last executing test programs: 11.344956021s ago: executing program 2 (id=3683): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x100000, 0xb, {}, {0x1, 0x1, 0x5, 0x4, 0x7f, 0xff, "fd091ccc"}, 0xcc, 0x3, {}, 0xd91, 0x0, r0}) (async) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x100000, 0xb, {}, {0x1, 0x1, 0x5, 0x4, 0x7f, 0xff, "fd091ccc"}, 0xcc, 0x3, {}, 0xd91, 0x0, r0}) statx(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x2000, 0x7ff, &(0x7f0000000100)) (async) statx(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x2000, 0x7ff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r2, &(0x7f0000000200)) (async) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r2, &(0x7f0000000200)) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x101, 0xa, 0x24}, 0x18) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x153080, 0x0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x153080, 0x0) fcntl$dupfd(r1, 0x406, r0) (async) r6 = fcntl$dupfd(r1, 0x406, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0xfffffffc, 0xe, 0x1000, 0xffffffffffffffff, 0xfffffa09, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1}, 0x50) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x0, 0xfffffffc, 0xe, 0x1000, 0xffffffffffffffff, 0xfffffa09, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x19, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0xe, 0x0, 0x7, 0x3, 0x6, 0x100, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x5, 0x4, 0x2, 0xe0983488bffb4847}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000440)='syzkaller\x00', 0xff, 0x2c, &(0x7f0000000480)=""/44, 0x41100, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xd, 0xffff, 0x1ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r7, r8, r9, r10, r11], &(0x7f0000000840)=[{0x1, 0x3, 0xa}, {0x2, 0x1, 0xd, 0xa}], 0x10, 0xfffffff0}, 0x94) r12 = socket$kcm(0x29, 0x5, 0x0) write$6lowpan_control(r4, &(0x7f0000000940)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ftruncate(0xffffffffffffffff, 0x9) close(r11) lsetxattr$security_ima(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), &(0x7f0000000a00)=@v2={0x3, 0x3, 0x7, 0x1, 0x1000, "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"}, 0x1009, 0x1) r13 = syz_open_dev$evdev(&(0x7f0000002c80), 0x6b, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000002cc0)={r5, 0x1, 0x43, 0xffffffffffffd590}) r15 = epoll_create1(0x80000) fcntl$getownex(r12, 0x10, &(0x7f0000002d00)={0x0, 0x0}) getpgid(0xffffffffffffffff) (async) r17 = getpgid(0xffffffffffffffff) r18 = getpgrp(0xffffffffffffffff) r19 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002d40)='./cgroup.net/syz0\x00', 0x200002, 0x0) read$FUSE(r4, &(0x7f0000002d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r21 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) sendmsg$netlink(r6, &(0x7f0000004fc0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001a40)={0x1034, 0x14, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x1e, 0xdc, 0x0, 0x0, @binary="02ef71af917551770f7b4a5ed204df13fa1f92668331846f6eff"}, @nested={0x4, 0x76}, @generic="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"]}, 0x1034}, {&(0x7f0000002a80)={0x1ac, 0x2f, 0x300, 0x70bd26, 0x25dfdbfd, "", [@generic="466e37298b39866500cee1db498d422fb62d28e9fec57eb319b27c148e3e68b0b4768d297ecc11d1871841a4d638103be9ebd96a051b841e1e0864830dd9dfe3907142b63e616803baa14954bcef66fbf65013c35ce4a20b188c53712abc97939f104dcfc411a24f994fa05c3b7e400fda198935a637d43bb10c2b", @generic="d6dc8920ff4404f4cff122e10e79b95caee1e4647db1ca4574485c96807e93d63d7fe293cc33db283cb58ea4c99c98054f72dee52e03973d4b95538698b6bf3b5fb6e69845c5c1616f4da73cca856af02ab0cdd746f7bf610cdb56ade3a75bfb5db7fa86d96d59a7e00703a4da4f6058857d468ce324ec1b9d5974d9cf4baefe77fe3533b04521e2e5a5b6feb6cafd9292747f4ff062eb7bf7eef73fbcf6ceaa08ec683e057747143b1f92907ebe8d821b29faa1d3dc51aaa2a15c3aff994b53a2f06474c601d787b92b5c9f25c1bacf81ddaeb41a0e86a8c5dc955f431ddf6722cabd7b474bc13adf", @typed={0x8, 0xc1, 0x0, 0x0, @uid=r2}, @generic="90de2ccd1ecd09365db1d964811e78cb36d9ac99cb5c0e9c0f3aa015f19bb0a1b75a1cfbfc55428d94b69671f7"]}, 0x1ac}], 0x2, &(0x7f0000004e80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x38, 0x1, 0x1, [r10, r5, r7, r0, r12, r8, r13, r10, r7, r14]}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @cred={{0x1c, 0x1, 0x2, {r16, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r17, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r18, r2, r3}}}, @rights={{0x1c, 0x1, 0x1, [r19, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r20, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r21, r2, r22}}}], 0x130, 0x24000000}, 0x4000040) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000005000)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) 11.158664335s ago: executing program 2 (id=3684): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 10.272804368s ago: executing program 1 (id=3689): mmap(&(0x7f00000b0000/0x3000)=nil, 0x3000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000080)={0x1, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r6 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd}, {0x5}, {0x0, 0x4}, {0x5}, 0x61, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x119) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 9.060408946s ago: executing program 2 (id=3691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) (fail_nth: 3) 8.779976906s ago: executing program 2 (id=3693): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) 8.616378742s ago: executing program 1 (id=3694): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="fcfffca4aa2a4adb54250100000004000180100002800c0001800800010002000000a07b6302ab0900d7592a36aee90669ee4034a07dc0c0d0e4bd69d798574e41646226159caa7bb401e03e23f92c2a68860500dacf1744430b3fafcbd24f916b8da7609903cef7511420acdffe71"], 0x28}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000f40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000f80)={0x54, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x2}, @device_b}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000900)='\x01-\x00\xb6\xb7\xe1\x7fl\xd5\xf8G\xfdQ=\xc3\xd4\x02RP\xb2\xbf\x99\xfc\x10\" \x93)\xc5\x93\x98\x11\xe0\xd4\x14\x9a\f#LU\xda\xeb\f\x03\xa4\xf7\x85\xddYL\xf7\xf2\xc4\xff@+\x04^\xcc\xc8\xa1\x9f\xa7p\xd2\xaa\xa2^\xa6\xd1\v\xd1\xdd+o\x91\xc8\x90\xeebUCE\xdc=\x89\x86\x81S\x038', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[0x0, &(0x7f00000000c0)='-\xf3\x00']}) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.100510754s ago: executing program 3 (id=3696): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (fail_nth: 2) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 8.078163092s ago: executing program 3 (id=3697): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbdc117751bc76bd884d5681095fb20e708dffaaea4000008002b001f8dffff08002ba4f0068c02ff8a1c8b", @ANYRES32=0x0, @ANYBLOB="08003b0006"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)="c0", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='G', 0x1}], 0x10000220}}], 0x2, 0x404c8d0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x4000000000000306, 0x3, 0x27, [0x8000]}}, @generic={0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x180}}], 0x1, 0x810) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='decodes ', 0x8}], 0x1, 0x8, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x28040680) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x200000, 0x25dfdbfc, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x60) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) pipe(&(0x7f0000000280)) 7.805665306s ago: executing program 3 (id=3699): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/212, 0xd4}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000540)=""/255, 0xff}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000440)=""/236, 0xec}], 0xa) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x1000a001, 0xfffffff5, 0x6, 0x401, 0x3, 0xfa0f, 0x1}, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00e6fb6e8a40503520b9f254c1ee2cfd3d5ced4ee87100fd58b4356701", @ANYRES32=r12, @ANYBLOB="0eb81f9264ad876a08e5b388d79006de3f706c618c0b93ab429462f303504a9a927418f29ec2431e1f1c7846957c0674e043c02d5d2c5b9dd6da4781d56826d48f0ec6205987ecddee4a7da8441a2370c94e09a8389100b06c657ca155d1616196b73a371bf671d5b1a8b40f9370e5fb0b56ef660532e01acf66b9a7ed5caf4168a20c4f9f095ddcc474562fd910212b73116c8f87fde3fdfb3eb497304d118483a468a71362", @ANYRESOCT], 0x5c}}, 0x24000040) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB="88499321890628154a21dcae9a56c6a1ba976a3681aacbc417bd53b5abf384f601f089dd2a23756e146a96547046c19814418d5bb27c73323b558774eb6b555d843202514f2b9410ca220d6c2aa66d", @ANYRES32=r13, @ANYBLOB], 0x4c}}, 0x884) 7.022990825s ago: executing program 1 (id=3703): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001", @ANYRES64=r0], 0xd0}, 0x1, 0x0, 0x60}, 0x20050800) 6.804698544s ago: executing program 1 (id=3707): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (fail_nth: 3) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 6.292759373s ago: executing program 4 (id=3708): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x155, 0x0, &(0x7f0000000300)="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", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 6.119581845s ago: executing program 4 (id=3709): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbdc117751bc76bd884d5681095fb20e708dffaaea4000008002b001f8dffff08002ba4f0068c02ff8a1c8b", @ANYRES32=0x0, @ANYBLOB="08003b0006"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)="c0", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='G', 0x1}], 0x10000220}}], 0x2, 0x404c8d0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x4000000000000306, 0x3, 0x27, [0x8000]}}, @generic={0x5}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x180}}], 0x1, 0x810) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='decodes ', 0x8}], 0x1, 0x8, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) unshare(0x28040680) r5 = timerfd_create(0x0, 0x0) timerfd_gettime(r5, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x200000, 0x25dfdbfc, {0x7a, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x60) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) pipe(&(0x7f0000000280)) 5.874071497s ago: executing program 1 (id=3710): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x400, 0x8) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x60}}, 0x4000004) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000540)=""/182, &(0x7f0000000100)=0xb6) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, &(0x7f00000004c0)=0x7, r0, &(0x7f0000000500)=0xffffffffffffffff, 0x30cc, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4008020) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1491f3001000010000000000000000000000000a3c000000120a01020000000000000300020000000900020073797a310000000008000440000000110900010073797a3080000000008003400000000a144000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x300, @empty}}, 0x300, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5.762296773s ago: executing program 4 (id=3711): timer_create(0x0, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000008000000030000004c00018038000400200001000a004e313c9c0150fee50000000000000000000300000001000000001400020002b50000ffffffff00000000000000000d0001007564703a73"], 0x60}}, 0x0) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="860000000000000000000000000000000000c979ca6d3a18f5d2702240cc7775c60dc7c449293088362e2d84423c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r5}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x7ff, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f0000000240)=0x9, 0x4) socket(0x10, 0x3, 0xf29b) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') (async) r8 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, &(0x7f0000001100), 0x0, &(0x7f0000001140)) (async) syz_open_procfs(r8, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r7, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) 4.916797417s ago: executing program 4 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x80}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x80}}) io_uring_enter(r2, 0x6c1a, 0xa25d, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001d00001200000018000180140002006e657464657673696d30000000000000080007000000000008000800"], 0x3c}}, 0x0) 4.823149593s ago: executing program 1 (id=3714): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020}, 0x2020) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000004c00)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x40, 0xa, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r5, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) cachestat(r7, &(0x7f0000000000)={0x9}, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.544723485s ago: executing program 3 (id=3715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000001, 0x96, 0x2}, 0x0, r5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000001b80)=0xfffffffa) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c000) r7 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x2000, 0x40, 0x0, 0x2, 0x2, 0x9}) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 4.42872884s ago: executing program 4 (id=3716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r8, 0x400, 0x1) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r9, &(0x7f00000024c0)=""/209, 0xd1, 0x8) getsockopt$inet6_tcp_int(r7, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x0, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x95ffc}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=""/203, 0xcb) 3.295532777s ago: executing program 2 (id=3720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000002380)=ANY=[@ANYBLOB="7400000003080500000000000000000005001ffc4c00048008000840fffffffe080005400000000708000940000000030800094000000000080003400000000008000940000000080800084000000101080001400000000008000b40000000090900010073797a30000000000500030006"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40850) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007500000000c0a01020000000000000000010000000900020073797a32000000002400038020000080040001800800034000000001100007800b00010074756e6e656c00000900010073797a30"], 0xdc}}, 0x0) 2.928278635s ago: executing program 2 (id=3722): inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) epoll_create(0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r6, 0x4, 0x6400) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000100)) 2.162083013s ago: executing program 4 (id=3723): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f0000000100)='./file0\x00', 0x0) read$FUSE(r1, &(0x7f0000003fc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x7}}, 0x18) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000140)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) 2.15405212s ago: executing program 3 (id=3724): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x4, 0xe, 0x6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f00000025c0)={0x0, &(0x7f0000002580)=[&(0x7f0000000280)="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", &(0x7f0000001280)="6da262ebfd5441ccda7b763a7bce31659e20616749d32835e27e4d2cca3bf33cdd1042d564e27bb09fb9d99be0dde616b79787c64127066019e3bbf2e1880b5145f65334d57c242b01fd59c1216b4e625401a5358822876df74bfde31910aff378769cf607870c2d65e364658293e9f1383546832dbec05ab1b7472010e61002f89e20db7d55c8749d2fa1a4ef0d26b1d98a380612acdb2bd13663cdbaae199f85fb17ff6937f14681f099f847eb233b9d8cfc10394c0d657942bf242f0fb4a2279b20b8db887f73648c5ab08bfaff08f46998f2c52076a8234d", &(0x7f0000001380)="94d04360694842d0c1387c741fe0f18ab15c035932ac9cc5e0c6a91e3fa2b6f455b5f7d0", &(0x7f00000013c0)="0414d249f3d26d572f41e5e1cfabf83968b0b2c7e4c9a19dbac131ee79ff71b5ebebf808a90917400b7367cfb285516bf14e534a2943811da891b56c49288aeb4a06afc8c978cb02af40ac571f05eac7daacbb764532d161531abb4c9635646d7837a2d027b8717489ece5777b1a852d3348470f61ac300cdf6c580176528b3a17829da8081bf703bc4615edcd6fd1f2185d", &(0x7f0000001480)="e187ca96763fd634fc516c998a4c0a9e9bc1c409b2ee900440a8eb710bb837c1be89ab94eed4c813cc438b6be4018c2281f5241b6bcb16e745b8449e9ba739bf8b1434c2759b006601901de1b704e9c6c310675f1c5f6bccf2829568e7a78f92deaaa331dce3bafa86012c87e9709d71cecf9b52a9a619b8ef69a11183f87a21120b5207585406d493fc2d862465215a8fadbf32210bcf6bb426d290455ee1f3d9dd0180ca5ec3a21f17fc8815b6c63aac2631877c37baae7767e95ed87975f8da638c9b621a19fa81f1e8", &(0x7f0000001580)="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"]}) openat$cgroup_freezer_state(r1, &(0x7f00000001c0), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x29a}]}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000180)={r2}) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 1.772224439s ago: executing program 0 (id=3725): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="ed226b2c438e994285059f64f239ec609789405513af2c1be8f518ecec4ff05de2c22ed30be945346f369dd472374b11edbea92731cd94f6a7dc71ce7e30a14dd6200063e9a9a069e1b34aef5c31658c7cd2dd854b", 0x55}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x2, 0x2, 0x80, "12076b203bed63e1a02bee8ec35ec9d44988d4c5933087c8725ccd6656d02fd3", 0x64737664}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) 1.543844525s ago: executing program 3 (id=3726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000}, 0xc, &(0x7f00000004c0)=[{&(0x7f0000003040)={0x15bc, 0x21, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc, 0xf7, 0x0, 0x0, @u64=0x80}, @nested={0x1d6, 0x94, 0x0, 0x1, [@generic='y', @nested={0x4, 0x9b}, @typed={0x8, 0xff, 0x0, 0x0, @uid}, @typed={0x8, 0x27, 0x0, 0x0, @uid}, @generic="fe0ce88ff83c568225d6d8baf60872e7a77e3c57487adfd8c83885aee7e96067c2424cea88e9380a18d857e0f7fb57133e848b0eb092fd749fa3e0f0e78325935410f2a02231e23e221709a9bdc0a9084615db0316bd7bca9f3be13692082ec67697e2084b9f1c5b1c9e378a4b2f13e476af7e5d7850789d8c1f0b008762fb0bc1593d3d2bd2b70d52b1c33ad041b0c4904978928d479d541e035bb42b957881f0e8d7a4c6b019cb0bd882c29ea98a5c58bd903802e07ea96f68b2b7dc31e7d1916ce2963e004bc88451f92242b53e3ea2", @generic="fde4b961cf4cf1df656af4c19a4fccdafe52d0eb863a9df7d94eddbca90564e75ef678c74b7f03456a5c8c7995ff979654233b94599cbe22286a493786c8abfa74dd38b44e40fd22482ee60fcae962dc28178c32265adea0d11e86e3a1dc54f255a17286fc2b5cf27220060229cc1a686686a559b580e0d67e38843278a35be1271ddea930f4330d230757069606f83f0643581e77d94f64772bd2fc3337bfe565b66a9dc94bf50d3ebac46d0338257dca07587b266087121cf9c9a1d818227318ca8aaf7fad5b6ebd3e88ba0624600179e652fa868d4f50f4a111ceeb49c7fb393a48ac", @nested={0x4, 0xb4}, @generic, @nested={0x4, 0x8d}]}, @generic="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", @typed={0x8, 0x11b, 0x0, 0x0, @ipv4=@empty}, @generic="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", @nested={0xc, 0xf2, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0x98}]}, @nested={0x1e1, 0x7, 0x0, 0x1, [@generic="d86221aaf57369f2d11e4485ffb0ca82bc56e75a89c8220bb0df312ec6cdbbe29e38bdefd7e744bf8cc44b4c61ba0c044b5014b54e6a91302d956f7bfcfc1c680fb8a85de456fecf9a7d8cb88051380cc6678d925e875a47c592df3de765ee9e09708384b641138a5da07d87e04c9c82961280d362", @nested={0x4, 0x145}, @typed={0x4, 0xe6}, @typed={0x7, 0x18, 0x0, 0x0, @str='^-\x00'}, @nested={0x4, 0x112}, @generic="26300fe4cd9db205ef607e218eb43b14d655bbfe7aca606bf9d9df6d1485c9e6bc8dc000a56edc626d9786f34e71aef5216452fadd8b74f59d40120ced94539e1d269f9e61cc3f606d8007051a09ce168d7e5d8ebb004a81427c4909d86fa836", @generic="d58416cb1ba5572cb0b9291d178bfe220ca604d260d7218ebc331f8bace902a108b78545b5443689ac9de2cba0db899ff0ab597c70d12a3128e1a7c11863053c3051ea8fa3f0a9648c1c20ea714b862edb9ae5c5dc15bb2b569b872519ae3512336e300eda4e746606a8e92aceb4693d8fbf1f02126d260abc605a734c4ea1fc9a0ae8ae105582b37cc7df4e4e8d332d4aadd9d308179325ecadf38347a65c41da16c1681d0282f955ad2dfeb29d76aba0e484ec76fd35e535b7455a61af2c51d2d8d484d155cca0afcff76775466f2afdba4cdb4e44c32907096f6dbaa634f75d2d13ed72c1eb6bcb2b912295481888fab80cfa"]}, @generic="457ed32a7ee22920e08a78637f8bd82d193290d2ccecefc141109c62", @nested={0x14, 0x53, 0x0, 0x1, [@nested={0x4, 0xe9}, @typed={0xc, 0xc4, 0x0, 0x0, @u64=0x7}]}, @generic="9bb83630c8b0f248c557fd55976b11ea213afef5faf48c06596c6e881b213a15a3f45d222ff46ed9ce7c800ba184a75d52cfe544ecc37c37865258ad0db0fe4eeca74501bf91c05bc581cd996b9310cf3cf95a32af4ff766b02e361b9c78786e4e0857a0a66ca0b25b8211ec75a662034fc17282d22f335bb31613831b098485087582cd7d100e3ee49d55245569fb5c8a2486d7931eaa7fc072f065abc27e5b"]}, 0x15bc}], 0x1, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x80}, 0xbba0e750fb86e36c) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x7ffffffe) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000110}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000c0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4, 0x3, @vifc_lcl_addr=@private=0xa010100, @local}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "6ed6c4", 0x44, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0xfffc}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x1, {0x801}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r7, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, &(0x7f0000001500), 0x200) sendmsg$netlink(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d00"], 0x1c}], 0x1}, 0x0) recvmmsg(r6, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7e, 0x9e, 0xb4, 0x10, 0x54c, 0x38, 0x16f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0xc5, 0x38}}]}}]}}, 0x0) 601.591612ms ago: executing program 0 (id=3727): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/105, 0x69}], 0x1, &(0x7f0000000280)=""/23, 0x17}, 0x40) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) (async) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x3, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0xf602, 0x3, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0x1ff, 0x0, {}, {0x5, 0x2}, {0xfffffffffffffffb, 0x4}, {0x6c0}, 0x60, 0x0, 0x7fff}}}}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2}, 0x6037}], 0x1, 0x1822b, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000001440)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9abaeed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b", 0xf3, 0x6d91fb6102d8910c, 0x0, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 484.306135ms ago: executing program 0 (id=3728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001", @ANYRES64=r0], 0xd0}, 0x1, 0x0, 0x1200}, 0x20050800) 456.375809ms ago: executing program 0 (id=3729): socket$inet(0x10, 0x3, 0x0) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) (async) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x10}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xec, 0x200, 0x80000a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x7, 0x18, 0x8, 0x0, 0x8, 0x2c8ee843}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42841, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r5, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) (async, rerun: 32) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) 248.125742ms ago: executing program 0 (id=3730): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000040)={0x1, 0x3af2}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x80a0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f00000000c0)={0x2, 0x7}) sync_file_range(r1, 0x7b0f511, 0x80000000, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x701}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c841}, 0x4) sendmsg$inet(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000240)="06745c93fa1487a2d08cccb5b3ed8bdce36716cedd74275b81182f3ac2c2ce2cfb1ec8977625718ed360936c09fdbe222fc23ddd9037cbe1b515409912226db1936337042958f0de26f376158301e98d367a9e0c44d1221eab62848f739727917da7c31b335c3c7850fed68f75", 0x6d}, {&(0x7f00000002c0)="ae6554b32c542628f3eede53968c8fdda7ff68516d9f77c40c25e55816c5c4a0b3bb6cb1df65de14b1e30a4cd9f46d52659f32648fab8910e64ccbdc938f341e72", 0x41}, {&(0x7f0000000340)="69e2e5ee33f8ce8beb784386f53fac68cf4a629125c3378f8c95245d15be1d02dde8842cea3b4fe6daa0590e5ff8dd0142bbf1cf8b984af383f181451330bdf112e5203a6e0d3e10852afbb1ccc00dbbf7cb9c55ee00264aa2a8323e57bf84f78bf658fae5a5abc737fb5bb39b42b3e74bb8bd63a847d491a46f352448fdffba719e3746c7e4187a524a1707c61c10963b61c86b56365298e1dd0de04ef48834564af9f1cda0692523932f7e9afe155b93f0f4283d42c960ab0c7ca6d003865c2b1747553c663388e6f8a6e5d771a434eb88165ed09c5a48c355f0f148755dfb10e3f6169ab9abb8e70e12f9456adefdb700d618a9151c51bdf374e9350c69cf339ba6b169b751a861d04f3fde4c9240452d039b51f099ce63895a26e064cc884b35fc09c72dc621959117ccfbf5461cae5cc5037940f8815b97cf9ac556f0ad55fb8d4e58812ae76ee125a287c58897ef0f39755a4bfd047e532c663e3f7cdbf53bc2ab015f7b6c890173de189c2802c6289c253ad4d927d06ce772f75db055c10d74857a3b154f401d70afd6932959ae2265b448241ece3019cdce48ad007f91da55506a7b4f0111db4a1455aa888248ddecc97e99551d12af6f13e5b0cdf3cfba4c75406d7c8c237a3978c5999afc819ca61ab5cfd33c85a41bd6a8144f356cb769cc7410366c6b31068454807a865301c11c0a11cf2eb9d09b4874e37722ced91e817b2ea490e8e485f290f8279c2c7013f7af3f46c6497b12fea43200bf946b55f78a2f442f5af367012648b63a28c3f9092ead85dce75a32cb8868a625818d7076e6838dd276c9e93539f8ba8059de0c749a235ebd76a2ff98cc5dfaf279d4fe6c6e28d6e97cc2d921a6eaa84c2657cce76f38ee0702ad5e899d359e05eb4b5587608abbb3c7297a466bd45ff311b2dcff1dc42f9940c26383df94843b3ecf5dd3c18734a4f92cca9a8f5569f84b2d2f435190c6f2aa441aa2d3daa21379a1d8d26f29618d196e620b56999718ab8d1ef4bd15fe21fb589e8176c5530b9bb9e36dfece4a26869cace1f3b9aa8a963423c002c6a8184a78125478dcb5d0d14cf38ebc7437f2c1e94f35478a3e0a13c3025bc3448f4f9d658b56f5165553b374c54f5de2c72cbff061e9704867eb47aaca2594e57808844be4b0778443c71d1ed994c2da666ceaf953773566655e2558a51a8c03d54ac6eab21f42a2c8ee1bff8f762becccc08ec6e1dee55f9d3f1f7d704f5d07f73a72d6e9ba867373f38122619415355984991a7a5a7ee3524d61b04ecec7590c164b97c4409d5c82b4ee9f00348147ac9d7a6664ea48672b744b7744b71fbf8bb2f8259308d90c315e330dd930a3ccfd50f31d22333efbdc683c16c613a6495031fa00e1596806ef58261f13982fd3653e3f6b0774149f1e022e006d2b911d9c7b3f546bf48ff4393c64eb848d3c52c8baf3948c67fe005ffeaebd16712712914aa131fd34e6147d0ec45f3842c840d0b2c9d6de51ef9013d6ef598e7a1f311f4dd1dac60afdbf7dd3a2b1773e36ca51e3398bcf3830f20b97c8de3ae4a691081f3d8642c75aac88343843d920493093be2f4bdd43186a3ef45e2ef63fb571b3153ca0c48510e51e31ab7574fb7fa236512ddad80f023cad9bb67a2c90429a1140decbe502c22508d4dad2273552552c82e035cdfd3858dcdb92fb139a58df0522407aff3147435aa54949e4b2e0f5a80875d24739f2815857b600f5486891d4fffe52a7bf69dd01c8b3919d279e61fc185b74464c2ec7f9000b021f315d5f6ca500a2efe60998db5dd18bd42eb3c5c295a709effb49f8ec846a942fd61d034472fe0d376041a013d99f8790869b899fabb8043d53ce7e2d289ce254f658c761cc0a67575416439caf8fd2c68d486957a6ea7dbbb9c3a8491408c6717905dfe29b5b4be04715e6c3dce4bb6cf658dd84ca098cbb895199b69cf73a9f9d65d8803123bba2d35a6dbdf268237e54227d9e72059e8934ce78d166dc759b08e0f7aabb9d128a50934504cab9900fee6aa807fb3a32421b6828832d2c80ecb43927a0f26d925410a00046f7da22713e86249f93e92258e490e5827a23ba9841b9d7301bdf5e8ccdac6675d97a17950a7dc2166d1978ac25a2bb2b637902606580aa7848b01fb5e4a8b07ce89f0b37a17909fce70c658d374e350c26d51542f3ee3e78babb3b12c8077b56209243c4d2a21a5338902141765c1e094fef659a36cfecba9aab995da559bdd75348b07b84c9bd05a03812dc6cf43545cab0fcfe57abe4e497fb55714badfce5ad008d53aecbce99d630e8b2de4875e4719afa2d9409ea2726fc06c1a29ecfa87bfb2f7c68dd358a4907020c91636d43ac4cf79e9d8641cb6f4dcba887f34c4b741853b4d2d332dae3466d4bbb439eddcca9f475b58072c845827cfa9dc8f15cbb7106a136e4cde5cf3e4ad66c7adff5a526d16227b03a3adc34ada869caaf162ef098b517e3f0295df5b86d8e0a5a012b54a6a7d8a58f03f539ff7a6f4bab900535a138b2baad2c587d7d1ded3c858b0fe3b2a690807e2c3d610b96d57aa8db5670b9c822e99647ed8c0274054a60d20d20878b2d64771a518a37e0aa535de6bde18d8d3998cc04150ef2e68c6d53bee25668e1d8e33563064327f8e604cf931755842bb11d6d7a8ca1ea51bb439a814f41306371b1104198e46748f47f5b4f83f82a80c81ea995df2a395a8f20ccf7455e4f26d52f3f0295b15f5723d4ff1dd37f1284e607dde7b5ec09856c303d61543a89ccbab1b6ce362e26b460a1067bc18816ebce92053dd2d23d064c377f8e53f611a3060e64fe098ae01d30d938d15ec8a52684a44eac3f7abde276e29c16f2a48ba0960f8dabc66f7f0901d40e25bbbc63951280ac8b3d277c1ae397cfd8bc86225572da5a9f99ebd18dbdee827c663155f12db52012155fbaf027bafd23fe1008fa82fa19b2274b19cf216bbf3a4d25b69209f07be533c9375d83657ec05fc041f20ee31114b435c3d68f3cea3b5dee8d095ae2df1c6f6bd15f471b11f6682c987819f0962735c7b3b258369aba13920602068c0448d1b925dda51289ab3fe9936150b4d843417988deb44df72040f5d9d3ef9235e03aa88ecb4b581acacdd07e6a30cbeb75e20b5e54336915eb61e18e3898884a8cfe1ee105fcd6867715bcb5abf4b8b92b39d993dfa41bdffa8983727a813c99ae060c9772819e1de51d556642acc570bdf90b2245d6c32e112e45595e74c8e971f233ba3a4ca0b1dbceaf3119158549f20dba2219e2d5f38b4ac22858393fc02adde4c13e089ce427a338937ca167effc46c30724bbd7d02c1396c520de722377a7dfb9a7d97b6deb8ef3cd8e3798f4701e3344a6a92ef584f600f8f4adbb1069913252b11214c7f91f10941e89d80f1c7e7b02a6daf0f6676621f5bb62b03883b4383bb9fdb809a7da9a1e34677da655d3099acf3102f9468dcc76ccf91cb9ed513460144c070bd976a8d6b2b624f53b2362a074d01bec311f52fb2f889d457716cc5c1a97cdea642c9145ffe9a8c9e3716667d58558250a703f3d7ec99d4e99557233230071132458d9a947aac03f2f5f6564ba4681bbf06430da4d498aad25a902908f751324824cb812130f2a96209f19e81bdc521b7263e59bffab1bc21bc44bc06e51616347815c662e679e3ec9b4be01f218406e42f0485e1821ef142f7703a67e0657eec2d09f375b2f6c1ee9e727e8ba7be8a028a8f288df0fe42332989a4d283e7807b20a19556bce075aa95562c00fa095912e2b7401c2d3aaea247c396b2a60d813f5776f1c77b57c625fcfcd075d25bdf356cd912c2725e262da1f0b671d35b0c35807cebf85b00a306d23150aef50364369c704b23094964164a7f4c1e88fe212545eb7cb15201ec57b3eca7fb4503287fdf733944b8bedf19b9c96440ce80f0465f304a08d32a1e19013de51e770f791531932ad98dadfa079d7ee31af13604b89c0e29b0a1835ff90300857c4f88bfe8664daf0aa9c59b7953f811fe5f262c9302e19908fb86546fcf5582b6589305cedcaf4d6e76b014c44d64b30839035258c98578b0bde91ac0e3a99497c4134691c0829fdac2419dd111da262345a2cc36fd8da0b9e6458d631ecbab42ffd3203517533718faa8e32388e16a1c8ac84bd3466bff0a329c3a730e8835d27013004278c3d90faead8f40a3e8975e1d892a981499a1f64c01953810d64b2104b2b34ba59ffc26c40c074c2a075c61d04183062795c223b09a3b3c0e0aa9b9cd88649787553722dc558a27ab47a837d6d5ada62981568fcc83243c5a43666760fe15691316ad19aa9eb8f32c473f29eef7cd107fcf0e464bdcf1bc4dc786201cbff916bdcbc1223a85ead165d8c22ee91e2f02b17a9d9d953663d28fca656a53e186c3a6f6c975a2d07ff9c6e287b2bd79d55b5c7743c80a7aa30acaa3a0676044c268abc73a4d5968cb65610cb29bf9066b6b5d51a3d0cd6bb3a7d2b05be3f86769f275474dab7b926749b7cad290591617984addb61d92ee858e6f69009b9091bc7ad7dc5d711923ef21e348e01637ff0f3d4c6c499c06609c1db322744f0ca78bb5174d2792e48e44beb1b5a8cf08852dd3fd3af6a91749a6ac924608567b296475bd77b1ef5e6f3c82ff94bd4fb74eb7cc1e891cb27aa27b77247bbd7a83a60b1a7f3c43d8dde2b0c63d00b549b26d23a5d60f1f081a5da59b348cf6343d532e5980bae2079fbff34c3b99d60f1e4dd53f023a7d132416ddaebe0dd41732119dfe75facf465c74401d9bf41b23eb4437d603e10f9cafc0e97127ac010ec2268f06fe7750c16604824079adbea19d750d6e76d577ebd0a951ce75e688f214a8eec1a8fc6c5d9668e5179fe4aebb0a150a6ce40e503921d00226af3a713b336ed4f447884c3cdda7b2c2f32261399ee2fa7600508d1b5a33f4c2cb87e0b4397e80dfcfec470bdda431bde7e945b9f1d8ee8942b8071dd871f1538a6d08a8a238ca45372453f151fa6d3f8e0c62932eb6fcaae1ac81f47b98e24b1b35673d62c781208ff788cb6ff9e32f6fbbd9db03ae3e2fb411328fea732ac19c7821c9fc75b8d935c235d3042199cfa280fec675b05955ff42eea291dafbf146d543938782e56c94396d5968be4e78e66635aafcdfb7c77fcc7a8bd970b0aa61025b7c21f0ad5afcb0faaa2b68c415c856c5eff68f370ed5fccd9cae57c0d0180fdddb61869bbb2a3807b261bb7ac7a74805721033bba04c4699f183fa3b64d1f54ef2ac90e8a163ad83f319a1c9c91926ed2ea508ca216b8b4046b780b27d669399d18e615ba64d4aade674159955df7e13d9ba94e9de2163bd1477814c046e43cd3e215bdb53c0806382a04fcba92e5d0d61ceb9d11512fd41e6dfe788dc988e97f334db31d4873f1d9b185abac5940b5b9f2c6204dd9cd9838f2c0c179641d3fae6829f63557cdba4271e2f21ec8745373a4f1a59a6043c7b4d2cbace3c15bad769ffda3606cdb1323d11de6dfb8604150ae24f4ef3e5b0fbd7fbe42562f4a3e0c95107ea3703c3a5587e8a46edab264c1de955a6735a0bb914f7d103f892be8af33314e8c7c9b8046d5c9193fc69fe0eec1936c59de5a75b3bd94f5a38c57b5f3783ae32219b0b8ce675d407d758fd293a36d466fc92634a23b40322e1651a35bf55340fb8a8cc5cb65b39d13c2b254527468bcfc28bc5267e8fd5e41f3c58602882a95692da8db1437d5ca8dbe91d0ed7532bb8cf6210c98552b2766ad39f9830d0a3ae189d6", 0x1000}, {&(0x7f0000001340)="e82aa7c0ef9c836e62f513235045a77df0d2d764d74bf851dad31c4c9e3d561236dba0f7f979dfccf6118a61d73e98c990f82ac499ffde963196f80da582ddd4799ea4c48785e0610fc8517a34fa5bdd5f4297920ed3187d2637fdefb7e7c5bd1df03851ede7ee4778f279e4836538fcb995be355cce04883922eec459feebd369190a679818500b39c6ad81aa86aa6484882dad1bd91867efea359d742f0c3ea17c830af0b265c074b65b1fe15975667267e78e9b4694b3ae42f63ad9d1d759c7818eb483b0a2c3e9c32e5b576690b0e1c09e93bf8f0a6bde246ea0a8377983a0a9d9b5741ca706c3e5992d9648f454db8c17ad1380fab683", 0xf9}, {&(0x7f0000001440)="cf613d3271c7b9f91c0ce3d399ac519a3eda5d1a04100111f98cb469831d59e7cd2eace9d7862fcf4615e7a19f78b533876f85ce27f7228534cc5bf489ac4e936710699dc54b8a10956f1cc93342e727e2c4f0db4d06672dae06b82d142c10c56c0eabe1880b9cd847c8c5de9d7410ca87efda867f975556919b50183dae4a479fc5d71aefd85e3289cf73f62dd482318c0dd0b77f4cda66150eb74eae9a338994ce57c84a63418eee6b873c5bdf2890ac32afca81f7acce49fc47753f1727975937e05e0ae041", 0xc7}, {&(0x7f0000001540)="25290d157796f66a215469070bba9c33e4d412753fcadb9d3b59ca20873d73ae519ed83802c8155bf40e794436316b6794e2e9e5fe4ae565af51945902a77fa72467fdf287f8fb729d7e64a0de0b9c770137149537dd60093f11b817", 0x5c}, {&(0x7f00000015c0)="4c011d257f45153a3517aa471879f456489d123708a55e0f9ca65b98b4b6b35521428eb016a2709f006594c42cf8c409187d260414ccbe1a84bdd806f4c757c931741b222850610a148b9cb3607074244019a0b1bac0ae07dd021061208f4ecf71674629c8", 0x65}, {&(0x7f0000001640)="388f67131a9df7326866a48c26e227b469e24955241161ebf570c616ff156783efabb60ae2f64f6106e9ae7359cedf7872f0cdbbba4999b53843c068b9fcaafd91339af4c8169e67f7e55e4bfbd9d094e13e8a6d746ea4d2ed3f1d9bc0f7e9508601c0e2f8cda2178c1640880ed577f7229a958afd4f26e3d02808994404e0a35bcc22b97be7", 0x86}, {&(0x7f0000001700)="5ad2a9f32d60cad2cb65fff35462bb3f3beafa42", 0x14}], 0x9}, 0x14) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4008004) r3 = syz_io_uring_setup(0x5c3, &(0x7f0000001940)={0x0, 0xb6ff, 0x1, 0x1, 0x4b}, &(0x7f00000019c0), &(0x7f0000001a00)) syz_io_uring_setup(0x2, &(0x7f0000001a40)={0x0, 0x4cfe, 0x8, 0x0, 0x322, 0x0, r3}, &(0x7f0000001ac0), &(0x7f0000001b00)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000001b40)={0xbe}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001b80), 0x1, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000001cc0)={0x5, 0x8, &(0x7f0000001bc0)=[0x6, 0xff, 0x9, 0x5, 0xc, 0x81, 0x2a, 0x5], &(0x7f0000001c00)=[0xf, 0x7, 0x976, 0xff, 0x0, 0xd0], &(0x7f0000001c40)=[0x77e, 0x5, 0xe, 0x7], &(0x7f0000001c80)=[0x6]}) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000001d00)='./file0\x00', 0x2000008) openat$random(0xffffffffffffff9c, &(0x7f0000001d40), 0x8100, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001d80)=0x0) r9 = syz_open_procfs(r8, &(0x7f0000001dc0)='cmdline\x00') r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x5c, r10, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "c38746f5cc2b62cae63345acafd45b8b"}]}, 0x5c}}, 0xc0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000002100)={0x10, 0x0, &(0x7f0000001fc0)=[@release, @release={0x40046306, 0x3}], 0xfb, 0x0, &(0x7f0000002000)="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"}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002180), r9) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x1c, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000005) r13 = dup3(r7, r4, 0x80000) sendmsg$can_bcm(r13, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x1, 0x2, 0x1, {0x0, 0x2710}, {0x77359400}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "0d3d655be6409415"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8004) 0s ago: executing program 0 (id=3731): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}, {&(0x7f0000000900)}], 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000"], 0x90) kernel console output (not intermixed with test programs): pid=19837 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07159aeb9 code=0x7ffc0000 [ 823.286835][ T30] audit: type=1326 audit(1770263843.356:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19837 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc07159aeb9 code=0x7ffc0000 [ 823.311096][ T30] audit: type=1326 audit(1770263843.356:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19837 comm="syz.1.3303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07159aeb9 code=0x7ffc0000 [ 823.340489][T12014] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 823.508894][T12014] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 823.536323][T12014] usb 4-1: config 160 has no interface number 0 [ 823.542727][T12014] usb 4-1: config 160 interface 200 has no altsetting 0 [ 823.559652][T12013] usb 5-1: USB disconnect, device number 97 [ 823.582718][T12014] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 823.607504][T12014] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.627920][T12014] usb 4-1: Product: syz [ 823.639799][T12014] usb 4-1: Manufacturer: syz [ 823.644436][T12014] usb 4-1: SerialNumber: syz [ 823.799022][T12013] usb 3-1: USB disconnect, device number 64 [ 823.929738][T12014] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 823.940133][T12014] usb 4-1: MIDIStreaming interface descriptor not found [ 824.076281][T12015] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 824.084436][T12014] usb 4-1: USB disconnect, device number 94 [ 824.236907][T12015] usb 5-1: device descriptor read/64, error -71 [ 824.296645][T12013] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 824.496856][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.516358][T12015] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 824.524028][T12013] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 824.534074][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.546296][ T67] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 824.557219][T12013] usb 2-1: config 0 descriptor?? [ 824.608349][T19879] openvswitch: netlink: IP tunnel dst address not specified [ 824.636538][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 824.666342][T12015] usb 5-1: device descriptor read/64, error -71 [ 824.726954][ T67] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 824.735531][ T67] usb 3-1: config 1 has no interface number 0 [ 824.764131][ T67] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 824.796398][ T67] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 824.818174][ T67] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 824.834491][T12015] usb usb5-port1: attempt power cycle [ 824.856340][ T67] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 824.891789][ T67] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 824.930091][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.955799][ T67] usb 3-1: Product: syz [ 824.972020][ T67] usb 3-1: Manufacturer: syz [ 824.984085][ T67] usb 3-1: SerialNumber: syz [ 825.015366][T19870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 825.036836][ T67] usb 3-1: Error in usbnet_get_endpoints (-22) [ 825.061549][T12013] itetech 0003:258A:6A88.004D: ignoring exceeding usage max [ 825.085516][T12013] itetech 0003:258A:6A88.004D: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 825.178140][T12015] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 825.244891][T12015] usb 5-1: device descriptor read/8, error -71 [ 825.436243][T12013] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 825.486310][T12015] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 825.519917][T12015] usb 5-1: device descriptor read/8, error -71 [ 825.598291][T12013] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 825.617336][T12013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.638597][T12013] usb 1-1: config 0 descriptor?? [ 825.649344][T12015] usb usb5-port1: unable to enumerate USB device [ 825.659036][T12013] cp210x 1-1:0.0: cp210x converter detected [ 826.116262][T14573] Bluetooth: hci5: command 0x0406 tx timeout [ 826.270395][T12013] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 826.278836][T12013] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 826.287915][T12013] usb 1-1: cp210x converter now attached to ttyUSB0 [ 827.061679][T12013] usb 2-1: USB disconnect, device number 92 [ 827.081180][ T5903] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 827.206322][T19736] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 827.238516][ T67] usb 3-1: USB disconnect, device number 65 [ 827.263434][ T5903] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 827.281373][ T5903] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 827.293878][ T5903] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 827.306356][ T5903] usb 5-1: config 8 has no interface number 0 [ 827.324287][ T5903] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 827.340851][ T5903] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 827.350719][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.360167][ T5903] usb 5-1: Product: syz [ 827.365130][ T5903] usb 5-1: Manufacturer: syz [ 827.367992][T19736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.370800][ T5903] usb 5-1: SerialNumber: syz [ 827.381822][T19736] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 827.395474][T19736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.410776][T19736] usb 4-1: config 0 descriptor?? [ 827.422138][T19736] pwc: Askey VC010 type 2 USB webcam detected. [ 827.527393][T12013] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 827.621849][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3320'. [ 827.664286][ T5903] usb 5-1: USB disconnect, device number 102 [ 827.689026][T12013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.699663][T12013] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.717359][T12013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.727804][T12014] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 827.736029][T12013] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.751775][T12013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.762072][T12013] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.778389][T12013] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 827.787654][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.795656][T12013] usb 2-1: Product: syz [ 827.800030][T12013] usb 2-1: Manufacturer: syz [ 827.804875][T12013] usb 2-1: SerialNumber: syz [ 827.811802][T12013] usb 2-1: config 0 descriptor?? [ 827.819691][T12013] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 827.827501][T19736] pwc: recv_control_msg error -32 req 02 val 2b00 [ 827.898145][T12014] usb 3-1: config 8 has an invalid interface number: 104 but max is 0 [ 827.906951][T12014] usb 3-1: config 8 has no interface number 0 [ 827.913062][T12014] usb 3-1: config 8 interface 104 has no altsetting 0 [ 827.919960][T12014] usb 3-1: New USB device found, idVendor=19d2, idProduct=a778, bcdDevice=96.b0 [ 827.929293][T12014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.035761][T19736] pwc: recv_control_msg error -71 req 02 val 2c00 [ 828.045016][T19736] pwc: recv_control_msg error -71 req 04 val 1000 [ 828.052168][T19736] pwc: recv_control_msg error -71 req 04 val 1300 [ 828.059708][T19736] pwc: recv_control_msg error -71 req 04 val 1400 [ 828.067183][T19736] pwc: recv_control_msg error -71 req 02 val 2000 [ 828.074094][T19736] pwc: recv_control_msg error -71 req 02 val 2100 [ 828.082198][T19736] pwc: recv_control_msg error -71 req 04 val 1500 [ 828.089452][T19736] pwc: recv_control_msg error -71 req 02 val 2500 [ 828.096478][T19736] pwc: recv_control_msg error -71 req 02 val 2400 [ 828.103456][T19736] pwc: recv_control_msg error -71 req 02 val 2600 [ 828.110528][T19736] pwc: recv_control_msg error -71 req 02 val 2900 [ 828.117706][T19736] pwc: recv_control_msg error -71 req 02 val 2800 [ 828.124916][T19736] pwc: recv_control_msg error -71 req 04 val 1100 [ 828.132234][T19736] pwc: recv_control_msg error -71 req 04 val 1200 [ 828.141887][T19736] pwc: Registered as video103. [ 828.152028][T19736] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input86 [ 828.178274][T19736] usb 4-1: USB disconnect, device number 95 [ 828.368875][T12015] usb 1-1: USB disconnect, device number 49 [ 828.390732][T12015] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 828.418632][T12015] cp210x 1-1:0.0: device disconnected [ 828.432259][T12014] usb 3-1: string descriptor 0 read error: -71 [ 828.463758][T12014] usb 3-1: bad CDC descriptors [ 828.494938][T12014] usb 3-1: USB disconnect, device number 66 [ 828.716256][T12013] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 828.917258][T12013] usb 5-1: too many configurations: 168, using maximum allowed: 8 [ 828.954138][T12013] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 828.990789][T12013] usb 5-1: can't read configurations, error -61 [ 829.007920][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 829.025479][T19933] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3331'. [ 829.186709][T12013] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 829.384633][T12013] usb 5-1: too many configurations: 168, using maximum allowed: 8 [ 829.465434][T12013] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 829.509993][T12013] usb 5-1: can't read configurations, error -61 [ 829.549218][T12013] usb usb5-port1: attempt power cycle [ 829.927152][T12013] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 829.959074][T12021] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 829.987956][T12013] usb 5-1: too many configurations: 168, using maximum allowed: 8 [ 830.022712][T12013] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 830.059395][T12013] usb 5-1: can't read configurations, error -61 [ 830.158865][T12021] usb 4-1: device descriptor read/64, error -71 [ 830.226243][ T5903] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 830.246447][T12013] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 830.270217][T12013] usb 5-1: too many configurations: 168, using maximum allowed: 8 [ 830.294665][T12013] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 830.304771][T12019] usb 2-1: USB disconnect, device number 93 [ 830.321064][T12013] usb 5-1: can't read configurations, error -61 [ 830.339975][T12013] usb usb5-port1: unable to enumerate USB device [ 830.457896][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 830.514795][T12021] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 830.635637][ T5903] usb 3-1: config 0 has no interfaces? [ 830.678056][ T5903] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 830.726763][ T5903] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 830.757414][T12021] usb 4-1: device descriptor read/64, error -71 [ 830.779307][ T5903] usb 3-1: Manufacturer: syz [ 830.795536][ T5903] usb 3-1: config 0 descriptor?? [ 830.888456][T12021] usb usb4-port1: attempt power cycle [ 831.242050][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3335'. [ 831.251229][T12021] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 831.280589][T12021] usb 4-1: device descriptor read/8, error -71 [ 831.291174][T19955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3335'. [ 831.546306][T12021] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 831.579488][T12021] usb 4-1: device descriptor read/8, error -71 [ 831.696680][T12021] usb usb4-port1: unable to enumerate USB device [ 831.846414][ T67] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 831.922046][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.938727][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.028370][ T67] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.038896][ T67] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.050969][ T67] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 832.060586][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.068917][ T67] usb 5-1: Product: syz [ 832.073272][ T67] usb 5-1: Manufacturer: syz [ 832.078171][ T67] usb 5-1: SerialNumber: syz [ 832.148821][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.158780][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.166250][T12013] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 832.180611][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.189557][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.200617][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.209809][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.221296][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.230295][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.289888][ T67] usb 5-1: 0:2 : does not exist [ 832.299958][ T67] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 832.323890][ T67] usb 5-1: USB disconnect, device number 107 [ 832.342802][T12013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 832.354156][T12013] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 832.355807][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.385124][T12013] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 832.398943][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.409235][T12013] usb 2-1: config 0 descriptor?? [ 832.415130][T19969] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 832.424428][T12013] hub 2-1:0.0: bad descriptor, ignoring hub [ 832.431480][T12013] hub 2-1:0.0: probe with driver hub failed with error -5 [ 833.058934][T12025] usb 3-1: USB disconnect, device number 67 [ 833.106390][T12015] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 833.116989][ T67] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 833.269372][ T67] usb 5-1: device descriptor read/64, error -71 [ 833.295478][T12015] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 833.304898][T12015] usb 4-1: config 0 has no interface number 0 [ 833.314597][T12015] usb 4-1: New USB device found, idVendor=12d1, idProduct=c13f, bcdDevice=38.ea [ 833.327692][T12015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.335881][T12015] usb 4-1: Product: syz [ 833.345953][T12015] usb 4-1: Manufacturer: syz [ 833.352393][T12015] usb 4-1: SerialNumber: syz [ 833.364360][T12015] usb 4-1: config 0 descriptor?? [ 833.395321][T19984] kvm: pic: non byte write [ 833.517204][ T67] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 833.563526][T19991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3346'. [ 833.586971][T12015] option 4-1:0.221: GSM modem (1-port) converter detected [ 833.605683][T12015] usb 4-1: USB disconnect, device number 100 [ 833.627228][T12015] option 4-1:0.221: device disconnected [ 833.666581][ T67] usb 5-1: device descriptor read/64, error -71 [ 833.777576][ T67] usb usb5-port1: attempt power cycle [ 834.036309][T12015] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 834.116456][ T67] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 834.142607][ T67] usb 5-1: device descriptor read/8, error -71 [ 834.197825][T12015] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 834.210284][T12015] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 834.220502][T12015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.228660][T12015] usb 3-1: Product: syz [ 834.233034][T12015] usb 3-1: Manufacturer: syz [ 834.237744][T12015] usb 3-1: SerialNumber: syz [ 834.250359][T12015] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 834.396520][T19736] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 834.406306][ T67] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 834.427064][ T67] usb 5-1: device descriptor read/8, error -71 [ 834.536564][ T67] usb usb5-port1: unable to enumerate USB device [ 834.546441][T19736] usb 4-1: Using ep0 maxpacket: 32 [ 834.553538][T19736] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 834.562038][T19736] usb 4-1: config 0 has no interface number 0 [ 834.568400][T19736] usb 4-1: config 0 interface 184 has no altsetting 0 [ 834.578820][T19736] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 834.588179][T19736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.596446][T19736] usb 4-1: Product: syz [ 834.600951][T19736] usb 4-1: Manufacturer: syz [ 834.605578][T19736] usb 4-1: SerialNumber: syz [ 834.612834][T19736] usb 4-1: config 0 descriptor?? [ 834.620345][T19736] smsc75xx v1.0.0 [ 834.931962][T12013] usbhid 2-1:0.0: can't add hid device: -71 [ 834.940493][T12013] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 835.060374][T12015] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 835.086589][T12015] usb 3-1: USB disconnect, device number 68 [ 835.149772][T12013] usb 2-1: USB disconnect, device number 94 [ 835.466326][T12013] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 835.596335][T12013] usb 2-1: device descriptor read/64, error -71 [ 835.836358][T12013] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 835.904041][T20013] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 835.982958][T12013] usb 2-1: device descriptor read/64, error -71 [ 836.097157][T12013] usb usb2-port1: attempt power cycle [ 836.316313][T12025] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 836.447616][T12013] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 836.480055][T12013] usb 2-1: device descriptor read/8, error -71 [ 836.507541][T12025] usb 5-1: Using ep0 maxpacket: 32 [ 836.528533][T12025] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 836.540720][T12025] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.557146][T12025] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 836.570822][T12025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.581674][T12025] usb 5-1: Product: syz [ 836.588262][T12025] usb 5-1: Manufacturer: syz [ 836.596620][T12025] usb 5-1: SerialNumber: syz [ 836.732582][T12013] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 836.767790][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 836.767808][ T30] audit: type=1326 audit(1770263857.236:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 836.801518][T12013] usb 2-1: device descriptor read/8, error -71 [ 836.835924][T20025] tipc: Started in network mode [ 836.843303][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.858991][T20025] tipc: Node identity 7f000001, cluster identity 4711 [ 836.871564][ T30] audit: type=1326 audit(1770263857.276:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 836.900280][T20025] tipc: Enabling of bearer rejected, failed to enable media [ 836.916500][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.916824][T12013] usb usb2-port1: unable to enumerate USB device [ 836.948241][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.975688][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.990079][ T30] audit: type=1326 audit(1770263857.286:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.015652][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.034736][T20025] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3357'. [ 837.048997][T20025] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3357'. [ 837.063607][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.071788][ T30] audit: type=1326 audit(1770263857.296:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.074290][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.153959][ T30] audit: type=1326 audit(1770263857.296:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.200580][T20024] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 837.215500][ T30] audit: type=1326 audit(1770263857.296:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.270037][ T30] audit: type=1326 audit(1770263857.296:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.305027][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.360287][T20019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.370334][ T30] audit: type=1326 audit(1770263857.296:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.425322][ T30] audit: type=1326 audit(1770263857.296:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.471835][ T30] audit: type=1326 audit(1770263857.296:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20021 comm="syz.0.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 837.472061][T20019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.787764][T20024] tipc: Enabled bearer , priority 10 [ 838.166478][T12013] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 838.201018][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 838.213117][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 838.223779][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 838.234931][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 838.292437][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 838.321749][T12013] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 838.336035][T19736] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 838.360129][T12013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 838.371507][T19736] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 838.392384][T12013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 838.405279][T19736] usb 4-1: USB disconnect, device number 101 [ 838.428361][T12013] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.445877][T12025] cdc_ncm 5-1:1.0: bind() failure [ 838.459530][T12013] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.461731][T12025] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 838.472854][T12013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.497398][T12025] cdc_ncm 5-1:1.1: bind() failure [ 838.506431][T12013] usb 1-1: config 0 descriptor?? [ 838.532009][T12025] usb 5-1: USB disconnect, device number 112 [ 838.546580][T12014] tipc: Node number set to 2130706433 [ 838.722428][T20028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.759575][T20028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.792398][T20034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.808805][T20034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.982476][T12013] usbhid 1-1:0.0: can't add hid device: -71 [ 839.012357][T12013] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 839.086652][T12013] usb 1-1: USB disconnect, device number 50 [ 839.536255][T12013] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 839.686290][ T5903] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 839.696413][T12013] usb 1-1: Using ep0 maxpacket: 32 [ 839.709104][T12013] usb 1-1: unable to get BOS descriptor or descriptor too short [ 839.716311][T12025] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 839.728359][T12013] usb 1-1: config 9 has an invalid interface number: 1 but max is 0 [ 839.745456][T12013] usb 1-1: config 9 has no interface number 0 [ 839.760291][T12013] usb 1-1: config 9 interface 1 has no altsetting 0 [ 839.779830][T12013] usb 1-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=4d.2f [ 839.801364][T12013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.818367][T12013] usb 1-1: Product: syz [ 839.827104][T12013] usb 1-1: Manufacturer: Ф [ 839.836221][T12013] usb 1-1: SerialNumber: syz [ 839.837975][ T5903] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 839.852724][ T5903] usb 4-1: config 0 has no interface number 0 [ 839.859782][ T5903] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 839.874505][ T5903] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 839.884603][T12025] usb 2-1: Using ep0 maxpacket: 32 [ 839.894445][T12025] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.907060][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.915500][T12025] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.926334][ T5903] usb 4-1: Product: syz [ 839.930580][T12025] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 839.944577][ T5903] usb 4-1: Manufacturer: syz [ 839.949790][ T5903] usb 4-1: SerialNumber: syz [ 839.957180][ T5903] usb 4-1: config 0 descriptor?? [ 839.963085][T20058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 839.970813][T12025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 839.978199][T20058] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 839.985664][T12025] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 840.006017][T12025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.039080][T12025] usb 2-1: config 0 descriptor?? [ 840.113897][T12013] usb 1-1: USB disconnect, device number 51 [ 840.536453][T12021] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 840.663458][T12025] usbhid 2-1:0.0: can't add hid device: -71 [ 840.693045][T12025] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 840.702189][T12021] usb 5-1: Using ep0 maxpacket: 8 [ 840.729080][T12021] usb 5-1: config 0 interface 0 has no altsetting 0 [ 840.735750][T12021] usb 5-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 840.752924][T12025] usb 2-1: USB disconnect, device number 99 [ 840.777321][T12021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.810626][T12021] usb 5-1: config 0 descriptor?? [ 841.249401][T12021] lenovo 0003:17EF:61AE.004E: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.4-1/input0 [ 841.437799][T19736] usb 5-1: USB disconnect, device number 113 [ 841.476477][T14490] Bluetooth: hci1: command 0x0406 tx timeout [ 841.643867][T20074] netlink: 'syz.0.3371': attribute type 2 has an invalid length. [ 842.434859][ T5903] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 842.591041][ T5903] usb 4-1: USB disconnect, device number 102 [ 842.686692][ T67] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 842.701186][ T6600] udevd[6600]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.176/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 842.896686][ T67] usb 2-1: Using ep0 maxpacket: 8 [ 842.918869][ T67] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 842.933899][T20108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 842.968903][ T67] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 842.995693][ T67] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.040551][ T67] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 843.054900][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.070589][T20110] ALSA: mixer_oss: invalid OSS volume 'ummy0' [ 843.080483][T20110] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 843.086970][ T67] usb 2-1: Product: syz [ 843.091422][ T67] usb 2-1: Manufacturer: syz [ 843.096011][ T67] usb 2-1: SerialNumber: syz [ 843.101498][T20110] ALSA: mixer_oss: invalid OSS volume '' [ 843.115208][ T67] usb 2-1: config 0 descriptor?? [ 843.129123][ T67] imon_raw 2-1:0.0: IR endpoint missing [ 843.186329][ T5903] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 843.268019][T12013] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 843.358434][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 843.378320][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 843.405527][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 843.427068][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.449198][ T5903] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.468434][T12013] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 843.491231][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.503440][T12013] usb 5-1: config 0 has no interface number 0 [ 843.516233][T12013] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 843.546107][T12013] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.571237][ T5903] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.571234][T12013] usb 5-1: config 0 interface 113 has no altsetting 0 [ 843.571265][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.617416][T12013] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 843.636713][T12021] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 843.646436][T12013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.654686][T12013] usb 5-1: Product: syz [ 843.666303][T12013] usb 5-1: Manufacturer: syz [ 843.671147][T12013] usb 5-1: SerialNumber: syz [ 843.679176][T12013] usb 5-1: config 0 descriptor?? [ 843.679200][ T5903] usb 4-1: config 0 descriptor?? [ 843.712903][ C0] usb 5-1: NFC: Urb failure (status -71) [ 843.729033][T12013] usb 5-1: NFC: Unable to get FW version [ 843.740112][T12013] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 843.814159][T12021] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 843.828269][T12021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.844815][T12021] usb 3-1: Product: syz [ 843.859246][T12021] usb 3-1: Manufacturer: syz [ 843.863982][T12021] usb 3-1: SerialNumber: syz [ 843.873549][T12021] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 843.897499][T12025] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 844.165264][ T5903] usbhid 4-1:0.0: can't add hid device: -71 [ 844.194843][ T5903] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 844.225876][ T5903] usb 4-1: USB disconnect, device number 103 [ 844.471715][ T5903] usb 3-1: USB disconnect, device number 69 [ 844.595675][T20131] netlink: 'syz.2.3385': attribute type 10 has an invalid length. [ 844.617697][T20131] bond0: (slave dummy0): Releasing backup interface [ 844.640420][T20131] dummy0: left promiscuous mode [ 844.673731][T20131] team0: Port device dummy0 added [ 844.997489][T12025] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 845.014129][T12025] ath9k_htc: Failed to initialize the device [ 845.022397][ T5903] usb 3-1: ath9k_htc: USB layer deinitialized [ 845.549171][T19736] usb 2-1: USB disconnect, device number 100 [ 845.766813][ T5903] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 845.916261][ T5903] usb 1-1: device descriptor read/64, error -71 [ 845.976264][T12013] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 845.984298][T19736] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 846.148835][T12013] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.166223][ T5903] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 846.166668][T19736] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 846.191298][T12013] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 846.205583][T19736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.224663][T19736] usb 2-1: Product: syz [ 846.231528][T12013] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 846.243553][T19736] usb 2-1: Manufacturer: syz [ 846.256005][T19736] usb 2-1: SerialNumber: syz [ 846.270684][T12013] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 846.280619][T19736] usb 2-1: config 0 descriptor?? [ 846.285804][T12013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.304351][T12013] usb 3-1: Product: syz [ 846.311947][T12013] usb 3-1: Manufacturer: syz [ 846.321223][T12013] usb 3-1: SerialNumber: syz [ 846.334478][T12025] usb 5-1: USB disconnect, device number 114 [ 846.346223][ T5903] usb 1-1: device descriptor read/64, error -71 [ 846.461803][ T5903] usb usb1-port1: attempt power cycle [ 846.508264][T12015] usb 2-1: USB disconnect, device number 101 [ 846.581376][T20182] tipc: Started in network mode [ 846.586554][T20182] tipc: Node identity 7ec905cece2, cluster identity 4711 [ 846.594753][T20182] tipc: Enabled bearer , priority 0 [ 846.615890][T20182] syzkaller0: entered promiscuous mode [ 846.637348][T20182] syzkaller0: entered allmulticast mode [ 846.662285][T20182] tipc: Resetting bearer [ 846.674767][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 846.674784][ T30] audit: type=1326 audit(1770263867.136:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20184 comm="syz.3.3399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d5f99aeb9 code=0x0 [ 846.806254][ T5903] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 846.837342][ T5903] usb 1-1: device descriptor read/8, error -71 [ 847.076729][ T5903] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 847.118414][ T5903] usb 1-1: device descriptor read/8, error -71 [ 847.237332][ T5903] usb usb1-port1: unable to enumerate USB device [ 847.319722][T20175] tipc: Resetting bearer [ 847.353672][T20175] tipc: Disabling bearer [ 847.375523][T12013] cdc_ncm 3-1:1.0: bind() failure [ 847.409542][T12013] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 847.436531][T12013] usb 3-1: USB disconnect, device number 70 [ 847.726300][ T5903] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 847.836234][T12013] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 847.886285][ T5903] usb 1-1: device descriptor read/64, error -71 [ 848.007731][T12013] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 848.026884][T12013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 848.068432][T20202] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 848.076059][T20202] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 848.088503][T12013] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 848.126268][ T5903] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 848.144618][T20202] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 848.155552][T12013] usb 4-1: language id specifier not provided by device, defaulting to English [ 848.188857][T12013] usb 4-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 848.223413][T12013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.246806][T12013] usb 4-1: Manufacturer: ら〰〰〰〰〰㄰攵 [ 848.262109][T12013] usb 4-1: SerialNumber: syz [ 848.266430][ T5903] usb 1-1: device descriptor read/64, error -71 [ 848.296357][T12013] usb 4-1: config 0 descriptor?? [ 848.317315][T12013] em28xx 4-1:0.0: New device ら〰〰〰〰〰㄰攵 @ 480 Mbps (2013:0251, interface 0, class 0) [ 848.338097][T12013] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 848.378056][ T5903] usb usb1-port1: attempt power cycle [ 848.598399][T12013] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 848.612770][T12013] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 848.628756][T12013] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 848.647922][T12013] em28xx 4-1:0.0: No AC97 audio processor [ 848.688158][T12013] usb 4-1: USB disconnect, device number 104 [ 848.715812][T12013] em28xx 4-1:0.0: Disconnecting em28xx [ 848.754376][T12013] em28xx 4-1:0.0: Freeing device [ 849.004139][T20223] netlink: 'syz.2.3408': attribute type 1 has an invalid length. [ 849.070711][T20223] bond1: entered promiscuous mode [ 849.089075][T20223] bond1: entered allmulticast mode [ 849.106489][T20223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 849.139596][T20223] bridge1: entered promiscuous mode [ 849.145245][T20223] bridge1: entered allmulticast mode [ 849.167614][T20223] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 849.186365][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 849.346326][T16372] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 849.488848][T20243] sctp: [Deprecated]: syz.0.3413 (pid 20243) Use of int in max_burst socket option deprecated. [ 849.488848][T20243] Use struct sctp_assoc_value instead [ 849.516484][T12015] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 849.656258][T12013] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 849.677808][T12015] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 849.704873][T12015] usb 3-1: config 5 has no interface number 0 [ 849.717280][T12015] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 849.764985][T12015] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 849.806267][T12015] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 849.836937][T12015] usb 3-1: config 5 interface 123 has no altsetting 0 [ 849.867522][T12013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.879985][T12015] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 849.906796][T12015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.914873][T12013] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.946212][T12015] usb 3-1: Product: syz [ 849.950507][T12015] usb 3-1: Manufacturer: syz [ 849.960718][T12013] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 849.979023][T12015] usb 3-1: SerialNumber: syz [ 849.986400][T12013] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 850.020210][T12013] usb 4-1: Manufacturer: syz [ 850.099543][T12013] usb 4-1: config 0 descriptor?? [ 850.250426][T12015] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 850.340269][T12015] usb 3-1: USB disconnect, device number 71 [ 850.599385][T12013] hid (null): report_id 470919724 is invalid [ 850.872364][T12013] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004F/input/input88 [ 850.894738][T12013] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004F/input/input89 [ 850.968254][T12013] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004F/input/input90 [ 851.013058][T12013] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.004F/input/input91 [ 851.065370][T12013] uclogic 0003:256C:006D.004F: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 851.085893][T20239] loop8: detected capacity change from 0 to 7 [ 851.101062][T20239] Dev loop8: unable to read RDB block 7 [ 851.114260][T20239] loop8: unable to read partition table [ 851.123388][T20239] loop8: partition table beyond EOD, truncated [ 851.129863][T20239] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 851.297667][T12013] usb 4-1: USB disconnect, device number 105 [ 851.696642][T20273] fido_id[20273]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 852.696409][T12013] usb 4-1: new low-speed USB device number 106 using dummy_hcd [ 852.782125][T20298] netlink: 'syz.0.3425': attribute type 2 has an invalid length. [ 852.841473][T12013] usb 4-1: device descriptor read/64, error -71 [ 852.869926][T20298] : entered promiscuous mode [ 853.111535][T12013] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 853.266556][T12013] usb 4-1: device descriptor read/64, error -71 [ 853.361248][T20305] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 853.401391][T12013] usb usb4-port1: attempt power cycle [ 853.411561][T20305] team0: Port device batadv2 added [ 853.502023][T20305] hub 9-0:1.0: USB hub found [ 853.530664][T20305] hub 9-0:1.0: 1 port detected [ 853.747574][T20313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 853.766363][T12013] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 853.807765][T12013] usb 4-1: device descriptor read/8, error -71 [ 854.066240][T12013] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 854.097729][T12013] usb 4-1: device descriptor read/8, error -71 [ 854.218613][T12013] usb usb4-port1: unable to enumerate USB device [ 854.623772][T20327] kvm: pic: non byte read [ 854.640754][T20327] kvm: pic: non byte read [ 854.666495][T20327] kvm: pic: non byte read [ 855.088844][T20343] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 855.121663][T20343] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 855.147270][T20343] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 855.191814][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3435'. [ 855.277765][T20340] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.896807][T12013] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 856.081953][T12013] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 856.096254][T12013] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 856.116190][T12013] usb 4-1: config 0 interface 0 has no altsetting 0 [ 856.185672][T12013] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 856.225269][T12013] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 856.249343][T12013] usb 4-1: Product: syz [ 856.253874][T12013] usb 4-1: Manufacturer: syz [ 856.266982][T12013] usb 4-1: SerialNumber: syz [ 856.317251][T12013] usb 4-1: config 0 descriptor?? [ 856.346350][T12013] hub 4-1:0.0: bad descriptor, ignoring hub [ 856.363632][T12013] hub 4-1:0.0: probe with driver hub failed with error -5 [ 856.401854][T12013] usb 4-1: selecting invalid altsetting 0 [ 856.846744][T14490] Bluetooth: hci4: command 0x0406 tx timeout [ 856.936531][T12019] usb 4-1: USB disconnect, device number 110 [ 857.416257][T12019] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 857.575505][T12019] usb 4-1: device descriptor read/64, error -71 [ 857.836732][T12019] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 857.986326][T12019] usb 4-1: device descriptor read/64, error -71 [ 858.117636][T12019] usb usb4-port1: attempt power cycle [ 858.397895][T12013] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 858.506247][T12019] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 858.570258][T12013] usb 5-1: Using ep0 maxpacket: 8 [ 858.592748][T12019] usb 4-1: device descriptor read/8, error -71 [ 858.602021][T12013] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.635020][T12013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.658708][T12013] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 858.691058][T12013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 858.729964][T12013] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.776711][T12013] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 858.810511][T12013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.936594][T12019] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 859.014808][T20408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3445'. [ 859.085990][T12013] usb 5-1: GET_CAPABILITIES returned 0 [ 859.096459][T12019] usb 4-1: device descriptor read/8, error -71 [ 859.115190][T12013] usbtmc 5-1:16.0: can't read capabilities [ 859.213553][T12019] usb usb4-port1: unable to enumerate USB device [ 859.319340][T20397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.365291][T20397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.656884][T12019] usb 5-1: USB disconnect, device number 115 [ 860.176549][T12013] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 860.366575][T12014] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 860.374268][T12013] usb 3-1: Using ep0 maxpacket: 32 [ 860.385158][T12013] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 860.406362][T12013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.424192][T12013] usb 3-1: config 0 has no interface number 0 [ 860.434407][T12013] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 860.456864][T12013] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 860.478067][T12013] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 860.478260][ T5903] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 860.521260][T12013] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 860.567566][T12014] usb 1-1: Using ep0 maxpacket: 16 [ 860.580681][T12013] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 860.597003][T12014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.616405][T12013] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 860.628317][T12014] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.656756][T12013] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 860.668208][T12014] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 860.686354][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 860.691764][T12014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.694557][ T5903] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 860.699955][T12013] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 860.711578][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 860.743433][T12014] usb 1-1: config 0 descriptor?? [ 860.748745][T12013] usb 3-1: config 0 interface 239 has no altsetting 0 [ 860.756459][ T5903] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 860.759913][T12014] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 860.790924][ T5903] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 860.792067][T12013] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 860.808291][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.818304][ T5903] usb 2-1: Product: syz [ 860.822729][T12013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.829454][ T5903] usb 2-1: Manufacturer: syz [ 860.831311][T12013] usb 3-1: Product: syz [ 860.835736][ T5903] usb 2-1: SerialNumber: syz [ 860.840710][T12013] usb 3-1: Manufacturer: syz [ 860.852038][T12013] usb 3-1: SerialNumber: syz [ 860.856495][T12019] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 860.871058][T12013] usb 3-1: config 0 descriptor?? [ 860.881508][T20436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 860.882718][ T5903] cdc_ncm 2-1:1.0: skipping garbage [ 860.889952][T20436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 860.901319][ T5903] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 860.917224][ T5903] cdc_ncm 2-1:1.0: bind() failure [ 860.932296][T14573] Bluetooth: hci0: urb ffff88807f515800 submission failed (90) [ 860.972669][T20454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3461'. [ 861.016355][T12019] usb 5-1: device descriptor read/64, error -71 [ 861.086330][T12013] usb 2-1: USB disconnect, device number 102 [ 861.256388][T12019] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 861.267639][T12014] usb 3-1: USB disconnect, device number 72 [ 861.447163][T12019] usb 5-1: device descriptor read/64, error -71 [ 861.557606][T12019] usb usb5-port1: attempt power cycle [ 861.734055][T20465] netlink: 'syz.1.3463': attribute type 13 has an invalid length. [ 861.867947][T20465] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.884391][T20463] binder: 20445:20463 ioctl c0306201 200000000080 returned -14 [ 861.926261][T12019] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 861.971199][T12019] usb 5-1: device descriptor read/8, error -71 [ 861.981537][T20467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.004660][T20467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.150053][T20465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.167332][T20465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.226298][T12019] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 862.266987][T12019] usb 5-1: device descriptor read/8, error -71 [ 862.416428][T12019] usb usb5-port1: unable to enumerate USB device [ 862.582768][T16377] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.591956][T16377] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.600957][T16377] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.609928][T16377] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.618964][T16377] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.628672][T16377] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.637729][T16377] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.651150][T16377] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.827204][T20475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3465'. [ 863.126230][T12025] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 863.160681][T12019] usb 1-1: USB disconnect, device number 59 [ 863.248331][T20483] fuse: Bad value for 'user_id' [ 863.253230][T20483] fuse: Bad value for 'user_id' [ 863.287139][T20484] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3468'. [ 863.306292][T12025] usb 2-1: Using ep0 maxpacket: 8 [ 863.327012][T12025] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 863.353789][T12025] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 863.375937][T12025] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 863.404702][T12025] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 863.425855][T12025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.442824][T12025] usb 2-1: Product: syz [ 863.448538][T12025] usb 2-1: Manufacturer: syz [ 863.453959][T12025] usb 2-1: SerialNumber: syz [ 863.464341][T12025] usb 2-1: config 0 descriptor?? [ 863.556562][T12025] rc_core: IR keymap rc-streamzap not found [ 863.573159][T12025] Registered IR keymap rc-empty [ 863.581202][T12025] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 863.624414][T12025] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input92 [ 863.756203][T20498] fuse: Bad value for 'fd' [ 863.761337][T20490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 863.789181][T20490] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 863.815093][T20490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 863.822624][T20490] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 863.854722][T20490] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.904384][T20490] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 863.952493][T20490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.982444][T20490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 864.109102][T20490] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 864.151494][T20490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 864.177897][T20490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 864.211560][T20490] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 864.229462][T20507] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3473'. [ 864.271085][T20507] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3473'. [ 864.284679][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 865.374060][T20520] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 865.403432][T20520] bond2 (unregistering): Released all slaves [ 865.558710][T12014] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 865.752827][T12014] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 865.796296][T14490] Bluetooth: hci5: command 0x0406 tx timeout [ 865.804276][T12014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.828134][T12014] usb 5-1: Product: syz [ 865.834796][T12014] usb 5-1: Manufacturer: syz [ 865.876519][T14490] Bluetooth: hci4: command 0x0406 tx timeout [ 865.885358][T12014] usb 5-1: SerialNumber: syz [ 865.885453][T14490] Bluetooth: hci1: command 0x0406 tx timeout [ 865.912140][T12014] usb 5-1: config 0 descriptor?? [ 865.956358][T14490] Bluetooth: hci3: command 0x0c1a tx timeout [ 865.956449][T12015] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 866.035536][T12013] usb 2-1: USB disconnect, device number 103 [ 866.196808][T12015] usb 3-1: Using ep0 maxpacket: 8 [ 866.206678][T14490] Bluetooth: hci2: command 0x0c1a tx timeout [ 866.215797][T12014] usb-storage 5-1:0.0: USB Mass Storage device detected [ 866.240969][T12015] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 866.291502][T12015] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 866.314586][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 866.337636][T12015] usb 3-1: config 0 has no interface number 0 [ 866.354780][T20528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 866.369074][T12015] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 866.417581][T12015] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 866.475288][T12015] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 866.490778][T12015] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 866.501002][T12015] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 866.509211][T12015] usb 3-1: Product: syz [ 866.513763][T12015] usb 3-1: Manufacturer: syz [ 866.522674][T12015] usb 3-1: config 0 descriptor?? [ 866.546465][T20525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 866.583137][T20536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.735753][T20542] Cannot find del_set index 4 as target [ 866.752366][T20542] kvm: user requested TSC rate below hardware speed [ 866.814689][T12015] usb 3-1: USB disconnect, device number 73 [ 866.843409][T20547] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 866.879910][T20549] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 867.036264][T12014] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 867.206540][T12014] usb 2-1: Using ep0 maxpacket: 16 [ 867.217381][T12014] usb 2-1: config 0 has no interfaces? [ 867.228090][T20550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3485'. [ 867.238311][T12014] usb 2-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 867.250213][T12014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.268104][T12014] usb 2-1: Product: syz [ 867.278683][T12014] usb 2-1: Manufacturer: syz [ 867.287073][T12014] usb 2-1: SerialNumber: syz [ 867.302818][T12014] usb 2-1: config 0 descriptor?? [ 867.439769][T20556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'. [ 867.459647][T20555] delete_channel: no stack [ 867.464551][T20555] delete_channel: no stack [ 867.538785][T20542] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=34144515 (68289030 ns) > initial count (67109412 ns). Using initial count to start timer. [ 867.610314][T12019] usb 2-1: USB disconnect, device number 104 [ 867.885828][T14490] Bluetooth: hci5: command 0x0406 tx timeout [ 867.956277][T14490] Bluetooth: hci1: command 0x0406 tx timeout [ 867.966842][T14490] Bluetooth: hci4: command 0x0406 tx timeout [ 867.996963][T20568] syzkaller0: entered promiscuous mode [ 868.002559][T20568] syzkaller0: entered allmulticast mode [ 868.037374][T14490] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.126314][T12015] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 868.276380][T14490] Bluetooth: hci2: command 0x0c1a tx timeout [ 868.306466][T12015] usb 2-1: Using ep0 maxpacket: 8 [ 868.345700][T12015] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 868.353673][T20577] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3491'. [ 868.370523][T12015] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.404595][T20578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3490'. [ 868.416305][T12015] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.423931][T12025] usb 5-1: USB disconnect, device number 120 [ 868.471462][T12015] usb 2-1: config 0 descriptor?? [ 868.709087][T12015] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 869.258612][T12025] usb 2-1: USB disconnect, device number 105 [ 869.712744][T20605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3500'. [ 870.046588][T20627] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 870.122620][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.129787][T14490] Bluetooth: hci3: command 0x0c1a tx timeout [ 870.135946][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.356385][T14490] Bluetooth: hci2: command 0x0c1a tx timeout [ 870.459475][T20637] fuse: Bad value for 'fd' [ 870.737687][T20603] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 870.837014][T20603] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 870.951238][T20603] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 870.980657][T20603] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 871.027471][T20603] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.326881][T12015] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 871.496270][T12015] usb 2-1: Using ep0 maxpacket: 32 [ 871.504350][T12015] usb 2-1: config 0 has an invalid interface number: 224 but max is 1 [ 871.514086][T12015] usb 2-1: config 0 has an invalid interface number: 219 but max is 1 [ 871.536740][T12015] usb 2-1: config 0 has no interface number 0 [ 871.547630][T12015] usb 2-1: config 0 has no interface number 1 [ 871.588204][T12015] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 871.645877][T12015] usb 2-1: config 0 interface 224 has no altsetting 0 [ 871.678281][T12015] usb 2-1: New USB device found, idVendor=4855, idProduct=0090, bcdDevice=34.83 [ 871.687940][T12015] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.726637][T12015] usb 2-1: Product: syz [ 871.744788][T12015] usb 2-1: Manufacturer: syz [ 871.768493][T20655] vxcan1: entered promiscuous mode [ 871.776995][T12015] usb 2-1: SerialNumber: syz [ 871.829804][T12015] usb 2-1: config 0 descriptor?? [ 871.933505][T20661] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3513'. [ 872.070365][T20663] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 872.156362][T12015] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 872.242448][T20671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.279814][T20671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.326258][T12015] usb 3-1: Using ep0 maxpacket: 8 [ 872.338883][T12015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 872.383423][T12015] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 872.422144][T12015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.468286][T12015] usb 3-1: config 0 descriptor?? [ 872.635410][T20682] netlink: 'syz.4.3519': attribute type 8 has an invalid length. [ 872.722706][T12015] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 872.757249][T14490] Bluetooth: hci5: command 0x0406 tx timeout [ 872.916482][T14490] Bluetooth: hci1: command 0x0406 tx timeout [ 872.996473][T14490] Bluetooth: hci3: command 0x0c1a tx timeout [ 873.002519][T20526] Bluetooth: hci4: command 0x0406 tx timeout [ 873.076349][T14490] Bluetooth: hci2: command 0x0c1a tx timeout [ 873.481296][T12021] usb 3-1: USB disconnect, device number 74 [ 873.705889][T12014] usb 2-1: USB disconnect, device number 106 [ 873.726316][ T5896] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 873.776631][T12015] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 873.896307][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 873.912652][ T5896] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 873.926464][ T5896] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 873.937525][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 873.947834][ T5896] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 873.961751][T12015] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 873.971196][T12015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.983083][ T5896] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.996849][T12015] usb 1-1: config 0 has no interface number 0 [ 874.006397][ T5896] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 874.015664][T12015] usb 1-1: config 0 interface 205 has no altsetting 0 [ 874.022610][T12013] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 874.032499][T12015] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 874.052541][T12015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.066215][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.076859][T12015] usb 1-1: Product: syz [ 874.081058][T12015] usb 1-1: Manufacturer: syz [ 874.085669][T12015] usb 1-1: SerialNumber: syz [ 874.101745][T12015] usb 1-1: config 0 descriptor?? [ 874.112774][T12015] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 874.125388][T12015] dvb-usb: bulk message failed: -22 (3/0) [ 874.148798][T12015] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 874.159325][T12015] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 874.171149][T12015] usb 1-1: media controller created [ 874.179040][T12015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.189978][T12013] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 874.204749][T12015] dvb-usb: bulk message failed: -22 (6/0) [ 874.211113][T12013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.221714][T12015] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 874.233946][T12013] usb 3-1: config 0 has no interface number 0 [ 874.246658][T12015] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input94 [ 874.259455][T12013] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 874.275830][T12013] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.302204][T12015] dvb-usb: schedule remote query interval to 150 msecs. [ 874.317211][ T5896] usb 5-1: usb_control_msg returned -32 [ 874.333144][T12015] dvb-usb: bulk message failed: -22 (3/0) [ 874.341142][ T5896] usbtmc 5-1:16.0: can't read capabilities [ 874.354340][T12013] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 874.365197][T12013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.376241][T12015] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 874.397566][T12013] usb 3-1: Product: syz [ 874.411807][T12013] usb 3-1: Manufacturer: syz [ 874.419292][T12015] usb 1-1: USB disconnect, device number 60 [ 874.431962][T12013] usb 3-1: SerialNumber: syz [ 874.476915][T12013] usb 3-1: config 0 descriptor?? [ 874.509231][T12015] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 874.936639][T12025] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 875.097390][T20726] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 875.107057][T12025] usb 2-1: Using ep0 maxpacket: 16 [ 875.125395][T12025] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 15104, setting to 1024 [ 875.161426][T12025] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 875.182332][T12025] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.209906][T12025] usb 2-1: config 1 interface 0 has no altsetting 0 [ 875.225356][T12025] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 875.240031][T12025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.250140][T12025] usb 2-1: Product: syz [ 875.254341][T12025] usb 2-1: Manufacturer: syz [ 875.259353][T12025] usb 2-1: SerialNumber: syz [ 875.267915][T20719] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 875.299674][T12019] usb 5-1: USB disconnect, device number 121 [ 875.438873][T20731] netlink: 'syz.3.3533': attribute type 8 has an invalid length. [ 875.485307][T12025] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 875.739949][T20737] loop8: detected capacity change from 0 to 8 [ 875.754138][ C0] usblp0: nonzero write bulk status received: -71 [ 875.778437][T20737] loop8: detected capacity change from 8 to 7 [ 875.869544][T20743] binder: 20736:20743 ioctl ae01 200000000000 returned -22 [ 876.025083][ T5823] Dev loop8: unable to read RDB block 7 [ 876.035262][ C1] invalid error, dev loop8, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 876.045588][ C1] Buffer I/O error on dev loop8, logical block 0, lost async page write [ 876.055355][ T5823] loop8: unable to read partition table [ 876.061193][ T5823] loop8: partition table beyond EOD, truncated [ 876.294563][T20737] Dev loop8: unable to read RDB block 7 [ 876.302694][T20737] loop8: unable to read partition table [ 876.310401][T20737] loop8: partition table beyond EOD, truncated [ 876.320571][T20737] loop_reread_partitions: partition scan of loop8 (Qy,F)) failed (rc=-5) [ 876.397568][T12015] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 876.536267][T12025] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 876.566609][T12015] usb 1-1: Using ep0 maxpacket: 16 [ 876.586999][T12015] usb 1-1: config 0 has no interfaces? [ 876.603373][T12015] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 876.629410][T12015] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 876.655714][T12015] usb 1-1: Manufacturer: syz [ 876.677205][T12015] usb 1-1: config 0 descriptor?? [ 876.698064][T12025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 876.710318][T12025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50346, setting to 1024 [ 876.727481][T12025] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 876.747536][T12025] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.768532][T12025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.801250][T12025] usb 5-1: config 0 descriptor?? [ 876.820450][T20751] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 876.831669][T12015] usb 3-1: USB disconnect, device number 75 [ 877.449426][T12025] plantronics 0003:047F:FFFF.0050: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 877.758886][T12025] usb 2-1: USB disconnect, device number 107 [ 877.812541][T12025] usblp0: removed [ 878.397281][T20781] fuse: Bad value for 'user_id' [ 878.407060][T20781] fuse: Bad value for 'user_id' [ 878.614468][T20791] netlink: 'syz.2.3546': attribute type 10 has an invalid length. [ 878.625566][T20792] netlink: 'syz.2.3546': attribute type 10 has an invalid length. [ 878.639439][T20791] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3546'. [ 878.652006][T20792] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3546'. [ 878.668896][T20791] team0: entered promiscuous mode [ 878.681621][T20791] team_slave_0: entered promiscuous mode [ 878.694217][T20791] team_slave_1: entered promiscuous mode [ 878.710638][T20791] dummy0: entered promiscuous mode [ 878.728690][T20791] batadv2: entered promiscuous mode [ 878.742211][T20791] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.768580][T20791] bridge0: port 3(team0) entered blocking state [ 878.790753][T20791] bridge0: port 3(team0) entered disabled state [ 878.809432][T20791] team0: entered allmulticast mode [ 878.824010][T20791] team_slave_0: entered allmulticast mode [ 878.838154][T20791] team_slave_1: entered allmulticast mode [ 878.852975][T20791] dummy0: entered allmulticast mode [ 878.867765][T20791] batadv2: entered allmulticast mode [ 878.906602][T16372] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 878.916485][T16372] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 879.082698][T12015] usb 5-1: USB disconnect, device number 122 [ 879.615368][T12021] usb 1-1: USB disconnect, device number 61 [ 879.876587][T12019] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 879.987717][ T30] audit: type=1326 audit(1770263900.456:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.097367][ T30] audit: type=1326 audit(1770263900.456:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.106217][T12019] usb 4-1: Using ep0 maxpacket: 16 [ 880.162231][T12019] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 880.185949][T12019] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 880.210865][ T30] audit: type=1326 audit(1770263900.496:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.265352][T12019] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 880.277559][T12019] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.288813][ T30] audit: type=1326 audit(1770263900.506:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0bd39ac22 code=0x7ffc0000 [ 880.355545][T12019] usb 4-1: config 0 descriptor?? [ 880.377941][ T30] audit: type=1326 audit(1770263900.506:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.450198][T12019] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 880.478427][ T30] audit: type=1326 audit(1770263900.506:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.554049][ T30] audit: type=1326 audit(1770263900.506:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.632813][ T30] audit: type=1326 audit(1770263900.506:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.655440][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.687877][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.731387][ T30] audit: type=1326 audit(1770263900.516:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.811325][ T30] audit: type=1326 audit(1770263900.516:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20827 comm="syz.0.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd39aeb9 code=0x7ffc0000 [ 880.815977][T12021] usb 4-1: USB disconnect, device number 115 [ 881.276906][T20852] bridge0: port 3(syz_tun) entered blocking state [ 881.294804][T20852] bridge0: port 3(syz_tun) entered disabled state [ 881.323496][T20852] syz_tun: entered allmulticast mode [ 881.348355][T20852] syz_tun: entered promiscuous mode [ 881.406553][T12021] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 881.556282][T12015] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 881.606523][T12021] usb 1-1: Using ep0 maxpacket: 32 [ 881.643261][T12021] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 881.678278][T12021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.711286][T12021] usb 1-1: Product: syz [ 881.722674][T12021] usb 1-1: Manufacturer: syz [ 881.734925][T12021] usb 1-1: SerialNumber: syz [ 881.769267][T12021] usb 1-1: config 0 descriptor?? [ 881.799153][T12021] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 882.071883][T12025] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 882.256226][T12025] usb 4-1: Using ep0 maxpacket: 8 [ 882.288179][T12025] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 882.320800][T12025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.349377][T12025] usb 4-1: Product: syz [ 882.364648][T12025] usb 4-1: Manufacturer: syz [ 882.381785][T12025] usb 4-1: SerialNumber: syz [ 882.408855][T12025] usb 4-1: config 0 descriptor?? [ 882.632349][T12025] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 883.006763][T20878] netlink: 'syz.2.3568': attribute type 12 has an invalid length. [ 883.556836][T12021] gspca_ov534_9: reg_r err -110 [ 883.826325][T12021] gspca_ov534_9: Unknown sensor 0000 [ 883.826445][T12021] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 883.956248][T14490] Bluetooth: hci5: command 0x0406 tx timeout [ 883.956304][T20858] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 884.277118][T12025] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 884.287272][T20858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 884.295538][T20858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 884.305754][T20858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 884.312837][T20858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 884.320776][T20863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.343994][T12025] usb 1-1: USB disconnect, device number 62 [ 884.350740][T20863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.542655][T20894] netlink: 'syz.4.3573': attribute type 20 has an invalid length. [ 884.567185][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3573'. [ 884.626270][T16377] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.666081][T16377] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.667101][T20894] xt_hashlimit: size too large, truncated to 1048576 [ 884.689899][T16377] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 884.718072][T16377] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.055652][ C1] sd 0:0:1:0: [sda] tag#10112 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 885.066228][ C1] sd 0:0:1:0: [sda] tag#10112 CDB: Read(6) 08 00 00 00 2f 6b 76 6d 00 00 00 00 [ 885.441423][T12025] usb 4-1: USB disconnect, device number 116 [ 886.067546][T14490] Bluetooth: hci1: command 0x0406 tx timeout [ 886.356648][T14490] Bluetooth: hci2: command 0x0c1a tx timeout [ 886.362842][T20526] Bluetooth: hci3: command 0x0c1a tx timeout [ 886.362903][T14490] Bluetooth: hci4: command 0x0406 tx timeout [ 886.945808][T20930] fuse: Unknown parameter '000000000000000000000030000000000000000000400000000000000000004m7q(<|6M d'Sf:3~NfAù`6!Mz1 WĈrH+2!U 1WiF]pEFp$^Ț3rpɥ5) >ṿG.Gq%Rz.iq'>K:ㄜ9h7HjՓaa/ԾsԞL' [ 887.316307][T12021] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 887.476363][T12021] usb 3-1: Using ep0 maxpacket: 32 [ 887.492771][T12021] usb 3-1: config 0 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 887.506692][T12025] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 887.534781][T12021] usb 3-1: config 0 interface 0 has no altsetting 0 [ 887.557092][T12021] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 887.571490][T12021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.584320][T12021] usb 3-1: config 0 descriptor?? [ 887.679882][T12025] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 887.695320][T12025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.707654][T12025] usb 5-1: config 0 descriptor?? [ 887.716568][T12025] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 887.811106][T20946] netlink: zone id is out of range [ 887.816554][T20946] netlink: zone id is out of range [ 887.821845][T20946] netlink: zone id is out of range [ 887.827639][T20946] netlink: zone id is out of range [ 887.833102][T20946] netlink: zone id is out of range [ 887.839983][T20946] netlink: zone id is out of range [ 887.845217][T20946] netlink: zone id is out of range [ 887.850984][T20946] netlink: zone id is out of range [ 887.856529][T20946] netlink: zone id is out of range [ 887.862351][T20946] netlink: zone id is out of range [ 887.927452][ T5896] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 888.005821][T12021] corsair-psu 0003:1B1C:1C0D.0051: unknown main item tag 0x0 [ 888.016676][T12021] corsair-psu 0003:1B1C:1C0D.0051: unknown main item tag 0x0 [ 888.024269][T12021] corsair-psu 0003:1B1C:1C0D.0051: unknown main item tag 0x0 [ 888.033116][T12021] corsair-psu 0003:1B1C:1C0D.0051: unknown main item tag 0x0 [ 888.043880][T12021] corsair-psu 0003:1B1C:1C0D.0051: unknown main item tag 0x0 [ 888.061484][T12021] corsair-psu 0003:1B1C:1C0D.0051: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 888.096513][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 888.124336][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 888.164708][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 888.203886][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 888.247053][T20948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.263321][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 888.274981][T20948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.292743][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.315335][T12025] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 888.327894][ T5896] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 888.348214][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.357727][ T5896] usb 1-1: Product: syz [ 888.363179][ T5896] usb 1-1: Manufacturer: syz [ 888.368400][ T5896] usb 1-1: SerialNumber: syz [ 888.399826][ T5896] usb 1-1: config 0 descriptor?? [ 888.435256][ T5896] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input97 [ 888.586091][ C1] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 888.626186][ T5896] usb 1-1: USB disconnect, device number 63 [ 889.396563][T12025] gspca_cpia1: usb_control_msg 01, error -110 [ 889.406078][T12025] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 889.906545][T12025] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 889.970754][T12021] corsair-psu 0003:1B1C:1C0D.0051: unable to initialize device (-71) [ 890.007139][T12021] corsair-psu 0003:1B1C:1C0D.0051: probe with driver corsair-psu failed with error -71 [ 890.029244][T12021] usb 3-1: USB disconnect, device number 76 [ 890.078909][T12025] usb 2-1: Using ep0 maxpacket: 8 [ 890.088154][T12019] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 890.112388][T12025] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.155077][T12025] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 890.181984][T12025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.203192][T12025] usb 2-1: Product: syz [ 890.214561][T12025] usb 2-1: Manufacturer: syz [ 890.219742][T12025] usb 2-1: SerialNumber: syz [ 890.231006][T12025] usb 2-1: config 0 descriptor?? [ 890.251416][T12025] usb 2-1: bad CDC descriptors [ 890.264669][T12025] usb 2-1: unsupported MDLM descriptors [ 890.289026][T12019] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 890.299037][T12025] cdc_acm 2-1:0.0: Zero length descriptor references [ 890.311271][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.322813][T12025] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 890.339938][T12019] usb 4-1: Product: syz [ 890.355955][T12019] usb 4-1: Manufacturer: syz [ 890.386946][T12019] usb 4-1: SerialNumber: syz [ 890.403496][T12013] usb 5-1: USB disconnect, device number 123 [ 890.423027][T12019] usb 4-1: config 0 descriptor?? [ 890.467376][T12019] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 890.672549][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.715183][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.937118][T12013] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 891.082828][T20992] netlink: 'syz.2.3595': attribute type 8 has an invalid length. [ 891.118870][T12013] usb 5-1: unable to get BOS descriptor or descriptor too short [ 891.130781][T12013] usb 5-1: not running at top speed; connect to a high speed hub [ 891.140276][T12013] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.150684][T12013] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.162569][T12013] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 891.172257][T12013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.180387][T12013] usb 5-1: Product: syz [ 891.192123][T12013] usb 5-1: Manufacturer: syz [ 891.202527][T12013] usb 5-1: SerialNumber: syz [ 891.405943][T20999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 891.442281][T12013] usb 5-1: 0:2 : does not exist [ 891.455348][T12013] usb 5-1: unit 206 not found! [ 891.478237][T12013] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 891.526032][T12013] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 891.575941][T12019] usb 4-1: USB disconnect, device number 117 [ 891.612545][T12013] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 891.689344][T12013] usb 5-1: USB disconnect, device number 124 [ 891.783374][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.098876][T12019] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 892.296262][T12019] usb 4-1: Using ep0 maxpacket: 32 [ 892.309370][T12019] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 892.320091][T12019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.328721][T12019] usb 4-1: Product: syz [ 892.335479][T12019] usb 4-1: Manufacturer: syz [ 892.340858][T12019] usb 4-1: SerialNumber: syz [ 892.360606][T12019] usb 4-1: config 0 descriptor?? [ 892.377805][T12019] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 892.565103][T12019] usb 2-1: USB disconnect, device number 109 [ 892.615038][T12021] usb 4-1: USB disconnect, device number 118 [ 892.775820][T21022] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3604'. [ 893.334063][T21028] netlink: 'syz.1.3606': attribute type 8 has an invalid length. [ 893.730331][T21043] netlink: 'syz.3.3611': attribute type 8 has an invalid length. [ 893.764444][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 893.806790][T21043] bond0: entered promiscuous mode [ 893.838603][T21043] bond_slave_0: entered promiscuous mode [ 893.856457][T21043] bond_slave_1: entered promiscuous mode [ 893.924145][T21043] gretap0: entered promiscuous mode [ 893.999586][T21043] bond0: left promiscuous mode [ 894.011399][T21043] bond_slave_0: left promiscuous mode [ 894.018539][T21043] bond_slave_1: left promiscuous mode [ 894.146029][T21043] gretap0: left promiscuous mode [ 894.986505][T19736] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 895.196119][T19736] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 895.196201][T19736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.196222][T19736] usb 4-1: Product: syz [ 895.196236][T19736] usb 4-1: Manufacturer: syz [ 895.196250][T19736] usb 4-1: SerialNumber: syz [ 895.205554][T19736] usb 4-1: config 0 descriptor?? [ 895.346228][T12019] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 895.424231][T19736] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 895.431231][T19736] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 895.432758][T19736] usb 4-1: USB disconnect, device number 119 [ 895.515453][T12019] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.515473][T12019] usb 2-1: config 0 has no interface number 0 [ 895.517375][T12019] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 895.517393][T12019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.517404][T12019] usb 2-1: Product: syz [ 895.517412][T12019] usb 2-1: Manufacturer: syz [ 895.517421][T12019] usb 2-1: SerialNumber: syz [ 895.519230][T12019] usb 2-1: config 0 descriptor?? [ 895.723208][T12019] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 895.725265][T12019] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 895.725454][T12019] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 895.725481][T12019] usb 2-1: media controller created [ 895.739798][T12019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.955724][T21079] netlink: 'syz.0.3620': attribute type 8 has an invalid length. [ 896.326982][T19736] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 896.486223][T19736] usb 3-1: Using ep0 maxpacket: 16 [ 896.488004][T19736] usb 3-1: config index 0 descriptor too short (expected 67, got 36) [ 896.488053][T19736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.488079][T19736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.488108][T12019] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 896.488113][T19736] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 896.488135][T19736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.493204][T19736] usb 3-1: config 0 descriptor?? [ 896.607171][T12019] usb 2-1: USB disconnect, device number 110 [ 896.961786][T19736] apple 0003:05AC:0247.0052: fixing up MacBook JIS keyboard report descriptor [ 896.962300][T19736] apple 0003:05AC:0247.0052: unexpected long global item [ 896.963030][T19736] apple 0003:05AC:0247.0052: parse failed [ 896.963133][T19736] apple 0003:05AC:0247.0052: probe with driver apple failed with error -22 [ 897.118019][T12021] usb 3-1: USB disconnect, device number 78 [ 897.353837][T21122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3630'. [ 897.666232][T12013] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 897.850641][T12013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.850683][T12013] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.862177][T12013] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.862207][T12013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.862227][T12013] usb 4-1: Product: syz [ 897.862241][T12013] usb 4-1: Manufacturer: syz [ 897.862255][T12013] usb 4-1: SerialNumber: syz [ 898.087022][T21124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.087253][T21124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.106554][T12013] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 898.113871][T12013] usb 4-1: USB disconnect, device number 120 [ 899.048522][T21139] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003 [ 899.256295][T19736] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 899.417770][T19736] usb 4-1: Using ep0 maxpacket: 16 [ 899.457361][T19736] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 899.486208][T19736] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 899.516391][T19736] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 899.585880][T19736] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.605174][T19736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.617340][T19736] usb 4-1: Product: syz [ 899.621500][T19736] usb 4-1: Manufacturer: 馯띵ᵩ륾采磇瀝爾ﺴ叟觽샳끹졢犩칡䔥욢䱼ﾌ꥝붒嘕㠘욖㋡㰕㜠瘂䵲腚皒贲醂止ꤔ痂笠䕰㼤ª멘㯾賄ꍆ峬䛂偘僁註햣ﲁ쥥譆㧟卹噀鿰㆑ﯧ巁钱撡沌꠪퇏麽㹟謦힋祅ᤊ괶羀돍᠀낒왯翮̪lj兔壚푠㽒猹衎ᔸ쾨⚗颷ᄿ러趢䤔얐초⋶찆쁆句쎒䨘﫝 [ 899.659559][T19736] usb 4-1: SerialNumber: syz [ 899.665868][T21146] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3637'. [ 899.774877][T12019] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 899.888149][T19736] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 899.888197][T19736] cdc_ncm 4-1:1.0: bind() failure [ 899.894286][T19736] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 899.894334][T19736] cdc_ncm 4-1:1.1: bind() failure [ 899.939215][T12019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.939249][T12019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.939271][T12019] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 899.939311][T12019] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 899.939335][T12019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.982119][T12019] usb 3-1: config 0 descriptor?? [ 900.100308][T12013] usb 4-1: USB disconnect, device number 121 [ 900.136614][T12021] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 900.336684][T12021] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 900.363107][T12021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.374929][T12021] usb 5-1: Product: syz [ 900.383918][T12021] usb 5-1: Manufacturer: syz [ 900.399343][T12019] plantronics 0003:047F:FFFF.0053: unbalanced delimiter at end of report description [ 900.409175][T12021] usb 5-1: SerialNumber: syz [ 900.424278][T12019] plantronics 0003:047F:FFFF.0053: parse failed [ 900.432867][T12019] plantronics 0003:047F:FFFF.0053: probe with driver plantronics failed with error -22 [ 900.811759][T21170] netlink: 'syz.3.3644': attribute type 22 has an invalid length. [ 900.820744][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3644'. [ 900.834457][T12021] net_ratelimit: 44 callbacks suppressed [ 900.834488][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 900.854805][ T5896] usb 3-1: USB disconnect, device number 79 [ 900.881506][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 900.916306][T12019] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 901.087570][T12019] usb 2-1: Using ep0 maxpacket: 32 [ 901.114487][T12019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.145885][T12019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.186329][T12019] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 901.206313][T12019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.227676][T12019] usb 2-1: config 0 descriptor?? [ 901.267217][T12019] hub 2-1:0.0: USB hub found [ 901.666526][T12025] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 901.846684][T12025] usb 4-1: device descriptor read/64, error -71 [ 902.075665][T21187] input: syz0 as /devices/virtual/input/input98 [ 902.112179][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 902.147247][T12025] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 902.356380][T12025] usb 4-1: device descriptor read/64, error -71 [ 902.461667][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 902.494759][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 902.509100][T12025] usb usb4-port1: attempt power cycle [ 902.539657][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 902.581304][T12021] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 902.621848][T12021] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 902.702452][T12021] usb 5-1: USB disconnect, device number 125 [ 902.876412][T12025] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 902.908038][T12025] usb 4-1: device descriptor read/8, error -71 [ 903.177350][T12025] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 903.217051][T12025] usb 4-1: device descriptor read/8, error -71 [ 903.336675][T12025] usb usb4-port1: unable to enumerate USB device [ 903.362862][T21199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'. [ 903.710759][T12019] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 903.740568][T12019] usbhid 2-1:0.0: can't add hid device: -71 [ 903.754145][T12019] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 903.808726][T12019] usb 2-1: USB disconnect, device number 111 [ 903.986282][T12021] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 904.088474][T21221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3655'. [ 904.166439][T12021] usb 3-1: Using ep0 maxpacket: 32 [ 904.199749][T12021] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 904.223472][T12021] usb 3-1: config 0 has no interface number 0 [ 904.262180][T12021] usb 3-1: config 0 interface 147 has no altsetting 0 [ 904.312694][T12021] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 904.361176][T12021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.405861][T12021] usb 3-1: Product: syz [ 904.436810][T12021] usb 3-1: Manufacturer: syz [ 904.464151][T12021] usb 3-1: SerialNumber: syz [ 904.502894][T12021] usb 3-1: config 0 descriptor?? [ 904.538084][T12021] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 905.186297][T12019] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 905.384963][T12019] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 905.396614][T12021] gspca_ov534_9: reg_w failed -71 [ 905.426263][T12019] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 905.446759][T12019] usb 2-1: config 8 has no interface number 0 [ 905.458394][T12019] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 905.476284][T12019] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 905.485587][T12019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.521301][T21246] netlink: 'syz.3.3661': attribute type 1 has an invalid length. [ 905.529181][T12019] usb 2-1: Product: syz [ 905.540766][T12019] usb 2-1: Manufacturer: syz [ 905.560058][T12019] usb 2-1: SerialNumber: syz [ 905.576248][T12025] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 905.736287][T12021] gspca_ov534_9: Unknown sensor 0000 [ 905.736383][T12021] ov534_9 3-1:0.147: probe with driver ov534_9 failed with error -22 [ 905.790334][T12019] usb 2-1: USB disconnect, device number 112 [ 905.805807][T12025] usb 1-1: config 0 has no interfaces? [ 905.826728][T12021] usb 3-1: USB disconnect, device number 80 [ 905.836632][T12025] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 905.919940][T12025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.965592][T12025] usb 1-1: config 0 descriptor?? [ 906.141220][T21246] bond1: entered promiscuous mode [ 906.152846][T21246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 906.635755][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3666'. [ 906.747553][T21265] bond2: Invalid ad_actor_system MAC address. [ 906.770638][T21265] bond2: option ad_actor_system: invalid value (6543) [ 906.834149][T21265] bond2 (unregistering): Released all slaves [ 906.949676][T21272] FAULT_INJECTION: forcing a failure. [ 906.949676][T21272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.983123][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 906.983141][ T30] audit: type=1400 audit(1770263927.446:2497): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21264 comm="syz.3.3666" [ 906.985926][T21272] CPU: 1 UID: 0 PID: 21272 Comm: syz.4.3667 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.985954][T21272] Tainted: [L]=SOFTLOCKUP [ 906.985961][T21272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 906.985972][T21272] Call Trace: [ 906.985980][T21272] [ 906.985988][T21272] dump_stack_lvl+0xe8/0x150 [ 906.986014][T21272] should_fail_ex+0x412/0x560 [ 906.986041][T21272] _copy_from_user+0x2d/0xb0 [ 906.986066][T21272] ___sys_sendmsg+0x1c6/0x360 [ 906.986087][T21272] ? __lock_acquire+0x6b5/0x2cf0 [ 906.986113][T21272] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.986164][T21272] ? __fget_files+0x2a/0x420 [ 906.986181][T21272] ? __fget_files+0x3a0/0x420 [ 906.986207][T21272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 906.986231][T21272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.986260][T21272] ? __pfx_ksys_write+0x10/0x10 [ 906.986292][T21272] do_syscall_64+0xe2/0xf80 [ 906.986309][T21272] ? rcu_is_watching+0x15/0xb0 [ 906.986324][T21272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.986341][T21272] ? clear_bhb_loop+0x60/0xb0 [ 906.986361][T21272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.986377][T21272] RIP: 0033:0x7f956ed9aeb9 [ 906.986394][T21272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.986408][T21272] RSP: 002b:00007f956cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.986427][T21272] RAX: ffffffffffffffda RBX: 00007f956f016090 RCX: 00007f956ed9aeb9 [ 906.986439][T21272] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 906.986451][T21272] RBP: 00007f956cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 906.986462][T21272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.986472][T21272] R13: 00007f956f016128 R14: 00007f956f016090 R15: 00007f956f13fa48 [ 906.986499][T21272] [ 907.576246][ T5896] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 907.726239][ T5896] usb 4-1: device descriptor read/64, error -71 [ 907.760717][T21291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3670'. [ 907.986311][ T5896] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 908.136493][ T5896] usb 4-1: device descriptor read/64, error -71 [ 908.155551][T12025] usb 1-1: string descriptor 0 read error: -71 [ 908.187982][T12025] usb 1-1: USB disconnect, device number 64 [ 908.266667][ T5896] usb usb4-port1: attempt power cycle [ 908.319775][T21302] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 908.456260][T12013] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 908.625549][ T5896] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 908.636314][T12013] usb 2-1: Using ep0 maxpacket: 8 [ 908.643370][T21307] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 908.666264][T12013] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 908.677515][T12013] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 908.687484][ T5896] usb 4-1: device descriptor read/8, error -71 [ 908.713315][T12013] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 908.723230][T12013] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 908.733370][T12013] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 908.753440][T12013] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 908.764559][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.917309][T21309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3676'. [ 908.936289][T12015] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 908.946281][ T5896] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 908.970889][ T5896] usb 4-1: device descriptor read/8, error -71 [ 908.988019][T12013] usb 2-1: usb_control_msg returned -32 [ 908.993619][T12013] usbtmc 2-1:16.0: can't read capabilities [ 909.000373][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3673'. [ 909.012186][T21299] tc_dump_action: action bad kind [ 909.086273][T12015] usb 1-1: Using ep0 maxpacket: 8 [ 909.091923][ T5896] usb usb4-port1: unable to enumerate USB device [ 909.099991][T12015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 909.111315][T12015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.121137][T12015] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.130949][T12015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 909.141279][T12015] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 909.151113][T12015] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 909.161327][T12015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.172001][T12015] usb 1-1: config 0 descriptor?? [ 909.179486][T12015] hub 1-1:0.0: bad descriptor, ignoring hub [ 909.185427][T12015] hub 1-1:0.0: probe with driver hub failed with error -5 [ 909.196325][T12025] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 909.197630][T12013] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 909.215377][T20917] Bluetooth: hci0: urb ffff88802a20c500 submission failed (90) [ 909.356258][T12025] usb 5-1: Using ep0 maxpacket: 16 [ 909.363835][T12025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.375676][T12025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.384319][T19736] usb 1-1: USB disconnect, device number 65 [ 909.386367][T12025] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 909.400969][T12013] usb 3-1: Using ep0 maxpacket: 8 [ 909.404955][T12025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.425686][T12025] usb 5-1: config 0 descriptor?? [ 909.435021][T12013] usb 3-1: unable to get BOS descriptor or descriptor too short [ 909.448813][T12013] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 909.466943][T12013] usb 3-1: config 0 has no interface number 0 [ 909.483479][T12013] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 909.502018][T12013] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 909.512337][T12013] usb 3-1: config 0 interface 88 has no altsetting 0 [ 909.519724][T12013] usb 3-1: language id specifier not provided by device, defaulting to English [ 909.533323][T12013] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 909.542587][T12013] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 909.551125][T12013] usb 3-1: Product: syz [ 909.555446][T12013] usb 3-1: SerialNumber: syz [ 909.563805][T12013] usb 3-1: config 0 descriptor?? [ 909.756613][T19736] usb 2-1: USB disconnect, device number 113 [ 909.799873][T12013] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input100 [ 909.853242][T12013] usb 3-1: USB disconnect, device number 81 [ 909.870278][T12025] apple 0003:05AC:024B.0054: fixing up MacBook JIS keyboard report descriptor [ 909.883239][T12025] apple 0003:05AC:024B.0054: unknown global tag 0xe [ 909.894787][T12025] apple 0003:05AC:024B.0054: item 0 1 1 14 parsing failed [ 909.912674][T12025] apple 0003:05AC:024B.0054: parse failed [ 909.942727][T12025] apple 0003:05AC:024B.0054: probe with driver apple failed with error -22 [ 910.101530][T21326] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3677'. [ 910.102304][T21312] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3677'. [ 910.178203][T19736] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 910.257889][T12013] usb 5-1: USB disconnect, device number 126 [ 910.323583][T21333] netlink: 'syz.0.3682': attribute type 4 has an invalid length. [ 910.358388][T19736] usb 4-1: Using ep0 maxpacket: 16 [ 910.368231][T21333] netlink: 'syz.0.3682': attribute type 4 has an invalid length. [ 910.386994][T19736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.415329][T21333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.425257][T19736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 910.445363][T19736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.474966][T19736] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 910.496286][T19736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.518679][T19736] usb 4-1: config 0 descriptor?? [ 910.856338][T12025] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 910.946728][T19736] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0055/input/input101 [ 910.994755][T19736] microsoft 0003:045E:07DA.0055: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 911.067446][T12025] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 911.090039][T12025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.123638][T12025] usb 3-1: config 0 descriptor?? [ 911.158272][T12025] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 911.271003][T19736] usb 4-1: USB disconnect, device number 4 [ 911.546324][T12021] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 911.656290][ T67] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 911.716383][T12021] usb 5-1: Using ep0 maxpacket: 16 [ 911.725177][T12021] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 911.734254][T12021] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 911.743694][T12021] usb 5-1: config 166 has no interface number 0 [ 911.750864][T12021] usb 5-1: config 166 has no interface number 1 [ 911.757965][T12021] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 911.769782][T12021] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 911.781431][T12021] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 911.792998][T12021] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 911.809995][T12021] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 911.823412][T12021] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 911.842540][ T67] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 911.852303][ T67] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 911.871322][ T67] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 911.881604][T12021] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 911.894030][ T67] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 911.905379][T12021] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 911.915967][ T67] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 911.929816][T12021] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 911.946112][T12021] usb 5-1: config 166 interface 177 has no altsetting 0 [ 911.946574][ T67] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 911.963778][T21339] netlink: 'syz.2.3684': attribute type 58 has an invalid length. [ 911.972924][T21339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3684'. [ 911.993847][T12021] usb 5-1: config 166 interface 34 has no altsetting 0 [ 912.003831][ T67] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 912.024563][ T67] usb 2-1: Product: syz [ 912.033064][T12021] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 912.048895][ T67] usb 2-1: Manufacturer: syz [ 912.063044][T12021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.073758][T12025] gspca_cpia1: usb_control_msg 02, error -71 [ 912.086547][T12025] gspca_cpia1: usb_control_msg 05, error -71 [ 912.105575][ T67] cdc_wdm 2-1:1.0: skipping garbage [ 912.113258][T12021] usb 5-1: Product: syz [ 912.119961][T12025] gspca_cpia1: usb_control_msg 04, error -71 [ 912.127780][T12021] usb 5-1: Manufacturer: syz [ 912.133849][ T67] cdc_wdm 2-1:1.0: skipping garbage [ 912.141044][T12025] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 912.153153][T12021] usb 5-1: SerialNumber: syz [ 912.165281][ T67] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 912.182422][T12025] usb 3-1: USB disconnect, device number 82 [ 912.192820][ T67] cdc_wdm 2-1:1.0: Unknown control protocol [ 912.342690][ C1] wdm_int_callback: 5 callbacks suppressed [ 912.342713][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 912.343138][T12013] usb 2-1: USB disconnect, device number 114 [ 912.348561][ C1] wdm_int_callback: 5 callbacks suppressed [ 912.348583][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 912.348601][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 912.405882][T12021] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 912.529641][T12021] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 912.632111][T12021] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 912.668487][T12021] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 912.698174][T12021] uvcvideo 5-1:166.34: No valid video chain found. [ 912.724672][T12021] usb 5-1: USB disconnect, device number 127 [ 913.468264][T19736] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 913.525672][T21391] sit1: entered allmulticast mode [ 913.647312][T19736] usb 3-1: Using ep0 maxpacket: 16 [ 913.658804][T19736] usb 3-1: config 0 has no interfaces? [ 913.685151][T21396] netlink: 'syz.3.3697': attribute type 8 has an invalid length. [ 913.738070][T19736] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 913.770903][T19736] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 913.845146][T19736] usb 3-1: Manufacturer: syz [ 913.884284][T19736] usb 3-1: config 0 descriptor?? [ 913.954172][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 914.351316][T21401] team0: Port device team_slave_0 removed [ 914.632559][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 914.869408][T21429] netlink: 'syz.4.3705': attribute type 10 has an invalid length. [ 915.028763][T21429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 915.470738][T21446] program syz.4.3708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.701093][T21448] netlink: 'syz.4.3709': attribute type 8 has an invalid length. [ 917.287024][ T5896] usb 3-1: USB disconnect, device number 83 [ 917.366406][T19736] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 917.580421][T19736] usb 2-1: Using ep0 maxpacket: 32 [ 917.611616][T21477] macsec0: left allmulticast mode [ 917.623147][T21477] veth1_macvtap: left allmulticast mode [ 917.663027][T19736] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 917.695853][T19736] usb 2-1: config 0 has no interface number 0 [ 917.713896][T19736] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.826661][T19736] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 917.890431][T19736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.969468][T19736] usb 2-1: Product: syz [ 917.988077][T19736] usb 2-1: Manufacturer: syz [ 918.047801][T19736] usb 2-1: SerialNumber: syz [ 918.099238][T19736] usb 2-1: config 0 descriptor?? [ 918.185566][T19736] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 918.214976][T19736] em28xx 2-1:0.132: Video interface 132 found: [ 918.452773][ T30] audit: type=1800 audit(1770263938.906:2498): pid=21490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3719" name="memory.events" dev="tmpfs" ino=530 res=0 errno=0 [ 918.590861][T19736] em28xx 2-1:0.132: chip ID is em2874 [ 918.615607][ T30] audit: type=1804 audit(1770263938.906:2499): pid=21490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3719" name="/newroot/97/memory.events" dev="tmpfs" ino=530 res=1 errno=0 [ 919.218842][T19736] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 919.283435][T19736] em28xx 2-1:0.132: board has no eeprom [ 919.316437][T12013] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 919.506488][T19736] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 919.600327][T19736] em28xx 2-1:0.132: analog set to bulk mode. [ 919.624500][T12015] em28xx 2-1:0.132: Registering V4L2 extension [ 919.746322][T12013] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.867815][T12013] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 919.915138][T12013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 919.953707][T12013] usb 3-1: Product: syz [ 919.972886][T12013] usb 3-1: Manufacturer: syz [ 920.033261][T12013] usb 3-1: SerialNumber: syz [ 920.258227][T12021] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 920.429993][T12013] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 920.794764][T21515] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 920.838701][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 920.986439][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 920.999704][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 921.075460][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 921.146277][ T67] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 921.280552][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 921.299252][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 921.316914][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 921.323161][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 921.327223][ T67] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 921.368970][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 921.392368][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.429301][ T67] usb 4-1: Product: syz [ 921.455574][ T67] usb 4-1: Manufacturer: syz [ 921.487407][ T67] usb 4-1: SerialNumber: syz [ 921.529342][ T67] usb 4-1: config 0 descriptor?? [ 921.569076][ T67] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 921.580294][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 921.602518][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 921.651626][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 921.693941][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 921.730932][T12015] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 921.792580][T12015] usb 2-1: Decoder not found [ 921.894981][T21541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3731'. [ 921.910842][T12015] em28xx 2-1:0.132: failed to create media graph [ 921.931674][T12015] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 921.983995][T21539] ================================================================== [ 921.992089][T21539] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 921.999474][T21539] Read of size 8 at addr ffff8880315a4740 by task v4l_id/21539 [ 922.007026][T21539] [ 922.009483][T21539] CPU: 1 UID: 0 PID: 21539 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 922.009535][T21539] Tainted: [L]=SOFTLOCKUP [ 922.009549][T21539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 922.009570][T21539] Call Trace: [ 922.009577][T21539] [ 922.009585][T21539] dump_stack_lvl+0xe8/0x150 [ 922.009610][T21539] print_report+0xba/0x230 [ 922.009629][T21539] ? v4l2_fh_open+0xac/0x420 [ 922.009647][T21539] kasan_report+0x117/0x150 [ 922.009667][T21539] ? v4l2_fh_open+0xac/0x420 [ 922.009689][T21539] v4l2_fh_open+0xac/0x420 [ 922.009708][T21539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 922.009739][T21539] em28xx_v4l2_open+0x157/0x9a0 [ 922.009762][T21539] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.009785][T21539] v4l2_open+0x1bf/0x3a0 [ 922.009807][T21539] chrdev_open+0x4cd/0x5e0 [ 922.009826][T21539] ? __pfx_chrdev_open+0x10/0x10 [ 922.009842][T21539] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 922.009864][T21539] ? __pfx_chrdev_open+0x10/0x10 [ 922.009880][T21539] do_dentry_open+0x7ce/0x1420 [ 922.009905][T21539] vfs_open+0x3b/0x340 [ 922.009922][T21539] ? path_openat+0x346e/0x3e20 [ 922.009945][T21539] path_openat+0x3486/0x3e20 [ 922.009978][T21539] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 922.010000][T21539] ? getname_flags+0xb7/0x540 [ 922.010018][T21539] ? __pfx_path_openat+0x10/0x10 [ 922.010048][T21539] ? __lock_acquire+0x6b5/0x2cf0 [ 922.010076][T21539] do_filp_open+0x22d/0x490 [ 922.010098][T21539] ? __pfx_do_filp_open+0x10/0x10 [ 922.010129][T21539] ? _raw_spin_unlock+0x28/0x50 [ 922.010150][T21539] ? alloc_fd+0x64b/0x6c0 [ 922.010171][T21539] do_sys_openat2+0x12f/0x220 [ 922.010192][T21539] ? __pfx_do_sys_openat2+0x10/0x10 [ 922.010211][T21539] ? exc_page_fault+0x6a/0xc0 [ 922.010228][T21539] ? do_user_addr_fault+0xc7c/0x1360 [ 922.010253][T21539] __x64_sys_openat+0x138/0x170 [ 922.010275][T21539] do_syscall_64+0xe2/0xf80 [ 922.010293][T21539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.010311][T21539] ? trace_irq_disable+0x37/0x100 [ 922.010328][T21539] ? clear_bhb_loop+0x60/0xb0 [ 922.010347][T21539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.010365][T21539] RIP: 0033:0x7fc15d6a7407 [ 922.010382][T21539] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 922.010398][T21539] RSP: 002b:00007fffac7c7300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 922.010418][T21539] RAX: ffffffffffffffda RBX: 00007fc15dd53880 RCX: 00007fc15d6a7407 [ 922.010432][T21539] RDX: 0000000000000000 RSI: 00007fffac7c7f1b RDI: ffffffffffffff9c [ 922.010444][T21539] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 922.010455][T21539] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 922.010466][T21539] R13: 00007fffac7c7550 R14: 00007fc15deba000 R15: 0000560a8e0e44d8 [ 922.010485][T21539] [ 922.010491][T21539] [ 922.294579][T21539] Allocated by task 12015: [ 922.298984][T21539] kasan_save_track+0x3e/0x80 [ 922.303650][T21539] __kasan_kmalloc+0x93/0xb0 [ 922.308225][T21539] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 922.313587][T21539] em28xx_v4l2_init+0x10b/0x2e70 [ 922.318521][T21539] em28xx_init_extension+0x120/0x1c0 [ 922.323817][T21539] process_scheduled_works+0xaec/0x17a0 [ 922.329361][T21539] worker_thread+0xda6/0x1360 [ 922.334045][T21539] kthread+0x726/0x8b0 [ 922.338105][T21539] ret_from_fork+0x51b/0xa40 [ 922.342687][T21539] ret_from_fork_asm+0x1a/0x30 [ 922.347433][T21539] [ 922.349736][T21539] Freed by task 12015: [ 922.353778][T21539] kasan_save_track+0x3e/0x80 [ 922.358432][T21539] kasan_save_free_info+0x46/0x50 [ 922.363436][T21539] __kasan_slab_free+0x5c/0x80 [ 922.368182][T21539] kfree+0x1be/0x650 [ 922.372058][T21539] em28xx_v4l2_init+0x1683/0x2e70 [ 922.377064][T21539] em28xx_init_extension+0x120/0x1c0 [ 922.382330][T21539] process_scheduled_works+0xaec/0x17a0 [ 922.387862][T21539] worker_thread+0xda6/0x1360 [ 922.392526][T21539] kthread+0x726/0x8b0 [ 922.396592][T21539] ret_from_fork+0x51b/0xa40 [ 922.401172][T21539] ret_from_fork_asm+0x1a/0x30 [ 922.405915][T21539] [ 922.408217][T21539] The buggy address belongs to the object at ffff8880315a4000 [ 922.408217][T21539] which belongs to the cache kmalloc-8k of size 8192 [ 922.422255][T21539] The buggy address is located 1856 bytes inside of [ 922.422255][T21539] freed 8192-byte region [ffff8880315a4000, ffff8880315a6000) [ 922.436207][T21539] [ 922.438515][T21539] The buggy address belongs to the physical page: [ 922.444912][T21539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x315a0 [ 922.453662][T21539] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 922.462152][T21539] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 922.470118][T21539] page_type: f5(slab) [ 922.474080][T21539] raw: 00fff00000000040 ffff88813fe27280 0000000000000000 0000000000000001 [ 922.482644][T21539] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 922.491218][T21539] head: 00fff00000000040 ffff88813fe27280 0000000000000000 0000000000000001 [ 922.499884][T21539] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 922.508538][T21539] head: 00fff00000000003 ffffea0000c56801 00000000ffffffff 00000000ffffffff [ 922.517196][T21539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 922.525845][T21539] page dumped because: kasan: bad access detected [ 922.532241][T21539] page_owner tracks the page as allocated [ 922.537934][T21539] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20831, tgid 20827 (syz.0.3556), ts 880145728197, free_ts 879720384808 [ 922.560839][T21539] post_alloc_hook+0x228/0x280 [ 922.565586][T21539] get_page_from_freelist+0x24dc/0x2580 [ 922.571118][T21539] __alloc_frozen_pages_noprof+0x18d/0x380 [ 922.576919][T21539] alloc_pages_mpol+0x232/0x4a0 [ 922.581753][T21539] allocate_slab+0x86/0x3a0 [ 922.586241][T21539] ___slab_alloc+0xd82/0x1760 [ 922.590902][T21539] __slab_alloc+0x65/0x100 [ 922.595301][T21539] __kmalloc_cache_noprof+0x40d/0x6e0 [ 922.600655][T21539] audit_log_d_path+0xb8/0x1a0 [ 922.605418][T21539] audit_log_d_path_exe+0x42/0x70 [ 922.610493][T21539] audit_log_task+0x2c3/0x3d0 [ 922.615166][T21539] audit_seccomp+0x85/0x190 [ 922.619662][T21539] __seccomp_filter+0xd48/0x1ef0 [ 922.624585][T21539] syscall_trace_enter+0xa9/0x160 [ 922.629595][T21539] do_syscall_64+0xbb/0xf80 [ 922.634083][T21539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.639953][T21539] page last free pid 12021 tgid 12021 stack trace: [ 922.646428][T21539] __free_frozen_pages+0xbf8/0xd70 [ 922.651524][T21539] __put_partials+0x146/0x170 [ 922.656361][T21539] __slab_free+0x294/0x320 [ 922.660771][T21539] qlist_free_all+0x97/0x100 [ 922.665355][T21539] kasan_quarantine_reduce+0x148/0x160 [ 922.670794][T21539] __kasan_slab_alloc+0x22/0x80 [ 922.676322][T21539] __kmalloc_cache_noprof+0x36f/0x6e0 [ 922.681684][T21539] usb_control_msg+0x73/0x3e0 [ 922.686344][T21539] hub_ext_port_status+0x116/0x820 [ 922.691430][T21539] hub_port_debounce+0x220/0x330 [ 922.696346][T21539] hub_event+0x1d4e/0x4f30 [ 922.700743][T21539] process_scheduled_works+0xaec/0x17a0 [ 922.706273][T21539] worker_thread+0xda6/0x1360 [ 922.710932][T21539] kthread+0x726/0x8b0 [ 922.714975][T21539] ret_from_fork+0x51b/0xa40 [ 922.719547][T21539] ret_from_fork_asm+0x1a/0x30 [ 922.724293][T21539] [ 922.726594][T21539] Memory state around the buggy address: [ 922.732203][T21539] ffff8880315a4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.740241][T21539] ffff8880315a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.748299][T21539] >ffff8880315a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.756340][T21539] ^ [ 922.762568][T21539] ffff8880315a4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.770638][T21539] ffff8880315a4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 922.778681][T21539] ================================================================== [ 922.787493][T12015] em28xx 2-1:0.132: Remote control support is not available for this card. [ 922.856520][T21539] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 922.863758][T21539] CPU: 1 UID: 0 PID: 21539 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 922.874362][T21539] Tainted: [L]=SOFTLOCKUP [ 922.878686][T21539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 922.888747][T21539] Call Trace: [ 922.892041][T21539] [ 922.894983][T21539] vpanic+0x1e0/0x670 [ 922.898994][T21539] panic+0xc5/0xd0 [ 922.902813][T21539] ? __pfx_panic+0x10/0x10 [ 922.907248][T21539] ? preempt_schedule_common+0x82/0xd0 [ 922.912715][T21539] ? v4l2_fh_open+0xac/0x420 [ 922.917324][T21539] check_panic_on_warn+0x89/0xb0 [ 922.922280][T21539] ? v4l2_fh_open+0xac/0x420 [ 922.926878][T21539] end_report+0x6f/0x140 [ 922.931124][T21539] kasan_report+0x128/0x150 [ 922.935631][T21539] ? v4l2_fh_open+0xac/0x420 [ 922.940234][T21539] v4l2_fh_open+0xac/0x420 [ 922.944651][T21539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 922.950638][T21539] em28xx_v4l2_open+0x157/0x9a0 [ 922.955500][T21539] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.960539][T21539] v4l2_open+0x1bf/0x3a0 [ 922.964801][T21539] chrdev_open+0x4cd/0x5e0 [ 922.969237][T21539] ? __pfx_chrdev_open+0x10/0x10 [ 922.974179][T21539] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 922.980520][T21539] ? __pfx_chrdev_open+0x10/0x10 [ 922.985439][T21539] do_dentry_open+0x7ce/0x1420 [ 922.990192][T21539] vfs_open+0x3b/0x340 [ 922.994250][T21539] ? path_openat+0x346e/0x3e20 [ 922.999000][T21539] path_openat+0x3486/0x3e20 [ 923.003591][T21539] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 923.009229][T21539] ? getname_flags+0xb7/0x540 [ 923.013900][T21539] ? __pfx_path_openat+0x10/0x10 [ 923.018930][T21539] ? __lock_acquire+0x6b5/0x2cf0 [ 923.023867][T21539] do_filp_open+0x22d/0x490 [ 923.028361][T21539] ? __pfx_do_filp_open+0x10/0x10 [ 923.033387][T21539] ? _raw_spin_unlock+0x28/0x50 [ 923.038229][T21539] ? alloc_fd+0x64b/0x6c0 [ 923.042549][T21539] do_sys_openat2+0x12f/0x220 [ 923.047220][T21539] ? __pfx_do_sys_openat2+0x10/0x10 [ 923.052410][T21539] ? exc_page_fault+0x6a/0xc0 [ 923.057074][T21539] ? do_user_addr_fault+0xc7c/0x1360 [ 923.062346][T21539] __x64_sys_openat+0x138/0x170 [ 923.067190][T21539] do_syscall_64+0xe2/0xf80 [ 923.071692][T21539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.077741][T21539] ? trace_irq_disable+0x37/0x100 [ 923.082748][T21539] ? clear_bhb_loop+0x60/0xb0 [ 923.087415][T21539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.093293][T21539] RIP: 0033:0x7fc15d6a7407 [ 923.097692][T21539] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 923.117292][T21539] RSP: 002b:00007fffac7c7300 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 923.125709][T21539] RAX: ffffffffffffffda RBX: 00007fc15dd53880 RCX: 00007fc15d6a7407 [ 923.133698][T21539] RDX: 0000000000000000 RSI: 00007fffac7c7f1b RDI: ffffffffffffff9c [ 923.141657][T21539] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 923.149608][T21539] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 923.157648][T21539] R13: 00007fffac7c7550 R14: 00007fc15deba000 R15: 0000560a8e0e44d8 [ 923.165612][T21539] [ 923.168769][T21539] Kernel Offset: disabled [ 923.173074][T21539] Rebooting in 86400 seconds..