last executing test programs: 3m21.629077811s ago: executing program 1 (id=1431): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70d5}]}]}, 0x5c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x44000}, 0x20008800) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f00"], 0xffbf) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ee) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r7, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000100)="d5e8", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000050a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050"], 0xd8}}, 0x80) r10 = fsmount(r2, 0x9c7ad8bc8627f602, 0x5) fchdir(r10) 3m18.10099578s ago: executing program 1 (id=1445): r0 = memfd_create(&(0x7f00000005c0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033#\\\xb7\x98zvS\x99[d \xff\xff\x00\x80\x00\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xb8\xad\xe1\xba\xf2\xb6F\x85\xdaA\x85\xb8\\\x94\xc3\xc4\xb1\xa2\x16\xff\x03;\x01\x00\x00\x00\x01\x00\x00\x00\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x01\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7hTgiz\nX\x91%\x16.\xac#4\xd5#\xd1\xa2i\x1e*\x99\x95\x1a\xcb#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2v[\t\x00\x8d\xf3\xcc1\r5V\x00\x00\x00\x00\x00\x00\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\a\x05^\x11O\xd6\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xe0\x1e@gW\xf1[\x93H\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00Y\xf6\x85\x17\x86,\x9bf\xb9Z\x8e\xa4\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oNTqU\xed\x14a6\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff\x97\xbaq\rY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xd9\xf0\xef\x86\t\xaf\vi\xdc\xbf?\xf5\x02\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'5\xff\xdf\xec&+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]4\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01\x17\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x90-\x19\xb9\x93\xd3k\xb9\xf3\\\xb3\xa3\x86\x8b=_\xfb\xfeI7\x8c\x9f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\\5\xf5\x9b\xef\xc9x\xb6=\xb4\xe7l z\x1c\xac\x93\x81\xa5\xa7s\x89[\xc8\xd2\xfe\xe8\xc2\xdf},\x14\x81\xeb\x12g\xf3\xa6\xd3\xc7\x13\xb7^\x19\t=[\xbb\x0e\xba^\xbaE\x0fP\xb8H\xcdCD\xb9\x91\xc7\x18\xf5b\x80\xfe\xa4\xcbW\xfb\x04\x00\x00\x00\x00\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x2a5d, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff0000000000", 0x19, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0xfffdffff000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x2, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000f, 0x12, r0, 0x0) 3m17.321360777s ago: executing program 1 (id=1449): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) (fail_nth: 3) 3m16.370260602s ago: executing program 1 (id=1454): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) move_mount(r4, 0x0, r3, 0x0, 0x46) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r5 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r7 = socket(0x10, 0xa, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x0, 0xfc893c708578ccd6, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x12}, {0xffff, 0xffff}, {0x10, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x6, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0xb, 0x2, 0x1, 0xbcc, 0x7}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x88000}, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x5, 0xc4, 0x8, 0x10]}, &(0x7f0000000040)=0xc) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=ANY=[@ANYBLOB="48010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r10 = eventfd(0x0) read$eventfd(r10, &(0x7f0000000340), 0x8) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="c5c76b680000"], 0x0, 0x0, 0x0, 0x0}) 3m13.037217885s ago: executing program 1 (id=1461): r0 = gettid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x4, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x8, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}]}}, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) r4 = syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000020c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) sendmmsg$alg(r3, &(0x7f0000004ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10000800}, {0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x40080}, {0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0x20044844}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000002d80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x30, 0x117, 0x2, 0x19, "7f641d1caf0dcdef86a82fdece402da7a4060c5b429713572e"}, @iv={0x58, 0x117, 0x2, 0x41, "abcd34f867703c95231dfe739cee2bf720f48c7a4a5b9555b547a7c1a2bbb0760613c79dea5c4ace14b2031e03176df07d4d2d39d9d35c427e161e9c3f3ded2e31"}], 0xa0, 0x40800}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002ec0)="4135a3822b1041314fab39864d5a4411028b831f75f76f2ae9792234c75da418be0b68820e4fc9c010186976f97a4adbe2a307c498dd35a4b8248051f93361bb2e336b53ad0567e31f83a95dae15650dd4813d034510cf14a514644d8fa7f8bb7dfcdb443d519a3e91cb23e9c45416df9fbdf2d8ddb32b39fac8bcf38da4d530784374962837ce4887330532378f4ca99dc1e3934b65465c63157d55c62ad27f09e76e3ac1f5b9f5fe97f9b00c605b27ebf6488c77ff18c8d5a8", 0xba}, {&(0x7f0000002fc0)}, {0x0}, {&(0x7f00000032c0)}, {0x0}], 0x5, 0x0, 0x0, 0x50}], 0x5, 0x4000005) recvmsg(r3, 0x0, 0x100) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)) 3m12.620773846s ago: executing program 1 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo-', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0xaba6a7517055ffce, 0x0, @ioapic={0x4, 0xa, 0x8, 0x6, 0x0, [{0x3, 0xd, 0x6, '\x00', 0x4}, {0x4, 0x2, 0xfc, '\x00', 0xa}, {0xd4, 0x2, 0xc, '\x00', 0xa}, {0x6, 0x7f, 0x7, '\x00', 0x64}, {0x2, 0x6, 0x0, '\x00', 0x4}, {0x4, 0x3, 0x4, '\x00', 0x5}, {0x3, 0x0, 0x7, '\x00', 0x2}, {0x0, 0x5, 0x6, '\x00', 0xb}, {0x57, 0x7e, 0x8, '\x00', 0x2}, {0x4, 0x0, 0x6}, {0x8, 0xa, 0x4, '\x00', 0x66}, {0x0, 0x44, 0x7, '\x00', 0x6}, {0x4, 0xc, 0x0, '\x00', 0xff}, {0x0, 0x1, 0x4, '\x00', 0x1e}, {0x5, 0xfa, 0x2, '\x00', 0x1}, {0x71, 0x0, 0x10, '\x00', 0x5}, {0x1, 0x0, 0x5a, '\x00', 0x7}, {0x2, 0x26, 0x4, '\x00', 0x6}, {0x5, 0x69, 0x4, '\x00', 0xe}, {0x7, 0x9, 0x3, '\x00', 0x18}, {0xe4, 0x3, 0xec, '\x00', 0x35}, {0xd0, 0xb0, 0x42, '\x00', 0x5}, {0x6, 0x2, 0x4, '\x00', 0xf}, {0x3, 0x3, 0x3, '\x00', 0x6}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r3, 0x4, 0x2) getdents64(r3, 0xffffffffffffffff, 0x43) 3m12.129288713s ago: executing program 32 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo-', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000440)={0xaba6a7517055ffce, 0x0, @ioapic={0x4, 0xa, 0x8, 0x6, 0x0, [{0x3, 0xd, 0x6, '\x00', 0x4}, {0x4, 0x2, 0xfc, '\x00', 0xa}, {0xd4, 0x2, 0xc, '\x00', 0xa}, {0x6, 0x7f, 0x7, '\x00', 0x64}, {0x2, 0x6, 0x0, '\x00', 0x4}, {0x4, 0x3, 0x4, '\x00', 0x5}, {0x3, 0x0, 0x7, '\x00', 0x2}, {0x0, 0x5, 0x6, '\x00', 0xb}, {0x57, 0x7e, 0x8, '\x00', 0x2}, {0x4, 0x0, 0x6}, {0x8, 0xa, 0x4, '\x00', 0x66}, {0x0, 0x44, 0x7, '\x00', 0x6}, {0x4, 0xc, 0x0, '\x00', 0xff}, {0x0, 0x1, 0x4, '\x00', 0x1e}, {0x5, 0xfa, 0x2, '\x00', 0x1}, {0x71, 0x0, 0x10, '\x00', 0x5}, {0x1, 0x0, 0x5a, '\x00', 0x7}, {0x2, 0x26, 0x4, '\x00', 0x6}, {0x5, 0x69, 0x4, '\x00', 0xe}, {0x7, 0x9, 0x3, '\x00', 0x18}, {0xe4, 0x3, 0xec, '\x00', 0x35}, {0xd0, 0xb0, 0x42, '\x00', 0x5}, {0x6, 0x2, 0x4, '\x00', 0xf}, {0x3, 0x3, 0x3, '\x00', 0x6}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r3, 0x4, 0x2) getdents64(r3, 0xffffffffffffffff, 0x43) 1m58.62534818s ago: executing program 3 (id=1797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x400004, 0x3b5f91, 0x203bac}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000040012"], 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x692, &(0x7f0000000280)={0x0, 0xb2ef, 0x80, 0x3, 0x145}) syz_clone(0xc98b0700, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x7ad281, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001800010025bd7000fb46292580201401fd02ff05"], 0x1c}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0010000100001000000000000000000fe80000000efffffffffffffff0000bb0000000000000000000000000000000100"/64, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d432000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000010000000000000004000000000000000000000000000000040000000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000fcffffff0a0000000000000000000000a100020063626328626c6f776669736829"], 0x1b0}, 0x1, 0x0, 0x0, 0x48c0}, 0x20000000) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40808) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 1m57.691599745s ago: executing program 3 (id=1802): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file1\x00'}) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs\x00'}, 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x20, 0x4, {0x4, @pix={0x1, 0xfffffffa, 0x494e4f4b, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x1, 0x3, 0x0, 0x2}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fff7ffc}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r3, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000000)=0x8) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x1a}, 0x8) stat(&(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {r6, r8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="68ae2b06814e204e7b181df6060000b23ac14f983d24b23621ffff0000040000000600000040000000", @ANYRES32=r10, @ANYBLOB="c10000007d0000000a0000008e0000001a000100e304db3c786d58038a42264700dee42729a087cf5d690000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x10040000) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002940)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r13, @ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYRESHEX=r1, @ANYRESHEX=r7], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1m54.49264356s ago: executing program 3 (id=1817): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m54.17736761s ago: executing program 3 (id=1821): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000002480), 0x62f82, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m53.249334332s ago: executing program 3 (id=1825): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) fsopen(0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0xe9ef, 0x100, 0x200000000, 0x200010, 0xfffc, 0x4}, &(0x7f0000000580)={0xa, 0xfffffffffffffffd, 0x4, 0x5, 0xffffffffffffffff, 0xffeffffffffffffa, 0x4, 0x6}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x8, 0x5, 0x3, 0x4, 0x7, 0x3, 0x1, 0x6, 0x101, 0x8000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1fb) 1m53.08193529s ago: executing program 3 (id=1826): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010902240001c9127b0b502bb6000020a8090400000200092100000009220b000905810300002642f10000000000000000000000000000000000e9ff00"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]}) mount$fuse(0x0, 0x0, 0x0, 0x80010, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2031040000000b23047d7e6fcbec72cd94"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x8, 0x6, 0x49}, {0x9, 0x5, 0x9, 0x2, 0x20, 0xf, 0x0, 0x7}, {0x9, 0x5, 0xe77b40db2ad5c96d, 0x3, 0x40, 0x2, 0x1, 0x6}}}}}}]}}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQES(&(0x7f00009f4000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x28, 0x0, r1, 0x0, &(0x7f0000000b40)={&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c6}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)="b237e0a7dc3b6ebd045d80bce74c7e15c35feb35cefb557c1c8130e9a577a4c9d6e80ccd9fde535e1a16fc92a0be416062be1f0ee8c68cf1a7abe079e19c356d46051f7b1da4e5d06d1b1a2e9890c9ae0bdcb8c09f7531ceb53e089988417ce2793691cdfb4ce809509ad5b1e246f9db6c70636791a9dc25a45c67fe416fb730c8a832698d7e5e119c362fc6", 0x8c}, {&(0x7f0000000980)="2b127732d5f32dc3d21d6f474acee6819c80ca75a5326781cf6a2fd7ca97d7247ad1df4d7fcf3d7ddfa7189b0a86db3c6cea6ae979ea54501882a100510daf13668aafffbcb475337706696ea05603867462ad42cf9f4d1277ee412a850af5e6660830d28322b346158684bbe70cf95996df8873897c6de2b3b68a721d46c112865ba24007e9ce648bc5e806f6c9875a1c580cfa44a7782c8e3b919fe6dfac2544456b62aa7454c7c257353fa75140109ace673435c2bd01902c1be5d5205e09de84", 0xc2}, {&(0x7f0000000a80)="422f832d287c26a0f4dfc372368b5c70d837867dcee9d3bf8a9512ed0dc4b49ec176411373db0355154fd7208c4c7aa6ddf373c1b0d5760d0b4d683c49fabfa2874312a89bb683d0766372cccdff440225b6bc07e9", 0x55}], 0x3, &(0x7f0000001580)=[{0x70, 0x114, 0x81, "37cf7830fe02699b560e31238d71ec01b1295a5453abb7b620b3e362d7f2e8faeaf94118c1187aa03ab948e04cd4da8316b7b8394f8dbb94cb0c97bf2a79fc8674264c2eba11945c808e28a1d2b77f132ac81348d397f2fab10bcf950e01"}, {0x110, 0x109, 0x10000, "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"}, {0xe8, 0x83, 0xffffffff, "b7c92b7e7507d06b6d7a4dfb7553699c56d930033f953103228740ed68e034f58edbbcf153e203ced128c66902a9a7e7effe7013b7472966f6f3182e0d465e556d727bf53cb27091a00196478e4d93cc6668a298bcef349ee5b2245d72a45437c507a844d72c916918bfe424f17fa013e11d206efa1137536670b6b31f3f9012beb80bca9a3cfcea56d9fb24b3470a04f6981bfed4535b19b106ec3d6d7ea298031e28adb9a60ffc6196aa4d186a23876053b6402c4765d42633e82b47247a1ef5a4b4f4df9e3bb5ea364b7550118c5d70b4f2c91790db"}, {0x70, 0x0, 0x8, "6ef20a0a80352f7befe6707be2746cf19c69cb51474f861a2645dbc6248f49fd5cadd25904af5f35368e186b01acacb7049e06018bbe88a4bc080890405f005c80532c89b3bc7e32dd98d549e86f5c9661933c057eaa1716a5bfb863b4b5777c"}, {0x68, 0x103, 0x0, "81e2e542730bb8707b5d397f94dc14028703e8d4cdaf56314a88958db1eaedb3fd6095af0e41704504c4ea16ad36272bad4366e423171221b20defeae4aa81f6a26f34a519bf4f69f85225e634f8444bf0ab8569"}, {0xa8, 0x101, 0x2, "e8354b25439835ec8033fd08e4177d9f75ed5b87f7167eeacdbd9b5c9ad8b52cd174a3da888df0fb3c11c974a35420d14a765cf4f9964c41e80b773b5e81581771888461606228c9cc14253e028cb68af1e8c446879cea2fbe06005bb0607721de31215c2577acbadf93b0578b1e6e4838bad2a5846f3be8c51545fef4e9c10fc38c3245ef8111c9832c9c933ffeae6339bc"}, {0x58, 0x3a, 0x2f, "7db23ab5c395c94e3a32665c1a5aaef2df09f3791b7446bcfa3d3736e5822da4ec0e291077da6c852aa6e05970dfba99af382bda1bdd948a3ee9fe6298e6c8b9e8d5fc90"}, {0x68, 0x10f, 0xfff, "e0d8c3af04e8cd8a128c3a44a6aac3b786368e8bd93e3e52cf33d2fb82bfd57237e0b645a8ef7a7b5d3c95c50b29994d303d839adfda280bf79b0b3cb8ad93ed3e25e38593e36b9a4ca90607ab06708eabf9cc6f29a4"}, {0x1010, 0x139, 0x200, "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"}], 0x14b8}, 0x0, 0x800, 0x1, {0x0, r8}}) syz_usb_control_io$hid(r4, 0x0, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000bc0)) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "8990c0e7", {0x3, 0x107, 0x0, 0x7, 0x2, 0x3, 0x90}}) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x40a00) ioctl$HIDIOCGUSAGE(r10, 0xc018480b, &(0x7f00000001c0)={0x3, 0x0, 0x17c, 0xa, 0x4, 0x4}) syz_usb_control_io$sierra_net(r3, &(0x7f0000000240)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00074b0000004b2132a7f33637c8319f0ce99a5a20c5c4ad9b7a543b8bca0bdeff67fab6fb6ae356a7bb0e9e99bc60c7ad823c3a96ccf79fae5f9cc40cb1d81317e463f186a6d4ab7b75257dd527f5b77e"], &(0x7f0000000180)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "a45dbb21bb7d7f223bebb62d1fd17cdd0341e8969ea3d5e76885762ccd4673d2fe8c1e496decd3004edf56967cf79a4978657867736619a02da78207f9d98ada8cac242976cac74478fb050f7d0da620f16e8b5415af91dddbe860091d469c488dec46c29ddeafa706242279b2c53e67920175bbb5540c3aa323f5b12a2214f27f3ae242ea53b9ee34222610eab37d7fe395f20c8df866af96bac55f39a4c2378bbbc075cfbff34ca68cc843b6d328d2d5a0"}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40, 0x10, 0x15, "453f08f9ea4424bafffcb3c5023f3ea4f6dbcd7fd1"}, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x4, "048d72cf"}}) 1m52.87167341s ago: executing program 33 (id=1826): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="12010902240001c9127b0b502bb6000020a8090400000200092100000009220b000905810300002642f10000000000000000000000000000000000e9ff00"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]}) mount$fuse(0x0, 0x0, 0x0, 0x80010, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="2031040000000b23047d7e6fcbec72cd94"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0x8, 0x6, 0x49}, {0x9, 0x5, 0x9, 0x2, 0x20, 0xf, 0x0, 0x7}, {0x9, 0x5, 0xe77b40db2ad5c96d, 0x3, 0x40, 0x2, 0x1, 0x6}}}}}}]}}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r7 = mmap$IORING_OFF_SQES(&(0x7f00009f4000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000b80)=@IORING_OP_SENDMSG={0x9, 0x28, 0x0, r1, 0x0, &(0x7f0000000b40)={&(0x7f0000000840)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x0, {0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8c6}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000008c0)="b237e0a7dc3b6ebd045d80bce74c7e15c35feb35cefb557c1c8130e9a577a4c9d6e80ccd9fde535e1a16fc92a0be416062be1f0ee8c68cf1a7abe079e19c356d46051f7b1da4e5d06d1b1a2e9890c9ae0bdcb8c09f7531ceb53e089988417ce2793691cdfb4ce809509ad5b1e246f9db6c70636791a9dc25a45c67fe416fb730c8a832698d7e5e119c362fc6", 0x8c}, {&(0x7f0000000980)="2b127732d5f32dc3d21d6f474acee6819c80ca75a5326781cf6a2fd7ca97d7247ad1df4d7fcf3d7ddfa7189b0a86db3c6cea6ae979ea54501882a100510daf13668aafffbcb475337706696ea05603867462ad42cf9f4d1277ee412a850af5e6660830d28322b346158684bbe70cf95996df8873897c6de2b3b68a721d46c112865ba24007e9ce648bc5e806f6c9875a1c580cfa44a7782c8e3b919fe6dfac2544456b62aa7454c7c257353fa75140109ace673435c2bd01902c1be5d5205e09de84", 0xc2}, {&(0x7f0000000a80)="422f832d287c26a0f4dfc372368b5c70d837867dcee9d3bf8a9512ed0dc4b49ec176411373db0355154fd7208c4c7aa6ddf373c1b0d5760d0b4d683c49fabfa2874312a89bb683d0766372cccdff440225b6bc07e9", 0x55}], 0x3, &(0x7f0000001580)=[{0x70, 0x114, 0x81, "37cf7830fe02699b560e31238d71ec01b1295a5453abb7b620b3e362d7f2e8faeaf94118c1187aa03ab948e04cd4da8316b7b8394f8dbb94cb0c97bf2a79fc8674264c2eba11945c808e28a1d2b77f132ac81348d397f2fab10bcf950e01"}, {0x110, 0x109, 0x10000, "15b54afd0067fccc234a7400f1bb5a8639e2f0c8a7efd99d7c4b0701d803220bb909ab3e5b7f13ea1bcc0f6cc91f746582033103919ef4d8ad571b86ebbc156589ac90b1ec888ba9380eed72f486d221c02a6c2db4a2fefed278372e5ee8d51a92537d15d45b2a706da31357b039dfac5b636d6ae41b6d914f57aa41baae416876dc466c1480c3b5e51b6040117ea885bfe47756857146f17c562a8070dde3645db26ca53234f80c805b76f8ddd60cba76c2cd6a97905e19279bc30bdb805f531c71e13603843119bfe80284438c186d8e3b0d10a6f8f25d02861fd02a3c5f41b1c926ab4966b64bf1e406df8b653bcd0ef7de5096262cc6d39a23"}, {0xe8, 0x83, 0xffffffff, "b7c92b7e7507d06b6d7a4dfb7553699c56d930033f953103228740ed68e034f58edbbcf153e203ced128c66902a9a7e7effe7013b7472966f6f3182e0d465e556d727bf53cb27091a00196478e4d93cc6668a298bcef349ee5b2245d72a45437c507a844d72c916918bfe424f17fa013e11d206efa1137536670b6b31f3f9012beb80bca9a3cfcea56d9fb24b3470a04f6981bfed4535b19b106ec3d6d7ea298031e28adb9a60ffc6196aa4d186a23876053b6402c4765d42633e82b47247a1ef5a4b4f4df9e3bb5ea364b7550118c5d70b4f2c91790db"}, {0x70, 0x0, 0x8, "6ef20a0a80352f7befe6707be2746cf19c69cb51474f861a2645dbc6248f49fd5cadd25904af5f35368e186b01acacb7049e06018bbe88a4bc080890405f005c80532c89b3bc7e32dd98d549e86f5c9661933c057eaa1716a5bfb863b4b5777c"}, {0x68, 0x103, 0x0, "81e2e542730bb8707b5d397f94dc14028703e8d4cdaf56314a88958db1eaedb3fd6095af0e41704504c4ea16ad36272bad4366e423171221b20defeae4aa81f6a26f34a519bf4f69f85225e634f8444bf0ab8569"}, {0xa8, 0x101, 0x2, "e8354b25439835ec8033fd08e4177d9f75ed5b87f7167eeacdbd9b5c9ad8b52cd174a3da888df0fb3c11c974a35420d14a765cf4f9964c41e80b773b5e81581771888461606228c9cc14253e028cb68af1e8c446879cea2fbe06005bb0607721de31215c2577acbadf93b0578b1e6e4838bad2a5846f3be8c51545fef4e9c10fc38c3245ef8111c9832c9c933ffeae6339bc"}, {0x58, 0x3a, 0x2f, "7db23ab5c395c94e3a32665c1a5aaef2df09f3791b7446bcfa3d3736e5822da4ec0e291077da6c852aa6e05970dfba99af382bda1bdd948a3ee9fe6298e6c8b9e8d5fc90"}, {0x68, 0x10f, 0xfff, "e0d8c3af04e8cd8a128c3a44a6aac3b786368e8bd93e3e52cf33d2fb82bfd57237e0b645a8ef7a7b5d3c95c50b29994d303d839adfda280bf79b0b3cb8ad93ed3e25e38593e36b9a4ca90607ab06708eabf9cc6f29a4"}, {0x1010, 0x139, 0x200, "002e690ffd3ee5ff3248c18587ab0a0a7946d7446d506ed3734f924008a593ae0be331e1dff0da8e2cd5dab42fc923470a301106e27fbc8d361cc96f7a9e49a93705b0f1a819bd400370b2b75fa4f8167ce824124c97df39b61f0a0e2815980ce51c21f374ffdb3d387041b648a91632a0b83a6de1aaf90ce3249c38cb8dd10024044cf121a07c3a671790e0d08e95b5f4e20c62cad1212db7ac65caac8e2c4591e92b4195cafdb5a2df2a57939b38168fc2120b0125641c84174c875c2494b3a63d9f88bcce819989f5404684576831de46bf4b220abcbd4aa7977897c01c85f4c78885599b12ff5ad1eca586ef44bd1aaf0dc92defac2c87b31cc4091b944fd4399c39e5e67bef82b2e3cb9e643b90c7f844e8facbfb805bcc2076b2581fade501d4c83faa62384816a3b211531cf0a2057a7e22c7fb51c98a5732cca151a8a96b923acfae94e1cc39a97ff96c860eefbfa29a20671fbe9bb4d129d93ed61972a260d0cc2b2a8f90413e795660d06bb1698c5ddb3914213c2c5902c50c354977903a4b3665d795a023234a9b0449f53ca9bbca459651a69d995b0e920b43584abe314795312d3c87659f44d4a00748b9d8a6257ecc01e237cf831766bdabb0f1fc483cb1e17fd5fc3eb1fcc088ffaf913bc8dd72bb301a8051af281c81e89789c994926caa3094b782fd78505a6f206ec2519b1193e0b9aa1d8972db157b1efb5801dcfd00ea2eeb5d2654a4c0603c3f4eb4fa767bab86191b00130822fe1a6bef033c830507b42defb95f9c95ddb390509c207146b20d3fb8a44facdec24694a00306647faedc1c5f028991d04f47abad64f881c22862ac1b3897cd2eac873c59ce9fd8066652065c3958d4e3494f6049e6cd213bff9ede2382461eea0edc4fe34a6b4db5c841f616e089cbe8533f7989971ccbf2f30db169929de8e5ad81fbec9b63e302d655164f51bab28a21bf416fd07dde746ae45c9274c75a6dacec64dbcb1a255a0a39537886ccc07cef4b682b692ae7abee62fa98777c89918924b4de2ce97eeff59831113180b7b136dd79952c5e638ed7e7411c4caa067d9f010a9a04e7660e498298d4741c0e132c0be00e640202621c6e4638e482793874077aded671c8f714357b5962846b7154dd602b3a254640c3525bc567511fb81bd27b19d5f6bb84460cdf2b5d2b3ff09cddf5a26a31f610ab359039240ca52620238048e74adffcb1aa1490e7d7fc08bf737f8141c86ad486c21e27d3ecb1f4902e5134112678847347b482d5949a3adab1e1c9616d33490792cc4d49ad2b1c90fdaa0bc367cb5fd4bf475be88b0a6ff39d409d86bbcb03c07209e7792af989a49361a1409ca90904fb259a0bca282bd85d55f039a654397b4765ad7b4bd8f6c667dca377a08fbf408e861de31381d386c5cd6fa8717fd09593318d1fc48bfa0a819baaddc19091cb5f4de061214a0dc559dab0bf82b467f180521cebdadab9c41d07284b16e4823818adf735a50b78e8064242bc492cf81295872b827e055408dda6f4bda7cf77d57bd4593db8ac8fd98a95cdb5e78a9c3df029689e3941ba0f9836f67e6831e03f9792b68dc8cc06625f7235425dc58a82cbc614a3f0fafb222a6282bdc4ce7289b4b1d88670818fa7217fed54836d2a91b20059d281735d806f51e5d0c5ede12623f2ced7db7e7a643caa0f044429f4c180db80f2b5b9b6f630f60f3d5fc13255c6cf43404e0d42d804dd486f62d7a8a7e31ea8e129b437082840a05c875c1c7a715d463746342c363ff173bf429382ccf2f718bbccf92f5482b168d38c745625ace28348d24facba4bf16c28bb36fa7628f1c1a8bc8ff6f92a35a5cbe5dcbfa144f8d8e8ac57ca052d48705232c1d2e532b12474bf36949c9ce46f2b3a38229144a6b9ab392f3c318273d3532135a75f1697210443354c91e32499b41bf6d31ed5c49e85ac4d6dc6f0a69af981cb4d4f86d077390601400ddd3e49a70a54dac0fe2429990e624fd883569da7040592c4e47a192aa6289d62223b55e41007b33670de5e8511720f3a7511bc16c6d69916b65c16da7d019e9ee5849159e341db9fd611c257efbe782975b237d7a83448f474eda22ff1429e702938ee6ee8e64bf05c66f43c7c648ee8e9f1a20e8fd063ae46bfa7f36263c529e04bb4da8ba26742144de0a4c53bedcd951f38249e8f34c82f945cad415bf3401ced3108d1c53af69bc2fc8cd0e868534f1b6e4c1f1e570606f27324c1a21d31e1d0c011e2f102616b509438f692bd596a0c8de0ab0aceb5c2d1c67d363439becd2d5195e3b30106adf7f9424e51fba66b94e41c6983e75370f2b0795f66118acd19f1b0dd030366fc7e051c447ee947501ffb92d403676f4729a7a89f636a2d7f781344777bda0d993eb7d1d7360227f7eff03c6eac44a360d97d97c6cc81a7716c8f2448a71530a96ce9dea78364fe111ac7ee1f6ec3a665ebb4b252eae1a38cf770fca61bbdfda64d7412b181eabff0178d72dc1278fef0b63876afd9e4fe39cfc267fb70f686a015978272ddc802d3f04ff9037f64e81d9440965e7b311dc3a45d98e6d1e5fb9773d4aaba8333f81d645c93e07a6d1e1444a4264007f09093ef77f5a83c99c9644d29ba58edd85d22559002a464bef558840c603126e73f0bd3e01a5501307a98451a98cde3ef85af39550dccde2929f86ea0b6d1444a25dc115fc9f828252c4c49da5cd1296b3ed33e6b2472b0e8361721f3c453d81b862bbf4b36caf694ab1600d5e1d8db94eda152cc35791edbf1a5ba42fb0623c7e54c91a40c3341cb1a68fe5e2ae43392714d0b6611f096f69b0120a5f0dfe790423d5ac2d143f92ec2cb8f84c314a1c264fa299e740138e0a278c0771b3b4fe30dfb45fb9d798f49e9dd4e3b49e9be145a0ff6e6883e9487ade2b6ef1484107bad866549333ade1e3af9e0eb2f54d7a5a7cffb7c05cd2fc659e93aa3c6ed59f45d310cd344792b6ac9840980218acfefda8135fe07c60beadf890b418b1e1e16b9a8d72f1ba50ba6d2433928d19b1ef37d5f44f77fa989ca600ef4f35bf3c0230b72e04227d206d5c5ecf4fb709e399899404a5d7fe8502e2b1ec06d9bfeef5b4d0e934f4e1674115487ab59e95711328592b9a0f74198ac577ddc7e0c15129a621af2e8b0e97a2588e99efd914c02ca337a30ad0d8f1a953c0c1878bd90f5bd5f8a3fbc4314f4fcf319063de96fc92ee06139ec96d5ab6975eb723723267fce41dd0e6d15f0dc4579e130914e513e77dbfdeb82694abe33aac25ae501166a6686c79f1b2e3053c53019cc959698e90f8cc74e5469a1fe858426ad933e19357b319e40f822208b2c6ca65e4d5448d718e574be7eb057f22a5a7fbc7f2ffb6fcd29a9439df978bd918bf4208eb368e620eaa9f7d0339a09f3c46783d0864dcd3cb721bcdcdd508e8562d3e39faedf27b94170cf7422a13f24e909911b3b788eca2c89b84005bb81199379477ac689d74c7ea29e96f3b2d46a6ad8930c8b103f503d5873d3f5f97113449d97744bef0497499c6fffb48f13a41df78954cfd59727a644d9faa636b446e285e77549e7fc33919df6632ef4fd2a14150ccb90c28a4f5aa0ad6fb78c69567f76c15310ffbb6c6f94aa43e734cbcdeb33242b98721924c36ca2f7b5ab15d89ba82085c934a8dcb4912db00bc527efc751bebc757e282b4ce7891f9862cfc05013aa71a7dfdc9a755a3db4fa5b012da42c1e7989a42be5132a6f5cf73fa1db07a9ba0668ee10c9dd208fccdc8eff6a7442e43513c4e493a750f32b0b11b844eca453b3245ef2740cb39ec2aa0c16e86e9c76aa8c07d484ea4d4414ee4e0c09a9f389b2a50b68684b6187c00711a660a39ebad299e59f91f455d2b93bfe59a7ada40164a7aa03bcb08150f27d7fc3d2223890f3680c13100a2adf97d2bb64d89012f2f9f3096d3168f0a159e2f665e064a2f3837438424a4224ec4579a30651b1bf6ff622a1f410e21440a4b15038c1d45bf4cd6922991e87627d5a2d625954b68a31b5789a3c4c9ef419b087d04151e5b421dd15bff20867f34d71c5ffc21a09cd8ea82b3ead098d85d320f443cc45acc34bce9827ad1e7883c853a5d6a17a0fd4be6ccbc71b06e2ffadd9a6b5734b9d628ebc1cd35496907c3bbefc2f54308441d77bcdfcd3715bf5a45dcc09973d6a9a3791cd5ad923134cacc1e33539838ecde9cbf26420b9f9a8cbf46be07967896572b9ad14d992128fff8138c5a33155c42c6e3b80058a3bec26055444f11e0f317488b175e6bbde6d5e2e420c0425a505d83fd28fc55481d99e023811e04ee2212d2e7281d399bb2131a7146310f85aac1dba0c4b84c0ece0bae0f74e0d712a45ccfa0662f2326955e8359e23637d5e6bd040bd6ebae3baf76131e94006764b3fdf008b10c1e29177efc0e63c1623d7cc296ac412f383a65e577c65c22ad63016991f6ab68e08a93bf58aac5e9a4bbc6d175bcd53941db222c6af8771a48cae340056dfe4ebdf7284f76385bc8e0ef4bde758f0c5b00927bd2c4784231f1b8242fd4df9f6282058e5153cbf9ccae750150cdf70a9f44e7e5101a61ce463deb0ac4672701d4934e46805c3340dbb8010446cdba8bddeb6b2a25cdb10382f17743af940321f14adda2e1732170d89dec362e598e6a4eaf36f7c2f083a59f573c21caf6446a614b0a1c5ed8d51451b89416cd3d239daea1ffb42e139b8bac4b397157fb69facdc7816bf9af5de51f6bb152ba974a40a1ea3b4b94866b561f585b6ef5e384cd07ec40d998e33ed4d1996893e39d209f9412ad333d0d1b64b1d7bc5cb4f9da2075c35a893a3d1206c14dc969f0cbcc15fc6701ceadfa6dbe5206ea7b03b807e67711b7f307cf411e1c55a16dfe979f01c3189d48c347e33c70d73c3159bfd17e3ce18fc752ef147463e28e911eb298ba7ffb6a62c050a808ce277aa9ce3a4071ec76dd146a4a67dbe5f72b36e19123a8b242b339242ac79a85958e39f0088affd536e32ee61590b6468b3584cb5c73c069170a27f8be43bae4af378faf3b2f3bfc7fe3f1b3e133e74dd8340abe8a2c866600d596dba596dcaaca4efb32680e7136cfdaefbc419fe5bec1a78c483ba37a53617653dc4ef3ad07005ed89b35be98bc6fc1013e78b72b9879b8b8e2e31c71224ff9dac9bc745ce9bfbb8b66cab53dc93fc4b05dae535c7447728e2855ce927c8481662739b1f2edd3e21629a131eb3912fc605207dc93e637eda77f1f8ef384a2c12e16266341758119af5df7589b2fec201c34c1bbb4aeae540ec80600f0a67747754f294b4711d6f3e823055e01aafa9f19cb7b2681ad79ee4c1f8b1f79b3c7a8f98f52c17214a0da7b4c5f9f6256b96b02bf5c86807b64e16caf7f14e60067b2c5f35e57d2a7febf65699afbd6527e955b7bc4b8006969b0984da645ce80d464f40c15af7a1538d30871e58bf119b44765e30ee66294bbce85b8fce3ec5c91e9f0bd7d4512e7360547104b6da4b5211467c6fdcfcc3ae3368d22299ffd47e3579401c22e4672d49b83bf275d8dcc2c6c58a39ec0c6057dc678b89a6863efb8f3f2d3e93a0fa7bdb8ca7992508c59fdf08b15752ed16e9f26acbd63f1e3d5746e90e6bd5dfbec4196e39b03dc86efc57c6a1144fb44eaee14fd4c8e96ecaddd2f6d1950367d9c6b0b0908a22676b400f081b251201c94eb30f4b3ff1b5a68bcc93d142929888897f4f1f42761969b7bcaa0b8c070edd7c61ec912db61528ae4023e5aa298f767b7a64b1c80fd41c7803f05b"}], 0x14b8}, 0x0, 0x800, 0x1, {0x0, r8}}) syz_usb_control_io$hid(r4, 0x0, 0x0) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000bc0)) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "8990c0e7", {0x3, 0x107, 0x0, 0x7, 0x2, 0x3, 0x90}}) syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x40a00) ioctl$HIDIOCGUSAGE(r10, 0xc018480b, &(0x7f00000001c0)={0x3, 0x0, 0x17c, 0xa, 0x4, 0x4}) syz_usb_control_io$sierra_net(r3, &(0x7f0000000240)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="00074b0000004b2132a7f33637c8319f0ce99a5a20c5c4ad9b7a543b8bca0bdeff67fab6fb6ae356a7bb0e9e99bc60c7ad823c3a96ccf79fae5f9cc40cb1d81317e463f186a6d4ab7b75257dd527f5b77e"], &(0x7f0000000180)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "a45dbb21bb7d7f223bebb62d1fd17cdd0341e8969ea3d5e76885762ccd4673d2fe8c1e496decd3004edf56967cf79a4978657867736619a02da78207f9d98ada8cac242976cac74478fb050f7d0da620f16e8b5415af91dddbe860091d469c488dec46c29ddeafa706242279b2c53e67920175bbb5540c3aa323f5b12a2214f27f3ae242ea53b9ee34222610eab37d7fe395f20c8df866af96bac55f39a4c2378bbbc075cfbff34ca68cc843b6d328d2d5a0"}}}, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40, 0x10, 0x15, "453f08f9ea4424bafffcb3c5023f3ea4f6dbcd7fd1"}, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x4, "048d72cf"}}) 8.60415052s ago: executing program 2 (id=2244): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="060009"], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) 8.553503723s ago: executing program 2 (id=2245): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) 8.013281728s ago: executing program 2 (id=2246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0xfffffffffffffed0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x3, "f896e404"}, @local=@item_012={0x1, 0x2, 0x7, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9cb8eba1"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000100)={0x100002, 0xffffffff, 0x1, 0x4, 0x4e496f8, 0xe61}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000070003"], 0x48}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x2, 0x7, 0x3, 0x10}}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x202020, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) 5.66910484s ago: executing program 2 (id=2256): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000000940)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)='r'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x2, 0x0, &(0x7f0000000380)="1a07"}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 5.573278662s ago: executing program 6 (id=2257): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="ce0406098f010000fa0200536337224443030000ca00"], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400000000000000000000d9ff", @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYBLOB, @ANYBLOB="05"], 0x6c}, 0x1, 0xba01}, 0x0) 5.499834763s ago: executing program 5 (id=2258): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r0, {0x5, 0xd}}, './file0\x00'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000004240), 0x2c0041, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000004340)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008040}, 0x10) 5.201187935s ago: executing program 2 (id=2259): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="4012ce3cf92c48080072a7e9832dd7c37441d31f3419fc48bb46f8dc3dfdbf8021543daa3883ba9eb71b9aaab6b71309b8782fa6e77e7e880f6031bd2ac71be7dabadb3954b25f7bfb5242c31706a4cae2ec8f7e7afa4b7d691285dd88865544790f01df50569951874e33fa1e5de649a5075ed74772e8b6b159238790eba70ce8799b80a87a2e6872db9f01b42ce641d8b05946940f13c46db00db8f28b25a0fb8ed97b99a38ea7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4010) fcntl$getownex(r1, 0x10, &(0x7f0000001080)={0x0, 0x0}) waitid(0x1, r2, &(0x7f0000001280), 0x2, &(0x7f0000001140)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x4) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$EVIOCGMASK(r1, 0x80015b1b, 0x0) r4 = io_uring_setup(0x3ead, &(0x7f0000001200)={0x0, 0xbec7, 0x2, 0x1}) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x18, &(0x7f0000000000), 0x8) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x41, 0x50c1, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, @mcast1, 0x7800, 0x1, 0x9, 0x3}}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x4, 0x8}, {0xb, 0x9}, {0x3, 0xfff2}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004091}, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x0, 0x0, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0xf000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4.849068983s ago: executing program 5 (id=2260): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xa, 0x1}, {0x1, 0xd}, {0xffe0, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[0xe, 0x800]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r2, 0x0, &(0x7f0000000200), 0x80000) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000240)={0x4}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000280)={0xe000, 0xffffffff, 0x4, 0xffff, 0x8}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x408c0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000004c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000500)={0x9, r5, r6, 0xdededede}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000540)) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, 0x12, 0x300, 0x70bd2c, 0x25dfdbfc, {0x21, 0x9, 0xa8, 0x8b, {0x4e21, 0x4e22, [0x6, 0x2, 0xd8f, 0x1ff], [0x5, 0xf480, 0x0, 0x8], r1, [0x1, 0x2]}, 0xfffffffb, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "4c82add1c3c6b621a7d1c5842a19671f35b228f7e37ce1c4df4edbb9a23cf1294578660ed51c792d057ab7f843bfb772e04c48164dae861b9e7810598e2165ef6fc6b99c8202e8a49ea0e0bac8c29ed4122ca1b5bb1c3b77bf91f5f27426847a3bfae1f3f7ce0fa2c14b7c3a23e0604bd7ced889fc34d832f13ad4a206f3a610f943a018aab1d7e134ccde112cbed4b7800754cb105a14a8d005dadf5de60f5e32308cc6f532fae56c9b96718586618b8ceb329096101cb979652c0f8e302315cce8fa8b6d1a30f589786c9128e573073ac5b6f97d8f33e20c05a1960cb5a5"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) syz_clone(0x1000000, &(0x7f0000000780)="0db39dfa0e4fa80a2861ab3d6f00dcff3e14626fd9bd5b5181c755b06a08aebe2e938d097250463b95d09033132fd52a04613ff89d0a73cd9a2fe4e2001bc8c1763aafe3a642cdff210de2fa29aaa158d6205f7a3c09ed9f3635159e017950392de00c44d68c8d2e38b606735be4f0a011be62c64190844e843c00de132753aee6e66b4e81e46000d4865de55a083e43624b09b92869a2133f1fad6c9f19794b0fbba9f79e4c8b98", 0xa8, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="73433e879a3d31164f8ff31d3ed262c5b24aef2dd33dc02fbb7f8e336bc4bd2d076263d6a8bf2f3f3e80dcf97eba0dc25a117712fa8e9e800e018344aad17c3f198b619ac5ea2e5fd5ef609e1da003e303fa430cfbacf8b6bc0d903d08af0a68f4a6d93ddc2e7140f66ac4eaee") r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000940), 0x400800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x3) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f00000009c0)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r8, 0x3b80, &(0x7f0000000a40)={0x8, r9}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x304}, "0c6a126658c7b796", "87ef24d5f6b4965fa951bbcf72c5eca4", "4e4c59e1", "cdd5995408a7d3ed"}, 0x28) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101, 0x0) ioctl$HIDIOCSFLAG(r10, 0x4004480f, &(0x7f0000000b00)=0x1) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5387, &(0x7f0000000b40)) ioctl$EXT4_IOC_CHECKPOINT(r10, 0x4004662b, &(0x7f0000000b80)=0x1) read$hiddev(0xffffffffffffffff, &(0x7f0000000bc0)=""/132, 0x84) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 4.49739268s ago: executing program 0 (id=2261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40020840}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}}, 0x40000) 4.496552829s ago: executing program 5 (id=2262): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x401a, 0x0, r3}, &(0x7f0000000500), &(0x7f0000ffe000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_eeprom={0x43, 0x1d2, 0x8000, 0xba, "98d38a5e3f3fffee4214ce01ece7578f23fd5022f7209a7e449d8580de439d1a285450817c90576abb4f4b54eb727299efc6e330672a6ebcd352e6266427a70307754c3b2cf55b7358b671f798214cff305550a011fcfee889e602744cf063aee13b9ab477696f4353a30cf9d17335570168d0a96428b802be61807ff0d3b5ee802e0377e8863b5d5d393a744b67161654451f01f042dcfce899a147a743ae88c054072102de04d0869c921381e18a246da45a0c5ddb6fb54431"}}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a0000000000000007000000186700000c"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000000200)=""/62, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2e, r3, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)=[r3, r3, r3, r3, r3, r3, r3], 0x0, 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000480)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000002c0004802800018007000100633665465100028008000140000000020800024000000016080004400000000c0900010073797a"], 0x74}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, 0x0, 0x90) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 3.940341401s ago: executing program 0 (id=2264): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) accept(r0, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = dup2(r3, r2) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000210001002abd70007f5b78fddbdf250a0000080000000000"], 0x1c}}, 0x0) (async) sync() sync() 3.617033558s ago: executing program 0 (id=2265): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a01"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@ringbuf_query, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x138, 0x2a, &(0x7f0000000140)=""/42, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x8, 0x2, 0x744c4ec8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x1, 0x3, 0xf, 0x1b}, {0x3, 0x2, 0x0, 0x7}, {0x4, 0x3, 0x2, 0x7}], 0x10, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000000c0)='afs_make_fs_call2\x00', r3}, 0x18) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb"], 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) (async) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000c00)="66cc5331df742233551e33227ae072211abfa9f6f23f383a4bdff07bac505969f813e6bf0a8bac4f165c99cfdc0270bff3be7225823750ae7be57c3d96a3a8571f1dc5eba89c945f5ea15824d5f1368b2b0924290024a9bb77851548c2", 0x5d) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000040), 0xc9, 0x4300) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x2, 0x1, 0x4, "b3a7"}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) (async) r8 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x50, 0xe6, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x3, 0xbc, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xe5, 0x0, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x80, 0x0, 0x6}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0xfa, 0x5, 0x40, 0x9}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x9, [{0xb1, &(0x7f0000000180)=@string={0xb1, 0x3, "e2e5881a3220859ee8dc441dd6e77af7a9c55c67af4c6213166f84c7cf7e784f4052cbb71c5a937bf5303ab53ba79ae19509aa73692367036417adb5972c33ab8bf65bc7b9ff5ed091c691d9a4e56fdd1875d1b7d64d6d1a6e6c6475f675704c6489fce48fc1ec9f2d6194a0a0bdf6091b131dc7bf4e0735e50cf88a9e62cb230af5bf81fe51226d94c5aaa12c5402061cfbc41e75d628033d38bedd4a7a31238d5a27fdc1c463d24ff983667d5179"}}, {0x83, &(0x7f0000000240)=@string={0x83, 0x3, "ba7923550e01348dbbad380214421fd05c759f66f6055ae56b1b83cd126cc8f2044b4c93cec505ac39a05af8d96bd4ea8635b4bad46afd0a16ea80ab012c4e93b4a663f16fb6526d62b143c5c4e431122842d73e674d6e39a3b48105bae29ad87dd5c302aeb43e33c7084a2da4a0ee023e7f808d404546e3bae8a2116193186349"}}, {0xce, &(0x7f0000000380)=@string={0xce, 0x3, "41a88feeb96c03b62f8153e62e1933514cb33fe36a736dc13b63f9d1160da077157fcd3e8441afe9db956830b7118618dd8415a469e33c2865505d854c3cc216dfa16d3e9870e6e828659f8c67893a6b97cdd8f28d6ea6248ee573d41739ae30ac2c6ed42cc9fae15f6cd89a5dc67bcc89b73a87db16cf180c316735a374384b697ed5c0b3687ed176d0294f9b5809b43f9427af6f90629bab2d5353e547cedbdd5bf0795d273ba119d61ebb4e5664f2098cd625749931e14558a20babbbb0f50bca8977bbf0ccae0aef6a67"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x1e, &(0x7f0000000500)=@string={0x1e, 0x3, "0da265dd26ed3b6aea2516a38a39bf78b19b2ad668ed280d6af65032"}}, {0x92, &(0x7f0000000540)=@string={0x92, 0x3, "a4c617966f3f691f2d0a9c64678bc8b8def3d143bbe04e5cdb0aa487626a6bd50a36d860571c6fc950a7c37e2cf29cac8853599ca326fe3858af37fc177d1a259c87614ce423e2327d7a310779dfdfb7b8471a57a8e633517cf1d3d809afcf8c9e824582701ec019311aeaad2dd4750940f63d0513b99ba712563023afe8cae1e939ed2c30fc4c6233a20815f6f69013"}}, {0xa1, &(0x7f0000000600)=@string={0xa1, 0x3, "757eaa719ae59498e99ea28eeec1381ec5123ab36d906baf51a408b562a088fd1cce5f2e589ddef493927759a12bc76a209fa5bcbe3c6d5564cf0e8d00ee8f3106c834f6b13ae3aae48a2896ecbd7571252e291255e39a99abcb228d936888d1f8a9bb4ed6b2171aeed7cd8d3db7486476c2e502783ee1d6686dec747da2d02d81f0ea6a4c7c9d500bcb7c386e306034f4ffa513400c1ccdc939a8d222796f"}}]}) syz_usb_control_io$printer(r8, &(0x7f0000000980)={0x14, &(0x7f0000000780)={0x0, 0xa, 0xd0, {0xd0, 0x30, "ed53a2d847b1767c970a5b6ae36b1c35873543c695dd7b2be9e6aef961d7081114e9e980fd45b90723e320d952c228ede38b82549514bcc43b74ec1fbfc37c8a54698582a8be61dbc06fe2be6e4e9296143974c884008e6132b9a7f3071a3cb7e565939aff8520ff72d80e26bb9a2bac33b85f42520440c68a5338618f0e5c29e6c8418dc47579515a0d43e359654f46376ebec9efa3a2f9d8085af77ec34fe46e47066c826332453d94ddd680e525e1b690c4be8237ed7ef399fd6bef58022e20e55d67acd0d369443cc096ca8d"}}, &(0x7f0000000880)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "47d0e1ed81231de180482c48e971bc98753be7052293b6052025a9565af21269dd7e43488960c7b6758856966951430b4ec28d0a7a1267a6e68b9df00ecdfbbd9928796ba81daaae21817adb5c9ea6634d62fa4506f3a1c4a2caa493e86071c5f32584a82373f9ee56b1b21a445cacdb29181340ae60e8fc40795c67a2898cc234baa5d6def5e50c6a20bb33b67847b7eefa8c7a6d41e972ee0d5ec323ea37e1856dd88fd0cfff77906b3e0a496d4dea7a2cff31143b94932e9f952115c58ddb98bee825611c3bf77d"}}}, &(0x7f0000000bc0)={0x34, &(0x7f00000009c0)={0x0, 0x17, 0x93, "ec6d07f69d39ce8fe0e1ec011a4dd1e8cc839e0f9fab371b6afd552931889286a8fb9df3ec75d18e4e3efa46a16465e19edeeb5e34ae0d7eccb304b52645bd90b11dd00f7932101e686ed359e6cb904b29a3c39596cf848404674d7717ee13abed5b1ffe594f3f259f1abd66dc7ce248a0a55d2ff013b3f3cf73fc7affe1d894922851f2affbcc4609f3dfebb20611822b10f4"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0xfc}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000b00)={0x20, 0x0, 0x16, {0x14, "2dc7f3668658c5a9596730a3ab49c3c89a0255f6"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x4}}) 3.536641103s ago: executing program 0 (id=2266): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e00000004"], 0x2e) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 3.386924984s ago: executing program 6 (id=2267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty, 0x80040}, 0x1c) memfd_secret(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84000}, 0x88) 2.661093007s ago: executing program 6 (id=2268): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) (async) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 32) r4 = accept4(r0, 0x0, 0x0, 0x80800) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000040)={0x0, 0x10, [0x7, 0x8001, 0x2, 0x400]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x0, 0x7fffffff, {{0x11, 0x4, 0x0, 0x3d, 0x44, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0xc, 0x52, 0x0, 0xe, [0x6, 0x6]}, @generic={0x94, 0xd, "ba5e9da113018df6f8512a"}, @ra={0x94, 0x4}, @end, @noop, @end, @ssrr={0x89, 0xf, 0xc8, [@rand_addr=0x64010102, @broadcast, @local]}]}}}}}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x80, 0x0, 0x81, 0x1000, 0x10000, r9, 0x0, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xea, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=@acquire={0x1d4, 0x17, 0x800, 0x70bd28, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x6c}, @in6=@rand_addr=' \x01\x00', {@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4e24, 0x3a, 0x4e20, 0x5, 0x2, 0x20, 0x0, 0x2c, r7, r9}, {{@in6=@private0, @in=@empty, 0x4e21, 0x7, 0x4e22, 0x8, 0x2, 0xa0, 0xa0, 0x29, r10, r11}, {0xfffffffffffffff9, 0xfffffffffffffff9, 0x6, 0x401, 0x4, 0x20000, 0x3615, 0x9}, {0xff, 0x3, 0xf, 0xe}, 0x1, 0x6e6bba, 0x1, 0x1, 0x3, 0x1}, 0x3ff, 0x8, 0x0, 0x70bd28}, [@address_filter={0x28, 0x1a, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@empty, 0xa, 0x6, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xe}, @algo_aead={0x7b, 0x12, {{'rfc7539esp(ctr(camellia),sha3-512-generic)\x00'}, 0x178, 0x80, "74699efe0eee7b45c9ed059bbc49d30d4857f94462639d5f614a9cf774e8d3fdb0a8e51832a73faf519f609a440069"}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000514040000000000004eb3e6a32537f74800000008000300040000000800010000000000080003000200000008000100000000000802030003000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) 2.570028766s ago: executing program 0 (id=2270): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000100)={0x65, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) (async) bind$packet(r2, &(0x7f0000000340)={0x11, 0x6, 0x0, 0x1, 0x80, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x1) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0x4c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10, 0x4e}}}}, [@NL80211_ATTR_IE={0x2b, 0x2a, [@random_vendor={0xdd, 0x6, "afb8239b112e"}, @challenge={0x10, 0x1, 0xd6}, @ht={0x2d, 0x1a, {0x10, 0x2, 0x2, 0x0, {0x7, 0xa, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2}, 0x1, 0x9, 0x8}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@mpls_getnetconf={0x1c, 0x52, 0x3, 0x70bd2a, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000010) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x4b}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x8001) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 2.477118996s ago: executing program 5 (id=2271): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/216, 0xd8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r4, 0x3, 0xfffffffd, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00002a2000/0x1000)=nil, 0x1000) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) 2.397089527s ago: executing program 6 (id=2272): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x98, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x54, 0x7, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x800) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r7, &(0x7f0000000600)=""/4099, 0x1003, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x4}}, 0x30) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='&d=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2028) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f0000000200)={{0x17, 0x9}, 'port0\x00', 0x90, 0x80040, 0x0, 0x6, 0x2, 0x8, 0x9, 0x0, 0x4, 0x1}) open_by_handle_at(r10, &(0x7f00000006c0)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x9, 0x8000000000000001, 0xb, 0x7, 0x5, 0x40800000000}}, 0x111400) 2.368495912s ago: executing program 4 (id=2273): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) 2.213170283s ago: executing program 0 (id=2274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x8fc3, 0x10000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2003) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000000)=0x1, 0xfffffec9) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f00000002c0), 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080), 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000016", @ANYRES16=r10, @ANYBLOB="050001000000fddbdf250600000008000300", @ANYRES32=r11, @ANYBLOB="1c00e700f1bdbff31e8277ff9029ec261b1ba3681daa4c19011f2fb91c00e700c28180e3546eb28337eec66f27072d3a1aa8d4b0abc776561c00e7000bc3f3e3f995450b7709f67ac4f3194af9d8c6ecafddf802"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x22, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000074da755a000000001b000000185e0000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800001ab6898ca11b736300bf9100000000030000000000000000008500000084000000b700000000000000950000000000000034461dafaeb5eb50aa64a91ae5eb7cc36c2f5c35059d4258aec938fa7a97474ca7f519350c0f94cb8b00b847daf65ea60a9dea25903b2eaf3eae60e300f69c337b721d146f328cf9b0188c9a61f23b1b4227b272f61162914d53b761dfd292a0cd4d6abc8e6e563f13585c764852505933dcbad6af43c46f4e03108fd11e918f9400601021f525939e95b40b51c8c4472369b3e3dc58f8e266584569cf3a174fd181f9962a0bae5ab4e46084bc9311ec874664c074f6970fc41427ade11cc0f2d1a92ccc5cf8d3bb6bbdf868822740efd2bef15c8c22a41fe88bda80a2fc85a5f70c706290f4", @ANYRES16=r9, @ANYBLOB="8e0302c97f650c3de6d49e1ee85b6f4a1df4c9565f7a598fdef99e0633e6a847915e4d2cd188d799603440b76d4f405c54960baf7ff22a54b23f88751124e77428b46f211cd45a43d910e3f088d9106a9cfa61237b6ee2cd8b96bd72b0fc461a4c3c496fc1769e4cb0dd3c5a674424c85d401e3400a186dce40dc9ac9475be9ad2e3eb8862387d87b6ad9a3f67d3dac394d916db045d78e6252eee368858c8d7097a3f956c549adc2887daea01d99c8e0dac4f23240a2eb33f733185531baef939caa1d653067538e1abf238d4f1611d"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x0, @broadcast=0xac141436}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001964d408861a92e03f6101020301090271cf712600100309041f0201e917f300090582020002000000"], 0x0) 2.207793272s ago: executing program 4 (id=2275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000000900000000060015000a0000000c00168008000226"], 0x30}}, 0x0) ioctl$HIDIOCGRAWPHYS(r1, 0x4004480d, 0x0) r3 = dup(r1) write$uinput_user_dev(r3, 0x0, 0x0) unshare(0x28000600) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x40002) fadvise64(r4, 0x5, 0x36b, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0x4018aee3, &(0x7f00000000c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100003050000000000000000000000002e09dde01dea33e8027a35b903069e363fa64e3edf1178dd9dfb87361b36da262182b1a18c54db2c7bbdf2f4fe685c5214a6bdd053a8af63473c6cfce6de7d4478181b0fe91dad4fa0ae743ea9d281cccbabd11dcaccab547cd2220490dc71e8bc8e767f44e03ccd1b897e51c0f8cb00fc1338176e07e07754215173db1d", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500080001000000050009000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x0) 1.971090162s ago: executing program 2 (id=2276): syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x6}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1f, @multicast1}, 0x10) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0x1ff, 0x0, 0x10000, 0xba8, 0x82, 0x1000, 0x0, 0x0, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1007], 0x80a0000, 0x2113c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.907535608s ago: executing program 6 (id=2277): socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x7c80, 0x0) write$binfmt_aout(r2, &(0x7f0000000980)=ANY=[@ANYBLOB="ce0406098f010000fa0200536337224443030000ca00"], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c0000001000030400000000000000000000eaff", @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100626f6e64000000003c000280080014000000000008000700", @ANYBLOB, @ANYBLOB="05"], 0x6c}, 0x1, 0xba01}, 0x0) 1.785452201s ago: executing program 4 (id=2278): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x25, 0x1}, {0x6, 0x0, 0x0, 0xe}]}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.010837558s ago: executing program 4 (id=2279): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc3, 0xaa, 0x37, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x4, 0x0, 0xac, 0x4, 0x14}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) (async) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="6fd9cc41464d15571d41e1127ac7eb51e2adc3493d71094e971bd409df345512807d566e81734a7a44ed6e83b68bcb566267679dbf631b561d2cccf7cd2ca0518ecece148a", 0x45, 0xfffffffffffffffe) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000073d000/0x3000)=nil) unshare(0x22020400) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x6, 0x8, {0xffffffffffffffff}, {0xee01}, 0x7e, 0x9}) syz_pidfd_open(r2, 0x0) 394.165402ms ago: executing program 4 (id=2280): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0x8680d9242b8714b6) (async, rerun: 64) sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4058, 0xfda, 0x40000001, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f0000004b40)=[{{&(0x7f0000000440)=@ax25={{0x3, @bcast}, [@bcast, @netrom, @rose, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0xfffffffffffffffd}, 0x5}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)=""/239, 0xef}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000640)=""/250, 0xfa}, {&(0x7f0000000740)=""/138, 0x8a}, {&(0x7f0000000800)=""/121, 0x79}], 0x5}, 0x5}, {{&(0x7f0000000900)=@ax25={{0x3, @netrom}, [@netrom, @remote, @rose, @null, @null, @default, @bcast]}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000a40)=""/189, 0xbd}, {&(0x7f0000000d00)=""/206, 0xce}, {&(0x7f0000000e00)=""/242, 0xf2}, {&(0x7f0000000f00)=""/231, 0xe7}, {&(0x7f00000010c0)=""/198, 0xc6}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000280)=""/20, 0x14}], 0xa, &(0x7f0000004340)=""/226, 0xe2}, 0xfffeffff}, {{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000004440)=""/130, 0x82}, {&(0x7f00000003c0)=""/36, 0x24}], 0x3, &(0x7f0000004500)=""/122, 0x7a}, 0x5}, {{&(0x7f0000004580)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001200)=[{&(0x7f0000004600)=""/106, 0x6a}, {&(0x7f0000004680)=""/153, 0x99}], 0x2, &(0x7f0000004740)=""/45, 0x2d}, 0xfffffbff}, {{&(0x7f0000004780)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004800), 0x0, &(0x7f0000004840)=""/36, 0x24}, 0x8}, {{&(0x7f0000004880), 0x80, &(0x7f0000004a40)=[{&(0x7f0000004900)=""/201, 0xc9}, {&(0x7f0000004a00)=""/30, 0x1e}], 0x2, &(0x7f0000004a80)=""/145, 0x91}, 0x81}], 0x7, 0x2, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) (async, rerun: 64) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (rerun: 32) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000056e000/0x3000)=nil, &(0x7f000056e000/0x2000)=nil, 0x4, 0x0, 0x0, 0xe, 0x0, 0x10, 0x1d, 0x58}) (async) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 235.465651ms ago: executing program 4 (id=2281): syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendfile(r5, r4, 0x0, 0x17) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x0) 231.975874ms ago: executing program 5 (id=2282): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x10, 0x5e, 0x1, 0x0, 0x25dfdbfd}, 0x10}], 0x1}, 0x0) (async, rerun: 32) connect$netlink(r2, &(0x7f0000000100), 0xc) (async, rerun: 32) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) (async) r5 = syz_open_pts(0xffffffffffffffff, 0x404200) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000001c0)={0x7fffffff, 0x1, 0x7c, 0x0, 0x30, "3ab752d19a8aa22dfda4c34aea18664f3964ad", 0x75, 0xcaf}) (async, rerun: 64) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) (async, rerun: 64) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x12000, 0x0) (async) fsopen(&(0x7f0000000380)='squashfs\x00', 0x1) r7 = syz_io_uring_setup(0x6bb9, &(0x7f0000000040)={0x0, 0xedf5, 0x10000, 0x2, 0x320}, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000140)={0xffffffff, r7, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x109, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000100)=ANY=[], 0x0) 41.239644ms ago: executing program 6 (id=2283): socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002280), 0x208400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}}, 0x802) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 0s ago: executing program 5 (id=2284): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d07400001020301090224000101033005090400080103000921ff00010122b0681e058103100002ba070000"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x10000) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000003, 0x1010, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): : device descriptor read/8, error -71 [ 540.598043][ T5948] usb usb3-port1: unable to enumerate USB device [ 540.887603][ T920] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 541.039470][ T920] usb 1-1: config 81 has too many interfaces: 252, using maximum allowed: 32 [ 541.050550][ T920] usb 1-1: config 81 has 1 interface, different from the descriptor's value: 252 [ 541.060675][ T920] usb 1-1: config 81 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.074295][ T920] usb 1-1: New USB device found, idVendor=5038, idProduct=12b6, bcdDevice= 0.00 [ 541.088631][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.262031][ T920] usbhid 1-1:81.0: couldn't find an input interrupt endpoint [ 541.362791][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.377180][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.201226][T13392] netlink: 'syz.5.1853': attribute type 4 has an invalid length. [ 542.217601][ T5867] Bluetooth: hci2: command tx timeout [ 542.226008][T13392] netlink: 'syz.5.1853': attribute type 4 has an invalid length. [ 542.377902][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 542.447693][ T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 542.577597][ T43] usb 3-1: device descriptor read/64, error -71 [ 542.817748][ T43] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 542.957567][ T43] usb 3-1: device descriptor read/64, error -71 [ 543.078963][ T43] usb usb3-port1: attempt power cycle [ 543.427816][ T43] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 543.459279][ T43] usb 3-1: device descriptor read/8, error -71 [ 543.664355][ T5948] usb 1-1: USB disconnect, device number 118 [ 543.727771][ T43] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 543.979058][ T43] usb 3-1: device descriptor read/8, error -71 [ 544.089042][ T43] usb usb3-port1: unable to enumerate USB device [ 544.532591][T13418] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1861'. [ 544.547066][T13420] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1861'. [ 544.877582][ T43] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 544.935875][T13426] tipc: Enabled bearer , priority 0 [ 545.008400][ T43] usb 1-1: device descriptor read/64, error -71 [ 545.018370][T13426] syzkaller0: entered promiscuous mode [ 545.023852][T13426] syzkaller0: entered allmulticast mode [ 545.071764][T13426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.080810][T13426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.247592][ T43] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 545.387819][ T43] usb 1-1: device descriptor read/64, error -71 [ 545.475055][ T5870] Bluetooth: hci2: command 0x0405 tx timeout [ 545.533984][ T43] usb usb1-port1: attempt power cycle [ 545.594194][T13426] tipc: Resetting bearer [ 545.617128][T13426] tipc: Disabling bearer [ 546.127583][ T43] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 546.148233][ T43] usb 1-1: device descriptor read/8, error -71 [ 546.315233][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 546.354870][T13438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.407637][ T43] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 546.428146][ T43] usb 1-1: device descriptor read/8, error -71 [ 546.490589][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 546.490614][ T30] audit: type=1326 audit(1756757634.708:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.6.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2171b8ebe9 code=0x0 [ 546.539272][ T43] usb usb1-port1: unable to enumerate USB device [ 546.607268][T13443] geneve2: entered promiscuous mode [ 546.948704][T13458] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1871'. [ 547.255106][T13464] netlink: 'syz.5.1871': attribute type 11 has an invalid length. [ 547.766709][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.776252][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.508101][T13475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 549.675392][T13478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.722439][T13478] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.741975][T13487] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1878'. [ 549.810125][T13478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.817633][T13478] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.841220][T13478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.847374][T13478] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 549.867311][T13478] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 549.877181][T13478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.888580][T13478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 549.908213][T13478] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 550.327880][ T5949] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 550.573317][ T5949] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 550.578930][T13500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.583612][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.622524][T13500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.682683][ T5949] usb 3-1: Product: syz [ 550.737625][ T5949] usb 3-1: Manufacturer: syz [ 550.753900][ T5949] usb 3-1: SerialNumber: syz [ 550.782888][ T5994] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 550.796618][ T5949] usb 3-1: config 0 descriptor?? [ 551.010572][ T5949] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 551.061023][ T5994] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.105440][ T5994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.128264][ T5994] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 551.220944][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.239248][ T5949] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 551.309656][ T5994] usb 1-1: config 0 descriptor?? [ 551.497657][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 551.748120][ T5994] ntrig 0003:1B96:0009.001A: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.0-1/input0 [ 551.900842][ T5870] Bluetooth: hci2: command 0x0405 tx timeout [ 551.907015][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.913128][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 551.958194][ T43] usb 3-1: USB disconnect, device number 96 [ 552.347921][ T5994] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 552.517563][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 552.529045][ T5994] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.538366][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.546388][ T5994] usb 6-1: Product: syz [ 552.550638][ T5994] usb 6-1: Manufacturer: syz [ 552.555260][ T5994] usb 6-1: SerialNumber: syz [ 552.565622][ T5994] usb 6-1: config 0 descriptor?? [ 552.776217][ T5994] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 552.939385][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 553.097642][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 553.113595][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 553.123566][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 553.134678][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 11965, setting to 1024 [ 553.145951][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 553.157998][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 553.167074][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 553.175375][ T9] usb 3-1: SerialNumber: syz [ 553.186683][ T9] usb 3-1: config 0 descriptor?? [ 553.194440][T13536] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 553.202158][T13536] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 553.411917][T13536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.420906][T13536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.443395][ T9] usb 3-1: USB disconnect, device number 97 [ 553.526006][ T5949] usb 1-1: USB disconnect, device number 123 [ 553.580404][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 553.628117][ T5994] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 553.660667][T13536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.700249][ T5994] usb 6-1: USB disconnect, device number 20 [ 553.722237][T13548] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 553.844106][T13558] netlink: 'syz.4.1897': attribute type 9 has an invalid length. [ 553.852025][T13558] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.1897'. [ 553.882716][T13560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.938574][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 553.980312][ T5870] Bluetooth: hci2: command 0x0405 tx timeout [ 553.980512][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 553.987569][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.147583][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 554.161220][ T9] usb 3-1: config 14 has an invalid interface number: 222 but max is 1 [ 554.170860][ T9] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 554.179879][ T5994] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 554.299998][ T9] usb 3-1: config 14 has an invalid interface number: 58 but max is 1 [ 554.309100][ T9] usb 3-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 554.318726][ T9] usb 3-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 554.328896][ T9] usb 3-1: config 14 has an invalid interface number: 100 but max is 1 [ 554.344269][ T9] usb 3-1: config 14 has 3 interfaces, different from the descriptor's value: 2 [ 554.357523][ T9] usb 3-1: config 14 has no interface number 0 [ 554.364121][ T9] usb 3-1: config 14 has no interface number 1 [ 554.372188][ T9] usb 3-1: config 14 has no interface number 2 [ 554.378899][ T9] usb 3-1: config 14 interface 222 altsetting 9 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 554.390850][ T9] usb 3-1: config 14 interface 222 altsetting 9 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 554.403244][ T9] usb 3-1: config 14 interface 222 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 554.415192][ T9] usb 3-1: config 14 interface 222 altsetting 9 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 554.427761][ T9] usb 3-1: config 14 interface 222 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 554.439134][ T9] usb 3-1: config 14 interface 222 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 554.450554][ T9] usb 3-1: config 14 interface 222 altsetting 9 endpoint 0xE has an invalid bInterval 90, changing to 7 [ 554.473885][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.491298][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.499655][ T5994] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.533142][ T5994] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.547409][ T9] usb 3-1: config 14 interface 222 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 555.477294][ T9] usb 3-1: config 14 interface 222 altsetting 9 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 555.488939][ T9] usb 3-1: config 14 interface 222 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 555.500081][ T9] usb 3-1: config 14 interface 58 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 555.511364][ T9] usb 3-1: config 14 interface 58 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 555.522538][ T9] usb 3-1: config 14 interface 58 altsetting 4 endpoint 0xA has invalid maxpacket 528, setting to 64 [ 555.541003][ T9] usb 3-1: config 14 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 555.556604][ T9] usb 3-1: config 14 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 555.567748][ T9] usb 3-1: config 14 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 555.578716][ T9] usb 3-1: config 14 interface 58 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 555.589570][ T9] usb 3-1: config 14 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 555.600525][ T9] usb 3-1: config 14 interface 58 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 555.611517][ T9] usb 3-1: config 14 interface 58 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 555.622342][ T9] usb 3-1: config 14 interface 58 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 12 [ 555.635638][ T9] usb 3-1: too many endpoints for config 14 interface 100 altsetting 234: 152, using maximum allowed: 30 [ 555.646998][ T9] usb 3-1: config 14 interface 100 altsetting 234 has a duplicate endpoint with address 0xA, skipping [ 555.658429][ T9] usb 3-1: config 14 interface 100 altsetting 234 has 1 endpoint descriptor, different from the interface descriptor's value: 152 [ 555.672197][ T9] usb 3-1: config 14 interface 222 has no altsetting 0 [ 555.679145][ T9] usb 3-1: config 14 interface 58 has no altsetting 0 [ 555.685931][ T9] usb 3-1: config 14 interface 100 has no altsetting 0 [ 555.694488][ T5994] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 555.703669][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.711954][ T5994] usb 6-1: SerialNumber: syz [ 555.716714][ T9] usb 3-1: string descriptor 0 read error: -71 [ 555.723049][ T9] usb 3-1: Dual-Role OTG device on HNP port [ 555.729312][ T9] usb 3-1: can't set HNP mode: -71 [ 555.743157][ T5994] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 555.751794][ T5994] usb-storage 6-1:1.0: USB Mass Storage device detected [ 555.762949][ T5994] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 555.897800][ T5949] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 555.978813][ T5870] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 556.057868][ T5949] usb 1-1: Using ep0 maxpacket: 32 [ 556.063104][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 556.069222][ T5870] Bluetooth: hci2: command 0x0405 tx timeout [ 556.251510][ T5949] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 556.286389][ T5949] usb 1-1: config 0 has no interface number 0 [ 556.303477][ T5949] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 556.553540][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.587791][ T5949] usb 1-1: Product: syz [ 556.598323][ T5949] usb 1-1: Manufacturer: syz [ 556.608429][ T5949] usb 1-1: SerialNumber: syz [ 556.716217][ T5949] usb 1-1: config 0 descriptor?? [ 556.726013][ T5949] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 556.812287][ T5949] usb 1-1: selecting invalid altsetting 1 [ 556.819603][ T5949] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 556.836408][ T5949] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.858647][ T5949] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 556.868964][ T5949] usb 1-1: media controller created [ 556.940144][T13573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.958025][T13573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.985573][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.358545][ T9] usb 6-1: USB disconnect, device number 21 [ 557.436314][T13591] sctp: [Deprecated]: syz.4.1904 (pid 13591) Use of int in max_burst socket option. [ 557.436314][T13591] Use struct sctp_assoc_value instead [ 557.459913][ T5949] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 557.483376][T13593] batadv_slave_0: entered promiscuous mode [ 557.498646][T13592] batadv_slave_0: left promiscuous mode [ 557.553310][ T5949] usb 1-1: USB disconnect, device number 124 [ 557.898292][ T5921] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 558.037154][T13600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1907'. [ 558.048526][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 558.055377][ T5921] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 558.068329][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 558.087831][ T5921] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 558.097269][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.105326][ T5921] usb 6-1: Product: syz [ 558.110132][ T5921] usb 6-1: Manufacturer: syz [ 558.114789][ T5921] usb 6-1: SerialNumber: syz [ 558.123105][ T5921] usb 6-1: config 0 descriptor?? [ 558.131108][ T5921] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.140440][ T5921] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 558.408571][ T5921] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 558.439346][ T5921] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 558.454007][ T5921] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 558.464510][ T5921] em28xx 6-1:0.0: No AC97 audio processor [ 558.497929][ T5921] usb 6-1: USB disconnect, device number 22 [ 558.513565][ T5921] em28xx 6-1:0.0: Disconnecting em28xx [ 558.538716][ T5921] em28xx 6-1:0.0: Freeing device [ 558.666704][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1912'. [ 559.580597][ T5948] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 559.739895][ T5948] usb 6-1: config 1 interface 0 has no altsetting 0 [ 559.764000][ T5948] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 559.801473][T13646] netlink: 'syz.0.1919': attribute type 1 has an invalid length. [ 559.806001][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.839715][ T5948] usb 6-1: Product: syz [ 559.844089][ T5948] usb 6-1: Manufacturer: syz [ 559.854241][ T5948] usb 6-1: SerialNumber: syz [ 559.879184][T13646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.158916][T13657] trusted_key: syz.4.1924 sent an empty control message without MSG_MORE. [ 560.177144][T13657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.187044][T13657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.259120][ T5994] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 560.397563][ T5994] usb 3-1: device descriptor read/64, error -71 [ 560.542153][ T5948] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 560.647701][ T5994] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 560.859924][ T5994] usb 3-1: device descriptor read/64, error -71 [ 560.970889][ T5994] usb usb3-port1: attempt power cycle [ 561.367573][ T5994] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 561.388228][ T5994] usb 3-1: device descriptor read/8, error -71 [ 561.642809][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 561.667567][ T5994] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 561.738823][ T5994] usb 3-1: device descriptor read/8, error -71 [ 561.860638][ T5994] usb usb3-port1: unable to enumerate USB device [ 562.457357][T13671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.465290][T13671] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 562.472371][T13671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.480758][T13671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.526597][ T5994] usb 6-1: USB disconnect, device number 23 [ 562.553754][ T5994] usblp0: removed [ 562.862738][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.869185][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.937128][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1929'. [ 563.339631][T13692] syz_tun: entered allmulticast mode [ 563.366789][T13692] syz_tun: left allmulticast mode [ 563.411321][ T5948] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 563.578690][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 563.634174][ T5948] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.644950][ T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 563.665594][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.683043][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 563.693487][ T5948] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 563.703503][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.718477][ T5948] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 563.729751][ T5948] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 563.738587][ T5948] usb 6-1: Manufacturer: syz [ 563.810517][ T5948] usb 6-1: config 0 descriptor?? [ 563.827803][ T43] usb 3-1: device descriptor read/64, error -71 [ 564.238406][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 564.367584][ T43] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 564.547703][ T43] usb 3-1: device descriptor read/64, error -71 [ 564.554185][ T5870] Bluetooth: hci2: command 0x0405 tx timeout [ 564.560261][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 564.566285][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 564.614884][T13720] program syz.4.1939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.687872][ T43] usb usb3-port1: attempt power cycle [ 565.922957][ T5948] rc_core: IR keymap rc-hauppauge not found [ 565.935225][ T5948] Registered IR keymap rc-empty [ 565.947177][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 565.998538][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.066580][ T5948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 566.127639][ T43] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 566.173215][ T43] usb 3-1: device descriptor read/8, error -71 [ 566.209424][ T5948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input59 [ 566.300292][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.312635][T13734] netlink: 'syz.0.1942': attribute type 2 has an invalid length. [ 566.337866][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.388130][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.410445][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.447688][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.514479][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.554437][T13738] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 566.554437][T13738] program syz.2.1944 not setting count and/or reply_len properly [ 566.577506][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.687834][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.747745][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.818143][ T5948] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 566.860267][ T5948] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 566.868318][ T5948] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.025524][ T5948] usb 6-1: USB disconnect, device number 24 [ 567.837690][ T5948] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 568.177610][ T5948] usb 6-1: Invalid ep0 maxpacket: 16 [ 568.197348][T13783] netlink: 'syz.4.1950': attribute type 3 has an invalid length. [ 568.316834][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.328534][ T5948] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 568.357300][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.440570][T13789] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 568.482743][ T5948] usb 6-1: Invalid ep0 maxpacket: 16 [ 568.496520][ T5948] usb usb6-port1: attempt power cycle [ 568.987581][ T5948] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 569.031421][ T5948] usb 6-1: Invalid ep0 maxpacket: 16 [ 569.208867][ T5948] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 569.249648][ T5948] usb 6-1: Invalid ep0 maxpacket: 16 [ 569.265326][ T5948] usb usb6-port1: unable to enumerate USB device [ 570.291818][T13813] mZ`Ԁ@: entered promiscuous mode [ 570.540366][T13822] netlink: 'syz.2.1957': attribute type 3 has an invalid length. [ 570.548410][T13822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1957'. [ 570.626388][T13824] bridge0: entered promiscuous mode [ 570.704842][T13826] binder: 13825:13826 ioctl c0306201 200000000240 returned -14 [ 570.742747][T13824] loop2: detected capacity change from 0 to 7 [ 570.758630][ T5862] Dev loop2: unable to read RDB block 7 [ 570.769265][ T5862] loop2: unable to read partition table [ 570.780329][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.800992][ T5862] loop2: partition table beyond EOD, truncated [ 570.824077][T13824] Dev loop2: unable to read RDB block 7 [ 570.836159][T13824] loop2: unable to read partition table [ 570.839370][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.867310][T13824] loop2: partition table beyond EOD, truncated [ 570.894402][T13824] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 570.951449][ T30] audit: type=1326 audit(1756757659.168:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.034664][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.078249][ T30] audit: type=1326 audit(1756757659.168:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.116228][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.132119][ T30] audit: type=1326 audit(1756757659.168:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f866d98d550 code=0x7ffc0000 [ 571.169514][ T30] audit: type=1326 audit(1756757659.168:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.219478][ T30] audit: type=1326 audit(1756757659.168:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.245650][ T30] audit: type=1326 audit(1756757659.168:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.308266][ T30] audit: type=1326 audit(1756757659.168:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.333066][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.353482][ T30] audit: type=1326 audit(1756757659.168:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.376200][ T5948] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 571.396214][ T30] audit: type=1326 audit(1756757659.198:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.422110][ T30] audit: type=1326 audit(1756757659.238:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.1961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 571.517560][ T5948] usb 1-1: device descriptor read/64, error -71 [ 571.705736][T13838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.732940][T13838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.742880][T13837] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 571.757565][ T5948] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 571.887830][ T5948] usb 1-1: device descriptor read/64, error -71 [ 572.009071][ T5948] usb usb1-port1: attempt power cycle [ 572.193854][T13848] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 572.360742][ T5948] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 572.390175][ T5948] usb 1-1: device descriptor read/8, error -71 [ 572.673169][ T5948] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 572.699994][ T5948] usb 1-1: device descriptor read/8, error -71 [ 572.816777][ T5948] usb usb1-port1: unable to enumerate USB device [ 573.697737][ T5949] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 573.896601][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 573.912223][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 573.921817][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 573.929591][ T5949] usb 6-1: can't read configurations, error -61 [ 574.077539][ T5949] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 574.462243][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 574.478215][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 574.488160][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 574.496172][ T5949] usb 6-1: can't read configurations, error -61 [ 574.530890][ T5949] usb usb6-port1: attempt power cycle [ 574.552911][T13899] binder: 13895:13899 ioctl c0306201 200000000540 returned -22 [ 574.720383][T13902] binder: 13895:13902 ioctl c0306201 200000000640 returned -22 [ 574.977643][ T5949] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 575.000715][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 575.008321][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 575.197534][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 575.260382][ T5949] usb 6-1: can't read configurations, error -61 [ 575.458632][ T5949] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 575.489062][ T5949] usb 6-1: Using ep0 maxpacket: 8 [ 575.497983][ T5949] usb 6-1: unable to get BOS descriptor or descriptor too short [ 575.511617][ T5949] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 575.520358][ T5949] usb 6-1: can't read configurations, error -61 [ 575.548024][ T5949] usb usb6-port1: unable to enumerate USB device [ 575.971221][T13917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.297214][T13924] FAULT_INJECTION: forcing a failure. [ 576.297214][T13924] name failslab, interval 1, probability 0, space 0, times 0 [ 576.311912][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.0.1985 Not tainted syzkaller #0 PREEMPT(full) [ 576.311936][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.311947][T13924] Call Trace: [ 576.311954][T13924] [ 576.311962][T13924] dump_stack_lvl+0x189/0x250 [ 576.311987][T13924] ? __pfx____ratelimit+0x10/0x10 [ 576.312009][T13924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.312028][T13924] ? __pfx__printk+0x10/0x10 [ 576.312047][T13924] ? nfnetlink_rcv+0x26a/0x2520 [ 576.312070][T13924] ? ____sys_sendmsg+0x505/0x830 [ 576.312086][T13924] ? __x64_sys_sendmsg+0x19b/0x260 [ 576.312111][T13924] should_fail_ex+0x414/0x560 [ 576.312136][T13924] should_failslab+0xa8/0x100 [ 576.312160][T13924] kmem_cache_alloc_noprof+0x73/0x3c0 [ 576.312181][T13924] ? skb_clone+0x212/0x3a0 [ 576.312203][T13924] skb_clone+0x212/0x3a0 [ 576.312226][T13924] __netlink_deliver_tap+0x404/0x850 [ 576.312259][T13924] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.312283][T13924] netlink_deliver_tap+0x19c/0x1b0 [ 576.312304][T13924] netlink_sendskb+0x68/0x140 [ 576.312328][T13924] netlink_unicast+0x397/0x9e0 [ 576.312348][T13924] ? __asan_memcpy+0x40/0x70 [ 576.312385][T13924] ? __pfx_netlink_unicast+0x10/0x10 [ 576.312418][T13924] netlink_rcv_skb+0x28c/0x470 [ 576.312443][T13924] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 576.312467][T13924] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 576.312502][T13924] ? bpf_lsm_capable+0x9/0x20 [ 576.312524][T13924] ? security_capable+0x7e/0x2e0 [ 576.312554][T13924] nfnetlink_rcv+0x26a/0x2520 [ 576.312580][T13924] ? __dev_queue_xmit+0x1d79/0x3b50 [ 576.312612][T13924] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 576.312635][T13924] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.312659][T13924] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 576.312681][T13924] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 576.312703][T13924] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 576.312732][T13924] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 576.312772][T13924] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 576.312804][T13924] ? rcu_is_watching+0x15/0xb0 [ 576.312828][T13924] ? rcu_read_unlock_special+0x3a2/0x4b0 [ 576.312853][T13924] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 576.312875][T13924] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.312905][T13924] ? netlink_deliver_tap+0x2e/0x1b0 [ 576.312936][T13924] netlink_unicast+0x82c/0x9e0 [ 576.312966][T13924] ? __pfx_netlink_unicast+0x10/0x10 [ 576.312989][T13924] ? netlink_sendmsg+0x642/0xb30 [ 576.313004][T13924] ? skb_put+0x11b/0x210 [ 576.313025][T13924] netlink_sendmsg+0x805/0xb30 [ 576.313051][T13924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.313072][T13924] ? aa_sock_msg_perm+0xf1/0x1d0 [ 576.313091][T13924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.313109][T13924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.313127][T13924] __sock_sendmsg+0x219/0x270 [ 576.313153][T13924] ____sys_sendmsg+0x505/0x830 [ 576.313177][T13924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.313206][T13924] ? import_iovec+0x74/0xa0 [ 576.313230][T13924] ___sys_sendmsg+0x21f/0x2a0 [ 576.313251][T13924] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.313305][T13924] ? __fget_files+0x2a/0x420 [ 576.313321][T13924] ? __fget_files+0x3a0/0x420 [ 576.313348][T13924] __x64_sys_sendmsg+0x19b/0x260 [ 576.313376][T13924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.313405][T13924] ? __pfx_ksys_write+0x10/0x10 [ 576.313424][T13924] ? rcu_is_watching+0x15/0xb0 [ 576.313447][T13924] ? do_syscall_64+0xbe/0x3b0 [ 576.313467][T13924] do_syscall_64+0xfa/0x3b0 [ 576.313482][T13924] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.313505][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.313522][T13924] ? clear_bhb_loop+0x60/0xb0 [ 576.313544][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.313561][T13924] RIP: 0033:0x7ff40978ebe9 [ 576.313577][T13924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.313592][T13924] RSP: 002b:00007ff40a552038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.313611][T13924] RAX: ffffffffffffffda RBX: 00007ff4099c5fa0 RCX: 00007ff40978ebe9 [ 576.313623][T13924] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 576.313635][T13924] RBP: 00007ff40a552090 R08: 0000000000000000 R09: 0000000000000000 [ 576.313646][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 576.313656][T13924] R13: 00007ff4099c6038 R14: 00007ff4099c5fa0 R15: 00007ff409aefa28 [ 576.313687][T13924] [ 576.923438][ T5949] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 576.969267][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 576.969283][ T30] audit: type=1326 audit(1756757665.188:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.021647][ T30] audit: type=1326 audit(1756757665.188:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.050023][ T30] audit: type=1326 audit(1756757665.188:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.073618][ T30] audit: type=1326 audit(1756757665.188:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.097899][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 577.103160][ T30] audit: type=1326 audit(1756757665.188:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.126156][ T30] audit: type=1326 audit(1756757665.188:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.148990][ T30] audit: type=1326 audit(1756757665.188:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.172096][ T30] audit: type=1326 audit(1756757665.188:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.195260][ T30] audit: type=1326 audit(1756757665.188:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13925 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f75a698ebe9 code=0x7ffc0000 [ 577.220054][ T5949] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 577.229169][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.247639][ T5949] usb 3-1: Product: syz [ 577.251836][ T5949] usb 3-1: Manufacturer: syz [ 577.256575][ T5949] usb 3-1: SerialNumber: syz [ 577.280296][ T5949] usb 3-1: config 0 descriptor?? [ 577.517189][ T5949] usb_8dev 3-1:0.0 can0: sending command message failed [ 577.529941][ T5949] usb_8dev 3-1:0.0 can0: can't get firmware version [ 577.589693][ T5949] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 577.604243][ T5949] usb 3-1: USB disconnect, device number 108 [ 578.854725][ T5994] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 579.087567][ T5994] usb 6-1: Using ep0 maxpacket: 32 [ 579.142463][ T5994] usb 6-1: unable to get BOS descriptor or descriptor too short [ 579.162088][ T5994] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 579.201237][ T5994] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 579.245366][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.342600][ T5994] usb 6-1: Product: syz [ 579.359816][ T5994] usb 6-1: Manufacturer: syz [ 579.364546][ T5994] usb 6-1: SerialNumber: syz [ 579.587518][ T30] audit: type=1326 audit(1756757667.798:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.4.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 579.612838][ T5994] usb 6-1: Invalid number of CPorts: 0 [ 579.618579][ T5994] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 579.723998][ T5994] usb 6-1: USB disconnect, device number 33 [ 579.783805][T13973] FAULT_INJECTION: forcing a failure. [ 579.783805][T13973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.812931][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.0.1999 Not tainted syzkaller #0 PREEMPT(full) [ 579.812947][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.812954][T13973] Call Trace: [ 579.812959][T13973] [ 579.812965][T13973] dump_stack_lvl+0x189/0x250 [ 579.812983][T13973] ? __pfx____ratelimit+0x10/0x10 [ 579.812998][T13973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.813010][T13973] ? __pfx__printk+0x10/0x10 [ 579.813030][T13973] should_fail_ex+0x414/0x560 [ 579.813046][T13973] _copy_to_user+0x31/0xb0 [ 579.813059][T13973] simple_read_from_buffer+0xe1/0x170 [ 579.813077][T13973] proc_fail_nth_read+0x1b3/0x220 [ 579.813091][T13973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.813104][T13973] ? rw_verify_area+0x2a6/0x4d0 [ 579.813116][T13973] ? __lock_acquire+0xab9/0xd20 [ 579.813130][T13973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 579.813146][T13973] vfs_read+0x1fd/0xa30 [ 579.813158][T13973] ? fdget_pos+0x247/0x320 [ 579.813169][T13973] ? __pfx___mutex_lock+0x10/0x10 [ 579.813179][T13973] ? __pfx_vfs_read+0x10/0x10 [ 579.813192][T13973] ? __fget_files+0x2a/0x420 [ 579.813204][T13973] ? __fget_files+0x3a0/0x420 [ 579.813223][T13973] ? __fget_files+0x2a/0x420 [ 579.813245][T13973] ksys_read+0x145/0x250 [ 579.813266][T13973] ? __pfx_ksys_read+0x10/0x10 [ 579.813283][T13973] ? rcu_is_watching+0x15/0xb0 [ 579.813305][T13973] ? do_syscall_64+0xbe/0x3b0 [ 579.813317][T13973] do_syscall_64+0xfa/0x3b0 [ 579.813325][T13973] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.813339][T13973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.813349][T13973] ? clear_bhb_loop+0x60/0xb0 [ 579.813361][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.813371][T13973] RIP: 0033:0x7ff40978d5fc [ 579.813382][T13973] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 579.813390][T13973] RSP: 002b:00007ff40a552030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 579.813401][T13973] RAX: ffffffffffffffda RBX: 00007ff4099c5fa0 RCX: 00007ff40978d5fc [ 579.813409][T13973] RDX: 000000000000000f RSI: 00007ff40a5520a0 RDI: 0000000000000004 [ 579.813415][T13973] RBP: 00007ff40a552090 R08: 0000000000000000 R09: 0000000000000000 [ 579.813422][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.813427][T13973] R13: 00007ff4099c6038 R14: 00007ff4099c5fa0 R15: 00007ff409aefa28 [ 579.813443][T13973] [ 580.312374][T13984] can: request_module (can-proto-3) failed. [ 580.327586][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 580.356957][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2001'. [ 580.580562][ T5921] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 580.786538][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.798396][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 201, changing to 11 [ 580.810718][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 580.849241][ T5921] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 580.871911][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.882010][ T5921] usb 1-1: config 0 descriptor?? [ 581.240398][T13976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.296202][T13976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.570085][T13976] loop2: detected capacity change from 0 to 7 [ 581.700288][T13976] loop2: [ 581.703815][T13976] loop2: partition table partially beyond EOD, truncated [ 581.870622][ T5949] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 581.947271][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 581.963027][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 582.044350][ T5921] usb 1-1: USB disconnect, device number 3 [ 582.113196][ T5949] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 582.142683][ T5949] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 582.154429][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 582.186469][ T5949] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 582.206685][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.216746][ T5949] usb 3-1: Product: syz [ 582.227813][ T5949] usb 3-1: Manufacturer: syz [ 582.236580][ T5949] usb 3-1: SerialNumber: syz [ 582.304743][ T5949] usb 3-1: config 0 descriptor?? [ 582.342599][T13981] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 582.354083][ T5949] usb 3-1: ucan: probing device on interface #0 [ 582.399775][ T5949] usb 3-1: ucan: invalid endpoint configuration [ 582.457192][ T5949] usb 3-1: ucan: probe failed; try to update the device firmware [ 582.662703][T14016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.673861][T14016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.692430][T14020] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2004'. [ 583.306387][T14029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.353749][T14030] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2011'. [ 583.367008][T14029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.426808][T14029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.549101][ T5949] usb 3-1: USB disconnect, device number 109 [ 584.710403][T14048] tipc: Enabling of bearer rejected, already enabled [ 584.721454][T14048] tipc: Enabling of bearer rejected, already enabled [ 584.855884][T14050] random: crng reseeded on system resumption [ 585.546128][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 585.546147][ T30] audit: type=1326 audit(1756757673.648:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.659891][ T30] audit: type=1326 audit(1756757673.648:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.682239][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.772857][ T30] audit: type=1326 audit(1756757673.668:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.805615][ T30] audit: type=1326 audit(1756757673.668:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.852688][ T30] audit: type=1326 audit(1756757673.798:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.892263][ T30] audit: type=1326 audit(1756757673.798:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.914653][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.930096][ T30] audit: type=1326 audit(1756757673.798:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 585.952513][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.008900][ T30] audit: type=1326 audit(1756757673.798:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 586.031359][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.077386][ T30] audit: type=1326 audit(1756757673.798:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 586.099678][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.107547][ T5921] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 586.146633][ T30] audit: type=1326 audit(1756757673.798:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14057 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x7ffc0000 [ 586.169015][ C0] vkms_vblank_simulate: vblank timer overrun [ 586.290730][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 586.314335][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 586.397557][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 586.471545][T14073] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 586.562771][ T5921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 586.687554][ T5921] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 586.737192][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.757797][ T5921] usb 3-1: Product: syz [ 586.761998][ T5921] usb 3-1: Manufacturer: syz [ 586.766618][ T5921] usb 3-1: SerialNumber: syz [ 586.853995][ T5921] usb 3-1: config 0 descriptor?? [ 586.862962][T14064] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 586.910500][ T5921] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 586.928986][ T5921] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 586.943650][ T5921] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 586.963292][ T5921] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 586.975555][ T5921] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 587.027630][ T5994] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 587.187591][ T5994] usb 6-1: Using ep0 maxpacket: 8 [ 587.212812][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 587.258155][T14064] netlink: 'syz.2.2018': attribute type 5 has an invalid length. [ 587.295551][T14064] ip6erspan0: entered promiscuous mode [ 587.369275][T14064] bridge0: port 3(macsec0) entered blocking state [ 587.378708][T14064] bridge0: port 3(macsec0) entered disabled state [ 587.389272][T14064] macsec0: entered allmulticast mode [ 587.394602][T14064] veth1_macvtap: entered allmulticast mode [ 587.433174][T14064] macsec0: entered promiscuous mode [ 587.443865][T14064] bridge0: port 3(macsec0) entered blocking state [ 587.450774][T14064] bridge0: port 3(macsec0) entered forwarding state [ 587.541782][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 587.555167][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 587.565502][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 587.584811][ T5994] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 587.597125][ T5994] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 587.608733][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.631556][ T5994] usb 6-1: config 0 descriptor?? [ 587.654266][T14078] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 587.879289][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.933725][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.965765][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 588.216589][T14097] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.2027'. [ 588.368089][ T43] usb 6-1: USB disconnect, device number 34 [ 588.379732][T13512] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 588.557591][ T5949] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 588.700863][ T5994] usb 3-1: USB disconnect, device number 110 [ 588.739310][ T5994] mcba_usb 3-1:0.0 can0: device disconnected [ 588.742430][ T5949] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.758572][ T5949] usb 1-1: config 1 has no interface number 0 [ 588.764666][ T5949] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.847579][T14113] No buffer was provided with the request [ 588.856009][T14113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2030'. [ 589.078012][ T5949] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 589.252289][T14120] loop2: detected capacity change from 0 to 7 [ 589.282088][T14120] Dev loop2: unable to read RDB block 7 [ 589.289337][ T5949] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 123 [ 589.295663][T14120] loop2: unable to read partition table [ 589.316573][T14120] loop2: partition table beyond EOD, truncated [ 589.351634][T14120] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 589.369871][ T5949] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.384281][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.392650][ T5949] usb 1-1: Product: syz [ 589.453184][ T5949] usb 1-1: Manufacturer: syz [ 589.468846][ T5949] usb 1-1: SerialNumber: syz [ 589.498085][T14123] ptrace attach of "./syz-executor exec"[13290] was attempted by "./syz-executor exec"[14123] [ 589.998773][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.045583][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.148287][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.219261][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.294742][ T5994] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 590.328076][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.358067][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.367069][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.414549][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.439599][ T5994] usb 6-1: device descriptor read/64, error -71 [ 590.459045][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.520905][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.542950][T14105] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 590.616447][ T5949] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 590.635950][ T5949] cdc_ncm 1-1:1.1: bind() failure [ 590.706455][ T5994] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 590.867541][ T5994] usb 6-1: device descriptor read/64, error -71 [ 591.029196][ T5994] usb usb6-port1: attempt power cycle [ 591.127960][T14150] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 591.215218][T14154] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 591.357180][T14154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.366410][T14154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.440866][ T5994] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 591.468231][ T5994] usb 6-1: device descriptor read/8, error -71 [ 591.708124][ T5994] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 591.715923][ T5921] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 591.748495][ T5994] usb 6-1: device descriptor read/8, error -71 [ 591.871227][ T5994] usb usb6-port1: unable to enumerate USB device [ 591.888268][ T5949] usb 1-1: USB disconnect, device number 4 [ 592.414156][ T5921] usb 3-1: config 0 has no interfaces? [ 592.452940][ T5921] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 592.482855][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.492862][ T5921] usb 3-1: Product: syz [ 592.497235][ T5921] usb 3-1: Manufacturer: syz [ 592.502359][ T5921] usb 3-1: SerialNumber: syz [ 592.513756][ T5921] usb 3-1: config 0 descriptor?? [ 592.657681][ T5949] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 592.864847][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.926876][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.969977][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 592.987187][T14158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2040'. [ 592.997218][ T5949] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 593.009556][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.033006][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 593.183968][ T5949] usb 1-1: config 0 descriptor?? [ 593.399463][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.410028][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.841228][T14185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.851699][T14185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.878957][ T5949] usbhid 1-1:0.0: can't add hid device: -32 [ 593.885153][ T5949] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 593.893798][T14161] program syz.0.2041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.928904][T14161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.938112][T14161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.939145][T14188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.972264][T14188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.006548][ T5949] usb 1-1: USB disconnect, device number 5 [ 594.453930][ T5994] usb 3-1: USB disconnect, device number 111 [ 594.479579][ T5949] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 594.737658][ T5949] usb 1-1: Using ep0 maxpacket: 16 [ 594.744458][ T5949] usb 1-1: config 0 has no interfaces? [ 594.751759][ T5949] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 594.761760][ T5949] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.770163][ T5949] usb 1-1: Manufacturer: syz [ 594.788268][ T5949] usb 1-1: config 0 descriptor?? [ 594.927621][ T5994] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 594.942445][T14203] netlink: 'syz.5.2052': attribute type 1 has an invalid length. [ 595.029399][ T5921] usb 1-1: USB disconnect, device number 6 [ 595.066007][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 595.066025][ T30] audit: type=1326 audit(1756757683.278:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14206 comm="syz.4.2053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x0 [ 595.080231][T14205] gretap1: entered promiscuous mode [ 595.113183][T14205] bond2: (slave gretap1): making interface the new active one [ 595.131537][ T5994] usb 3-1: config 0 has an invalid descriptor of length 213, skipping remainder of the config [ 595.142022][ T5994] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 595.161954][T14205] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 595.173948][ T5994] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 595.183857][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.192171][ T5994] usb 3-1: Product: syz [ 595.198341][ T5994] usb 3-1: Manufacturer: syz [ 595.213271][ T5994] usb 3-1: SerialNumber: syz [ 595.220944][ T5994] usb 3-1: config 0 descriptor?? [ 595.434708][ T5949] usb 3-1: USB disconnect, device number 112 [ 595.621002][T14221] netlink: 'syz.0.2057': attribute type 2 has an invalid length. [ 595.628817][T14221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2057'. [ 595.748686][T14224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.765582][T14224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.338962][T14239] No buffer was provided with the request [ 596.350248][T14239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2060'. [ 596.567961][ T5994] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 596.717565][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 596.725330][ T5994] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 596.735839][ T5994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.747198][ T5994] usb 3-1: config 0 has no interface number 0 [ 596.753683][ T5994] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 596.768055][ T5994] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 596.787065][ T5994] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 596.796477][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.804914][ T5994] usb 3-1: Product: syz [ 596.809461][ T5994] usb 3-1: Manufacturer: syz [ 596.814131][ T5994] usb 3-1: SerialNumber: syz [ 596.839140][ T5994] usb 3-1: config 0 descriptor?? [ 596.846673][T14236] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 597.064444][T14236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.074644][T14236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.103226][ T5994] usb 3-1: probing VID:PID(0424:012C) [ 597.117896][ T5994] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 597.127227][ T5994] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 597.144880][ T5994] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 597.176833][ T5994] usb 3-1: USB disconnect, device number 113 [ 597.717715][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 597.878703][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 597.896968][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 597.916947][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 597.991577][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.434810][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.467559][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.487560][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.766555][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 598.774546][ T43] usbtmc 1-1:16.0: can't read capabilities [ 598.933284][ T5994] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 599.142642][ T5994] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.153886][ T5994] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 599.176235][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.196481][ T5994] usb 6-1: Product: syz [ 599.200933][ T5994] usb 6-1: Manufacturer: syz [ 599.205542][ T5994] usb 6-1: SerialNumber: syz [ 599.218664][ T5994] usb 6-1: config 0 descriptor?? [ 599.515867][ T920] usb 1-1: USB disconnect, device number 7 [ 599.640511][ T5994] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 599.859482][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.870458][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.880282][ T5994] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 599.890070][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.901490][ T5994] usb 3-1: config 0 descriptor?? [ 599.978070][ T920] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 600.121059][ T5994] usbhid 3-1:0.0: can't add hid device: -71 [ 600.127134][ T5994] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 600.138348][ T5994] usb 3-1: USB disconnect, device number 114 [ 600.146394][ T920] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 600.168839][ T920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 600.175869][T14276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.186369][T14276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.196456][ T920] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 600.205734][ T920] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 600.221088][ T920] usb 1-1: Product: syz [ 600.225279][ T920] usb 1-1: Manufacturer: syz [ 600.230052][ T920] usb 1-1: SerialNumber: syz [ 600.238176][ T920] usb 1-1: config 0 descriptor?? [ 600.249728][ T920] usb 1-1: selecting invalid altsetting 0 [ 600.390877][ T30] audit: type=1326 audit(1756757688.608:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.4.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x0 [ 600.446996][ T920] usb 1-1: USB disconnect, device number 8 [ 601.287849][ T983] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 601.297536][ T5994] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 601.418892][ T920] usb 6-1: USB disconnect, device number 39 [ 601.467805][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 601.481088][ T983] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 601.490017][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 601.528413][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.536252][ T983] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 601.562475][ T5994] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 601.587739][ T983] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.606115][ T983] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.615704][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.624433][ T5994] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 601.632875][ T983] usb 3-1: Product: э [ 601.637210][ T5994] usb 1-1: can't read configurations, error -61 [ 601.644944][ T983] usb 3-1: SerialNumber: syz [ 601.778212][ T5994] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 601.822246][T14302] netlink: 'syz.5.2080': attribute type 6 has an invalid length. [ 601.833140][T14302] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2080'. [ 601.947724][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 601.955943][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.965931][ T5994] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 601.975529][ T5994] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 601.985185][ T5994] usb 1-1: can't read configurations, error -61 [ 601.994558][ T5994] usb usb1-port1: attempt power cycle [ 602.066445][T14305] netlink: 'syz.5.2081': attribute type 9 has an invalid length. [ 602.075502][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 602.101070][T14305] netlink: 'syz.5.2081': attribute type 9 has an invalid length. [ 602.102542][ T8898] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.109573][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 602.136376][ T8898] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.187873][ T8898] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.227531][ T8898] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.299151][T14308] fuse: Bad value for 'group_id' [ 602.304223][T14308] fuse: Bad value for 'group_id' [ 602.387854][ T5994] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 602.408269][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 602.418332][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 602.426260][ T5994] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 602.436879][ T5994] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 602.446178][ T5994] usb 1-1: can't read configurations, error -61 [ 602.590895][ T5994] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 602.640236][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 602.656041][ T5994] usb 1-1: unable to get BOS descriptor or descriptor too short [ 602.677043][ T5994] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 602.689119][ T5994] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 602.697121][ T5994] usb 1-1: can't read configurations, error -61 [ 602.709412][ T5994] usb usb1-port1: unable to enumerate USB device [ 603.822547][ T983] usb 3-1: 0:2 : does not exist [ 603.890934][ T983] usb 3-1: USB disconnect, device number 115 [ 603.980116][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.085706][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2092'. [ 604.115665][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2092'. [ 604.193064][T14353] loop2: detected capacity change from 0 to 7 [ 604.215382][T14353] loop2: [ 604.231898][T14353] loop2: partition table partially beyond EOD, truncated [ 604.367813][T13512] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 604.415124][T14361] veth1_macvtap: entered promiscuous mode [ 604.456697][T14361] usb 5-1: USB disconnect, device number 21 [ 604.677657][ T5994] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 604.686838][T14379] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 604.897568][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 604.922499][ T5994] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.947893][ T5935] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 604.963219][ T5994] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.977557][T14383] syz.6.2104: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 604.993205][ T5994] usb 3-1: config 0 interface 0 has no altsetting 0 [ 604.999978][T14383] CPU: 0 UID: 0 PID: 14383 Comm: syz.6.2104 Not tainted syzkaller #0 PREEMPT(full) [ 605.000005][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.000017][T14383] Call Trace: [ 605.000026][T14383] [ 605.000035][T14383] dump_stack_lvl+0x189/0x250 [ 605.000065][T14383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.000085][T14383] ? __pfx__printk+0x10/0x10 [ 605.000111][T14383] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 605.000132][T14383] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 605.000155][T14383] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 605.000179][T14383] warn_alloc+0x214/0x310 [ 605.000206][T14383] ? stack_depot_save_flags+0x40/0x860 [ 605.000231][T14383] ? __pfx_warn_alloc+0x10/0x10 [ 605.000258][T14383] ? kasan_save_track+0x4f/0x80 [ 605.000280][T14383] ? xskq_create+0x56/0x170 [ 605.000301][T14383] ? xsk_init_queue+0xb0/0x110 [ 605.000322][T14383] ? xsk_setsockopt+0x4dc/0x8d0 [ 605.000341][T14383] ? do_sock_setsockopt+0x179/0x1b0 [ 605.000358][T14383] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 605.000374][T14383] ? do_syscall_64+0xfa/0x3b0 [ 605.000390][T14383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.000415][T14383] __vmalloc_node_range_noprof+0x125/0x12f0 [ 605.000470][T14383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 605.000502][T14383] ? __kasan_kmalloc+0x93/0xb0 [ 605.000527][T14383] vmalloc_user_noprof+0xad/0xf0 [ 605.000551][T14383] ? xskq_create+0xbf/0x170 [ 605.000574][T14383] xskq_create+0xbf/0x170 [ 605.000601][T14383] xsk_init_queue+0xb0/0x110 [ 605.000626][T14383] xsk_setsockopt+0x4dc/0x8d0 [ 605.000651][T14383] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.000673][T14383] ? __pfx_aa_sk_perm+0x10/0x10 [ 605.000701][T14383] ? aa_sock_opt_perm+0xff/0x1b0 [ 605.000723][T14383] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 605.000741][T14383] ? __pfx_xsk_setsockopt+0x10/0x10 [ 605.000766][T14383] do_sock_setsockopt+0x179/0x1b0 [ 605.000798][T14383] __x64_sys_setsockopt+0x13f/0x1b0 [ 605.000824][T14383] do_syscall_64+0xfa/0x3b0 [ 605.000840][T14383] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.000864][T14383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.000883][T14383] ? clear_bhb_loop+0x60/0xb0 [ 605.000906][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.000924][T14383] RIP: 0033:0x7f2171b8ebe9 [ 605.000941][T14383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.000957][T14383] RSP: 002b:00007f2172a41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 605.000976][T14383] RAX: ffffffffffffffda RBX: 00007f2171dc5fa0 RCX: 00007f2171b8ebe9 [ 605.000990][T14383] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 605.001002][T14383] RBP: 00007f2171c11e19 R08: 0000000000000052 R09: 0000000000000000 [ 605.001013][T14383] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.001026][T14383] R13: 00007f2171dc6038 R14: 00007f2171dc5fa0 R15: 00007f2171eefa28 [ 605.001057][T14383] [ 605.001073][T14383] Mem-Info: [ 605.317869][T14383] active_anon:7034 inactive_anon:0 isolated_anon:0 [ 605.317869][T14383] active_file:9540 inactive_file:39126 isolated_file:0 [ 605.317869][T14383] unevictable:768 dirty:193 writeback:0 [ 605.317869][T14383] slab_reclaimable:9961 slab_unreclaimable:169447 [ 605.317869][T14383] mapped:30915 shmem:1358 pagetables:1549 [ 605.317869][T14383] sec_pagetables:0 bounce:0 [ 605.317869][T14383] kernel_misc_reclaimable:0 [ 605.317869][T14383] free:1240129 free_pcp:18373 free_cma:0 [ 605.318386][ T5994] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 605.437676][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 605.461789][ T5935] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 605.471149][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.479275][T14383] Node 0 active_anon:29076kB inactive_anon:0kB active_file:36140kB inactive_file:147272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123448kB dirty:772kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13784kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.511225][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.519924][ T5935] usb 1-1: Product: syz [ 605.524108][ T5935] usb 1-1: Manufacturer: syz [ 605.538950][ T5994] usb 3-1: config 0 descriptor?? [ 605.552097][ T5935] usb 1-1: SerialNumber: syz [ 605.578705][ T5935] usb 1-1: config 0 descriptor?? [ 605.587757][ T5935] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 605.705888][T14383] Node 1 active_anon:0kB inactive_anon:0kB active_file:244kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 605.756803][T14383] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 605.873472][T14383] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 605.920730][T14383] Node 0 DMA32 free:1093288kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29576kB inactive_anon:0kB active_file:36076kB inactive_file:127008kB unevictable:1536kB writepending:780kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:39208kB local_pcp:20072kB free_cma:0kB [ 605.972136][T14392] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2105'. [ 605.986480][ T5935] gspca_sn9c2028: read1 error -71 [ 606.020336][ T5935] gspca_sn9c2028: read1 error -71 [ 606.033939][T14383] lowmem_reserve[]: 0 0 1 1 1 [ 606.039932][ T5994] mcp2200 0003:04D8:00DF.001B: item 0 4 0 9 parsing failed [ 606.054762][T14383] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 606.092043][ T5935] gspca_sn9c2028: read1 error -71 [ 606.098241][T14383] lowmem_reserve[]: 0 0 0 0 0 [ 606.107213][T14383] Node 1 Normal free:3881548kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:244kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31500kB local_pcp:12936kB free_cma:0kB [ 606.140672][ T5994] mcp2200 0003:04D8:00DF.001B: can't parse reports [ 606.149021][ T5935] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 606.167633][ T5994] mcp2200 0003:04D8:00DF.001B: probe with driver mcp2200 failed with error -22 [ 606.192028][T14383] lowmem_reserve[]: 0 0 0 0 0 [ 606.199024][ T5935] usb 1-1: USB disconnect, device number 13 [ 606.251154][ T5994] usb 3-1: USB disconnect, device number 116 [ 606.256274][T14383] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 606.365215][T14383] Node 0 DMA32: 2492*4kB (UME) 1097*8kB (UME) 854*16kB (UME) 767*32kB (UME) 396*64kB (UME) 228*128kB (UME) 120*256kB (UME) 44*512kB (UM) 26*1024kB (UME) 11*2048kB (UM) 218*4096kB (UM) = 1106808kB [ 606.470284][T14383] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 606.537977][T14383] Node 1 Normal: 187*4kB (UME) 56*8kB (UME) 34*16kB (UME) 160*32kB (UME) 50*64kB (UME) 8*128kB (UME) 1*256kB (E) 5*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 943*4096kB (M) = 3881548kB [ 606.648283][T14383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.701737][T14383] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 606.772747][T14383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 606.841303][T14383] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 606.927520][T14383] 32445 total pagecache pages [ 606.966306][T14383] 0 pages in swap cache [ 606.994643][T14383] Free swap = 124996kB [ 607.020154][T14383] Total swap = 124996kB [ 607.041306][T14383] 2097051 pages RAM [ 607.059415][T14383] 0 pages HighMem/MovableOnly [ 607.083665][T14383] 425662 pages reserved [ 607.101778][T14383] 0 pages cma reserved [ 607.224903][ T5949] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 607.264704][ T5949] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 607.406253][T14393] delete_channel: no stack [ 607.419486][T14393] delete_channel: no stack [ 608.288210][T14424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.001415][T14374] syz.4.2101 (14374): drop_caches: 1 [ 609.437694][ T920] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 609.608133][ T920] usb 1-1: Using ep0 maxpacket: 8 [ 609.723573][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 609.821055][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.937386][ T920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.034199][ T920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 610.077774][ T5935] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 610.102556][ T920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 610.143915][ T920] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 610.153373][ T920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.175291][ T920] usb 1-1: config 0 descriptor?? [ 610.199260][T14438] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 610.247619][ T5935] usb 6-1: device descriptor read/64, error -71 [ 610.257907][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 610.451067][ T9] usb 3-1: device descriptor read/64, error -71 [ 610.451499][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.469511][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.476457][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.483332][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.490239][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.497048][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.503935][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.510768][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.517748][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.524549][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.531392][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.538483][ T5870] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 610.587596][ T5935] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 610.689380][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 610.713387][ T30] audit: type=1326 audit(1756757698.928:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14433 comm="syz.0.2118" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff40978ebe9 code=0x0 [ 610.735700][ T5935] usb 6-1: device descriptor read/64, error -71 [ 610.837613][ T9] usb 3-1: device descriptor read/64, error -71 [ 610.857886][ T5935] usb usb6-port1: attempt power cycle [ 610.977807][ T9] usb usb3-port1: attempt power cycle [ 611.207731][ T5935] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 611.238941][ T5935] usb 6-1: device descriptor read/8, error -71 [ 611.317703][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 611.338181][ T9] usb 3-1: device descriptor read/8, error -71 [ 611.477803][ T5935] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 611.498228][ T5935] usb 6-1: device descriptor read/8, error -71 [ 611.577667][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 611.608495][ T5935] usb usb6-port1: unable to enumerate USB device [ 611.615148][ T9] usb 3-1: device descriptor read/8, error -71 [ 611.697211][T14468] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 611.729213][ T9] usb usb3-port1: unable to enumerate USB device [ 612.060496][T13512] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 612.081494][ T5949] usb 1-1: USB disconnect, device number 14 [ 612.232801][T14470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.257183][T14470] batadv_slave_1: entered promiscuous mode [ 612.323171][T14473] fuse: Unknown parameter 'cr2gSbfcWy(Ü]>Y?r7ߴ?z@vn01NgҟGՋ}u{2j\Do@fHnphM]DC˝rU$Fi~ ' [ 612.564105][T14476] binder: 14474:14476 ioctl c0306201 2000000003c0 returned -14 [ 612.579814][T14477] netlink: 'syz.0.2130': attribute type 1 has an invalid length. [ 612.587951][T14476] netlink: 'syz.0.2130': attribute type 1 has an invalid length. [ 613.465160][T14504] netlink: 'syz.0.2138': attribute type 7 has an invalid length. [ 613.505821][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 613.946010][T14514] netlink: 'syz.4.2141': attribute type 1 has an invalid length. [ 614.397919][T14527] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 614.404535][T14527] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 614.441737][T14529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.491834][T14527] vhci_hcd vhci_hcd.0: Device attached [ 614.528646][T14533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.573589][T14529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.582718][T14506] syz.6.2139 (14506): drop_caches: 2 [ 614.611185][T14527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.621208][T14527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.631788][T14536] kvm: pic: non byte write [ 614.635550][T14529] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.636343][T14536] kvm: pic: non byte write [ 614.647245][T14527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 614.663402][T14536] kvm: pic: non byte write [ 614.669383][T14536] kvm: pic: non byte write [ 614.676234][T14536] kvm: pic: single mode not supported [ 614.679682][T14527] vhci_hcd vhci_hcd.0: port 0 already used [ 614.708027][ T5935] vhci_hcd: vhci_device speed not set [ 614.728368][ T43] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 614.736621][T14530] vhci_hcd: connection closed [ 614.736962][ T2939] vhci_hcd: stop threads [ 614.748806][ T2939] vhci_hcd: release socket [ 614.755472][ T2939] vhci_hcd: disconnect device [ 614.780058][ T5935] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 614.789181][ T5935] usb 41-1: enqueue for inactive port 0 [ 614.876356][ T5935] vhci_hcd: vhci_device speed not set [ 615.227561][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 615.241427][ T43] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 615.263457][ T43] usb 3-1: config 0 has no interface number 0 [ 615.285863][ T43] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 615.316477][ T43] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 615.350145][ T43] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 615.361683][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.380449][ T43] usb 3-1: Product: syz [ 615.393884][ T43] usb 3-1: Manufacturer: syz [ 615.406784][ T43] usb 3-1: SerialNumber: syz [ 615.414836][ T43] usb 3-1: config 0 descriptor?? [ 615.627120][ T43] radio-si470x 3-1:0.35: this is not a si470x device. [ 615.829420][ T30] audit: type=1326 audit(1756757704.048:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14528 comm="syz.2.2146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa07f38ebe9 code=0x0 [ 616.033631][T14559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 616.052041][T14566] netlink: 'syz.4.2156': attribute type 8 has an invalid length. [ 616.191064][ T43] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 616.357546][ T5935] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 616.403969][T14590] netlink: 'syz.5.2162': attribute type 10 has an invalid length. [ 616.422848][T14590] team0: Cannot enslave team device to itself [ 616.472258][T14593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.481420][T14593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.498548][ T5935] usb 1-1: device descriptor read/64, error -71 [ 616.671948][ T5994] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 616.737705][ T5935] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 616.827608][ T5994] usb 6-1: Using ep0 maxpacket: 16 [ 616.836374][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 32770, setting to 64 [ 616.853291][ T5994] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 616.863292][ T5994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.879064][ T5935] usb 1-1: device descriptor read/64, error -71 [ 616.887083][ T5994] usb 6-1: Product: syz [ 616.904765][ T5994] usb 6-1: Manufacturer: syz [ 616.910891][ T5994] usb 6-1: SerialNumber: syz [ 616.921789][ T5994] usb 6-1: config 0 descriptor?? [ 616.936221][ T5994] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 616.949326][ T5994] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 617.008969][ T5935] usb usb1-port1: attempt power cycle [ 617.400706][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 617.479015][ T5935] usb 1-1: device descriptor read/8, error -71 [ 617.488984][ T5949] usb 3-1: USB disconnect, device number 121 [ 617.716389][ T5994] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 617.727852][ T5935] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 617.780276][ T5935] usb 1-1: device descriptor read/8, error -71 [ 617.898532][ T5935] usb usb1-port1: unable to enumerate USB device [ 617.907693][ T5949] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 618.013836][ T30] audit: type=1326 audit(1756757706.228:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.239122][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 618.276406][ T30] audit: type=1326 audit(1756757706.258:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.301828][ T30] audit: type=1326 audit(1756757706.258:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.326392][ T5949] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 618.341891][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.351008][ T5949] usb 3-1: Product: syz [ 618.355323][ T5949] usb 3-1: Manufacturer: syz [ 618.361323][ T5949] usb 3-1: SerialNumber: syz [ 618.367221][ T30] audit: type=1326 audit(1756757706.258:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.395882][ T5949] usb 3-1: config 0 descriptor?? [ 618.430500][ T5949] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 618.444712][ T5949] usb 3-1: Detected FT232H [ 618.492203][ T30] audit: type=1326 audit(1756757706.258:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.526573][ T30] audit: type=1326 audit(1756757706.258:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.551856][ T30] audit: type=1326 audit(1756757706.258:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.575125][ T30] audit: type=1326 audit(1756757706.258:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.609578][ T30] audit: type=1326 audit(1756757706.258:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14615 comm="syz.4.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 618.615299][ T5994] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 618.648027][ T5949] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 618.657340][ T5994] em28xx 6-1:0.0: board has no eeprom [ 618.984478][T14631] loop2: detected capacity change from 0 to 7 [ 618.993662][T14631] Dev loop2: unable to read RDB block 7 [ 619.000164][ T5994] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 619.008220][ T5994] em28xx 6-1:0.0: dvb set to bulk mode. [ 619.013834][ T5935] em28xx 6-1:0.0: Binding DVB extension [ 619.021941][T14631] loop2: unable to read partition table [ 619.028392][T14631] loop2: partition table beyond EOD, truncated [ 619.034903][T14631] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 619.087129][ T5949] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.177752][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 619.182393][ T5949] usb 6-1: USB disconnect, device number 44 [ 619.210971][ T5949] em28xx 6-1:0.0: Disconnecting em28xx [ 619.326468][ T5935] em28xx 6-1:0.0: Registering input extension [ 619.358056][T14639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.368337][T14639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.382992][ T5949] em28xx 6-1:0.0: Closing input extension [ 619.407139][ T5949] em28xx 6-1:0.0: Freeing device [ 620.057569][ T5935] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 620.217673][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 620.223675][ T5935] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 620.236219][ T5935] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 620.244129][ T5935] usb 6-1: can't read configurations, error -61 [ 620.384662][ T5935] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 620.537846][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 620.558448][ T5935] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 620.584085][ T5935] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 620.596848][ T5935] usb 6-1: can't read configurations, error -61 [ 620.606669][ T5935] usb usb6-port1: attempt power cycle [ 620.621408][T14661] loop9: detected capacity change from 0 to 7 [ 620.628585][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.636548][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.645045][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.661729][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.670518][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.684619][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.693336][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.706408][ T5949] usb 3-1: USB disconnect, device number 122 [ 620.730181][T14661] ldm_validate_partition_table(): Disk read failed. [ 620.757757][ T5949] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 620.769593][T14668] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.787149][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.796893][ T5949] ftdi_sio 3-1:0.0: device disconnected [ 620.810915][T14661] Buffer I/O error on dev loop9, logical block 0, async page read [ 620.824497][T14661] Dev loop9: unable to read RDB block 0 [ 620.832482][T14661] loop9: unable to read partition table [ 620.840783][T14661] loop9: partition table beyond EOD, truncated [ 620.849871][T14661] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 620.849871][T14661] ) failed (rc=-5) [ 620.957664][ T5935] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 621.014290][T14674] tipc: Started in network mode [ 621.019505][T14674] tipc: Node identity ac1414aa, cluster identity 4711 [ 621.026879][T14674] tipc: Enabled bearer , priority 10 [ 621.037775][T14674] tipc: Enabled bearer , priority 0 [ 621.113563][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 621.122252][ T5935] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 621.140735][ T5935] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 621.148632][ T5935] usb 6-1: can't read configurations, error -61 [ 621.184882][ T5949] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 621.297612][ T5935] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 621.319467][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 621.340968][ T5949] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 621.350431][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.362181][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.373657][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.373744][ T5935] usb 6-1: too many configurations: 254, using maximum allowed: 8 [ 621.384512][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.399224][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.419025][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.426211][ T5935] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 621.427418][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.459927][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.478909][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.480288][ T5935] usb 6-1: can't read configurations, error -61 [ 621.487207][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.502190][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.513549][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.528484][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.537816][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.550466][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.563801][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.573360][ T5935] usb usb6-port1: unable to enumerate USB device [ 621.575355][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.593297][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.602245][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.682749][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.697704][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.893351][ T5949] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 621.921525][ T5949] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 621.936517][ T5949] usb 3-1: config 0 interface 0 has no altsetting 0 [ 621.964371][ T5949] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 621.973712][ T5949] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 621.993829][ T5949] usb 3-1: Product: syz [ 622.003919][ T5949] usb 3-1: Manufacturer: syz [ 622.014044][ T5949] usb 3-1: SerialNumber: syz [ 622.035097][ T5949] usb 3-1: config 0 descriptor?? [ 622.045975][ T5949] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 622.160204][ T5949] tipc: Node number set to 2886997162 [ 622.206583][T14685] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2185'. [ 622.307794][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 622.307811][ T30] audit: type=1326 audit(1756757710.518:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.322965][ T5994] usb 3-1: USB disconnect, device number 123 [ 622.336493][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 622.402618][ T5994] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 622.537601][ T30] audit: type=1326 audit(1756757710.528:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.584320][T14694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2187'. [ 622.646075][T14693] mmap: syz.4.2188 (14693): VmData 37462016 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 622.667557][ T30] audit: type=1326 audit(1756757710.528:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.692229][T14693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.708115][T14693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.727648][ T5994] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 622.740137][ T30] audit: type=1326 audit(1756757710.528:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.810549][ T30] audit: type=1326 audit(1756757710.528:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.874288][ T30] audit: type=1326 audit(1756757710.528:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 622.887555][ T5994] usb 3-1: Using ep0 maxpacket: 8 [ 622.963780][ T5994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 622.964645][ T30] audit: type=1326 audit(1756757710.528:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 623.007041][ T5994] usb 3-1: config 8 has an invalid interface number: 24 but max is 1 [ 623.046053][ T5994] usb 3-1: config 8 has an invalid interface number: 242 but max is 1 [ 623.049785][ T30] audit: type=1326 audit(1756757710.528:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 623.136035][ T5994] usb 3-1: config 8 has no interface number 0 [ 623.136071][ T30] audit: type=1326 audit(1756757710.528:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f866d990a7c code=0x7ffc0000 [ 623.136111][ T30] audit: type=1326 audit(1756757710.528:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14686 comm="syz.4.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f866d9909b4 code=0x7ffc0000 [ 623.204087][ T5994] usb 3-1: config 8 has no interface number 1 [ 623.213507][ T5994] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 623.247056][ T5994] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 623.273216][ T5994] usb 3-1: config 8 interface 24 has no altsetting 0 [ 623.292299][ T5994] usb 3-1: config 8 interface 242 has no altsetting 0 [ 623.314269][ T5994] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 623.330485][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.366303][ T5994] usb 3-1: Product: syz [ 623.371114][ T5994] usb 3-1: Manufacturer: syz [ 623.375745][ T5994] usb 3-1: SerialNumber: syz [ 623.415266][T14688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.680487][ T5994] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 623.759626][ T5994] vmk80xx 3-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 623.861735][ T5994] usb 3-1: USB disconnect, device number 124 [ 624.314955][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321546][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.357613][ T5994] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 625.381196][ T9] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 625.521653][ T5994] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.535615][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 625.553904][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.567677][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 625.573230][ T5994] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 625.709476][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.745799][ T5994] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.774995][ T5994] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 625.879978][ T9] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 625.897532][ T5994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.975761][ T5994] usb 6-1: config 0 descriptor?? [ 626.046373][ T5994] gspca_main: spca561-2.14.0 probing abcd:cdee [ 626.084265][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 626.167425][ T9] usb usb1-port1: attempt power cycle [ 626.255264][ T920] IPVS: starting estimator thread 0... [ 626.357560][T14745] IPVS: using max 34 ests per chain, 81600 per kthread [ 626.374164][ T5994] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 626.383336][ T5994] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.391182][ T5994] usb 6-1: MIDIStreaming interface descriptor not found [ 626.541772][ T9] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 626.641855][ T5994] usb 6-1: USB disconnect, device number 49 [ 626.648574][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 626.787638][ T9] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 626.823935][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 626.833179][ T9] usb usb1-port1: unable to enumerate USB device [ 627.257750][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 627.387685][ T9] usb 6-1: device descriptor read/64, error -71 [ 627.638493][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 627.787548][ T9] usb 6-1: device descriptor read/64, error -71 [ 627.906455][ T9] usb usb6-port1: attempt power cycle [ 628.059427][T14760] loop2: detected capacity change from 0 to 7 [ 628.066516][T14760] Dev loop2: unable to read RDB block 7 [ 628.074538][T14760] loop2: unable to read partition table [ 628.080439][T14760] loop2: partition table beyond EOD, truncated [ 628.086599][T14760] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 628.279842][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 628.318283][ T9] usb 6-1: device descriptor read/8, error -71 [ 628.326803][T14769] loop2: detected capacity change from 0 to 7 [ 628.346988][T14769] Dev loop2: unable to read RDB block 7 [ 628.359963][T14769] loop2: unable to read partition table [ 628.423475][T14769] loop2: partition table beyond EOD, truncated [ 628.518874][T14769] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 628.588932][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 628.636250][ T9] usb 6-1: device descriptor read/8, error -71 [ 628.758313][ T9] usb usb6-port1: unable to enumerate USB device [ 628.866308][T14784] fuse: Bad value for 'fd' [ 628.880376][T14782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.978627][ T5994] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 629.622796][ T5994] usb 1-1: Using ep0 maxpacket: 32 [ 629.663384][ T5994] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 629.671719][ T5994] usb 1-1: config 0 has no interface number 0 [ 629.681606][ T5994] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 629.691507][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.703180][ T5994] usb 1-1: Product: syz [ 629.721643][ T5994] usb 1-1: Manufacturer: syz [ 629.733838][ T5994] usb 1-1: SerialNumber: syz [ 629.760287][ T5994] usb 1-1: config 0 descriptor?? [ 629.773330][ T5994] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 630.031454][ T5994] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 630.164137][ T5994] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 630.223020][T14777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.272291][T14777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.624031][T14800] loop2: detected capacity change from 0 to 7 [ 630.675097][T14800] Dev loop2: unable to read RDB block 7 [ 630.694100][T14800] loop2: unable to read partition table [ 630.703788][T14802] binfmt_misc: register: failed to install interpreter file ./file0 [ 630.719235][T14800] loop2: partition table beyond EOD, truncated [ 630.745111][T14800] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 630.780771][T14802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.789967][T14802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.886599][T14803] netlink: 'syz.0.2210': attribute type 3 has an invalid length. [ 630.894833][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2210'. [ 631.396794][T14811] IPv6: sit3: Disabled Multicast RS [ 631.488283][ T5949] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 631.521590][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.537414][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.644745][ T5949] usb 6-1: not running at top speed; connect to a high speed hub [ 631.655279][ T5949] usb 6-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 631.667233][ T5949] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.681076][ T5949] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.691211][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.700051][ T5949] usb 6-1: Product: Ѕ [ 631.704945][ T5949] usb 6-1: Manufacturer: 聡ጞ߱좶ᥬ䰼Ἦ鸓᳔펧첺힨㰨些駈侽卵鈳ↂ턻뱠鬟鼦㷦䓀顅졑탡⇀뇏檭䁵왜㈰䱢䟔⺊틛䃀蓼ジ [ 631.721272][ T5949] usb 6-1: SerialNumber: گ릀靐⠆긼崌҂競찰眢놼믔畅뇢ļᒦ泏st儷쎭ိ緽圍޿㰼બꈂ䔐뾰숞侗泴裘쒈좕Ᶎ㴠舲媫胣癤﫳楩Ჩ쮞 [ 631.961503][ T5949] usb 6-1: 0:2 : does not exist [ 632.005953][ T5949] usb 6-1: USB disconnect, device number 54 [ 632.061511][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.244896][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 632.254813][ T5994] usb 1-1: USB disconnect, device number 23 [ 632.276210][ T5994] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 632.318624][ T5994] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 632.341064][ T5994] quatech2 1-1:0.51: device disconnected [ 632.438978][T14821] netlink: 'syz.4.2220': attribute type 12 has an invalid length. [ 632.974180][T14836] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2225'. [ 633.421578][T14839] loop2: detected capacity change from 0 to 7 [ 633.430577][T14839] Dev loop2: unable to read RDB block 7 [ 633.436290][T14839] loop2: unable to read partition table [ 633.443812][T14839] loop2: partition table beyond EOD, truncated [ 633.460687][T14839] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 633.714320][T14847] dvmrp8: entered allmulticast mode [ 633.722368][T14847] dvmrp8: left allmulticast mode [ 633.847886][ T5948] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 634.027802][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 634.057142][ T5948] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 634.322051][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2231'. [ 634.337737][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.389859][ T5948] usb 3-1: Product: syz [ 634.401702][ T5948] usb 3-1: Manufacturer: syz [ 634.413371][ T5948] usb 3-1: SerialNumber: syz [ 634.443694][T14858] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2231'. [ 634.487403][ T43] usb 1-1: device descriptor read/64, error -71 [ 634.496068][T14860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.508126][T14860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.525932][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 634.708325][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 634.741977][T14862] program syz.4.2233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.757865][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 634.818079][T14860] netlink: 'syz.4.2233': attribute type 11 has an invalid length. [ 634.858172][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 634.858189][ T30] audit: type=1326 audit(1756757723.068:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.010302][ T30] audit: type=1326 audit(1756757723.108:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.040041][ T43] usb 1-1: device descriptor read/64, error -71 [ 635.203249][ T43] usb usb1-port1: attempt power cycle [ 635.219055][ T30] audit: type=1326 audit(1756757723.108:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.308088][ T30] audit: type=1326 audit(1756757723.108:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.331165][ T30] audit: type=1326 audit(1756757723.138:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.354949][ T30] audit: type=1326 audit(1756757723.188:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f866d98e7eb code=0x7ffc0000 [ 635.377579][ T30] audit: type=1326 audit(1756757723.188:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.400162][ T30] audit: type=1326 audit(1756757723.188:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14859 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866d98ebe9 code=0x7ffc0000 [ 635.557691][ T43] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 635.588426][ T43] usb 1-1: device descriptor read/8, error -71 [ 635.847889][ T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 635.878799][ T43] usb 1-1: device descriptor read/8, error -71 [ 635.964406][T14841] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 635.970952][T14841] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 635.998842][ T43] usb usb1-port1: unable to enumerate USB device [ 636.057718][T14841] vhci_hcd vhci_hcd.0: Device attached [ 636.090351][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 636.238015][ T5994] vhci_hcd: vhci_device speed not set [ 636.273194][T14878] loop2: detected capacity change from 0 to 7 [ 636.283463][T14878] Dev loop2: unable to read RDB block 7 [ 636.293143][T14878] loop2: unable to read partition table [ 636.299133][ T5994] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 636.352273][T14878] loop2: partition table beyond EOD, truncated [ 636.376335][T14880] No buffer was provided with the request [ 636.392123][T14880] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2236'. [ 636.420389][T14878] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 637.310234][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO [ 637.366335][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 637.413640][T14865] vhci_hcd: connection reset by peer [ 637.444531][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 637.455597][ T8904] vhci_hcd: stop threads [ 637.509902][ T8904] vhci_hcd: release socket [ 637.530065][ T8904] vhci_hcd: disconnect device [ 637.535475][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 637.678204][ T5948] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 637.749777][ T5948] usb 3-1: USB disconnect, device number 125 [ 638.732066][T14910] netlink: 'syz.5.2247': attribute type 29 has an invalid length. [ 638.757549][ T920] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 638.913798][ T920] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 638.937655][ T920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 638.967014][ T920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 639.004920][ T920] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.032083][T14910] netlink: 'syz.5.2247': attribute type 29 has an invalid length. [ 639.039630][ T920] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.074463][ T920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.130782][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.151863][ T920] usb 3-1: config 0 descriptor?? [ 639.160151][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.808716][ T920] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 639.832892][ T920] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 640.040793][T14929] program syz.4.2252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.059268][T14908] sctp: [Deprecated]: syz.2.2246 (pid 14908) Use of int in max_burst socket option. [ 640.059268][T14908] Use struct sctp_assoc_value instead [ 640.116491][T14931] netlink: 'syz.2.2246': attribute type 3 has an invalid length. [ 640.166881][ T9] usb 3-1: USB disconnect, device number 126 [ 640.427741][T14926] fido_id[14926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 640.816004][T14940] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 641.370638][T14952] No buffer was provided with the request [ 641.380232][T14952] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2257'. [ 641.647772][ T5994] vhci_hcd: vhci_device speed not set [ 641.850341][ T983] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 641.997661][ T983] usb 3-1: device descriptor read/64, error -71 [ 642.068435][T14961] vlan2: entered allmulticast mode [ 642.087062][T14961] macvtap0: entered allmulticast mode [ 642.117736][T14961] veth0_macvtap: entered allmulticast mode [ 642.224977][T14966] tipc: Enabled bearer , priority 10 [ 642.257588][ T983] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 642.364894][T14964] netlink: 'syz.5.2262': attribute type 10 has an invalid length. [ 642.374001][T14964] veth1_vlan: entered allmulticast mode [ 642.386372][T14964] team0: Device veth1_vlan failed to register rx_handler [ 642.507685][ T983] usb 3-1: device descriptor read/64, error -71 [ 642.623387][ T983] usb usb3-port1: attempt power cycle [ 643.017948][ T983] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 643.058199][ T983] usb 3-1: device descriptor read/8, error -71 [ 643.307700][ T983] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 643.338535][ T983] usb 3-1: device descriptor read/8, error -71 [ 643.456101][ T983] usb usb3-port1: unable to enumerate USB device [ 644.015942][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 644.135922][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2272'. [ 644.145426][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2272'. [ 644.162957][T15008] fuse: Unknown parameter '&d' [ 644.343448][T15015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2275'. [ 644.717670][ T983] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 644.854944][T15030] No buffer was provided with the request [ 644.867168][T15030] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2277'. [ 645.137709][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 645.180512][ T983] usb 1-1: config index 0 descriptor too short (expected 53105, got 27) [ 645.190285][ T983] usb 1-1: config 38 has too many interfaces: 113, using maximum allowed: 32 [ 645.199636][ T983] usb 1-1: config 38 has 1 interface, different from the descriptor's value: 113 [ 645.215245][ T983] usb 1-1: config 38 has no interface number 0 [ 645.241585][ T983] usb 1-1: config 38 interface 31 has no altsetting 0 [ 645.465053][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.479460][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.508375][ T983] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=61.3f [ 645.535751][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.552468][ T983] usb 1-1: Product: syz [ 645.582931][ T983] usb 1-1: Manufacturer: syz [ 645.687666][ T983] usb 1-1: SerialNumber: syz [ 645.715242][ T983] ch9200 1-1:38.31: probe with driver ch9200 failed with error -22 [ 646.898144][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2283'. [ 646.951480][T15056] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2283'. [ 647.187650][ T920] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 648.932330][ T43] usb 1-1: USB disconnect, device number 28 [ 680.621363][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.197456][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 752.204113][ C0] rcu: 0-...!: (10521 ticks this GP) idle=616c/1/0x4000000000000000 softirq=99587/99589 fqs=212 [ 752.215981][ C0] rcu: (t=10502 jiffies g=83817 q=104 ncpus=2) [ 752.222230][ C0] rcu: rcu_preempt kthread starved for 8994 jiffies! g83817 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 752.233342][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 752.243297][ C0] rcu: RCU grace-period kthread stack dump: [ 752.249179][ C0] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 752.263787][ C0] Call Trace: [ 752.267101][ C0] [ 752.270028][ C0] __schedule+0x1798/0x4cc0 [ 752.274579][ C0] ? __lock_acquire+0xab9/0xd20 [ 752.279449][ C0] ? __pfx___schedule+0x10/0x10 [ 752.284323][ C0] ? schedule+0x91/0x360 [ 752.288599][ C0] schedule+0x165/0x360 [ 752.292751][ C0] schedule_timeout+0x12b/0x270 [ 752.297593][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 752.302963][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 752.308868][ C0] ? __pfx_process_timeout+0x10/0x10 [ 752.314155][ C0] ? prepare_to_swait_event+0x341/0x380 [ 752.319703][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 752.324570][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 752.330725][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 752.336014][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 752.341916][ C0] ? finish_swait+0xcd/0x1f0 [ 752.346522][ C0] rcu_gp_kthread+0x99/0x390 [ 752.351129][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 752.356374][ C0] ? __kthread_parkme+0x7b/0x200 [ 752.361310][ C0] ? __kthread_parkme+0x1a1/0x200 [ 752.366450][ C0] kthread+0x70e/0x8a0 [ 752.370539][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 752.375747][ C0] ? __pfx_kthread+0x10/0x10 [ 752.380358][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 752.385559][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.390758][ C0] ? __pfx_kthread+0x10/0x10 [ 752.395338][ C0] ret_from_fork+0x3fc/0x770 [ 752.399924][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 752.405030][ C0] ? __switch_to_asm+0x39/0x70 [ 752.409798][ C0] ? __switch_to_asm+0x33/0x70 [ 752.414559][ C0] ? __pfx_kthread+0x10/0x10 [ 752.419137][ C0] ret_from_fork_asm+0x1a/0x30 [ 752.423892][ C0] [ 752.426900][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 752.433231][ C0] Sending NMI from CPU 0 to CPUs 1: [ 752.438440][ C1] NMI backtrace for cpu 1 [ 752.438459][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 752.438494][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.438512][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 752.438537][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 752.438550][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 752.438565][ C1] RAX: 0288f239f5c03a00 RBX: ffffffff819683c8 RCX: 0288f239f5c03a00 [ 752.438577][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880 [ 752.438588][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 752.438601][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa39030 [ 752.438613][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 752.438623][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 752.438636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.438647][ C1] CR2: 00007f0f10866c48 CR3: 0000000058db6000 CR4: 00000000003526f0 [ 752.438661][ C1] Call Trace: [ 752.438669][ C1] [ 752.438676][ C1] default_idle+0x13/0x20 [ 752.438692][ C1] default_idle_call+0x74/0xb0 [ 752.438707][ C1] do_idle+0x1e8/0x510 [ 752.438725][ C1] ? __pfx_do_idle+0x10/0x10 [ 752.438738][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.438765][ C1] cpu_startup_entry+0x44/0x60 [ 752.438779][ C1] start_secondary+0x101/0x110 [ 752.438799][ C1] common_startup_64+0x13e/0x147 [ 752.438824][ C1] [ 752.439443][ C0] CPU: 0 UID: 0 PID: 15013 Comm: syz.0.2274 Not tainted syzkaller #0 PREEMPT(full) [ 752.439461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.439470][ C0] RIP: 0010:fq_dequeue+0x816/0x2650 [ 752.439491][ C0] Code: 4d 89 e6 eb 28 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 dd 8a f8 48 83 3b 00 0f 84 a3 09 00 00 e8 ca 6f 27 f8 <49> 89 de 4d 89 f7 49 c1 ef 03 43 80 3c 2f 00 74 08 4c 89 f7 e8 d1 [ 752.439501][ C0] RSP: 0018:ffffc90000006f20 EFLAGS: 00000246 [ 752.439509][ C0] RAX: ffffffff89983e46 RBX: ffff88807be4c348 RCX: ffff888027388000 [ 752.439516][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000004 [ 752.439521][ C0] RBP: ffffc900000070b0 R08: ffffffff8fa39037 R09: 1ffffffff1f47206 [ 752.439527][ C0] R10: dffffc0000000000 R11: ffffffff8167ba50 R12: ffff88807be4c338 [ 752.439534][ C0] R13: dffffc0000000000 R14: ffff88807be4c358 R15: 0000000000000001 [ 752.439541][ C0] FS: 00007ff40a5526c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 752.439548][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.439554][ C0] CR2: 000020000018d030 CR3: 000000005ef02000 CR4: 00000000003526f0 [ 752.439565][ C0] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000002 [ 752.439576][ C0] DR3: 0000000040000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 752.439587][ C0] Call Trace: [ 752.439595][ C0] [ 752.439628][ C0] ? __pfx_fq_dequeue+0x10/0x10 [ 752.439653][ C0] __qdisc_run+0x23c/0x15f0 [ 752.439668][ C0] ? __dev_queue_xmit+0xd70/0x3b50 [ 752.439687][ C0] __dev_queue_xmit+0x1056/0x3b50 [ 752.439698][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 752.439725][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 752.439759][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 752.439794][ C0] ? __lock_acquire+0xab9/0xd20 [ 752.439812][ C0] ? ip_output+0x2a1/0x3c0 [ 752.439823][ C0] ? ip_output+0x2a1/0x3c0 [ 752.439844][ C0] ? ip_finish_output2+0xae7/0x1160 [ 752.439859][ C0] ip_finish_output2+0xd03/0x1160 [ 752.439878][ C0] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 752.439902][ C0] ? ip_finish_output2+0x452/0x1160 [ 752.439925][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 752.439946][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 752.439958][ C0] ? ip_finish_output+0x33a/0x3f0 [ 752.439969][ C0] ip_output+0x2a1/0x3c0 [ 752.439980][ C0] ? ip_output+0x60/0x3c0 [ 752.439991][ C0] ip_push_pending_frames+0xbe/0x150 [ 752.440004][ C0] __icmp_send+0xf87/0x12d0 [ 752.440023][ C0] ? arch_stack_walk+0xfc/0x150 [ 752.440051][ C0] ? __icmp_send+0x1b9/0x12d0 [ 752.440078][ C0] ? __pfx___icmp_send+0x10/0x10 [ 752.440101][ C0] ? kasan_save_track+0x3e/0x80 [ 752.440113][ C0] ? kasan_save_free_info+0x46/0x50 [ 752.440121][ C0] ? __kasan_slab_free+0x5b/0x80 [ 752.440131][ C0] ? kmem_cache_free+0x18f/0x400 [ 752.440144][ C0] ? neigh_timer_handler+0x949/0x1150 [ 752.440153][ C0] ? call_timer_fn+0x17e/0x5f0 [ 752.440171][ C0] ? __run_timer_base+0x61a/0x860 [ 752.440194][ C0] ? prepare_to_wait_exclusive+0xe7/0x240 [ 752.440212][ C0] ? unix_wait_for_peer+0xfc/0x2e0 [ 752.440230][ C0] ? unix_dgram_sendmsg+0xb7a/0x1850 [ 752.440248][ C0] ? __sock_sendmsg+0x219/0x270 [ 752.440258][ C0] ? ____sys_sendmsg+0x52d/0x830 [ 752.440277][ C0] ipv4_link_failure+0x64e/0xa30 [ 752.440294][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 752.440313][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 752.440332][ C0] arp_error_report+0x115/0x160 [ 752.440355][ C0] neigh_invalidate+0x235/0x460 [ 752.440383][ C0] neigh_timer_handler+0x949/0x1150 [ 752.440403][ C0] call_timer_fn+0x17e/0x5f0 [ 752.440416][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 752.440424][ C0] ? call_timer_fn+0xbe/0x5f0 [ 752.440437][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 752.440454][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 752.440475][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.440495][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 752.440514][ C0] __run_timer_base+0x61a/0x860 [ 752.440534][ C0] ? ktime_get+0x3e/0x1f0 [ 752.440553][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 752.440564][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 752.440582][ C0] run_timer_softirq+0xb7/0x180 [ 752.440594][ C0] handle_softirqs+0x283/0x870 [ 752.440610][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 752.440632][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 752.440654][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 752.440676][ C0] __irq_exit_rcu+0xca/0x1f0 [ 752.440692][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 752.440705][ C0] irq_exit_rcu+0x9/0x30 [ 752.440713][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 752.440726][ C0] [ 752.440729][ C0] [ 752.440733][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 752.440743][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 752.440759][ C0] Code: 74 05 e8 eb f9 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 9f 13 f6 65 8b 05 0c 22 24 07 85 c0 74 40 48 c7 04 24 0e 36 [ 752.440773][ C0] RSP: 0018:ffffc90004927500 EFLAGS: 00000206 [ 752.440787][ C0] RAX: 2ab977935da6ba00 RBX: 0000000000000a06 RCX: 2ab977935da6ba00 [ 752.440799][ C0] RDX: 0000000000000006 RSI: ffffffff8d9b8241 RDI: 0000000000000001 [ 752.440810][ C0] RBP: ffffc90004927598 R08: ffffffff8fa39037 R09: 1ffffffff1f47206 [ 752.440822][ C0] R10: dffffc0000000000 R11: fffffbfff1f47207 R12: dffffc0000000000 [ 752.440834][ C0] R13: 1ffff92000924ecb R14: ffff888066eb5380 R15: 1ffff92000924ea0 [ 752.440857][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 752.440870][ C0] ? hook_unix_may_send+0x201/0x5f0 [ 752.440885][ C0] ? prepare_to_wait_exclusive+0x8d/0x240 [ 752.440896][ C0] prepare_to_wait_exclusive+0xe7/0x240 [ 752.440919][ C0] unix_wait_for_peer+0xfc/0x2e0 [ 752.440943][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 752.440964][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 752.440993][ C0] unix_dgram_sendmsg+0xb7a/0x1850 [ 752.441018][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 752.441035][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.441046][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 752.441066][ C0] __sock_sendmsg+0x219/0x270 [ 752.441089][ C0] ____sys_sendmsg+0x52d/0x830 [ 752.441113][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.441139][ C0] ? import_iovec+0x74/0xa0 [ 752.441152][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 752.441163][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.441194][ C0] ? __might_fault+0xb0/0x130 [ 752.441216][ C0] __sys_sendmmsg+0x227/0x430 [ 752.441241][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 752.441256][ C0] ? do_futex+0x333/0x420 [ 752.441285][ C0] ? __sys_connect+0x38d/0x440 [ 752.441309][ C0] ? rcu_is_watching+0x15/0xb0 [ 752.441321][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 752.441332][ C0] do_syscall_64+0xfa/0x3b0 [ 752.441340][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.441358][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.441374][ C0] ? clear_bhb_loop+0x60/0xb0 [ 752.441395][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.441411][ C0] RIP: 0033:0x7ff40978ebe9 [ 752.441428][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.441438][ C0] RSP: 002b:00007ff40a552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 752.441447][ C0] RAX: ffffffffffffffda RBX: 00007ff4099c5fa0 RCX: 00007ff40978ebe9 [ 752.441454][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 752.441459][ C0] RBP: 00007ff409811e19 R08: 0000000000000000 R09: 0000000000000000 [ 752.441464][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.441470][ C0] R13: 00007ff4099c6038 R14: 00007ff4099c5fa0 R15: 00007ff409aefa28 [ 752.441484][ C0] [ 754.359535][ C0] sched: DL replenish lagged too much