last executing test programs: 11m22.275315962s ago: executing program 3 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x20, 0x25, 0x101, 0x70bd25, 0xfefffffb, {0x8}, [@nested={0xc, 0x138, 0x0, 0x1, [@nested={0x8, 0x25, 0x0, 0x1, [@nested={0x4, 0x85}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c9d3}, 0x28040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000028d18eb4e4ca9771151e07fafb2a0331000000002c00fa00"/47, @ANYRES32, @ANYBLOB="3240ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc10}}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x6d23, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d080)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x7, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 11m21.116857654s ago: executing program 3 (id=392): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x54, &(0x7f0000000200)}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c0002800500010000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = socket$inet6(0xa, 0x7ffff, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000380)={0xd5, 0x0, 0x51}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, 0x0) r6 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xa}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x1220}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) 11m19.091625947s ago: executing program 3 (id=400): syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x10400, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x24, r0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x800) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x4, 0x7fffffffffffffff, 0x4, 0x400, 0xd, 0xfffffffffffffffa, 0x9ec, 0x35741061, 0x10001, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x40049409, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f000000db40)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = syz_io_uring_setup(0x4b7, &(0x7f00000000c0)={0x0, 0x6e83, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xffffffef, 0x0, 0x4) r11 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x17, r12, 0x1, 0x2, 0x6, @remote}, 0x14) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r13 = accept$alg(r7, 0x0, 0x0) recvmmsg(r13, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000980)=""/128, 0x80}, {&(0x7f0000000c00)=""/106, 0x6a}], 0x2}, 0x80000001}], 0x1, 0x10000, 0x0) recvmmsg(r13, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4071, 0xff7}], 0x1}, 0x6}], 0x400000000000294, 0x2101, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES64=r6], 0xf) 11m18.083587489s ago: executing program 3 (id=406): r0 = socket(0x25, 0x4, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xf6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008814) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000180)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000110000104fd25bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 11m17.199913165s ago: executing program 3 (id=408): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) sysfs$1(0x1, &(0x7f00000001c0)='sysfs\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'vlan0\x00', {0x2, 0x0, @loopback}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xbd}]}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c020000130020002abd7000ffdbdf2507000000", @ANYRES32=r4, @ANYBLOB="00000200000400007c003480140035006272696467655f736c6176655f3100001400350065727370616e30000000000000000000140035006d6163766c616e300000000000000000140035006970766c616e300000000000000000001400350064766d72703000000000000000000000140035007663616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="c80116807c0001800c000300b1a200000c0000001000020001000000fe0a0000060000000c000500100000000300000014000a00dd4f00000000000003000000000000000c000300790000000e000000100006000e00000002000000020000000c000400fdffffff0100000014000b00060000000000000006000000000000007c0001800c00040008000000ffffff7f28000100ff010000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000b311013a2800010009000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000100002000a0000007c0700000d0000000c0009000b00000001000000780001800c00050005000000060000001000020004000000220d00008100000010740100000000000180c2000001000000000000000000000000000000000000000000000000000014000b000300000000000000070000000000000010000600090000000b000000040000000c00030009000000f2ffffff400001801000060005000000090000000500000014000b0000f0ffff0000000049000000000000000c00050006000000060000000c000700000400000500000014000180100002000001000072090000"], 0x26c}, 0x1, 0x0, 0x0, 0x200000d8}, 0x0) (async) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x101, 0x7}) (async) syz_clone(0x81020480, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = gettid() r9 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) timer_create(0x7, &(0x7f00000012c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 11m16.970713693s ago: executing program 3 (id=410): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x6d182f4f, 0xd, 0x6, 0xf, 0x71d, 0x0, 0x0, 0x1, 0xffff}}, 0x50) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m16.530366248s ago: executing program 32 (id=410): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x6d182f4f, 0xd, 0x6, 0xf, 0x71d, 0x0, 0x0, 0x1, 0xffff}}, 0x50) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006002000800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r3 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8m26.38330255s ago: executing program 5 (id=1047): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 8m26.253860749s ago: executing program 5 (id=1048): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f) (async) socket(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x2, {}, 0xfd}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001b6000/0x3000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m24.471226687s ago: executing program 5 (id=1054): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000094000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000340000100000600014000170000140000001100010000000000000000000000000a"], 0xd8}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5c, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x22, 0x11, 0xff, @remote, @local, {[], {0xfffd, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e794d9f636841e9a83a802860f9"}}}}}}}, 0x0) 8m22.656310632s ago: executing program 5 (id=1058): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r4, r4, &(0x7f0000000000)=0x2eb4, 0x2000007ff) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_connect(0x4, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0xe7, 0x76, 0x10, 0x110a, 0x1653, 0x5ea7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) syz_usb_disconnect(r0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xbe, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "a7ac9f0fc647353aa2228171eea9fd29e79e6947e925f94e9d8dd5569825a4d9bef24d2fb76595b95ce2cb7f1f7e7ed8d03537838d1d503bc9263b3451a04847", 0x2d}, 0x48, 0xfffffffffffffff9) keyctl$revoke(0x3, r8) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0xc, @sdr={0x47504a50, 0x4}}) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) 8m18.960763986s ago: executing program 5 (id=1071): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents(r2, &(0x7f0000000080)=""/53, 0x35) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x62, 0x0, 0x0, 0x0, 0xfffffffffffffead}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000180)={'veth0_to_team\x00', @ifru_names='veth1_virt_wifi\x00'}) (async) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000180)={'veth0_to_team\x00', @ifru_names='veth1_virt_wifi\x00'}) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$update(0x2, r4, &(0x7f0000000140)="c4", 0x1) (async) keyctl$update(0x2, r4, &(0x7f0000000140)="c4", 0x1) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 8m18.60707159s ago: executing program 5 (id=1073): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007"], 0x110}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c01000000000000506d4837be68dc8a0002ff020000000000000000000000000001ff"], 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffb}], 0x2, 0x10102, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 8m18.316445625s ago: executing program 33 (id=1073): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007"], 0x110}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000102c01000000000000506d4837be68dc8a0002ff020000000000000000000000000001ff"], 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffb}], 0x2, 0x10102, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 12.603345474s ago: executing program 1 (id=2339): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getuid() (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 12.386943637s ago: executing program 1 (id=2341): openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x29e, 0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400}) io_uring_enter(r2, 0x847ba, 0x4c86, 0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x378, 0x218, 0x0, 0x378, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) syz_open_dev$dvb_demux(0x0, 0xfffffffffffffffe, 0x140c3) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f0000000380)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x22, 0x67, {0x67, 0x2, "6454132ef9e8c2dcb958211125249f402618292cb5c4e6419d7ea35998b804690ad4178bb9613bebc6457526873ccf0eee49e4c9f1e48cadda1ccbd2cb006b1218046f4e4041ba80cd2872812f9fa50910b7f57ee55d7efe7cdcf85625cf983ca0886f8dfe"}}, &(0x7f0000000c00)=ANY=[@ANYBLOB="00036400000064031e4c88ed7c1748eb5aeae41d7ee9e0a38f01000000000000006311c4e226d07fa917ea685246315f724206080c198e519efc11648c3dedf7d5b9b4d60d6d84ca891687b372b4f9db797f9c327bef8024cb7c2510afb2fdb2d80d990c081085c348e2282397a4fba48e4074b25ed2708422dcae5ada4224646651ef84a3894c510dcdeefa7a47e83febfd424554ac50ac77cb54409c39c9f068f1e40284347bbf6427a3f4d9ad3d1d605c2a58255798fa67b3affa85"], &(0x7f0000000140)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x4, 0x2d7f}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "347e3b40bf964f5d4950230362c9dc36"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x7, 0x9, "48ca6cd7", "3ca284f5"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xc, 0x7, 0x1, 0x77a7, 0xfff3}}}, &(0x7f0000000b40)={0x84, &(0x7f00000005c0)={0x40, 0xe, 0x73, "89ac82157325eb3b0bbe956d93ab2f539bf2735823c64dfd22e3347408a7f7d3b65ff341f3e10284ad88ae0edb19642a22229f17471c54df9c8e735a4463d05a6db6e82273f15f6b16d39532301ac6ef08e2edd303dd28b03fab04146f8971a7e8e97e1aab20d5bb4b2960d88f1b3f1bae5c1f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x40, 0x10}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000000840)={0x40, 0xb, 0x2, "6efe"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, "aeb1"}, 0x0, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, 0x0, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x5}}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) 9.126882974s ago: executing program 1 (id=2355): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x1a, '\x00', [@generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x200}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000880)={0x21c, 0x28, 0x2, 0x70bd2a, 0x25dfdbfd, {0x1}, [@nested={0xf4, 0x13e, 0x0, 0x1, [@typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x5}, @generic="dda60ef24299e8b852286a4e7a95d398ea9a5d81a3344c115655550dee96a7ee62010763b77dcce763b2af91b59d312fac5f3f52a9581e3803e8b3e1fb957ddfb414e800cd1f6aeb4834eb48f08561da848a0af4aefe9a131b3171a87c9ff41ddaf23f8ca0e20a166aae71d97ba592b669ddcdcaa4ea5568dac94b7818ffb70ac583221ca31e5c5ff6c44bba82264ba9523bb6f80474ee9836e03f3b6992db597f48f86038755460fd45038933baed2c002f1451d390a05e925bd805d593c8be8ed8b163e80312b2f0270ce0c85a314ee01a9c52d1861bd4b303d754ad0b35c093d5a0c3"]}, @typed={0x8, 0xfb, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x60, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000100}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r4, 0x1, 0x1000000, 0x25dfdbff, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0xffffff49}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000080)={0x10000000}) epoll_create1(0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x189e41, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000000)) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) brk(0x55555ede6001) r10 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001880)="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", 0xf91}, {&(0x7f0000000280)}, {&(0x7f0000000600)="7e7166262985ad9c16fa4252771643d9f0f7e9eab11f22b78b0dabc1c8bd06ed3b8f255a9afcbe60a227113d133d294edfa7c631009ab4513c084e86ff8834d300c713b96b9aa990410bef4fc73f469b2964150aca514650f42669d408fb0a23e0ae3f42b272a510e8bacfd2918069ede10a04ad5a20a075374bb22563dddc0bbfd70e0cf3b396cff9de95990d58721f996ac136916414fddd6a39bdf6796791a65c4c90a9049d6c0510599d443a6dac95b58086e405da504ab5e60135c57df3f2084539fe217d9979ea", 0xca}], 0x3, 0x1, 0x8) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 8.235724643s ago: executing program 1 (id=2356): openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x729402, 0x85, 0x20}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r3, 0x8000000000000000, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) syz_usb_connect$cdc_ncm(0x5, 0x109, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x48283fc47f3fd4af, 0x5, 0x0, 0x5, 0x10, 0x8}, 0x92, &(0x7f0000000a40)={0x5, 0xf, 0x92, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0x6, 0xf00, 0x5}, @generic={0x63, 0x10, 0x3, "e00282dd2bc4e1c601003ecd1114e981bb8c8564b9ea53738fac1dc771a892562ff1d8d6a418104801f880c60ded970862cdb244430d007bac88ef62ff172c242e0632590df4478331b7fff77776280495619b325b71fd51b71a9063b9d637b5"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0x4, 0xe2c}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x101, 0xf0f, 0xef, [0xc000, 0xff000f]}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x403}}]}) mmap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000003, 0x20031, 0xffffffffffffffff, 0xa0494000) syz_usb_connect$uac1(0x2, 0x112, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x100, 0x3, 0x1, 0x40, 0xb0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x49}, [@extension_unit={0xb, 0x24, 0x8, 0x5, 0xa, 0xff, "35c5fed6"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x606, 0x3, 0xe, 0x1, 0x10, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x2, 0xf7, 0x81, 0xa, 0x31}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x4, 0x6, [0x2, 0x6, 0x1, 0x7, 0x5, 0x4], 0xff}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x401, 0x5, 0x5, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xd5d2, 0x8, 0x8, "a413"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0xf8, 0x8, 0x0, 0x5}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x36, "0b0fd3", "41f6"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0xa, 0x4b, 'U'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5b, 0x3, 0x1, 0x7f, "ee986ed571a9283256"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0xc, 0x4f, {0x7, 0x25, 0x1, 0x0, 0x18, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xcb1, 0x3, 0x6, "9aad1bfc6499cd"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x9b, 0x0, 0x40}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7, 0x3c, 0x10, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x0, 0x4, 0x40, 0x40, 0x9}, 0x194, &(0x7f0000000500)={0x5, 0xf, 0x194, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x9, 0xf000, 0xffff, [0xc0, 0xfe7fff]}, @generic={0x73, 0x10, 0x1, "b56100e0df12cbcd3a43ccc0c0fac5555d22257c46a27a79239081ce464f9834b9a2043225db0eff2cf16a6a8a8f88c59294e1ad6fbe2ce0d7078ab358a8a3b9505e19237d8795678009b558e9f71889623c3e7b828c3949ce9fe62017d847fa6a3ec51c347ebaededf5abbe92151aa3"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc3, 0x35, 0x56, 0x6, 0x8}, @generic={0xe1, 0x10, 0x3, "5f9dea07928f5c38bcbbf25295e93832348e09fb308f465687d11d70d473bd6c8c69aed0dbcbeeac78bb3dcd98f40ed2ad4d54f3cc8244fe540ec43dc067a66cad63ed95454c4a3d3e4dd282e22acacbc4b12dd5268b097988c9f57648d55dde73adfc71a8bd5556b4a4f15e21c9e6639d80019890816678ba1210cf950452c39e35e7282155bba736b9b724a5c2047632d8c1aa87c5a658e6501172f4ad3518b1996a82508a89c6a4e6e56b639d0bc3dd0e28b4a1766db54278c444e6b1f837ade7a3b5e28fbf7f590baf982b798a9d4ae0d156e6d27d98bc8a3a5f5539"}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x5, 0xf00, 0x7, [0xc0f0, 0x1fe00c0, 0xf, 0x3fff]}]}, 0x4, [{0x6e, &(0x7f00000006c0)=@string={0x6e, 0x3, "aec07ca52c4cebc6d9daae26506cc50dbcb7db18b27269ac846f3366fc9627cec7b49cada6be521fb77544590620d4adbf912f78c341dcd816b71a6e37b842a3f91055dd282846bd2f5fe182b428005d07f9d3db359e8ae8d0ecead6405f273799ed3a993a6bc3ce810698fb"}}, {0x4b, &(0x7f0000000880)=ANY=[@ANYBLOB="4b030372899a44d3e0a43f4a1d2e0620414e9f5b47cde51b8fd070bbe05513c4e702461ac224e7ce202bcc4922731b44cad77779e8bb1e4180e06529ed417837cf6fb3de9c86f4feb5c420"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x1c03}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x340a}}]}) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) 7.65581528s ago: executing program 2 (id=2358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x0, 0x0, 0x1ff}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0xb83, 0x70bd25, 0x25dfdbfc, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x2000, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000030) socket$inet6_udp(0xa, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.445391648s ago: executing program 4 (id=2362): r0 = socket(0xa, 0x3, 0xc7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000640)={0xb5, 0x80000, r0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000880)={0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_delvlan={0x40, 0x71, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x40}}, 0x24004001) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x78, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904"], 0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)}, {&(0x7f0000000680)=""/232, 0xe8}], 0x7, &(0x7f0000000800)=""/25, 0x19}, 0x2000) 5.227490114s ago: executing program 2 (id=2363): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000104c05d5030000000000010902240001000000000904000002030000000921000000012205000905810300f9"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010040), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd2243, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x9e, {0x9e, 0x0, "392fcb90cc69c1bccf8ac241dc292d6e3feda52a4e8e4fbe25f6ac3dfb5a39c510ba63f8f30f823541bebd4c8550995803d1c17319b5ccff035d614e7e6f34a8ec3564d150e7171972b47f0ee728c992dc0901360a4ffed52fd2bc4298555016c5e667e0ee99696583afe882e0a89c1a88a447c83ff8d7877eb05ae44cb5063ff751ffedf9c84dfb1031f6489825bea91150402076951419523a75b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.665690666s ago: executing program 1 (id=2365): bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x186}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, 0x14f}, 0x1c, 0x0}, 0x2606c0c0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='Jm', 0x2}], 0x1}}], 0x1, 0x20048001) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="7f", 0x1, 0x801, 0x0, 0x0) syz_usb_connect(0x0, 0x65b, &(0x7f0000001000)={{0x12, 0x1, 0x310, 0x9b, 0x25, 0x18, 0xff, 0x1bc7, 0x10b1, 0x96e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x649, 0x2, 0x6, 0xd8, 0x0, 0x1, "", [{{0x9, 0x4, 0x5, 0x0, 0xb, 0xff, 0xff, 0x30, 0x48, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0xd, 0xee, 0x7, [@generic={0x41, 0x23, "f68e12b68270c901e42b1f0fda3d2f10d3f3fa7ad4a0e973dfe354b5685785bcde3098ad33ad29529024ba0c241f337be740d64af3581bc6d6c03b26574c09"}, @generic={0xa1, 0xd, "56120b1412264885d04757a20cd0cf3a258cb03cc8471bf53db4c0418768a42bd13089182ee5c7a42a3a85b94502ece7ebf8e585041825ce84006352765352a126b51e5bfacef9934490cadfde988f03451208ea60a53259243e607f7e08864b41c6ddfc659b7eb6d8f925b75e5055d5fbf0e170eaa86cb582bf89ddc2b387f494347b5b97bffa11f49d1a43ff2f569bf11fb0e70c35bdaf7c0fdc9065d839"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1, 0x26, 0x11, [@generic={0xf4, 0x2, "5e783522fc2ad737d64bb33b3ef1c78438031b0f7503b5806854e34c3491dc9a522288538c5ebdca80e359d5153103e64d17201b9baeda7849c289c816e1d907a5e777abd4a8b56e3d74f0f3f200f061e17d6ae450f617145593b01aac231203af58d0fcdbc43e26e9f1e5a7c8d8d86e6cdced9f65a28c0f72afd1cd3580ad2a13ab6602118f4ff6c48a48f5ce376dbd03d76e2b48ef702a3c931b540194e51202c7b18be28ed7d7682be44a5c6e9d1c4c6590c52fe0a16ceae1ef4bdaa175774e6caa138fd09758850fb4422019b79edf96adf3de864a2d08d4ec7155b6a082909be68a0422372449301f7fa8f237ad3d3f"}]}}, {{0x9, 0x5, 0x1, 0x1e, 0x40, 0x90, 0x0, 0xf7}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x8, 0x81, 0x2}}, {{0x9, 0x5, 0x85, 0x1, 0x20, 0xaf, 0xb, 0x3, [@generic={0x93, 0x7, "edf70be9541cc3e959fba8d649700df48dccb77d2994b5679f6eac4cd6965c07f480f28e4b2e113718bfaa50c844581d48afda4fb788f2134a3203a998b5fc794135424687eb490a31cc8857e3c6754ff2c744fc4fcffc8ae223387e3b2e0f3dee134ae26f608dd276154e721bddd7d1fbe9f9a7cffc65090ca982660f0d1ce44470ee8536656e9e1ad3af5beb154d4a33"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x81, 0x59, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf}, @generic={0xcf, 0x30, "8ef0ca235ede01c95176238ec3e66713a600556b81aa96acb0ceba48e115c768d9f24cd34f2bd1b6d345220a70b772c4d1446a5f1287eecd95719ef4d4685e1c0dac213dca885df8566170f82f7f084e2d143d01e3f17b2f4c5f3220b464b752711cf58f3f7ed451afa21e342651eb97413f3829b1fcf5fd1ddaf06251e18bdad8e7c3c631fc47aaac1721519aa97d42a152e28d6fde6bb70debc1585bdef4e0e311ae4a596a8a8161bd5315fc944f4087be904a36efeebfab390515ef3a729b68c74a919d67b8ba90f4c6a0aa"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x3, 0x8, 0x2e}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x3, 0xa, 0x7, [@generic={0x73, 0x30, "0ce0da07a0eeba56eda3fd0b4eefc9dc77861f62aa1e9ed00b334736809e0c0ea7814c22baf7fdccbe2078d74f55e0a4058e07ea9d1909da499f33d6d51d470d157e35c0779a7dcec14dcc559a18c916e15c8da59f50b549b406b307f7c80cedbb885e7228baea960b2ff26bcc5c99f73b"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x6e8}]}}, {{0x9, 0x5, 0x1, 0x11, 0x200, 0x8, 0x7, 0x3, [@generic={0xfd, 0x22, "6447d2abc0c4a7443e5e07c51cc9dea156bf85e2b504a788d5117a1c95d4e60379a1da56cb047263272d7c102292ea0e396a8f66aa26fe4a94ee1b52b117be0d7030866fd61042c70c5e2efd200859df0edcd6060737c36bc487e1e840aebb6341beae83462c5dab9f92da26f22894066cf82fd1f54a92501e5ce45216dc12c1537e1d5789e8d75b257701eb1d80a929145bdbe74a46767b2149bc9dccccf6473b607ca1b219e52fcc87326e4e6765a02da04f96a6103b58dac7c4a14b9fa521ca5e9d60b7c58255cfd050c74b1b06bde63601a93e127fa367f36ad47c2ca9769c2f25721e33538fd8ed76d58da6a76388e1803148280d3291d06b"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x4, 0xa, 0x3, [@generic={0xce, 0x3, "01075352b583ff8ff409dab69d54f57c97ad3475e88402e226c4fdd0abbfb27575787e18d6467496e757a572e3fc36c2c60966daba07d0936458c4a0ad6e84de98a416fdcb96b1413dd95bfef97c5008f94d00a87768133af2fd56399f1e9ee58528c3d8b95c2970e11a62656379ab143f26627de440151a8fc6ea08c45bea117a38b5e8787a3fd95f5b58fb48317bd5c517f2cd91790ca7fef110a68ed35c09be52432aab9d8570edb3dff92a6ebfea70b05411941effc3d32ad71cf30bbe49e8c5dd5f0e50ff1fb685316e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}]}}, {{0x9, 0x4, 0x7f, 0x2, 0x2, 0x15, 0x8b, 0xee, 0x40, [@hid_hid={0x9, 0x21, 0x400, 0x43, 0x1, {0x22, 0x871}}, @hid_hid={0x9, 0x21, 0x577, 0x4, 0x1, {0x22, 0x2f8}}], [{{0x9, 0x5, 0x0, 0x18, 0x200, 0x6, 0x87, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0xe6}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xee, 0xffff}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x200, 0x6, 0x40, 0x81, 0xff, 0x7}, 0x73, &(0x7f00000016c0)={0x5, 0xf, 0x73, 0x5, [@generic={0x7, 0x10, 0x1, "d2abc32f"}, @ss_container_id={0x14, 0x10, 0x4, 0x2f, "6872fc21b9465897769bd8ceee0baad4"}, @generic={0x3e, 0x10, 0x3, "75950df0407cfc55d5aba20900ebdd2c856a19b653c1c1aa16c7643d9613d61e08d63850577d6c468242c11b4d858cfb0098c1103d4fb65d879582"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x5, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x58, 0x2, 0x2}]}, 0x5, [{0x1d, &(0x7f0000001740)=@string={0x1d, 0x3, "df108e62a4c98929100be8e540e8d8600225944b9bead692fc3726"}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x41e}}, {0xb7, &(0x7f0000001840)=@string={0xb7, 0x3, "b5b0a63bd2878ac2fce90786e021a0c1efdda022dcb53492d98539af4d0965129867a9d824086b66821ad30305d02511c9322470733ef7558af90e4114b37e39969d0a016634f22206a128e499338632f6d1f3d3171f877f99fcbf0fe50c7e601267a5b47f14d9051328eeccb59d714e1a384a12e0c181ab1bc61c75d2b4129af133ae5443623cb62e472020299e84abb286c930ee453e3c647aab52df5dfb61edf3377a1386d8cfb3ec2f17086ee8c1181efef7bd"}}]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002600)=""/197, 0xc5, 0x0, 0x0}, &(0x7f0000000100)=0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x6, 0xd01, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0xb5, 0x3a, 0xe6, 0x20, 0xac8, 0x321, 0x13a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcef, 0x3, 0x0, 0x6, 0x70, 0x8, "", [{{0x9, 0x4, 0x4e, 0x4, 0xd, 0x94, 0xd2, 0x1, 0x0, [@generic={0xf1, 0x23, "511e49778b4854b4b3fd0a2dd667ac070a13ffc5fe9517e82d58d6504d6102d355533c6519d86bc585179db7aeae5247af6e8693cc8d281504ec152ab5f81157a53f05d163112a11f90a506d892bf54737841ab5ef1438a1db5a701e335cf8b3f30207f4a9f827e7c94b2a6bf7e3747f645c612ac6ec19b466241eeab0dc9f81b6ad104af5860b70eec3ddc2ae9cc4cd52a679318b2035e3c33fa1862d8881c3525f0a89210c78d6c3d41be718b504674499d81520a1b5cb3d407f0bbc211f999cd310d6f11d70bf84be41986ad0143fb7c7806025147611476b29a3c1ac7d06aae8048c34a57e87df8513e861b63e"}], [{{0x9, 0x5, 0xd, 0x10, 0x8, 0x6, 0x6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x2}]}}, {{0x9, 0x5, 0x9, 0xc, 0x200, 0x4, 0x1, 0x1, [@generic={0x31, 0x21, "0abf476c02cbbf3ce069ef72ac0f727d545b18c3fbe046940b468c60892d0ff9639f34663b6279c53f6d280fd67139"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd5, 0xd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x4, 0x3, 0x1, [@generic={0xe4, 0x22, "47339d5b1236ed24b924929caf4d595b8e06af8d4245adaa748f6d42db3ad7de26d199ffb9594949322c1fa5f65cdf1da362a9f7ac2d581f2e902377a07c606436f61872984179158e2fd7114d0dc481529be7197fa0aab0b78f5e876a42f6f8d1d56d41818c53196435d14148367b3bd869173df66a7a22e66f756ce67102016daae80f0df780fec3618c6ee870ca859e3b77422100afcf0fee2796b0cbbfec165fa1ad6cb1d8791fcff21065b579570791951ded7cd9e6d9295c662cc2c1dfdbacf374e537da7b71fc36f587a3a17c513104f23fac8e20e73dfd55c97f86bb59dc"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x1, 0x0, 0x43, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x3, 0xff}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x0, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x40}, @generic={0x8e, 0x2, "2992ca93961baa2622e5220866255affac67d2d628fa5a7b19e8154294f100c225bee978758809c897a04f4f7b5fa8200d3bcf64751f55eafe36a7eb31c79420e0e2b501595a9921662959332af50d6b3c12b38d5f84552fc7264e2eecfaf693227647443982fe07c9fc559333ec47ecaa6e6f1aff9e7924f22233aa364423012d4d3d212d2fa0bd7a133802"}]}}, {{0x9, 0x5, 0x4, 0x11, 0x400, 0x6, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x800}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0xff, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}, @generic={0x2e, 0x9, "25a5b01c8caafcccb4e362ae78f0a4b086d86f5bcc1a4db40e0adf1234d8e2b65c2f46680481b1ebd195a96a"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0x1, 0x7, [@generic={0x45, 0xe, "db169bb54f342dbf5dca090e356e118d12a7685ea3b9c4404da995b71cf4a11114c9c64c2798fbbb706d864aac86ac198682b97a42a2666cd02a56c20e91dde487e60f"}, @generic={0xc3, 0xc, "a400f0afca8f169f6b42184eaf4494b6c44701c23f843c248164cb4e875b6a0894397abce3260ac536c062d99ac995745e2f842725edd91534f2f2a12e09179bb50d0e560e93a5e9ae09edd0e3c7d6d6cc395dca9803511d70a33607f54e6b82dbc914da4d56104268d45fccc71c9c641b23c150cd9cd8807cbcf8a2cf0647ef0feded8e8f570391346b82bccf75b21bb41ae0105a532758e025c959a6e7480a9a65313406640aeebafebe71fc3605e46741f24ee57b6adc7254251448657d7740"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x2, 0x5, 0xc}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x1, 0xa, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x10, 0x9, 0x2, [@generic={0xbe, 0x30, "fd2b0b81bff66625128f3316f50c8711811fcc9f9f27c366fd0756259cd7732c19c8024a2f843d336363c242f04399dd4ec8a0524c57f1c5cad25f89e4044c0a2bddc7b929805c13799cafd90b75bfa0e60f19ed49fd1f0feb9771f78dd533e0d98c69c48bacd565912dd34a5753f9b3cb9141b58e98f83d0f350b25926dba4a2bc8170fcda6adc2bb0bce3f02d327d1b47a228017f39597f6866f20daf7aa14f567e5376dc28fc37edbefebceefd9aed95716575c31ee11c24f3c2f"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x5df, 0x10, 0xfe, 0x89, [@generic={0xba, 0x8, "4205b08d88dbbf5adc9a223b0a1de7790ca3eb8a269384a36e6aa7089ca9b1b89a45791f9f54319982c636ddd390b0aa83270dd2e323672440561aafd119b9b114bf9adc9fa67c10f135d74fa195ca6391d09415472f9dad10406e549f6558849c508a22493aff8874d50b33fe1694411236d73543de89122596edcf96e69ac0d31e52be149a1ba42e1f2acf7f05ee0b4d91ea15aeb26b121ae0d83d25f4ddf25d24b6ef2a906a9b061f6f8bedd83c724eb4cb1614b37f11"}]}}]}}, {{0x9, 0x4, 0xd6, 0x7, 0x9, 0x6c, 0xa9, 0x6c, 0x8, [], [{{0x9, 0x5, 0x5, 0x1, 0x228, 0xb8, 0x4, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xfd, 0x3, 0xc4, [@generic={0x89, 0xb, "8d40ebc27e19cca080854141cc7d290cb2441812316b5bd05f331bdad7b4a640b1da3dd5c470bae7237c4e408141d06ea6fd8604dee096f0b22324a57fcc58cfabba39e9d2e33441c8899787d8427990598555aa0000efe298e792926c7faae6177a02759cb17c50f595fbe68d52cbb53468d69dd53d9a0426e998c306989831ca441052b521d6"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x4, 0x71, 0x2, [@generic={0x44, 0x21, "8da7e01f9b2a574ecb34b5ffb4f76c86a3a9c6c0aaed687cfd0caa0291c8caa88225523dc955abc8cbdf616413f4d83c817c46456fb27ef169ed31971105abe97d37"}]}}, {{0x9, 0x5, 0x15, 0x10, 0x40, 0x5a, 0x7, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xff80}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7d, 0xf}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}, @generic={0x100, 0xb, "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"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x5, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5b, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0x7f, 0x1, [@generic={0xbc, 0x8, "8b51277b15cf76572ad1a21d97c8b01236af60a6a85638278e75dfe9da6c8de73caf24455aa6a977ac402a3ae976fd6538bec8334cdb7d6202d2eed1b7351f1099ce6ae7c12119da22e92331dcc49e1fb19480f1ec7991ed647e42e4002cf8b3252532982232908148d27a0ff30d884ee3add4c4290780355068bcf3bbf35cb5fb76fd9996118d5d087ad1d56957aba35ffbf9b6363b86fb707196992efa3e73490fc273d7772063d87f7279077036b0a68280b090a74b6119c8"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xc9, 0x2a, 0x80}}]}}, {{0x9, 0x4, 0xd9, 0x3, 0xa, 0xa3, 0xcf, 0x63, 0x2, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x3, 0x1, 0x4, "", '`'}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "fcfbde3877"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x3, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0xd2}, @country_functional={0x8, 0x24, 0x7, 0xfc, 0x7, [0x8001]}, @mbim={0xc, 0x24, 0x1b, 0x389, 0xfff, 0xb, 0x9, 0x6, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x1, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x3, [0x200, 0x8, 0x75c, 0x4, 0xfffb, 0x7]}]}], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x7, 0x8, 0x6, [@generic={0xb1, 0xd, "03bb11e5310679429bfe2de6ae72230772d764a8461e6e4b5432f4e2095d03ac2851500e0023572824ac97ca1b6f9787178f5d41efca1c6bb5f0c0e784fd95c8295e4ed58e1a9903b26577a7b23813cf7654fb741a1f7ce2f0ffdd4249fe08c6eaebdc3cf789224a6a20806e0480ae99874f3e22f07200e0dc0c490480eca0853398e63805b27fa62e4c51b55f273cf38ab8cee3fe12cabc68f9c96414891283191e1d973c70aa6f232cc788aebfa7"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x7f, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x1, 0x6, 0x7, [@generic={0x72, 0x3, "d180bce510445fc8dfdb3d6ba37f6236172f16c3653319a4bc1c08e266c052eb842fd8157ffdf36efc1c0d5e5f32933b8d0531b611cdd18bff8d8f432c1123bf04700ed09a95ff7b119b49945ab0d9c17aef6dcb9b211d4fff15cf8e80649111c425a632c8ee8baa3f6e80bd20db4b8c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x3dd}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0xa, 0x8, 0x9, [@generic={0x3e, 0x21, "91f1799325dc4203505cf5bc996b936d50168bcff23ff9ec088707a48dd43edf8fe8604d3070407fdc8fcd5d8f055149cbcd8d1a6d41b18219d59fd3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x70, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0xd, 0x97, 0x0, [@generic={0xc9, 0x22, "533648c1405f4ce48162442f44673cbe4a6a0182626eee14704df783d7efae0168932d55ebf7ba23c4f3cb79d37ac3b87bb07c7be4a966c9c2690840a0f7e8b27a47708fea8ec78de489583fff2dad8739dcdf1f0c23a3f38c70fa3d8e8dbc2aff1f4d0a8fcfff4d89b6a882350087a85dd07b8d4013c672fec48960cb2b8ec1a97ea94772f992d061dbce59b3f151c4a97181d109a15d5062a8077de56ce1eaee00bb94e63ec4f90cc32be5b860e7dc9af2c6b0f7aedb80c26d23f1c262c8cd7dd7b0f3122895"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xc95}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0x7, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x80, 0x2, 0xf8}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x2, 0x0, 0x3, [@generic={0xca, 0xc, "9fa3add6d793049d401c0983fb0ea22169ac09b6fbaf257a5d4f2cc356c75c44b01de7c999be39e8c939cd2baabd3f29551b0cdb88a548337cd110833519cda0f6740d061cef90f22ee4a224cdc1c285d5ec0ea5d5a566e1e7be483ca5ec3b5b76f467e35fc3fb9db1ed21951878218613852ef35150d53bfa60dddb4cdd2e598ac9276c713c0049cd0466182a72944a5ea695e65f8af2420913e5136fd5b950f8555006515f40280a6d62dfa283b3a122f2d2776d12e03c12777152bfa892df2066864f7170d0e5"}]}}]}}]}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x2, 0xfa, 0x4, 0x10, 0x80}, 0x48, &(0x7f0000000dc0)={0x5, 0xf, 0x48, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x11, 0x0, 0x6, 0x3}, @generic={0x3c, 0x10, 0x3, "df6ae19a0d772d584abfb29f325817904210d8783b36bed8122b200f3fd1ce531e1cad40898c33b195b1495c3dcf70243031ea17961c6b3e51"}]}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x423}}, {0xd2, &(0x7f0000000e80)=@string={0xd2, 0x3, "8219850b477f1ae7f35359018a2b6d1720b46582b15612d2b8aafad30a3b82093babc86b6f6c503c2631fa9ccb755cc60f97d3b90644f076f6c12ee3a5335ad78f84f0a6c2f155a5b3af59dd2594ec5851e05e1899e0e6ebde3b98f8999cf9540b4485588a8efce649bc946293471a82b7be45c614773ebfa988a537c264e0e9460d86c8e6d550faa912eddde102ae3dd9a371e92240afdb72ef0a442a9a7e0f9192ac8fd641f8aa846ccf6e8c4c810f58cfe1e0a2847e713880ceafb7cc0928431c950bf35af8318bcfe1b7285305f3"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x812}}]}) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x7fff) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 4.569462315s ago: executing program 4 (id=2366): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x80000, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0001d6000000e09ca5d7692d862c219f0df9b061e0cb15545c3a9dea03b505c87b76963d6f0d9a89bd1d50106b16f53b348c0a799feccbb71147b7705533df66804957333a91c6c241c144ea5b2370c251e1ab56b3197b204880e1c2e5d42e113dd7ec41f78ebf546b7b4481620d8cd15dc15ecd93d3b36914bdbf3be814f82dbecb6c83df678da10f5a3daa9a8a603625c279ab77be8f1ce70a3f020193511c44dbc1253b09cb142793288157f63f7b996988bac5be843264433437435b3ce0f6e9cfeeb52002786f63da549628ebdc52649e9876cab2ff25494be6"], &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa3b, 0x4, 0xfffffffd, 0x5, 0x1ff, 0x8, 0x2, 0x9, 0x9, 0x2, 0x7ff, 0x3ff}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0xfff}, 0x0}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206010300000000000000000200000014000780080040080006400000012505000100060000000500050002000000050004000000000900020073797a31000000000d0003006c6973743a7365740000000000000000008605cd7a7131c023f05863cd908bc5ff6d988e6e6ae9c1c557934a49e93fea8212833100"], 0x5c}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x9) poll(&(0x7f00000005c0)=[{r4, 0x400}], 0x1, 0x44) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYRESHEX=r3, @ANYRESHEX]) 4.339305098s ago: executing program 0 (id=2367): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000540)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4.266346688s ago: executing program 0 (id=2368): r0 = fsopen(&(0x7f00000000c0)='hostfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x7e) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000070601040000000000000000050000038900020073697a31"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) io_setup(0x42, 0x0) close(r2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 3.571078528s ago: executing program 4 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x88894) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f0000000000)=[{r4, 0x414}], 0x1, 0xb45d) r5 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0)=0xf, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x203}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000000)) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r6, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x80) accept4(r6, 0x0, 0x0, 0x0) 3.533401215s ago: executing program 6 (id=2371): close(0x3) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) close(0x3) 3.393777099s ago: executing program 6 (id=2372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700000000030600000000000000010000721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000000280), 0xb84, 0x100) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x1fd, 0x4, 0xeeee8000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x3}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r3, 0x100000001, 0x300000000, 0x1, 0x5}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) 3.247970573s ago: executing program 2 (id=2373): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) futex(&(0x7f00000002c0)=0x1, 0x2, 0x1, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0x1, 0x2) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) r6 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x20000, 0x0, 0x1d}, &(0x7f0000000000), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000040)={0x0, 0x2, 0xf}, 0x1) 3.225171353s ago: executing program 0 (id=2374): r0 = inotify_init() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000c2a907012bbd7000fedbdf25017c00000400c2800400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) inotify_init() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000c2a907012bbd7000fedbdf25017c00000400c2800400018004000800"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) fsopen(&(0x7f0000000140)='tmpfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 3.12742317s ago: executing program 2 (id=2375): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="24010000160001040000000000000000ac1414aa000000000000000000000000ff0100000000000000000000000000014e210fd100040002020000000c000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000080012000800000000000000000000000000000000000000000040100000000000000000000000000000000000000000000000800000000000000000000060000000004000000000000010000000a000000940000000000000000000000ad04000008001f00000000002400090042d3746c000000000000000000000000100b0000000000000000000001000000"], 0x124}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xdeb8, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2}, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x6, 0x2, 'client0\x00', 0x80000000, "1c69ceebcb373978", "0857ba9395fd09ec639fb71d3eb48042ba915570134f16022c354f7a2fa4a714", 0x0, 0xe}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d00"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) 2.955582239s ago: executing program 0 (id=2376): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x10ab, &(0x7f00000000c0)={0x0, 0x7496, 0x0, 0x1, 0x3b6}, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0/file0/..\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r2, 0x351a, 0x0, 0x0, 0x0, 0x0) 2.95519358s ago: executing program 2 (id=2377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 2.333233015s ago: executing program 6 (id=2378): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000540)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 2.235945052s ago: executing program 6 (id=2379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000a0000000800000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r4, &(0x7f0000000480), 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=@alg={0xe0, 0x10, 0xb83, 0x70bd25, 0x25dfdbfc, {{'drbg_pr_sha512\x00'}, '\x00', '\x00', 0x2000, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000030) socket$inet6_udp(0xa, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 999.549205ms ago: executing program 1 (id=2380): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0) (async) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff4873be528c4f48412ba8", 0x10}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da9884186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66774f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11000000000000", 0xce}], 0x3, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30}], 0x1, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 953.418978ms ago: executing program 4 (id=2381): socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f00000003c0)={0x18, 0x0, {0x3, @local, 'pim6reg\x00'}}, 0x1e) (async) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)="a05a4eea", 0x4}], 0x2, 0x4, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x1b) socket$netlink(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000)=0xfffffffe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 760.090319ms ago: executing program 4 (id=2382): unshare(0x44050400) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524"], 0x0) 569.007919ms ago: executing program 0 (id=2383): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r3, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x2, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002cbd7000000000000a401400fe04ff06"], 0x1c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0xf8, 0xf, 0x4, 0x5, 0x1, 0x2, 0x1, 0xd, 0x8, 0xb5, 0x8, 0x8, 0x81, 0x1}, 0xe) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 223.550304ms ago: executing program 0 (id=2384): r0 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x5, 0x78af, 0xd489ee7e4b2b6318, @local, @remote, 0x708, 0x8, 0x33717988, 0xffffffff}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32, @ANYBLOB="02000000000000000200"/28], 0x50) 216.656407ms ago: executing program 6 (id=2385): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, 0x1011, 0x2220, 0x9, 0x84, 0x82}) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x6, 0x0, r2}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0x13bf000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) 94.991867ms ago: executing program 2 (id=2386): r0 = syz_io_uring_setup(0x553a, &(0x7f0000000000)={0x0, 0x25ec, 0x2, 0x2, 0x195}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_io_uring_setup(0x86c, &(0x7f0000000300)={0x0, 0x7905, 0x2000, 0x3, 0x143, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000400)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xde2, 0xdb9c, 0x9, 0x0, 0x0) 22.724276ms ago: executing program 4 (id=2387): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x5c}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mq_unlink(0x0) sched_getattr(r10, &(0x7f0000000100)={0x38}, 0x38, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) set_mempolicy(0x2, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 6 (id=2388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000042802001c00128009000100626f6e6400000000fbff018007f03d0001040000", @ANYRESHEX=r0], 0x3c}, 0x1, 0x2000000000000000, 0x0, 0x20004000}, 0x4c000) r1 = open(&(0x7f0000000340)='.\x00', 0x80, 0x122) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x1, [0x0], [0x7, 0x0, 0x1000], [0x0, 0x4, 0xfffffff7, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7}) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r9 = memfd_create(&(0x7f0000000100)='\x91\x7f\x00$\x00\x00\x00\x00\x00\xb8\xc9\x84*\xc0\xfeR\x01\x95\xceSc(\xa0\v\xde\x1b\xc4\xda\xb8q\xa2\xff\x15\xa59\x0e\xdf\xed\x00l\xba\x18\x13\x833_\xb8\xc9\xf3C\x88u5\x94\x95\x00yh\x9cE\xd0$)\x8eT\x8e\xe5\x00H\xab\x0e\x01!\x19^\xd8Z\t\x00\xef\xea:\x8c\x19\x833\x15\xc0\xcd\xa8', 0x1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x13, r9, 0x0) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f0000000280)=0x2, 0x4) close(r8) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x149200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fd0f00000000000006990000000000000900000000000000000000000000000005000000000000000800000000000000000000000000000000000000000000000000000000000000020000000000000002000000000000000002000000000000010001000000000004000500"], 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x4080) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r12, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000680)={r15, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020, 0x0, 0x0, 0x2], [0x0, 0x2, 0x1], [0x0, 0x0, 0xfffffffffefffff8, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fb, 0x34325241, 0x0, [r16, 0x0, 0x0, r17], [0x2b8]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000000c0)={r2, 0x2, 0x4, 0x1, 0x2, [r7, r16, r18], [0x3, 0x1, 0x6, 0x1], [0x4f9b, 0x4, 0x2, 0x81], [0xfff, 0x7, 0x0, 0x4]}) kernel console output (not intermixed with test programs): 2001, bcdDevice=70.82 [ 750.206527][T13572] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 750.290428][ T7151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.312398][ T7151] usb 3-1: Product: syz [ 750.362403][ T7151] usb 3-1: Manufacturer: syz [ 750.387958][ T7151] usb 3-1: SerialNumber: syz [ 751.586076][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1945'. [ 752.376843][T13612] loop5: detected capacity change from 0 to 7 [ 752.404716][T11567] Dev loop5: unable to read RDB block 7 [ 752.412210][T11567] loop5: unable to read partition table [ 752.427336][T11567] loop5: partition table beyond EOD, truncated [ 752.442800][T13612] Dev loop5: unable to read RDB block 7 [ 752.489298][T13612] loop5: unable to read partition table [ 752.506520][T13612] loop5: partition table beyond EOD, truncated [ 752.536999][T13612] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 752.742079][ T7151] usb 3-1: USB disconnect, device number 111 [ 752.974541][T13625] kvm: pic: non byte write [ 753.218877][T13633] syzkaller0: entered promiscuous mode [ 753.224736][T13633] syzkaller0: entered allmulticast mode [ 753.372938][T13640] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 753.395357][T13640] bond3: (slave lo): Enslaving as an active interface with an up link [ 753.445153][T13640] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 753.616791][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1959'. [ 753.835915][ T5960] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 754.052332][ T5960] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 754.076336][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.101559][ T5960] usb 2-1: config 0 has no interface number 0 [ 754.129597][ T5960] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.141983][ T5960] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 754.173483][ T5960] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 754.193833][ T5960] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 754.227603][ T5960] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 754.239050][ T5960] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 754.249259][ T5960] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 754.278172][ T5960] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 754.292633][T13655] fuse: Unknown parameter '000000000000000000070x0000000000000008' [ 754.309929][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.321867][ T5960] usb 2-1: config 0 descriptor?? [ 754.334380][T13645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 754.582450][ T5960] usb 2-1: string descriptor 0 read error: -71 [ 754.607100][ T5960] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 754.643143][ T5960] earthmate ttyUSB0: required endpoint is missing [ 754.672647][ T5960] usb 2-1: USB disconnect, device number 113 [ 754.687328][ T5960] cypress_m8 2-1:0.244: device disconnected [ 754.714166][T13664] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 755.274491][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 757.708484][T13679] input: syz1 as /devices/virtual/input/input43 [ 757.746516][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 757.867354][T13668] syz_tun (unregistering): left allmulticast mode [ 757.980456][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 758.070188][T13688] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1974'. [ 758.175933][ T7154] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 758.325859][ T7154] usb 3-1: Using ep0 maxpacket: 32 [ 758.332807][ T7154] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 758.342907][ T7154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.355502][ T7154] usb 3-1: config 0 descriptor?? [ 758.367279][ T7154] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 758.405986][ T7151] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 758.569724][ T7151] usb 2-1: Using ep0 maxpacket: 8 [ 758.570459][T13683] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1972'. [ 758.584637][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 758.596828][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 758.607432][ T7151] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 758.618142][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 758.631090][ T7151] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 758.641940][ T7151] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 758.654921][T13701] bond0: (slave bond_slave_1): Releasing backup interface [ 758.662497][ T7151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.696235][ T7151] usb 2-1: config 0 descriptor?? [ 758.734406][T13697] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 758.813019][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 759.035154][ T797] usb 3-1: USB disconnect, device number 112 [ 759.154934][ T7154] usb 2-1: USB disconnect, device number 114 [ 759.166576][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 759.330944][ T7151] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 759.497837][ T7151] usb 7-1: config 0 has no interfaces? [ 759.508545][ T7151] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 759.528296][ T7151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.538752][ T7151] usb 7-1: Product: syz [ 759.542993][ T7151] usb 7-1: Manufacturer: syz [ 759.548112][ T7151] usb 7-1: SerialNumber: syz [ 759.556992][ T7151] usb 7-1: config 0 descriptor?? [ 760.115925][ T797] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 760.282727][ T797] usb 2-1: not running at top speed; connect to a high speed hub [ 760.294475][ T797] usb 2-1: config 5 has an invalid interface number: 154 but max is 0 [ 760.304072][ T797] usb 2-1: config 5 has no interface number 0 [ 760.314516][ T7151] usb 7-1: USB disconnect, device number 55 [ 760.316814][ T797] usb 2-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 760.402580][ T797] usb 2-1: config 5 interface 154 has no altsetting 0 [ 760.431711][ T797] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 760.441230][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.450492][ T797] usb 2-1: Product: syz [ 760.464061][ T797] usb 2-1: Manufacturer: syz [ 760.848336][ T797] usb 2-1: SerialNumber: syz [ 761.030919][T11619] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 761.217840][T11619] usb 5-1: Using ep0 maxpacket: 16 [ 761.239396][T11619] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 761.256210][T11619] usb 5-1: config 0 has no interface number 0 [ 761.262659][T11619] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.290431][T11619] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.323473][T11619] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 761.375679][T11619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.432169][T11619] usb 5-1: config 0 descriptor?? [ 761.893626][T11619] holtek_mouse 0003:04D9:A081.0028: item fetching failed at offset 5/8 [ 761.908963][T11619] holtek_mouse 0003:04D9:A081.0028: hid parse failed: -22 [ 761.917832][T11619] holtek_mouse 0003:04D9:A081.0028: probe with driver holtek_mouse failed with error -22 [ 762.543773][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1984'. [ 762.931492][ T797] usb 2-1: USB disconnect, device number 115 [ 763.383722][ T7164] usb 5-1: USB disconnect, device number 117 [ 763.981021][T13766] netlink: 'syz.1.1994': attribute type 4 has an invalid length. [ 764.696059][T11619] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 764.974157][T11619] usb 2-1: Using ep0 maxpacket: 16 [ 765.051733][T11619] usb 2-1: config 0 has no interfaces? [ 765.098811][T11619] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 765.146200][T11619] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 765.154387][T11619] usb 2-1: Manufacturer: syz [ 765.157329][ T5960] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 765.218345][T11619] usb 2-1: config 0 descriptor?? [ 765.343138][ T5960] usb 7-1: not running at top speed; connect to a high speed hub [ 765.354315][ T5960] usb 7-1: config 5 has an invalid interface number: 154 but max is 0 [ 765.391267][ T5960] usb 7-1: config 5 has no interface number 0 [ 765.414380][ T5960] usb 7-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 765.456436][ T5960] usb 7-1: config 5 interface 154 has no altsetting 0 [ 765.494439][ T5960] usb 7-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 765.537437][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.582535][ T5960] usb 7-1: Product: syz [ 765.606418][ T5960] usb 7-1: Manufacturer: syz [ 765.663074][ T5960] usb 7-1: SerialNumber: syz [ 766.833315][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 766.833336][ T30] audit: type=1326 audit(1774520107.226:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 766.869278][ T30] audit: type=1326 audit(1774520107.226:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 766.915129][T13801] MPI: mpi too large (113288 bits) [ 766.925109][ T30] audit: type=1326 audit(1774520107.226:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.162204][ T30] audit: type=1326 audit(1774520107.226:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.239028][ T30] audit: type=1326 audit(1774520107.226:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.302393][ T30] audit: type=1326 audit(1774520107.256:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.328519][ T30] audit: type=1326 audit(1774520107.306:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.352866][ T30] audit: type=1326 audit(1774520107.316:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.375516][ T30] audit: type=1326 audit(1774520107.316:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.399794][ T30] audit: type=1326 audit(1774520107.376:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 767.959696][T11619] usb 2-1: USB disconnect, device number 116 [ 768.181819][T13812] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2009'. [ 768.254874][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 768.273327][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 768.321885][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 768.356049][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 768.708752][ T5960] usb 7-1: USB disconnect, device number 56 [ 768.883052][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 768.893075][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2010'. [ 769.849718][T13834] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 769.862281][T13834] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 770.266713][ T7151] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 770.427725][ T7151] usb 5-1: not running at top speed; connect to a high speed hub [ 770.447633][ T7151] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 770.459899][ T7151] usb 5-1: config 95 has no interface number 0 [ 770.479274][ T7151] usb 5-1: config 95 interface 1 has no altsetting 0 [ 770.496762][ T7151] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 770.518474][ T7151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.537631][ T7151] usb 5-1: Product: syz [ 770.550329][ T7151] usb 5-1: Manufacturer: syz [ 770.570725][ T7151] usb 5-1: SerialNumber: syz [ 770.979604][ T7164] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 771.048359][ T7151] usb 5-1: USB disconnect, device number 118 [ 771.340748][T11503] udevd[11503]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.382964][ T7164] usb 7-1: not running at top speed; connect to a high speed hub [ 771.405413][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.514712][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.554553][ T7164] usb 7-1: config 5 has an invalid interface number: 154 but max is 0 [ 771.572311][ T7164] usb 7-1: config 5 has no interface number 0 [ 771.586846][ T7164] usb 7-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 771.633597][ T7164] usb 7-1: config 5 interface 154 has no altsetting 0 [ 771.645896][T11619] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 771.670162][ T7164] usb 7-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 771.680283][ T7164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.688685][ T7164] usb 7-1: Product: syz [ 771.693066][ T7164] usb 7-1: Manufacturer: syz [ 771.709636][ T7164] usb 7-1: SerialNumber: syz [ 771.971890][T11619] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 772.001527][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.022495][T11619] usb 3-1: config 0 descriptor?? [ 773.371282][ T5965] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 773.441898][ T5965] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 773.534209][ T5965] usb 1-1: USB disconnect, device number 113 [ 773.581673][T13890] syzkaller0: entered promiscuous mode [ 773.639311][T13890] syzkaller0: entered allmulticast mode [ 773.926027][ T5965] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 774.120500][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 774.143702][ T5965] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 774.154496][ T5965] usb 1-1: config 0 has no interface number 0 [ 774.222506][ T5965] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.264968][ T5965] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.305893][ T5965] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 774.357537][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.397363][ T5965] usb 1-1: config 0 descriptor?? [ 774.570865][ T7164] usb 7-1: USB disconnect, device number 57 [ 774.636576][T11619] usb 3-1: Cannot set autoneg [ 774.642162][T11619] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 774.782219][T11619] usb 3-1: USB disconnect, device number 113 [ 774.959463][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 774.959488][ T30] audit: type=1800 audit(1774520115.356:643): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2032" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 775.071669][ T5965] holtek_mouse 0003:04D9:A081.0029: item fetching failed at offset 5/8 [ 775.111815][ T5965] holtek_mouse 0003:04D9:A081.0029: hid parse failed: -22 [ 775.127942][ T5965] holtek_mouse 0003:04D9:A081.0029: probe with driver holtek_mouse failed with error -22 [ 776.496002][ T797] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 776.625924][ T797] usb 3-1: device descriptor read/64, error -71 [ 776.966536][ T797] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 777.106535][ T797] usb 3-1: device descriptor read/64, error -71 [ 777.169085][ T5862] usb 1-1: USB disconnect, device number 114 [ 777.226744][ T797] usb usb3-port1: attempt power cycle [ 777.348874][T13925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 777.429818][T13931] netlink: 'syz.4.2040': attribute type 10 has an invalid length. [ 777.438371][T13931] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2040'. [ 777.567097][ T797] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 777.613058][ T797] usb 3-1: device descriptor read/8, error -71 [ 777.661265][T13936] syzkaller0: entered promiscuous mode [ 777.667589][T13936] syzkaller0: entered allmulticast mode [ 777.945841][ T797] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 777.974278][ T797] usb 3-1: device descriptor read/8, error -71 [ 778.016111][ T5862] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 778.096135][ T797] usb usb3-port1: unable to enumerate USB device [ 778.126053][T11619] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 778.168875][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 778.178172][ T5862] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 778.207421][ T5862] usb 2-1: config 0 has no interface number 0 [ 778.215149][ T5862] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 778.235071][T13949] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 778.279507][ T5862] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 778.303951][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.312030][T13950] bond2: (slave gretap1): making interface the new active one [ 778.314811][T13950] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 778.354637][T13950] vlan0: entered allmulticast mode [ 778.361057][T13950] bond2: entered allmulticast mode [ 778.368370][T13950] gretap1: entered allmulticast mode [ 778.368641][T11619] usb 5-1: not running at top speed; connect to a high speed hub [ 778.384235][T13950] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 778.407364][T11619] usb 5-1: config 5 has an invalid interface number: 154 but max is 0 [ 778.422589][ T5862] usb 2-1: Product: syz [ 778.427190][T11619] usb 5-1: config 5 has no interface number 0 [ 778.427249][T11619] usb 5-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 778.427281][T11619] usb 5-1: config 5 interface 154 has no altsetting 0 [ 778.461751][T11619] usb 5-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 778.470735][ T5862] usb 2-1: Manufacturer: syz [ 778.479424][ T5862] usb 2-1: SerialNumber: syz [ 778.497789][T11619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.506467][T11619] usb 5-1: Product: syz [ 778.511135][T11619] usb 5-1: Manufacturer: syz [ 778.517107][T11619] usb 5-1: SerialNumber: syz [ 778.521615][ T5862] usb 2-1: config 0 descriptor?? [ 778.552001][ T5862] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 778.622007][ T5862] em28xx 2-1:0.132: Video interface 132 found: isoc [ 778.997930][ T5862] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 779.039767][T13963] loop3: detected capacity change from 0 to 7 [ 779.060614][ T5862] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 779.072623][T11724] Dev loop3: unable to read RDB block 7 [ 779.078724][ T5862] em28xx 2-1:0.132: board has no eeprom [ 779.084467][T11724] loop3: unable to read partition table [ 779.093782][T11724] loop3: partition table beyond EOD, truncated [ 779.110092][T13963] Dev loop3: unable to read RDB block 7 [ 779.116628][T13963] loop3: unable to read partition table [ 779.127545][T13963] loop3: partition table beyond EOD, truncated [ 779.146209][ T5862] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 779.154305][ T5862] em28xx 2-1:0.132: analog set to isoc mode. [ 779.161119][T13963] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 779.161799][ T797] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 779.252412][ T5960] em28xx 2-1:0.132: Registering V4L2 extension [ 779.360184][ T5862] usb 2-1: USB disconnect, device number 118 [ 779.376833][ T797] usb 7-1: Using ep0 maxpacket: 32 [ 779.385178][ T797] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 779.427916][ T5862] em28xx 2-1:0.132: Disconnecting em28xx [ 779.438898][ T797] usb 7-1: config 0 has no interface number 0 [ 779.445106][ T797] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 779.500182][ T797] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 779.513871][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.556682][ T797] usb 7-1: Product: syz [ 779.573749][ T797] usb 7-1: Manufacturer: syz [ 779.609774][ T797] usb 7-1: SerialNumber: syz [ 779.662437][ T797] usb 7-1: config 0 descriptor?? [ 779.783732][ T5960] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 779.805351][ T5960] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 779.827085][ T5960] em28xx 2-1:0.132: No AC97 audio processor [ 779.844492][ T797] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 779.862812][ T5960] usb 2-1: Decoder not found [ 779.869359][ T5960] em28xx 2-1:0.132: failed to create media graph [ 779.876505][ T5960] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 779.953033][ T5960] em28xx 2-1:0.132: Remote control support is not available for this card. [ 779.980007][ T5862] em28xx 2-1:0.132: Closing input extension [ 780.019197][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'. [ 780.053573][ T5862] em28xx 2-1:0.132: Freeing device [ 780.185377][ T797] usb 7-1: qt2_setup_urbs - submit read urb failed -8 [ 780.215534][ T797] quatech2 7-1:0.51: probe with driver quatech2 failed with error -8 [ 780.450039][T13985] syzkaller0: entered promiscuous mode [ 780.455599][T13985] syzkaller0: entered allmulticast mode [ 780.489912][T13960] netlink: 'syz.6.2048': attribute type 1 has an invalid length. [ 780.886369][T11619] usb 5-1: USB disconnect, device number 119 [ 781.128134][T13991] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2055'. [ 782.216114][T11619] usb 7-1: USB disconnect, device number 58 [ 782.412051][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2065'. [ 782.546188][ T797] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 782.742410][ T797] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 782.774746][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.816333][ T797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.866878][ T797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 783.067296][ T797] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 783.076797][ T797] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 783.108826][ T5862] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 783.126580][ T797] usb 1-1: Manufacturer: syz [ 783.167057][ T797] usb 1-1: config 0 descriptor?? [ 783.287054][ T5862] usb 7-1: not running at top speed; connect to a high speed hub [ 783.308486][ T5862] usb 7-1: config 5 has an invalid interface number: 154 but max is 0 [ 783.326342][ T5862] usb 7-1: config 5 has no interface number 0 [ 783.420202][ T5862] usb 7-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 783.542088][ T797] usbhid 1-1:0.0: can't add hid device: -71 [ 783.548854][ T5862] usb 7-1: config 5 interface 154 has no altsetting 0 [ 783.586676][ T797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 783.614987][ T5862] usb 7-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 783.640335][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.652319][ T797] usb 1-1: USB disconnect, device number 115 [ 783.674955][ T5862] usb 7-1: Product: syz [ 783.702199][ T5862] usb 7-1: Manufacturer: syz [ 783.753857][ T5862] usb 7-1: SerialNumber: syz [ 785.117995][T14052] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 785.127743][T14052] team0: Port device batadv1 added [ 785.468822][T14039] kvm: kvm [14038]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 785.975986][ T7151] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 786.152380][ T5862] usb 7-1: USB disconnect, device number 59 [ 786.165489][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 786.213291][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 786.247333][ T7151] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 786.277985][ T7151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 786.329530][ T7151] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 786.348546][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2077'. [ 786.361805][ T7151] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 786.404239][ T7151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.442769][ T7151] usb 2-1: Product: syz [ 786.449767][ T7151] usb 2-1: Manufacturer: syz [ 786.455565][ T7151] usb 2-1: SerialNumber: syz [ 786.493889][ T7151] usb 2-1: config 0 descriptor?? [ 786.512059][ T7151] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 786.886993][T11619] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 786.894914][ T7164] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 786.963478][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2081'. [ 787.046402][ T7164] usb 1-1: Using ep0 maxpacket: 32 [ 787.053466][ T7164] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 787.062338][ T7164] usb 1-1: config 0 has no interface number 0 [ 787.069132][ T7164] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.128871][T11619] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 787.179864][T11619] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 787.191757][T11619] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 787.208190][ T7164] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.208229][T11619] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 787.227128][ T7164] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 787.227189][ T7164] usb 1-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 787.227216][ T7164] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.260613][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.264305][ T7164] usb 1-1: config 0 descriptor?? [ 787.287855][T14078] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 787.502635][T11619] usb 3-1: string descriptor 0 read error: -71 [ 787.776005][ T7151] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 787.974660][T11619] usb 3-1: USB disconnect, device number 118 [ 787.983099][ T7151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.005542][ T7151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.088100][ T7151] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 788.097690][ T7151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.118136][ T7151] usb 5-1: config 0 descriptor?? [ 788.190559][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.219717][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.244863][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.291298][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.338470][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.370027][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.401922][ T7164] logitech-djreceiver 0003:046D:C537.002A: unknown main item tag 0x0 [ 788.443125][ T7151] usbhid 5-1:0.0: can't add hid device: -71 [ 788.499380][ T7164] logitech-djreceiver 0003:046D:C537.002A: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.0-1/input4 [ 788.570690][ T7151] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 788.594016][ T7151] usb 5-1: USB disconnect, device number 120 [ 788.721102][ T5862] usb 2-1: USB disconnect, device number 119 [ 788.845129][T14102] FAULT_INJECTION: forcing a failure. [ 788.845129][T14102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 788.864042][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.1.2086 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.864079][T14102] Tainted: [L]=SOFTLOCKUP [ 788.864088][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 788.864102][T14102] Call Trace: [ 788.864111][T14102] [ 788.864121][T14102] dump_stack_lvl+0xe8/0x150 [ 788.864169][T14102] should_fail_ex+0x412/0x560 [ 788.864210][T14102] _copy_to_user+0x31/0xb0 [ 788.864313][T14102] simple_read_from_buffer+0xe1/0x170 [ 788.864352][T14102] proc_fail_nth_read+0x1bb/0x230 [ 788.864414][T14102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.864449][T14102] ? rw_verify_area+0x2a6/0x4d0 [ 788.864474][T14102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 788.864507][T14102] vfs_read+0x20c/0xa70 [ 788.864530][T14102] ? fdget_pos+0x246/0x320 [ 788.864554][T14102] ? __pfx___mutex_lock+0x10/0x10 [ 788.864584][T14102] ? __pfx_vfs_read+0x10/0x10 [ 788.864609][T14102] ? __fget_files+0x2a/0x420 [ 788.864646][T14102] ? __fget_files+0x3a0/0x420 [ 788.864678][T14102] ? __fget_files+0x2a/0x420 [ 788.864720][T14102] ksys_read+0x150/0x270 [ 788.864741][T14102] ? kfree+0x1c1/0x630 [ 788.864765][T14102] ? __pfx_ksys_read+0x10/0x10 [ 788.864801][T14102] do_syscall_64+0x14d/0xf80 [ 788.864826][T14102] ? trace_irq_disable+0x3b/0x150 [ 788.864859][T14102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.864882][T14102] ? clear_bhb_loop+0x40/0x90 [ 788.864910][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.864933][T14102] RIP: 0033:0x7f8f4215cfce [ 788.864954][T14102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 788.864973][T14102] RSP: 002b:00007f8f43061fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 788.864997][T14102] RAX: ffffffffffffffda RBX: 00007f8f430626c0 RCX: 00007f8f4215cfce [ 788.865013][T14102] RDX: 000000000000000f RSI: 00007f8f430620a0 RDI: 0000000000000003 [ 788.865027][T14102] RBP: 00007f8f43062090 R08: 0000000000000000 R09: 0000000000000000 [ 788.865041][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.865054][T14102] R13: 00007f8f42416038 R14: 00007f8f42415fa0 R15: 00007f8f4253fa48 [ 788.865089][T14102] [ 789.189860][ T7151] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 789.765405][ T7151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.790223][ T7151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.819890][ T5862] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 789.829374][ T5965] usb 1-1: USB disconnect, device number 116 [ 789.876007][ T7151] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 789.886547][ T7151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.898053][ T7151] usb 5-1: config 0 descriptor?? [ 789.993983][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 790.006647][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 790.016909][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 790.027901][ T5862] usb 2-1: not running at top speed; connect to a high speed hub [ 790.044488][ T5862] usb 2-1: config 5 has an invalid interface number: 154 but max is 0 [ 790.058451][T14110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 790.098740][ T5862] usb 2-1: config 5 has no interface number 0 [ 790.127394][ T5862] usb 2-1: config 5 interface 154 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 790.180856][ T5862] usb 2-1: config 5 interface 154 has no altsetting 0 [ 790.224294][ T5862] usb 2-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=70.82 [ 790.244278][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.287765][ T5862] usb 2-1: Product: syz [ 790.292004][ T5862] usb 2-1: Manufacturer: syz [ 790.310437][ T5862] usb 2-1: SerialNumber: syz [ 790.320901][ T7151] steelseries 0003:1038:12B6.002B: report_id 0 is invalid [ 790.350334][ T7151] steelseries 0003:1038:12B6.002B: item 0 0 1 8 parsing failed [ 790.365575][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'. [ 790.388296][ T7151] steelseries 0003:1038:12B6.002B: probe with driver steelseries failed with error -22 [ 790.519517][ T7151] usb 5-1: USB disconnect, device number 121 [ 790.632104][T14126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.856044][ T5965] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 790.900930][T14126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.017387][ T5965] usb 7-1: device descriptor read/64, error -71 [ 791.345794][ T5965] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 791.356098][ T7151] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 791.496336][ T5965] usb 7-1: device descriptor read/64, error -71 [ 791.502822][ T7151] usb 3-1: device descriptor read/64, error -71 [ 791.638309][ T5965] usb usb7-port1: attempt power cycle [ 791.785951][ T7151] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 791.939553][ T7151] usb 3-1: device descriptor read/64, error -71 [ 791.996485][ T5965] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 792.026607][ T5965] usb 7-1: device descriptor read/8, error -71 [ 792.086704][ T7151] usb usb3-port1: attempt power cycle [ 792.223738][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 792.275828][ T5965] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 792.296751][ T5965] usb 7-1: device descriptor read/8, error -71 [ 792.436956][ T7151] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 792.449333][ T5965] usb usb7-port1: unable to enumerate USB device [ 792.496862][ T7151] usb 3-1: device descriptor read/8, error -71 [ 792.604027][T14146] pimreg1: tun_chr_ioctl cmd 1074025677 [ 792.646202][T14146] pimreg1: linktype set to 1 [ 792.667680][T14148] kernel profiling enabled (shift: 25) [ 792.766288][ T7151] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 792.832021][ T7151] usb 3-1: device descriptor read/8, error -71 [ 792.884014][ T5862] usb 2-1: USB disconnect, device number 120 [ 792.966174][ T7151] usb usb3-port1: unable to enumerate USB device [ 793.491665][T14162] loop8: detected capacity change from 0 to 8 [ 793.616077][T14162] Dev loop8: unable to read RDB block 8 [ 793.635959][T14162] loop8: unable to read partition table [ 793.673734][T14162] loop8: partition table beyond EOD, truncated [ 793.716126][T14162] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 793.744432][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 793.878467][T14171] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2106'. [ 793.890585][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2106'. [ 794.218864][T14183] loop3: detected capacity change from 0 to 7 [ 794.492280][T14183] Dev loop3: unable to read RDB block 7 [ 794.574624][T14183] loop3: unable to read partition table [ 794.636136][ T5965] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 794.659031][T14183] loop3: partition table beyond EOD, truncated [ 794.685984][T14183] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 794.824104][ T5965] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 794.843626][ T5965] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.129722][ T5965] usb 2-1: config 0 has no interface number 0 [ 795.138212][ T5965] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 795.150388][ T5965] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 795.161920][ T5965] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 795.175580][ T5965] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 795.204751][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.215337][ T5965] usb 2-1: config 0 descriptor?? [ 795.297564][ T5965] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 795.416007][ T7164] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 795.568464][ T7164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.579320][ T7164] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 795.609379][ T7164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 795.640320][ T7164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 795.681872][ T7164] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 795.692227][ T7164] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 795.715648][ T7164] usb 3-1: Product: syz [ 795.729234][ T7164] usb 3-1: Manufacturer: syz [ 795.751989][ T7164] usb 3-1: SerialNumber: syz [ 795.787287][ T7164] usb 3-1: config 0 descriptor?? [ 795.806686][T14188] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 795.965849][ T7164] rc_core: IR keymap rc-imon-rsc not found [ 795.984115][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 796.004344][ T7164] Registered IR keymap rc-empty [ 796.070536][ T7164] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 796.116687][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2112'. [ 796.150782][ T7164] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input44 [ 796.285644][T14200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.307289][ T8437] usb 2-1: Failed to submit usb control message: -110 [ 796.330537][ T8437] usb 2-1: unable to send the bmi data to the device: -110 [ 796.383199][ T8437] usb 2-1: unable to get target info from device [ 796.419960][ T8437] usb 2-1: could not get target info (-110) [ 796.454152][ T8437] usb 2-1: could not probe fw (-110) [ 797.069061][ T7164] usb 2-1: USB disconnect, device number 121 [ 797.145834][ T5965] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 797.296564][ T5965] usb 7-1: Using ep0 maxpacket: 32 [ 797.308663][ T5965] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 797.327489][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.336802][ T5965] usb 7-1: config 0 has no interface number 0 [ 797.369498][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.404289][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.416163][ T5862] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 797.445975][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.485266][ T5965] usb 7-1: config 0 has no interface number 0 [ 797.491685][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.530465][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.544995][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.573577][ T5965] usb 7-1: config 0 has no interface number 0 [ 797.589657][ T5862] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 797.600752][ T5862] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 797.606249][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.623558][ T5862] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 797.639198][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.646842][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.661146][ T5862] usb 1-1: Product: syz [ 797.665622][ T5862] usb 1-1: Manufacturer: syz [ 797.671581][ T5862] usb 1-1: SerialNumber: syz [ 797.695301][ T5862] usb 1-1: config 0 descriptor?? [ 797.708790][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.726018][ T5965] usb 7-1: config 0 has no interface number 0 [ 797.740750][ T5862] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 797.744809][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.762038][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2119'. [ 797.816477][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.839300][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 797.848359][T11619] usb 3-1: USB disconnect, device number 123 [ 797.869406][ T5965] usb 7-1: config 0 has no interface number 0 [ 797.875596][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.959127][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 798.002940][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 798.029806][ T5965] usb 7-1: config 0 has no interface number 0 [ 798.036166][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.057085][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 798.086069][T14223] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 798.088780][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 798.092641][T14223] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 798.109316][ T5965] usb 7-1: config 0 has no interface number 0 [ 798.115494][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.154292][T14223] vhci_hcd vhci_hcd.0: Device attached [ 798.164494][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 798.189805][ T5965] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 798.199393][ T5965] usb 7-1: config 0 has no interface number 0 [ 798.215915][ T5965] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 798.238011][ T5965] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 798.259376][ T5965] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 798.274684][ T5965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.301806][ T5965] usb 7-1: Product: syz [ 798.310442][ T5965] usb 7-1: Manufacturer: syz [ 798.315143][ T5965] usb 7-1: SerialNumber: syz [ 798.335943][T11619] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 798.359504][ T5965] usb 7-1: config 0 descriptor?? [ 798.377575][ T5965] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 798.416193][T11619] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 798.581909][ T5965] etas_es58x 7-1:0.2: could not retrieve the product info string [ 798.769944][T14225] vhci_hcd: connection reset by peer [ 798.788782][ T8428] vhci_hcd vhci_hcd.4: stop threads [ 798.794158][ T8428] vhci_hcd vhci_hcd.4: release socket [ 798.823851][ T8428] vhci_hcd vhci_hcd.4: disconnect device [ 798.904446][ T5965] usb 7-1: USB disconnect, device number 64 [ 798.938525][ T5965] etas_es58x 7-1:0.2: Disconnecting syz syz [ 799.110237][ T7164] usb 1-1: USB disconnect, device number 117 [ 799.256064][ T7151] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 799.395846][ T7151] usb 3-1: device descriptor read/64, error -71 [ 799.656154][ T7151] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 799.795940][ T7151] usb 3-1: device descriptor read/64, error -71 [ 799.815884][ T5965] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 799.875453][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 799.923413][ T7151] usb usb3-port1: attempt power cycle [ 799.936084][T14266] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2132'. [ 799.965893][ T5965] usb 5-1: device descriptor read/64, error -71 [ 800.152107][T14272] tipc: Enabling of bearer rejected, already enabled [ 800.226007][ T5965] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 800.280283][ T7151] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 800.347639][ T7151] usb 3-1: device descriptor read/8, error -71 [ 800.363198][T14275] bond4: Removing last ns target with arp_interval on [ 800.388759][T14275] tipc: Started in network mode [ 800.394810][T14275] tipc: Node identity da269b66fa26, cluster identity 4711 [ 800.402451][T14275] tipc: Enabled bearer , priority 0 [ 800.475915][ T5965] usb 5-1: device descriptor read/64, error -71 [ 800.642398][ T5965] usb usb5-port1: attempt power cycle [ 800.656019][ T7151] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 800.698753][ T7151] usb 3-1: device descriptor read/8, error -71 [ 801.010606][ T7151] usb usb3-port1: unable to enumerate USB device [ 801.068461][ T5965] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 801.103056][ T5965] usb 5-1: device descriptor read/8, error -71 [ 801.348447][T14289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.369604][ T5965] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 801.381837][T14269] tipc: Disabling bearer [ 801.398558][T14289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.421125][ T5965] usb 5-1: device descriptor read/8, error -71 [ 801.577336][ T7151] tipc: Node number set to 536910694 [ 801.596005][ T7164] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 801.656796][ T5965] usb usb5-port1: unable to enumerate USB device [ 802.268859][T14305] netlink: 'syz.1.2142': attribute type 1 has an invalid length. [ 802.281857][T14305] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 802.414610][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 802.516152][ T5965] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 802.576359][ T7164] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 802.706118][ T5965] usb 3-1: Invalid ep0 maxpacket: 64 [ 802.716244][ T7164] usb 1-1: device descriptor read/64, error -71 [ 802.840678][ T7164] usb usb1-port1: attempt power cycle [ 802.866686][ T5965] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 803.042888][T14329] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 803.165836][ T5965] usb 3-1: Invalid ep0 maxpacket: 64 [ 803.411947][ T5965] usb usb3-port1: attempt power cycle [ 803.563884][T11619] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 803.689518][ T7164] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 803.736628][ T7164] usb 1-1: device descriptor read/8, error -71 [ 803.845850][ T5965] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 803.867024][ T5965] usb 3-1: Invalid ep0 maxpacket: 64 [ 803.975920][ T7164] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 803.996054][ T5965] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 804.010884][ T7164] usb 1-1: device descriptor read/8, error -71 [ 804.036973][ T5965] usb 3-1: Invalid ep0 maxpacket: 64 [ 804.042849][ T5965] usb usb3-port1: unable to enumerate USB device [ 804.063522][T14336] netlink: 'syz.4.2150': attribute type 11 has an invalid length. [ 804.136467][ T7164] usb usb1-port1: unable to enumerate USB device [ 804.405916][ T7151] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 804.419947][T14342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2151'. [ 804.430522][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2151'. [ 804.439839][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 804.485942][ T7164] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 804.588681][ T7151] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 804.605779][ T7151] usb 5-1: config 160 has no interface number 0 [ 804.612225][ T7151] usb 5-1: config 160 interface 200 has no altsetting 0 [ 804.625944][ T7164] usb 1-1: device descriptor read/64, error -71 [ 804.638465][ T7151] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 804.647715][ T7151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.665772][ T7151] usb 5-1: Product: syz [ 804.670033][ T7151] usb 5-1: Manufacturer: syz [ 804.674757][ T7151] usb 5-1: SerialNumber: syz [ 804.865884][ T7164] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 804.909819][ T7151] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.918079][ T7151] usb 5-1: MIDIStreaming interface descriptor not found [ 804.998190][ T7164] usb 1-1: device descriptor read/64, error -71 [ 805.016085][ T7151] usb 5-1: USB disconnect, device number 126 [ 805.106936][ T7164] usb usb1-port1: attempt power cycle [ 805.283148][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2154'. [ 805.551806][ T30] audit: type=1326 audit(1774520145.946:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14355 comm="syz.2.2155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f480079c799 code=0x0 [ 805.945886][ T7164] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 805.975104][ T7164] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 805.986822][ T7164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.999298][ T7164] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.009705][ T7164] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 806.026382][ T7164] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 806.037997][ T7164] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 806.048382][ T7164] usb 1-1: Manufacturer: syz [ 806.070629][ T7164] usb 1-1: config 0 descriptor?? [ 806.106565][T14381] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20004 [ 806.493214][ T7164] appleir 0003:05AC:8243.002C: item fetching failed at offset 0/1 [ 806.510561][ T7164] appleir 0003:05AC:8243.002C: parse failed [ 806.519742][ T7164] appleir 0003:05AC:8243.002C: probe with driver appleir failed with error -22 [ 806.694069][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.709459][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.046313][ T7164] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 807.205845][ T7164] usb 7-1: Using ep0 maxpacket: 32 [ 807.214023][ T7164] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 536 [ 807.224863][ T7164] usb 7-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 807.248906][ T7164] usb 7-1: config 1 interface 0 has no altsetting 0 [ 807.268642][ T7164] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.278470][ T7164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.295884][ T7164] usb 7-1: Product: syz [ 807.306209][ T7164] usb 7-1: Manufacturer: ည [ 807.316345][ T7164] usb 7-1: SerialNumber: syz [ 807.336790][T14395] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 807.351801][T14395] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 807.696009][ T5960] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 807.793793][ T7164] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 807.834793][ T7164] usb 7-1: USB disconnect, device number 66 [ 807.845896][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 807.882356][ T5960] usb 5-1: config 0 has an invalid interface number: 139 but max is -1 [ 807.909896][ T5960] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 807.937358][ T5960] usb 5-1: config 0 has no interface number 0 [ 807.952232][ T5960] usb 5-1: config 0 interface 139 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 808.004340][ T5960] usb 5-1: New USB device found, idVendor=eb1a, idProduct=50a6, bcdDevice=57.eb [ 808.027913][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.064802][ T5960] usb 5-1: Product: syz [ 808.082933][ T5960] usb 5-1: Manufacturer: syz [ 808.096287][ T5960] usb 5-1: SerialNumber: syz [ 808.150718][ T5960] usb 5-1: config 0 descriptor?? [ 808.166715][T14403] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 808.188035][ T5960] em28xx 5-1:0.139: New device syz syz @ 480 Mbps (eb1a:50a6, interface 139, class 139) [ 808.274021][ T5960] em28xx 5-1:0.139: Video interface 139 found: bulk [ 808.446243][ T5960] em28xx 5-1:0.139: unknown em28xx chip ID (0) [ 808.512714][ T5960] em28xx 5-1:0.139: reading from i2c device at 0xa0 failed (error=-5) [ 808.532980][ T5960] em28xx 5-1:0.139: board has no eeprom [ 808.606470][ T7164] usb 1-1: USB disconnect, device number 124 [ 808.617973][ T5960] em28xx 5-1:0.139: Identified as Gadmei UTV330 (card=37) [ 808.643563][ T5960] em28xx 5-1:0.139: [ 808.643563][ T5960] [ 808.643563][ T5960] The support for this board weren't valid yet. [ 808.643563][ T5960] Please send a report of having this working [ 808.643563][ T5960] not to V4L mailing list (and/or to other addresses) [ 808.643563][ T5960] [ 808.747076][ T5960] em28xx 5-1:0.139: analog set to bulk mode. [ 808.764480][ T797] em28xx 5-1:0.139: Registering V4L2 extension [ 808.820091][ T5960] usb 5-1: USB disconnect, device number 127 [ 808.849802][ T5960] em28xx 5-1:0.139: Disconnecting em28xx [ 809.188970][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.195353][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.273277][ T797] em28xx 5-1:0.139: Config register raw data: 0xffffffed [ 809.296750][ T797] em28xx 5-1:0.139: AC97 chip type couldn't be determined [ 809.305986][ T797] em28xx 5-1:0.139: No AC97 audio processor [ 809.342508][ T797] usb 5-1: Decoder not found [ 809.366476][ T5895] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 809.370304][ T797] em28xx 5-1:0.139: failed to create media graph [ 809.417587][ T797] em28xx 5-1:0.139: V4L2 device video103 deregistered [ 809.447820][ T797] em28xx 5-1:0.139: Remote control support is not available for this card. [ 809.476233][ T5960] em28xx 5-1:0.139: Closing input extension [ 809.529628][ T5960] em28xx 5-1:0.139: Freeing device [ 809.555809][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 809.611251][ T5895] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 809.645606][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.650444][ T797] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 809.686211][ T5895] usb 1-1: Product: syz [ 809.700951][ T5895] usb 1-1: Manufacturer: syz [ 809.710943][ T5895] usb 1-1: SerialNumber: syz [ 809.741479][ T5895] usb 1-1: config 0 descriptor?? [ 809.859456][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.883356][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.913320][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.928353][ T797] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 809.939539][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.951633][ T797] usb 2-1: config 0 descriptor?? [ 809.957109][ T5960] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 809.964746][ T5895] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 810.136173][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 810.144470][ T5960] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 810.153214][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 810.162856][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.179056][ T5960] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 810.190788][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.192908][ T5895] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 810.201743][ T5960] usb 5-1: Product: syz [ 810.237342][ T5960] usb 5-1: Manufacturer: syz [ 810.242140][ T5960] usb 5-1: SerialNumber: syz [ 810.248132][ T5895] usb 1-1: USB disconnect, device number 125 [ 810.273218][ T5960] usb 5-1: config 0 descriptor?? [ 810.356163][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 810.370582][ T5862] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 810.379235][ T5862] usb 3-1: config 0 has no interface number 0 [ 810.398568][ T5960] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 810.416896][ T5862] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 810.431439][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.449011][ T5862] usb 3-1: Product: syz [ 810.455824][ T5862] usb 3-1: Manufacturer: syz [ 810.470443][ T5862] usb 3-1: SerialNumber: syz [ 810.489344][ T5862] usb 3-1: config 0 descriptor?? [ 810.510873][ T797] hid-rmi 0003:0461:4E72.002D: unknown main item tag 0x3 [ 810.525260][ T5862] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 810.542218][ T797] hid-rmi 0003:0461:4E72.002D: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 810.731164][ T5862] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 810.767588][ T5862] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 810.898936][T14441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2177'. [ 810.952448][T14432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.966574][T14432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.220502][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 811.228717][ T5862] usb 3-1: USB disconnect, device number 6 [ 811.250214][ T5862] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 811.310570][ T5862] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 811.361797][ T5862] quatech2 3-1:0.51: device disconnected [ 812.155843][ T5862] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 812.326089][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 812.334914][ T5862] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.346006][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.367804][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 812.387013][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 812.424228][ T5960] usb 5-1: USB disconnect, device number 2 [ 812.447874][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.495465][ T5862] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.513863][ T5862] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.529086][ T5895] usb 2-1: USB disconnect, device number 122 [ 812.677405][ T5862] usb 3-1: Manufacturer: syz [ 812.708511][ T5862] usb 3-1: config 0 descriptor?? [ 812.928435][T14464] trusted_key: encrypted_key: key user:syz not found [ 813.371934][ T5960] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 813.580592][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 813.598629][ T5960] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 813.607380][ T5960] usb 2-1: config 0 has no interface number 0 [ 813.664095][ T5960] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 813.747986][ T5960] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 813.762055][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.784568][ T5960] usb 2-1: Product: syz [ 813.796794][ T5960] usb 2-1: Manufacturer: syz [ 813.807360][ T5960] usb 2-1: SerialNumber: syz [ 813.842969][ T5960] usb 2-1: config 0 descriptor?? [ 813.874467][ T5960] redrat3 2-1:0.83: Couldn't find all endpoints [ 814.886009][ T5960] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 815.056219][ T5862] rc_core: IR keymap rc-hauppauge not found [ 815.067369][ T5862] Registered IR keymap rc-empty [ 815.097552][T14482] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2186'. [ 815.165316][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.436056][ T5960] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 815.446502][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.460520][ T5960] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 815.479015][ T5960] usb 7-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 815.495516][ T5960] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 815.528858][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 815.551610][ T5960] usb 7-1: config 0 has no interface number 0 [ 815.674124][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46 [ 815.697427][ T5960] usb 7-1: config 0 interface 125 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 815.738126][ T5960] usb 7-1: config 0 interface 125 has no altsetting 0 [ 815.776899][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.785478][ T5960] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 815.806000][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.826361][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.843201][ T5960] usb 7-1: Product: syz [ 815.856345][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.864823][ T5960] usb 7-1: Manufacturer: syz [ 815.878422][ T5960] usb 7-1: SerialNumber: syz [ 815.896055][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.904556][ T5960] usb 7-1: config 0 descriptor?? [ 815.946110][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 815.976053][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 816.006052][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 816.035975][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 816.056331][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 816.075967][ T5862] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 816.099355][ T5862] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 816.099396][ T5862] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 816.106896][ T5862] usb 3-1: USB disconnect, device number 7 [ 816.610415][ T7151] usb 2-1: USB disconnect, device number 123 [ 816.768696][T14501] netlink: 'syz.0.2191': attribute type 11 has an invalid length. [ 816.940819][T14505] trusted_key: encrypted_key: key user:syz not found [ 817.231174][T14508] input: syz1 as /devices/virtual/input/input47 [ 817.321983][T14508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 817.455883][ T7151] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 817.747133][ T5960] usb 7-1: USB disconnect, device number 67 [ 817.755531][ T7151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 817.767391][ T7151] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 817.783789][ T30] audit: type=1800 audit(1774520158.176:645): pid=14513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2194" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 817.833863][ T7151] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.872877][ T7151] usb 1-1: config 1 interface 0 has no altsetting 0 [ 817.910455][ T7151] usb 1-1: string descriptor 0 read error: -22 [ 817.920025][ T7151] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 817.935012][ T7151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.033332][ T7151] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 818.226584][ T5960] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 818.355871][ T5960] usb 7-1: device descriptor read/64, error -71 [ 818.615930][ T5960] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 818.766018][ T5960] usb 7-1: device descriptor read/64, error -71 [ 818.795592][T14524] trusted_key: encrypted_key: key user:syz not found [ 818.894846][ T5960] usb usb7-port1: attempt power cycle [ 819.296477][ T5960] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 819.326898][ T5960] usb 7-1: device descriptor read/8, error -71 [ 819.377293][ T797] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 819.456208][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 819.567928][ T797] usb 2-1: config 0 has no interfaces? [ 819.573717][ T797] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 819.589875][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.606160][ T5960] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 819.615972][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 819.635546][ T797] usb 2-1: config 0 descriptor?? [ 819.644494][ T5862] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.656552][ T5862] usb 5-1: config 0 has no interface number 0 [ 819.673143][ T5960] usb 7-1: device descriptor read/8, error -71 [ 819.682762][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.707827][ T5862] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.737392][ T5862] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 819.754261][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.778491][ T5862] usb 5-1: config 0 descriptor?? [ 819.787587][ T5960] usb usb7-port1: unable to enumerate USB device [ 819.946859][ T7164] usb 2-1: USB disconnect, device number 124 [ 820.212310][ T797] usb 1-1: USB disconnect, device number 126 [ 820.300259][ T5862] holtek_mouse 0003:04D9:A081.002E: item fetching failed at offset 5/8 [ 820.310113][ T5862] holtek_mouse 0003:04D9:A081.002E: hid parse failed: -22 [ 820.329436][ T5862] holtek_mouse 0003:04D9:A081.002E: probe with driver holtek_mouse failed with error -22 [ 820.373635][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'. [ 820.434414][T14538] bond2: option ad_actor_sys_prio: invalid value (0) [ 820.442973][T14538] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 820.479867][T14538] bond2 (unregistering): Released all slaves [ 820.862047][T14556] x_tables: duplicate underflow at hook 2 [ 821.026023][ T7151] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 821.186127][ T7151] usb 1-1: Using ep0 maxpacket: 8 [ 821.202227][ T7151] usb 1-1: unable to get BOS descriptor or descriptor too short [ 821.222673][ T7151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.243704][ T7151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.259615][ T7151] usb 1-1: New USB device found, idVendor=0499, idProduct=0001, bcdDevice= 0.00 [ 821.271657][T14564] bond1: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 821.282501][ T7151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.290652][ T7151] usb 1-1: Product: syz [ 821.294880][ T7151] usb 1-1: Manufacturer: syz [ 821.299727][ T7151] usb 1-1: SerialNumber: syz [ 821.588881][ T30] audit: type=1800 audit(1774520161.986:646): pid=14568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2208" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 822.121094][ T5895] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 822.122331][ T797] usb 5-1: USB disconnect, device number 3 [ 822.303932][ T5895] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 822.316456][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.369314][ T5895] usb 3-1: Product: syz [ 822.369364][ T5895] usb 3-1: Manufacturer: syz [ 822.369385][ T5895] usb 3-1: SerialNumber: syz [ 822.373564][ T5895] usb 3-1: config 0 descriptor?? [ 822.473377][T14582] syzkaller0: entered promiscuous mode [ 822.473406][T14582] syzkaller0: entered allmulticast mode [ 822.590830][T14574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.591156][T14574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.597058][T14582] tipc: Started in network mode [ 822.597095][T14582] tipc: Node identity a2257bb4d9f7, cluster identity 4711 [ 822.597970][T14582] tipc: Enabled bearer , priority 0 [ 822.683228][ T5965] usb 3-1: USB disconnect, device number 8 [ 823.327486][T14579] tipc: Resetting bearer [ 823.412858][T14579] tipc: Disabling bearer [ 823.794466][ T7151] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 823.879609][ T7151] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 823.892783][T14599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.902665][ T7151] usb 1-1: USB disconnect, device number 127 [ 823.968678][T11503] udevd[11503]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 824.111395][T14605] loop3: detected capacity change from 0 to 7 [ 824.123129][T14605] Dev loop3: unable to read RDB block 7 [ 824.156154][T14605] loop3: unable to read partition table [ 824.199668][T14605] loop3: partition table beyond EOD, truncated [ 824.222740][T14605] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 824.384093][T14611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2220'. [ 824.562812][T14619] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 825.157170][T14624] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3102962433 (6205924866 ns) > initial count (2295184898 ns). Using initial count to start timer. [ 826.898969][T14650] openvswitch: netlink: IP tunnel dst address not specified [ 827.228243][T14656] loop3: detected capacity change from 0 to 7 [ 827.250584][T14656] Dev loop3: unable to read RDB block 7 [ 827.272541][T14656] loop3: unable to read partition table [ 827.377115][T14656] loop3: partition table beyond EOD, truncated [ 827.406089][T14656] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.295862][ T7151] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 828.468815][ T7151] usb 1-1: Using ep0 maxpacket: 16 [ 828.473729][ T7151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.473765][ T7151] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 828.473794][ T7151] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 828.473812][ T7151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.478292][ T7151] usb 1-1: config 0 descriptor?? [ 828.532345][ T5965] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 828.694004][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 828.717340][ T5965] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 828.732219][ T5965] usb 2-1: config 0 has no interface number 0 [ 828.752742][ T5965] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 828.772753][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.784107][ T5965] usb 2-1: Product: syz [ 828.791334][ T5965] usb 2-1: Manufacturer: syz [ 828.797083][ T5965] usb 2-1: SerialNumber: syz [ 828.811737][ T5965] usb 2-1: config 0 descriptor?? [ 828.994581][T14694] loop3: detected capacity change from 0 to 7 [ 829.008235][T11503] Dev loop3: unable to read RDB block 7 [ 829.013946][T11503] loop3: unable to read partition table [ 829.020514][T11503] loop3: partition table beyond EOD, truncated [ 829.037595][T14694] Dev loop3: unable to read RDB block 7 [ 829.043347][T14694] loop3: unable to read partition table [ 829.056784][T14694] loop3: partition table beyond EOD, truncated [ 829.063053][T14694] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.097152][ T7164] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 829.150784][T14696] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 829.181404][T14696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 829.205972][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 829.220706][T14696] bond2: (slave geneve2): making interface the new active one [ 829.253636][T14698] netlink: 'syz.2.2244': attribute type 11 has an invalid length. [ 829.264351][ T7164] usb 7-1: unable to get BOS descriptor or descriptor too short [ 829.278032][T14696] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 829.288329][ T7164] usb 7-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 829.298070][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 829.307483][ T7164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.315576][ T7164] usb 7-1: Product: syz [ 829.320013][ T7164] usb 7-1: Manufacturer: syz [ 829.325032][ T7164] usb 7-1: SerialNumber: syz [ 829.375900][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 829.390732][T14701] kvm: kvm [14666]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 829.404000][T14701] kvm: kvm [14666]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 829.404676][ T5895] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.448528][ T5895] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 829.474403][ T5895] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 829.511992][ T5895] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 829.521933][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.549651][ T5895] usb 5-1: Product: syz [ 829.559751][ T5895] usb 5-1: Manufacturer: syz [ 829.570493][ T5895] usb 5-1: SerialNumber: syz [ 829.600875][T14692] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 829.627672][ T5895] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 829.656256][ T5895] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 829.668511][ T5895] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 829.708615][T14708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.750654][T14708] fuse: Unknown parameter ' ' [ 829.760568][T14708] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 829.768860][T14708] netlink: 212392 bytes leftover after parsing attributes in process `syz.2.2245'. [ 829.811054][ T5862] usb 5-1: USB disconnect, device number 4 [ 830.087478][T14673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.099397][T14673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.136743][ T5965] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 830.144431][ T5965] uvcvideo 2-1:0.31: No streaming interface found for terminal 32774. [ 830.167260][ T5965] usb 2-1: USB disconnect, device number 125 [ 830.392486][T14713] input: syz1 as /devices/virtual/input/input48 [ 830.853673][ T797] usb 1-1: USB disconnect, device number 2 [ 831.198426][T14729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 831.570312][T14739] loop3: detected capacity change from 0 to 7 [ 831.580050][T14739] Dev loop3: unable to read RDB block 7 [ 831.595477][T14739] loop3: unable to read partition table [ 831.602255][T14739] loop3: partition table beyond EOD, truncated [ 831.609957][T14739] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.807887][ T7164] option 7-1:4.0: GSM modem (1-port) converter detected [ 831.865188][ T7164] usb 7-1: USB disconnect, device number 72 [ 831.885278][ T7164] option 7-1:4.0: device disconnected [ 832.056048][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 832.071877][T14750] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 832.085346][T14750] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 832.215984][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 832.231638][ T5965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.244087][ T5965] usb 1-1: config 0 has no interfaces? [ 832.261507][ T5965] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 832.266659][ T7164] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 832.293388][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.332484][ T5965] usb 1-1: config 0 descriptor?? [ 832.427919][ T7164] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.445962][ T7164] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 832.465079][ T7164] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 832.475934][ T7164] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.484277][ T7164] usb 7-1: Product: syz [ 832.489949][ T7164] usb 7-1: Manufacturer: syz [ 832.494758][ T7164] usb 7-1: SerialNumber: syz [ 832.510506][ T7164] cdc_mbim 7-1:1.0: skipping garbage [ 832.563989][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.581148][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.597042][ T5862] usb 1-1: USB disconnect, device number 3 [ 832.710017][T14747] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 833.334595][T14747] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 833.347786][ T7164] cdc_mbim 7-1:1.0: setting rx_max = 16384 [ 833.476268][ T5862] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 833.645962][ T5862] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 833.646379][T11619] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 833.676972][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.706881][ T5862] usb 1-1: Product: syz [ 833.711242][ T5862] usb 1-1: Manufacturer: syz [ 833.721150][ T5862] usb 1-1: SerialNumber: syz [ 833.738517][ T5862] usb 1-1: config 0 descriptor?? [ 833.838929][T11619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 833.847814][T11619] usb 3-1: not running at top speed; connect to a high speed hub [ 833.859181][T11619] usb 3-1: config 9 has an invalid interface number: 21 but max is 2 [ 833.875087][ T7164] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 833.875972][T11619] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 833.892279][T11619] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 833.901490][T11619] usb 3-1: config 9 has no interface number 0 [ 833.908179][T11619] usb 3-1: config 9 interface 21 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 833.922559][T11619] usb 3-1: config 9 interface 21 has no altsetting 0 [ 833.933718][T11619] usb 3-1: New USB device found, idVendor=19d2, idProduct=2813, bcdDevice=74.f4 [ 833.944134][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.954590][T11619] usb 3-1: Product: syz [ 833.959329][T11619] usb 3-1: Manufacturer: syz [ 833.962352][ T5862] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 833.965210][T11619] usb 3-1: SerialNumber: syz [ 833.976683][ T7164] wwan wwan0: port wwan0mbim0 attached [ 833.995800][ T5965] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 834.012338][ T7164] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 16:f3:df:c5:4d:db [ 834.034176][ T7164] usb 7-1: USB disconnect, device number 73 [ 834.042407][ T7164] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 834.148927][ T7164] wwan wwan0: port wwan0mbim0 disconnected [ 834.169502][ T5965] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 834.180061][ T5965] usb 5-1: config 0 has no interface number 0 [ 834.188072][ T5965] usb 5-1: config 0 interface 41 has no altsetting 0 [ 834.211823][T11619] usb 3-1: bad CDC descriptors [ 834.216944][ T5965] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 834.237465][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.248142][T11619] usb 3-1: USB disconnect, device number 9 [ 834.254463][ T5965] usb 5-1: Product: syz [ 834.260758][ T5965] usb 5-1: Manufacturer: syz [ 834.267759][ T5965] usb 5-1: SerialNumber: syz [ 834.304860][ T5965] usb 5-1: config 0 descriptor?? [ 834.536041][ T5895] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 834.707495][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 834.720177][ T5895] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 834.729296][ T5895] usb 2-1: config 4 has no interface number 0 [ 834.735609][ T5895] usb 2-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 834.747403][ T5895] usb 2-1: config 4 interface 228 altsetting 12 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 834.792084][ T5895] usb 2-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 834.826643][ T5895] usb 2-1: config 4 interface 228 has no altsetting 0 [ 834.851736][ T5895] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 834.871447][ T5965] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 834.890610][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.900597][ T5965] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 834.909724][ T5895] usb 2-1: Product: syz [ 834.915245][ T5895] usb 2-1: Manufacturer: syz [ 834.936115][ T5965] usb 5-1: USB disconnect, device number 5 [ 834.943963][ T5895] usb 2-1: SerialNumber: syz [ 835.013708][T14782] loop3: detected capacity change from 0 to 7 [ 835.071537][T11503] Dev loop3: unable to read RDB block 7 [ 835.077885][T11503] loop3: unable to read partition table [ 835.083920][T11503] loop3: partition table beyond EOD, truncated [ 835.098209][T14782] Dev loop3: unable to read RDB block 7 [ 835.103899][T14782] loop3: unable to read partition table [ 835.114766][T14782] loop3: partition table beyond EOD, truncated [ 835.130948][T14782] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 835.165942][T11619] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 835.285476][T14786] atomic_op ffff88807f871998 conn xmit_atomic 0000000000000000 [ 835.326226][T11619] usb 3-1: Using ep0 maxpacket: 16 [ 835.341039][T11619] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 835.369750][T11619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.395915][T11619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.416049][T11619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 835.434083][T11619] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 835.443644][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.523647][T11619] usb 3-1: config 0 descriptor?? [ 835.551695][ T5862] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 835.566556][ T5862] usb 1-1: USB disconnect, device number 4 [ 835.975904][T11619] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002F/input/input49 [ 836.082431][T11619] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.002F/input/input50 [ 836.433917][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.479938][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.535003][T11619] kye 0003:0458:5013.002F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 836.787916][T14780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.853596][T14780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.358791][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 837.546083][ T5895] usb 2-1: USB disconnect, device number 126 [ 837.853410][T11619] usb 3-1: USB disconnect, device number 10 [ 838.249199][T14820] loop3: detected capacity change from 0 to 7 [ 838.256949][T14820] Dev loop3: unable to read RDB block 7 [ 838.264043][T14820] loop3: unable to read partition table [ 838.274345][T14820] loop3: partition table beyond EOD, truncated [ 838.304131][T14820] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 838.449453][T11619] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 838.490974][T11619] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 839.439151][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2276'. [ 839.699727][ T797] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 839.858903][ T797] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.881315][ T797] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 839.973220][ T797] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 839.997184][ T797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.005281][ T797] usb 7-1: Product: syz [ 840.031124][ T797] usb 7-1: Manufacturer: syz [ 840.044958][ T797] usb 7-1: SerialNumber: syz [ 840.089204][ T797] snd-ua101 7-1:1.1: invalid num_altsetting [ 840.099489][ T797] snd-ua101 7-1:1.0: invalid format type [ 840.256128][ T7164] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 840.281495][T14855] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 840.392982][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2288'. [ 840.412457][ T7164] usb 1-1: unable to get BOS descriptor or descriptor too short [ 840.429151][ T7164] usb 1-1: string descriptor 0 read error: -22 [ 840.437835][ T7164] usb 1-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 840.458636][ T7164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.503456][ T7164] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 840.531100][T14860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.540944][T14860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.574832][ T7164] usb 1-1: MIDIStreaming interface descriptor not found [ 840.606232][T11619] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 840.807344][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.846855][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.877654][ T7151] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 840.896512][T11619] usb 3-1: Using ep0 maxpacket: 32 [ 840.904521][T11619] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 840.917510][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.971946][T11619] usb 3-1: config 0 descriptor?? [ 841.086842][ T7151] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 841.096328][T11619] gspca_main: sunplus-2.14.0 probing 041e:400b [ 841.114102][ T7151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.141085][ T7151] usb 2-1: config 0 descriptor?? [ 841.404394][ T7151] usb 2-1: string descriptor 0 read error: -71 [ 841.446307][ T7151] usb 2-1: USB disconnect, device number 127 [ 841.458503][ T7164] usb 1-1: USB disconnect, device number 5 [ 841.843050][T14865] loop3: detected capacity change from 0 to 7 [ 841.853959][T14865] Dev loop3: unable to read RDB block 7 [ 841.869517][T14865] loop3: unable to read partition table [ 841.888802][T14865] loop3: partition table beyond EOD, truncated [ 841.904996][T14865] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 842.019821][T11619] gspca_sunplus: reg_r err -71 [ 842.045076][T11619] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 842.088932][T11619] usb 3-1: USB disconnect, device number 11 [ 842.168798][T14867] erspan0: entered promiscuous mode [ 842.181960][T14867] vlan0: entered promiscuous mode [ 842.212349][ T30] audit: type=1800 audit(1774520182.606:647): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2292" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 843.578206][ T797] usb 7-1: USB disconnect, device number 74 [ 844.345974][ T7151] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 844.353912][T11619] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 844.536006][T11619] usb 7-1: Using ep0 maxpacket: 16 [ 844.543831][ T7151] usb 2-1: unable to get BOS descriptor or descriptor too short [ 844.565568][ T7151] usb 2-1: not running at top speed; connect to a high speed hub [ 844.580355][T11619] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 844.599366][ T7151] usb 2-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 844.616192][T11619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.624340][T11619] usb 7-1: Product: syz [ 844.629197][ T7151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.645598][T11619] usb 7-1: Manufacturer: syz [ 844.653925][ T7151] usb 2-1: Product: syz [ 844.664414][T11619] usb 7-1: SerialNumber: syz [ 844.668635][ T797] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 844.678342][ T7151] usb 2-1: Manufacturer: syz [ 844.685454][ T7151] usb 2-1: SerialNumber: syz [ 844.835957][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 844.851777][ T797] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 844.866336][ T797] usb 5-1: config 0 has no interface number 0 [ 844.879009][ T797] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 844.900746][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.942625][ T7151] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 844.962532][ T7151] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 844.968931][ T797] usb 5-1: Product: syz [ 844.982594][ T797] usb 5-1: Manufacturer: syz [ 844.983884][ T7151] usb 2-1: unit 6 not found! [ 845.006148][ T797] usb 5-1: SerialNumber: syz [ 845.018964][ T797] usb 5-1: config 0 descriptor?? [ 845.046693][ T797] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 845.148783][ T7151] usb 2-1: USB disconnect, device number 2 [ 845.267795][ T797] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 845.325239][ T797] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 846.551799][T11619] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 846.560741][T11619] usb 7-1: MIDIStreaming interface descriptor not found [ 846.762691][T11619] usb 7-1: USB disconnect, device number 75 [ 846.964135][T11697] udevd[11697]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.412906][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 847.421022][ T797] usb 5-1: USB disconnect, device number 6 [ 847.482139][ T797] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 847.559198][ T797] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 847.617546][ T797] quatech2 5-1:0.51: device disconnected [ 847.955865][ T797] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 848.086311][T14933] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2310'. [ 848.126113][ T797] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 848.134845][ T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.179449][ T797] usb 5-1: config 0 has no interface number 0 [ 848.185640][ T797] usb 5-1: config 0 interface 205 has no altsetting 0 [ 848.186059][T11619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 848.218708][ T797] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 848.246740][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.264955][ T797] usb 5-1: Product: syz [ 848.285309][ T797] usb 5-1: Manufacturer: syz [ 848.301297][ T797] usb 5-1: SerialNumber: syz [ 848.315019][ T797] usb 5-1: config 0 descriptor?? [ 848.339863][ T797] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 848.374593][ T797] dvb-usb: bulk message failed: -22 (3/0) [ 848.391993][T11619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.405394][T11619] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 848.418210][ T797] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 848.432881][ T797] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 848.445155][ T797] usb 5-1: media controller created [ 848.452666][T11619] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.464863][T11619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.477218][ T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.535544][T11619] usb 3-1: Product: syz [ 848.541847][T11619] usb 3-1: Manufacturer: syz [ 848.548937][ T797] dvb-usb: bulk message failed: -22 (6/0) [ 848.548950][T11619] usb 3-1: SerialNumber: syz [ 848.951603][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.986927][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.012904][T11619] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 849.023864][ T797] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 849.055901][ T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 849.063930][T11619] usb 3-1: USB disconnect, device number 12 [ 849.074703][ T797] dvb-usb: schedule remote query interval to 150 msecs. [ 849.082241][ T5916] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 849.091172][ T797] dvb-usb: bulk message failed: -22 (3/0) [ 849.102240][ T30] audit: type=1326 audit(1774520189.496:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.125405][ T797] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 849.143284][ T30] audit: type=1326 audit(1774520189.496:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.167779][ T30] audit: type=1326 audit(1774520189.536:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.249567][ T797] dvb-usb: bulk message failed: -22 (1/0) [ 849.259337][ T797] dvb-usb: error while querying for an remote control event. [ 849.356992][ T5916] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 849.369180][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.391369][ T30] audit: type=1326 audit(1774520189.586:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.425937][ T5916] usb 1-1: config 0 has no interface number 0 [ 849.445976][ T5916] usb 1-1: config 0 interface 95 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.475554][ T30] audit: type=1326 audit(1774520189.586:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.507036][ T30] audit: type=1326 audit(1774520189.586:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.521084][ T5916] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 849.539440][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 849.545297][ T5862] dvb-usb: error while querying for an remote control event. [ 849.560534][ T30] audit: type=1326 audit(1774520189.616:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.575119][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.599808][ T30] audit: type=1326 audit(1774520189.616:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.606098][ T797] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 849.635839][ T5916] usb 1-1: Product: syz [ 849.640066][ T5916] usb 1-1: Manufacturer: syz [ 849.646166][T11619] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 849.647009][ T5916] usb 1-1: SerialNumber: syz [ 849.676483][ T5916] usb 1-1: config 0 descriptor?? [ 849.697299][ T30] audit: type=1326 audit(1774520189.616:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.716206][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 849.731056][ T5862] dvb-usb: error while querying for an remote control event. [ 849.753621][ T30] audit: type=1326 audit(1774520189.616:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14950 comm="syz.1.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f4219c799 code=0x7ffc0000 [ 849.805835][T11619] usb 3-1: Using ep0 maxpacket: 8 [ 849.813881][T11619] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 849.822819][T11619] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 849.828836][ T797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 849.834380][T11619] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.852167][T11619] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.862402][T11619] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 849.868955][ T797] usb 2-1: config 1 has an invalid interface number: 235 but max is 2 [ 849.875123][T11619] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.895891][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 849.902071][ T5862] dvb-usb: error while querying for an remote control event. [ 849.924296][ T5916] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 849.924944][T11619] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 849.941128][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.943104][ T5916] usb 1-1: MIDIStreaming interface descriptor not found [ 849.961599][ T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.981559][ T797] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 849.995302][ T797] usb 2-1: config 1 has no interface number 3 [ 850.014262][ T797] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 850.046575][ T797] usb 2-1: too many endpoints for config 1 interface 235 altsetting 255: 255, using maximum allowed: 30 [ 850.066680][ T7164] dvb-usb: bulk message failed: -22 (1/0) [ 850.072799][ T7164] dvb-usb: error while querying for an remote control event. [ 850.093489][ T797] usb 2-1: config 1 interface 235 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 850.127205][ T797] usb 2-1: config 1 interface 235 has no altsetting 0 [ 850.148952][ T5916] usb 1-1: USB disconnect, device number 6 [ 850.162346][ T797] usb 2-1: config 1 interface 2 has no altsetting 0 [ 850.210552][T11619] usb 3-1: usb_control_msg returned -32 [ 850.219570][T14931] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 850.230723][ T797] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 850.251344][T11697] udevd[11697]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.268972][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.280092][T11619] usbtmc 3-1:16.0: can't read capabilities [ 850.283761][ T7164] dvb-usb: bulk message failed: -22 (1/0) [ 850.293159][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.302716][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.314779][ T7164] dvb-usb: error while querying for an remote control event. [ 850.323340][ T797] usb 2-1: Product: syz [ 850.342283][ T797] usb 2-1: Manufacturer: syz [ 850.353892][ T797] usb 2-1: SerialNumber: syz [ 850.433826][T11619] usb 3-1: USB disconnect, device number 13 [ 850.505834][ T5862] dvb-usb: bulk message failed: -22 (1/0) [ 850.526308][ T5862] dvb-usb: error while querying for an remote control event. [ 850.631483][ T5916] usb 5-1: USB disconnect, device number 7 [ 850.712346][ T5916] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 850.956352][T11619] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 851.415859][T11619] usb 1-1: Using ep0 maxpacket: 32 [ 851.466376][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.502423][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.155385][T11619] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 852.178926][T11619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.194935][T11619] usb 1-1: config 0 descriptor?? [ 852.211380][T11619] hub 1-1:0.0: USB hub found [ 852.259382][ T797] usb 2-1: Can't get UAC3 power state for id 10 [ 852.305130][ T797] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 852.369365][ T797] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 852.404412][T11619] hub 1-1:0.0: 26 ports detected [ 852.410153][T11619] hub 1-1:0.0: insufficient power available to use all downstream ports [ 852.831837][T11619] usb 1-1: USB disconnect, device number 7 [ 853.914199][ T797] usb 2-1: USB disconnect, device number 3 [ 854.081804][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'. [ 854.096696][T11476] udevd[11476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.561450][T14999] netlink: 'syz.6.2329': attribute type 16 has an invalid length. [ 854.569793][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2329'. [ 854.594603][T14999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.109233][T15004] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 856.478097][T15024] bond2: entered promiscuous mode [ 856.513223][T15024] ip6gre1: entered promiscuous mode [ 856.525905][T11619] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 856.526822][T15024] ip6gre1: entered allmulticast mode [ 856.545134][T15024] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 856.557632][T15024] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 856.755775][T11619] usb 7-1: Using ep0 maxpacket: 16 [ 856.918878][T11619] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.964873][T11619] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6 [ 857.010554][T11619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 857.073660][T11619] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 857.104431][T11619] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 857.353972][T11619] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 857.364668][T11619] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 857.385068][T11619] usb 7-1: Manufacturer: syz [ 857.403224][T11619] usb 7-1: config 0 descriptor?? [ 857.581991][T15039] netlink: 'syz.1.2339': attribute type 11 has an invalid length. [ 857.632386][T15039] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2339'. [ 857.801734][T15020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.896205][T15020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.057848][T11619] usb 7-1: USB disconnect, device number 76 [ 858.815998][T15062] binder: 15061:15062 ioctl c0c89425 200000000500 returned -22 [ 858.932184][T15062] binder: 15061:15062 ioctl 40089416 200000000180 returned -22 [ 858.963815][T15062] binder_alloc: 15061: binder_alloc_buf, no vma [ 859.066413][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 859.235927][ T797] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 859.265785][ T5916] usb 1-1: Using ep0 maxpacket: 16 [ 859.279556][ T5916] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 859.292419][ T5916] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 859.355070][ T5916] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 859.368269][ T5916] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 859.392268][ T5916] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 859.405330][ T5916] usb 1-1: config 0 has no interface number 0 [ 859.414231][ T5916] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 859.436181][ T797] usb 7-1: device descriptor read/64, error -71 [ 859.443069][ T5916] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 859.460988][ T5916] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 859.482305][ T5916] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.497295][ T5916] usb 1-1: config 0 interface 125 has no altsetting 0 [ 859.510736][ T5916] usb 1-1: config 0 interface 125 has no altsetting 2 [ 859.558182][ T5916] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 859.588884][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.597370][ T5916] usb 1-1: Product: syz [ 859.601691][ T5916] usb 1-1: Manufacturer: syz [ 859.606442][ T5916] usb 1-1: SerialNumber: syz [ 859.668560][T15073] team_slave_1: entered promiscuous mode [ 859.677984][ T797] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 859.703073][T15073] vlan2: entered promiscuous mode [ 859.712775][ T5916] usb 1-1: config 0 descriptor?? [ 859.719312][T15073] team0: entered promiscuous mode [ 859.732736][ T5916] usb 1-1: selecting invalid altsetting 2 [ 859.847595][ T797] usb 7-1: device descriptor read/64, error -71 [ 859.966491][ T797] usb usb7-port1: attempt power cycle [ 860.306144][ T797] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 860.344431][ T797] usb 7-1: device descriptor read/8, error -71 [ 860.585991][ T797] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 860.607302][ T797] usb 7-1: device descriptor read/8, error -71 [ 860.637875][ C1] usb 1-1: async_complete: urb error -71 [ 860.643732][ C1] usb 1-1: async_complete: urb error -71 [ 860.649470][ C1] usb 1-1: async_complete: urb error -71 [ 860.655182][ C1] usb 1-1: async_complete: urb error -71 [ 860.664234][ T5916] get_1284_register: usb error -71 [ 860.725378][ T5916] usb 1-1: USB disconnect, device number 8 [ 860.736419][ T797] usb usb7-port1: unable to enumerate USB device [ 860.927462][T11619] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 861.055944][ T7151] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 861.509359][T11619] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 861.610262][T11619] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 861.625764][ T7151] usb 5-1: Using ep0 maxpacket: 32 [ 861.638449][ T7151] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 861.649130][T11619] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 861.662399][ T7151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.675873][T11619] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 861.688539][ T7151] usb 5-1: config 0 descriptor?? [ 861.694786][T11619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.762850][ T7151] gspca_main: sunplus-2.14.0 probing 041e:400b [ 861.814947][T11619] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 861.953383][T11619] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 862.108443][T15101] loop8: detected capacity change from 0 to 7 [ 862.168453][T15101] Dev loop8: unable to read RDB block 7 [ 862.174190][T15101] loop8: unable to read partition table [ 862.188997][T15101] loop8: partition table beyond EOD, truncated [ 862.217418][T15101] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 862.357345][T11619] usb 3-1: USB disconnect, device number 14 [ 862.415607][T15108] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2357'. [ 862.525880][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 862.627548][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 862.627565][ T30] audit: type=1326 audit(1774520203.026:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 862.725850][ T5965] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 862.736031][ T30] audit: type=1326 audit(1774520203.026:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 862.844957][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 862.893833][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 862.931874][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 862.941540][ T5965] usb 7-1: device descriptor read/64, error -71 [ 862.962149][ T30] audit: type=1326 audit(1774520203.026:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 862.969584][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.105298][ T30] audit: type=1326 audit(1774520203.026:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 863.257103][ T5895] usb 2-1: Product: syz [ 863.261337][ T5895] usb 2-1: Manufacturer: syz [ 863.284842][ T5895] usb 2-1: SerialNumber: syz [ 863.305941][ T5965] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 863.327116][T11619] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 863.383464][ T5895] usb 2-1: config 0 descriptor?? [ 863.412749][ T30] audit: type=1326 audit(1774520203.056:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 863.495003][ T30] audit: type=1326 audit(1774520203.056:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda14b9c799 code=0x7ffc0000 [ 863.526729][ T5965] usb 7-1: device descriptor read/64, error -71 [ 863.538860][ T5895] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 863.551267][ T30] audit: type=1326 audit(1774520203.056:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda14b3db19 code=0x7ffc0000 [ 863.558338][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.625998][ T7151] gspca_sunplus: reg_w_riv err -110 [ 863.631382][ T7151] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 863.666812][ T5965] usb usb7-port1: attempt power cycle [ 863.734200][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.745008][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.765469][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.776067][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.810435][T11619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.839304][ T30] audit: type=1326 audit(1774520203.056:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda14b9c42b code=0x7ffc0000 [ 863.873745][T11619] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 863.951622][T11619] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 863.971508][ T30] audit: type=1326 audit(1774520203.056:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda14b9c42b code=0x7ffc0000 [ 864.066595][ T5965] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 864.088951][ T30] audit: type=1326 audit(1774520203.056:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15089 comm="syz.4.2353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda14b5cfce code=0x7ffc0000 [ 864.105764][T11619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.146932][ T5965] usb 7-1: device descriptor read/8, error -71 [ 864.187698][T11619] usb 1-1: config 0 descriptor?? [ 864.431748][ T5965] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 864.478806][ T5965] usb 7-1: device descriptor read/8, error -71 [ 864.613030][ T5965] usb usb7-port1: unable to enumerate USB device [ 864.683370][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.724006][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.763798][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.782542][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.800331][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.816029][T11619] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0 [ 864.874776][T11619] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 864.906836][T15124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.930832][T15124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.042808][ T5916] usb 1-1: USB disconnect, device number 9 [ 865.149379][T15125] fido_id[15125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 865.217004][ T797] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 865.375890][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 865.387756][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.406998][T15129] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 865.417212][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57600, setting to 1024 [ 865.447154][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 865.463296][ T797] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 865.474652][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.510664][ T797] usb 3-1: config 0 descriptor?? [ 865.549682][ T5895] usb 2-1: USB disconnect, device number 4 [ 865.578628][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.626889][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.638981][T11476] udevd[11476]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.659587][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.700574][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.728798][T15134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2366'. [ 865.771136][T15137] loop3: detected capacity change from 0 to 7 [ 865.778997][T15137] Dev loop3: unable to read RDB block 7 [ 865.784602][T15137] loop3: unable to read partition table [ 865.791618][T15137] loop3: partition table beyond EOD, truncated [ 865.798680][T15137] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 865.966074][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 866.019611][ T797] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0032/input/input53 [ 866.146116][ T5895] usb 2-1: device descriptor read/64, error -71 [ 866.164371][ T797] sony 0003:054C:03D5.0032: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 866.250364][ T797] usb 3-1: USB disconnect, device number 15 [ 866.357487][T15144] fido_id[15144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 866.403824][ T5895] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 866.575840][ T5895] usb 2-1: device descriptor read/64, error -71 [ 866.690233][ T5895] usb usb2-port1: attempt power cycle [ 866.883498][T15154] binder_alloc: 15153: binder_alloc_buf, no vma [ 866.912119][T15156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.065958][ T5895] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 867.091234][ T5895] usb 2-1: device descriptor read/8, error -71 [ 867.478732][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 867.516491][ T5895] usb 2-1: device descriptor read/8, error -71 [ 867.635469][ T5895] usb usb2-port1: unable to enumerate USB device [ 869.441158][T15194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.482022][T15194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.669108][T15198] openvswitch: netlink: Multiple metadata blocks provided [ 869.716442][T15198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 869.723756][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 869.731062][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 869.738451][T15198] IPv6: NLM_F_CREATE should be set when creating new route [ 869.778395][T15198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 870.205302][T15207] trusted_key: encrypted_key: master key parameter is missing [ 870.221018][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2388'. [ 870.352195][T15216] [ 870.354566][T15216] ===================================================== [ 870.361522][T15216] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 870.369019][T15216] syzkaller #0 Tainted: G L [ 870.375088][T15216] ----------------------------------------------------- [ 870.382058][T15216] syz.6.2388/15216 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 870.389920][T15216] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 870.398609][T15216] [ 870.398609][T15216] and this task is already holding: [ 870.406006][T15216] ffff88801afec120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 870.414685][T15216] which would create a new lock dependency: [ 870.420604][T15216] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 870.428250][T15216] [ 870.428250][T15216] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 870.437814][T15216] (&dev->event_lock#2){..-.}-{3:3} [ 870.437866][T15216] [ 870.437866][T15216] ... which became SOFTIRQ-irq-safe at: [ 870.450805][T15216] lock_acquire+0xf0/0x2e0 [ 870.455389][T15216] _raw_spin_lock_irqsave+0x40/0x60 [ 870.460903][T15216] input_event+0x76/0xe0 [ 870.465382][T15216] atp_complete_geyser_3_4+0x114e/0x1d90 [ 870.471187][T15216] __usb_hcd_giveback_urb+0x376/0x540 [ 870.476794][T15216] dummy_timer+0xbbd/0x45d0 [ 870.481547][T15216] __hrtimer_run_queues+0x53a/0xcc0 [ 870.486927][T15216] hrtimer_run_softirq+0x182/0x5a0 [ 870.492193][T15216] handle_softirqs+0x22a/0x870 [ 870.497125][T15216] __irq_exit_rcu+0x5f/0x150 [ 870.501852][T15216] irq_exit_rcu+0x9/0x30 [ 870.506224][T15216] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 870.511989][T15216] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.518100][T15216] _raw_spin_unlock_irqrestore+0x47/0x80 [ 870.523895][T15216] dummy_urb_enqueue+0x58a/0x780 [ 870.528974][T15216] usb_hcd_submit_urb+0x328/0x1b70 [ 870.534233][T15216] atp_open+0x60/0x90 [ 870.538352][T15216] input_open_device+0x1f8/0x3b0 [ 870.543420][T15216] mousedev_open_device+0xcc/0x150 [ 870.548742][T15216] mousedev_open+0x2ef/0x4a0 [ 870.553466][T15216] chrdev_open+0x4cd/0x5e0 [ 870.558018][T15216] do_dentry_open+0x785/0x14e0 [ 870.562919][T15216] vfs_open+0x3b/0x340 [ 870.567126][T15216] path_openat+0x2e08/0x3860 [ 870.571846][T15216] do_file_open+0x23e/0x4a0 [ 870.576472][T15216] do_sys_openat2+0x113/0x200 [ 870.581291][T15216] __x64_sys_openat+0x138/0x170 [ 870.586276][T15216] do_syscall_64+0x14d/0xf80 [ 870.590991][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.597012][T15216] [ 870.597012][T15216] to a SOFTIRQ-irq-unsafe lock: [ 870.604068][T15216] (tasklist_lock){.+.+}-{3:3} [ 870.604115][T15216] [ 870.604115][T15216] ... which became SOFTIRQ-irq-unsafe at: [ 870.616808][T15216] ... [ 870.616825][T15216] lock_acquire+0xf0/0x2e0 [ 870.623982][T15216] _raw_read_lock+0x36/0x50 [ 870.628614][T15216] __do_wait+0xde/0x740 [ 870.632940][T15216] do_wait+0x1e7/0x540 [ 870.637133][T15216] kernel_wait+0xd6/0x1c0 [ 870.641770][T15216] call_usermodehelper_exec_work+0xbe/0x230 [ 870.647966][T15216] process_scheduled_works+0xb6e/0x18c0 [ 870.653653][T15216] worker_thread+0xa53/0xfc0 [ 870.658370][T15216] kthread+0x388/0x470 [ 870.662601][T15216] ret_from_fork+0x51e/0xb90 [ 870.667365][T15216] ret_from_fork_asm+0x1a/0x30 [ 870.672360][T15216] [ 870.672360][T15216] other info that might help us debug this: [ 870.672360][T15216] [ 870.682630][T15216] Chain exists of: [ 870.682630][T15216] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 870.682630][T15216] [ 870.695796][T15216] Possible interrupt unsafe locking scenario: [ 870.695796][T15216] [ 870.704169][T15216] CPU0 CPU1 [ 870.709571][T15216] ---- ---- [ 870.714967][T15216] lock(tasklist_lock); [ 870.719264][T15216] local_irq_disable(); [ 870.726052][T15216] lock(&dev->event_lock#2); [ 870.733323][T15216] lock(&f_owner->lock); [ 870.740232][T15216] [ 870.743728][T15216] lock(&dev->event_lock#2); [ 870.748634][T15216] [ 870.748634][T15216] *** DEADLOCK *** [ 870.748634][T15216] [ 870.756821][T15216] 5 locks held by syz.6.2388/15216: [ 870.762057][T15216] #0: ffff888020340420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 870.771280][T15216] #1: ffff888076f62998 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 870.781544][T15216] #2: ffffffff9a2f22f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 870.791101][T15216] #3: ffff88803041d808 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 870.800840][T15216] #4: ffff88801afec120 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 870.809964][T15216] [ 870.809964][T15216] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 870.820403][T15216] -> (&dev->event_lock#2){..-.}-{3:3} { [ 870.826295][T15216] IN-SOFTIRQ-W at: [ 870.830606][T15216] lock_acquire+0xf0/0x2e0 [ 870.837252][T15216] _raw_spin_lock_irqsave+0x40/0x60 [ 870.844678][T15216] input_event+0x76/0xe0 [ 870.851134][T15216] atp_complete_geyser_3_4+0x114e/0x1d90 [ 870.858983][T15216] __usb_hcd_giveback_urb+0x376/0x540 [ 870.866582][T15216] dummy_timer+0xbbd/0x45d0 [ 870.873563][T15216] __hrtimer_run_queues+0x53a/0xcc0 [ 870.881224][T15216] hrtimer_run_softirq+0x182/0x5a0 [ 870.888605][T15216] handle_softirqs+0x22a/0x870 [ 870.895630][T15216] __irq_exit_rcu+0x5f/0x150 [ 870.902444][T15216] irq_exit_rcu+0x9/0x30 [ 870.908902][T15216] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 870.916748][T15216] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.924945][T15216] _raw_spin_unlock_irqrestore+0x47/0x80 [ 870.932787][T15216] dummy_urb_enqueue+0x58a/0x780 [ 870.939955][T15216] usb_hcd_submit_urb+0x328/0x1b70 [ 870.947295][T15216] atp_open+0x60/0x90 [ 870.953490][T15216] input_open_device+0x1f8/0x3b0 [ 870.960641][T15216] mousedev_open_device+0xcc/0x150 [ 870.967966][T15216] mousedev_open+0x2ef/0x4a0 [ 870.974774][T15216] chrdev_open+0x4cd/0x5e0 [ 870.981418][T15216] do_dentry_open+0x785/0x14e0 [ 870.988425][T15216] vfs_open+0x3b/0x340 [ 870.994713][T15216] path_openat+0x2e08/0x3860 [ 871.001578][T15216] do_file_open+0x23e/0x4a0 [ 871.008268][T15216] do_sys_openat2+0x113/0x200 [ 871.015148][T15216] __x64_sys_openat+0x138/0x170 [ 871.022187][T15216] do_syscall_64+0x14d/0xf80 [ 871.028959][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.037030][T15216] INITIAL USE at: [ 871.041235][T15216] lock_acquire+0xf0/0x2e0 [ 871.047770][T15216] _raw_spin_lock_irqsave+0x40/0x60 [ 871.055244][T15216] input_inject_event+0xa5/0x340 [ 871.062294][T15216] kbd_led_trigger_activate+0xbc/0x100 [ 871.069979][T15216] led_trigger_set+0x535/0x960 [ 871.076919][T15216] led_trigger_set_default+0x260/0x2a0 [ 871.084530][T15216] led_classdev_register_ext+0x787/0x9c0 [ 871.092261][T15216] input_leds_connect+0x517/0x790 [ 871.099401][T15216] input_register_device+0xd00/0x1160 [ 871.106950][T15216] atkbd_connect+0x731/0xa50 [ 871.113641][T15216] serio_driver_probe+0x82/0xd0 [ 871.120932][T15216] really_probe+0x267/0xaf0 [ 871.127621][T15216] __driver_probe_device+0x18c/0x320 [ 871.135056][T15216] driver_probe_device+0x4f/0x240 [ 871.142455][T15216] __driver_attach+0x34c/0x640 [ 871.149325][T15216] bus_for_each_dev+0x23b/0x2c0 [ 871.156282][T15216] serio_handle_event+0x20a/0xdd0 [ 871.163439][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.171089][T15216] worker_thread+0xa53/0xfc0 [ 871.177787][T15216] kthread+0x388/0x470 [ 871.183967][T15216] ret_from_fork+0x51e/0xb90 [ 871.190675][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.197559][T15216] } [ 871.200326][T15216] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 871.209718][T15216] -> (&client->buffer_lock){....}-{3:3} { [ 871.215691][T15216] INITIAL USE at: [ 871.219777][T15216] lock_acquire+0xf0/0x2e0 [ 871.226296][T15216] _raw_spin_lock+0x2e/0x40 [ 871.232716][T15216] evdev_pass_values+0xb9/0xbd0 [ 871.239487][T15216] evdev_events+0x1e6/0x340 [ 871.245930][T15216] input_pass_values+0x288/0x890 [ 871.252824][T15216] input_event_dispose+0x330/0x6b0 [ 871.259857][T15216] input_inject_event+0x1dd/0x340 [ 871.266892][T15216] evdev_write+0x325/0x4c0 [ 871.273224][T15216] vfs_write+0x29a/0xb90 [ 871.279385][T15216] ksys_write+0x150/0x270 [ 871.285631][T15216] do_syscall_64+0x14d/0xf80 [ 871.292274][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.300082][T15216] } [ 871.302757][T15216] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 871.311120][T15216] ... acquired at: [ 871.315106][T15216] _raw_spin_lock+0x2e/0x40 [ 871.319790][T15216] evdev_pass_values+0xb9/0xbd0 [ 871.324826][T15216] evdev_events+0x1e6/0x340 [ 871.329514][T15216] input_pass_values+0x288/0x890 [ 871.334653][T15216] input_event_dispose+0x330/0x6b0 [ 871.339943][T15216] input_inject_event+0x1dd/0x340 [ 871.345148][T15216] evdev_write+0x325/0x4c0 [ 871.349761][T15216] vfs_write+0x29a/0xb90 [ 871.354202][T15216] ksys_write+0x150/0x270 [ 871.358718][T15216] do_syscall_64+0x14d/0xf80 [ 871.363489][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.369680][T15216] [ 871.372031][T15216] -> (&new->fa_lock){....}-{3:3} { [ 871.377268][T15216] INITIAL USE at: [ 871.381265][T15216] lock_acquire+0xf0/0x2e0 [ 871.387443][T15216] _raw_write_lock_irq+0x3d/0x50 [ 871.394133][T15216] fasync_remove_entry+0xf1/0x1c0 [ 871.400902][T15216] sock_fasync+0x85/0xf0 [ 871.406900][T15216] __fput+0x8a5/0xa70 [ 871.412638][T15216] task_work_run+0x1d9/0x270 [ 871.419018][T15216] exit_to_user_mode_loop+0xed/0x480 [ 871.426053][T15216] do_syscall_64+0x32d/0xf80 [ 871.432416][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.440053][T15216] INITIAL READ USE at: [ 871.444557][T15216] lock_acquire+0xf0/0x2e0 [ 871.451158][T15216] _raw_read_lock_irqsave+0x48/0x60 [ 871.458543][T15216] kill_fasync+0x199/0x4d0 [ 871.465171][T15216] n_tty_receive_buf_common+0x974/0x1300 [ 871.473312][T15216] tty_port_default_receive_buf+0x6e/0xa0 [ 871.481257][T15216] flush_to_ldisc+0x24a/0x6e0 [ 871.488115][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.495856][T15216] worker_thread+0xa53/0xfc0 [ 871.502680][T15216] kthread+0x388/0x470 [ 871.508924][T15216] ret_from_fork+0x51e/0xb90 [ 871.515744][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.522728][T15216] } [ 871.525340][T15216] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 871.534165][T15216] ... acquired at: [ 871.538057][T15216] _raw_read_lock_irqsave+0x48/0x60 [ 871.543476][T15216] kill_fasync+0x199/0x4d0 [ 871.548113][T15216] evdev_pass_values+0x627/0xbd0 [ 871.553231][T15216] evdev_events+0x1e6/0x340 [ 871.557919][T15216] input_pass_values+0x288/0x890 [ 871.563050][T15216] input_event_dispose+0x330/0x6b0 [ 871.568368][T15216] input_inject_event+0x1dd/0x340 [ 871.573672][T15216] evdev_write+0x325/0x4c0 [ 871.578274][T15216] vfs_write+0x29a/0xb90 [ 871.582735][T15216] ksys_write+0x150/0x270 [ 871.587248][T15216] do_syscall_64+0x14d/0xf80 [ 871.592019][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.598091][T15216] [ 871.600417][T15216] -> (&f_owner->lock){....}-{3:3} { [ 871.605633][T15216] INITIAL USE at: [ 871.609642][T15216] lock_acquire+0xf0/0x2e0 [ 871.615642][T15216] _raw_write_lock_irq+0x3d/0x50 [ 871.622195][T15216] __f_setown+0x67/0x370 [ 871.628008][T15216] generic_setlease+0xacf/0xff0 [ 871.634488][T15216] do_fcntl_add_lease+0x35e/0x470 [ 871.641087][T15216] fcntl_setlease+0x123/0x180 [ 871.647335][T15216] do_fcntl+0x8b3/0x1a20 [ 871.653251][T15216] __se_sys_fcntl+0xc8/0x150 [ 871.659428][T15216] do_syscall_64+0x14d/0xf80 [ 871.665702][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.673204][T15216] INITIAL READ USE at: [ 871.677540][T15216] lock_acquire+0xf0/0x2e0 [ 871.683963][T15216] _raw_read_lock_irqsave+0x48/0x60 [ 871.691166][T15216] send_sigio+0x38/0x370 [ 871.697502][T15216] kill_fasync+0x24d/0x4d0 [ 871.703934][T15216] n_tty_receive_buf_common+0x974/0x1300 [ 871.711589][T15216] tty_port_default_receive_buf+0x6e/0xa0 [ 871.719355][T15216] flush_to_ldisc+0x24a/0x6e0 [ 871.726052][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.733655][T15216] worker_thread+0xa53/0xfc0 [ 871.740373][T15216] kthread+0x388/0x470 [ 871.746446][T15216] ret_from_fork+0x51e/0xb90 [ 871.753044][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.759821][T15216] } [ 871.762327][T15216] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 871.771185][T15216] ... acquired at: [ 871.774990][T15216] _raw_read_lock_irqsave+0x48/0x60 [ 871.780368][T15216] send_sigio+0x38/0x370 [ 871.784798][T15216] kill_fasync+0x24d/0x4d0 [ 871.789390][T15216] n_tty_receive_buf_common+0x974/0x1300 [ 871.795208][T15216] tty_port_default_receive_buf+0x6e/0xa0 [ 871.801113][T15216] flush_to_ldisc+0x24a/0x6e0 [ 871.805970][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.811701][T15216] worker_thread+0xa53/0xfc0 [ 871.816484][T15216] kthread+0x388/0x470 [ 871.820745][T15216] ret_from_fork+0x51e/0xb90 [ 871.825552][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.830499][T15216] [ 871.832819][T15216] [ 871.832819][T15216] the dependencies between the lock to be acquired [ 871.832828][T15216] and SOFTIRQ-irq-unsafe lock: [ 871.846354][T15216] -> (tasklist_lock){.+.+}-{3:3} { [ 871.851513][T15216] HARDIRQ-ON-R at: [ 871.855502][T15216] lock_acquire+0xf0/0x2e0 [ 871.861588][T15216] _raw_read_lock+0x36/0x50 [ 871.867745][T15216] __do_wait+0xde/0x740 [ 871.873591][T15216] do_wait+0x1e7/0x540 [ 871.879343][T15216] kernel_wait+0xd6/0x1c0 [ 871.885349][T15216] call_usermodehelper_exec_work+0xbe/0x230 [ 871.892917][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.900131][T15216] worker_thread+0xa53/0xfc0 [ 871.906488][T15216] kthread+0x388/0x470 [ 871.912258][T15216] ret_from_fork+0x51e/0xb90 [ 871.918526][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.924957][T15216] SOFTIRQ-ON-R at: [ 871.928955][T15216] lock_acquire+0xf0/0x2e0 [ 871.935029][T15216] _raw_read_lock+0x36/0x50 [ 871.941448][T15216] __do_wait+0xde/0x740 [ 871.947262][T15216] do_wait+0x1e7/0x540 [ 871.952988][T15216] kernel_wait+0xd6/0x1c0 [ 871.958970][T15216] call_usermodehelper_exec_work+0xbe/0x230 [ 871.966526][T15216] process_scheduled_works+0xb6e/0x18c0 [ 871.973743][T15216] worker_thread+0xa53/0xfc0 [ 871.979992][T15216] kthread+0x388/0x470 [ 871.985728][T15216] ret_from_fork+0x51e/0xb90 [ 871.992014][T15216] ret_from_fork_asm+0x1a/0x30 [ 871.998464][T15216] INITIAL USE at: [ 872.002368][T15216] lock_acquire+0xf0/0x2e0 [ 872.008369][T15216] _raw_write_lock_irq+0x3d/0x50 [ 872.014895][T15216] copy_process+0x247a/0x3cd0 [ 872.021158][T15216] kernel_clone+0x248/0x8e0 [ 872.027249][T15216] user_mode_thread+0x110/0x180 [ 872.033683][T15216] rest_init+0x23/0x300 [ 872.039509][T15216] start_kernel+0x385/0x3d0 [ 872.045658][T15216] x86_64_start_reservations+0x24/0x30 [ 872.052810][T15216] x86_64_start_kernel+0x143/0x1c0 [ 872.059504][T15216] common_startup_64+0x13e/0x147 [ 872.066064][T15216] INITIAL READ USE at: [ 872.070421][T15216] lock_acquire+0xf0/0x2e0 [ 872.076857][T15216] _raw_read_lock+0x36/0x50 [ 872.083370][T15216] __do_wait+0xde/0x740 [ 872.089531][T15216] do_wait+0x1e7/0x540 [ 872.095607][T15216] kernel_wait+0xd6/0x1c0 [ 872.102031][T15216] call_usermodehelper_exec_work+0xbe/0x230 [ 872.109956][T15216] process_scheduled_works+0xb6e/0x18c0 [ 872.117514][T15216] worker_thread+0xa53/0xfc0 [ 872.124120][T15216] kthread+0x388/0x470 [ 872.130194][T15216] ret_from_fork+0x51e/0xb90 [ 872.136797][T15216] ret_from_fork_asm+0x1a/0x30 [ 872.143592][T15216] } [ 872.146126][T15216] ... key at: [] tasklist_lock+0x18/0x40 [ 872.154293][T15216] ... acquired at: [ 872.158101][T15216] _raw_read_lock+0x36/0x50 [ 872.162791][T15216] send_sigio+0x101/0x370 [ 872.167302][T15216] dnotify_handle_event+0x169/0x440 [ 872.172681][T15216] fsnotify+0x1831/0x1ae0 [ 872.177187][T15216] path_openat+0x15c2/0x3860 [ 872.181959][T15216] do_file_open+0x23e/0x4a0 [ 872.186644][T15216] do_sys_openat2+0x113/0x200 [ 872.191508][T15216] __x64_sys_creat+0x8f/0xc0 [ 872.196279][T15216] do_syscall_64+0x14d/0xf80 [ 872.201078][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.207150][T15216] [ 872.209480][T15216] [ 872.209480][T15216] stack backtrace: [ 872.215380][T15216] CPU: 0 UID: 0 PID: 15216 Comm: syz.6.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.215403][T15216] Tainted: [L]=SOFTLOCKUP [ 872.215409][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 872.215421][T15216] Call Trace: [ 872.215430][T15216] [ 872.215451][T15216] dump_stack_lvl+0xe8/0x150 [ 872.215483][T15216] __lock_acquire+0x2a94/0x2cf0 [ 872.215514][T15216] lock_acquire+0xf0/0x2e0 [ 872.215534][T15216] ? send_sigio+0x101/0x370 [ 872.215555][T15216] _raw_read_lock+0x36/0x50 [ 872.215572][T15216] ? send_sigio+0x101/0x370 [ 872.215588][T15216] send_sigio+0x101/0x370 [ 872.215606][T15216] dnotify_handle_event+0x169/0x440 [ 872.215630][T15216] fsnotify+0x1831/0x1ae0 [ 872.215646][T15216] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 872.215690][T15216] ? fsnotify+0x74c/0x1ae0 [ 872.215708][T15216] ? __pfx_fsnotify+0x10/0x10 [ 872.215725][T15216] ? do_raw_spin_unlock+0xf5/0x210 [ 872.215748][T15216] ? d_make_persistent+0x10f/0x180 [ 872.215781][T15216] ? shmem_mknod+0x2ea/0x360 [ 872.215824][T15216] path_openat+0x15c2/0x3860 [ 872.215855][T15216] ? __pfx_path_openat+0x10/0x10 [ 872.215872][T15216] ? __x64_sys_creat+0x8f/0xc0 [ 872.215899][T15216] ? __lock_acquire+0x6b5/0x2cf0 [ 872.215922][T15216] do_file_open+0x23e/0x4a0 [ 872.215941][T15216] ? __pfx_do_file_open+0x10/0x10 [ 872.215965][T15216] ? _raw_spin_unlock+0x28/0x50 [ 872.215980][T15216] ? alloc_fd+0x64b/0x6c0 [ 872.216005][T15216] do_sys_openat2+0x113/0x200 [ 872.216029][T15216] ? __se_sys_futex+0x3a8/0x450 [ 872.216049][T15216] ? __pfx_do_sys_openat2+0x10/0x10 [ 872.216074][T15216] ? rcu_is_watching+0x15/0xb0 [ 872.216099][T15216] __x64_sys_creat+0x8f/0xc0 [ 872.216124][T15216] do_syscall_64+0x14d/0xf80 [ 872.216142][T15216] ? trace_irq_disable+0x3b/0x150 [ 872.216167][T15216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.216183][T15216] ? clear_bhb_loop+0x40/0x90 [ 872.216201][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.216217][T15216] RIP: 0033:0x7f917fb9c799 [ 872.216235][T15216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.216250][T15216] RSP: 002b:00007f9180a88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 872.216268][T15216] RAX: ffffffffffffffda RBX: 00007f917fe16090 RCX: 00007f917fb9c799 [ 872.216281][T15216] RDX: 0000000000000000 RSI: 000000000000004b RDI: 0000200000000040 [ 872.216291][T15216] RBP: 00007f917fc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 872.216301][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.216311][T15216] R13: 00007f917fe16128 R14: 00007f917fe16090 R15: 00007f917ff3fa48 [ 872.216329][T15216] [ 872.532833][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.539295][ T1301] ieee802154 phy1 wpan1: encryption failed: -22