last executing test programs: 23m35.164370495s ago: executing program 32 (id=65): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='cachefiles_ondemand_copen\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$inet6(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x86b0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000800)=""/113, 0x71}, 0x10}], 0x4000099, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 23m3.279117504s ago: executing program 33 (id=147): bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='cachefiles_ondemand_copen\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) socket$inet6(0xa, 0x2, 0x0) socket(0xa, 0x1, 0x86b0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000380)=@nl=@unspec, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000800)=""/113, 0x71}, 0x10}], 0x4000099, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000006c9f0000000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 19m31.712003256s ago: executing program 34 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, {0x8, 0x0, 0x10000000000, 0xa5, 0x6bf5, 0xfffffffffffffffe, 0x6, 0x10, 0x4, 0x8000, 0x180000, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 18m11.494648579s ago: executing program 35 (id=968): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 17m51.182897327s ago: executing program 8 (id=1104): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 17m49.842064104s ago: executing program 8 (id=1111): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m48.852458254s ago: executing program 36 (id=1111): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m37.450278055s ago: executing program 7 (id=1192): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0)) unshare(0x26060400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15m36.08471319s ago: executing program 37 (id=1175): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xcd31f3fc0ec05e03, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$nbd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40) r2 = socket$netlink(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x147a, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x94, 0x7200, 0x4, &(0x7f0000000180)="86ab9bd9"}], 0x1}) 15m35.796832628s ago: executing program 38 (id=1190): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) write$ppp(r6, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000c166a0108304341276ff000008010902120001000200000904"], 0x0) 15m34.918728354s ago: executing program 39 (id=1192): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0)) unshare(0x26060400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15m34.50309669s ago: executing program 40 (id=1193): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e03b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d04e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09509f8a88c3299ffbfc47493a825980560960a50fe3fc3db6f3432861f723b025b057ad4de6bbd52d8861d9de72a991dc3be7ccfba4264a0cbc6b2554f5a1a8fccdd67c6b2e2f720dbac91a5a0d414ceb54733539dce1462f4617102c375083602f12449760c9a4bf334d9b30aa321cb39850d7817a474508283d09660ddd547a22d129f2c63da89a7be016c8a24f086c563c5eec3c0d10f6fc7c760f34225ad48a74387dfb5c14196420fc42e5804d84416dcbdc21d9715491bbe757ee3dfa9c3744758d5cb2fb8d2aea11e7b9a67ecc68e1e53e2c69cea8cab48e2e65f5172d2839b7bcbb7e2175185f40f7d2c5f3247ca62a558f2c286220a0bddd6e6f7fb1c504e2cd9954821feccbf8042a1f55427f7c55ccec10e5f5f624ede6789769fcd9f866fab88755ec919b2d7286ecb28385986bfda52ea4070d548a4a57e64b5ed9218e02eb6c8780ca333e5ae88c2ddf9ae96574a24e87605ddbc5c520"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x2, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r0) 3m0.447783237s ago: executing program 41 (id=4378): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x4533, 0x10000, 0x1, 0x200}, &(0x7f0000000140), &(0x7f0000000100)) io_uring_enter(r1, 0x2ded, 0x4000, 0x48, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000280)=0x8000) 2m59.641538509s ago: executing program 3 (id=4385): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m59.254439714s ago: executing program 3 (id=4386): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x40000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000980)={0x400, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x58}}}}, [@NL80211_ATTR_TESTDATA={0xf9, 0x45, "e903928256ac92b5891bbc437b2a9e19c9ef2ccbcc28f2c2924750607ca36ac0a47885d4ff0b38b18514c9dd4d2abe0ac3364a35b15163e47cb3b37af73d02aaa8d0d42d6dc4ecd1b4cdedb838081edbaf1a140e553c31fe1f95828212e649b45adc7ea265019471c95439e9cc38adc0cab419c9a158498eb0f0be801e36b77a8c82135cbc011f575ed61e3aab0e95d9ac0d41cae52967000422d85a152dc10f56a62cd0b733a739707fa8b142070420da746b186e6679ce7da0cb25b26de65ffa18d4bc37ad6ff3b6686f2fe05d8f7a677c9bac35ec164a59cedf84fda3aba05e0e99a5c4a03c9014ce496445ab9ea17b00f41ae6"}, @NL80211_ATTR_TESTDATA={0xb8, 0x45, "250f744c006601a4b4b69072c1a67b30a3f91ce027fe941fe47a86077ad7a5e574438f1b9be55d699e9cdb662bb82113a7f0bd932c7cd940fa1aa522bfb0c336d0beeece855d8b621cf7783887d48a732aeb601198518c6ba1032f300f6f760f2c074dc640e859ced5607bec272bfd6bb074f8d18323fa3fba52b63267e07fa1066c13a260946ac54f48e810f417a76b29d173d189614de2b416c36036cac59ce8c6415439dc31a404ff546b20fe791b252b318f"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "f94e2c11ed080ffc2faaf7d93ba5b03cc7013804758810107122093067945871096136364e7d8db8523908bd85d4c07f596295b608465f2e40fd1a140b9ce818aa11beeed8a149afc2a68297da1fb67760f9649795b5125310569e"}, @NL80211_ATTR_TESTDATA={0x53, 0x45, "4b6170704dde408adfb030b8fc1a3288dabe732363425f83c6433095a885d8c469b86e3ab2a98c4337fc334c68eb045842bcf5f8135210cb1d31c1512fb4704d9844e5ae9d62088055fa9ce40fc24e"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x96, 0x45, "17918c1adad5e6ac96eca210eb0f7705e689645b511335dfe49d54276bcf4a70f23ca4de28857186335abdbd276cb398bf66d439eff58102ecbaa7c00cd798b54326b08fbdd76c70132d37a1daffd888eb4cb7060475034c5c2d7bbc18e04147360b25d53a50e749716607c16cea6d8c380d182fd8855e342a9d8e3546343984b38bd5809de483c0dd9e3d666778f0460ba1"}, @NL80211_ATTR_TESTDATA={0xdb, 0x45, "a845b18515e7324fd5691acc62f1b92fe7601a9f705713c603a5b4151c56aa92b4747aab884258c069a6be961807162995336b2d53b087dd72e60928e9fb4d5d766fc4595e145c670ba9d2c9df3bb6d8e0435c42008d5498541e3f8f3849f1d3dcad5cecc4855bab20205fbbb65e249e326fd17c4953afa49739bc542cb762164fb2fcc627a8a0325f5ef50b1e0854af334707085ef00d569d3f61e4c79bdab79388bd1173db57de765e7e83ff941f69d6311cdf4eb19221dfee7f7c7346578d7375ac5f1cebc0482229ffa9e30ef35207bcd19d7d7243"}]}, 0x400}, 0x1, 0x0, 0x0, 0x20004010}, 0x50) gettid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 2m57.415881912s ago: executing program 3 (id=4392): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x41, 0x0, 0x7, r1, 0x0, 0x0, 0x8001, 0x0, 0x0, r1}]) 2m56.758749126s ago: executing program 42 (id=4392): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000400)={0x0, 0x0, 0x41, 0x0, 0x7, r1, 0x0, 0x0, 0x8001, 0x0, 0x0, r1}]) 2m53.972424049s ago: executing program 5 (id=4397): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x4000080) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2m53.351108058s ago: executing program 5 (id=4398): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7ffe, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x3, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7c, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200400c4}, 0x14008850) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m52.368006182s ago: executing program 43 (id=4399): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000190c0), 0x121381, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad89600716799a64be0304000000cddf00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r0, &(0x7f0000000640), 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup(r4) read$FUSE(r5, &(0x7f0000004400)={0x2020}, 0x2020) 2m51.749148607s ago: executing program 5 (id=4402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000240)=@x86={0x49, 0x3c, 0x5, 0x0, 0x401, 0x0, 0x4, 0x7f, 0xd, 0x6, 0x7, 0x2, 0x0, 0x200, 0x7, 0x1, 0x5, 0xc, 0x9, '\x00', 0xf5, 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 2m51.412812525s ago: executing program 5 (id=4403): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m51.314401019s ago: executing program 5 (id=4405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x11, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESOCT=r0, @ANYBLOB="2e398adccdbb2a85fb29dca3f611e8cbc021ab23825f4d50cd29fd4e9dc152827b0dc4eff0e02c836635175b981ac5cbe75cfdf8235d1ab8804f28c62c8f187c007f0686"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad", 0xf}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2m50.892492068s ago: executing program 2 (id=4407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x401) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) r2 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x5afa, 0x100, 0x22, 0x335}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 2m50.862125208s ago: executing program 5 (id=4408): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 2m50.799373338s ago: executing program 2 (id=4409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7ffe, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x3, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7c, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x41, 0x3, 0x3, '\x00', 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200400c4}, 0x14008850) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m50.278604253s ago: executing program 44 (id=4408): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 2m49.406119607s ago: executing program 2 (id=4411): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xf}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m48.994338355s ago: executing program 2 (id=4412): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m48.925131837s ago: executing program 2 (id=4413): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x40, 0x2, 0x800000}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 2m48.49243447s ago: executing program 2 (id=4414): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 2m48.266667433s ago: executing program 45 (id=4414): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 2m30.793347675s ago: executing program 8 (id=4379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000206030000000000000000000000000005000100070000000900020073797a30000000000c000780080012400000000605000500004441be776a3d243b768a00000005000400200000000d000300686173683a6d616300000000"], 0x54}}, 0x0) syz_open_dev$media(&(0x7f00000004c0), 0x5, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x1c, 0x1d, 0x107, 0x0, 0x0, {0x7, 0x7c}, [@typed={0x8, 0x108, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x3ff, 0x32315559, 0x8, 0x203, 0x2, 0x7, 0x6, 0x1, 0x2, 0x1, 0x1}}) 2m29.212642497s ago: executing program 8 (id=4419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m29.065839967s ago: executing program 8 (id=4421): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x8e, 0xec, 0x17, 0x8, 0x13d8, 0x21, 0xaf79, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x80, 0xb0, 0x80, [{{0x9, 0x4, 0x92, 0x3, 0x0, 0x82, 0x72, 0x19, 0x4}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r3, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x16, 0x3, "2ef871"}, 0x0, 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) 2m28.977674727s ago: executing program 7 (id=4410): socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0xd9c, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) 2m28.634879091s ago: executing program 8 (id=4424): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x8b0040, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) listen(0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) 2m28.137504665s ago: executing program 46 (id=4424): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x8b0040, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) listen(0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) 2m27.838127921s ago: executing program 7 (id=4428): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xf}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m26.632718194s ago: executing program 7 (id=4429): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m26.462438391s ago: executing program 7 (id=4431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}, 0x1, 0x0, 0x0, 0x1}, 0x4008090) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x2101}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) 2m25.344376596s ago: executing program 7 (id=4438): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xf}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m24.844416745s ago: executing program 47 (id=4438): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x16de0}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x20, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xf}, {}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m10.547467326s ago: executing program 3 (id=4440): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 2m10.218217003s ago: executing program 3 (id=4487): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2m8.814748449s ago: executing program 3 (id=4490): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[], 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x30, &(0x7f0000000300)=""/130, &(0x7f0000000040)=0x82) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r1) 2m8.199912355s ago: executing program 48 (id=4490): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[], 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x30, &(0x7f0000000300)=""/130, &(0x7f0000000040)=0x82) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r1) 6.914931212s ago: executing program 6 (id=4938): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) pread64(r2, 0x0, 0x0, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000000101040000000000000000020000002400028014"], 0x5c}}, 0x0) close(r0) 6.464410902s ago: executing program 9 (id=4940): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x10], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x3, 0x5c4, 0x0, 0xfffc, 0x0, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 6.109526123s ago: executing program 9 (id=4941): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8162120960001", 0xe5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3d", 0xe7}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67", 0xde}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666d", 0x23}], 0x4}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.971646524s ago: executing program 9 (id=4942): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) 5.664610149s ago: executing program 9 (id=4945): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0), 0x0, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 5.556055033s ago: executing program 1 (id=4946): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="ebffffffffffffff28001280"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.532567615s ago: executing program 9 (id=4947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44050) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) r6 = syz_open_dev$ndb(0x0, 0x0, 0x88400) ioctl$BLKZEROOUT(r6, 0x127f, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, 0x0, 0x1) write(0xffffffffffffffff, 0x0, 0x0) splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 5.163041508s ago: executing program 6 (id=4950): socket(0x1e, 0x2, 0x0) r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000380)=0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f0102030109021200"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000340)=ANY=[], 0x0}, 0x0) 5.065269446s ago: executing program 1 (id=4952): sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000fc, 0x0) 4.93891578s ago: executing program 1 (id=4954): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1000}, &(0x7f00000001c0), &(0x7f0000000280)) ppoll(&(0x7f0000000000)=[{r0, 0xa100}, {r2, 0x8444}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) 4.789153764s ago: executing program 1 (id=4955): syz_emit_ethernet(0x0, 0x0, 0x0) 4.61676926s ago: executing program 1 (id=4956): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000240)=0x6f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 4.457993448s ago: executing program 4 (id=4957): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000013c0), 0x0, 0xc0) close_range(r0, 0xffffffffffffffff, 0x0) 4.349469912s ago: executing program 4 (id=4958): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 4.151344195s ago: executing program 4 (id=4959): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x4, 0x3}, 0x10) 3.99610355s ago: executing program 4 (id=4960): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000189000/0x4000)=nil, 0x4000, 0x1000000, 0x112, r3, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='&)$#,!*\x00', &(0x7f00000003c0)='/dev/uhid\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x0, 0xea4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) mknodat(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', 0x8, 0x8c) read$FUSE(r4, 0x0, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000000)={0x10, 0xfffffffffffffffe}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1009, 0xfffd, 0x0, 0xffff}, 'syz0\x00', 0x26}) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.637108164s ago: executing program 0 (id=4961): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) 3.461873756s ago: executing program 9 (id=4962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000), 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$rfkill(r2, &(0x7f0000000040), 0x8) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031fcd1b08"], 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000010c0)=[@in6={0xa, 0x4e21, 0xad, @private0, 0x8001}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}]}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getrusage(0xffffffffffffffff, &(0x7f0000000680)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r9, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) 3.367910417s ago: executing program 0 (id=4963): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup(r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="ebffffffffffffff28001280"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.822281439s ago: executing program 0 (id=4964): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="c45cf7035c053bdf388b125b37fbf978a4320284", 0x14, 0x44088881, 0x0, 0x0) 2.620496038s ago: executing program 0 (id=4965): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r4, 0xfffffffffffffa6f, 0xfffffffc}) 2.011305819s ago: executing program 6 (id=4966): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) r6 = dup(r0) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r7, 0xffffffffffffffff, 0x3, 0x0, @val=@perf_event={0x3}}, 0x18) 2.002981158s ago: executing program 1 (id=4967): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) syz_open_dev$media(&(0x7f0000000080), 0x6, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x6b929545a606890f) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc1205531, &(0x7f0000002680)=""/4104) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x4, "02ab0e4b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 887.351653ms ago: executing program 6 (id=4968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0x2, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000280)={[{0x48, 0x20fe, 0x6, 0x7, 0x4c, 0x9, 0x2, 0xc3, 0x4, 0x81, 0x5, 0x5, 0x9}, {0x711, 0x4, 0x8, 0x1, 0x33, 0xc, 0x7, 0x6, 0xfc, 0xa0, 0x84, 0xbb, 0x3}, {0xfffffffc, 0xe0, 0xc, 0x2, 0x3, 0x3, 0x2, 0xf, 0x8, 0xf, 0x7, 0x3, 0x9}], 0x2}) 816.510638ms ago: executing program 0 (id=4969): syz_emit_ethernet(0x5d, &(0x7f00000024c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x27, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x1f, 0x0, @gue={{0x1, 0x1, 0x0, 0x6, 0x0, @void}, "8fbab2e630c3e6a031fd2ad9265431d968f102"}}}}}}}, 0x0) 816.145831ms ago: executing program 4 (id=4970): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 474.428287ms ago: executing program 0 (id=4971): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x74, &(0x7f0000001940)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x4, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "f56a1f578859"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x8, 0x2, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x6}, @acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc, 0x6, 0x9}}}}}]}}]}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x2, 0x80c, 0x1000000}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x18}], 0x30, 0x8810}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x9, 0xf2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xff, 0x3}}]}}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfb, 0xc, 0x6, 0x8, 0x1}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x9, 0x5}]}, 0x6, [{0x2e, &(0x7f0000001c80)=ANY=[@ANYBLOB="2e03c6453a8259241ff169058e52de2d585ac4b95b24bb430b9a850df1bfe02cd1dbad65923cefa233c9ab4c57c2d76b683064b0"]}, {0x3e, &(0x7f00000011c0)=@string={0x3e, 0x3, "77e64da6a1bbb9304a24d55f04d797a33be252b104678cabb44b5860dc88a0bc547957aa887ef4400a8047d99867e90578abeeff26bd8052ce607bca"}}, {0x101, &(0x7f0000001200)=@string={0x101, 0x3, "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"}}, {0x9c, &(0x7f0000001340)=@string={0x9c, 0x3, "73ac7aa8ecaae53429b32e9502c9cf8368c5feefe43df527298448b94c4c71367554b5fceec2d3686330de55759f075778147d1f12190a4e085ed01dba7317d10f447276d18cafd6af663da6a81b39c046a097f6939a32c312df666a62525224f6077d605778428d0a0130c050561b58c8ae8295c00841330a6e426854cbfb35873f614ecda99450cb94ede561e80c63be7fdc2883bbb4632f0c"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x820}}, {0xed, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000040), 0x105040) r5 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt(r5, 0x110, 0x3, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_NUM_WAITING(r6, 0x227d, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_pidfd_open(0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) dup(r10) process_madvise(r7, &(0x7f0000000140)=[{&(0x7f0000000000)='v', 0x1}], 0x1, 0x66, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) 446.212409ms ago: executing program 4 (id=4972): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 116.467838ms ago: executing program 6 (id=4973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x509, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 0s ago: executing program 6 (id=4974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x1000}, &(0x7f00000001c0), &(0x7f0000000280)) ppoll(&(0x7f0000000000)=[{r0, 0xa100}, {r2, 0x8444}], 0x2, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) kernel console output (not intermixed with test programs): 9][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1429.331967][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1429.358998][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1429.382451][ T9] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1429.393272][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.403561][ T9] usb 1-1: Product: syz [ 1429.420074][ T9] usb 1-1: Manufacturer: syz [ 1429.430696][ T9] usb 1-1: SerialNumber: syz [ 1429.452499][ T9] usb 1-1: config 0 descriptor?? [ 1429.470355][ T9] usb 1-1: no audio or video endpoints found [ 1429.499817][T20888] hsr_slave_0: entered promiscuous mode [ 1429.534587][T20888] hsr_slave_1: entered promiscuous mode [ 1429.541680][T20888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1429.550034][T20888] Cannot create hsr debugfs directory [ 1429.557597][T21009] hsr0: entered promiscuous mode [ 1429.663034][ T5142] Bluetooth: hci0: command tx timeout [ 1429.673649][ T9] usb 1-1: USB disconnect, device number 4 [ 1429.700300][ T7393] hsr_slave_0: left promiscuous mode [ 1429.710711][ T7393] hsr_slave_1: left promiscuous mode [ 1429.721349][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1429.732997][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1429.756930][T21013] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1429.800029][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1429.810242][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.908458][ T7393] veth1_macvtap: left promiscuous mode [ 1429.918157][ T7393] veth0_macvtap: left promiscuous mode [ 1429.930281][ T7393] veth1_vlan: left promiscuous mode [ 1430.055177][ T7393] veth0_vlan: left promiscuous mode [ 1430.528267][T21017] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 1430.596184][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4465'. [ 1431.069895][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 1431.137548][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 1431.700894][T21008] hsr0: left promiscuous mode [ 1431.724523][T20924] hsr_slave_0: entered promiscuous mode [ 1431.740935][T20924] hsr_slave_1: entered promiscuous mode [ 1431.747090][ T5142] Bluetooth: hci0: command tx timeout [ 1431.765820][T21017] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1431.865454][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4467'. [ 1432.353556][T21036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1432.383365][T21036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1432.633519][T10415] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1432.805724][T10415] usb 1-1: not running at top speed; connect to a high speed hub [ 1432.831599][T10415] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1432.849838][T10415] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1432.859372][T10415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.867711][T10415] usb 1-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1432.902595][T20924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1432.910544][T10415] usb 1-1: Manufacturer: ࡡ [ 1432.915420][T10415] usb 1-1: SerialNumber: ࠊ [ 1432.931319][T20924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1432.949345][T20924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1432.951917][T21038] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1433.002302][T20924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1433.214228][T10639] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1433.221135][T20924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.291637][T20924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.342585][T10415] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1433.349972][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.358128][ T7393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.366254][ T30] audit: type=1326 audit(1749288517.832:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21039 comm="syz.4.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7fc00000 [ 1433.380140][T10415] usb 1-1: USB disconnect, device number 5 [ 1433.410489][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.417748][ T5948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.427863][T10639] usb 7-1: Using ep0 maxpacket: 32 [ 1433.460679][T10639] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1433.490011][T10639] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1433.529307][T10639] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1433.548262][T10639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.567378][T10639] usb 7-1: Product: syz [ 1433.575869][T10639] usb 7-1: Manufacturer: syz [ 1433.799081][T10639] usb 7-1: SerialNumber: syz [ 1433.811651][T10639] usb 7-1: config 0 descriptor?? [ 1433.821832][T10639] usb 7-1: no audio or video endpoints found [ 1434.060347][T20888] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1434.405530][T20888] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1434.522031][T16397] usb 7-1: USB disconnect, device number 7 [ 1434.613282][T20888] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1434.698275][T20888] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1434.725523][T21058] netlink: 'syz.0.4476': attribute type 1 has an invalid length. [ 1434.773030][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1434.971214][T20888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.049464][T20888] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.116351][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.123628][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.170622][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.177864][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.202266][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1435.297671][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1435.337675][T20924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.538890][T20924] veth0_vlan: entered promiscuous mode [ 1435.555670][T20924] veth1_vlan: entered promiscuous mode [ 1435.631761][T20924] veth0_macvtap: entered promiscuous mode [ 1435.646140][T20924] veth1_macvtap: entered promiscuous mode [ 1435.694737][T20924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.763742][T10639] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1435.799418][T20924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.845158][T20924] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.878585][T20924] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.935256][T20924] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.949553][T20924] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.965976][T10639] usb 5-1: not running at top speed; connect to a high speed hub [ 1436.008145][T10639] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1436.038032][T10639] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1436.048108][T10639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.076882][T10639] usb 5-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1436.112217][T10639] usb 5-1: Manufacturer: ࡡ [ 1436.117800][T10639] usb 5-1: SerialNumber: ࠊ [ 1436.153210][T20888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1436.167230][T21091] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1436.345110][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.466536][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.687558][T20888] veth0_vlan: entered promiscuous mode [ 1436.741302][T20888] veth1_vlan: entered promiscuous mode [ 1436.789671][T10639] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1436.856200][T10639] usb 5-1: USB disconnect, device number 4 [ 1436.878632][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.917287][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.062412][T20888] veth0_macvtap: entered promiscuous mode [ 1437.159172][T20888] veth1_macvtap: entered promiscuous mode [ 1437.287550][T20888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.357034][T20888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.399061][T20888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.448839][T20888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.489669][T20888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.506457][T20888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.081286][ T7393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.194868][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.202753][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.296565][ T7393] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.375671][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.400438][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.437183][ T7393] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.567313][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 1440.290361][ T7393] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.523267][T21137] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1440.524866][ T30] audit: type=1800 audit(1749288524.992:1511): pid=21137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.4495" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1440.532660][T21137] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1440.565490][T21137] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1440.828627][T14993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1440.851142][T14993] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1440.860339][T14993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1440.880963][T14993] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1441.013090][ T7393] bridge_slave_1: left allmulticast mode [ 1441.043060][ T7393] bridge_slave_1: left promiscuous mode [ 1441.048947][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.134837][T20725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1441.411519][ T7393] bridge_slave_0: left allmulticast mode [ 1441.567354][ T7393] bridge_slave_0: left promiscuous mode [ 1441.730774][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.745070][T21154] netlink: 'syz.1.4499': attribute type 1 has an invalid length. [ 1442.015342][T16397] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1442.175888][T16397] usb 1-1: not running at top speed; connect to a high speed hub [ 1442.190174][T16397] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1442.208385][T16397] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1442.219788][T16397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.231530][T16397] usb 1-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1442.266214][T16397] usb 1-1: Manufacturer: ࡡ [ 1442.271001][T16397] usb 1-1: SerialNumber: ࠊ [ 1442.294006][T21153] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1442.446418][ T7393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1442.458732][ T7393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1442.473680][ T7393] bond0 (unregistering): Released all slaves [ 1442.762573][T16397] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1442.805260][T16397] usb 1-1: USB disconnect, device number 6 [ 1443.013482][T20593] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1443.182936][T20593] usb 5-1: Using ep0 maxpacket: 8 [ 1443.202021][T20593] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1443.217388][T20593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.232977][T20593] usb 5-1: Product: syz [ 1443.238513][T20593] usb 5-1: Manufacturer: syz [ 1443.245123][T20593] usb 5-1: SerialNumber: syz [ 1443.263028][ T5142] Bluetooth: hci0: command tx timeout [ 1443.273778][T20593] usb 5-1: config 0 descriptor?? [ 1443.499429][T20593] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1443.581200][ T7393] hsr_slave_0: left promiscuous mode [ 1443.597479][ T7393] hsr_slave_1: left promiscuous mode [ 1443.636681][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.644651][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.653994][ T7393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.671146][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.711180][ T7393] veth1_macvtap: left promiscuous mode [ 1443.719652][ T7393] veth0_macvtap: left promiscuous mode [ 1443.729839][ T7393] veth1_vlan: left promiscuous mode [ 1443.735577][ T7393] veth0_vlan: left promiscuous mode [ 1445.352922][ T5142] Bluetooth: hci0: command tx timeout [ 1445.630484][T21203] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 1445.688051][T20593] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1445.708481][T20593] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1445.730465][T20593] usb 5-1: media controller created [ 1445.840672][T20593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1445.997069][T20593] i2c i2c-6: Added multiplexed i2c bus 8 [ 1446.028060][T20593] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1446.035937][T20593] usb 5-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1446.070790][T20593] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1446.089480][ T7393] team0 (unregistering): Port device team_slave_1 removed [ 1446.178223][T20593] DVB: Unable to find symbol r820t_attach() [ 1446.200644][ T7393] team0 (unregistering): Port device team_slave_0 removed [ 1447.040593][T21142] chnl_net:caif_netlink_parms(): no params data found [ 1447.160066][T21198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1447.188533][T21198] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1447.226696][T21198] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1447.250153][T20593] usb 5-1: USB disconnect, device number 5 [ 1447.330389][T21198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1447.388528][T21198] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1447.472970][ T5142] Bluetooth: hci0: command tx timeout [ 1447.594172][T21198] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1447.626715][T21142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.363370][T21198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1448.380488][T21198] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1448.389912][T21142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.408818][T21214] syz.1.4514 (21214): drop_caches: 2 [ 1448.415319][T21198] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1448.415553][T21142] bridge_slave_0: entered allmulticast mode [ 1448.459823][T21142] bridge_slave_0: entered promiscuous mode [ 1448.487512][T21198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1448.496381][T21198] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1448.504282][T21142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.531659][T21142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.555336][T21198] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1448.577703][T21142] bridge_slave_1: entered allmulticast mode [ 1448.585942][T21198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1448.609630][T21198] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1448.631571][T21142] bridge_slave_1: entered promiscuous mode [ 1448.686229][T21198] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1448.757983][T21142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.786553][T21142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.963160][T10639] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1449.014186][T21142] team0: Port device team_slave_0 added [ 1449.036850][T21142] team0: Port device team_slave_1 added [ 1449.146134][T10639] usb 1-1: not running at top speed; connect to a high speed hub [ 1449.165775][T10639] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1449.183103][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 1449.185604][T10639] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1449.236824][T21142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.303826][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.330928][T10639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.348801][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 1449.366905][T10639] usb 1-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1449.453289][T21142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.484517][T10639] usb 1-1: Manufacturer: ࡡ [ 1449.503112][T21142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.513075][T10639] usb 1-1: SerialNumber: ࠊ [ 1449.535024][T21235] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 1449.541028][T21142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.583445][T21224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1449.596142][T21142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.808503][T21142] hsr_slave_0: entered promiscuous mode [ 1449.828861][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1449.854887][T21142] hsr_slave_1: entered promiscuous mode [ 1449.971766][T10639] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1450.083927][T10639] usb 1-1: USB disconnect, device number 7 [ 1450.383127][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1450.435008][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1450.486803][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802759d000: rx timeout, send abort [ 1450.543484][ T5142] Bluetooth: hci3: command 0x0c1a tx timeout [ 1450.603018][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1450.614465][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1450.624134][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 1450.630628][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.639336][ T9] usb 5-1: Product: syz [ 1450.645179][ T9] usb 5-1: Manufacturer: syz [ 1450.652205][ T9] usb 5-1: SerialNumber: syz [ 1450.661928][ T9] usb 5-1: config 0 descriptor?? [ 1450.739769][T21142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1450.754256][T21142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1450.768618][T21142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1450.781011][T21142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1450.892385][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1450.932167][T21142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.960249][T21142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.979161][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.986440][ T7393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.986962][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031501400: rx timeout, send abort [ 1451.002206][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802759d000: abort rx timeout. Force session deactivation [ 1451.030539][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.037861][ T7393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.273593][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 1451.332987][T20593] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1451.372179][T21142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.423094][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 1451.484426][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a63e400: rx timeout, send abort [ 1451.493164][T20593] usb 1-1: Using ep0 maxpacket: 32 [ 1451.501975][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031501400: abort rx timeout. Force session deactivation [ 1451.518137][T20593] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1451.527266][T20593] usb 1-1: config 1 has no interface number 0 [ 1451.536734][T20593] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1451.550980][T20593] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1451.561848][T20593] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1451.576007][T20593] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 1451.590721][T20593] usb 1-1: config 1 has no interface number 0 [ 1451.597148][T20593] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1451.612685][T20593] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1451.633305][T20593] usb 1-1: config 1 interface 236 has no altsetting 0 [ 1451.649210][T20593] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1451.659782][T20593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.674842][T20593] usb 1-1: Product: syz [ 1451.679105][T20593] usb 1-1: Manufacturer: syz [ 1451.689465][T20593] usb 1-1: SerialNumber: syz [ 1451.707846][T20593] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 1451.868713][T21142] veth0_vlan: entered promiscuous mode [ 1451.881728][T21142] veth1_vlan: entered promiscuous mode [ 1451.917872][T10568] usb 1-1: USB disconnect, device number 8 [ 1451.929047][T21142] veth0_macvtap: entered promiscuous mode [ 1451.946114][T21142] veth1_macvtap: entered promiscuous mode [ 1451.989691][T21142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.997830][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802a63e400: abort rx timeout. Force session deactivation [ 1452.040988][T21142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.062708][T21142] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.075922][T21142] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.087874][T21142] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.099020][T21142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.239321][ T3981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.248960][ T3981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.331561][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1452.343114][T17264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.364974][T17264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.380705][ T9] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1452.457920][ T9] usb 5-1: media controller created [ 1452.467379][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1452.507192][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.584633][ T9] i2c i2c-6: Added multiplexed i2c bus 8 [ 1452.590455][ T9] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1452.604010][ T9] usb 5-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1452.633040][T20725] Bluetooth: hci3: command 0x0c1a tx timeout [ 1452.641271][ T9] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1452.661084][T21278] netlink: 'syz.0.4531': attribute type 1 has an invalid length. [ 1452.705668][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 1452.748718][ T9] DVB: Unable to find symbol r820t_attach() [ 1452.752067][T21278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1452.925873][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4532'. [ 1453.347595][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 1453.504549][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 1454.036273][ T9] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1454.127541][T16397] usb 5-1: USB disconnect, device number 6 [ 1454.274813][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 1454.290697][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1454.312449][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.325271][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.341732][ T9] usb 10-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1454.447610][ T9] usb 10-1: Manufacturer: ࡡ [ 1454.458111][ T9] usb 10-1: SerialNumber: ࠊ [ 1454.498862][T21292] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1454.553054][T20725] Bluetooth: hci4: command 0x0c1a tx timeout [ 1454.563165][T10568] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1454.709595][T20725] Bluetooth: hci3: command 0x0c1a tx timeout [ 1454.722593][T21315] netlink: 'syz.6.4543': attribute type 1 has an invalid length. [ 1454.783382][T20725] Bluetooth: hci0: command 0x0c1a tx timeout [ 1455.211174][T21315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1455.520871][ T9] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1455.542866][T10568] usb 1-1: Using ep0 maxpacket: 16 [ 1455.559388][T10568] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1455.587992][ T9] usb 10-1: USB disconnect, device number 4 [ 1455.632211][T10568] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 104 [ 1455.648940][T10568] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 16 [ 1455.704919][T10568] usb 1-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.754412][T10568] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1455.788724][T10568] usb 1-1: string descriptor 0 read error: -22 [ 1455.803724][T10568] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1455.820828][T10568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.478083][T21312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1456.495259][T21312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1456.720003][T10568] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1456.863824][T20725] Bluetooth: hci0: command 0x0c1a tx timeout [ 1456.983224][T10568] usb 1-1: USB disconnect, device number 9 [ 1457.012110][T10639] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1457.223834][T21347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4552'. [ 1457.823498][T16397] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1457.852920][T10639] usb 7-1: Using ep0 maxpacket: 8 [ 1457.872446][T10639] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1457.914445][T10639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.922521][T10639] usb 7-1: Product: syz [ 1457.951635][T10639] usb 7-1: Manufacturer: syz [ 1457.963136][T10639] usb 7-1: SerialNumber: syz [ 1457.974371][T21353] netlink: 'syz.4.4554': attribute type 1 has an invalid length. [ 1457.983259][T16397] usb 2-1: device descriptor read/64, error -71 [ 1457.997099][T10639] usb 7-1: config 0 descriptor?? [ 1458.018415][T21353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1458.361044][T10639] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1458.423025][T16397] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1458.497969][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1458.520342][T21371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4557'. [ 1458.603094][T16397] usb 2-1: device descriptor read/64, error -71 [ 1459.208199][T16397] usb usb2-port1: attempt power cycle [ 1459.246377][T21367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1459.254724][T21367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1459.263626][T21367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1459.270644][T21367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1459.279580][T21367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1460.204942][T16397] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1460.317784][T16397] usb 2-1: device descriptor read/8, error -71 [ 1460.516731][T21385] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1460.601939][T21389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4565'. [ 1460.669766][T10639] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1460.686140][T10639] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1460.698747][T10639] usb 7-1: media controller created [ 1460.872089][T10639] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1461.832904][T20725] Bluetooth: hci1: command 0x0c1a tx timeout [ 1461.839113][T20725] Bluetooth: hci0: command 0x0c1a tx timeout [ 1461.845608][T20725] Bluetooth: hci3: command 0x0c1a tx timeout [ 1461.851783][T20725] Bluetooth: hci4: command 0x0c1a tx timeout [ 1461.858291][T20725] Bluetooth: hci2: command 0x0c1a tx timeout [ 1462.153811][T21400] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1462.161350][T10639] i2c i2c-6: Added multiplexed i2c bus 8 [ 1462.192906][T10639] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1462.200841][T10639] usb 7-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1462.263251][T10639] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1462.495796][T10639] DVB: Unable to find symbol r820t_attach() [ 1462.985324][T10639] usb 7-1: USB disconnect, device number 8 [ 1462.992110][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1464.323722][T10639] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1464.509765][T10639] usb 7-1: device descriptor read/64, error -71 [ 1464.559414][T16397] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1464.929841][T21435] netlink: 'syz.9.4581': attribute type 1 has an invalid length. [ 1465.025266][T16397] usb 5-1: Using ep0 maxpacket: 32 [ 1465.039154][T16397] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1465.048250][T16397] usb 5-1: config 1 has no interface number 0 [ 1465.055118][T16397] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1465.065135][T10639] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1465.067121][T21436] vlan2: entered allmulticast mode [ 1465.072862][T16397] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1465.072895][T16397] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1465.075597][T16397] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1465.108850][T21436] veth1: entered allmulticast mode [ 1465.115863][T16397] usb 5-1: config 1 has no interface number 0 [ 1465.122180][T16397] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1465.132693][T16397] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1465.160476][T16397] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1465.171202][T16397] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1465.180894][T16397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.189469][T16397] usb 5-1: Product: syz [ 1465.194336][T16397] usb 5-1: Manufacturer: syz [ 1465.199067][T16397] usb 5-1: SerialNumber: syz [ 1465.216227][T16397] ti_usb_3410_5052 5-1:1.236: TI USB 5052 2 port adapter converter detected [ 1465.231313][T10639] usb 7-1: device descriptor read/64, error -71 [ 1465.382838][T10639] usb usb7-port1: attempt power cycle [ 1465.422689][T16397] usb 5-1: USB disconnect, device number 7 [ 1465.501348][T21447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.634411][T21451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4588'. [ 1466.472916][T10639] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1466.618343][T21464] ieee802154 phy0 wpan0: encryption failed: -22 [ 1466.716187][T21468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1466.734138][T10639] usb 7-1: device not accepting address 11, error -71 [ 1466.753406][T16397] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1466.932958][T16397] usb 10-1: Using ep0 maxpacket: 8 [ 1466.960513][T16397] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1467.388235][T16397] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1467.398796][T16397] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1467.409003][T16397] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1467.422738][T16397] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1468.070210][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4599'. [ 1468.241944][T16397] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.470010][T16397] usb 10-1: GET_CAPABILITIES returned 0 [ 1468.488765][T16397] usbtmc 10-1:16.0: can't read capabilities [ 1468.689228][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1468.698962][T21457] usbtmc 10-1:16.0: Unable to send data, error -71 [ 1468.738793][T10568] usb 10-1: USB disconnect, device number 5 [ 1468.769223][T21496] syz.1.4604 (21496): drop_caches: 2 [ 1469.455619][T16397] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1469.723399][T16397] usb 1-1: device descriptor read/64, error -71 [ 1469.856573][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4612'. [ 1469.873424][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1469.899163][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1469.927461][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1469.949024][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1469.976641][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1469.982943][T16397] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1470.007213][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1470.022981][T10568] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1470.046203][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1470.069608][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1470.088543][T21505] kvm: kvm [21504]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1470.154575][T16397] usb 1-1: device descriptor read/64, error -71 [ 1470.184973][T21525] syz.1.4616 (21525): drop_caches: 2 [ 1470.189125][T10568] usb 5-1: Using ep0 maxpacket: 16 [ 1470.208709][T10568] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1470.213973][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4615'. [ 1470.236814][T10568] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.257735][T10568] usb 5-1: config 0 has no interface number 0 [ 1470.271903][T10568] usb 5-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1470.302938][T10568] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.303917][T16397] usb usb1-port1: attempt power cycle [ 1470.360792][T10568] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1470.381521][T10568] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1470.402460][T10568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.421490][T10568] usb 5-1: Product: syz [ 1470.435991][T10568] usb 5-1: Manufacturer: syz [ 1470.447316][T10568] usb 5-1: SerialNumber: syz [ 1470.500521][T10568] usb 5-1: config 0 descriptor?? [ 1470.555341][T10568] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 1470.565016][T10568] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 1470.763012][T16397] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1470.793637][T16397] usb 1-1: device descriptor read/8, error -71 [ 1470.837669][T21539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.857070][T21539] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1471.114693][T10639] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1471.153212][T10568] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1471.173024][T16397] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1471.194315][T16397] usb 1-1: device descriptor read/8, error -71 [ 1471.283092][T10639] usb 2-1: Using ep0 maxpacket: 8 [ 1471.293685][T10639] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1471.307497][T16397] usb usb1-port1: unable to enumerate USB device [ 1471.312958][T10568] usb 10-1: Using ep0 maxpacket: 8 [ 1471.313976][T10639] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1471.330768][T10639] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1471.331469][T10568] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1471.341447][T10639] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1471.358814][T10568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.365026][T10639] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1471.381771][T10639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.389956][T10568] usb 10-1: Product: syz [ 1471.396697][T10568] usb 10-1: Manufacturer: syz [ 1471.403855][T10568] usb 10-1: SerialNumber: syz [ 1471.422671][T10568] usb 10-1: config 0 descriptor?? [ 1471.598880][T10639] usb 2-1: GET_CAPABILITIES returned 0 [ 1471.612221][T10639] usbtmc 2-1:16.0: can't read capabilities [ 1471.662275][T10568] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1471.813307][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1471.823444][T21534] usbtmc 2-1:16.0: Unable to send data, error -71 [ 1471.849991][T16397] usb 2-1: USB disconnect, device number 28 [ 1472.053879][T21553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4624'. [ 1472.816733][T16443] usb 5-1: USB disconnect, device number 8 [ 1474.312317][T21580] kvm: kvm [21569]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1474.422121][ T59] bridge_slave_1: left allmulticast mode [ 1474.452410][ T59] bridge_slave_1: left promiscuous mode [ 1474.458565][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.491930][ T59] bridge_slave_0: left allmulticast mode [ 1474.500184][ T59] bridge_slave_0: left promiscuous mode [ 1474.507449][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.971231][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1475.643096][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1475.864881][T10568] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1475.876759][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1475.886696][T10568] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1475.899065][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.946124][T10568] usb 10-1: media controller created [ 1475.952004][ T9] usb 1-1: Product: syz [ 1475.984848][ T9] usb 1-1: Manufacturer: syz [ 1475.989536][ T9] usb 1-1: SerialNumber: syz [ 1476.032395][ T9] usb 1-1: config 0 descriptor?? [ 1476.063708][T10568] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1476.096164][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1476.432146][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4640'. [ 1477.004695][ T9] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1477.012409][ T9] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 1477.053903][ T9] usb 1-1: USB disconnect, device number 14 [ 1477.118375][T10568] i2c i2c-6: Added multiplexed i2c bus 8 [ 1477.135468][T10568] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1477.157264][T10568] usb 10-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1477.189157][T10568] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1477.286893][T10568] DVB: Unable to find symbol r820t_attach() [ 1477.471871][T10568] usb 10-1: USB disconnect, device number 6 [ 1478.563472][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1478.593122][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1478.616448][ T59] bond0 (unregistering): Released all slaves [ 1478.987284][ T59] bond1 (unregistering): Released all slaves [ 1480.209294][ T59] bond2 (unregistering): Released all slaves [ 1481.162871][T16443] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1481.402902][T16443] usb 5-1: Using ep0 maxpacket: 8 [ 1481.432188][T16443] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1481.478675][T16443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.668851][T16443] usb 5-1: Product: syz [ 1481.867210][T16443] usb 5-1: Manufacturer: syz [ 1481.879369][T16443] usb 5-1: SerialNumber: syz [ 1481.893054][T16443] usb 5-1: config 0 descriptor?? [ 1482.270141][T16443] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1482.363652][T21660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1482.370217][T21660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1482.380494][T21660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1482.422086][T21660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1482.485659][T21660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1482.848712][T10745] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1483.149363][T10745] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 1483.160002][T10745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.180212][T10745] usb 1-1: config 0 has no interfaces? [ 1483.205004][T10745] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1483.214362][T10745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.222413][T10745] usb 1-1: Product: syz [ 1483.232910][T10745] usb 1-1: Manufacturer: syz [ 1483.261756][T10745] usb 1-1: SerialNumber: syz [ 1483.353104][T10745] usb 1-1: config 0 descriptor?? [ 1483.824305][T16443] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1483.834641][ T59] hsr_slave_0: left promiscuous mode [ 1483.850834][T16443] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1483.880648][ T59] hsr_slave_1: left promiscuous mode [ 1483.890547][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 1483.997722][T16443] usb 5-1: media controller created [ 1484.020824][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 1484.123544][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.139476][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1484.223231][ T5142] Bluetooth: hci1: command 0x0c1a tx timeout [ 1484.328931][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1484.382079][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1484.389699][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1484.389762][ T5142] Bluetooth: hci2: command 0x0c1a tx timeout [ 1484.444832][T16443] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.473408][T20725] Bluetooth: hci3: command 0x0c1a tx timeout [ 1484.542983][T20725] Bluetooth: hci0: command 0x0c1a tx timeout [ 1484.608589][T16443] i2c i2c-6: Added multiplexed i2c bus 8 [ 1484.616357][T16443] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1484.645786][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.652199][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.665647][T16443] usb 5-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1484.675312][T16443] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1484.730105][T16443] DVB: Unable to find symbol r820t_attach() [ 1484.771678][ T59] veth1_macvtap: left promiscuous mode [ 1484.847461][ T59] veth0_macvtap: left promiscuous mode [ 1484.876804][ T59] veth1_vlan: left promiscuous mode [ 1484.913121][ T59] veth0_vlan: left promiscuous mode [ 1485.058343][T16397] usb 5-1: USB disconnect, device number 9 [ 1485.244173][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4660'. [ 1485.641032][T10745] usb 1-1: USB disconnect, device number 15 [ 1486.009164][T21693] netlink: 'syz.6.4663': attribute type 1 has an invalid length. [ 1486.440046][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1486.511446][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1486.729929][T21697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4664'. [ 1487.294051][T21685] hsr_slave_0: left promiscuous mode [ 1487.300729][T21685] hsr_slave_1: left promiscuous mode [ 1487.375478][T21693] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1487.460697][T21695] vlan2: entered allmulticast mode [ 1487.482419][T21695] veth1: entered allmulticast mode [ 1487.793180][ T917] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1488.733019][ T917] usb 10-1: Using ep0 maxpacket: 8 [ 1488.813083][ T917] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1488.822298][ T917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.847187][ T917] usb 10-1: Product: syz [ 1488.857409][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4675'. [ 1488.873066][ T917] usb 10-1: Manufacturer: syz [ 1488.878300][ T917] usb 10-1: SerialNumber: syz [ 1488.903494][ T917] usb 10-1: config 0 descriptor?? [ 1488.963557][T16397] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1489.168794][T16397] usb 1-1: Using ep0 maxpacket: 32 [ 1489.179511][ T917] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1489.190968][T16397] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.210836][T16397] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1489.961640][T16397] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1489.971426][T16397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.014781][T16397] usb 1-1: config 0 descriptor?? [ 1490.185246][T21736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4679'. [ 1491.067284][ T917] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1491.095510][ T917] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1491.116757][ T917] usb 10-1: media controller created [ 1491.142966][T21541] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1491.194661][ T917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.293440][T10641] usb 1-1: USB disconnect, device number 16 [ 1491.325811][T21541] usb 5-1: Using ep0 maxpacket: 16 [ 1491.350514][T21541] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1491.365121][ T917] i2c i2c-6: Added multiplexed i2c bus 8 [ 1491.370943][ T917] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1491.378698][T21541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.386910][T21541] usb 5-1: Product: syz [ 1491.391725][ T917] usb 10-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1491.401715][T21541] usb 5-1: Manufacturer: syz [ 1491.406477][T21541] usb 5-1: SerialNumber: syz [ 1491.411851][ T917] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1491.428847][T21541] usb 5-1: config 0 descriptor?? [ 1491.455138][T21541] as10x_usb: device has been detected [ 1491.461565][T21541] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1491.527503][ T917] DVB: Unable to find symbol r820t_attach() [ 1491.557825][T21541] usb 5-1: DVB: registering adapter 8 frontend 0 (Sky IT Digital Key (green led))... [ 1491.638909][T21541] as10x_usb: error during firmware upload part1 [ 1491.665759][T21541] Registered device Sky IT Digital Key (green led) [ 1491.686740][T21541] usb 5-1: USB disconnect, device number 10 [ 1491.832984][T10568] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1491.886791][T21541] Unregistered device Sky IT Digital Key (green led) [ 1491.888585][T21541] as10x_usb: device has been disconnected [ 1491.973046][T10641] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1492.022925][T10568] usb 1-1: Using ep0 maxpacket: 16 [ 1492.037456][T10568] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1492.050081][T10568] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.076501][T10568] usb 1-1: config 0 has no interface number 0 [ 1492.082693][T10568] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1492.112296][T10568] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1492.133659][T10641] usb 7-1: Using ep0 maxpacket: 8 [ 1492.150073][T10568] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1492.172033][T10568] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1492.216364][T10568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.252175][T10568] usb 1-1: Product: syz [ 1492.264984][T10568] usb 1-1: Manufacturer: syz [ 1492.376475][T10568] usb 1-1: SerialNumber: syz [ 1492.446944][T10568] usb 1-1: config 0 descriptor?? [ 1492.465385][T21758] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1492.487436][T10568] dm9601 1-1:0.41: probe with driver dm9601 failed with error -22 [ 1492.499717][T10568] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22 [ 1492.589858][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4686'. [ 1492.600515][T10568] usb 10-1: USB disconnect, device number 7 [ 1493.983047][T10745] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1494.240274][T10745] usb 5-1: config 0 has no interfaces? [ 1494.260859][T10745] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1494.271180][T10745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.281378][T10745] usb 5-1: Product: syz [ 1494.402660][T10745] usb 5-1: Manufacturer: syz [ 1494.422994][T10745] usb 5-1: SerialNumber: syz [ 1494.454861][T10745] usb 5-1: config 0 descriptor?? [ 1494.541808][T21787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1494.722955][ T917] usb 1-1: USB disconnect, device number 17 [ 1494.752143][T10641] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1494.860059][T10641] usb 7-1: no configurations [ 1494.866782][T10641] usb 7-1: can't read configurations, error -22 [ 1495.473077][ T917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1496.323869][ T917] usb 1-1: Using ep0 maxpacket: 32 [ 1496.947683][ T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.962328][ T917] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1496.972042][ T917] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1497.032657][T10641] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1497.066315][ T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.116128][ T917] usb 1-1: config 0 descriptor?? [ 1497.194672][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1497.233244][T10641] usb 7-1: Using ep0 maxpacket: 8 [ 1497.266798][T10641] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1497.288123][T10641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.314362][T10641] usb 7-1: Product: syz [ 1497.343426][T10641] usb 7-1: Manufacturer: syz [ 1497.348104][T10641] usb 7-1: SerialNumber: syz [ 1497.385951][T10641] usb 7-1: config 0 descriptor?? [ 1497.432875][ T917] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1497.668522][T10745] usb 5-1: USB disconnect, device number 11 [ 1497.678247][T10641] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1497.703103][ T917] usb 10-1: Using ep0 maxpacket: 16 [ 1497.719066][ T917] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.739563][ T917] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.776012][ T917] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1497.792805][ T917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.816616][ T917] usb 10-1: Product: syz [ 1497.840309][ T917] usb 10-1: Manufacturer: syz [ 1497.872669][ T917] usb 10-1: SerialNumber: syz [ 1498.102685][ T917] usb 10-1: 0:2 : does not exist [ 1498.153491][ T917] usb 10-1: USB disconnect, device number 8 [ 1498.226313][T20990] udevd[20990]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.373096][T10639] usb 1-1: USB disconnect, device number 18 [ 1498.460477][T21822] rdma_op ffff888024eb79f0 conn xmit_rdma 0000000000000000 [ 1498.645409][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1499.733824][T10641] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1499.749461][T10641] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1499.757885][T10641] usb 7-1: media controller created [ 1499.793525][T10641] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1500.132703][T10641] i2c i2c-6: Added multiplexed i2c bus 8 [ 1500.151845][T10641] rtl2832 6-0010: Realtek RTL2832 successfully attached [ 1500.163143][T10568] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1500.183355][T10641] usb 7-1: DVB: registering adapter 6 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1500.210103][T10641] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1500.274971][T10641] DVB: Unable to find symbol r820t_attach() [ 1500.332930][T10568] usb 1-1: Using ep0 maxpacket: 8 [ 1500.611006][T10745] usb 7-1: USB disconnect, device number 15 [ 1501.313814][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4710'. [ 1503.279808][T10745] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1503.374442][T21865] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1503.463272][T10745] usb 7-1: Using ep0 maxpacket: 16 [ 1503.515395][T10745] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1503.588145][T10745] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1503.632995][T10745] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1503.662614][T10745] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.693258][T10745] usb 7-1: Product: syz [ 1503.697551][T10745] usb 7-1: Manufacturer: syz [ 1503.708256][T10745] usb 7-1: SerialNumber: syz [ 1503.730287][T10745] usb 7-1: config 0 descriptor?? [ 1503.752210][T10745] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1503.786912][T10745] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1503.873239][T10641] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1504.055650][T10641] usb 10-1: not running at top speed; connect to a high speed hub [ 1504.074580][T10641] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1504.141631][T10641] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1504.177577][T10641] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.204984][T10641] usb 10-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1504.243093][T10568] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1504.294670][T10568] usb 1-1: no configurations [ 1504.323444][T10641] usb 10-1: Manufacturer: ࡡ [ 1504.328217][T10641] usb 10-1: SerialNumber: ࠊ [ 1504.340096][T10568] usb 1-1: can't read configurations, error -22 [ 1504.355833][T21871] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1504.371072][T10745] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1504.402946][T10745] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1504.449424][T21885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4723'. [ 1504.680547][T10641] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1504.696818][T10641] usb 10-1: USB disconnect, device number 9 [ 1504.708088][T20990] udevd[20990]: setting mode of /dev/bus/usb/010/009 to 020664 failed: No such file or directory [ 1504.724676][T20990] udevd[20990]: setting owner of /dev/bus/usb/010/009 to uid=0, gid=0 failed: No such file or directory [ 1504.793365][T21541] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1504.922883][T21541] usb 2-1: device descriptor read/64, error -71 [ 1505.032958][T10745] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1505.162968][T21541] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1505.307057][T21541] usb 2-1: device descriptor read/64, error -71 [ 1505.947041][T21541] usb usb2-port1: attempt power cycle [ 1506.066522][T10745] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1506.101655][T10745] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1506.141394][T10745] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1506.214218][T10745] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1506.287731][T10745] usb 7-1: USB disconnect, device number 16 [ 1506.295373][T21900] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1506.336541][T21906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4729'. [ 1506.346294][T21541] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1506.399120][T21541] usb 2-1: device descriptor read/8, error -71 [ 1506.683161][T21541] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1506.725819][T21541] usb 2-1: device descriptor read/8, error -71 [ 1506.845991][T21541] usb usb2-port1: unable to enumerate USB device [ 1507.299380][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4735'. [ 1507.353052][T10745] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1507.472930][T10641] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1507.617495][T10745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.632952][T10641] usb 10-1: Using ep0 maxpacket: 8 [ 1507.668918][T10745] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1507.698747][T10745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.721360][T10745] usb 5-1: config 0 descriptor?? [ 1507.735480][T10745] pwc: Askey VC010 type 2 USB webcam detected. [ 1508.193800][T10745] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1508.202924][T10639] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 1508.228465][T10745] pwc: recv_control_msg error -32 req 02 val 2700 [ 1508.857439][T10745] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1509.072265][T10745] pwc: recv_control_msg error -32 req 04 val 1000 [ 1509.098918][T10745] pwc: recv_control_msg error -32 req 04 val 1300 [ 1509.107041][T10745] pwc: recv_control_msg error -32 req 04 val 1400 [ 1509.125265][T10639] usb 2-1: not running at top speed; connect to a high speed hub [ 1509.164063][T10639] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1509.185683][T10639] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1509.195324][T10639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.278328][T10639] usb 2-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1509.418529][T10745] pwc: recv_control_msg error -71 req 02 val 2100 [ 1509.429363][T10745] pwc: recv_control_msg error -71 req 04 val 1500 [ 1509.450413][T10745] pwc: recv_control_msg error -71 req 02 val 2500 [ 1509.458107][T10639] usb 2-1: Manufacturer: ࡡ [ 1509.480857][T10639] usb 2-1: SerialNumber: ࠊ [ 1509.507130][T10745] pwc: recv_control_msg error -71 req 02 val 2400 [ 1509.515292][T21929] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1509.542999][T16397] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1509.596555][T10745] pwc: recv_control_msg error -71 req 02 val 2600 [ 1509.607892][T21944] netlink: 'syz.6.4740': attribute type 1 has an invalid length. [ 1509.619532][T10745] pwc: recv_control_msg error -71 req 02 val 2900 [ 1509.629896][T10745] pwc: recv_control_msg error -71 req 02 val 2800 [ 1509.653757][T10745] pwc: recv_control_msg error -71 req 04 val 1100 [ 1509.663835][T10745] pwc: recv_control_msg error -71 req 04 val 1200 [ 1509.681118][T10745] pwc: Registered as video103. [ 1509.688396][T10745] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input53 [ 1509.703840][T16397] usb 1-1: config 0 has no interfaces? [ 1509.706345][T10745] usb 5-1: USB disconnect, device number 12 [ 1509.872582][T16397] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1509.911037][T21944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1509.919457][T16397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.942388][T16397] usb 1-1: Product: syz [ 1509.955585][T16397] usb 1-1: Manufacturer: syz [ 1509.989540][T16397] usb 1-1: SerialNumber: syz [ 1510.009081][T16397] usb 1-1: config 0 descriptor?? [ 1510.059871][T10639] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1510.133190][T10639] usb 2-1: USB disconnect, device number 33 [ 1510.287452][T21946] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1510.329413][T21953] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4741'. [ 1510.364251][T21950] vlan2: entered allmulticast mode [ 1512.758770][T10641] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1512.772928][T10641] usb 10-1: no configurations [ 1512.777686][T10641] usb 10-1: can't read configurations, error -22 [ 1512.849965][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1512.948683][T10641] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1514.613096][T10745] usb 1-1: USB disconnect, device number 21 [ 1515.875792][T10745] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1516.825491][T10745] usb 1-1: not running at top speed; connect to a high speed hub [ 1516.892342][T10745] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1517.009023][T10745] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.032859][T10745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.167044][T10745] usb 1-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1517.223103][T10641] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1517.270482][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1517.388899][T10745] usb 1-1: Manufacturer: ࡡ [ 1517.399128][T10745] usb 1-1: SerialNumber: ࠊ [ 1517.412940][T10641] usb 2-1: Using ep0 maxpacket: 8 [ 1517.421341][T21989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1517.773127][T10745] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1517.841843][T10745] usb 1-1: USB disconnect, device number 22 [ 1518.717804][T22038] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1518.934242][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1519.162965][T21541] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1519.325994][T21541] usb 7-1: Using ep0 maxpacket: 16 [ 1519.350530][T21541] usb 7-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1519.457545][T21541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.508155][T21541] usb 7-1: Product: syz [ 1519.651788][T21541] usb 7-1: Manufacturer: syz [ 1519.666056][T21541] usb 7-1: SerialNumber: syz [ 1519.703765][T21541] usb 7-1: config 0 descriptor?? [ 1519.720915][T21541] as10x_usb: device has been detected [ 1519.727207][T21541] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1519.757237][T21541] usb 7-1: DVB: registering adapter 6 frontend 0 (Sky IT Digital Key (green led))... [ 1519.812360][T21541] as10x_usb: error during firmware upload part1 [ 1519.822023][T21541] Registered device Sky IT Digital Key (green led) [ 1519.922876][T10639] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1519.939610][T21541] usb 7-1: USB disconnect, device number 17 [ 1520.009345][T21541] Unregistered device Sky IT Digital Key (green led) [ 1520.017648][T21541] as10x_usb: device has been disconnected [ 1520.127401][T10639] usb 5-1: Using ep0 maxpacket: 8 [ 1520.158967][T10639] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1520.195608][T10639] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1520.210921][T10639] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1520.231529][T10639] usb 5-1: Product: syz [ 1520.241720][T10639] usb 5-1: Manufacturer: syz [ 1520.251822][T10639] usb 5-1: SerialNumber: syz [ 1520.287438][T10639] usb 5-1: config 0 descriptor?? [ 1520.324081][T10639] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1521.043628][T22062] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4779'. [ 1521.092122][T10641] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1521.103852][T10568] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 1521.111971][T10641] usb 2-1: no configurations [ 1521.111994][T10641] usb 2-1: can't read configurations, error -22 [ 1521.125098][T10639] gspca_zc3xx: reg_w_i err -71 [ 1521.244582][T22066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4781'. [ 1521.450707][T10568] usb 10-1: not running at top speed; connect to a high speed hub [ 1521.460659][T10568] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1521.536333][T10568] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1521.578306][T10568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.102810][T10568] usb 10-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1522.131318][T10568] usb 10-1: Manufacturer: ࡡ [ 1522.137787][T10568] usb 10-1: SerialNumber: ࠊ [ 1522.214518][T10639] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1522.223487][T10639] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1522.240886][T22058] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1522.242313][T10639] usb 5-1: USB disconnect, device number 13 [ 1523.644943][T10568] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1523.664863][T10568] usb 10-1: USB disconnect, device number 12 [ 1523.787059][T22093] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4791'. [ 1524.133254][T16443] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1525.294825][T16443] usb 7-1: Using ep0 maxpacket: 8 [ 1525.377018][T16443] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1525.402810][T16443] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1525.423635][T16443] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1525.433232][T16443] usb 7-1: Product: syz [ 1525.437457][T16443] usb 7-1: Manufacturer: syz [ 1525.442097][T16443] usb 7-1: SerialNumber: syz [ 1525.462502][T16443] usb 7-1: config 0 descriptor?? [ 1525.481105][T16443] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1526.519952][T16443] gspca_zc3xx: reg_w_i err -71 [ 1526.707694][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4804'. [ 1526.909911][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4806'. [ 1527.163025][T16443] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1527.169460][T16443] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1527.187527][T16443] usb 7-1: USB disconnect, device number 18 [ 1528.043004][T10745] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1528.193964][T10745] usb 1-1: Using ep0 maxpacket: 16 [ 1528.219184][T10745] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1528.260794][T10745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.293043][T16443] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1528.326286][T10745] usb 1-1: Product: syz [ 1528.342855][T10745] usb 1-1: Manufacturer: syz [ 1528.347627][T10745] usb 1-1: SerialNumber: syz [ 1528.355176][T10745] usb 1-1: config 0 descriptor?? [ 1528.367441][T10745] as10x_usb: device has been detected [ 1528.379029][T10745] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1528.482022][T10745] usb 1-1: DVB: registering adapter 6 frontend 0 (Sky IT Digital Key (green led))... [ 1528.499230][T16443] usb 7-1: not running at top speed; connect to a high speed hub [ 1528.517130][T16443] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1528.545225][T10745] as10x_usb: error during firmware upload part1 [ 1528.572358][T16443] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1528.595813][T16443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.606493][T10745] Registered device Sky IT Digital Key (green led) [ 1528.609806][T10745] usb 1-1: USB disconnect, device number 23 [ 1528.623876][T16443] usb 7-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1528.672690][T16443] usb 7-1: Manufacturer: ࡡ [ 1528.682257][T16443] usb 7-1: SerialNumber: ࠊ [ 1528.725700][T10745] Unregistered device Sky IT Digital Key (green led) [ 1528.728563][T22143] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1528.751157][T10745] as10x_usb: device has been disconnected [ 1528.988772][ T30] audit: type=1326 audit(1749288613.462:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22154 comm="syz.4.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7ffc0000 [ 1529.038826][ T30] audit: type=1326 audit(1749288613.462:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22154 comm="syz.4.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7ffc0000 [ 1529.082073][ T30] audit: type=1326 audit(1749288613.482:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22154 comm="syz.4.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fd8e9b8e929 code=0x7ffc0000 [ 1529.140851][ T30] audit: type=1326 audit(1749288613.482:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22154 comm="syz.4.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7ffc0000 [ 1529.164258][ T30] audit: type=1326 audit(1749288613.482:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22154 comm="syz.4.4814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7ffc0000 [ 1529.187597][ T917] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1529.195394][T10639] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1529.221179][T16443] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1529.250745][T16443] usb 7-1: USB disconnect, device number 19 [ 1529.292069][T22161] tipc: Started in network mode [ 1529.299665][T22161] tipc: Node identity ac14140f, cluster identity 4711 [ 1529.309022][T22161] tipc: New replicast peer: 255.255.255.255 [ 1529.317268][T22161] tipc: Enabled bearer , priority 10 [ 1529.354639][T10639] usb 10-1: Using ep0 maxpacket: 16 [ 1529.360692][ T917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.370961][T21541] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1529.379339][ T917] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1529.389886][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.398481][T10639] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1529.410123][T10639] usb 10-1: config 0 has no interface number 0 [ 1529.417547][ T917] usb 2-1: config 0 descriptor?? [ 1529.426594][ T917] pwc: Askey VC010 type 2 USB webcam detected. [ 1529.433208][T10639] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1529.443723][T10639] usb 10-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1529.454506][T10639] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1529.464618][T10639] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1529.477692][T10639] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1529.486982][T10639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.495334][T10639] usb 10-1: Product: syz [ 1529.499671][T10639] usb 10-1: Manufacturer: syz [ 1529.504596][T10639] usb 10-1: SerialNumber: syz [ 1529.514096][T10639] usb 10-1: config 0 descriptor?? [ 1529.520279][T22153] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1529.530107][T10639] dm9601 10-1:0.41: probe with driver dm9601 failed with error -22 [ 1529.538452][T21541] usb 5-1: Using ep0 maxpacket: 16 [ 1529.546171][T21541] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1529.556574][T10639] sr9700 10-1:0.41: probe with driver sr9700 failed with error -22 [ 1529.564636][T21541] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1529.580789][T21541] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1529.593932][T21541] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1529.604533][T21541] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1529.615014][T21541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.623613][T21541] usb 5-1: Product: syz [ 1529.627890][T21541] usb 5-1: Manufacturer: syz [ 1529.632548][T21541] usb 5-1: SerialNumber: syz [ 1529.645185][T21541] usb 5-1: config 0 descriptor?? [ 1529.651426][T22157] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1529.841805][ T917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1529.850918][ T917] pwc: recv_control_msg error -32 req 02 val 2700 [ 1529.858808][ T917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1529.873120][T22157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.884814][ T917] pwc: recv_control_msg error -32 req 04 val 1000 [ 1529.896099][ T917] pwc: recv_control_msg error -32 req 04 val 1300 [ 1529.910462][T22157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.925020][ T917] pwc: recv_control_msg error -32 req 04 val 1400 [ 1529.939235][T22157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.964603][T22157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.977627][T22157] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1530.001317][T21541] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 1530.022874][T10639] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1530.138463][ T917] pwc: recv_control_msg error -71 req 02 val 2100 [ 1530.150624][ T917] pwc: recv_control_msg error -71 req 04 val 1500 [ 1530.158726][ T917] pwc: recv_control_msg error -71 req 02 val 2500 [ 1530.173350][ T917] pwc: recv_control_msg error -71 req 02 val 2400 [ 1530.181581][ T917] pwc: recv_control_msg error -71 req 02 val 2600 [ 1530.190710][ T917] pwc: recv_control_msg error -71 req 02 val 2900 [ 1530.197688][T10639] usb 7-1: Using ep0 maxpacket: 8 [ 1530.205670][T10639] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1530.215089][ T917] pwc: recv_control_msg error -71 req 02 val 2800 [ 1530.222230][ T917] pwc: recv_control_msg error -71 req 04 val 1100 [ 1530.235166][T10639] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1530.248303][T10639] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1530.261794][ T917] pwc: recv_control_msg error -71 req 04 val 1200 [ 1530.268913][T10639] usb 7-1: Product: syz [ 1530.273206][T10745] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1530.283521][T10639] usb 7-1: Manufacturer: syz [ 1530.290269][ T917] pwc: Registered as video103. [ 1530.295877][T10639] usb 7-1: SerialNumber: syz [ 1530.309052][T16443] usb 5-1: USB disconnect, device number 14 [ 1530.311105][ T917] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 1530.349163][T10639] usb 7-1: config 0 descriptor?? [ 1530.371362][ T917] usb 2-1: USB disconnect, device number 36 [ 1530.400384][T10639] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1530.435594][T10745] usb 1-1: Using ep0 maxpacket: 32 [ 1530.459690][ T9] tipc: Node number set to 2886997007 [ 1530.478126][T10745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.496771][T10745] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1530.511947][T10745] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1530.534319][T10745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.546414][T10745] usb 1-1: config 0 descriptor?? [ 1530.567652][T10745] hub 1-1:0.0: bad descriptor, ignoring hub [ 1530.577501][T10745] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1530.597375][T10745] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1531.210097][T10639] gspca_zc3xx: reg_w_i err -71 [ 1531.333124][ T917] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1531.488474][ T917] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 1531.496869][ T917] usb 5-1: config 0 has no interface number 0 [ 1531.503813][ T917] usb 5-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 1531.515751][ T917] usb 5-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1531.526849][ T917] usb 5-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204 [ 1531.540138][ T917] usb 5-1: config 0 interface 87 has no altsetting 0 [ 1531.549222][ T917] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 1531.559623][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.567921][ T917] usb 5-1: Product: syz [ 1531.572171][ T917] usb 5-1: Manufacturer: syz [ 1531.577216][ T917] usb 5-1: SerialNumber: syz [ 1531.584997][ T917] usb 5-1: config 0 descriptor?? [ 1531.602490][ T917] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1531.802977][T10639] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1531.809424][T10639] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1531.836563][T10639] usb 7-1: USB disconnect, device number 20 [ 1531.849603][T22180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1531.877631][T16443] usb 5-1: USB disconnect, device number 15 [ 1531.884418][ T13] usb 5-1: Failed to submit usb control message: -71 [ 1531.895059][ T13] usb 5-1: unable to send the bmi data to the device: -71 [ 1531.902474][ T13] usb 5-1: unable to get target info from device [ 1531.909551][ T13] usb 5-1: could not get target info (-71) [ 1531.916681][ T13] usb 5-1: could not probe fw (-71) [ 1531.949799][ T917] usb 10-1: USB disconnect, device number 13 [ 1532.111773][T22192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1532.151677][T22192] wlan1: No basic rates, using min rate instead [ 1532.166290][T22192] wlan1: authenticate with aa:09:b7:99:c0:d7 (local address=08:02:11:00:00:01) [ 1532.178350][T22192] wlan1: send auth to aa:09:b7:99:c0:d7 (try 1/3) [ 1532.187344][T21152] wlan1: send auth to aa:09:b7:99:c0:d7 (try 2/3) [ 1532.198572][T21152] wlan1: send auth to aa:09:b7:99:c0:d7 (try 3/3) [ 1532.208880][T21152] wlan1: authentication with aa:09:b7:99:c0:d7 timed out [ 1532.713154][T16443] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1532.758233][T22197] netlink: 308 bytes leftover after parsing attributes in process `syz.9.4829'. [ 1532.885023][T16443] usb 5-1: not running at top speed; connect to a high speed hub [ 1532.908588][T16443] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1532.926882][T16443] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1532.938803][T16443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.950422][T16443] usb 5-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1532.984163][T16443] usb 5-1: Manufacturer: ࡡ [ 1532.988870][T16443] usb 5-1: SerialNumber: ࠊ [ 1532.997277][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4832'. [ 1533.009780][T22195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1533.183608][ T917] usb 1-1: USB disconnect, device number 24 [ 1533.327698][T16443] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1533.348847][T16443] usb 5-1: USB disconnect, device number 16 [ 1533.422956][ T45] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1533.586018][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 1533.595463][ T45] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1533.617827][ T45] usb 10-1: config 0 has no interface number 0 [ 1533.632873][ T45] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1533.657542][ T45] usb 10-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1533.679974][ T45] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1533.702344][ T45] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1533.713609][ T45] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1533.724417][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.732560][ T45] usb 10-1: Product: syz [ 1533.738308][ T45] usb 10-1: Manufacturer: syz [ 1533.781204][ T45] usb 10-1: SerialNumber: syz [ 1533.805045][ T45] usb 10-1: config 0 descriptor?? [ 1533.827051][T22211] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1533.855050][ T45] dm9601 10-1:0.41: probe with driver dm9601 failed with error -22 [ 1533.874623][ T45] sr9700 10-1:0.41: probe with driver sr9700 failed with error -22 [ 1534.272482][T22241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4847'. [ 1535.722857][T16443] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1535.894927][T16443] usb 5-1: not running at top speed; connect to a high speed hub [ 1535.914790][T16443] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1535.946441][T16443] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1535.986456][T16443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.007047][T16443] usb 5-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1536.118869][T16443] usb 5-1: Manufacturer: ࡡ [ 1536.123718][T16443] usb 5-1: SerialNumber: Ф [ 1536.135575][T22262] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1536.290888][T10745] usb 10-1: USB disconnect, device number 14 [ 1536.458819][T16443] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1536.482978][T16443] usb 5-1: USB disconnect, device number 17 [ 1536.873057][T10639] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1537.033534][T10639] usb 10-1: Using ep0 maxpacket: 32 [ 1537.046959][T10639] usb 10-1: config 1 has an invalid interface number: 242 but max is 0 [ 1537.111965][T10639] usb 10-1: config 1 has no interface number 0 [ 1537.140598][T10639] usb 10-1: config 1 interface 242 has no altsetting 0 [ 1537.167478][T10639] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1537.177395][T10639] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.210782][T10639] usb 10-1: Product: syz [ 1537.215415][T10639] usb 10-1: Manufacturer: syz [ 1537.220137][T10639] usb 10-1: SerialNumber: syz [ 1537.402836][T16443] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1537.573058][T16443] usb 5-1: Using ep0 maxpacket: 16 [ 1537.581676][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1537.608047][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1537.623558][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1537.634980][T16443] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1537.644134][T16443] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1537.653470][T16443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.661519][T16443] usb 5-1: Product: syz [ 1537.666332][T16443] usb 5-1: Manufacturer: syz [ 1537.671006][T16443] usb 5-1: SerialNumber: syz [ 1537.679967][T16443] usb 5-1: config 0 descriptor?? [ 1537.686277][T22275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1537.907370][T22275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.917236][T22275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.936537][T22275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1537.947480][T22275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1537.957097][T22275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1537.979206][T16443] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input56 [ 1538.265638][T10639] aqc111 10-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1538.325369][T10639] aqc111 10-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1538.353943][T10639] aqc111 10-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1538.359039][T16443] usb 5-1: USB disconnect, device number 18 [ 1538.514913][T10639] aqc111 10-1:1.242 eth6: register 'aqc111' at usb-dummy_hcd.9-1, Aquantia AQtion USB to 5GbE Controller, 7e:4e:99:be:5a:8e [ 1538.573961][T22279] fuse: Bad value for 'fd' [ 1538.615585][T10639] usb 10-1: USB disconnect, device number 15 [ 1538.636939][T10639] aqc111 10-1:1.242 eth6: unregister 'aqc111' usb-dummy_hcd.9-1, Aquantia AQtion USB to 5GbE Controller [ 1538.778464][T10639] aqc111 10-1:1.242 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1538.805916][T10639] aqc111 10-1:1.242 eth6 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1538.837944][T10639] aqc111 10-1:1.242 eth6 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1539.202890][T16443] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1540.145223][T16443] usb 7-1: Using ep0 maxpacket: 8 [ 1540.218641][T22287] netlink: 'syz.6.4861': attribute type 13 has an invalid length. [ 1540.386200][ T30] audit: type=1326 audit(1749288624.852:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22295 comm="syz.9.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1540.925022][T10639] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1541.134818][ T30] audit: type=1326 audit(1749288625.562:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22295 comm="syz.9.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1541.389871][T10639] usb 2-1: not running at top speed; connect to a high speed hub [ 1541.436050][T10639] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1541.504003][T10639] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1541.678271][T10639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.688158][T10639] usb 2-1: Product: 㫶鉠ⷋﻐ卌늺퍄紛嘕玡ઔ냷륳㌿榭욞쩻骰瘀䷓皖塧૎䭺䱼剞䟻◦⹞唛ᗺﾛ꫘㿓ꢽ␔辏꽞럻೚㎑誛捘➈᧽禛엠呶≍㡱靪剾榣뾍ણ댨ကꚸᯀ䧇쏩쿬犀෢왟ӕꂰ⩔屭俿귷寉䉬哰減㽮␍⋡셟Ʂᥒ [ 1541.993043][T10639] usb 2-1: Manufacturer: ࡡ [ 1541.997743][T10639] usb 2-1: SerialNumber: Ф [ 1542.008735][T22310] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1542.813660][T10639] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 1542.858331][T16443] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1542.881467][T10639] usb 2-1: USB disconnect, device number 37 [ 1542.891319][T16443] usb 7-1: no configurations [ 1542.909984][T16443] usb 7-1: can't read configurations, error -22 [ 1542.927904][T10641] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1543.040291][T22331] fuse: Bad value for 'fd' [ 1543.113556][T10641] usb 5-1: device descriptor read/64, error -71 [ 1543.133433][T10745] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1543.293082][T10745] usb 10-1: Using ep0 maxpacket: 32 [ 1543.300781][T10745] usb 10-1: config 0 has no interfaces? [ 1543.316085][T10745] usb 10-1: config 0 has no interfaces? [ 1543.336314][T10745] usb 10-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1543.352941][T10745] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.353131][T10641] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1543.375833][T10745] usb 10-1: Product: syz [ 1543.383973][T10745] usb 10-1: Manufacturer: syz [ 1543.390996][T10745] usb 10-1: SerialNumber: syz [ 1543.408692][T10745] usb 10-1: config 0 descriptor?? [ 1543.673506][T10641] usb 5-1: device descriptor read/64, error -71 [ 1543.729547][T10745] usb 10-1: USB disconnect, device number 16 [ 1544.351997][T10641] usb usb5-port1: attempt power cycle [ 1544.718753][T10641] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1544.726596][T10639] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1544.787068][T10641] usb 5-1: device descriptor read/8, error -71 [ 1544.914250][T10639] usb 2-1: Using ep0 maxpacket: 8 [ 1544.956296][T10639] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1544.966382][T10639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.975784][T10639] usb 2-1: Product: syz [ 1544.980083][T10639] usb 2-1: Manufacturer: syz [ 1544.985599][T10639] usb 2-1: SerialNumber: syz [ 1544.998331][T10639] usb 2-1: config 0 descriptor?? [ 1545.053070][T10641] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1545.091299][T10641] usb 5-1: device descriptor read/8, error -71 [ 1545.262492][T10641] usb usb5-port1: unable to enumerate USB device [ 1545.290947][T10639] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1545.821303][T16443] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1546.585351][T16443] usb 7-1: Using ep0 maxpacket: 32 [ 1546.623480][T16443] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1546.643476][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.649889][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.655835][T16443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1546.711931][T16443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1546.753149][T16443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1546.772886][T16443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1546.809602][T16443] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1546.826924][T16443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.857006][T16443] usb 7-1: Product: syz [ 1546.861503][T16443] usb 7-1: Manufacturer: syz [ 1546.890665][T16443] usb 7-1: SerialNumber: syz [ 1546.909873][T16443] usb 7-1: config 0 descriptor?? [ 1546.927301][ T30] audit: type=1326 audit(1749288631.392:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22367 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e9b8e929 code=0x7fc00000 [ 1547.129918][T22308] syz.0.4869 (22308): drop_caches: 1 [ 1547.129916][T22311] syz.0.4869 (22311): drop_caches: 1 [ 1547.188510][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.199188][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.210553][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.230968][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.244477][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.271318][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.308024][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.333528][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.340347][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.350423][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.357900][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.369832][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.383639][T22373] fuse: Bad value for 'fd' [ 1547.388712][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.411573][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.421901][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.437935][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.445196][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.487053][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.494146][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.500922][T16443] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1547.508746][T16443] input input57: Timeout waiting for response from device. [ 1547.583661][ T30] audit: type=1326 audit(1749288632.062:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22367 comm="syz.4.4889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8e9b8e929 code=0x7fc00000 [ 1547.799743][T16443] usb 7-1: USB disconnect, device number 23 [ 1548.313048][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4893'. [ 1548.683050][T10639] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1548.706264][T10639] usb 2-1: USB disconnect, device number 38 [ 1548.727333][T22385] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4894'. [ 1551.072524][T22411] block device autoloading is deprecated and will be removed. [ 1551.246691][ T30] audit: type=1326 audit(1749288635.722:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22412 comm="syz.9.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1551.297170][T22411] syz.1.4900: attempt to access beyond end of device [ 1551.297170][T22411] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1551.915290][ T30] audit: type=1326 audit(1749288636.392:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22412 comm="syz.9.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1552.592918][T10745] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1552.863082][T10745] usb 1-1: Using ep0 maxpacket: 8 [ 1552.873806][T10745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.887266][T10745] usb 1-1: config 0 has no interfaces? [ 1552.899991][T10745] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1552.982477][T10745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.052789][T10745] usb 1-1: Product: syz [ 1553.057050][T10745] usb 1-1: Manufacturer: syz [ 1553.089188][T10745] usb 1-1: SerialNumber: syz [ 1553.149790][T10745] usb 1-1: config 0 descriptor?? [ 1553.283998][T22435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4907'. [ 1554.002857][T10639] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1554.172840][T10639] usb 5-1: Using ep0 maxpacket: 8 [ 1554.185260][T10639] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.198763][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.224108][T10639] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.248642][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 198, changing to 11 [ 1554.272679][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.284313][ T917] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1554.635584][T10639] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.648403][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.699487][T10639] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.728088][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 198, changing to 11 [ 1554.748380][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.762069][T10639] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1554.770516][ T917] usb 7-1: Using ep0 maxpacket: 32 [ 1554.776343][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1554.789830][T10639] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1554.802987][ T917] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1554.811218][ T917] usb 7-1: config 0 has an invalid interface number: 164 but max is 0 [ 1554.821480][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 198, changing to 11 [ 1554.835115][ T917] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1554.845761][T10639] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1554.859615][ T917] usb 7-1: config 0 has no interface number 0 [ 1554.866172][ T917] usb 7-1: config 0 has no interface number 1 [ 1554.872669][ T917] usb 7-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 1554.885858][ T30] audit: type=1326 audit(1749288639.342:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22451 comm="syz.9.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1554.911484][ T917] usb 7-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 1554.925292][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1554.933936][T10639] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1554.944151][T10639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.952582][T10639] usb 5-1: Product: syz [ 1554.958964][ T917] usb 7-1: config 0 interface 50 has no altsetting 0 [ 1554.966186][T10639] usb 5-1: Manufacturer: syz [ 1554.971070][T10639] usb 5-1: SerialNumber: syz [ 1554.976176][ T917] usb 7-1: config 0 interface 164 has no altsetting 0 [ 1554.998583][ T917] usb 7-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 1555.009307][ T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.018063][ T917] usb 7-1: Product: syz [ 1555.022571][ T917] usb 7-1: Manufacturer: syz [ 1555.029169][ T917] usb 7-1: SerialNumber: syz [ 1555.038765][ T917] usb 7-1: config 0 descriptor?? [ 1555.061871][ T917] usb 7-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 1555.103117][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 1555.121284][ T45] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 1555.131775][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.144728][T10745] usb 1-1: USB disconnect, device number 25 [ 1555.152144][ T45] usb 2-1: config 1 has no interface number 0 [ 1555.160184][ T45] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 1555.181647][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.192289][ T45] usb 2-1: config 1 has no interface number 0 [ 1555.203777][ T917] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 1555.218734][T22439] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4909'. [ 1555.247504][ T45] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1555.267655][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.281539][ T45] usb 2-1: Product: syz [ 1555.288870][T10639] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1555.298698][ T45] usb 2-1: Manufacturer: syz [ 1555.307092][T10639] usb 5-1: USB disconnect, device number 23 [ 1555.316738][ T45] usb 2-1: SerialNumber: syz [ 1555.345074][ T45] ti_usb_3410_5052 2-1:1.236: required endpoints missing [ 1555.562878][ T30] audit: type=1326 audit(1749288640.032:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22451 comm="syz.9.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1555.584963][T10639] usb 2-1: USB disconnect, device number 39 [ 1555.883294][ T917] usb 7-1: device descriptor read/64, error -71 [ 1556.128371][ T917] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 1556.138649][T10639] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1556.311141][T10639] usb 1-1: Using ep0 maxpacket: 16 [ 1556.340206][T10639] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.430374][T10639] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1556.460714][T10639] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1556.473078][T10745] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1556.488254][T10639] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.500549][T10639] usb 1-1: Product: syz [ 1556.505251][T10639] usb 1-1: Manufacturer: syz [ 1556.511192][T10639] usb 1-1: SerialNumber: syz [ 1556.637829][T10745] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.656040][T10745] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1556.678482][T10745] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.719408][T10745] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1556.743811][ T917] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1556.758691][ T917] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1556.768073][T10639] usb 1-1: 0:2 : does not exist [ 1556.832373][ T45] usb 7-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1556.843833][T10639] usb 1-1: unit 6 not found! [ 1556.861343][ T45] usb 7-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1556.999334][ T917] usb 7-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 1557.089018][ T917] usb 7-1: selecting invalid altsetting 0 [ 1557.098310][T10639] usb 1-1: USB disconnect, device number 26 [ 1557.141396][T21761] udevd[21761]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1557.352831][T16443] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1557.463782][ T917] usb 7-1: reset high-speed USB device number 24 using dummy_hcd [ 1557.512985][T16443] usb 5-1: Using ep0 maxpacket: 16 [ 1557.534703][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1557.567111][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1557.582465][T16443] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1557.598752][T16443] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1557.609209][T16443] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1557.623333][T16443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.639577][T16443] usb 5-1: Product: syz [ 1557.648034][T16443] usb 5-1: Manufacturer: syz [ 1557.689796][T16443] usb 5-1: SerialNumber: syz [ 1557.702519][T16443] usb 5-1: config 0 descriptor?? [ 1557.710008][T22478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1557.913807][T10745] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 1557.932182][T22478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.943742][T22478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.974396][T22478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.991514][T22478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.026697][T22478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1558.056910][ T917] usb 7-1: selecting invalid altsetting 0 [ 1558.065443][T16443] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 1558.066396][ T917] usbtest 7-1:0.50: probe with driver usbtest failed with error -22 [ 1558.105318][ T917] usb 7-1: selecting invalid altsetting 0 [ 1558.115576][T10745] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1558.121677][ T917] ueagle-atm 7-1:0.50: probe with driver ueagle-atm failed with error -22 [ 1558.143191][T10745] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 1558.165703][T10639] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1558.173063][T10745] usb 10-1: USB disconnect, device number 17 [ 1558.187128][ T917] usb 7-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1558.213004][ T917] usb 7-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1558.278282][T16443] usb 7-1: USB disconnect, device number 24 [ 1558.353034][T10639] usb 2-1: Using ep0 maxpacket: 8 [ 1558.367782][T10639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.409277][T10639] usb 2-1: config 0 has no interfaces? [ 1558.454141][T10639] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1558.468389][T10639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.478622][T10639] usb 2-1: Product: syz [ 1558.493236][T10639] usb 2-1: Manufacturer: syz [ 1558.499235][T10639] usb 2-1: SerialNumber: syz [ 1558.510215][ T917] usb 5-1: USB disconnect, device number 24 [ 1558.552297][T10639] usb 2-1: config 0 descriptor?? [ 1558.558745][T22488] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1558.860513][ T30] audit: type=1326 audit(1749288643.332:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.9.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1558.983028][T16443] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1559.155299][T16443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.181047][T16443] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1559.241943][T16443] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.291464][T16443] usb 1-1: config 0 descriptor?? [ 1559.320773][T16443] pwc: Askey VC010 type 2 USB webcam detected. [ 1559.573195][ T30] audit: type=1326 audit(1749288644.042:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22489 comm="syz.9.4927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa62278e929 code=0x7fc00000 [ 1559.725244][T16443] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1559.752234][T16443] pwc: recv_control_msg error -32 req 02 val 2700 [ 1559.780620][T16443] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1559.798919][T16443] pwc: recv_control_msg error -32 req 04 val 1000 [ 1559.820167][T16443] pwc: recv_control_msg error -32 req 04 val 1300 [ 1559.851552][T16443] pwc: recv_control_msg error -32 req 04 val 1400 [ 1560.082552][T16443] pwc: recv_control_msg error -71 req 02 val 2100 [ 1560.095868][T16443] pwc: recv_control_msg error -71 req 04 val 1500 [ 1560.110062][T16443] pwc: recv_control_msg error -71 req 02 val 2500 [ 1560.136186][T16443] pwc: recv_control_msg error -71 req 02 val 2400 [ 1560.152069][T16443] pwc: recv_control_msg error -71 req 02 val 2600 [ 1560.168019][T16443] pwc: recv_control_msg error -71 req 02 val 2900 [ 1560.190596][T16443] pwc: recv_control_msg error -71 req 02 val 2800 [ 1560.210658][T16443] pwc: recv_control_msg error -71 req 04 val 1100 [ 1560.225243][T16443] pwc: recv_control_msg error -71 req 04 val 1200 [ 1560.253793][T16443] pwc: Registered as video103. [ 1560.287827][T16443] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 1560.339911][ T30] audit: type=1326 audit(1749288644.812:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.382108][T16443] usb 1-1: USB disconnect, device number 27 [ 1560.423983][ T30] audit: type=1326 audit(1749288644.812:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.466744][ T30] audit: type=1326 audit(1749288644.822:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.502927][T10568] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1560.507833][ T30] audit: type=1326 audit(1749288644.822:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.540949][ T30] audit: type=1326 audit(1749288644.822:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.565780][ T30] audit: type=1326 audit(1749288644.822:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.589991][ T30] audit: type=1326 audit(1749288644.832:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.612106][ T30] audit: type=1326 audit(1749288644.832:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.662885][T10568] usb 5-1: Using ep0 maxpacket: 16 [ 1560.677304][T10568] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1560.699762][T10568] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.701801][ T30] audit: type=1326 audit(1749288644.832:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.720693][T10568] usb 5-1: Product: syz [ 1560.746696][ T30] audit: type=1326 audit(1749288644.832:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22516 comm="syz.9.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa62278e929 code=0x7ffc0000 [ 1560.772601][T10568] usb 5-1: Manufacturer: syz [ 1560.786033][T10568] usb 5-1: SerialNumber: syz [ 1560.806389][T10568] usb 5-1: config 0 descriptor?? [ 1560.835260][T10568] as10x_usb: device has been detected [ 1560.864288][T10568] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1560.899186][T10641] usb 2-1: USB disconnect, device number 40 [ 1560.913796][T10568] usb 5-1: DVB: registering adapter 6 frontend 0 (Sky IT Digital Key (green led))... [ 1561.009331][T22525] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1561.018817][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4938'. [ 1561.066476][T10568] as10x_usb: error during firmware upload part1 [ 1561.089376][T10568] Registered device Sky IT Digital Key (green led) [ 1561.092896][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1561.117440][T10568] usb 5-1: USB disconnect, device number 25 [ 1561.236506][T10568] Unregistered device Sky IT Digital Key (green led) [ 1561.266425][T10568] as10x_usb: device has been disconnected [ 1561.294271][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1561.308532][ T9] usb 1-1: config 0 has no interfaces? [ 1561.325519][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1561.343505][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.367719][ T9] usb 1-1: Product: syz [ 1561.379011][ T9] usb 1-1: Manufacturer: syz [ 1561.390397][ T9] usb 1-1: SerialNumber: syz [ 1561.413679][ T9] usb 1-1: config 0 descriptor?? [ 1561.641433][T10641] usb 1-1: USB disconnect, device number 28 [ 1562.468014][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1562.644726][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1562.653720][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1562.673183][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1562.682339][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1562.720179][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1562.733008][ T917] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1562.744958][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1562.754886][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1562.772843][ T9] usb 10-1: Product: syz [ 1562.777193][ T9] usb 10-1: Manufacturer: syz [ 1562.796970][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1562.802352][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 1562.813439][T10641] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1562.835312][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1562.841427][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 1562.913508][ T917] usb 7-1: Using ep0 maxpacket: 8 [ 1562.945392][ T917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.962954][ T917] usb 7-1: config 0 has no interfaces? [ 1562.985029][T10641] usb 1-1: config 0 has no interfaces? [ 1562.991485][ T917] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1563.006420][T10641] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1563.015629][ T917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.026294][T10641] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.041639][ T917] usb 7-1: Product: syz [ 1563.052818][T10641] usb 1-1: Product: syz [ 1563.057067][T10641] usb 1-1: Manufacturer: syz [ 1563.061938][ T917] usb 7-1: Manufacturer: syz [ 1563.066690][ T917] usb 7-1: SerialNumber: syz [ 1563.072082][T10641] usb 1-1: SerialNumber: syz [ 1563.087803][ T917] usb 7-1: config 0 descriptor?? [ 1563.142935][T10641] usb 1-1: config 0 descriptor?? [ 1563.399165][ T9] usb 1-1: USB disconnect, device number 29 [ 1563.478889][ C0] cdc_wdm 10-1:1.0: Unexpected error -71 [ 1563.479446][ T917] usb 10-1: USB disconnect, device number 18 [ 1563.484685][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1563.484711][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1563.484728][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1564.036458][T22582] input: syz0 as /devices/virtual/input/input60 [ 1564.682937][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1565.143925][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1565.295333][T22598] netlink: 'syz.9.4962': attribute type 13 has an invalid length. [ 1565.366754][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1565.366803][ T30] audit: type=1326 audit(1749288649.842:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22595 comm="syz.0.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a8eb8e929 code=0x7fc00000 [ 1565.460855][T10639] usb 7-1: USB disconnect, device number 25 [ 1565.749221][T22598] gretap0: refused to change device tx_queue_len [ 1565.775466][T22598] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1565.983033][T10568] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1565.993681][ T30] audit: type=1326 audit(1749288650.462:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22595 comm="syz.0.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a8eb8e929 code=0x7fc00000 [ 1566.772836][T10568] usb 2-1: Using ep0 maxpacket: 16 [ 1566.876931][T10568] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1566.892240][T10568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.907467][T10568] usb 2-1: Product: syz [ 1566.919784][T10568] usb 2-1: Manufacturer: syz [ 1566.931614][T10568] usb 2-1: SerialNumber: syz [ 1566.993243][T10568] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1567.002948][T10568] r8152-cfgselector 2-1: config 0 descriptor?? [ 1567.024849][T22611] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1567.063073][T22611] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1567.074579][T22611] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1567.090245][T22611] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 1567.111218][T22611] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 1567.548661][T10745] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 1567.688135][T10568] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1567.779671][T22628] page: refcount:515 mapcount:0 mapping:ffff88801abf8c40 index:0x400 pfn:0x140200 [ 1567.789962][T22628] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1567.798536][T22628] aops:hugetlbfs_aops ino:197b0 dentry name(?):"anon_hugepage" [ 1567.806122][T22628] flags: 0x57ff00000000045(locked|referenced|head|node=1|zone=2|lastcpupid=0x7ff) [ 1567.815459][T22628] page_type: f4(hugetlb) [ 1567.819725][T22628] raw: 057ff00000000045 ffffc9000bb97e10 ffffea00012e0008 ffff88801abf8c40 [ 1567.828378][T22628] raw: 0000000000000400 0000000000000000 00000203f4000000 0000000000000000 [ 1567.836990][T22628] head: 057ff00000000045 ffffc9000bb97e10 ffffea00012e0008 ffff88801abf8c40 [ 1567.845785][T22628] head: 0000000000000400 0000000000000000 00000203f4000000 0000000000000000 [ 1567.854501][T22628] head: 057ff00000000009 ffffea0005008001 0000000000000000 0000000000000000 [ 1567.863190][T22628] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1567.872238][T22628] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1567.879553][T22628] page_owner tracks the page as allocated [ 1567.886321][T22628] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 32301123611, free_ts 0 [ 1567.906609][T22628] post_alloc_hook+0x240/0x2a0 [ 1567.911458][T22628] get_page_from_freelist+0x21d5/0x22b0 [ 1567.917518][T22628] __alloc_frozen_pages_noprof+0x181/0x370 [ 1567.923366][T22628] alloc_buddy_hugetlb_folio+0xdf/0x1c0 [ 1567.928956][T22628] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 1567.934983][T22628] __nr_hugepages_store_common+0x5dc/0xe20 [ 1567.940828][T22628] hugetlb_sysctl_handler+0x1b6/0x230 [ 1567.946254][T22628] proc_sys_call_handler+0x50c/0x7c0 [ 1567.951592][T22628] __kernel_write_iter+0x393/0x860 [ 1567.956781][T22628] kernel_write+0x1ca/0x2e0 [ 1567.961309][T22628] process_sysctl_arg+0x39c/0x5f0 [ 1567.966706][T22628] parse_args+0x310/0xa70 [ 1567.971092][T22628] do_sysctl_args+0xd0/0x150 [ 1567.975765][T22628] kernel_init+0x84/0x1d0 [ 1567.980127][T22628] ret_from_fork+0x3f9/0x770 [ 1567.984750][T22628] ret_from_fork_asm+0x1a/0x30 [ 1567.989544][T22628] page_owner free stack trace missing [ 1567.995078][T22628] ------------[ cut here ]------------ [ 1568.000563][T22628] kernel BUG at mm/filemap.c:154! [ 1568.005663][T22628] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1568.011957][T22628] CPU: 0 UID: 0 PID: 22628 Comm: syz.4.4972 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 1568.023705][T22628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1568.033897][T22628] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1568.040188][T22628] Code: 58 c9 ff 48 89 df 48 c7 c6 60 35 94 8b e8 13 e8 0e 00 90 0f 0b e8 bb 58 c9 ff 48 89 df 48 c7 c6 40 34 94 8b e8 fc e7 0e 00 90 <0f> 0b e8 a4 58 c9 ff 48 89 df 48 c7 c6 60 35 94 8b e8 e5 e7 0e 00 [ 1568.059819][T22628] RSP: 0018:ffffc90003eb70e0 EFLAGS: 00010046 [ 1568.065915][T22628] RAX: dc3b4c6537d8ef00 RBX: ffffea0005008000 RCX: dc3b4c6537d8ef00 [ 1568.073908][T22628] RDX: 0000000000000005 RSI: ffffffff8db59968 RDI: ffff888025559e00 [ 1568.081938][T22628] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1568.089945][T22628] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 1568.097955][T22628] R13: 1ffffd4000a01000 R14: 1ffffd4000a01001 R15: ffffea0005008008 [ 1568.105939][T22628] FS: 00007fd8ea9b66c0(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 1568.114893][T22628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.121489][T22628] CR2: 00002000000d2ef0 CR3: 0000000021308000 CR4: 00000000003526f0 [ 1568.129474][T22628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1568.137458][T22628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1568.145443][T22628] Call Trace: [ 1568.148737][T22628] [ 1568.151683][T22628] __filemap_remove_folio+0xc3/0x500 [ 1568.157009][T22628] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1568.162396][T22628] ? __pfx___filemap_remove_folio+0x10/0x10 [ 1568.168317][T22628] ? _raw_spin_lock_irq+0xae/0xf0 [ 1568.173364][T22628] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1568.178946][T22628] filemap_remove_folio+0xe6/0x1f0 [ 1568.184081][T22628] remove_inode_hugepages+0x594/0x1100 [ 1568.189565][T22628] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1568.195492][T22628] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 1568.200884][T22628] ? up_write+0x1c4/0x420 [ 1568.205228][T22628] hugetlbfs_fallocate+0xbc7/0x1100 [ 1568.210460][T22628] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1568.216117][T22628] ? rcu_read_lock_any_held+0xb3/0x120 [ 1568.221597][T22628] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1568.227531][T22628] vfs_fallocate+0x6a3/0x830 [ 1568.232142][T22628] ? __pfx_vfs_fallocate+0x10/0x10 [ 1568.237282][T22628] madvise_do_behavior+0x169d/0x2e70 [ 1568.242591][T22628] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1568.248248][T22628] ? __lock_acquire+0xab9/0xd20 [ 1568.253125][T22628] ? page_table_check_set+0x18d/0x730 [ 1568.258522][T22628] ? page_table_check_set+0x18d/0x730 [ 1568.263914][T22628] ? page_table_check_set+0x18d/0x730 [ 1568.269340][T22628] ? __lock_acquire+0xab9/0xd20 [ 1568.274219][T22628] ? madvise_lock+0xda/0x200 [ 1568.278834][T22628] do_madvise+0x174/0x220 [ 1568.283186][T22628] ? count_memcg_event_mm+0x21/0x260 [ 1568.288488][T22628] ? __pfx_do_madvise+0x10/0x10 [ 1568.293364][T22628] __x64_sys_madvise+0xa7/0xc0 [ 1568.298152][T22628] do_syscall_64+0xfa/0x3b0 [ 1568.302677][T22628] ? lockdep_hardirqs_on+0x9c/0x150 [ 1568.307918][T22628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.314001][T22628] ? clear_bhb_loop+0x60/0xb0 [ 1568.318694][T22628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.324613][T22628] RIP: 0033:0x7fd8e9b8e929 [ 1568.329051][T22628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.348677][T22628] RSP: 002b:00007fd8ea9b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1568.357107][T22628] RAX: ffffffffffffffda RBX: 00007fd8e9db6320 RCX: 00007fd8e9b8e929 [ 1568.365091][T22628] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1568.373090][T22628] RBP: 00007fd8e9c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1568.381172][T22628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.389153][T22628] R13: 0000000000000001 R14: 00007fd8e9db6320 R15: 00007ffe8f036f58 [ 1568.397146][T22628] [ 1568.400201][T22628] Modules linked in: [ 1568.404123][T22628] ---[ end trace 0000000000000000 ]--- [ 1568.409598][T22628] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1568.415868][T22628] Code: 58 c9 ff 48 89 df 48 c7 c6 60 35 94 8b e8 13 e8 0e 00 90 0f 0b e8 bb 58 c9 ff 48 89 df 48 c7 c6 40 34 94 8b e8 fc e7 0e 00 90 <0f> 0b e8 a4 58 c9 ff 48 89 df 48 c7 c6 60 35 94 8b e8 e5 e7 0e 00 [ 1568.435582][T22628] RSP: 0018:ffffc90003eb70e0 EFLAGS: 00010046 [ 1568.441675][T22628] RAX: dc3b4c6537d8ef00 RBX: ffffea0005008000 RCX: dc3b4c6537d8ef00 [ 1568.449667][T22628] RDX: 0000000000000005 RSI: ffffffff8db59968 RDI: ffff888025559e00 [ 1568.457670][T22628] RBP: 0000000000000001 R08: ffff8880b8624293 R09: 1ffff110170c4852 [ 1568.465674][T22628] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000040 [ 1568.473666][T22628] R13: 1ffffd4000a01000 R14: 1ffffd4000a01001 R15: ffffea0005008008 [ 1568.481656][T22628] FS: 00007fd8ea9b66c0(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 1568.490608][T22628] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1568.497224][T22628] CR2: 00002000000d2ef0 CR3: 0000000021308000 CR4: 00000000003526f0 [ 1568.505230][T22628] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1568.513212][T22628] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1568.521203][T22628] Kernel panic - not syncing: Fatal exception [ 1568.527492][T22628] Kernel Offset: disabled [ 1568.531831][T22628] Rebooting in 86400 seconds..