86b08ae6ed2c622e54cdd595beff4a8d0de86fe837149f31fcce79c89f5288bc9377d2f3d86ee289c5940b64b5e4226a0b04adc28cd8f1556769c0e8813151132b6e4f6d65cf2a43e96644db47cf8051f6546497378a801ea51ec93e6fb31713df8b1c22ff970e1fdc951ac5f7dfd74fb0a06aec38eeff2a13bd34a8761f71aad54903797b55ec0242032089310558bc8ebe5e2dd34abaef72d799f87a9b4724de5064099c12112f0546d97f8ac33f8c053ea1a7a48ee3d3cad5c77cdd1bb3bf7dba445f67ef78806b57920760184ef0f5b023"}], 0x1a8}, 0x20000010) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0xec000000, 0x2e}]}) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x280200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0xc}) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) socket(0x1f, 0x1, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f0000000180)=@req3={0xe, 0x8, 0xffffffff, 0xffff, 0x101, 0x916b, 0x7}, 0x1c) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000580), 0x4) (async) syz_open_dev$video(&(0x7f0000000140), 0x8, 0x40) (async) accept(r3, &(0x7f0000000280)=@x25={0x9, @remote}, &(0x7f0000000300)=0x80) (async) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000340)=@phonet={0x23, 0x7, 0x2, 0x9}, 0x80, &(0x7f0000000480)=[{&(0x7f00000003c0)="1a136889bc5289a380263f8e6775d6d42154b4ad5c9bda891d40eb2545028cb636a1638b01843129c4cd0d8c122c5cb9d68464cc03bad65cc2ff097817f8aa86586f621da16e2577bf832cbf70eb4b53cc440408071b675185a88ca7d3af52f06a42c248dccab5bbfea4bec3fef3f60e9cf22e6ff4c28c77db1de0c0f20775bdb9c12ff5e2577db690fa88209495f343dfe7a3e9a5e9e62181f031ab47da36b0285762dd", 0xa4}], 0x1, &(0x7f00000005c0)=[{0xc0, 0x118, 0x9, "854ff05835d48d8280dd23f5ec30cba1b2866607bf4edf2f1127d0b451a6de46c9f3a9529b4115af0b44b52497a7735a9b8553193db72cbd1558f5db917311aefdfa1ce5528f28dde9347170dadef50dc4536dced04ac6169a485edfad1d707258e4e13435eeb9db6748e1d888337818fe6d7c6bf9105fd23dc50aaf81380d1a40eba36155c3d688a3f54e434414bddc83473dd93dae9b33ac0c1ac0c26c967dac4a7b06df16d65d7a0c3aff47"}, {0xe8, 0x103, 0x0, "ae86b08ae6ed2c622e54cdd595beff4a8d0de86fe837149f31fcce79c89f5288bc9377d2f3d86ee289c5940b64b5e4226a0b04adc28cd8f1556769c0e8813151132b6e4f6d65cf2a43e96644db47cf8051f6546497378a801ea51ec93e6fb31713df8b1c22ff970e1fdc951ac5f7dfd74fb0a06aec38eeff2a13bd34a8761f71aad54903797b55ec0242032089310558bc8ebe5e2dd34abaef72d799f87a9b4724de5064099c12112f0546d97f8ac33f8c053ea1a7a48ee3d3cad5c77cdd1bb3bf7dba445f67ef78806b57920760184ef0f5b023"}], 0x1a8}, 0x20000010) (async) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0xec000000, 0x2e}]}) (async) bind$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000000), 0x100000001, 0x280200) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0xc}) (async) 11m38.66725069s ago: executing program 1 (id=570): r0 = socket$kcm(0x29, 0x7, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x1, 0x3fff}, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x54, 0xc9}}}, 0x6) close_range(r0, r1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @private}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040880) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x101, 0x0, 0x8, 0x4, 0x7}) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000280)=[@nested_load_code={0x12e, 0x9a, {0x2, "66ba210066b8357366efc7442400e0000000c7442402e5000000ff1c240f01c8c7442400bb000000c744240200000080c7442406000000000f01142445d38600400000450f01c266baf80cb88025dd8def66bafc0cb800000100efc7442400d7000000c7442402f4770000ff2c2466baf80cb82f9aa785ef66bafc0cecc44161e927"}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x40, 0x3}}, @wr_drn={0x68, 0x20, {0x0, 0x1f0}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x408}}, @nested_load_code={0x12e, 0x65, {0x3, "66b89b000f00d0660f1aecc7442400bb000000c744240295140000ff2c2466b829008ed066b8de008ee0f3400f1efa66baf80cb834921485ef66bafc0ced0f7998ec000000450f01d1440f01ca"}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x4000, 0xcb47}}, @nested_vmresume={0x130, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb71, 0x7fffffff}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0xe8}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8, 0x5}}, @out_dx={0x6a, 0x28, {0x113d, 0x1, 0x100}}, @nested_amd_vmload={0x182, 0x18}, @in_dx={0x69, 0x20, {0x382f, 0xc}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x524, 0x3, 0x4, 0x35}}, @wrmsr={0x65, 0x20, {0xae7, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x1, 0x10}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x3bca, 0x1, 0x4}}, @wrmsr={0x65, 0x20, {0x2ef, 0x800}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0xffffffff}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}], 0x457}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000740)) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000b40)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000005) openat$kvm(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8000, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000d00)={[0x966a]}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000d40)={0x0, 0x1800, 0x0, 0x3, 0x7fff}, &(0x7f0000000d80)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000dc0)={r9, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0xfffffffb}}, 0x6, 0xffff, 0xfffffffd, 0xd2, 0x4, 0x4, 0xff}, &(0x7f0000000e80)=0x9c) r10 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000ec0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x596, 0x500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0xff, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0x834}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x4, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x9}}]}}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x300, 0x2, 0x81, 0x1, 0xff, 0x7f}, 0x85, &(0x7f0000000f40)={0x5, 0xf, 0x85, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x29a, 0xf00f, 0x4, [0xc030, 0xff00c0, 0x410f, 0x3fcf, 0x3f1e]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x3c, 0xf000, 0xd7d, [0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x4, 0x3}, @generic={0x10, 0x10, 0xa, "63511089376f25e54f4eb47181"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x8, 0x8, 0x6, 0x2}, @generic={0x2b, 0x10, 0xb, "fc251953c298dd3bbcdf041750e607f6436d0dd0f98841e5a776996d50326e8f48d2c037aa6f34fd"}]}, 0x6, [{0x6c, &(0x7f0000001000)=@string={0x6c, 0x3, "4fdddf1aa875610ad54589d2cf0a8e20bda31947396f4af449af944e3db4339a8290b08b67f8eb63cc9b6f9c73d9a5305a505989fd56020c31759ea2b09f2a77a74b2c78a649f326263be7ec5e5dfd3598335201ccca8224fc006c49c74ffc5d319a087c9d60f21c3c79"}}, {0x92, &(0x7f0000001080)=@string={0x92, 0x3, "b261507fead657b524de7f3bbd814a898fda8e24a0f212755b062dca8f0682f2a39da7a1a1c76ce148c94c1a27c5bd5a4defdfe03d9dd3ecc946ce4dad7534a75f276093d021b66889e36a550e381d5a248a4c94d9aaa9f59fd8e48a66a4cf511cb644ff6a63f9453cecf7fa2c32e55be5b13de124d21012501cb2905f204fe3517ae7cf25a1961038806f6c8f077172"}}, {0xf1, &(0x7f0000001140)=@string={0xf1, 0x3, "ace8f7a2bb697278a8a7b2c2f6e34aefab1fec877477f3b917bdd73e9603755a75cf941c26e2fd5d879cd3b013071048ee03f58953c58ba43fcd30130e916c18ab16329e11da2c73fd5cad8330107a4c45350b2100cf8ac0b62672592a513eeeff0df68326b17aa5b2bd89fad30f5d04d4f197c43f2a619a2ec63ed00b432704b411eecded44aec7b9119472935d543d35383ec53a41c1f8d5090ab347b33ceb545cf1ed57d9862c9be867f2ad1eac3f89a1000d996abad76f4e8ae24c626836be655698db2d7a2e6f6aada514e16ad34aa668b6d29c94b918a5c7acd768f12f8de1d958869b3bb506d591a0001a44"}}, {0xcb, &(0x7f0000001240)=@string={0xcb, 0x3, "6015abf651f4b130d81ac19fcd1e735508910df95afb300d89d8e6d0a0e8981e3129bc0ee26e31397e54179d1ce38e858fb0ef8906757dfbc6d9b76e39579be8e8debebf381a67a1eb01f90e078c5b11c583db07714bb6669d644000fc617dd66a49810f294f0b0a58ea7fee5a66edaa6c2bd514149386300179e7f55735387d407870610ff4f071bd94559f0e903cea83280bc6d037a29fe3006693818eb268f0d91fba4c6a6ab1beea3aa881b6db8231ec617da8e4336608e8dfe68fec2126741154daf375623864"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x400a}}, {0xbb, &(0x7f0000001380)=@string={0xbb, 0x3, "d5e3aa299b1f3d439de2530d151b7a775b6838b0b9f43d7fa2050ac55d1cc3bcff6723bf9b976a497f0a92f6fac22221d3b5627bc330df8fdffb81a4815adfa6e4f8a3c7285890007a546feed5dcdeebfc630893188a3213257baa4a918ebd090e4674873d82553598160880ddd4c27ca7e9b6385ad9e1771798920c67ae3804914f1e59694af265e8c834a8226c4a46f2479779bd28826890c0ace4592092d3bcf9b7d002ce013b356f9a7a53741ee31f8f2cd16bc4c704ee"}}]}) syz_usb_control_io$hid(r10, &(0x7f0000001680)={0x24, &(0x7f00000014c0)={0x40, 0x1, 0xe8, {0xe8, 0x9, "1185c63e49b4b0059e67b5ae756d7e3e97c15179cb0593b7a918ede1cf6486eeb7c1fd8201762134cf578d905926cee59de2a44d258cf98db1ff5d0b73ade38da753eb411e8a701170676b2b806ba19664fbe309bf25232149442c889ad4e03a43032257057df73c2dca4fde1d866a5feee8e71afba8ff504ae2b6ddfd3c1f8422a58ef44961bb68f2520ba5f369b112d5446eb80c662bd37340be9e137ef8c651b24760599ec75e1a4ee959bd26c8a4e959355a5db75def8bcafbd9fcbb1e470022c8c3e4fae344cf894265b304b5e7a8fe2bfe57404d43c7874701693930a845028a494ee1"}}, &(0x7f00000015c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000001600)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0xc}]}}, &(0x7f0000001640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x2f2}}}}, &(0x7f0000001940)={0x2c, &(0x7f00000016c0)={0x20, 0xc, 0xcd, "2e2958168bb5baff5806784f7e031e1a231cbd869bee7d22bcf16013bc73ca91d7144de45ba7b3104a6c9214ed3049ccecbc2879728d8bfa0316c243569716c5350eb88226dc7093d237be04155680155cf86ed59b74b3824706bcb7f2daab2498b8c92c0be403128f4e42d5bdbe28f1bfe513749edb8c687d3e411888be236e760460c1c287fab1b833d9c8b9be9eac7b562d131ad8b3bca98bb8f73cc3c85b016ea8dc9eab6d281a42df0874a4bc84dd17fabb49e05c52b95a26e5e47b3ad3c09457945625a56a5fb6bb2fe1"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001800)={0x0, 0x8, 0x1}, &(0x7f0000001840)={0x20, 0x1, 0x8c, "3401b448b7c5b1010752993f198a4708544d566c923c61e7a0b9e5876eaaaf224d39dc00ff56f49200e591b5ac0dd057384050801248e7425c207ec75df5babaa5ce73be46918b6e48b51ea88196ffa1cdf990cf20c8fdeaf90f69bfbfd9115384f19a46b7c2bb311ca679dbd27b49310d5913483685dab6f533fd242c5e8ceab3392463818468624c73108e"}, &(0x7f0000001900)={0x20, 0x3, 0x1, 0x8}}) r11 = openat$null(0xffffffffffffff9c, &(0x7f0000001980), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000019c0)={r9, 0x30, 0x3, [0x1, 0x2, 0xbcad]}, &(0x7f0000001a00)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000001a40)={0x9, 0x10, 0x8004, 0x7, 0x3a0, 0x95cf, 0x0, 0x8, r12}, &(0x7f0000001a80)=0x20) sendfile(r8, r3, 0x0, 0xffffffffffffffff) 11m37.453027476s ago: executing program 1 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xffdd) close(r1) close(0x4) 11m22.094057261s ago: executing program 32 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0xffdd) close(r1) close(0x4) 9m35.347031263s ago: executing program 2 (id=1101): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0xb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x4, 0x3d}}]}}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x2a, {0x2a, 0x21, "c263138526792c3cbdeace918d0fb74237cc6e446c4e88e78881ce2a52973661d67a0c554438db17"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 9m35.296585976s ago: executing program 2 (id=1102): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x38, r2, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r5, r6, 0x3, 0x0, 0x2, 0x1, {0xfc, 0x1, 0x5, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000180)=[0x1, 0x1, 0x7, 0x9], &(0x7f0000000200)=[0x3, 0x2, 0x2], 0x40, 0x7, 0x2, &(0x7f0000000640)=[0xcc1, 0x4, 0x7f, 0xd, 0x6, 0x88, 0x13], &(0x7f0000000680)=[0x7, 0xc00000, 0xec1d, 0x0, 0x1, 0xfff]}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfe44, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000600)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], r10, 0x0, '\x00', 0x3, 0x6}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x38, r2, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r5, r6, 0x3, 0x0, 0x2, 0x1, {0xfc, 0x1, 0x5, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (async) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]}) (async) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000180)=[0x1, 0x1, 0x7, 0x9], &(0x7f0000000200)=[0x3, 0x2, 0x2], 0x40, 0x7, 0x2, &(0x7f0000000640)=[0xcc1, 0x4, 0x7f, 0xd, 0x6, 0x88, 0x13], &(0x7f0000000680)=[0x7, 0xc00000, 0xec1d, 0x0, 0x1, 0xfff]}) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfe44, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000600)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], r10, 0x0, '\x00', 0x3, 0x6}) (async) 9m35.166462091s ago: executing program 2 (id=1103): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x118, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x104, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1411, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x80000001, 0x30}, &(0x7f0000000040)=0xc) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9m35.117586926s ago: executing program 2 (id=1105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r5, 0x1, 0x22, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a0236910102030109022400010000000009"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x20, 0x30, 0x1d, {0x1d, 0xb, "3020b2b04acfcff55cdc847c66a21f5be07aef855b87956cde5113"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x3, "7f19"}, @main=@item_012={0x2, 0x0, 0xc, "10de"}, @local=@item_4={0x3, 0x2, 0x8, "11f724e0"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0xd, 0x1, {0x22, 0x313}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0xf, 0x12, "4914a745c4f33cfb056e685df6ae4e9ca29a"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x1, 0xf9, "bc7965f834bf4acd636812322c80bfbbf2bb1a04851670b72b1541055d4f7e21f23e469f47c4cf15e5a205b08c2017a7dd83e74e0ad43103b38e42fc859f48c840bc57fb7bc167df5d265b9b080d6806e1eff72a42642978b373aded4ec8b769ca6d2d02f78e78cf62cf624293b4ad36eae661352b3ec26637e6336eb9fcddc3b24d0bd14283d480cabcb02c396ef3196139d97d30fe41ac59b259316e3dd9a7a6ae1f4eecfa4a79ee7c4eeb76f3dfae7a2d863629c3f584c0ea5774cade84aa87203c91a2f27f69b6d22eda7f22a82910e76700da076dde9679a0e219949ec97aba324ba18a6fdc0a9cd8caa31171c35b35bb1a66765cb4e0"}, &(0x7f0000000380)={0x20, 0x3, 0x1}}) (async) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000003c0)=0x3, 0x4) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9m33.83465643s ago: executing program 2 (id=1113): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x1410, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x6, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000102e1040000000000000001801400018008000100ac141400001002000e0101020000000000000051335dc02b875c272126cb52f985077eb2451e3aa90ee1daa95cf01a6df75ff42638af6982ca632f3f460c825f1ab307e42bbc7c2da61432504b4123b9c0b7432abe55d258c104e7e850b129058785189ca0e0269fea7c2c5ddc7521f914a2baf4fd0d98a9088fec2a1368a5ac3ef29639d26c692948a7936219a7b0d171205eba923640bc07685d195e5252593636ed447d8bb4cea2f8966e134e2a26"], 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 9m33.785766662s ago: executing program 2 (id=1114): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x8021}, 0x44850) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 9m18.638018513s ago: executing program 33 (id=1114): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x8021}, 0x44850) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) 7m48.829148176s ago: executing program 4 (id=1668): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x20000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9b0906, 0x8000, '\x00', @p_u32=&(0x7f0000000040)=0x80000000}}) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) 7m47.605565248s ago: executing program 4 (id=1678): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0xe4c}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x5}) syz_io_uring_setup(0x31c5, &(0x7f0000000340)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 7m46.480916488s ago: executing program 4 (id=1683): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x9, 0xb, [{0x80000000, 0x107}, {0xffffffe8, 0x5}, {0x10000001, 0xa}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0x103, 0x7}], 0x2, 0x2c, 0x2, 0x0, 0x3}}, 0xffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x35) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socket$pptp(0x18, 0x1, 0x2) 7m46.186365194s ago: executing program 4 (id=1687): r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000040)="f8ec2a587d77", 0x6, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xc3) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1}, 0x40000001) ioctl$TIOCSPTLCK(r2, 0x40045431, 0x0) keyctl$set_timeout(0xf, r0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 7m45.822246708s ago: executing program 4 (id=1693): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x228000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @dev}, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x95) 7m45.773815557s ago: executing program 4 (id=1694): r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = dup(r1) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)) 7m30.568837784s ago: executing program 34 (id=1694): r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r3 = dup(r1) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0106438, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000000c0)) 6m47.377786288s ago: executing program 5 (id=1943): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0a80, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000140)={0x80fd, 0x3}) r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x4, @pix_mp={0x0, 0x4000000, 0x55595659, 0x0, 0xc, [{0x1, 0x7}, {0x6}, {0x2, 0x6}, {0x101, 0x8}, {0xffffff80, 0x5}, {0x2, 0x7}, {0x6, 0xfff}, {0x9, 0x3ff}], 0xca, 0x1, 0x0, 0x3}}) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f00000004c0)) 6m46.81174871s ago: executing program 5 (id=1944): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001a0001000000000000000000e00000020000000000000000000000000000000000000000000000000000000080000003000000000000000000000000fcdf22f7ffe27985a9c5d21a2f5e9964032ca0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x104}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x80080000, 0x0, 0x7}, 0x10) getpeername$packet(r0, &(0x7f0000000140), &(0x7f0000000300)=0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x1, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x1, 0x8, 0x2004, 0x7, 0x9, 0xf, 0x2, 0x6}}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) 6m45.442479592s ago: executing program 5 (id=1948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000009411fffc010000000000000000000000000000ff0200000000000000000000000001014e224e23009490788dd6e9cc89ccdb7316b7b0aeadc294f71109a4a8edc7fa346dfd674e75afe29b51e423beeee1ce26cb2ae5f5d5e8f213c207ef46274d17cf4dd37f3fb20585ce01481303f7773575beebdf05bad10955c4d420a2122a5ed5b28e"], 0xce) 6m44.664285434s ago: executing program 5 (id=1951): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b0001000000000904"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0xf5, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x9d, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7f, 0x1f, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x9, 0x3}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x8, 0x7, 0x10, 0x40, 0x9}, 0x58, &(0x7f00000000c0)={0x5, 0xf, 0x58, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "580c4da9595802fe6c6e8e41ee693310"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8bcf8a9fcbeb749dd2ba6ccea0d2b507"}, @generic={0xb, 0x10, 0xb, "70b9ffec654d13cc"}, @ssp_cap={0x14, 0x10, 0xa, 0x7d, 0x2, 0x1ce3a50, 0x11f0f, 0x4, [0xff0037, 0xc0]}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x6, 0xff00, 0x6}]}, 0x3, [{0xe7, &(0x7f0000000140)=@string={0xe7, 0x3, "8e76a44290358d8b8d71f2280d80cb8e9d7980ad714da2790331b103dcb9809bdbaaae5c0e27f6a43ba360488511646daaad3ab23957cfd9bf9bc1cece9e199de40d69507cfe509af9fb2525d4b5e2e81e0bb1192796ecbbffb3565309027a8c85da424ed906515ec801adbf33ce2a1a0846ef1400c39bb252370eebd90c46e61e1652c863c1b7510701ca7f9506777074461c783821a1bbc9a9e6318f32e289a8ebb811d33efbcc7a79b7b66a966fbe566e6ea76fe2f469904ffe6c4e50488d4018e140ad9cbb6849256b04fc32640002e015e9bd11d3ecc74b26adc0c3b4a0b7ef8ef757"}}, {0xf3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44e}}]}) 6m43.251618192s ago: executing program 5 (id=1954): fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r1 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000040)={0x0, 0x0, "b347b214a3e95dc07bd195d01aea7e87"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000700)="ef3977c0585e6989e498deca6dcbb1d05921c2f84a60a92927972b5576ede8646cfe1cc61e0ebc934e9bb2ab3acf5685269f0cbffc535d4af2c4", 0x3a}, {&(0x7f0000002880)="939a80baf886fe19d0eaef59a774373ca1deafd713507864020017abe72c65139c7e16f5b112d04ed2bcd3f59a294d30c5ddedd0b7d224080235d8c6bfcb542a16bf1e99c94fd5c1b82f900bb4ecf894cb4d394b699629f952af6b1ef8c732f867dcb1163eae21fe2c5ecff7f46eb3c0ca57ed94ef16922ef44c25f1b2345f44c18be584b04770dac660eceae3cae2846918d1861e5afe15f2988c86c237633c30fa8188f340b4b32e6233cf407f201267", 0xb1}], 0x2, 0x0, 0x0, 0x60044005}], 0x1, 0x4) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/97, 0x61}], 0x2}, 0x40010043) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x29, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000bc0), 0x8) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000140)=0x200000000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) preadv2(r7, &(0x7f0000003500)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1, 0x0, 0x7b, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) landlock_restrict_self(r6, 0xa) 6m42.282470158s ago: executing program 5 (id=1956): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000001080)=[{{&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000200)="e8b9e0f2d17e162dc5ff99d848e308e1fad9a102a8c62642bb76f5e113a1f64e8a7d61427ba849120de25ab586f561aad9e8595019bfcb59b54ae42c0be175f36f7de3f5fdcaab06f2a89b92f083c9", 0x4f}, {&(0x7f0000000440)="9b2ce73c9a7a97d2202d4b238b079159e5195dde645859499a9b50b7c16cb68f11c8d4fbace0127ef56dac17f108c6b64397f84fd4c129b1493458a8aee0f28c70818ea5b8d6ad629233ea49202c8cd64c0810bf5cb61537ccc635125ac658a1ac82a27a97a67d4288b74ee4a04ff60e118795e8f93f87eb1ff8c0987bf02f68f229c296bf61058dcecd437a1fa9e0925b29c0bb0e32b3ed445df42f4aaa9ae9522115543a56d63d0e7a34330ed02e1dddf1e8a3d6821ca0fc57ea75ee5822783bc60bc008550d576b01c0de306f406aec93fcd52593c3c3a01037", 0xdb}, {&(0x7f0000000600)="74638d194db3651c0e1882af9b40e694b580fcfc34eb4d1b647e472e11c5b90eabd400416a599db796f13bd25546ccab6ce01da694af7aaadc00b833e2352681bf74369e2dd3a4cefb843567b33baec4683c5d1a13dccddf899f0468bd91f1ac8af8fc1305000000000000009dcc7358c93c23def834e95e29dee41d308cd315f6511ed45f06253b8f70c08a0c1fd3cf4b6a4582b600"/162, 0xa2}, {&(0x7f00000006c0)="58e81096d44fccf93e6d19e9bc2235c04ddf9cfbd975af2f70a558da5b5ad37e26c83827c1fa0a4dd20804dd794eb58537a62e57d19944242f1706c5c632a9e5268dd9de05a95e91fbc322c082e13bff1d653c2180dad79290ed9aeca5a0e5d45acca2bf2e2391bdc695ccb996bcca5de4260425b54aff514893cd2486382d9976", 0x81}], 0x4, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc70}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x60}}, {{&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000880)="8e98bb1ce26a4e1ff87eec64995439804bdf468f3a5babdbfd09d9978a8f91ac034f8175761cd2d7af91af0a1f2bea2794613582b4e6757615a630f35baa781ef9a275f250dc771a1ee8a8caf84a5800aca6039bbd819d2150d2e7e3551a11c1df08a775a81e60a6593db0da78238dfe8e0c5ff8509c312f27646a93dbdcdd6ff3872f1da89861a58afbf0301dde2471df89e728c47f0d14d64dc8", 0x9b}, {&(0x7f0000000940)="14c5fefd69f60cebf28ab3aca3d1bf7f6bcaef4d1d51b13acd2d47cf60a1e28c7f8f048b17c1077030b60bb7d21f983afc4234307f326019c1eb027720d06ff896425ba9156628d337a50c450516a087d7f583552da9cd86cd39c67569d789719b7052d86e", 0x65}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x63, [@broadcast]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0x3, [0x5, 0xa, 0x9, 0xe, 0x1]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x6, [{@rand_addr=0x64010100, 0x2}]}, @cipso={0x86, 0xd, 0xfffffffffffffffc, [{0x1, 0x4, "042f"}, {0x7, 0x3, 'L'}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x2b, 0x6c, [@broadcast, @private=0xa010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @multicast1]}, @cipso={0x86, 0x27, 0x0, [{0x6, 0xd, "037d0ac94a317b1ce3a1db"}, {0x1, 0x12, "002440c4ebc5d8a20bc38dd6cc75f04c"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x9, [{@multicast1, 0xc15}, {@multicast2, 0x6}, {@loopback, 0x8}, {@empty, 0x8000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x130}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="7e1540657319bc264491134298c827432b0e2c2626989e98c6af98295793d9b44d6e9fd4de63e5a7f655bc9d2c2fe8a8", 0x30}], 0x1, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xcc, 0x3, 0xe, [{@empty, 0x94}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x4}]}, @end, @cipso={0x86, 0x17, 0x2, [{0x6, 0x2}, {0x5, 0xf, "190c571321c1db4912d012114c"}]}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0xb, [0x7f]}, @noop, @lsrr={0x83, 0x7, 0x65, [@local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x13, 0xe7, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x17, 0xea, [@local, @multicast1, @broadcast, @loopback, @multicast2]}, @rr={0x7, 0x27, 0x5c, [@multicast1, @loopback, @loopback, @local, @private=0xa010101, @loopback, @multicast1, @loopback, @remote]}]}}}], 0x108}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="07a34d7ce750e7a90d3fb8d27535fddf4acfc61100b193c006c7bc076adbcfd2e33083c3ba671fb26bf8a8c61de70e07e23116c1bc58985308446b8fa9b2e36385a2ef758c36c7d2dfa567cf078145abcdda906f3e02cb7f29e0a7eedd4fdb7cdff3a1de22f54d1a1f0f0b0be1491a5a17ed1f0311acdd3bfe819f3e9a7b24b73c63aef81dad0be830458a4936be70c3a2486edad12879b50844f2e7c333a800849b0002257f8817b2508cabf320ec41e753a16f0c6484246d6da0d068b9a291480543768e7a7f2d27835f10339391dc4bee6c1d592d3d02bdc6f74119b96f610326d9ee7d", 0xe5}], 0x1, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{&(0x7f0000000f40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f80)="3de0209854c536390614985941bfcde1b78db0ac7adb1bc6a20bcc35fed77e7a3de63ea758b2a50d17d1e1e9af4dc3c991574042e0d3e0adf9479054bdafe160246388176848a9dea966d927f598e4883db37af2e10ccc8e68a5190b5a6604e80317b618eec9b48652", 0x69}], 0x1, &(0x7f0000001040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x4000000) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f00000002c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0, 0x2000) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd0, 0x0, 0x4) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) 6m41.50235172s ago: executing program 3 (id=1958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0a0000f80180c2000002527bcee565f486dd6d000000009411fffc010000000000000000000000000000ff0200000000000000000000000003014e224e23009490788dd6e9cc89ccdb7316b7b0aeadc294f71109a4a8edc7fa346dfd674e75afe29b51e423beeee1ce26cb2ae5f5d5e8f213c207ef46274d17cf4dd37f3fb20585ce01481303f7773575beebdf05bad10955c4d420a2122a5ed5b28e"], 0xce) 6m39.405789072s ago: executing program 3 (id=1961): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) 6m39.285932783s ago: executing program 3 (id=1962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x40000021, 0x0, 0x6}]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x13000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x2001) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000780)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01]) statx(r3, &(0x7f00000007c0)='./file0\x00', 0x0, 0x800, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x2}, [{0x2, 0x6, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r7}, {0x2, 0x4, r8}, {0x2, 0x1, 0xee00}, {0x2, 0x3, r9}, {0x2, 0x4}, {0x2, 0x3, r10}], {}, [{0x8, 0x2, r11}, {0x8, 0x4, r12}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r13) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000006140)={&(0x7f00000004c0)={0x50, r15, 0x11, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x7f, 0x31}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x10) ioctl$EVIOCSKEYCODE(r4, 0x40084504, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m38.370248265s ago: executing program 3 (id=1963): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6m38.194713649s ago: executing program 3 (id=1964): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x4, 0x0, 0x1}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)=0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014006790780a010100ffffffff"], 0x22) 6m33.706014564s ago: executing program 3 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x30000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df8ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x560c, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) r7 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x30000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df8ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSIGACCEPT(r4, 0x560c, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) (async) dup(r3) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) (async) 6m33.612510193s ago: executing program 35 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x30000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df8ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x560c, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) r7 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0xe, 0xff}, {0x10000, 0x30000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0x1, 0x4, 0x2}, {0x2, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x0, 0x3, 0xc, 0x9, 0x8, 0xf3, 0xfd}, {0x4000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0x0, 0x4, 0x64, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x3, 0x2, 0x2, 0x6b, 0x1, 0xfd, 0x0, 0xd, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df8ffdf, 0x0, 0x2, 0x20, 0x3, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) (async) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSIGACCEPT(r4, 0x560c, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)="c2", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) (async) socket$netlink(0x10, 0x3, 0x14) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x10000) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xfffffffffffffffc, 0x5, 0x1, 0x2}) (async) dup(r3) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x6, 0x6}, 0x90) (async) 6m26.922446252s ago: executing program 36 (id=1956): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000001080)=[{{&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000200)="e8b9e0f2d17e162dc5ff99d848e308e1fad9a102a8c62642bb76f5e113a1f64e8a7d61427ba849120de25ab586f561aad9e8595019bfcb59b54ae42c0be175f36f7de3f5fdcaab06f2a89b92f083c9", 0x4f}, {&(0x7f0000000440)="9b2ce73c9a7a97d2202d4b238b079159e5195dde645859499a9b50b7c16cb68f11c8d4fbace0127ef56dac17f108c6b64397f84fd4c129b1493458a8aee0f28c70818ea5b8d6ad629233ea49202c8cd64c0810bf5cb61537ccc635125ac658a1ac82a27a97a67d4288b74ee4a04ff60e118795e8f93f87eb1ff8c0987bf02f68f229c296bf61058dcecd437a1fa9e0925b29c0bb0e32b3ed445df42f4aaa9ae9522115543a56d63d0e7a34330ed02e1dddf1e8a3d6821ca0fc57ea75ee5822783bc60bc008550d576b01c0de306f406aec93fcd52593c3c3a01037", 0xdb}, {&(0x7f0000000600)="74638d194db3651c0e1882af9b40e694b580fcfc34eb4d1b647e472e11c5b90eabd400416a599db796f13bd25546ccab6ce01da694af7aaadc00b833e2352681bf74369e2dd3a4cefb843567b33baec4683c5d1a13dccddf899f0468bd91f1ac8af8fc1305000000000000009dcc7358c93c23def834e95e29dee41d308cd315f6511ed45f06253b8f70c08a0c1fd3cf4b6a4582b600"/162, 0xa2}, {&(0x7f00000006c0)="58e81096d44fccf93e6d19e9bc2235c04ddf9cfbd975af2f70a558da5b5ad37e26c83827c1fa0a4dd20804dd794eb58537a62e57d19944242f1706c5c632a9e5268dd9de05a95e91fbc322c082e13bff1d653c2180dad79290ed9aeca5a0e5d45acca2bf2e2391bdc695ccb996bcca5de4260425b54aff514893cd2486382d9976", 0x81}], 0x4, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc70}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x60}}, {{&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000880)="8e98bb1ce26a4e1ff87eec64995439804bdf468f3a5babdbfd09d9978a8f91ac034f8175761cd2d7af91af0a1f2bea2794613582b4e6757615a630f35baa781ef9a275f250dc771a1ee8a8caf84a5800aca6039bbd819d2150d2e7e3551a11c1df08a775a81e60a6593db0da78238dfe8e0c5ff8509c312f27646a93dbdcdd6ff3872f1da89861a58afbf0301dde2471df89e728c47f0d14d64dc8", 0x9b}, {&(0x7f0000000940)="14c5fefd69f60cebf28ab3aca3d1bf7f6bcaef4d1d51b13acd2d47cf60a1e28c7f8f048b17c1077030b60bb7d21f983afc4234307f326019c1eb027720d06ff896425ba9156628d337a50c450516a087d7f583552da9cd86cd39c67569d789719b7052d86e", 0x65}], 0x2, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x63, [@broadcast]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0x3, [0x5, 0xa, 0x9, 0xe, 0x1]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x6, [{@rand_addr=0x64010100, 0x2}]}, @cipso={0x86, 0xd, 0xfffffffffffffffc, [{0x1, 0x4, "042f"}, {0x7, 0x3, 'L'}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x2b, 0x6c, [@broadcast, @private=0xa010100, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @multicast1]}, @cipso={0x86, 0x27, 0x0, [{0x6, 0xd, "037d0ac94a317b1ce3a1db"}, {0x1, 0x12, "002440c4ebc5d8a20bc38dd6cc75f04c"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x9, [{@multicast1, 0xc15}, {@multicast2, 0x6}, {@loopback, 0x8}, {@empty, 0x8000}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff8}}], 0x130}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="7e1540657319bc264491134298c827432b0e2c2626989e98c6af98295793d9b44d6e9fd4de63e5a7f655bc9d2c2fe8a8", 0x30}], 0x1, &(0x7f0000000c40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xcc, 0x3, 0xe, [{@empty, 0x94}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x4}]}, @end, @cipso={0x86, 0x17, 0x2, [{0x6, 0x2}, {0x5, 0xf, "190c571321c1db4912d012114c"}]}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0xb, [0x7f]}, @noop, @lsrr={0x83, 0x7, 0x65, [@local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfb}}, @ip_retopts={{0x64, 0x0, 0x7, {[@rr={0x7, 0x13, 0xe7, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x17, 0xea, [@local, @multicast1, @broadcast, @loopback, @multicast2]}, @rr={0x7, 0x27, 0x5c, [@multicast1, @loopback, @loopback, @local, @private=0xa010101, @loopback, @multicast1, @loopback, @remote]}]}}}], 0x108}}, {{&(0x7f0000000d80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="07a34d7ce750e7a90d3fb8d27535fddf4acfc61100b193c006c7bc076adbcfd2e33083c3ba671fb26bf8a8c61de70e07e23116c1bc58985308446b8fa9b2e36385a2ef758c36c7d2dfa567cf078145abcdda906f3e02cb7f29e0a7eedd4fdb7cdff3a1de22f54d1a1f0f0b0be1491a5a17ed1f0311acdd3bfe819f3e9a7b24b73c63aef81dad0be830458a4936be70c3a2486edad12879b50844f2e7c333a800849b0002257f8817b2508cabf320ec41e753a16f0c6484246d6da0d068b9a291480543768e7a7f2d27835f10339391dc4bee6c1d592d3d02bdc6f74119b96f610326d9ee7d", 0xe5}], 0x1, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x30}}, {{&(0x7f0000000f40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f80)="3de0209854c536390614985941bfcde1b78db0ac7adb1bc6a20bcc35fed77e7a3de63ea758b2a50d17d1e1e9af4dc3c991574042e0d3e0adf9479054bdafe160246388176848a9dea966d927f598e4883db37af2e10ccc8e68a5190b5a6604e80317b618eec9b48652", 0x69}], 0x1, &(0x7f0000001040)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x4000000) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f00000002c0)) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r10, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/file0\x00', 0x0, 0x2000) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd0, 0x0, 0x4) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r12, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) 5m51.776821808s ago: executing program 8 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@any, 0x2}, @local, 0x0, 0x40, 0x5e, 0x200000000000, 0x100000000000004, 0x20}) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@any, 0x2}, @local, 0x0, 0x40, 0x5e, 0x200000000000, 0x100000000000004, 0x20}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) 5m51.573681244s ago: executing program 8 (id=2012): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) io_setup(0x20000b0, &(0x7f0000000240)=0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) r3 = syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x3000005, 0x12, r3, 0x82000000) syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x101842) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xe, r1, &(0x7f0000000040)="03f7beb0e2b0cb11272562cf098c1841e672721a14d59ca93141209d2b33b873778fbf090c4f6dd1e9f018a643c704ba44bccca288143d1c5fa6d8725db8613b5864dc11a19a96740939e43eef32c9d662abd76c886571f5515c1a7d7350904753b4edd5dcc4b24739652e0d0418a1534fcbff23fa8b2bff2ae1af7ab029d55a497be5c22c64969dcfc0f290a13f5b26be13a2b519fb0dcfd3d1aa6d43c5e2f53c4988c3ac7ad496e400b17b7c4a8364602ba361678ddd875d65563f78714807fc38d3b8597395e3e9feeaf744763fda1d4e9c7356d4048d38a9003a8699", 0xde, 0x0, 0x0, 0x1, r1}, &(0x7f00000001c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000001600)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000001640)={0x48, 0xa, 0x0, 0x0, r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001500)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000ff2000/0xc000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000000500)="18d54fcdbbbadbff3e8f3a036bfaed08297706ac38b2bcd6b12ce6c37a34b3928a4c58d8108409befc389eda2bc7b65328c927864559b6907498ae9a16db31934e4c2b99b10228be0fdf5f247ea699526d0d92008718e0e99152ae7abf1cb21bd455d2a54c034f9b774a5e1b39e04a4d4d929eead6ce38a73409b80e5a158562acef9ebfd49bf9be392fdb0c2d320f353b760d4e2883d58962fea813070e653b33da0ca9bb8ef08693ec0e92e15a2d7b8971036e725936a8de2f3284b4b6bb1d3c7af4024d376948041f9f12f94a603bb890fbfe979ab5cf782126f80f25163e43a002958521dd224ec5b4dd62c80f4ed4dbdf7eced0626ecf50828f19b5c47bc8da368c81df47fc73d9ad455fe07c69f11d909389885d64147cac9aaa436d4ac18bb35f1014c45e7048a1effc5f72a3c55322ba83e8f192246d2df037454529a3b9107a3a322e935526e0e7ff45e835acef9f7b65b02523493bde89052e20497b4367db7c6cdb0c4d28ef7e3ab1ac535b2f7c90b8eeb96897851931ede44d8e133087da345e92e42209a09c0e0b9001ad3054feea78fd614c16b73971847287a6837d0a87fc3c2efdf7e29211f205aab173b52af75801475b987a473be294b31585d3f792f4635521d191343722b563b5ef50a377940141e84df80625e5257528d849a8b097f911ca8470f196e0412e0c0c78789ffaccd29a93c371532dfa4c5d259bff861b330b03b46f48be90af3bf017598c7eee8f1dd279eb13aaecd2c5fad0d9ac2302b5e6b6629d5b0bd4fe406e5319168b50b2bf012684062f41a735415caf8003dde2a66a8245c21886da67ecb8ab30b829579a6fb195a7bd256f010bfbbc5b3640b064b2843e4984f3364ac181efa08e39438c3933eb6ab2ee44369fb4078d15c1adb5a0355f45f9a43876583ab6cc34ebee067cd0a3b6783f9fde4ed8c9050013360d40ab3a36df0ad6e0943984052267e5ce81ac71a1aec40ed9ff8318012d47f37991b9b3b4278630e246b46faac6ca9c985ed9dfeb49bc85625353ae253e71533a70c4592639341b61ec3626712c85205b10739778fffb1b750819b534078f8060bfa925a5cb80a983be61930e58bdc3113b353823fe7aaeebb6e519a6c3e737933d718be45d0a288a55f6cf7047d8d12d07dd5bad81211342e170e89e3768720084b603e6cf3e907b1020da7d51664cb1f7ed115e78dd01a34223442c0fff25ca731cf7f5873a8e611e9b8e45e393a5c4e05e1fe88df13df8d674e000b55397b4d5da23e7c925920a8ac16f8b760653d223ce26968a3ecedc2f68b5f0ff627e442d5db8a3fc61754bceed542fb6263680481f354064ff545123fc140171fe7432f6712aac535b176a097c13d0f0e7b08afeaaeba19875144312ce8fa40858afbea1fe76eef7dabe3292a852999d3bd29f5128fdcaaaabbbc2e46940ad6d68b41e53f305a96b05a5cde8bd43ad8c08d7dcf839f060876034bf0891592602bc12e5e3cc6a6f46b3de63db0688913bc5281fe13678b1ca838051639f9e800740ea9cb277cef28ec24f204e59e98798033b0d9348275614c98aeda1ac1f619884714f666635d0ee2718f2ba9bafc31b9f1df7435e2fa1e15aff8832f848b14898795c277eba2abd8b32ac4bef8a6c50671299da59e15229705ad3663942726959acbe5568913e1d65a6bb94db986d1a56fdeef5c30475c96c6280468a488a6f678be9048769ba339b4a15d3139da33ab58bae66e1dbdc9b9892b61f110a29929d9d51c05eefe545d0eb6d7ec89bc38ff75f2b8e45b5ee2e97b80c0b5cae53acd349134b8c5edcd5808b50fb696e6315533635cac595b46d79dfa55000be71f580816895aced18e7b8437b73783c1ff09e5470bfc3b8b42bcb1631b6892cc7028e0099e33b5cb2e5e5e46d878910ca06289cfa1049f0ceeda9375839048ef1171964fbb6b9edf3d7bd4c484f35ba781e5b96ac849e8a344a9d12cfd8d34173ab52325a69cf438dac0ae5557e02698f8a1ac68139832b3b4cd0cd131d338dc2d5c367974fdd3fb090b9ec6af441b693d8b50aa3ac66c7091b1f08e8ded908a86d4021700aecb88cb057cd811cd5d02c1e152c6b48236ff6ac71932089b41352f7d269608989c8a5022da21c788e9d802fe670c01fe6f57a2414ac1bd533b99a260d3b8c8947e9b14fa3e286f95f8b6479e353913281ccc3dc29d2af4d106be06189852ca6f471e91085e4e92264d1af58a50a8013814d868dfcfb5549031c44789f5df56f35b1b08eeafea9da0823c903d52e51c2e106065ea1a8c9d6c8377e32ba46efee16f35bd493761f157cb21af9eef55c35a71a75540c7c55daa85bbd3430407a79ef0dd0e82900eed660647c39d3721491e2810d102d5b48f41d8271d074b678f90875b9fe9cf11c6d07bb26c511d0fbdf7634537a1aa78d1613a34f184a04710ae237b5303311c2838e9d23478b3865cf3a8e9ae7b0e0007a648718c5977154e9024e2d82de1dde10142164b9096b43b96bdbf1165c010956ba0106d9dca5c529b02412e0cbcf41f76ea1d4f023fb304f8ebcb21eb224291142eafbcc05cd58189c3bff5e273fa6c2eab4a596ed38eb0e82d10d81a23b03fa2c8d634cf6f6cadf036793577969791ee4c7ab3bd7cbec3b2523df4747f60905885bd09c4ce879dd20bddc87e9f2a333452c4dd269f011b483ca61d5b339c720d4eea79a7b578b0823bf012d9787f0ce16c84c5c88a1ff3d31a3399cfe5bb6770228670b396d5650ed9566f3f59ae3d205e789996c6fc7c2e9d6636335f42a21fbf8d33f2a0c87b4cc690b11c763f6c2d08cc1abaff6890f951682524303ea96c50248767ae5a23413c73aa4cc055f02e3f311328c19aad7153e9bfe50f13b129dd6f62721a1ba21f91c6bab02c6f64b0d4edabce480522bf0b93f31e9b3ae1bff160f151194061d081b6d0aeb3440fee16f0810f870157c8893e770f147c85ad63cab78ff4dc175d727d33a24bfb39297adbd4abdb716b1d47e8ca704953eadd87feeb97764543324d7738329cef06990edd5b3f0dd1bfaaae39a0659993fb39e268ed757969606266cdae6ba9d5b2bf183474ca5fc6b0d56a94dfd29ecd1f3ea5a40ebb97e1135efe132239ba735bf9bcb2b3c398b2f3757f4f3089bbe71ac09841a43e05c5dddb645aaf7da550aa7d316f2c13586422ece41bd188d1c3d9e1e8ec0f2eb2970791c65ffab5331d94bfb423b1ce98f7785b521d8680014fa7d8555c486e90512b24dcf3c37ef6c5e42cec39c08f71d8031564d9686528fdd0aee5c6625c0558a3463a6ea7343ac373db8235e9a4d766440aca2021debecaea486fa34a0814c5a18cbb515c58ed057dc7b3af6b5e443062c50c93d303c2d156e949e8699f082e0c6d5e65f5776468dad4fac6f11b5a8b4e2f0d6f525a852df33548cb9da8148f6b836a942c145005b2a6743bc7b0f43a418d733ee7d22be9788b955d03d4370db6f74e901c766a30bb6bb969618b7a5b93758cf29791aa4adbd1b6b687724b36850f5337cddfa3ff1b6d956568333f111e0a8171a5e31a175de957ab16e19c08f65eed06f54a07eeb54666aea4894eb67a11d5502fd060aa9db73624d74893fdf641b1c14cd02e4e600640eef30f5b0c7fc89b033722b198d5a3ba103c6157ed14c9b625e5de94852ae96b007161c4a641f4be5f92d762d42fd3f0099d880f0ab7708e747ce224bef9298972dc0ba2b24705766b465b7cae3f5b3726118569f650048bb7440f6327923bc6f5a6b1942aed1801518480b25618cc45fc181a6bbc5bcfd5de1e15ae851c1a25d9cb24b96c57e4b1d1a34090e5a316713bcbcc8d0b87b40ab6e123cd6502e35769f8df45921afed0191055da550e335a9500d7c0cd9de0ecc5352470b0e3eabf11f595540ae13348f39d6773af38fdd672dae1acaf7374c83fed4fb8dcd6662dcc7566b84cde50f3bcd98417172d6afa756a3c7a52157834f799ea53bc944a79e9e87ffb97736590e25b08c7391f0847f52cf8d528e7d4133a80dc835c061702e63384c57ada08e587aec7a27e6703c56a3f3408cc381854a904c5f4f783d3f7b1d8367f7766198e04f47e31dc874e75d1e17c6ccde713f949da3d2160db1b94f7a5835d6d0bb4dde42c6d0d43c677f23941ac0a47611776b885cf4426219af22f90ff70afc725e007accce098dd7bcd6fd1efea6af903460e3a90461ead66c5ec8a0ffcffc09457edbab405244e5cdbc0f8f0fd520f7964d58084cea53a090a4bb05b530efc9b504f1fba5273e62ca64cca0a24bf8e4bd76517ed6d2655bd39ae33df2bee3cf6b3a002092931586bb331a0ac746f442cf1003343b4d272d6c45bf0d4981dc7a27acc9944252f9e4b00f16c33b68096c6ad5ec20ef7e2a6a47db0286c19e3236955b92d9af3d1456db219c7cf9dcbc9b70fead1a6a657b4dda269f37dfa82de0d788489656082bec9f8defa6c2465c917eadae512cc91d2d82d68d13c88dc867227206c9bd60704853bc1590d706236b1dac3c2c0e2282d2188739b06425c4c1f67199ff89373fa11a49fa7affa3820459a5ce9d17bd9c266fe997b84a231606f6e8c69a74e8569d48cd761e3f64d045c5b9bed2deb9750155272729d1bea7a10caf95632dad7617ff512661c17beced2696e64ce3f7e8e1c06716173767ca4302d8aa5a8c3004cd6e8f56ac0dab3a237bda4d3df6e3c24bfc5bc00e63e8f6e244601660da8c305cd6bc533c1a225feb467aff119f5190a4d6d0686b03ea7c3dfca3ab635be20d07d2758a1c50b9d67fb993308e667da47732a2780701c7c1cbd73e96ef8cdd3c2af431ca66dd00ffb12f5026edd2204dd28a3e14ef60397db5a0a35d3bc5bdbaa2acd4a61b66560b0a9bcb80cefe7ec1e077b6f562e785a7b2c49799b753f593be29bb7a7a3c28a6490c86bef84f02757f1d37cd627176041ae5a8edb2bae03183838d005d842895559a948b99b1819a0fedc326abf50f201e2407808ea61a21f424e942e7ce48cf1f0c940b8aa68fc72639f9611e6cbeed4beda062b45571cea5b8be8515bde6f7fea4e681afbb7706702b372f567c0ab47fa257858d8f3bc98f070cebd0e484df8d2f9c69624a2d2dc00192c2096d09eb14f03876a538deb45b09a2700ab7fccf39b44d228136c03ee1a2b6b27cdb348942babab3c2217b035faa4cac3f4ef50a91dcdb73d23cb30aa870b43e13e8ba7a265df9e56940cb05fee2a101505869a6e78a8cc44db9ef28017dae5a68b9998ca1652ea4300c13d49d011333ee3ea42118b072b2041dce436ee4c8f35a226a087dd2541d14017aee140c0cde8fa8cd0783c894f9197cd80db45a11a1c9eb4d90b8c8a15d49f921caedcc0253feb2197b3dca60338fb129ed397c5e9aa70d920ac690a59395c2e631e270347361c1eec346f1bc3d7a71f1973e8e5076cf39d4ecede66a81f69812154f3ea2566fbb4c4f7939602a6346043c1eb62e36bd8e8c25eb3cc5009610c1442c1228f4848459f711aad6845a9c21c074c21fbaa872813fd1115fa7aeb23b8dac70f862bf271658041c07f7aaa6e4c600bb6b5b102845d74ef1f33b4d5e6d10e165c3f1593647a5c0a15d0a85bbd16fdbce4a0c043ad5a7a28b36f01f30c7f7fb7607cbab219018463496bc0aadb08a06407a1b34b5ff70f95746623ee159f9389fae2fd05a211b38cef842ef354f4d795321fc3ec92683a72725cfbed7367ab989012c071ff7572b8349705cc7bb0141a3c1643b835acb40d56417868444e7", 0x1000, r4}, 0x68) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r8, &(0x7f0000000200)=""/209, 0xd1) tkill(r7, 0x7) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000440)=@multiplanar_overlay={0x8000, 0x0, 0x4, 0x10, 0x75, {0x77359400}, {0x1, 0x1, 0x3, 0x6, 0x9, 0xf4, "a29586e5"}, 0x2, 0x3, {&(0x7f0000000340)=[{0x3000, 0x5, {0x8}, 0x3}, {0xfffffffc, 0x6, {0xfffffffb}, 0x6}]}, 0xe, 0x0, r1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000280)=0xa2) r10 = socket(0x3, 0xa, 0x1) migrate_pages(r7, 0x0, &(0x7f0000000300)=0xfffffffffffeffff, &(0x7f0000001580)=0x1) shutdown(r10, 0x7ffffffe) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = userfaultfd(0x80801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f00000015c0)={{&(0x7f0000fed000/0x13000)=nil, 0x13000}}) 5m49.575830481s ago: executing program 8 (id=2020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x6, 0x0, 0x6, 0xffffffffffffffff, 0x9}) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) fcntl$setpipe(r2, 0x407, 0x2000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224008100001010090459e102ff063d"], 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f00000000c0)={0x5, {0x4, 0x10001, 0x2, 0x2}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m49.049296854s ago: executing program 37 (id=2020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x6, 0x0, 0x6, 0xffffffffffffffff, 0x9}) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) fcntl$setpipe(r2, 0x407, 0x2000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e685401020301090224008100001010090459e102ff063d"], 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f00000000c0)={0x5, {0x4, 0x10001, 0x2, 0x2}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_GET_CAPABILITIES(r9, 0x8004551a, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.238192817s ago: executing program 9 (id=3663): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, 0x0, 0x0) preadv2(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/153, 0x99}, {0x0}], 0x2, 0x80, 0xdd, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r5, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x4, 0x1, 0x2, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="b746c942ac79460bdfdf46030e36e56ef48ea545d8e7921043d37fe0a3bdea1da25b39857a6a590baffb043f0c67e35cd5020de9d240ad5f950177e74a05887c48f3767aeb53", 0x46}, {&(0x7f0000000300)="3d2bab103730e59102ed2a697d453c3926f907cb1cf4323e917c1396bc8d468e1b0bbc23b676d5ff4d1967840eb9434292e8398af6a0e84772429f86dd3d829bfba9cf51bfa06d01d6ba942bc655d4dcca03cda2593a10015672050bcef26f4ffae5c9a42594a19f6a57ed537f5ccc7e169c327bb89dbeb04c6ab7342e7726ba95fec8cd48e625bf7b8a9c856fcd93384f28d2c3d07250831bdc8b0dbc94846ec1e3724b3467151866e7fa736e6a71ea4cf6e9b15d0a35b61954803fa6f8f26a5f0783af10a1136abc14824e6faa88687c3c4b84ec2637eeff53896aac1ad62a75a086e800ef9b77e9", 0xe9}], 0x2, &(0x7f0000000480)=[{0x30, 0x118, 0x9, "832f543f75fe338fcf1c42aada23ba5d419a587195d71cf934bd8e76"}, {0x78, 0x115, 0x1, "05a1daac015cab9c301fd7b2c718a049351b2f1ae6f363929ddc616ee275667f88bcdd0694af1915f4bb80b0f06232eb47c6b0d792c90b73897d91abd90f965907d8105f3d66ac53331e7fcc88fe3e1923964962ab1c5a7096d36789a71559e13a655c10"}], 0xa8}, 0x4000) 14.314483838s ago: executing program 9 (id=3666): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000002440)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r5], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x480, 0xd9}, 0x3b) r8 = openat(r7, &(0x7f0000000a80)='./file0\x00', 0x10000, 0x10) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYBLOB="01000100"]) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'macsec0\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="000101000000af"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="401400718fb8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) 9.191627813s ago: executing program 9 (id=3677): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000000)=0x56) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 7.089237629s ago: executing program 9 (id=3684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "2b875c4dba89eaaf", "b144cd6f1e6801ee02d37138c6c49d600da928554995cc24db65a0730183ff63", "736700dc", "fa81907166736e06"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) (async) landlock_restrict_self(r3, 0xe) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000baa000/0x1000)=nil, 0x1000, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x1cf98000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x1cf98000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010027bd7000000000000c0000001800038004000400080002000000000005000500cb000000180001801400020076657468305f746f5f626f6e64000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) (async) r7 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x4) pipe2(&(0x7f0000000040), 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r8, 0x0, r7, 0x0, 0x4, 0x8) syz_usb_connect$uac2(0x0, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100312460008732b0a004000f401030109029f000301030040080b0002010720060904000000010120000924010e00013f000308240a05030804000f24060605050003000200040000000c240302ff010306"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 6.366080212s ago: executing program 0 (id=3693): r0 = getpid() (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, 0x0, 0x0) (async) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u8=&(0x7f0000000200)=0xf}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 6.092533435s ago: executing program 6 (id=3696): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) (async) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100)) 6.026963354s ago: executing program 0 (id=3697): r0 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x6, 0x303480) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000c00)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) (async) r1 = socket(0xa, 0x5, 0x0) sendto$inet(r1, &(0x7f0000000480), 0x0, 0x2000c051, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = syz_open_dev$sndctrl(0x0, 0x5b, 0x2c00) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) (async) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000000000)={'bond0\x00', @ifru_ivalue=0x20f2}) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '[.'}], 0xa, "bd68be5f546b2133ac1429bd76d552bea0a6694a21c125c6b385ba6b2195cbd7142a00c58b1715408dbe6e03a91fdee220268bdc61ef0647eedb85c2934cdf8b57681cbfa15deaa9e27445cc25093e271ba97a96cbeb6cf6a0941a99d049f354ad40249526035e77e57f3f660ad8836d9c3f7cb9a4c721727fcf9490dfa6498df4a3931e458b68d352246e861b55c948b86cfdfdb8944d197ecb6251dbdd01c6f9b46e609dae1a311172ae993426051b5fc3bcaa9a93c2be4fdb81a5dbcee4a32ae9772cf6"}, 0xd6) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x0, 0x2, {0x8}}) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x20, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="31040000000000f032001600000018000180140002006e657464657673696d3000000000000005000200010000000500020003000000050003"], 0x44}}, 0x0) (async) sched_setscheduler(r5, 0x2, &(0x7f00000001c0)=0x8001) (async) r8 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) fchdir(r9) 5.822376739s ago: executing program 0 (id=3698): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 5.815751768s ago: executing program 9 (id=3699): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='smb3\x00', 0x0, &(0x7f0000000400)) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f00403f0a0000000d0085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x4, 0x8, 0x2, 0x2cd0}, 0x10) 5.474860033s ago: executing program 9 (id=3701): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x406, r6) r8 = epoll_create1(0x80000) r9 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000080)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x20000001}) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}, {&(0x7f0000000380)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83da7023584a4950f14", 0x22}], 0x4) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r11, @ANYBLOB="cd3e2cbd7000ffdbdf250100000008000200050000007e01010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332db5f3efe3a436df1a1941526a051acb7e1daa67516c7f094b740c631f17"], 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) add_key$fscrypt_provisioning(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 3.687120933s ago: executing program 0 (id=3703): unshare(0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) 3.454554338s ago: executing program 0 (id=3704): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0) 2.957594476s ago: executing program 6 (id=3706): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) recvfrom$packet(r0, &(0x7f0000000040)=""/70, 0x46, 0x40002000, &(0x7f00000000c0)={0x11, 0x9, r2, 0x1, 0xd7, 0x6, @local}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x7, 0x7, 0xffff8000, 0xdb, 0x5}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10002, 0x1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x3ff}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2.898762834s ago: executing program 7 (id=3707): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x201140, 0x0) pwritev(r1, &(0x7f00000005c0)=[{&(0x7f0000000380)="5b86ddf948d0a8808ac75f4ada905414ad46b62c43025bb21b1d4da94f826fbfff69558e7d34074c38571574544ab25db5b957b47d6f4d7f71cc45157a38c9c4100f63056674a8bf30e451192558322831207347ee7c097e7dac96afe4f0de13f7446591226ba8b55d3e1a867be1f21c309b9d1e0889962e6b84fac9d5230c305f28a952873aa2249c41949bbeaf12ea0139d92a138701f859889f6d9891da903be7bad5f8e770977f60dc21ac3c68fb45578420ce7bb95817f7133c8933de91223451e6d8d63d04", 0xc8}, {&(0x7f0000000500)="428c254b573a05e9b0204bcb588a5312f86716e3beaa10231f3be9d13a562b6f34a18044537a3d409d0eeeb97b947f3f182e3d3f41db0e5cd008e40caa0514124e408a981fe804058ffb36117b956b2f15dde88d236d0ad487d091ef0e88b9ea5e5f456919dd504303e3b191fb1a452696964e5d0f385756249cedf72b4da54bf2033879ea1fc9a5325ae74f5bfbf7a6c6407df916694829a7d639cec33ed296b7", 0xa1}, {&(0x7f0000000280)="94ca44a37a1ec1711a4ecc8d6e81733183d027fdd3d95140cc416a90354b0d7cc03c4035a2a6dddf4523d13905ddf821af40b2240a7299841e7b5c2938880f12c4b34332eb9ad7319139da2d022cf9d29c6d99c4debb7fc87f35048d54fe52e389c69e7f52bf40aa2e239c9b69646b2e88add7519bcb8fb7627c008b4814f891415d8b09009e4f3ce08a623e602118628e1894bde69a8625e464498c4c0e7deae3e9baf721a7aab22a48b7fa751c1ffadc21a74e5de1cb7d3bfa28086f715dd0b2f951f621db7fa38d16611238766bdb08b4c1dc8dd7159b3d0ecf1c573f023e3fa3aa832d7d", 0xe6}, {&(0x7f0000000740)="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", 0x16f}, {&(0x7f0000000180)="b105bce5366cbd3f62259bcd6ac72d0b49faa8683c303e2d2412bc5298cc1df9eb64adfc7a7466ac410c193937137d198b6afabc990e0c3992fb66ab641982723aa9ab488da8cf0ce1d01769f44a4b79633aa31730726579021271a532503a13b3fdc0c3c9c47a41bd19089fc103f9407981a352689d077dcce1c488cdb3edaddbecc5e180dbfeecbf0b95c1b66266202bf466d18785e92691ec8389733f65ef9ad9847b7a88bce39e91e63c062c2a7c46d7e2b4b76caf251b577d52144377d9d4fa7f4c4e24b44b2ed75b2d", 0xcc}, {&(0x7f00000009c0)="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", 0x117}], 0x6, 0x83, 0x84) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000640)="660f2a470d0ffb875a0036c70179eab837000f00d066b92c0a000066b80050853c66ba000000000f30baa10066b8df32000066ef67f30f7ec8642666d9e866b8fd1d5eb30f23c00f21f86635010000000f23f80f785009", 0x57}], 0x1, 0x10, &(0x7f0000000700)=[@vmwrite={0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @dstype3={0x7, 0x6}], 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffd, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 2.755213403s ago: executing program 0 (id=3708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48854}, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a020032090581"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12012002020000102505a1a440000102030109025c0002010120080904000001020d0000052406000105240005000d240f01040000000100fafffa06241a020032090581"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.63964278s ago: executing program 6 (id=3709): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0xd510b000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x0, 0xf, 0x10, 0x2, 0x0, 0x4, 0x0}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x5, 0x0}) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x81, 0x8, 0x7e9, 0x0, 0x4a, 0x1, 0x80}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)={r6, 0x42, "3b6b3549698dfc84c04f8dd720b908a7beb9c5bf9f28a5c988e2464ff52edff5cc2721c21901a387454d4fd586688d72204ae5233aa28c17cf7e43c149885592ce27"}, &(0x7f0000000200)=0x4a) 2.406346194s ago: executing program 7 (id=3710): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cda, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0x73000, 0x8, 0x6, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x9, 0x8, 0x7, 0x8, 0x6}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x9, 0x8, 0x7, 0x8, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x1a, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=@newsa={0x158, 0x1a, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8, [0x8]}}]}, 0x158}}, 0x24000058) 2.305068392s ago: executing program 7 (id=3711): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0800, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000280)={0x283}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x3044802) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1.954222078s ago: executing program 7 (id=3712): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x3, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x4, 0x9, 0x2, 0x4, 0xffffffff7fffffff, 0x1003, 0x3, 0x9b9, 0xfff, 0xf, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x1feb97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000100)="ab9382", 0x3) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4800) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r6, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120150021ebb014057052220e990010203010902240001ca01a00509045d04021de4a20e0905070a400002078109058d03"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="120150021ebb014057052220e990010203010902240001ca01a00509045d04021de4a20e0905070a400002078109058d03"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 626.438936ms ago: executing program 6 (id=3713): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x78, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x800}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_vlan\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x78}}, 0x40090) 326.63037ms ago: executing program 6 (id=3714): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000080)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r6, 0x6d811341, 0x2) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x2000000}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$vga_arbiter(r7, &(0x7f0000000440)=@other={'trylock', ' ', 'mem'}, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3, 0x8, 0x4, 0x0, 0x8, 0x8001}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000ba3e80000759996a4066bda47800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) 317.287653ms ago: executing program 7 (id=3715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x161140, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000280)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r2, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$RTC_SET_TIME(r3, 0x40187014, &(0x7f0000000000)={0x19, 0x9, 0x19, 0xc, 0xa, 0x1, 0x5, 0x163}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) 74.180982ms ago: executing program 7 (id=3716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x40010) (async) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x40010) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="100028bd7000fcdbdf251200000070000280080001000000008008000100fbff97d2c2ba3884e6f7ff080002000200400008000100ff0000003c000380080002000000000008000100f8ffffff0800010005000000088065aeb51200010003000000080002000200000008000100020000000800010019000000080002008100000008000100fcffffff4400038008000275cf0115c7494e3c0ec9abdce1e169c000001000000800010000000100080001fb020000000800020067850000080003000100008008000200050000000800010082000000080001"], 0xc8}, 0x1, 0x0, 0x0, 0x90}, 0x80) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x200, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x200, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000300)=@ethtool_eeprom={0xb, 0x0, 0x7}}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000540)={r8, 0x4}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x7e, 0x8, 0x206, 0x7, 0x9, 0x6, 0x1, 0x7, r10}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) (async) r11 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) recvmmsg(r11, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2400000024000b0027bd70000000000008000000", @ANYRES32=r11, @ANYBLOB="ecffb8d62e"], 0x24}], 0x1}, 0x8008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r10, 0xb0, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x7f}, @in6={0xa, 0x4e23, 0x5, @private2, 0x8}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x4}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x10}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={r10, 0xb0, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x7f}, @in6={0xa, 0x4e23, 0x5, @private2, 0x8}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x4}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x10}]}, &(0x7f0000000240)=0x10) 0s ago: executing program 6 (id=3717): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000006, 0x105700) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x143, 0x136) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "75b9968a80fec9c6", "8cc004e3de26a814002dc867dec48f7e1c76b27761d90d023fe8cf141d31c886", "5f41ac41", "a2fb87fb2669f4f6"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@ccm_128={{0x304}, "3477c6d0ff854261", "549d56b8127a338dc4100a213cfa7e76", "83fef922"}, 0x28) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b06606000000000000162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001640)=""/4120, 0x1018}], 0x1000000000000093) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2}, {0x81, 0xfc, 0x7f}, {0x2}, {0x6, 0x0, 0x0, 0xf00}]}) kernel console output (not intermixed with test programs): ocess `syz.7.3191'. [ 1127.349727][T18370] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.398044][T18377] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3191'. [ 1127.478597][T18369] EXT4-fs (loop6): unable to read superblock [ 1127.921986][T18403] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1127.922007][T18403] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1127.933462][T18403] vhci_hcd vhci_hcd.0: Device attached [ 1128.014599][T11007] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1128.165586][T11007] usb 8-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1128.165614][T11007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.171123][T11007] usb 8-1: config 0 descriptor?? [ 1128.179474][T11007] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1128.196790][ T5857] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1128.197308][ T5653] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1128.377628][ T5653] usb 7-1: Using ep0 maxpacket: 32 [ 1128.380265][ T5653] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.380293][ T5653] usb 7-1: config 0 has no interfaces? [ 1128.383049][ T5653] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.383075][ T5653] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.383092][ T5653] usb 7-1: Product: syz [ 1128.383105][ T5653] usb 7-1: Manufacturer: syz [ 1128.383118][ T5653] usb 7-1: SerialNumber: syz [ 1128.400866][ T5653] usb 7-1: config 0 descriptor?? [ 1128.406775][T11007] gspca_sunplus: reg_w_riv err -71 [ 1128.407271][T11007] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 1128.449229][T11007] usb 8-1: USB disconnect, device number 78 [ 1128.609839][T13407] usb 7-1: USB disconnect, device number 90 [ 1128.621290][T18404] vhci_hcd: connection reset by peer [ 1128.630733][T12124] vhci_hcd vhci_hcd.6: stop threads [ 1128.630763][T12124] vhci_hcd vhci_hcd.6: release socket [ 1128.641794][T12124] vhci_hcd vhci_hcd.6: disconnect device [ 1128.749408][ T38] audit: type=1326 audit(1132.248:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18425 comm="syz.9.3199" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7df9b1ce59 code=0x0 [ 1129.322060][T18465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.338980][T18465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.560289][T13386] usb 1-1: USB disconnect, device number 71 [ 1129.654404][T13407] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1129.812979][T13407] usb 8-1: Using ep0 maxpacket: 8 [ 1129.815814][T13407] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1129.817223][T13407] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1129.822617][T13407] usb 8-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 1129.822651][T13407] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.822673][T13407] usb 8-1: Product: syz [ 1129.822689][T13407] usb 8-1: Manufacturer: syz [ 1129.823816][T13407] usb 8-1: SerialNumber: syz [ 1130.071361][T13407] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1130.072518][T13407] usb 8-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1130.072545][T13407] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1130.212920][T13386] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1130.271833][T13407] usb 8-1: USB disconnect, device number 79 [ 1130.366226][T13386] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1130.367789][T13386] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1130.367816][T13386] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.367837][T13386] usb 1-1: config 63 has no interface number 0 [ 1130.367870][T13386] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1130.389839][T13386] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1130.389880][T13386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.389901][T13386] usb 1-1: Product: syz [ 1130.389914][T13386] usb 1-1: Manufacturer: syz [ 1130.389929][T13386] usb 1-1: SerialNumber: syz [ 1130.540797][ T8943] udevd[8943]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1130.711915][T18499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.727922][T18499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.732970][ T5653] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1130.789294][T13386] uvcvideo 1-1:63.66: Found Unit with invalid ID 0 [ 1130.789360][T13386] uvcvideo 1-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1130.789513][T13386] uvcvideo 1-1:63.66: No valid video chain found. [ 1130.826640][T13386] usb 1-1: USB disconnect, device number 72 [ 1130.924308][ T5653] usb 10-1: Using ep0 maxpacket: 8 [ 1130.933500][ T5653] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1130.934791][ T5653] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.934850][ T5653] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1130.939385][ T5653] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1130.939417][ T5653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.939431][ T5653] usb 10-1: Product: syz [ 1130.939440][ T5653] usb 10-1: Manufacturer: syz [ 1130.939449][ T5653] usb 10-1: SerialNumber: syz [ 1130.977322][ T5653] usb 10-1: config 0 descriptor?? [ 1131.024242][ T5653] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1131.306739][ T38] audit: type=1326 audit(1134.808:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18538 comm="syz.9.3216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7df9b1ce59 code=0x0 [ 1131.454151][ T5653] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1131.632931][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.278997][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1132.279023][T18634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1132.279146][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1132.323071][ T5665] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1132.454101][ T5665] usb 7-1: device descriptor read/64, error -71 [ 1132.542645][T18640] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1132.693130][ T5665] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1132.823145][ T5665] usb 7-1: device descriptor read/64, error -71 [ 1132.933377][ T5665] usb usb7-port1: attempt power cycle [ 1133.272979][ T5665] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1133.294286][ T5665] usb 7-1: device descriptor read/8, error -71 [ 1133.313900][ T5857] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1133.383197][ T5653] usb 10-1: USB disconnect, device number 70 [ 1133.532948][ T5665] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1133.553813][ T5665] usb 7-1: device descriptor read/8, error -71 [ 1133.665352][ T5665] usb usb7-port1: unable to enumerate USB device [ 1134.067253][ T5653] usb 10-1: new low-speed USB device number 71 using dummy_hcd [ 1134.247804][ T5653] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1134.247850][ T5653] usb 10-1: config 0 has no interface number 0 [ 1134.247898][ T5653] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1134.247922][ T5653] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1134.247950][ T5653] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1134.248063][ T5653] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1134.248092][ T5653] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1134.248119][ T5653] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1134.248164][ T5653] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1134.248189][ T5653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.263363][ T5653] usb 10-1: config 0 descriptor?? [ 1134.298869][T18676] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1134.298991][T18676] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1134.390369][ T5653] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1134.636715][T18676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.637394][T18676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.683088][ T32] usb 10-1: USB disconnect, device number 71 [ 1134.714723][ T32] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1134.923020][ T5665] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1135.080481][ T5665] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1135.081211][ T5665] usb 1-1: not running at top speed; connect to a high speed hub [ 1135.100532][ T5665] usb 1-1: config 6 has an invalid interface number: 108 but max is 0 [ 1135.100569][ T5665] usb 1-1: config 6 has no interface number 0 [ 1135.100596][ T5665] usb 1-1: config 6 interface 108 has no altsetting 0 [ 1135.126484][ T5665] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=e0.1c [ 1135.126505][ T5665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.126517][ T5665] usb 1-1: Product: syz [ 1135.126525][ T5665] usb 1-1: Manufacturer: syz [ 1135.126534][ T5665] usb 1-1: SerialNumber: syz [ 1135.373120][ T5665] snd_usb_variax 1-1:6.108: Line 6 Variax Workbench found [ 1135.373627][ T5665] snd_usb_variax 1-1:6.108: set_interface failed [ 1135.373954][ T5665] snd_usb_variax 1-1:6.108: Line 6 Variax Workbench now disconnected [ 1135.374185][ T5665] snd_usb_variax 1-1:6.108: probe with driver snd_usb_variax failed with error -71 [ 1135.380143][ T5665] usb 1-1: USB disconnect, device number 73 [ 1135.474087][T11007] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1135.532994][ T5857] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1135.633034][T11007] usb 7-1: Using ep0 maxpacket: 32 [ 1135.637693][T11007] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1135.637726][T11007] usb 7-1: config 0 has no interface number 0 [ 1135.637778][T11007] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1135.671723][T11007] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1135.671757][T11007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.671779][T11007] usb 7-1: Product: syz [ 1135.671794][T11007] usb 7-1: Manufacturer: syz [ 1135.671808][T11007] usb 7-1: SerialNumber: syz [ 1135.692947][ T5857] usb 10-1: Using ep0 maxpacket: 16 [ 1135.715086][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.715124][ T5857] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.715147][ T5857] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1135.715191][ T5857] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1135.715215][ T5857] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.774837][ T5857] usb 10-1: config 0 descriptor?? [ 1135.790540][T11007] usb 7-1: config 0 descriptor?? [ 1136.077205][ T5857] usbhid 10-1:0.0: can't add hid device: -71 [ 1136.077465][ T5857] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1136.104440][ T5857] usb 10-1: USB disconnect, device number 72 [ 1136.620878][T18755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.646316][T18755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.740559][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1136.740596][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1136.741180][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1136.741205][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1136.741225][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1136.741242][T11007] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1136.741694][T11007] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1136.789602][T11007] usb 7-1: USB disconnect, device number 95 [ 1137.134634][T18841] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1137.179008][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.179950][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.183108][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.194512][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.213468][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.238793][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.265066][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.283134][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.305706][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.313468][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.336650][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.345033][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.353207][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.375650][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.389029][T18855] cgroup: Unknown subsys name 'cpuset' [ 1137.395152][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.412943][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.433062][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.453024][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.473375][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.482967][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.503179][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.512987][T11007] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1137.530721][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.534547][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.544626][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.565785][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.579040][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.583666][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.593794][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.614753][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.622980][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.644593][T11007] usb 1-1: device descriptor read/64, error -71 [ 1137.644919][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.662949][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.686887][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.696317][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.703404][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.714419][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.734758][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.746067][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.763675][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.784521][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.802961][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.823011][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.846119][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.853804][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.863132][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.885313][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.894748][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.902958][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.903409][T11007] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1137.923346][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1137.936388][T18840] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 576 out of range (51000000..2150000000) [ 1138.033037][T11007] usb 1-1: device descriptor read/64, error -71 [ 1138.055391][ T5653] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1138.144266][T11007] usb usb1-port1: attempt power cycle [ 1138.223021][ T5653] usb 10-1: Using ep0 maxpacket: 8 [ 1138.236150][ T5653] usb 10-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.236184][ T5653] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1138.260442][ T5653] usb 10-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.40 [ 1138.260485][ T5653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.260505][ T5653] usb 10-1: Product:   [ 1138.260516][ T5653] usb 10-1: Manufacturer: ꃀ东㎄鵖⟢覰秒˃蠊죶ᬽ宏泹鈾뺭๏둬ඓ஀蝫뤇胓Ϗ춲⦑栧읳Ԅ늽嬁°ꆅ䁏谐떟拃萛꫷⣇脃㍓輴흂獝亿⍩濡륟禮ᴼ㊛➚䬓х抝ᓵ뻭䌺牧ꚷ먴㉟仱글샬鶖Å [ 1138.260538][ T5653] usb 10-1: SerialNumber: 怟뾑呻剿㆘ⱛ罷휬㹋놭㗟匎䄆ថ퉉觝駗칝瓭蝣㉌馽쫍ﰩ점詥ﲔ⺻萳蒘諒Ćᵹ鏗ᆬᐞ苔窬짏ఉꄘ䉰샛鿅摠꒦ڠ솞镛ꬑ兢礏㕃軧綉Ӣ쮡鋔켚槑篃﮹벑㊁녷絫딶斮઩ꓱ梧셎錌鱣꼠୘绫䴃 [ 1138.276961][ T5653] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 1138.276989][ T5653] usb 10-1: no configuration chosen from 1 choice [ 1138.505472][T11007] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1138.524098][T11007] usb 1-1: device descriptor read/8, error -71 [ 1138.773024][T11007] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1138.793555][T11007] usb 1-1: device descriptor read/8, error -71 [ 1138.905773][T11007] usb usb1-port1: unable to enumerate USB device [ 1139.663035][T11007] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1139.826781][T11007] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1139.828042][T11007] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.828072][T11007] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1139.828126][T11007] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1139.828157][T11007] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1139.828181][T11007] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1139.828197][T11007] usb 8-1: config 1 interface 1 has no altsetting 0 [ 1139.831474][T11007] usb 8-1: string descriptor 0 read error: -22 [ 1139.831602][T11007] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1139.831619][T11007] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.290077][T11007] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1140.290112][T11007] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1140.290132][T11007] usb 8-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1140.692944][ T5857] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1140.788708][T18912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1140.789458][T18912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1140.835203][ T5857] usb 1-1: device descriptor read/64, error -71 [ 1140.845458][T13407] usb 10-1: USB disconnect, device number 73 [ 1140.903329][T11007] usb 8-1: 2:0: failed to get current value for ch 1 (-71) [ 1141.040284][T11007] usb 8-1: USB disconnect, device number 81 [ 1141.096311][ T5857] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1141.223014][ T5857] usb 1-1: device descriptor read/64, error -71 [ 1141.273638][T13407] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1141.346561][ T5857] usb usb1-port1: attempt power cycle [ 1141.432646][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3298'. [ 1141.442948][T13407] usb 10-1: Using ep0 maxpacket: 32 [ 1141.449530][T13407] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1141.449558][T13407] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1141.449577][T13407] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1141.449625][T13407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1141.449645][T13407] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1141.449668][T13407] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1141.449709][T13407] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1141.449730][T13407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.459264][T13407] usb 10-1: config 0 descriptor?? [ 1141.684540][T11007] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1141.706309][ T5857] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1141.723922][ T5857] usb 1-1: device descriptor read/8, error -71 [ 1141.724395][T13407] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1141.760134][T13407] usb 10-1: USB disconnect, device number 74 [ 1141.775130][T13407] usblp0: removed [ 1141.827358][T11007] usb 8-1: device descriptor read/64, error -71 [ 1141.929561][ T5665] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1142.003963][ T5857] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1142.024272][ T5857] usb 1-1: device descriptor read/8, error -71 [ 1142.063681][T11007] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1142.073250][ T5665] usb 7-1: Using ep0 maxpacket: 16 [ 1142.086977][ T5665] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.087011][ T5665] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1142.087033][ T5665] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1142.087047][ T5665] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.092335][ T5665] usb 7-1: config 0 descriptor?? [ 1142.137650][ T5857] usb usb1-port1: unable to enumerate USB device [ 1142.193189][T11007] usb 8-1: device descriptor read/64, error -71 [ 1142.233022][T13407] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1142.303536][T11007] usb usb8-port1: attempt power cycle [ 1142.338666][ T5665] usbhid 7-1:0.0: can't add hid device: -71 [ 1142.338802][ T5665] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1142.371037][ T5665] usb 7-1: USB disconnect, device number 96 [ 1142.412929][T13407] usb 10-1: Using ep0 maxpacket: 32 [ 1142.416420][T13407] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1142.416453][T13407] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1142.416476][T13407] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1142.416532][T13407] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1142.416625][T13407] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1142.416651][T13407] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1142.416706][T13407] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1142.416730][T13407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.461172][T13407] usb 10-1: config 0 descriptor?? [ 1142.662941][T11007] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1142.741966][T11007] usb 8-1: device descriptor read/8, error -71 [ 1142.781218][T13407] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1142.871775][T19058] netlink: 17780 bytes leftover after parsing attributes in process `syz.6.3307'. [ 1142.885046][T19059] netlink: 17780 bytes leftover after parsing attributes in process `syz.6.3307'. [ 1142.984070][T11007] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1143.013777][T11007] usb 8-1: device descriptor read/8, error -71 [ 1143.061498][T19069] netlink: 'syz.6.3311': attribute type 10 has an invalid length. [ 1143.121744][T19069] team0: Device veth0_macvtap failed to register rx_handler [ 1143.138252][T19067] usblp0:failed reading printer status (-32) [ 1143.152569][T11007] usb usb8-port1: unable to enumerate USB device [ 1143.214292][ T5665] usb 10-1: USB disconnect, device number 75 [ 1143.241441][ T5665] usblp0: removed [ 1143.318829][T19081] netlink: 'syz.6.3313': attribute type 3 has an invalid length. [ 1143.318854][T19081] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3313'. [ 1143.912899][ T5665] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1144.076001][ T5665] usb 1-1: Using ep0 maxpacket: 32 [ 1144.078449][ T5665] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1144.078479][ T5665] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.116691][ T5665] usb 1-1: config 0 descriptor?? [ 1144.162334][ T5665] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1144.621486][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1144.847414][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1144.884318][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1144.944738][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1144.962659][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.085178][ T5665] gspca_vc032x: reg_w err -110 [ 1145.085201][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085212][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085221][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085231][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085240][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085248][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085257][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085266][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085275][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085284][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085293][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085303][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085314][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085324][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085335][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085344][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085355][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085365][ T5665] gspca_vc032x: I2c Bus Busy Wait 00 [ 1145.085375][ T5665] gspca_vc032x: Unknown sensor... [ 1145.085459][ T5665] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1145.118350][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1145.118759][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1145.129657][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1145.132475][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1145.138035][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1146.307422][T19116] lo speed is unknown, defaulting to 1000 [ 1146.525648][T13407] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 1146.695134][T13407] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.695165][T13407] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1146.695187][T13407] usb 10-1: config 1 has no interface number 0 [ 1146.695236][T13407] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1146.723002][T13407] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1146.723036][T13407] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.723057][T13407] usb 10-1: Product: syz [ 1146.723072][T13407] usb 10-1: Manufacturer: syz [ 1146.723088][T13407] usb 10-1: SerialNumber: syz [ 1146.796122][T13407] cdc_ncm 10-1:1.1: NCM or ECM functional descriptors missing [ 1146.796178][T13407] cdc_ncm 10-1:1.1: bind() failure [ 1147.038219][T13401] usb 10-1: USB disconnect, device number 76 [ 1147.231004][ T4932] Bluetooth: hci0: command tx timeout [ 1147.536977][T11007] usb 1-1: USB disconnect, device number 82 [ 1147.745440][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.746054][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.746415][T19116] bridge_slave_0: entered allmulticast mode [ 1147.750955][T19116] bridge_slave_0: entered promiscuous mode [ 1147.777690][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.780873][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.781215][T19116] bridge_slave_1: entered allmulticast mode [ 1147.802171][T19116] bridge_slave_1: entered promiscuous mode [ 1147.976760][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1148.275514][T19116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.305716][T19116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.312443][T13401] hid (null): global environment stack underflow [ 1148.312466][T13401] hid (null): invalid report_count 259087337 [ 1148.382571][T13401] hid-generic E604:0800:0003.0032: global environment stack underflow [ 1148.382588][T13401] hid-generic E604:0800:0003.0032: item 0 0 1 11 parsing failed [ 1148.436861][T13401] hid-generic E604:0800:0003.0032: probe with driver hid-generic failed with error -22 [ 1148.618595][T19381] kvm: pic: single mode not supported [ 1148.618931][T19381] kvm: pic: level sensitive irq not supported [ 1148.619257][T19381] kvm: pic: single mode not supported [ 1148.619264][T19381] kvm: pic: level sensitive irq not supported [ 1148.620391][T19381] kvm: pic: single mode not supported [ 1148.620398][T19381] kvm: pic: level sensitive irq not supported [ 1148.620601][T19381] kvm: pic: single mode not supported [ 1148.620608][T19381] kvm: pic: level sensitive irq not supported [ 1148.620777][T19381] kvm: pic: single mode not supported [ 1148.620784][T19381] kvm: pic: level sensitive irq not supported [ 1148.620950][T19381] kvm: pic: single mode not supported [ 1148.621139][T19381] kvm: pic: single mode not supported [ 1148.621146][T19381] kvm: pic: level sensitive irq not supported [ 1148.841704][T19116] team0: Port device team_slave_0 added [ 1148.850155][T19116] team0: Port device team_slave_1 added [ 1149.038130][T19116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.038149][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.038181][T19116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.043820][T19116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.043836][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.043857][T19116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.302977][ T4932] Bluetooth: hci0: command tx timeout [ 1149.396074][T19116] hsr_slave_0: entered promiscuous mode [ 1149.414139][T19116] hsr_slave_1: entered promiscuous mode [ 1149.420832][T19116] debugfs: 'hsr0' already exists in 'hsr' [ 1149.420865][T19116] Cannot create hsr debugfs directory [ 1150.057658][T19519] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20003 [ 1150.307517][T19549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.319421][T19549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.533424][T13401] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1150.579827][T19578] netlink: 'syz.7.3357': attribute type 9 has an invalid length. [ 1150.579856][T19578] netlink: 'syz.7.3357': attribute type 2 has an invalid length. [ 1150.685383][T13401] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1150.685416][T13401] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1150.688497][T13401] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1150.688527][T13401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.688557][T13401] usb 1-1: Product: syz [ 1150.688571][T13401] usb 1-1: Manufacturer: syz [ 1150.688585][T13401] usb 1-1: SerialNumber: syz [ 1150.748252][T13401] usb 1-1: config 0 descriptor?? [ 1150.764705][T13401] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1151.384477][ T4932] Bluetooth: hci0: command tx timeout [ 1151.580766][T19116] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.718760][T19608] fuse: Unknown parameter 'tIhc]fd' [ 1151.767669][T19538] veth1_macvtap: left promiscuous mode [ 1152.092280][T13401] gspca_sunplus: reg_r err -71 [ 1152.092379][T13401] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1152.110309][T13401] usb 1-1: USB disconnect, device number 83 [ 1152.416000][T19116] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.582967][T13401] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1152.721586][T19116] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.733352][T13401] usb 1-1: Using ep0 maxpacket: 16 [ 1152.743264][T13401] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1152.743293][T13401] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.743312][T13401] usb 1-1: config 0 has no interface number 0 [ 1152.771466][T13401] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1152.771488][T13401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.771501][T13401] usb 1-1: Product: syz [ 1152.771509][T13401] usb 1-1: Manufacturer: syz [ 1152.771518][T13401] usb 1-1: SerialNumber: syz [ 1152.808915][T13401] usb 1-1: config 0 descriptor?? [ 1152.823793][T13401] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 1153.043326][T13401] usb 1-1: USB disconnect, device number 84 [ 1153.223650][T19116] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.462959][ T4932] Bluetooth: hci0: command tx timeout [ 1153.543371][T13401] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1153.714230][T13401] usb 10-1: Using ep0 maxpacket: 8 [ 1153.717968][T13401] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1153.717998][T13401] usb 10-1: config 0 has no interface number 0 [ 1153.746204][T13401] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1153.746237][T13401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.746258][T13401] usb 10-1: Product: syz [ 1153.746272][T13401] usb 10-1: Manufacturer: syz [ 1153.746287][T13401] usb 10-1: SerialNumber: syz [ 1153.796554][T13401] usb 10-1: config 0 descriptor?? [ 1154.006606][T13401] uvcvideo 10-1:0.31: probe with driver uvcvideo failed with error -22 [ 1154.036871][T13401] usb 10-1: USB disconnect, device number 77 [ 1154.180811][T19671] netlink: 'syz.7.3367': attribute type 9 has an invalid length. [ 1154.180833][T19671] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1154.182553][T19670] netlink: 'syz.7.3367': attribute type 9 has an invalid length. [ 1154.182571][T19670] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1154.560005][T19681] dvmrp2: entered allmulticast mode [ 1154.700139][T19695] netlink: 'syz.9.3371': attribute type 2 has an invalid length. [ 1154.700162][T19695] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3371'. [ 1154.700177][T19695] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1154.831035][T19696] loop8: detected capacity change from 0 to 7 [ 1154.866835][T19116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1154.878968][T19696] Dev loop8: unable to read RDB block 7 [ 1154.879010][T19696] loop8: unable to read partition table [ 1154.886740][T19696] loop8: partition table beyond EOD, truncated [ 1154.888380][T19696] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1155.029713][T19116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1155.054542][T19116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1155.259694][T19116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1155.265398][T19116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1155.343030][T13401] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1155.449612][T19116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1155.451640][T19116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1155.495295][T13401] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.495326][T13401] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1155.495367][T13401] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 1155.495392][T13401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.496215][T19116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1155.548959][T13401] usb 1-1: config 0 descriptor?? [ 1156.204293][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.309468][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.393252][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.393465][T12111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.647634][T12105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.648970][T12105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.441516][T11007] usb 1-1: USB disconnect, device number 85 [ 1158.191781][T19768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1158.557581][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.844316][T19803] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1158.952903][ T5665] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1159.117574][ T5665] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1159.117606][ T5665] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1159.117627][ T5665] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1159.117704][ T5665] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1159.117735][ T5665] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1159.141661][ T5665] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1159.141697][ T5665] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1159.141719][ T5665] usb 10-1: Product: syz [ 1159.141735][ T5665] usb 10-1: Manufacturer: syz [ 1159.226004][ T5665] cdc_wdm 10-1:1.0: skipping garbage [ 1159.226028][ T5665] cdc_wdm 10-1:1.0: skipping garbage [ 1159.337293][ T5665] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1159.337319][ T5665] cdc_wdm 10-1:1.0: Unknown control protocol [ 1159.453973][ T5857] usb 10-1: USB disconnect, device number 78 [ 1159.505950][T19116] veth0_vlan: entered promiscuous mode [ 1159.569955][T19116] veth1_vlan: entered promiscuous mode [ 1159.698718][T19116] veth0_macvtap: entered promiscuous mode [ 1159.751559][T19116] veth1_macvtap: entered promiscuous mode [ 1159.807026][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.882453][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.961964][T12122] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.977006][T12122] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.977468][T12122] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.977511][T12122] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.152929][T13401] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1160.343572][T13401] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1160.343605][T13401] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1160.343627][T13401] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1160.343680][T13401] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1160.343706][T13401] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1160.440414][T13401] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1160.440446][T13401] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1160.440465][T13401] usb 10-1: Product: syz [ 1160.440479][T13401] usb 10-1: Manufacturer: syz [ 1160.506843][T13401] cdc_wdm 10-1:1.0: skipping garbage [ 1160.506867][T13401] cdc_wdm 10-1:1.0: skipping garbage [ 1160.627359][T13401] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1160.627383][T13401] cdc_wdm 10-1:1.0: Unknown control protocol [ 1161.525672][T19872] tmpfs: Unknown parameter './file0' [ 1161.875801][T12122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.875826][T12122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1161.996302][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1161.996327][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1162.101692][T13401] usb 10-1: USB disconnect, device number 79 [ 1162.350356][T19893] fuse: Bad value for 'user_id' [ 1162.350378][T19893] fuse: Bad value for 'user_id' [ 1162.461386][T19900] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1162.461954][ T5860] IPVS: starting estimator thread 0... [ 1162.543586][T19901] IPVS: using max 8 ests per chain, 19200 per kthread [ 1162.645411][T19904] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1162.722938][T13401] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1162.748612][T19906] siw: device registration error -23 [ 1162.767393][T19906] smbdirect: ib_dev[syz2] renamed to [syz0] [ 1162.872863][T13401] usb 10-1: Using ep0 maxpacket: 8 [ 1162.877864][T13401] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 7 [ 1162.881742][T13401] usb 10-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1162.881783][T13401] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.881804][T13401] usb 10-1: Product: 㸌燝跑齼卌䟾५摾輆⪐⦽⁍땣哬抈嚱뒐㝯竛ﴼ䡝踘츃邙讼뺂쬆쵗쓙잉၃敌鹑瀛Ⱏ缝濷蜶汝衎넅퇝堋ࢎ멭혮䝒닌⃀ቻ倨鏚蚜経䷭鯒蹞Ѓ椔︇왰ཀ>뾨ᑯ໱䝞폌㥙嬗晖з䈩⤣婴蟻⻙⫾썠韉䮟 [ 1162.881832][T13401] usb 10-1: Manufacturer: Ф [ 1162.881848][T13401] usb 10-1: SerialNumber: syz [ 1163.188507][T19895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.198610][T19895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.213954][T19895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.215123][T19895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.260413][T19895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.267548][T19895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.322233][T13401] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1163.330975][T13401] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1163.403307][ T821] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1163.432788][T13401] usb 10-1: USB disconnect, device number 80 [ 1163.527127][ T8943] udevd[8943]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1163.553178][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1163.554218][ T821] usb 7-1: no configurations [ 1163.554235][ T821] usb 7-1: can't read configurations, error -22 [ 1163.685115][ T821] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1163.844501][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1163.845533][ T821] usb 7-1: no configurations [ 1163.845552][ T821] usb 7-1: can't read configurations, error -22 [ 1163.847380][ T821] usb usb7-port1: attempt power cycle [ 1164.195878][ T5674] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1164.213745][ T821] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1164.236551][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1164.237074][ T821] usb 7-1: no configurations [ 1164.237085][ T821] usb 7-1: can't read configurations, error -22 [ 1164.349515][ T5674] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1164.349548][ T5674] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.349580][ T5674] usb 10-1: Product: syz [ 1164.349595][ T5674] usb 10-1: Manufacturer: syz [ 1164.349610][ T5674] usb 10-1: SerialNumber: syz [ 1164.380391][ T821] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1164.416549][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1164.417214][ T821] usb 7-1: no configurations [ 1164.417231][ T821] usb 7-1: can't read configurations, error -22 [ 1164.418357][ T821] usb usb7-port1: unable to enumerate USB device [ 1164.777506][ T5674] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1164.777573][ T5674] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1165.183071][ T5674] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1165.183133][ T5674] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1165.184025][ T5674] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1165.247057][ T5674] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1165.262215][ T5674] usb 10-1: USB disconnect, device number 81 [ 1166.390960][T20053] pim6reg: entered allmulticast mode [ 1166.433775][T20064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3425'. [ 1166.772866][ T5674] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1166.943194][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 1166.947650][ T5674] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1166.947682][ T5674] usb 1-1: config 0 has no interface number 0 [ 1166.951130][ T5674] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1166.951163][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.951184][ T5674] usb 1-1: Product: syz [ 1166.951199][ T5674] usb 1-1: Manufacturer: syz [ 1166.951215][ T5674] usb 1-1: SerialNumber: syz [ 1166.999282][ T5674] usb 1-1: config 0 descriptor?? [ 1167.496068][ T5674] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1167.496104][ T5674] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1167.833022][T13407] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1167.968774][T20131] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 1168.047632][ T5674] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1168.047966][ T5674] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1168.063018][T13407] usb 7-1: Using ep0 maxpacket: 16 [ 1168.085155][T13407] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 1168.085187][T13407] usb 7-1: config 0 has no interface number 0 [ 1168.085239][T13407] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1168.085266][T13407] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.094065][T13407] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1168.094095][T13407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.094115][T13407] usb 7-1: Product: syz [ 1168.094129][T13407] usb 7-1: Manufacturer: syz [ 1168.094142][T13407] usb 7-1: SerialNumber: syz [ 1168.125724][T13407] usb 7-1: config 0 descriptor?? [ 1168.135698][T20114] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1168.189640][ T5674] usb 1-1: USB disconnect, device number 86 [ 1168.396308][T13407] usb 7-1: USB disconnect, device number 101 [ 1168.701068][T20160] syz_tun: tun_net_xmit 126 [ 1168.973068][ T5674] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1169.138693][ T5674] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1169.138724][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.138737][ T5674] usb 1-1: Product: syz [ 1169.138746][ T5674] usb 1-1: Manufacturer: syz [ 1169.138755][ T5674] usb 1-1: SerialNumber: syz [ 1169.147319][ T5674] usb 1-1: config 0 descriptor?? [ 1169.579916][ T5674] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1169.579937][ T5674] usb 1-1: Firmware version (0.0) predates our first public release. [ 1169.579949][ T5674] usb 1-1: Please update to version 0.2 or newer [ 1169.872907][T13407] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1169.882031][ T5674] usb 1-1: USB disconnect, device number 87 [ 1169.966417][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3443'. [ 1169.966437][T20192] openvswitch: netlink: Message has 1 unknown bytes. [ 1170.047736][T13407] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1170.047765][T13407] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.047778][T13407] usb 10-1: Product: syz [ 1170.047800][T13407] usb 10-1: Manufacturer: syz [ 1170.047809][T13407] usb 10-1: SerialNumber: syz [ 1170.301670][ T821] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1170.469598][ T821] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1170.469631][ T821] usb 7-1: config 0 has no interface number 0 [ 1170.469757][ T821] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.469787][ T821] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.469810][ T821] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.469918][ T821] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1170.469944][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.484584][ T821] usb 7-1: config 0 descriptor?? [ 1170.555650][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1170.555964][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1170.953070][ T5674] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1171.118262][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 1171.129278][ T5674] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1171.169983][ T5674] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1171.170427][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.170453][ T5674] usb 1-1: Product: syz [ 1171.170469][ T5674] usb 1-1: Manufacturer: syz [ 1171.170483][ T5674] usb 1-1: SerialNumber: syz [ 1171.489416][ T5674] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1171.489436][ T5674] usb 1-1: 1:1 : unsupported sample bitwidth 16 in 12 bytes [ 1171.493300][ T5674] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1171.604491][ T5674] usb 1-1: USB disconnect, device number 88 [ 1171.822953][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.824795][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.829523][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1171.830535][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1171.831655][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1171.831825][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1171.844629][T13407] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1171.940121][T13407] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1171.984742][T13407] usb 10-1: USB disconnect, device number 82 [ 1172.452894][T13401] usb 1-1: new low-speed USB device number 89 using dummy_hcd [ 1172.606045][T13401] usb 1-1: Invalid ep0 maxpacket: 32 [ 1172.733171][T13401] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 1172.882950][T13401] usb 1-1: Invalid ep0 maxpacket: 32 [ 1172.883642][T13401] usb usb1-port1: attempt power cycle [ 1173.064296][ T821] uclogic 0003:28BD:0042.0033: failed retrieving string descriptor #100: -71 [ 1173.064370][ T821] uclogic 0003:28BD:0042.0033: failed retrieving pen parameters: -71 [ 1173.064389][ T821] uclogic 0003:28BD:0042.0033: pen probing failed: -71 [ 1173.064406][ T821] uclogic 0003:28BD:0042.0033: failed probing parameters: -71 [ 1173.064527][ T821] uclogic 0003:28BD:0042.0033: probe with driver uclogic failed with error -71 [ 1173.132524][ T821] usb 7-1: USB disconnect, device number 102 [ 1173.232936][T13401] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 1173.253582][T13401] usb 1-1: Invalid ep0 maxpacket: 32 [ 1173.383088][T13401] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 1173.402875][T13407] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1173.405362][T13401] usb 1-1: Invalid ep0 maxpacket: 32 [ 1173.405686][T13401] usb usb1-port1: unable to enumerate USB device [ 1173.416598][T20301] loop8: detected capacity change from 0 to 7 [ 1173.432486][T20301] Dev loop8: unable to read RDB block 7 [ 1173.432531][T20301] loop8: unable to read partition table [ 1173.433458][T20301] loop8: partition table beyond EOD, truncated [ 1173.433478][T20301] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1173.573091][T13407] usb 10-1: Using ep0 maxpacket: 32 [ 1173.575972][T13407] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1173.576003][T13407] usb 10-1: config 0 has no interface number 0 [ 1173.580169][T13407] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1173.580194][T13407] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.580212][T13407] usb 10-1: Product: syz [ 1173.580224][T13407] usb 10-1: Manufacturer: syz [ 1173.580238][T13407] usb 10-1: SerialNumber: syz [ 1173.664243][T13407] usb 10-1: config 0 descriptor?? [ 1174.134504][T13407] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1174.134549][T13407] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1174.152842][T20310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.153523][T20310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.482850][T13384] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1174.619312][T13384] usb 7-1: device descriptor read/64, error -71 [ 1174.697011][T20326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.697599][T20326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.854406][T13384] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1174.992934][T13384] usb 7-1: device descriptor read/64, error -71 [ 1175.105682][T13384] usb usb7-port1: attempt power cycle [ 1175.452850][T13384] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1175.476991][T13384] usb 7-1: device descriptor read/8, error -71 [ 1175.734257][T13384] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1175.758663][T13384] usb 7-1: device descriptor read/8, error -71 [ 1175.772580][T13407] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1175.785091][T13407] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1175.803061][T13407] usb 10-1: USB disconnect, device number 83 [ 1175.864647][T13384] usb usb7-port1: unable to enumerate USB device [ 1176.144346][T20352] overlay: ./file0/file0 is not a directory [ 1176.692861][T13384] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1176.847402][T13384] usb 10-1: Using ep0 maxpacket: 16 [ 1176.860616][T13384] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1176.860637][T13384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.860650][T13384] usb 10-1: Product: syz [ 1176.860658][T13384] usb 10-1: Manufacturer: syz [ 1176.860667][T13384] usb 10-1: SerialNumber: syz [ 1176.883932][T13384] usb 10-1: config 0 descriptor?? [ 1177.334890][T20380] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.478192][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3456'. [ 1177.532880][ T5674] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1177.633305][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.633421][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.684550][ T5674] usb 1-1: Using ep0 maxpacket: 16 [ 1177.693019][ T5674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.695222][ T5674] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1177.727528][ T5674] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1177.727561][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.727583][ T5674] usb 1-1: Product: syz [ 1177.727598][ T5674] usb 1-1: Manufacturer: syz [ 1177.727625][ T5674] usb 1-1: SerialNumber: syz [ 1177.775305][ T5674] usb 1-1: config 0 descriptor?? [ 1178.024842][T13384] usb 10-1: USB disconnect, device number 84 [ 1178.417217][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3466'. [ 1178.417358][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3466'. [ 1179.062238][T20442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.076539][T20442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.141368][T20462] binder: 20461:20462 ioctl 80049367 200000000100 returned -22 [ 1181.215022][T13401] usb 1-1: USB disconnect, device number 93 [ 1182.425450][T13401] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1182.575294][T13401] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1182.575326][T13401] usb 1-1: config 1 has no interface number 0 [ 1182.575357][T13401] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1182.575373][T13401] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1182.575386][T13401] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.578079][T13401] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1182.578105][T13401] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.578117][T13401] usb 1-1: Product: syz [ 1182.578125][T13401] usb 1-1: Manufacturer: syz [ 1182.578134][T13401] usb 1-1: SerialNumber: syz [ 1182.626912][T20559] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1182.631762][T13401] usb 1-1: Expected 3 endpoints, found: 2 [ 1182.693049][ T32] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1182.732952][T13384] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1182.844990][ T32] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1182.845027][ T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1182.845052][ T32] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1182.845065][ T32] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1182.845091][ T32] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1182.845105][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.849991][ T32] usb 10-1: config 0 descriptor?? [ 1182.886575][T13384] usb 7-1: Using ep0 maxpacket: 8 [ 1182.929227][T13384] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 1182.929260][T13384] usb 7-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 1182.929280][T13384] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.929336][T13384] usb 7-1: config 0 has no interface number 0 [ 1182.929364][T13384] usb 7-1: config 0 interface 70 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 1182.929378][T13384] usb 7-1: config 0 interface 70 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1182.929394][T13384] usb 7-1: config 0 interface 70 has no altsetting 0 [ 1182.931720][T13384] usb 7-1: Dual-Role OTG device on HNP port [ 1182.932001][T13384] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 1182.932142][T13384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.932156][T13384] usb 7-1: Product: syz [ 1182.932165][T13384] usb 7-1: Manufacturer: syz [ 1182.932174][T13384] usb 7-1: SerialNumber: syz [ 1182.954736][T13384] usb 7-1: config 0 descriptor?? [ 1183.002554][T20573] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1183.520148][ T32] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1183.521555][T20593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.522235][T20593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.653305][ T32] usb 1-1: USB disconnect, device number 94 [ 1183.894642][T20610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.916947][T20610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.935263][T20614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1183.974466][T20610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.991584][T20610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.167444][T13384] ti_usb_3410_5052 7-1:0.70: required endpoints missing [ 1184.180629][T13384] usb 7-1: USB disconnect, device number 107 [ 1184.792676][T20662] overlay: Bad value for 'upperdir' [ 1184.903209][T13384] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 1185.032889][T13384] usb 1-1: device descriptor read/64, error -71 [ 1185.273116][T13384] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1185.414658][T13384] usb 1-1: device descriptor read/64, error -71 [ 1185.525753][T13384] usb usb1-port1: attempt power cycle [ 1185.872964][T13384] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1185.893836][T13384] usb 1-1: device descriptor read/8, error -71 [ 1186.072859][ T5674] usb 10-1: reset high-speed USB device number 85 using dummy_hcd [ 1186.134119][T13384] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1186.154958][T13384] usb 1-1: device descriptor read/8, error -71 [ 1186.263881][T13384] usb usb1-port1: unable to enumerate USB device [ 1186.289872][ T5674] usb 10-1: device firmware changed [ 1186.365277][ T5665] usb 10-1: USB disconnect, device number 85 [ 1186.603095][ T5665] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1186.756757][ T5665] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1186.756791][ T5665] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.756811][ T5665] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1186.756866][ T5665] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.758924][ T5665] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1186.758954][ T5665] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1186.758976][ T5665] usb 10-1: Product: syz [ 1186.758992][ T5665] usb 10-1: Manufacturer: syz [ 1186.846208][ T5665] cdc_wdm 10-1:1.0: skipping garbage [ 1186.846232][ T5665] cdc_wdm 10-1:1.0: skipping garbage [ 1186.853496][ T5665] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1186.853518][ T5665] cdc_wdm 10-1:1.0: Unknown control protocol [ 1187.040881][T11007] usb 10-1: USB disconnect, device number 86 [ 1187.512839][T11007] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1187.602850][ T5674] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1187.665996][T11007] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1187.666029][T11007] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.666051][T11007] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1187.666107][T11007] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.669234][T11007] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1187.669266][T11007] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1187.669286][T11007] usb 10-1: Product: syz [ 1187.669301][T11007] usb 10-1: Manufacturer: syz [ 1187.769609][T11007] cdc_wdm 10-1:1.0: skipping garbage [ 1187.769633][T11007] cdc_wdm 10-1:1.0: skipping garbage [ 1187.810557][T11007] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1187.810583][T11007] cdc_wdm 10-1:1.0: Unknown control protocol [ 1187.822861][ T5674] usb 7-1: Using ep0 maxpacket: 32 [ 1187.825916][ T5674] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 1187.825950][ T5674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.891949][ T5674] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1187.965571][T20771] binder: 20769:20771 ioctl 4002f516 200000000000 returned -22 [ 1187.993723][T11007] usb 10-1: USB disconnect, device number 87 [ 1189.159496][T11007] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1189.188227][ T5674] gspca_nw80x: reg_r err -110 [ 1189.188332][ T5674] nw80x 7-1:16.0: probe with driver nw80x failed with error -110 [ 1189.189919][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1189.322833][T11007] usb 10-1: device descriptor read/64, error -32 [ 1189.562889][T11007] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1189.647896][T20793] netlink: 'syz.6.3518': attribute type 20 has an invalid length. [ 1189.702923][T11007] usb 10-1: device descriptor read/64, error -71 [ 1189.780019][T13386] usb 7-1: USB disconnect, device number 108 [ 1189.830038][T11007] usb usb10-port1: attempt power cycle [ 1190.392917][T13386] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1190.523608][T13386] usb 1-1: device descriptor read/64, error -71 [ 1190.592874][T13407] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1190.742943][T13407] usb 7-1: Using ep0 maxpacket: 8 [ 1190.745613][T13407] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1190.745678][T13407] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1190.745703][T13407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1190.745729][T13407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1190.745755][T13407] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1190.745801][T13407] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1190.745827][T13407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.772828][T13386] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1190.921746][T13386] usb 1-1: device descriptor read/64, error -71 [ 1191.023856][T13386] usb usb1-port1: attempt power cycle [ 1191.066023][T13407] usb 7-1: usb_control_msg returned -32 [ 1191.066081][T13407] usbtmc 7-1:16.0: can't read capabilities [ 1191.374815][T13386] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1191.395800][T13386] usb 1-1: device descriptor read/8, error -71 [ 1191.632911][T13386] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1191.655199][T13386] usb 1-1: device descriptor read/8, error -71 [ 1191.763300][T13386] usb usb1-port1: unable to enumerate USB device [ 1192.261411][T20843] tipc: Enabling of bearer rejected, failed to enable media [ 1192.512854][ T5665] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1192.662944][ T5665] usb 10-1: Using ep0 maxpacket: 32 [ 1192.670214][ T5665] usb 10-1: config 0 has an invalid interface number: 3 but max is 1 [ 1192.670241][ T5665] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1192.670259][ T5665] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1192.670278][ T5665] usb 10-1: config 0 has no interface number 0 [ 1192.670308][ T5665] usb 10-1: too many endpoints for config 0 interface 3 altsetting 48: 48, using maximum allowed: 30 [ 1192.670344][ T5665] usb 10-1: config 0 interface 3 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1192.670370][ T5665] usb 10-1: config 0 interface 3 has no altsetting 0 [ 1192.683259][ T5665] usb 10-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1192.683288][ T5665] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1192.683308][ T5665] usb 10-1: SerialNumber: syz [ 1192.694743][ T5665] usb 10-1: config 0 descriptor?? [ 1192.935260][ T5665] usb-storage 10-1:0.3: USB Mass Storage device detected [ 1193.041901][ T5665] usb-storage 10-1:0.3: Quirks match for vid 152d pid 0539: 4000000 [ 1193.352542][ T5665] usb 10-1: USB disconnect, device number 91 [ 1193.404398][ T821] usb 7-1: USB disconnect, device number 109 [ 1193.684941][T20887] netlink: 774 bytes leftover after parsing attributes in process `syz.9.3532'. [ 1193.952848][ T821] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1194.131150][ T821] usb 7-1: config 1 has an invalid interface number: 82 but max is 0 [ 1194.131180][ T821] usb 7-1: config 1 has no interface number 0 [ 1194.131213][ T821] usb 7-1: config 1 interface 82 has no altsetting 0 [ 1194.159858][ T821] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 1194.159892][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.159912][ T821] usb 7-1: Product: syz [ 1194.159924][ T821] usb 7-1: Manufacturer: syz [ 1194.159936][ T821] usb 7-1: SerialNumber: syz [ 1194.812909][T13384] usb 1-1: new low-speed USB device number 103 using dummy_hcd [ 1194.966770][T13384] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1194.969532][T13384] usb 1-1: config 172 has an invalid interface number: 190 but max is 1 [ 1194.969562][T13384] usb 1-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.969583][T13384] usb 1-1: config 172 has no interface number 1 [ 1194.969652][T13384] usb 1-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1194.969674][T13384] usb 1-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1195.037015][T13384] usb 1-1: string descriptor 0 read error: -22 [ 1195.037177][T13384] usb 1-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be [ 1195.037205][T13384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.170245][T13384] gspca_main: finepix-2.14.0 probing 04cb:0127 [ 1195.709748][ T5674] usb 1-1: USB disconnect, device number 103 [ 1196.666387][ T821] hub 7-1:1.82: bad descriptor, ignoring hub [ 1196.666432][ T821] hub 7-1:1.82: probe with driver hub failed with error -5 [ 1196.668353][ T821] sierra 7-1:1.82: Sierra USB modem converter detected [ 1196.717173][ T821] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1196.813017][ T821] usb 7-1: USB disconnect, device number 110 [ 1196.849296][ T821] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1196.852026][ T821] sierra 7-1:1.82: device disconnected [ 1197.432958][ T821] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1197.542036][T20969] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1197.562845][ T821] usb 7-1: device descriptor read/64, error -71 [ 1197.834432][ T821] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1197.965031][ T821] usb 7-1: device descriptor read/64, error -71 [ 1197.983156][T20978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.983887][T20978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.001664][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.002339][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.013048][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.040905][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.048823][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.052066][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.065007][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.069867][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.093662][ T821] usb usb7-port1: attempt power cycle [ 1198.242843][ T5674] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1198.372867][ T5674] usb 10-1: device descriptor read/64, error -71 [ 1198.462857][ T821] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1198.484192][ T821] usb 7-1: device descriptor read/8, error -71 [ 1198.613083][ T5674] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1198.732933][ T821] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1198.756736][ T5674] usb 10-1: device descriptor read/64, error -71 [ 1198.774426][ T821] usb 7-1: device descriptor read/8, error -71 [ 1198.813371][T20990] MPI: mpi too large (107144 bits) [ 1198.877355][ T5674] usb usb10-port1: attempt power cycle [ 1198.883312][ T821] usb usb7-port1: unable to enumerate USB device [ 1199.052850][T13384] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1199.182929][T13384] usb 1-1: device descriptor read/64, error -71 [ 1199.253218][ T5674] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1199.289794][ T5674] usb 10-1: device descriptor read/8, error -71 [ 1199.424347][T13384] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1199.523521][ T5674] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1199.546644][ T5674] usb 10-1: device descriptor read/8, error -71 [ 1199.582955][T13384] usb 1-1: device descriptor read/64, error -71 [ 1199.667059][ T5674] usb usb10-port1: unable to enumerate USB device [ 1199.696896][T13384] usb usb1-port1: attempt power cycle [ 1200.045632][T13384] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1200.075100][T13384] usb 1-1: device descriptor read/8, error -71 [ 1200.315010][T13384] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1200.341096][T13384] usb 1-1: device descriptor read/8, error -71 [ 1200.446297][T13384] usb usb1-port1: unable to enumerate USB device [ 1200.779264][T21010] netlink: 'syz.6.3548': attribute type 10 has an invalid length. [ 1203.216361][ T5674] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1203.489172][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.489212][ T5674] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.489254][ T5674] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1203.489279][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.522838][ T821] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1203.548084][ T5674] usb 1-1: config 0 descriptor?? [ 1203.670702][ T821] usb 10-1: device descriptor read/64, error -71 [ 1203.857033][T21069] program syz.6.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.922875][ T821] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1204.062891][ T821] usb 10-1: device descriptor read/64, error -71 [ 1204.185890][ T5674] usbhid 1-1:0.0: can't add hid device: -71 [ 1204.186030][ T5674] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1204.199616][ T5674] usb 1-1: USB disconnect, device number 108 [ 1204.217434][ T821] usb usb10-port1: attempt power cycle [ 1204.572986][ T821] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1204.593981][ T821] usb 10-1: device descriptor read/8, error -71 [ 1204.842880][ T821] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1204.874624][ T821] usb 10-1: device descriptor read/8, error -71 [ 1204.985159][ T821] usb usb10-port1: unable to enumerate USB device [ 1205.032866][T13401] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1205.182853][T13401] usb 1-1: Using ep0 maxpacket: 32 [ 1205.185801][T13401] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1205.185839][T13401] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1205.185884][T13401] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 1205.185907][T13401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.293071][T13401] usb 1-1: config 0 descriptor?? [ 1205.517225][T13401] hid (null): bogus close delimiter [ 1205.602162][T13401] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0035/input/input54 [ 1205.846251][T21103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.002315][T21103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.074840][T21109] netlink: 'syz.7.3544': attribute type 5 has an invalid length. [ 1206.169181][T13401] uclogic 0003:28BD:0933.0035: input,hidraw0: USB HID v0.09 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0 [ 1206.599677][T11007] usb 1-1: USB disconnect, device number 109 [ 1206.938193][T13386] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1207.084397][T13386] usb 10-1: Using ep0 maxpacket: 16 [ 1207.090489][T13386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.090524][T13386] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.090546][T13386] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1207.090590][T13386] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1207.090615][T13386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.106762][T13386] usb 10-1: config 0 descriptor?? [ 1207.122878][T13384] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 1207.126639][T13386] usbhid 10-1:0.0: fixing wrong optional hid class descriptors count [ 1207.126661][T13386] usbhid 10-1:0.0: can't add hid device: -22 [ 1207.126783][T13386] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 1207.256278][T13384] usb 7-1: device descriptor read/64, error -71 [ 1207.310314][T13386] usb 10-1: USB disconnect, device number 100 [ 1207.492961][T13384] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1207.629549][T13384] usb 7-1: device descriptor read/64, error -71 [ 1207.737916][T13384] usb usb7-port1: attempt power cycle [ 1208.105263][T13384] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1208.123928][T13384] usb 7-1: device descriptor read/8, error -71 [ 1208.263039][ T5665] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1208.380984][T13384] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1208.409278][T13384] usb 7-1: device descriptor read/8, error -71 [ 1208.417065][ T5665] usb 10-1: Using ep0 maxpacket: 16 [ 1208.419425][ T5665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.419453][ T5665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.419475][ T5665] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1208.419515][ T5665] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1208.419537][ T5665] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.434725][ T5665] usb 10-1: config 0 descriptor?? [ 1208.513508][T13384] usb usb7-port1: unable to enumerate USB device [ 1208.859257][ T5665] HID 045e:07da: Invalid code 65791 type 1 [ 1208.880705][ T5665] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0036/input/input55 [ 1208.947729][ T5665] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1208.970747][T11007] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1209.157212][T11007] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1209.157262][T11007] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 1209.161037][T11007] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1209.161161][T11007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.161185][T11007] usb 1-1: Product: syz [ 1209.161201][T11007] usb 1-1: Manufacturer: syz [ 1209.161223][T11007] usb 1-1: SerialNumber: syz [ 1209.223924][T13384] usb 10-1: USB disconnect, device number 101 [ 1209.494399][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.499153][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.555561][T21189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.560105][T21189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.718368][T11007] usb 1-1: USB disconnect, device number 110 [ 1209.916418][T10265] udevd[10265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.196987][T21262] netlink: 'syz.6.3572': attribute type 4 has an invalid length. [ 1210.927297][T21281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1210.927830][T21281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1211.173558][ T5665] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1211.334123][ T5665] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1211.334159][ T5665] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.341659][ T5665] usb 10-1: config 0 descriptor?? [ 1211.372283][ T5665] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1211.463424][T13401] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 1211.620225][T13401] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1211.620946][T13401] usb 7-1: not running at top speed; connect to a high speed hub [ 1211.640364][T13401] usb 7-1: config 1 has an invalid interface number: 224 but max is 0 [ 1211.640396][T13401] usb 7-1: config 1 has no interface number 0 [ 1211.640431][T13401] usb 7-1: config 1 interface 224 has no altsetting 0 [ 1211.671445][T13401] usb 7-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=d8.93 [ 1211.671553][T13401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.671576][T13401] usb 7-1: Product: syz [ 1211.671592][T13401] usb 7-1: Manufacturer: syz [ 1211.671607][T13401] usb 7-1: SerialNumber: syz [ 1211.755853][ T5665] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1211.763630][T13386] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1211.905297][T21291] netlink: 'syz.6.3576': attribute type 1 has an invalid length. [ 1211.915964][T13386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1211.916003][T13386] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.916125][T13386] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1211.916151][T13386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.958667][T13401] cdc_ether 7-1:1.224: bad CDC descriptors [ 1212.019240][T13386] usb 1-1: config 0 descriptor?? [ 1212.021706][T13401] option 7-1:1.224: GSM modem (1-port) converter detected [ 1212.242028][T13401] usb 7-1: USB disconnect, device number 119 [ 1212.264354][T13401] option 7-1:1.224: device disconnected [ 1212.736797][T13386] hid_parser_main: 31 callbacks suppressed [ 1212.736828][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.736861][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.736953][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.736979][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737005][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737133][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737160][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737185][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737449][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.737477][T13386] sunplus 0003:04FC:05D8.0037: unknown main item tag 0x0 [ 1212.853239][T13386] sunplus 0003:04FC:05D8.0037: hidraw0: USB HID v7f.fe Device [HID 04fc:05d8] on usb-dummy_hcd.0-1/input0 [ 1212.977161][T21301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.983145][T21301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.273995][ T5860] usb 1-1: USB disconnect, device number 111 [ 1213.376992][T21344] fido_id[21344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1213.386537][ T5665] gspca_cpia1: usb_control_msg 02, error -110 [ 1213.386975][ T5665] gspca_cpia1: usb_control_msg 05, error -32 [ 1213.387370][ T5665] gspca_cpia1: usb_control_msg 05, error -32 [ 1213.387771][ T5665] gspca_cpia1: usb_control_msg 05, error -32 [ 1213.388162][ T5665] gspca_cpia1: usb_control_msg 05, error -32 [ 1213.388175][ T5665] cpia1 10-1:0.0: unexpected systemstate: 00 [ 1213.794004][ T5665] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 1213.834506][T13401] usb 10-1: USB disconnect, device number 102 [ 1213.969605][ T5665] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1213.969639][ T5665] usb 7-1: config 0 has no interface number 0 [ 1213.969697][ T5665] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1213.969725][ T5665] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1213.969753][ T5665] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1213.971615][ T5665] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1213.971644][ T5665] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1213.971674][ T5665] usb 7-1: Product: syz [ 1213.971690][ T5665] usb 7-1: SerialNumber: syz [ 1213.995544][ T5665] usb 7-1: config 0 descriptor?? [ 1214.021046][ T5665] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1214.043735][ T38] audit: type=1326 audit(1217.528:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21374 comm="syz.0.3584" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6da67ce59 code=0x0 [ 1214.053045][ T5665] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input56 [ 1214.409242][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.413316][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.413574][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.413813][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.414051][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.414290][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.414547][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.414793][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.415033][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.415284][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1214.485217][ T5665] usb 7-1: USB disconnect, device number 120 [ 1214.485332][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1214.681847][ T5665] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1215.192236][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1215.243328][T21408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1216.383041][ T5674] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1216.405207][T21445] SQUASHFS error: Failed to read block 0x0: -5 [ 1216.405268][T21445] unable to read squashfs_super_block [ 1216.528956][T13386] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1216.565949][ T5674] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1216.566845][ T5674] usb 7-1: not running at top speed; connect to a high speed hub [ 1216.568869][ T5674] usb 7-1: config 9 has an invalid interface number: 167 but max is 0 [ 1216.568897][ T5674] usb 7-1: config 9 has no interface number 0 [ 1216.568933][ T5674] usb 7-1: config 9 interface 167 has no altsetting 0 [ 1216.572931][ T5674] usb 7-1: New USB device found, idVendor=1b80, idProduct=e410, bcdDevice=1f.6a [ 1216.572963][ T5674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.572985][ T5674] usb 7-1: Product: syz [ 1216.573001][ T5674] usb 7-1: Manufacturer: syz [ 1216.573017][ T5674] usb 7-1: SerialNumber: syz [ 1216.705276][T13386] usb 10-1: Using ep0 maxpacket: 32 [ 1216.720786][T13386] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1216.720821][T13386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.720844][T13386] usb 10-1: Product: syz [ 1216.720860][T13386] usb 10-1: Manufacturer: syz [ 1216.720875][T13386] usb 10-1: SerialNumber: syz [ 1216.751672][T13386] usb 10-1: config 0 descriptor?? [ 1217.190909][T13386] airspy 10-1:0.0: Board ID: 00 [ 1217.190935][T13386] airspy 10-1:0.0: Firmware version: [ 1217.622591][T13386] airspy 10-1:0.0: usb_control_msg() failed -71 request 0e [ 1217.741386][T13386] airspy 10-1:0.0: Registered as swradio24 [ 1217.741411][T13386] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1217.781766][T13386] usb 10-1: USB disconnect, device number 103 [ 1218.863200][T13386] usb 10-1: new full-speed USB device number 104 using dummy_hcd [ 1219.036995][T13386] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1219.037030][T13386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.037050][T13386] usb 10-1: Product: syz [ 1219.037066][T13386] usb 10-1: Manufacturer: syz [ 1219.037078][T13386] usb 10-1: SerialNumber: syz [ 1219.115556][T13386] usb 10-1: config 0 descriptor?? [ 1219.171801][ T5674] usb 7-1: USB disconnect, device number 121 [ 1219.217620][ T8963] udevd[8963]: setting owner of /dev/bus/usb/007/121 to uid=0, gid=0 failed: No such file or directory [ 1219.529503][T13386] usb 10-1: Firmware version (0.0) predates our first public release. [ 1219.529533][T13386] usb 10-1: Please update to version 0.2 or newer [ 1220.583262][T13386] usb 10-1: USB disconnect, device number 104 [ 1220.912972][ T5674] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1221.063008][ T5674] usb 7-1: Using ep0 maxpacket: 32 [ 1221.073105][ T5674] usb 7-1: config 242 has an invalid interface number: 168 but max is 0 [ 1221.073136][ T5674] usb 7-1: config 242 has no interface number 0 [ 1221.073177][ T5674] usb 7-1: config 242 interface 168 altsetting 8 endpoint 0x8 has an invalid bInterval 64, changing to 7 [ 1221.073199][ T5674] usb 7-1: config 242 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 1221.073219][ T5674] usb 7-1: config 242 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1221.073235][ T5674] usb 7-1: config 242 interface 168 altsetting 8 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1221.073254][ T5674] usb 7-1: config 242 interface 168 has no altsetting 0 [ 1221.092510][ T5674] usb 7-1: New USB device found, idVendor=19d2, idProduct=6cbf, bcdDevice=cf.54 [ 1221.092541][ T5674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.092562][ T5674] usb 7-1: Product: syz [ 1221.092576][ T5674] usb 7-1: Manufacturer: syz [ 1221.092591][ T5674] usb 7-1: SerialNumber: syz [ 1221.467857][ T5674] rndis_host 7-1:242.168: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1221.531019][ T5674] usb 7-1: USB disconnect, device number 122 [ 1222.447111][T11007] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1222.572886][T11007] usb 1-1: device descriptor read/64, error -71 [ 1222.803376][T21678] syzkaller1: entered promiscuous mode [ 1222.803405][T21678] syzkaller1: entered allmulticast mode [ 1222.823102][T11007] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1222.827215][T21678] dlm: no locking on control device [ 1222.953031][T11007] usb 1-1: device descriptor read/64, error -71 [ 1223.135120][T11007] usb usb1-port1: attempt power cycle [ 1223.140514][T13386] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 1223.317063][T13386] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.317130][T13386] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1223.317173][T13386] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1223.318725][T13386] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1223.318753][T13386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1223.318772][T13386] usb 7-1: SerialNumber: syz [ 1223.331040][T13386] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1223.331062][T13386] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 1223.331096][T13386] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 1223.492929][T11007] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1223.513726][T11007] usb 1-1: device descriptor read/8, error -71 [ 1223.601342][T21682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.602108][T21682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.753432][T11007] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1223.782425][T11007] usb 1-1: device descriptor read/8, error -71 [ 1223.884005][T11007] usb usb1-port1: unable to enumerate USB device [ 1224.000090][T12109] bridge_slave_1: left allmulticast mode [ 1224.000133][T12109] bridge_slave_1: left promiscuous mode [ 1224.002486][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.447169][T13386] usb 7-1: USB disconnect, device number 123 [ 1225.045675][T12109] bridge_slave_0: left allmulticast mode [ 1225.045723][T12109] bridge_slave_0: left promiscuous mode [ 1225.046049][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.635751][T21726] netlink: 'syz.6.3614': attribute type 10 has an invalid length. [ 1225.884361][T21730] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1227.810815][T12109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1227.988138][T12109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.077137][T12109] bond0 (unregistering): Released all slaves [ 1228.734071][T12109] tipc: Left network mode [ 1229.138244][T21781] netlink: 'syz.0.3626': attribute type 1 has an invalid length. [ 1229.138269][T21781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1229.612407][T21791] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1230.745413][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3632'. [ 1232.617421][T21821] sit0: entered promiscuous mode [ 1232.721316][T21821] netlink: 'syz.9.3633': attribute type 1 has an invalid length. [ 1232.721343][T21821] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3633'. [ 1233.117847][ T5665] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1233.390231][ T5665] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1233.390265][ T5665] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.390285][ T5665] usb 7-1: Product: syz [ 1233.390300][ T5665] usb 7-1: Manufacturer: syz [ 1233.390314][ T5665] usb 7-1: SerialNumber: syz [ 1233.623739][T21850] comedi comedi4: bad chanlist[0]=0x0000fa0d chan=64013 range length=2 [ 1234.023861][T21825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.027447][T21825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.139186][ T5665] rtl8150 7-1:1.0: couldn't reset the device [ 1234.139613][ T5665] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1234.175005][ T5665] usb 7-1: USB disconnect, device number 124 [ 1234.252884][ T5860] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1234.527727][ T5860] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1234.527762][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.527784][ T5860] usb 1-1: Product: syz [ 1234.527800][ T5860] usb 1-1: Manufacturer: syz [ 1234.527816][ T5860] usb 1-1: SerialNumber: syz [ 1234.548904][ T5860] usb 1-1: config 0 descriptor?? [ 1235.282780][T13386] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1235.483805][T13386] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1235.485521][T13386] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 1235.491176][T13386] usb 10-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1235.491210][T13386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.491239][T13386] usb 10-1: Product: syz [ 1235.491255][T13386] usb 10-1: Manufacturer: syz [ 1235.491269][T13386] usb 10-1: SerialNumber: syz [ 1235.505424][T21875] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1235.990707][T12109] hsr_slave_0: left promiscuous mode [ 1236.024985][T12109] hsr_slave_1: left promiscuous mode [ 1236.026421][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.026450][T12109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.113113][T12109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.113142][T12109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.389339][T12109] veth1_macvtap: left promiscuous mode [ 1236.423108][T12109] veth1_vlan: left promiscuous mode [ 1236.423410][T12109] veth0_vlan: left promiscuous mode [ 1236.680707][T21897] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1236.680707][T21897] program syz.6.3643 not setting count and/or reply_len properly [ 1237.896444][T13386] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.122386][T21928] /dev/sg0: Can't lookup blockdev [ 1238.192611][T21937] vivid-003: ================= START STATUS ================= [ 1238.192635][T21937] vivid-003: Radio HW Seek Mode: Bounded [ 1238.323382][T21937] vivid-003: Radio Programmable HW Seek: false [ 1238.323407][T21937] vivid-003: RDS Rx I/O Mode: Block I/O [ 1238.323420][T21937] vivid-003: Generate RBDS Instead of RDS: false [ 1238.323431][T21937] vivid-003: RDS Reception: true [ 1238.323442][T21937] vivid-003: RDS Program Type: 0 inactive [ 1238.323456][T21937] vivid-003: RDS PS Name: inactive [ 1238.323470][T21937] vivid-003: RDS Radio Text: inactive [ 1238.323482][T21937] vivid-003: RDS Traffic Announcement: false inactive [ 1238.323495][T21937] vivid-003: RDS Traffic Program: false inactive [ 1238.323508][T21937] vivid-003: RDS Music: false inactive [ 1238.323523][T21937] vivid-003: ================== END STATUS ================== [ 1238.437773][T13386] usb 10-1: USB disconnect, device number 105 [ 1238.649040][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1238.692827][T13401] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1238.842888][T13401] usb 7-1: Using ep0 maxpacket: 32 [ 1238.845118][T13401] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1238.861352][T13401] usb 7-1: New USB device found, idVendor=041e, idProduct=041e, bcdDevice=ec.5a [ 1238.861387][T13401] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.861400][T13401] usb 7-1: Product: syz [ 1238.861408][T13401] usb 7-1: Manufacturer: syz [ 1238.861416][T13401] usb 7-1: SerialNumber: syz [ 1238.892837][T13386] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1239.079283][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.079398][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.079935][T13386] usb 10-1: Using ep0 maxpacket: 32 [ 1239.088231][T13386] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.100599][T13386] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1239.100630][T13386] usb 10-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1239.100649][T13386] usb 10-1: Product: syz [ 1239.100718][T13386] usb 10-1: Manufacturer: syz [ 1239.100733][T13386] usb 10-1: SerialNumber: syz [ 1239.245304][T13401] usb 7-1: USB disconnect, device number 125 [ 1239.259497][T13386] usb 10-1: config 0 descriptor?? [ 1239.389493][T13386] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1239.492652][T21928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1239.511534][T21928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1239.564624][T13407] usb 10-1: USB disconnect, device number 106 [ 1239.715239][ T5992] usb 10-1: Failed to submit usb control message: -71 [ 1239.715282][ T5992] usb 10-1: unable to send the bmi data to the device: -71 [ 1239.715302][ T5992] usb 10-1: unable to get target info from device [ 1239.715318][ T5992] usb 10-1: could not get target info (-71) [ 1239.715337][ T5992] usb 10-1: could not probe fw (-71) [ 1240.549020][T12109] team0 (unregistering): Port device team_slave_1 removed [ 1240.639122][T22004] comedi comedi0: 8255: I/O base address not correctly aligned [ 1240.733755][T12109] team0 (unregistering): Port device team_slave_0 removed [ 1241.453067][T13386] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 1241.475271][ T5860] usb 1-1: f81604_read: reg: 100f failed: -EPROTO [ 1241.492229][T22012] erspan0: entered promiscuous mode [ 1241.492256][T22012] erspan0: entered allmulticast mode [ 1241.618173][T13386] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1241.618209][T13386] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1241.618232][T13386] usb 7-1: config 150 has no interface number 0 [ 1241.618282][T13386] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1241.622133][T13386] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1241.622165][T13386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.622187][T13386] usb 7-1: Product: syz [ 1241.622203][T13386] usb 7-1: Manufacturer: syz [ 1241.622218][T13386] usb 7-1: SerialNumber: syz [ 1241.943747][T13386] xr_serial 7-1:150.204: skipping garbage [ 1241.943869][T13386] xr_serial 7-1:150.204: xr_serial converter detected [ 1242.527372][ T5860] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1242.543745][ T5860] usb 1-1: USB disconnect, device number 116 [ 1242.639815][T22050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1242.699803][T13386] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1242.699877][T13386] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1242.740885][T13386] usb 7-1: USB disconnect, device number 126 [ 1242.762562][T13386] xr_serial 7-1:150.204: device disconnected [ 1243.079679][ T5860] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1243.461179][T22083] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1243.461210][T22083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1243.461324][T22083] vhci_hcd vhci_hcd.0: Device attached [ 1243.567141][ T5860] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1243.762822][ T5674] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 1244.011610][T13386] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1244.169414][T13386] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1244.172104][T13386] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1244.172135][T13386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.172157][T13386] usb 7-1: Product: syz [ 1244.172173][T13386] usb 7-1: Manufacturer: syz [ 1244.172189][T13386] usb 7-1: SerialNumber: syz [ 1244.203124][ T5860] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1244.402843][ T5860] usb 1-1: Using ep0 maxpacket: 32 [ 1244.410487][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.410517][ T5860] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1244.416316][ T5860] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.416350][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.416372][ T5860] usb 1-1: Product: syz [ 1244.416384][ T5860] usb 1-1: Manufacturer: syz [ 1244.416397][ T5860] usb 1-1: SerialNumber: syz [ 1244.726859][T13386] usb 7-1: USB disconnect, device number 127 [ 1244.760081][T22088] vhci_hcd: connection closed [ 1244.763712][T12122] vhci_hcd vhci_hcd.0: stop threads [ 1244.763743][T12122] vhci_hcd vhci_hcd.0: release socket [ 1244.763821][T12122] vhci_hcd vhci_hcd.0: disconnect device [ 1244.789776][ T822] usb 1-1: USB disconnect, device number 117 [ 1244.823093][ T5674] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1245.113767][ T8943] udevd[8943]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1245.327543][T22142] syzkaller1: entered promiscuous mode [ 1245.327570][T22142] syzkaller1: entered allmulticast mode [ 1245.689360][T13386] usb 10-1: new full-speed USB device number 107 using dummy_hcd [ 1245.867155][T13386] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1245.867187][T13386] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.878680][T13386] usb 10-1: config 0 descriptor?? [ 1246.114551][T13386] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1246.504955][T13386] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1246.505007][T13386] [drm] Initialized udl on minor 2 [ 1246.511891][T22149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.512602][T22149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.515188][T22149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.518169][T22149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.524028][T22149] netdevsim netdevsim9 netdevsim0: IPsec offload requires 128 bit authentication [ 1246.803073][ T822] usb 1-1: new low-speed USB device number 118 using dummy_hcd [ 1246.955519][ T822] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1246.955550][ T822] usb 1-1: config 0 has no interface number 0 [ 1246.955673][ T822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1246.955704][ T822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1246.955867][ T822] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1246.955894][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.964802][ T822] usb 1-1: config 0 descriptor?? [ 1246.969528][T22183] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1247.010767][ T822] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1247.189596][ T5674] usb 1-1: USB disconnect, device number 118 [ 1247.189683][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1247.424909][T13407] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1247.616793][T13407] usb 7-1: Using ep0 maxpacket: 8 [ 1247.700042][T13407] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1247.700078][T13407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.700100][T13407] usb 7-1: Product: syz [ 1247.700116][T13407] usb 7-1: Manufacturer: syz [ 1247.700132][T13407] usb 7-1: SerialNumber: syz [ 1247.712906][ T5860] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1247.749740][T13407] usb 7-1: config 0 descriptor?? [ 1247.766173][T13407] gspca_main: se401-2.14.0 probing 047d:5003 [ 1247.863006][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 1247.897123][ T5860] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1247.897159][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1247.897241][ T5860] usb 1-1: Product: syz [ 1247.897257][ T5860] usb 1-1: Manufacturer: syz [ 1247.897273][ T5860] usb 1-1: SerialNumber: syz [ 1248.031173][ T5860] usb 1-1: config 0 descriptor?? [ 1248.059415][ T5860] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1248.463825][T13407] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input57 [ 1248.488599][T20702] syz.7.3512 (20702) used greatest stack depth: 15088 bytes left [ 1248.543614][T22149] tipc: Started in network mode [ 1248.543646][T22149] tipc: Node identity 4a2529d43ad9, cluster identity 4711 [ 1248.543964][T22149] tipc: Enabled bearer , priority 0 [ 1248.606883][T22189] tipc: Resetting bearer [ 1248.610075][ T5860] gspca_sn9c2028: read1 error -71 [ 1248.610502][ T5860] gspca_sn9c2028: read1 error -71 [ 1248.610599][ T5860] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1248.761548][ T5860] usb 1-1: USB disconnect, device number 119 [ 1249.246902][ T5860] usb 7-1: USB disconnect, device number 2 [ 1249.365761][T22189] tipc: Disabling bearer [ 1249.852905][ T822] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1250.006904][T13407] tipc: Node number set to 1895573972 [ 1250.042414][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.042454][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.042479][ T822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1250.042588][ T822] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1250.042615][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.118098][ T822] usb 1-1: config 0 descriptor?? [ 1250.163013][T13386] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1250.205767][T13386] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1250.308794][ T32] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1250.340301][T13386] usb 10-1: USB disconnect, device number 107 [ 1250.820487][ T822] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1250.983273][ T5860] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1251.145911][ T5860] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1251.145945][ T5860] usb 7-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 1251.145967][ T5860] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1251.146022][ T5860] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1251.149258][ T5860] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1251.149288][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=219, SerialNumber=0 [ 1251.149310][ T5860] usb 7-1: Product: syz [ 1251.149326][ T5860] usb 7-1: Manufacturer: syz [ 1251.172616][ T5860] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1251.229216][T13386] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1251.327461][ C0] plantronics 0003:047F:FFFF.0038: hid_field_extract() called with n (132) > 32! (ktimers/0) [ 1251.389006][ T32] usb 7-1: USB disconnect, device number 3 [ 1251.401128][T13386] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1251.401158][T13386] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.401178][T13386] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1251.401199][T13386] usb 10-1: config 1 has no interface number 1 [ 1251.401245][T13386] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1251.401284][T13386] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1251.469670][T13386] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1251.469705][T13386] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.469728][T13386] usb 10-1: Product: syz [ 1251.469841][T13386] usb 10-1: Manufacturer: syz [ 1251.469858][T13386] usb 10-1: SerialNumber: syz [ 1251.539300][ T821] usb 1-1: USB disconnect, device number 120 [ 1251.661228][T20704] syz.7.3512 (20704) used greatest stack depth: 13080 bytes left [ 1251.735476][T13386] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1251.735540][T13386] usb 10-1: MIDIStreaming interface descriptor not found [ 1251.846122][T13386] usb 10-1: USB disconnect, device number 108 [ 1251.999975][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.193334][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3683'. [ 1252.658508][T22365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1252.658619][T22365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1252.793159][T22365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1252.817588][T22379] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3689'. [ 1252.858713][T22381] Unsupported ieee802154 address type: 0 [ 1253.675402][T13386] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1253.816011][T22420] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1253.816039][T22420] CIFS mount error: No usable UNC path provided in device string! [ 1253.816039][T22420] [ 1253.821971][T22420] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1253.843488][T13386] usb 7-1: Using ep0 maxpacket: 16 [ 1253.845833][T13386] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.845893][T13386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.845923][T13386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1253.845947][T13386] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1253.845970][T13386] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.847214][T13386] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1253.847242][T13386] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1253.847263][T13386] usb 7-1: Manufacturer: syz [ 1253.853951][T22420] netlink: 'syz.9.3699': attribute type 11 has an invalid length. [ 1253.973886][T13386] usb 7-1: config 0 descriptor?? [ 1254.103315][ T5674] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1254.192246][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1254.276573][ T5674] usb 1-1: Using ep0 maxpacket: 8 [ 1254.285090][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1254.301353][ T5674] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1254.301388][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.301411][ T5674] usb 1-1: Product: syz [ 1254.301427][ T5674] usb 1-1: Manufacturer: syz [ 1254.301443][ T5674] usb 1-1: SerialNumber: syz [ 1254.313511][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1254.318403][ T5674] usb 1-1: config 0 descriptor?? [ 1254.359239][ T5674] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1254.382911][T13386] rc_core: IR keymap rc-hauppauge not found [ 1254.382936][T13386] Registered IR keymap rc-empty [ 1254.383112][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.402846][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.427870][T13386] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1254.447411][T13386] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input60 [ 1254.532408][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.543079][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.564889][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.583568][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.609529][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.630569][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.646124][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.663656][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.669666][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 1254.695400][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.712932][T13386] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1254.766971][T13386] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1254.767068][T13386] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1254.959176][ T5674] gspca_zc3xx: reg_w_i err -71 [ 1255.543071][ T5674] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1255.543285][ T5674] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1255.561561][ T5674] usb 1-1: USB disconnect, device number 121 [ 1256.469381][ T5674] usb 7-1: USB disconnect, device number 4 [ 1256.745482][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 1256.841972][T22489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.906951][T22489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.063033][T13386] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1257.143728][ T822] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1257.214541][T13386] usb 1-1: Using ep0 maxpacket: 16 [ 1257.224966][T13386] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1257.226412][T13386] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.226438][T13386] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1257.229870][T13386] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1257.229902][T13386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.229924][T13386] usb 1-1: Product: syz [ 1257.229939][T13386] usb 1-1: Manufacturer: syz [ 1257.229955][T13386] usb 1-1: SerialNumber: syz [ 1257.315768][ T822] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1257.316050][ T822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.316076][ T822] usb 7-1: Product: syz [ 1257.316091][ T822] usb 7-1: Manufacturer: syz [ 1257.316107][ T822] usb 7-1: SerialNumber: syz [ 1257.399357][ T822] usb 7-1: config 0 descriptor?? [ 1257.428659][ T822] hub 7-1:0.0: bad descriptor, ignoring hub [ 1257.428766][ T822] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1257.609814][ T822] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1257.697711][ T822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1257.698844][ T822] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1257.698968][ T822] usb 7-1: media controller created [ 1257.765368][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.060131][ T822] DVB: Unable to find symbol dib7000p_attach() [ 1258.060150][ T822] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1258.233087][ T822] rc_core: IR keymap rc-dib0700-rc5 not found [ 1258.233113][ T822] Registered IR keymap rc-empty [ 1258.235173][ T822] dvb-usb: could not initialize remote control. [ 1258.235185][ T822] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1258.306078][ T822] usb 7-1: USB disconnect, device number 5 [ 1258.669658][ T822] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1258.822856][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 1259.280204][T22555] binder: 22553:22555 ioctl c018620c 200000000240 returned -22 [ 1259.286602][T22555] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1259.635481][ T38] audit: type=1326 audit(1263.138:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22558 comm="syz.6.3717" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa57395ce59 code=0x0 [ 1259.636638][T22560] loop2: detected capacity change from 0 to 8 [ 1259.664698][T20785] [ 1259.664712][T20785] ====================================================== [ 1259.664721][T20785] WARNING: possible circular locking dependency detected [ 1259.664733][T20785] syzkaller #0 Tainted: G L [ 1259.664745][T20785] ------------------------------------------------------ [ 1259.664752][T20785] kworker/u8:1/20785 is trying to acquire lock: [ 1259.664764][T20785] ffff88802d06bdb0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 1259.664822][T20785] [ 1259.664822][T20785] but task is already holding lock: [ 1259.664829][T20785] ffffc900077f7c40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1259.664875][T20785] [ 1259.664875][T20785] which lock already depends on the new lock. [ 1259.664875][T20785] [ 1259.664881][T20785] [ 1259.664881][T20785] the existing dependency chain (in reverse order) is: [ 1259.664889][T20785] [ 1259.664889][T20785] -> #5 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1259.664914][T20785] process_one_work+0x8d7/0x1630 [ 1259.664938][T20785] worker_thread+0xb49/0x1140 [ 1259.664963][T20785] kthread+0x388/0x470 [ 1259.664980][T20785] ret_from_fork+0x514/0xb70 [ 1259.665000][T20785] ret_from_fork_asm+0x1a/0x30 [ 1259.665021][T20785] [ 1259.665021][T20785] -> #4 ((wq_completion)loop5){+.+.}-{0:0}: [ 1259.665045][T20785] touch_wq_lockdep_map+0xcb/0x180 [ 1259.665061][T20785] __flush_workqueue+0x14b/0x14f0 [ 1259.665077][T20785] drain_workqueue+0xd3/0x390 [ 1259.665094][T20785] lo_release+0x287/0x8f0 [ 1259.665116][T20785] bdev_release+0x541/0x660 [ 1259.665138][T20785] blkdev_release+0x15/0x20 [ 1259.665160][T20785] __fput+0x461/0xa70 [ 1259.665174][T20785] task_work_run+0x1d9/0x270 [ 1259.665193][T20785] exit_to_user_mode_loop+0xf3/0x4d0 [ 1259.665211][T20785] do_syscall_64+0x33e/0x560 [ 1259.665234][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.665252][T20785] [ 1259.665252][T20785] -> #3 (&disk->open_mutex){+.+.}-{4:4}: [ 1259.665277][T20785] mutex_lock_nested+0x5a/0x1d0 [ 1259.665294][T20785] bdev_open+0xe0/0xcc0 [ 1259.665313][T20785] bdev_file_open_by_dev+0x1be/0x240 [ 1259.665335][T20785] swsusp_check+0x56/0x490 [ 1259.665361][T20785] software_resume+0x51/0x4c0 [ 1259.665385][T20785] resume_store+0x333/0x4f0 [ 1259.665401][T20785] kernfs_fop_write_iter+0x3b0/0x540 [ 1259.665425][T20785] vfs_write+0x629/0xba0 [ 1259.665442][T20785] ksys_write+0x156/0x270 [ 1259.665460][T20785] do_syscall_64+0x15f/0x560 [ 1259.665480][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.665496][T20785] [ 1259.665496][T20785] -> #2 (system_transition_mutex){+.+.}-{4:4}: [ 1259.665521][T20785] mutex_lock_nested+0x5a/0x1d0 [ 1259.665537][T20785] lock_system_sleep+0x49/0x70 [ 1259.665555][T20785] disk_store+0xa7/0x500 [ 1259.665570][T20785] kernfs_fop_write_iter+0x3b0/0x540 [ 1259.665592][T20785] vfs_write+0x629/0xba0 [ 1259.665608][T20785] ksys_write+0x156/0x270 [ 1259.665625][T20785] do_syscall_64+0x15f/0x560 [ 1259.665646][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.665663][T20785] [ 1259.665663][T20785] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1259.665686][T20785] mutex_lock_nested+0x5a/0x1d0 [ 1259.665704][T20785] kernfs_seq_start+0x5c/0x420 [ 1259.665728][T20785] seq_read_iter+0x3f8/0xe20 [ 1259.665748][T20785] copy_splice_read+0x605/0xab0 [ 1259.665764][T20785] splice_direct_to_actor+0x483/0xc80 [ 1259.665781][T20785] do_splice_direct+0x19b/0x2a0 [ 1259.665797][T20785] do_sendfile+0x547/0x7e0 [ 1259.665819][T20785] __se_sys_sendfile64+0x144/0x1a0 [ 1259.665840][T20785] do_syscall_64+0x15f/0x560 [ 1259.665862][T20785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.665881][T20785] [ 1259.665881][T20785] -> #0 (&p->lock){+.+.}-{4:4}: [ 1259.665904][T20785] __lock_acquire+0x15a5/0x2d10 [ 1259.665923][T20785] lock_acquire+0x106/0x350 [ 1259.665941][T20785] mutex_lock_nested+0x5a/0x1d0 [ 1259.665956][T20785] seq_read_iter+0xb8/0xe20 [ 1259.665975][T20785] lo_rw_aio+0xc80/0xf00 [ 1259.665994][T20785] loop_process_work+0x92a/0x11b0 [ 1259.666014][T20785] process_one_work+0x98b/0x1630 [ 1259.666039][T20785] worker_thread+0xb49/0x1140 [ 1259.666061][T20785] kthread+0x388/0x470 [ 1259.666078][T20785] ret_from_fork+0x514/0xb70 [ 1259.666096][T20785] ret_from_fork_asm+0x1a/0x30 [ 1259.666116][T20785] [ 1259.666116][T20785] other info that might help us debug this: [ 1259.666116][T20785] [ 1259.666123][T20785] Chain exists of: [ 1259.666123][T20785] &p->lock --> (wq_completion)loop5 --> (work_completion)(&worker->work) [ 1259.666123][T20785] [ 1259.666153][T20785] Possible unsafe locking scenario: [ 1259.666153][T20785] [ 1259.666159][T20785] CPU0 CPU1 [ 1259.666165][T20785] ---- ---- [ 1259.666172][T20785] lock((work_completion)(&worker->work)); [ 1259.666186][T20785] lock((wq_completion)loop5); [ 1259.666201][T20785] lock((work_completion)(&worker->work)); [ 1259.666215][T20785] lock(&p->lock); [ 1259.666227][T20785] [ 1259.666227][T20785] *** DEADLOCK *** [ 1259.666227][T20785] [ 1259.666232][T20785] 2 locks held by kworker/u8:1/20785: [ 1259.666243][T20785] #0: ffff88803cb5c938 ((wq_completion)loop2){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1259.666289][T20785] #1: ffffc900077f7c40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1259.666339][T20785] [ 1259.666339][T20785] stack backtrace: [ 1259.666361][T20785] CPU: 0 UID: 0 PID: 20785 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1259.666386][T20785] Tainted: [L]=SOFTLOCKUP [ 1259.666394][T20785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.666406][T20785] Workqueue: loop2 loop_workfn [ 1259.666427][T20785] Call Trace: [ 1259.666435][T20785] [ 1259.666443][T20785] dump_stack_lvl+0xe8/0x150 [ 1259.666465][T20785] print_circular_bug+0x2e1/0x300 [ 1259.666493][T20785] check_noncircular+0x12e/0x150 [ 1259.666520][T20785] __lock_acquire+0x15a5/0x2d10 [ 1259.666543][T20785] ? ktime_get+0x45/0x220 [ 1259.666559][T20785] ? lock_acquire+0x106/0x350 [ 1259.666580][T20785] ? __bfs+0x153/0x290 [ 1259.666599][T20785] ? __pfx_hlock_conflict+0x10/0x10 [ 1259.666624][T20785] ? seq_read_iter+0xb8/0xe20 [ 1259.666648][T20785] lock_acquire+0x106/0x350 [ 1259.666667][T20785] ? seq_read_iter+0xb8/0xe20 [ 1259.666689][T20785] ? seq_read_iter+0xb8/0xe20 [ 1259.666712][T20785] ? seq_read_iter+0xb8/0xe20 [ 1259.666734][T20785] mutex_lock_nested+0x5a/0x1d0 [ 1259.666750][T20785] ? seq_read_iter+0xb8/0xe20 [ 1259.666773][T20785] seq_read_iter+0xb8/0xe20 [ 1259.666798][T20785] ? __lock_acquire+0x6b5/0x2d10 [ 1259.666820][T20785] ? kernfs_fop_read_iter+0x149/0x6b0 [ 1259.666843][T20785] ? __asan_memset+0x22/0x50 [ 1259.666869][T20785] lo_rw_aio+0xc80/0xf00 [ 1259.666895][T20785] ? __pfx_lo_rw_aio+0x10/0x10 [ 1259.666918][T20785] ? kthread_associate_blkcg+0x490/0x600 [ 1259.666939][T20785] ? rt_spin_unlock+0x160/0x200 [ 1259.666960][T20785] loop_process_work+0x92a/0x11b0 [ 1259.666988][T20785] ? __pfx_loop_process_work+0x10/0x10 [ 1259.667010][T20785] ? add_lock_to_list+0xc7/0x100 [ 1259.667033][T20785] ? lockdep_unlock+0x5d/0xd0 [ 1259.667050][T20785] ? __lock_acquire+0x146e/0x2d10 [ 1259.667078][T20785] ? process_one_work+0x8be/0x1630 [ 1259.667103][T20785] ? process_one_work+0x8be/0x1630 [ 1259.667131][T20785] ? process_one_work+0x8be/0x1630 [ 1259.667154][T20785] process_one_work+0x98b/0x1630 [ 1259.667183][T20785] ? __pfx_process_one_work+0x10/0x10 [ 1259.667206][T20785] ? do_raw_spin_lock+0x12b/0x2f0 [ 1259.667228][T20785] worker_thread+0xb49/0x1140 [ 1259.667258][T20785] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1259.667287][T20785] kthread+0x388/0x470 [ 1259.667306][T20785] ? __pfx_worker_thread+0x10/0x10 [ 1259.667329][T20785] ? __pfx_kthread+0x10/0x10 [ 1259.667355][T20785] ret_from_fork+0x514/0xb70 [ 1259.667376][T20785] ? __pfx_ret_from_fork+0x10/0x10 [ 1259.667396][T20785] ? __switch_to+0xc79/0x1410 [ 1259.667416][T20785] ? __pfx_kthread+0x10/0x10 [ 1259.667437][T20785] ret_from_fork_asm+0x1a/0x30 [ 1259.667464][T20785] [ 1259.910738][T22560] Dev loop2: unable to read RDB block 8 [ 1259.910780][T22560] loop2: unable to read partition table [ 1259.910920][T22560] loop2: partition table beyond EOD, truncated [ 1259.912580][T22560] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1260.511254][T13386] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1260.511297][T13386] cdc_ncm 1-1:1.0: bind() failure [ 1260.532744][T13386] usb 1-1: USB disconnect, device number 122 [ 1263.613091][ T8963] ------------[ cut here ]------------ [ 1263.613110][ T8963] kcov->t != t [ 1263.613119][ T8963] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#1: udevd/8963 [ 1263.613160][ T8963] Modules linked in: [ 1263.613183][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1263.613213][ T8963] Tainted: [L]=SOFTLOCKUP [ 1263.613222][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.613235][ T8963] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1263.613257][ T8963] Code: 90 00 00 00 e8 00 f8 58 00 4c 89 f7 5b 41 5e 41 5f e9 23 bf 5e 00 7c 40 5b 41 5e 41 5f e9 07 12 76 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1263.613277][ T8963] RSP: 0018:ffffc9000684fd20 EFLAGS: 00010206 [ 1263.613295][ T8963] RAX: 7950ba7f17c1fc00 RBX: ffff888026f40000 RCX: 0000000000000000 [ 1263.613311][ T8963] RDX: 0000000000000000 RSI: ffffffff8babe060 RDI: 00000000ffffffff [ 1263.613327][ T8963] RBP: ffffc9000684fe78 R08: 0000000000000000 R09: 0000000000000000 [ 1263.613342][ T8963] R10: dffffc0000000000 R11: fffffbfff1f5be9f R12: dffffc0000000000 [ 1263.613368][ T8963] R13: 0000000000000000 R14: ffff888034b73900 R15: ffff888034b73908 [ 1263.613385][ T8963] FS: 00007f4291234880(0000) GS:ffff888125d94000(0000) knlGS:0000000000000000 [ 1263.613405][ T8963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1263.613420][ T8963] CR2: 00007f42919d7e80 CR3: 0000000035ae4000 CR4: 00000000003526f0 [ 1263.613441][ T8963] Call Trace: [ 1263.613450][ T8963] [ 1263.613465][ T8963] do_exit+0x150/0x22c0 [ 1263.613490][ T8963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1263.613521][ T8963] ? preempt_count_add+0x91/0x190 [ 1263.613551][ T8963] ? __pfx_do_exit+0x10/0x10 [ 1263.613574][ T8963] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1263.613598][ T8963] ? rt_spin_unlock+0x160/0x200 [ 1263.613620][ T8963] do_group_exit+0x21b/0x2d0 [ 1263.613644][ T8963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.613666][ T8963] __x64_sys_exit_group+0x3f/0x40 [ 1263.613692][ T8963] x64_sys_call+0x221a/0x2240 [ 1263.613720][ T8963] do_syscall_64+0x15f/0x560 [ 1263.613749][ T8963] ? trace_irq_disable+0x3b/0x140 [ 1263.613772][ T8963] ? clear_bhb_loop+0x40/0x90 [ 1263.613796][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.613820][ T8963] RIP: 0033:0x7f429136c6c5 [ 1263.613838][ T8963] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1263.613856][ T8963] RSP: 002b:00007ffedfc60348 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1263.613880][ T8963] RAX: ffffffffffffffda RBX: 00005618776cb040 RCX: 00007f429136c6c5 [ 1263.613896][ T8963] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1263.613910][ T8963] RBP: 00005618776a9910 R08: 0000000000000000 R09: 0000000000000000 [ 1263.613924][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.613938][ T8963] R13: 00007ffedfc60390 R14: 0000000000000000 R15: 0000000000000000 [ 1263.613958][ T8963] [ 1263.613970][ T8963] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1263.613990][ T8963] CPU: 1 UID: 0 PID: 8963 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1263.614018][ T8963] Tainted: [L]=SOFTLOCKUP [ 1263.614027][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.614039][ T8963] Call Trace: [ 1263.614048][ T8963] [ 1263.614057][ T8963] vpanic+0x56c/0xa60 [ 1263.614088][ T8963] ? __pfx__printk+0x10/0x10 [ 1263.614110][ T8963] ? __pfx_vpanic+0x10/0x10 [ 1263.614139][ T8963] ? is_bpf_text_address+0x292/0x2b0 [ 1263.614167][ T8963] ? is_bpf_text_address+0x26/0x2b0 [ 1263.614196][ T8963] panic+0xc5/0xd0 [ 1263.614232][ T8963] ? __pfx_panic+0x10/0x10 [ 1263.614264][ T8963] __warn+0x315/0x4c0 [ 1263.614293][ T8963] ? kcov_task_exit+0x181/0x240 [ 1263.614314][ T8963] ? kcov_task_exit+0x181/0x240 [ 1263.614333][ T8963] __report_bug+0x339/0x540 [ 1263.614375][ T8963] ? kcov_task_exit+0x181/0x240 [ 1263.614395][ T8963] ? __pfx___report_bug+0x10/0x10 [ 1263.614425][ T8963] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1263.614460][ T8963] ? rt_spin_lock+0x1e0/0x400 [ 1263.614482][ T8963] ? rcu_is_watching+0x15/0xb0 [ 1263.614510][ T8963] ? lock_acquire+0x5f/0x350 [ 1263.614535][ T8963] ? kcov_task_exit+0x181/0x240 [ 1263.614562][ T8963] report_bug+0x16a/0x220 [ 1263.614591][ T8963] ? kcov_task_exit+0x181/0x240 [ 1263.614609][ T8963] ? kcov_task_exit+0x183/0x240 [ 1263.614627][ T8963] handle_bug+0x9c/0x200 [ 1263.614657][ T8963] exc_invalid_op+0x1a/0x50 [ 1263.614678][ T8963] asm_exc_invalid_op+0x1a/0x20 [ 1263.614706][ T8963] RIP: 0010:kcov_task_exit+0x181/0x240 [ 1263.614728][ T8963] Code: 90 00 00 00 e8 00 f8 58 00 4c 89 f7 5b 41 5e 41 5f e9 23 bf 5e 00 7c 40 5b 41 5e 41 5f e9 07 12 76 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 1263.614747][ T8963] RSP: 0018:ffffc9000684fd20 EFLAGS: 00010206 [ 1263.614773][ T8963] RAX: 7950ba7f17c1fc00 RBX: ffff888026f40000 RCX: 0000000000000000 [ 1263.614789][ T8963] RDX: 0000000000000000 RSI: ffffffff8babe060 RDI: 00000000ffffffff [ 1263.614805][ T8963] RBP: ffffc9000684fe78 R08: 0000000000000000 R09: 0000000000000000 [ 1263.614819][ T8963] R10: dffffc0000000000 R11: fffffbfff1f5be9f R12: dffffc0000000000 [ 1263.614836][ T8963] R13: 0000000000000000 R14: ffff888034b73900 R15: ffff888034b73908 [ 1263.614859][ T8963] do_exit+0x150/0x22c0 [ 1263.614884][ T8963] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1263.614912][ T8963] ? preempt_count_add+0x91/0x190 [ 1263.614934][ T8963] ? __pfx_do_exit+0x10/0x10 [ 1263.614946][ T8963] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1263.614961][ T8963] ? rt_spin_unlock+0x160/0x200 [ 1263.614973][ T8963] do_group_exit+0x21b/0x2d0 [ 1263.614987][ T8963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.614999][ T8963] __x64_sys_exit_group+0x3f/0x40 [ 1263.615012][ T8963] x64_sys_call+0x221a/0x2240 [ 1263.615027][ T8963] do_syscall_64+0x15f/0x560 [ 1263.615043][ T8963] ? trace_irq_disable+0x3b/0x140 [ 1263.615054][ T8963] ? clear_bhb_loop+0x40/0x90 [ 1263.615067][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.615079][ T8963] RIP: 0033:0x7f429136c6c5 [ 1263.615089][ T8963] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 1263.615100][ T8963] RSP: 002b:00007ffedfc60348 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1263.615113][ T8963] RAX: ffffffffffffffda RBX: 00005618776cb040 RCX: 00007f429136c6c5 [ 1263.615122][ T8963] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1263.615130][ T8963] RBP: 00005618776a9910 R08: 0000000000000000 R09: 0000000000000000 [ 1263.615137][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1263.615145][ T8963] R13: 00007ffedfc60390 R14: 0000000000000000 R15: 0000000000000000 [ 1263.615157][ T8963] [ 1263.615688][ T8963] Kernel Offset: disabled