last executing test programs: 14.444377596s ago: executing program 2 (id=1883): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000dabe00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 14.222885762s ago: executing program 2 (id=1884): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="e8700e444d50a969ff67347cff6127e6ef12ee381927", 0x16}], 0x1, 0x0, 0x144, 0x4004014}], 0x1, 0x40800) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000b6bfe5227cdf962900", [0x7, 0x4002000000000001]}}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r5, &(0x7f0000000140), &(0x7f0000000180)) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f0000000580)={0x1, 0x1, 0x80002, 0x204, 0xc, 0x6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0xffffe000) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r9) 11.459184611s ago: executing program 2 (id=1896): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x24a, 0x3a, 'S\xa7\xe5Q\x92\xc8\x13.e2\x8d\xd2\x1b\x97\xa7\x9c\\\x8a\xd9\x7f\x8f\x14IM\xb5\xcf\xe6\xd40-\x8dR\b\x999\x1b\x87 N@mg\xf6N8\x1e\xd6F\x99\xe5\xad%v7\xd0\xbdOl&\xce+~&\xf2\xff\x9e9\x94\xb0\xf2\xad\xad\xee\xe3[\xf5@k\xba\x87\x06N6\xd4=:8A\x04:;\x92\xee\xff\x02\xf5\xac\n\xfe\xa8\xe5\"\x82\xd7\x034\xcb\xdc\xca8\n\x01\xd7d\xed\xa7\xbd\x02\x98\x9e\x96Y\x02\x03\xb1\xb8\xa7DZ;\xa7F\xad\xf4\x15\x9c\xe4\x80\xed$\xbc&^sd\x87\x8d\xceN\x86\x19<\xfd\x10\x89\xf5\xff\x19t\x00\xfd\xb60N\xfd\xbd.\x12\xfe,\xef$\xb0\xc7\x0f\xe2E[z6\x13\x1b\xd1\x97\b\x86\n4', 0x3a, '\xe8', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43, 0x46]}, 0xe8) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x6}) 11.220347253s ago: executing program 2 (id=1897): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x17, 0x0, [0x2c280, 0x7, 0x3c59, 0x8, 0x7f, 0x1, 0x161, 0x3ff, 0x1, 0x771, 0x0, 0x10, 0x80000001, 0xeb46, 0x8000, 0x6b439782]}, {0x2b, 0x0, [0xfff, 0x4, 0xce94, 0x1, 0xfffffffa, 0x3, 0x1ff, 0x7, 0x3f, 0xfffffffe, 0x60bf, 0x5, 0x1, 0x6, 0x8, 0x200]}], r3, 0x1, 0x1, 0x90}}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_usb_connect$uac1(0x5, 0x8d, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x2, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x525, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x4, 0x3, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0x4, "ca78b2"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0xf, 0x7, {0x7, 0x25, 0x1, 0x80, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd4, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0x6, 0x7}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) r9 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) waitid(0x0, r9, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) 7.643224343s ago: executing program 2 (id=1909): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@random="7183d2d82e82"}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4000, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b000100000000", @ANYRES16], 0x0) r2 = syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3fc, @empty, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) (async) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g', @ANYRESDEC=0x0]) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) dup3(0xffffffffffffffff, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.443096929s ago: executing program 2 (id=1915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, 0x0, 0x0) r2 = getpgid(0x0) kcmp(r2, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x350, 0x8, 0x40, 0x3}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x2, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) open(&(0x7f0000000140)='./file0\x00', 0x440, 0x0) write$FUSE_DIRENTPLUS(r6, 0x0, 0xb0) write$FUSE_DIRENTPLUS(r6, 0x0, 0xb8) socket$kcm(0x10, 0x2, 0x10) 5.831804422s ago: executing program 3 (id=1916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000056d000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000280)="66b98e08000066b8458aa92566ba000000000f300f21b766b9530900000f3267f30fc735bb630000adb800008ec0b800008ed0baf80c66b860b8c68b66efbafc0c66edbaf80c66b88098a28f66efbafc0c66edf30f09", 0x56}], 0x1, 0xd, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x2, 0x0, 0x80, {0x10000, 0x6000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9fae702d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b9f802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963cd14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb193213f4bccab1c34c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f0d9ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d579531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a785d820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37dfd149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f2729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab21842da1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336343f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r3, r3, 0x0, 0xc3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x800, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$EVIOCGBITSND(r8, 0x40044591, 0x0) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000200)="0f01c5bad104b8973cef0f06f3d250fe66b8000001000f23d00f21f86635200000080f23f8baf80c66b8c172fc8966efbafc0cb0f6ee0f216cba400066edd9f366b96000000066b80058000066ba000000000f30", 0x54}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.771491745s ago: executing program 1 (id=1917): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) (async, rerun: 64) r5 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) (rerun: 64) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r8}}) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES8=r7, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4000040) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) (async) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x4008000) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r14], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 5.5407843s ago: executing program 1 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000cab000)=0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0xa0, 0x0, &(0x7f0000000400)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x1, 0x1, 0x6}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}, 0x40}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/246, 0xf6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/135, 0x87, 0x1, 0x22}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}], 0x5d, 0x0, &(0x7f00000004c0)="d4cb67f3c374fbcda2216d966f655029e673a570d00b03e9e356b7a0cc99f962e286681410ade73a24a71b22c4d3a1ddd4d2d20499a36b18099ddc6be26932cef2b71bc0fdb8f1fe9b3816f5058f2d6265c8c9a5716bf5f18dec1aff35"}) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00']) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000080)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000cab000)=0xc) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0xa0, 0x0, &(0x7f0000000400)=[@enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x1, 0x1, 0x6}, @fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000140)={0x0, 0x20, 0x38}}, 0x40}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/246, 0xf6, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/135, 0x87, 0x1, 0x22}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x3}], 0x5d, 0x0, &(0x7f00000004c0)="d4cb67f3c374fbcda2216d966f655029e673a570d00b03e9e356b7a0cc99f962e286681410ade73a24a71b22c4d3a1ddd4d2d20499a36b18099ddc6be26932cef2b71bc0fdb8f1fe9b3816f5058f2d6265c8c9a5716bf5f18dec1aff35"}) (async) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00']) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000080)=0x1) (async) 5.430663062s ago: executing program 3 (id=1919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a3100000000080005400000002b080009"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x34, 0x0, &(0x7f0000000100)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) 5.218342193s ago: executing program 1 (id=1920): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40044) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r2, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) sendmsg$can_bcm(r4, 0x0, 0x8d0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) ioctl$TCXONC(r5, 0x80045440, 0x2) socket$netlink(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 5.040432468s ago: executing program 1 (id=1921): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r2 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x0, 0x4000000}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x2df0, 0x0, 0x1b, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xbf, 0x0) 4.991118112s ago: executing program 3 (id=1922): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000077c0)={0x0, 0x0, &(0x7f0000007780)={&(0x7f0000000000)={0x28, 0x0, 0x7831ad652041f5a9, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4fc6aca226bd"}]}, 0x28}}, 0xc006804) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x485, 0x111c40) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fe800000000000000200000e00000029fe80007dece136f5bc56523c92000000000000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x400, 0x8000002, 0x3d7}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0xfffffe01, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) close_range(r7, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) 4.964328999s ago: executing program 1 (id=1923): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0x2000fb) (async) sendfile(r1, r1, 0x0, 0x2000fb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001800010003000000000000000214b408ff01fe020000000006001500020000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}}) 4.441542307s ago: executing program 1 (id=1925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x44095}, 0x28040000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x44095}, 0x28040000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x9, 0x0, 0x0, 0x6}) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x9, 0x0, 0x0, 0x6}) syz_open_dev$sndpcmp(&(0x7f0000000080), 0xb, 0x80802) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0xb, 0x80802) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x922ecbcc}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x922ecbcc}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0505405, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.569933393s ago: executing program 3 (id=1930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) (rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000011, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (async, rerun: 32) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f00000003c0)="3e12", 0x2, 0xfffffffffffffffe) (rerun: 32) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r3, r3, r4}, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) (async, rerun: 64) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004060}, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x300, 0x0, 0x0, 0x101, 0x0}) (async) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 64) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r7, 0xae9a) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f040000000000005504000001ed0aff2400000017ffffffcc40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee01"], 0x0}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x80, 0x100000, 0x0, 0x2004c6, 0x8000000, 0x7, 0x68, 0xfffffffffffffffa, 0x0, 0x8000000000000000]}) 3.435732863s ago: executing program 0 (id=1931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, 0x0, 0x30}], 0x1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000000200)={0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x68, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x18, 0x6}, 0x20) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4140aecd, &(0x7f0000000100)=ANY=[@ANYBLOB="bc"]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0)=0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000080)=ANY=[@ANYRESOCT=r7, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) 3.370118786s ago: executing program 3 (id=1932): socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="e514000400", 'sit0\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x1, 0x8002) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) fcntl$dupfd(r2, 0x406, r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = semget$private(0x0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x66, 0x0, &(0x7f00000001c0)) semtimedop(r3, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r3, &(0x7f00000000c0)=[{0x4, 0x0, 0x1000}, {0x0, 0x50d}], 0x2) semctl$GETZCNT(r3, 0x2, 0xf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':,.:\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x1000, r5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 2.852431345s ago: executing program 4 (id=1933): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f61642064656661756c7420757365723a5eb02e20"], 0x2c, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r2) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x5040}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.560591258s ago: executing program 4 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000280)=@req3={0x958, 0x1, 0x1, 0x7, 0x8, 0x1, 0x7}, 0x1c) r2 = socket(0x2b, 0x1, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e1c, 0x2, @loopback, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0xdff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000140)=0x5f) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz1\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000, 0xffffffff, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0x5]}, 0x45c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pause() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.427889003s ago: executing program 3 (id=1935): setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x7, 0xe9, 0x0, 0x80d339, 0x45, 0x4, 0xf1, 0x2, 0x5, 0x4, 0x0, 0x0, 0x7, 0x8, 0x4, 0x53, 0xff, 0x9, '\x00', 0x65, 0x6}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f0000010600010002000000f74e8e4dbf8a0013bf8804f049b382ef9ea01d70582490be8def1febda895169297c5fef049ac82b9ebd50c59685bbd4130ad9916a7113def8b728cc531ca97fe2ed731140f6f33049b35655b4b13a991dd9b306383c7cbdfdf6559beb25d9453aaabe4c20244c58040d91c751604559dc288cc913e1c55a7318e375e4d61471c58bc53ff5f78300d7f8e55bca8ca10950d0ee45e113f566c65b65b537e78ad38e4e4714763f8f9000dbf7c0dfe748d2b1c80d7fabd78554b7fdd7e5413cac70888d136c00e7712a6f77e3ba9e6c11f5300fb9c7477e00cae67c75f31cb9f045"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201410103ef9220570521201a740102030109022400010103300009048904028d80f7000905060202000200a5f254108001c4d95903e328f6fe100000000000000000"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000380)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) 1.708761446s ago: executing program 0 (id=1936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000080000000000000000000000020000000c00034000000000000000020900020073797a32000000008900010073797a3000000000"], 0x38}}, 0x0) socket(0x2, 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x3, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x8}, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = syz_open_dev$mouse(&(0x7f0000000240), 0xdbf, 0x202001) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000380)={0x4, {0x7, 0x39a2d703, 0x6, 0x2, 0x0, 0x9}}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r9, 0x0, 0x201f00) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9efa}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x700000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) 1.124458466s ago: executing program 4 (id=1937): r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0/../file0\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.008562231s ago: executing program 4 (id=1938): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x7fffffffffffffff, 0x7fffffffffffffff, 0x1}}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x100, 0x2d}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x4, 0x0, 0x5, 0x10000, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8000, 0x1}}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) landlock_restrict_self(r1, 0x0) connect$unix(r1, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={0x0, 0xfb, 0x6e, 0x1, 0x8, "82b6751c60bd8b3c07b33f4604caaeb3", "3771babc72e9f194774feb45e5a70d0a4dddff613c4d14813cc1eead7cd28a186306c1577c350c2b3636b66977145be9eeb53cdd54afcba077cf37f345d1354b8108557d58cc2e45ec84528a982199b5258c4061ad2246c2fb"}, 0x6e, 0x5e303de11b0f71ce) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000005c0)={0x1, 'macvlan1\x00', {}, 0xd}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000005c0)={0x1, 'macvlan1\x00', {}, 0xd}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000600)={0x0, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000640)={0x9, 0x0, 0x1ef2ead}) name_to_handle_at(r1, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@fuse={0xc, 0x81, {0x100, 0x5, 0xf}}, &(0x7f0000000700), 0x1000) (async) name_to_handle_at(r1, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@fuse={0xc, 0x81, {0x100, 0x5, 0xf}}, &(0x7f0000000700), 0x1000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000740)={0x6, 0x0, [{0x80000019, 0x3, 0x4, 0x5, 0x8, 0x80000000}, {0xc0000001, 0xa, 0x0, 0xb1, 0x8, 0x9, 0x80000000}, {0x80000007, 0x5, 0x0, 0x7, 0x8, 0x1}, {0x80000001, 0x6, 0x4, 0x2, 0x3, 0x401, 0x3}, {0xd, 0x4, 0x3, 0x8, 0xdf74, 0x9, 0x7}, {0x80000000, 0x8, 0x1, 0x7, 0x81, 0x8}]}) write$P9_RREAD(r1, &(0x7f0000000840)={0xd4, 0x75, 0x1, {0xc9, "f59717c4ddbb77264e80f67ec3b7bac9b683b70c56e7095cb928461f1ae4f968c0df7cfb738b0e3237a8fddf0b4229c8c1110d572f748fb23a6625a04645e35c9453962de26419d0c3d7b95e6167e6d2235ec594b4ea4e82f0a7f07b15ef412c25bc5ad1d09184503c1a34edf1312c9807cd1d63cc1049ea06091474c09d3022fc597ba35955ff667bde052eed276a30f1410f876391e0c3cb7179b8530035995aad5f34d8fd29e2cec73eda2172fa8346103cd9f6b7f3259aca4679fce63089dbce286486ee243dc1"}}, 0xd4) umount2(&(0x7f0000000940)='./file0\x00', 0x4) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x82, 0x2f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x24016040) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x82, 0x2f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x24016040) sendmsg$nl_route(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@bridge_delneigh={0x3c, 0x1d, 0x4, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, r3, 0x2, 0x1, 0x5}, [@NDA_NH_ID={0x8, 0xd, 0x400}, @NDA_PROBES={0x8, 0x4, 0xd}, @NDA_SRC_VNI={0x8, 0xb, 0x9}, @NDA_PROTOCOL={0x5, 0xc, 0xfc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480}, 0x20040000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000b80)={0x8, 0x11, "e56ce886878c3a41361b4ddafd39478c4f"}) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000b80)={0x8, 0x11, "e56ce886878c3a41361b4ddafd39478c4f"}) r7 = socket(0x26, 0x4, 0x1) setsockopt$MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000bc0)={{0xa, 0x4e23, 0x80000001, @mcast1, 0x1}, {0xa, 0x4e20, 0x8, @loopback, 0xa}, 0x1, {[0x400, 0x3, 0x70d, 0x1, 0xd706, 0x8, 0x10, 0x3]}}, 0x5c) setsockopt(r7, 0x5, 0xfff, &(0x7f0000000c40)="c56d73c52f86c7d7165f851adafa7f433321389f", 0x14) (async) setsockopt(r7, 0x5, 0xfff, &(0x7f0000000c40)="c56d73c52f86c7d7165f851adafa7f433321389f", 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000d00)={0x8, 0x0, &(0x7f0000000c80)=[@release={0x40046306, 0x2}], 0x18, 0x0, &(0x7f0000000cc0)="df75da8661539d827fe863744a46e39b3fc7b582081d9eed"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000d40)={0x0, 0xe5, "111b064233e6c0133f5ffe1ca23b1368ff49e81018ec76edf48e8fa6fc7bd8f16866c26038d43050648f1574717bb16914097e86209f419f1d9895bd15c58efcc48ddcd9dd091bc73e78cd7c79bfc0244043afd0d4751442b35dacefe1431ec07b5627852fc1c92c32867077cb42adc3b43563e19613a8e3cd870dc388b9ca553c04d00045439c34f2af7728c9a03c3497fe1281f2734cd49fa45d817331eb03e554b2364d4b9452702d30c62e943c5a9d3ba21a474af79020a2f43a231f4e33463bb8d761b9aecb09d5d8112b5dc78b9dffc0d16639d1e79655c57cdd0eb0dba4dde55255"}, &(0x7f0000000e40)=0xed) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000e80)={r8, 0x22, "dcaa0fddc2f68fbf68b655c2737b2fe74e48bfa4c971f9a3bb7db00093d121d574ab"}, &(0x7f0000000ec0)=0x2a) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000e80)={r8, 0x22, "dcaa0fddc2f68fbf68b655c2737b2fe74e48bfa4c971f9a3bb7db00093d121d574ab"}, &(0x7f0000000ec0)=0x2a) fcntl$setpipe(r5, 0x407, 0xa7c) (async) fcntl$setpipe(r5, 0x407, 0xa7c) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000f80)) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000f80)) 822.377494ms ago: executing program 4 (id=1939): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x200]}}) 596.256344ms ago: executing program 0 (id=1940): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c81, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = eventfd(0x2) io_submit(r3, 0x2, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000001c0)="c901406773674ab521fad6d1ac9236377475aad95e36200ac421ffe28022cbadab12fcbc41aad3ba5f242b6a4f01aafa7eef0db1d6cc60a4ec47a4fbbe376f35fdc821f67058531a76c3e1963aad25e7f4c648ce2d329646fe350c94c165e73252a4f3575f19cfe3dac66c79f2330848abb4abb9a0e28a90bad0b1004c6afc17e74936912b26a58ecdd7e8", 0x8b, 0x4, 0x0, 0x4, r4}]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="89cccd", 0x3}], 0x1, &(0x7f0000001580)=[{0x10, 0x0, 0x7}, {0x10, 0x1, 0x2}], 0x20}}], 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f54080006"], 0x60}}, 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) ioctl$int_out(r7, 0x2, &(0x7f0000000400)) read$midi(r0, &(0x7f0000000280)=""/217, 0xd9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) r9 = accept4$inet(r8, &(0x7f0000000440)={0x2, 0x0, @multicast2}, &(0x7f0000000480)=0x10, 0x400) ioctl$F2FS_IOC_COMPRESS_FILE(r9, 0xf518, 0x0) 527.447547ms ago: executing program 4 (id=1941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x2, 0x5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r6, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c14"], 0x30}}, 0x0) mmap(&(0x7f000090a000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, 0xffffffffffffffff, 0x71fb9000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f000015c000/0x4000)=nil, &(0x7f00000be000/0x1000)=nil, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0xc, 0x68, 0x0, 0x65}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 445.593143ms ago: executing program 0 (id=1942): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="54010000110001002abd7000ffdbdf2500000000000000000000ffff00000000000004d502006c000c0015"], 0x154}, 0x1, 0x0, 0x0, 0x400}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffffb9, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0x2, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0xffff, 0x0, 'rr\x00'}, 0x2c) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@random="219526f4e916", @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x8000, 0x0, 0x0, 0x32, 0x0, @remote, @remote}}}}}, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'wg0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'veth0_to_batadv\x00'}}, 0x1e) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0xb, @win={{0x0, 0x2, 0x6, 0xffff}, 0x4, 0x9, 0x0, 0x15, 0x0, 0x10}}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf9c9761af5d9f86c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc050}, 0xc005) 108.414308ms ago: executing program 0 (id=1943): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000100)=[{0xfffffffffffffffe, 0xffffffffffffffff}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, r1, 0x0, &(0x7f0000000080)="6e4a8b640ee2d642c0e867b468d2646c5bdb2a7e6b091ee38d5a4265caa9279fb0a2e1e7bd6deeeb01e16b42e4f2200359fdf7a806", 0x35, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000000d40)='L', 0x1, 0x56149216}) 0s ago: executing program 0 (id=1944): r0 = fsopen(0x0, 0x1) close(r0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x13) sendmmsg$unix(r4, &(0x7f0000001b40)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000340)="9cd0fdef948da15b1aee2013c6d32fce663e63f8cc3751b0c01622fe5f82e08adb3f29d6020e0652813eb4f6f28f36f8cc1e3f889c2ad2cdb79fdb7d00cb22a5f5", 0x41}, {&(0x7f0000000580)="c61bb66b929891cdadbc95c87b176566844b4b83b26145f155f7dcc1f512abade292d9d78da4448af97e84b7c7feaf72781cbbf9fc4911cb07660b705d17f6377ed2e5eb42a1255555e2ae97b1ba6ec1374bdf60ac1c197fda3c7dfb19a46ea2b235d029bf15417a6b8dc3751fe0e4ef42b99720e23b872a791d68156e864fa97399d10f9556a4bb1fe20625914f13a87239ede9f9b8d4a9892c480900c12df3538328c76a2331b34e5e224d0f085c838e613d02f0d4e0e540835f960e911dc7e59530834905b8219415f3dd9cbd8c1e3f5ebd5692e3aa15e52f7098e7812965ed4d86eb56b60112b14e9c7e", 0xec}], 0x2, 0x0, 0x0, 0x800}}, {{&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000740)="e578f262e86ba967e364ad2b3f19d7575b0e0cce97159a7252ae68597717b9439fd3a46d798030f25a957fa85b708fa40203e8efa3dfc237ca7e444daf38be4c211323296c1f008c220afe646b28cf59e4ae1951e3b0b18a1ce2bfe03100c0697576475b03b0aa757fd19c018440bfed", 0x70}, {&(0x7f00000001c0)="f4998d3ed27428d61605172f7d67be6577b5491a31858a799e8510bdea07d945ea6c78c450", 0x25}], 0x2, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x78, 0x4004044}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000a40)="f1324603409e0fe093efba386e7febdf3916a0bbc23ad7518015d2a6b53aab39698bbac96fc5e2162b9ab1480f18801a7fbb2844c5d4a82d5ea5540d3f6dd124b08847a976b946d1a8fa45cdffe540265116440bb783a14ced2e66a21a51f2feb00d9fef22be793303616399ac9631e3c98aa8ba0263fbd811ade21690d88e090620aafbbfa5c3eaec3e355d3df543ac81f92cd493f860f93cb2039855e7a9e0711ab9", 0xa3}, {&(0x7f0000000c40)="4f4f5943099ca131d2cbb569fee0e41fe768ecd08eb75b212b5ed48a0c63c0a7611765c48bc1a945a17e3220be52a32f9e8deaea8ab06a78bf5754f53c65620fda6305b1bee97b825cfefc9ee6c041c718f425c3fea75b19e70f18185f8fcdc83f94fedb2b534e0c6e0ca213e111f2d3474b00ecc333a67c63e0c41cdbfead439a53226980c8435d2dd19b38f47cfc1748a71f103ddf4e4dfa3c8c14a5f38d22c76ce569ad3e8f7ce867dbedeb83bb", 0xaf}, {&(0x7f0000000d00)="4497b3fa3415b18f99f7b8553682971b09e700e8da4b41b0d409a68a3198d8ddf3bdec83f07233fdeec3ba7bdeb7d0c39da8a877eb1374e37f74a69d5afb319cb866282059dcf7de9743e14a77e91d4c427f0afef8dfa1d4051617960be21e2a58046876e6776e88746f85c9f076ea430efc254cd5c1bf7f39c9ba0e4a7256ac40a262b5448c336e8f7ad72c0a424434ef13bc88ce6788f137f19488", 0x9c}, {&(0x7f0000000b00)="f1801d3b", 0x4}, {&(0x7f0000000e80)="eb32c43a28394947cbbcda31da8fdba627eaa8ce3e9434286658b0a78f980c649642ee64006040230bd6e3b957f72d16e5fd4417448bfc80c0dbdcb43f422148a427196d8124546af4cffea70d41dc7e41dc5ecc6f181a45cd0feb95caea590220da9a22f02b21cadfee8cffcf217a1ff4eaa539b37a8f0dd41831dc8db5228584aa3b8ed2154f14af0378a506fc9b708cb3b81608805086e42f69f2b6e8e5bc37246bc61d1c56a0cdd997fe3328069a0248f4dc4e98ce18360a7ba8222450ebdd52e2a5053a55841522", 0xca}, {&(0x7f0000000f80)="140c175a38131d2a872deb4ffbf0f013b62464cac5a0e3c479b30d5c42ea7500a0aa8838b567bb4e6a256a3b81e7f2ab116f7747f90cf026ba3723dc5d358ab9dc462896a09cc21a0c5830b0b78d68e836b00604fb74b532ff3b9540cc1c3c6939ddade3c962adb7a390dfb0f5c16d69c170ed6d39f2807ca79bd7e3c68c9a9ebbc47e47a1c5002ec2eb6c5e1a92fd4e695bc38e5af4bd5b3de05adacb", 0x9d}, {&(0x7f000000a380)="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", 0x1000}, {&(0x7f0000000b40)="ba308c1c267fff3b076958a18be39430ecd0", 0x12}, {&(0x7f0000001040)="f5163cf54da8f3f97542d5520f61431d446d801dd3dd7521ce9c849fb2027cd1adc0287696ac3e686c7d5c5ae591f24a34f73b6acf9174cf9ee4b80cb95bf93c7c", 0x41}], 0x9, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}], 0xb0, 0x40880}}, {{&(0x7f00000013c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001440)="d0acdefeec4db195e1632ff854cdad92eefdc45a26ce9c4f0f2750d6597def88b082a27dd5d4cfe70ad826143aa01afe01beee1cf662fc3b3182fad588df070966ba7a122524", 0x46}, {&(0x7f00000014c0)="570a9ce5105a43c81b4e3914039683f0", 0x10}, {&(0x7f0000001500)="6ce1cdfac21d9085d8bd2b0eacf07add3030537e7811a50fb155ccdce559613987f522ac5b4c780841ed151e02226bc3bf1ca9ea5cae37b0a133db953e47f249", 0x40}, {&(0x7f0000001540)="eb87fd3a35bd88a33c83a9f6f687941814e0c7e81d871967b421e3788524dc3a0ca7e591f3d96f94747a69489d2b7944c5b54f9496c28bfe23f8d83bf6bc8c407de002cb081477e59ec07c168d69b4d17f1bf1edd4f45a310bd0652e65dce0ac41a05c28143e0ef903eaec9a462573f829c8b76ec6de64736d47dab45cd85624ebbbcfee3f60f210fa892cd17af1f5602da573e387eec3d9d19854bb1a069adaf2301c3d5db05b276ae3cbf13f0c9029d676c505c750c9936402a61a374ea72f146f00c59f", 0xc5}, {&(0x7f0000001640)="b2b39da35452c6c4ba1b6760ed805f24186b18a7d04977908a1ed3a047eea9c6dfbb87302730b31838f4bb7f3ff94f7050aa19456726a25600a58d1346799038405a6034efdb4e84fad9554b5dc0b81cf66686ec6b29a71525", 0x59}, {&(0x7f000000e280)="b8cb59b162e8fd0418cc496a3e0ba1e7ee3db44b03aba692aa242918859f174ccc6ceb8b6c3692559fb2a1e9d98ba546c3dc09bed34099ace3e965a641b3b369d176222525296c8b041268d12e113c8d540dd262d7f24d4db60447f1003ac956cb4db72023297ad4daa1a20c69ea5c46d62c82d895bbee238081805dcdbfa9401365f9211d7fdf6f66f8372def29712fe33f7eba1e4b8a17ec2bfed6fa8355c4f215015e75c8319e6e05fb391e11345bec6e678269d90474fdd2414e743cbee535c150462ef0922de270647591490cf097a9eae4f761b55db90738bc7ef26ecea564816e80a8b4b62a7780e61e1bf4c628491013291da5a1a0d1a84946176ada231becc7c8e6e0641c9c7c268e37e3d2d50d973596bb49378c0deff6c58b84aa29dc53d34e26166a51c6cd147433d6c8ed004881c9b428dc76c4778d71d7c5db034b7f45417d368f3478017986089bd0f1eaded74708a2f2afe14c747813a22f67c3a147dd403aeb7830480ca64fce5f19574bda19fb64709067e21fec6cb5655a4d12219912d17b8c3553ff78beac7e356d9604f283ad444b47a579cd4c51866df13882a50ae5d03d6024289fb1f11ba257886fa64f7c8e76c429e7f5ed0073bbde7e610c95ab7e65f2336ef4e82046d3f89b21de83acad337c4b56a5ae876aa0f2d055c8c352f56a4a300e3244f8361e6ef8e57127c3ec05d2a795561fe094915ba3c2c7c6c0faf467956264ae77575b83400532e18eb1ad932c074461d72ac17ed376f11dec71673f2527ea810ac4a3794ca37d686b7e90f41ccdb901471c427e3888dc2ae818b7c5487267c722239cbc6875acc869a2b9dc8e26b74a2c549c4b9b40c0440dbabff94c8b8019fb916d1c0ea5f283d2e510a249cdacbe9c9bcc05e2b810ab5104233151bbaa92b27842640be56132bfb565f2db94b22b287ef55893bc2e5f0eb257b419d38a09d9a69440540f74f3589cd4855125626808bd695978ab982024572f18d193d25234d6a03eb7141dfab82c00e550002e9e2933abcc1ab8a1bef212a66ba93b7f17dd6aa91facefa052db3f2069202a918808eb4b1fcc6eada2c631f1010cc5a78a7acd02f9de0c9ccb3bbdcc35b60a9f2393ad19abc96ef5c50e70211108be5150516ed4ab63cbd8a77ba679a0fba41a5950b02824e7cd4c321f96f510da3be9aec87066529262a681cc89e95f0e8e89d1a1463f8983305c8c2d853f36021c5e9a1c0162338031fc0a7b99c8aef0121604c4256dc0ef5dcc09ed24abdeb6bd018286899b1486ac6d3987c7c89bbec292706db6c4c1a94d6298c2f32e676b629d4efc1968d430dac5d052be93a32891e72c39416936873150afded1cd1d92f87531c82114b53491a7fd90b4be1238bdff87b88f24b25f5126ef76446153e4c8bedb1c5ea041d10d3b4e023e5a4be47787d19d4b5ce2a152f98523189f4591bfdc82a3aa43d48f73be2a303cf61ae801b3a7fe35ab815beaa14749a0b0ffa4aaf3bf6967a6b4cda8f2a17242ed6d68ae6cd8bbf261a5002b8f2b9ce5f0a9ae2ee813906e1e200959f50f1e24699da5305aca435acb0a155929677bc0f17fc2723c0128fdc97f8eb612ea3eda186c3e477e35c5de8036aa724fe97ce3d8eed6db9421c8679eba646dc538877d18c8ab70bf499fc907d49d63d756523f8d110d2589b59409722d375616cb3b7cd0bd8e23accaa299650414f01ed28b11b8df2fa9abe3bda65d78dc7ab42394ef7316eb3eb611cc9426f76e453df801b4e60fcee24fb200faf33098c184e6a5dc363ce897f4e75912b634fdff6d4a005af2731e6e816077328bb0f116455222f89ef06af428e5400c04bb802793e2816055c7aebb54e77e9e74639678e45a7349850000d2481cf31434c16d6e66e4b418ae97a8e8c64a4364110d94a17e6a6abd4f11d440b6f1ffdb8eeb8fb7fbbb41102575624cbbd4974653a917b124642448f5a7896196d0ae41a893ed847b215b60ec212a8f98d0a49a89e4028219ca8ff583d392f134e4d1f18b8688b09fe4cf7d8ef204951f88b9051c993643e5a4df3b9e9ba097f72bfbd393f65e94e343517bb2d3daecbec9cb04cde63611fb996b53c0a8f245ae6f082a674cd5a883a24740cd2ad3edc13d9a68a9ada4db7fc5c0ca4fa5d26153bc69c5bb9d7dfa5a46d9d344a29e85e5f100c1e6e70ec2cfc00994fe1b05069bbaa1e16812e142c62423ef1530e8df26f00754c1384d2725249740738d85ae420c77a251d4b4bc675b9ed49d6ac9bfad647a945605cfa9bc69230f64920e2fb964959f46b3608e27a2830902e1d1b1c3599c42b01d5e4de22cf8382b0e7715f4b90a43c7ae94b9f96d04d5479a517c21ff3855f6753cdf25ee6448cd55d0976853c2053f8a1091aeb5b0809f31017b05c452f01295e07dbfbe09381a34225e5f63e2851031f25faa6064d0bb600edd992028c55221ac707f211d6ae7f01a592283a74c3a775885fb777c44419684866677d6a7e5cbba9be10b205f09799b93366006a23c46107c31d1044ddb5ccb5c16e7c6dcf2f3f393c696c3aa91d2c54a4f888b66c6fad72c955bd1c1742dc4b0e95861ff59448c96655b139605006e9ff1f2852e4c307e8a1f26d87d504170d46043066ad2e99539a20c37d5118502bea6067731c854053cf3bdc4158383018f903196215038c9a6e0499a21fa6dd5f9960366a0fe3045f22f638d4dffd9c9cbfd72587ea65e2679136db78ad5486c999814146c1663e4a3c4da0712e0753d96e2abb8d413d42c8efc1872ff917472b86c04a0e1dba14cdb3800ce2eae7c80de33f7a9352f27e317c3cfa85a7744c2a4ad4861d15840a52891da810a8c1280b329c61e31303dfa71508a6dff18d488b86a3868622e6d7c5a80b088af510d0ebb1bef66233c7289f620110ca2e87cf4c28712ba5ad25087d7d71811757d6bbf84131b8c584cfc0cd3c601ae916a66727220f183c84b2fed1039ad9be1c1d9ed2fdc8b5b2edbf10bfd4fdff1272322a3c491ca09c20850e4f0807ce07c78af0ae8b0a7c85d18d617d5fcfd52c23088899c4a3212fe34327b90ca0339af52e24dfbea9d5828d94b586b16c7a300db85870cd77414a9525b1a8dd4b24255f59e0719fe13a86b72e50ca10de7e96ba4eea5f7fa784bff8773625330802275e063253511084650ff3aee2e083038f93d259275973d3a71e3c3e0dd84c7a4f0f4c9c1e4a4e59d5847941fcb16f5234e5f5ca9e806eccb5dbc40cea827010b0d31194f8d7dbd287af70eea3b1889e9a2e3746c6e1efd7576542fd1345685e2c703f6598de2b0d70d7b7ec106f8f582f86698c5e108ba67c7cfa482074b4345f028eeedd9e9f798689406cace1c590ca55a5d6d2390e32e9774ec6d3cce542ccd83ee7ebaab58a6fcb5fce4ab864327724e3efa5a703b0d8e58f003ac30cebec6eff43972f5ac316c43c1c8e1ebde9a3fb0c1823eee6fcba45858d57791ee44f3424c59e850dedee793e895bd9a0c8753daf75dad20754571c07722005fd1fc6cefa67e352890999c375119439dcba21ce2b65cbc3978a94481452c1e92957e38d306f08fe7f0bbe1cf0a3cf44b3c527a3961625af9b952b4bc2b37e4a51e0703c49df38c94bec0df31e8cfcac19a009c81a3d1bc911e9f041c44ea223ce7b7971f64539f66c733a49e38469503ffe0590cc69b07d54481304d21a752e179ff0e0ae64beea826ec9804ca16d392b8425dc4b1a757115259c7d510604a7fa4085eb368188913f6076b09fee28e4edbf7154977b106cc66b2784c3dd3bbc398b9a4de0ec20d75fd93598b64c3c9aede60292d6267596379757d9b30d1028e87bf5c199df05fca4a9ea7956455255783156816e510ebb259a0e73878d8153a7b88ff03e5df0d55e8d25d47d74c1ffdb1932df57843c9673b8fcdceb3e1e446d67af4ff2fb2475a91a1838fd9b043e5369559be5a13c803fc9a0d3dea9811a68d914819407a616ea224c49ac8cc44cb8f8aacf26994ed04e0bd4852943c004be30fe100a7d9e3c5d86f9e3e0a73f25375e1f4bcb2d9eadca03916687f15cb5da8f0d522ceaa3fed729dc8c56dedbd4804c85f6bb4ce51db7484a8d8d3723dd49dc67477133e251539cd51d5c04c79d46847ecd31fd73686886d5b9bdb32391330a3fa0ba20593b6a4732ef70e44cbb046901f3ca3efcac8ddc563fe0e6c0e0df3cf89181a3c5151fce2098366ffed5c9b2c19b986c18143f8e1129403a0237984509956949fbc44585556e31c235f5862edd73dfd3f504862772b4d4b847cedbc7882222eea387598a7d38e9794ccc2e1162ab5816da1b72636f9db655142312a2ad8a6174263a6e2e32df6d2a8321d2de16b3f76ee9ad6b313e43bbcc92c16c8fc7953709ebc7e9d7cf5996cd7d9cbedfff2975d64135c6e1cf1e46b280588d1aeb4fbad41c0db98820820a4736008af222a368528a3f83f2659f3fd5193dc50078cfc5e4062109c53b691a79e34d8d53a471849d0d044b43ee995c0e289608bff675026bf3dfeb92d0b94e1703639f489b0c1a7aadad837d5c1509e612545b0549b06889297f0b575c92d14e1fec74f51933abf724ea3abc4b71ae3b17e9265f9e082d210d5774a64eb117691eeff70999911079b6c23f6d1a293b7d8e7f71106cbe5000bb54ddbbc028f1114325b4ee5a5e589884eb1ea15420360992253823d2fc8a6e037eb55cdcc5d308ba8c5479240bdb703f5bd47c91ba6cee7e3aea62de5511f834483a9105abc87dcc6dda9f6f1f1963a06f80e6b4aa87a501eb045e1ff2149a4bea4fdf2acca94ae0d3c1e2b6c0e0f7645bc75a6bff2b9b519ee99f73b6bb1e696461d04c021c0421d2266fdf9f5904c4442cee4a64acda7e917e7b63aeff22d95a8b3537cf308b235ff4180bc1929119cde37d0958baaadcede2ac9ac7e6be6974c75ff9a2e3d5ca92a0d0fc04fd4d96d0c755d4e9da052b69c8dc4c9a779e5878771fc9a78665c85e6da51cc005909975ee4a5ffc744b0a51fa26ba53c169b51109725c8b1d883882d8831436ed4cad493123eba10fc2021262ad7fdc021dbda4b94f499a9024ef5bd809bf7b689272330cc6861cffe54052d15e0e8d55c74474e139dad38c92e40459b7d6be2916fcca6fad45ea54003c982562b1820dcceaf9e9fe1fae13d4613ffc77097808feb5be4dbf7cd121cd7e03866f6d18451721d27a0a39c929bebd347d00537b15a4cbd4a59013f7debec58e61fe0506a944dcae2bfc37d1222a673d617da4e9753058903c5a437e81c0e3b07adf57c6a5beaec346040f13afe0bb57d00540032a70fdfd773cef2987fd138fa319a0c1e9037ea095f2beef53bd42a8bd6d5dc137749293cc65a915a5af0bd11e642a1f3bf9707518bf03ae1387bea99a8522d4ce6f07388e658766712fdc839822437cb006cbb8908dc6ccef2fae87178bd11bd336f7e850f4c0e7c5a81e15ab7601dc9c65e9f6d94b879d861ed5476c7aff1f070c8973e1fb6316510b126524b66626bee46bda762fd6470ba725f1768fc11a2a82b809ab4e2e45a7a609a953df6383d61c7d6b0b2a754fe9dc49c27caa7b38887473064f1bc496b7a7e9a7975b55657359ecf665ab4bdc759b1ca01dc11d2e7a59a45d94e096cf7634057b9b816fb983c12aa87f5716fcc972a4a59321a048be1a0a662da2032aaef18f94f753cbfb2193e56fcdb33f0b3da9cf49ff72b909c6bd47ab8ed0575bb9d24eb124111c4ce410cf1dd90424e9a0c90effe92a35bcb045c753f21217c", 0x1000}], 0x6, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20, 0x4000000}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001840)="5a5bf5cff12089baf75528845f128e685b3ba399d7e75e8c8fdfd251faea563c2551582bccdf513855e48acf3c765915fa66d877ad3cfc2502887e60699818822ae228232fd74b059d678da2d716f895f613d6cd3dcd8ac5ebb907c23cdb4761bbaa6768d9dfb0cdcd76dfe8069b4abdea55fefce858621db4e655d0bb18e51c6cb52c6760a4721478b0fe6f5e6098fe152fa0266307939445e54031936aa01538b9a382d7b6d3d7eb1fbe8672a9175d7c637664094344cce32088b21767a421858a32ce4e6d0c156e8c662f17533ab6cb4f5a3d506ad28cf844bc474dd70496", 0xe0}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x108, 0x4044004}}], 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfb}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80840, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4138ae84, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r11 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000180)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81F\xa9sz{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x8d\x84\'\xa3\xf1', 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r12, &(0x7f0000000700)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000050601020000000000000000010000070500010007000000090002d20aeec3d44de47a2e007b5c54480073797a310000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$key(r1, 0x0, 0x48c0) syz_open_dev$tty1(0xc, 0x4, 0x2) kernel console output (not intermixed with test programs): T5850] usb 2-1: USB disconnect, device number 96 [ 508.482068][ T5914] usb 3-1: config 12 has an invalid interface number: 40 but max is 2 [ 508.499721][ T5914] usb 3-1: config 12 has an invalid interface number: 155 but max is 2 [ 508.559229][ T5914] usb 3-1: config 12 has an invalid interface number: 70 but max is 2 [ 508.636185][ T5914] usb 3-1: config 12 has no interface number 0 [ 508.647529][ T5914] usb 3-1: config 12 has no interface number 1 [ 508.659045][ T5914] usb 3-1: config 12 has no interface number 2 [ 508.665695][ T5914] usb 3-1: config 12 interface 40 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 508.679057][ T5914] usb 3-1: config 12 interface 155 altsetting 255 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 508.691110][ T5914] usb 3-1: config 12 interface 155 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 508.704271][ T5914] usb 3-1: config 12 interface 155 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 508.717297][ T5914] usb 3-1: config 12 interface 155 altsetting 255 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 508.730302][ T5914] usb 3-1: config 12 interface 155 altsetting 255 has a duplicate endpoint with address 0xC, skipping [ 508.838803][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 508.856566][ T9] ath9k_htc: Failed to initialize the device [ 508.876614][ T5850] usb 2-1: ath9k_htc: USB layer deinitialized [ 509.012838][ T5914] usb 3-1: config 12 interface 70 altsetting 255 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 509.048728][ T5914] usb 3-1: config 12 interface 70 altsetting 255 endpoint 0xA has invalid wMaxPacketSize 0 [ 509.071896][ T5914] usb 3-1: config 12 interface 40 has no altsetting 0 [ 509.087379][ T5914] usb 3-1: config 12 interface 155 has no altsetting 0 [ 509.104087][ T5914] usb 3-1: config 12 interface 70 has no altsetting 0 [ 509.126962][ T5914] usb 3-1: New USB device found, idVendor=07b8, idProduct=b21d, bcdDevice=ab.fa [ 509.137635][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.158508][ T5914] usb 3-1: Product: à – [ 509.166518][ T5914] usb 3-1: Manufacturer: Ð [ 509.177738][ T5914] usb 3-1: SerialNumber: é¨î¢Žë»á€…莯䮔馜璵詣㱂称ꉬ㋤êµã»¦ä·ˆè•¹Õ¾á®®ï¶Ÿã©­í”»ç¼ âŽµá ±î©ŠèŸæš«æ‘©æ•¼é泅袜뤠ｱáºãŠå°¢á‰è¼¡ì®ç‹ŸèŠ‰ï³½åœ±â‚µä‚苈깶í”á¥ç‚¸î ®ã¬¿å¼‡êŠ¹è¡à­žæ’寊㭒㟫㑇橄îŠã½¡æ²ƒã‘‘æâ¯ïƒ‰æ®Ÿç«‘î¥æ¢¸á·žã”£ì€´æ¼™å“¬ï–¿è›«ä‚µîŸ­â·£ì†¶å€‘챂蠽ïà´ãŸ´ä·¡â­’氤뀀녘ä†ã‡Ÿä¢Žï³”唩ᾟ [ 509.209768][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.275923][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 509.374559][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 509.481237][T12136] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 509.832813][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.874189][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.047046][ T24] usb 1-1: string descriptor 0 read error: -71 [ 510.072205][ T24] usb 1-1: USB disconnect, device number 9 [ 510.154581][T12161] loop9: detected capacity change from 0 to 7 [ 510.177795][ T5914] usb 3-1: USB disconnect, device number 108 [ 510.239470][T12161] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 510.248876][T12161] loop9: partition table partially beyond EOD, truncated [ 510.256200][T12161] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 510.386926][ T30] audit: type=1326 audit(1759455969.228:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.409507][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.504584][ T30] audit: type=1326 audit(1759455969.228:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.514567][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 510.533928][ T30] audit: type=1326 audit(1759455969.238:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.587555][ T30] audit: type=1326 audit(1759455969.238:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.664754][ T30] audit: type=1326 audit(1759455969.238:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.762431][ T30] audit: type=1326 audit(1759455969.238:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.4.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 510.871818][T12170] FAULT_INJECTION: forcing a failure. [ 510.871818][T12170] name failslab, interval 1, probability 0, space 0, times 0 [ 511.087669][T12170] CPU: 1 UID: 0 PID: 12170 Comm: syz.2.1527 Not tainted syzkaller #0 PREEMPT(full) [ 511.087698][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.087711][T12170] Call Trace: [ 511.087719][T12170] [ 511.087728][T12170] dump_stack_lvl+0x189/0x250 [ 511.087759][T12170] ? __pfx____ratelimit+0x10/0x10 [ 511.087782][T12170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.087808][T12170] ? __pfx__printk+0x10/0x10 [ 511.087830][T12170] ? __pfx___might_resched+0x10/0x10 [ 511.087853][T12170] ? fs_reclaim_acquire+0x7d/0x100 [ 511.087888][T12170] should_fail_ex+0x414/0x560 [ 511.087922][T12170] should_failslab+0xa8/0x100 [ 511.087952][T12170] __kmalloc_noprof+0xcb/0x4f0 [ 511.087976][T12170] ? tomoyo_encode+0x28b/0x550 [ 511.088011][T12170] tomoyo_encode+0x28b/0x550 [ 511.088047][T12170] tomoyo_realpath_from_path+0x58d/0x5d0 [ 511.088089][T12170] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 511.088115][T12170] tomoyo_path_number_perm+0x1e8/0x5a0 [ 511.088144][T12170] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.088185][T12170] ? __lock_acquire+0xab9/0xd20 [ 511.088225][T12170] ? __fget_files+0x2a/0x420 [ 511.088252][T12170] ? __fget_files+0x2a/0x420 [ 511.088275][T12170] ? __fget_files+0x3a0/0x420 [ 511.088297][T12170] ? __fget_files+0x2a/0x420 [ 511.088324][T12170] security_file_ioctl+0xcb/0x2d0 [ 511.088349][T12170] __se_sys_ioctl+0x47/0x170 [ 511.088373][T12170] do_syscall_64+0xfa/0x3b0 [ 511.088395][T12170] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.088414][T12170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.088433][T12170] ? clear_bhb_loop+0x60/0xb0 [ 511.088457][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.088476][T12170] RIP: 0033:0x7f2cfd38eec9 [ 511.088493][T12170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.088510][T12170] RSP: 002b:00007f2cfe237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.088530][T12170] RAX: ffffffffffffffda RBX: 00007f2cfd5e5fa0 RCX: 00007f2cfd38eec9 [ 511.088544][T12170] RDX: 00002000000000c0 RSI: 00000000c0205648 RDI: 0000000000000003 [ 511.088557][T12170] RBP: 00007f2cfe237090 R08: 0000000000000000 R09: 0000000000000000 [ 511.088574][T12170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.088587][T12170] R13: 00007f2cfd5e6038 R14: 00007f2cfd5e5fa0 R15: 00007f2cfd70fa28 [ 511.088616][T12170] [ 511.324842][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.458770][T12170] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.658527][ T30] audit: type=1326 audit(1759455970.518:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12168 comm="syz.3.1526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x0 [ 511.708055][T12178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.729656][T12180] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 511.812079][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 511.860789][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 511.880708][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 511.918123][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 511.967077][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 511.992410][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 512.016852][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 512.067532][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 512.076087][ T9] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 512.108416][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 512.139044][ T30] audit: type=1326 audit(1759455970.998:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 512.168836][ T5850] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 512.213094][ T5850] hid-generic 00A0:0006:0003.0020: hidraw0: HID v0.05 Device [syz1] on syz0 [ 512.228304][ T30] audit: type=1326 audit(1759455970.998:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 512.270602][T12197] loop4: detected capacity change from 0 to 2560 [ 512.320210][ T9] usb 4-1: config 0 has no interfaces? [ 512.325723][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 512.338843][T12197] buffer_io_error: 7 callbacks suppressed [ 512.338864][T12197] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 512.379472][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.402826][ T30] audit: type=1326 audit(1759455971.008:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.4.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b22f8d710 code=0x7ffc0000 [ 512.439621][ T9] usb 4-1: config 0 descriptor?? [ 512.512299][T12197] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 512.563421][T12197] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 512.581293][T12197] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 512.602509][T12197] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 512.611330][T12197] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 512.682078][T12197] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 512.713862][T12197] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 512.726295][T12206] loop9: detected capacity change from 0 to 7 [ 512.734426][T12206] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 512.740219][T12206] loop9: partition table partially beyond EOD, truncated [ 512.752472][T12206] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 512.775214][T12197] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 512.856671][T12197] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 512.900194][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 514.049052][ T5850] usb 4-1: USB disconnect, device number 89 [ 514.157482][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1541'. [ 514.870994][ T5850] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 515.029983][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.169179][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 515.178807][ T5850] usb 2-1: config 0 has no interfaces? [ 515.190767][ T5850] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 515.216332][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.240161][ T5850] usb 2-1: Product: syz [ 515.251841][ T5850] usb 2-1: Manufacturer: syz [ 515.267088][ T5850] usb 2-1: SerialNumber: syz [ 515.342379][ T5850] usb 2-1: config 0 descriptor?? [ 515.348285][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 515.357029][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.369170][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.418627][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 515.471916][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 515.505605][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.536572][ T9] usb 3-1: config 0 descriptor?? [ 515.635353][ T5914] usb 2-1: USB disconnect, device number 97 [ 516.007405][ T9] microsoft 0003:045E:07DA.0021: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 516.027386][ T9] microsoft 0003:045E:07DA.0021: no inputs found [ 516.056160][ T9] microsoft 0003:045E:07DA.0021: could not initialize ff, continuing anyway [ 516.200720][ T24] usb 3-1: USB disconnect, device number 109 [ 517.275903][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 517.620391][T12261] kvm: MWAIT instruction emulated as NOP! [ 518.140854][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 518.308475][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 518.327132][ T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 518.337615][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.352233][ T9] usb 4-1: Product: syz [ 518.356451][ T9] usb 4-1: Manufacturer: syz [ 518.371860][ T9] usb 4-1: SerialNumber: syz [ 518.391042][ T9] usb 4-1: config 0 descriptor?? [ 518.729096][T12276] fuse: Bad value for 'fd' [ 519.168492][ T24] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 519.345361][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 519.357160][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 519.369366][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 519.383580][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 519.393539][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.405984][ T24] usb 2-1: config 0 descriptor?? [ 519.435600][T12277] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 519.893165][ T24] wacom 0003:056A:00DE.0022: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 519.922547][ T24] wacom 0003:056A:00DE.0022: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.1-1/input0 [ 519.967518][ T24] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00DE.0022/input/input29 [ 520.738002][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 520.946901][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 520.964945][ T9] gspca_sunplus: reg_w_riv err -71 [ 521.010181][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 521.045870][ T9] usb 4-1: USB disconnect, device number 90 [ 521.428790][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 522.053180][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 522.061042][T12295] syz.0.1559 (12295): drop_caches: 2 [ 522.172522][ T5914] usb 2-1: USB disconnect, device number 98 [ 522.196530][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.281700][ T24] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 522.295570][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.327790][ T24] usb 3-1: Product: syz [ 522.354826][ T24] usb 3-1: Manufacturer: syz [ 522.361503][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 522.399022][ T24] usb 3-1: SerialNumber: syz [ 522.411029][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.421968][ T24] usb 3-1: config 0 descriptor?? [ 522.498988][ T9] usb 4-1: Product: syz [ 522.546817][ T9] usb 4-1: Manufacturer: syz [ 522.576186][ T9] usb 4-1: SerialNumber: syz [ 522.630138][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 522.656691][ T5850] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 522.822198][ T24] usb 3-1: probing VID:PID(2201:012C) [ 522.854250][ T24] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 522.883238][ T24] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 522.932442][ T24] usb 3-1: USB disconnect, device number 110 [ 523.070007][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.079620][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.268376][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 523.313675][ T5914] usb 4-1: USB disconnect, device number 91 [ 523.398696][ T5913] usb 1-1: device descriptor read/64, error -71 [ 523.640076][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 523.771543][ T5850] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 523.779024][ T5913] usb 1-1: device descriptor read/64, error -71 [ 523.786014][ T5850] ath9k_htc: Failed to initialize the device [ 523.796554][ T5914] usb 4-1: ath9k_htc: USB layer deinitialized [ 523.889157][ T5913] usb usb1-port1: attempt power cycle [ 524.246142][ T5913] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 524.293603][ T5913] usb 1-1: device descriptor read/8, error -71 [ 524.549751][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 524.569438][ T5913] usb 1-1: device descriptor read/8, error -71 [ 524.679422][ T5913] usb usb1-port1: unable to enumerate USB device [ 524.700962][T12342] netlink: 14220 bytes leftover after parsing attributes in process `syz.3.1571'. [ 525.978810][ T5913] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 526.066479][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 526.088792][ T5914] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 526.148811][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 526.164274][T12371] 8021q: adding VLAN 0 to HW filter on device bond9 [ 526.172239][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 526.219724][ T5913] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 526.265721][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.286847][T12376] macsec2: entered allmulticast mode [ 526.300328][ T5913] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 526.315452][T12376] bond9: entered allmulticast mode [ 526.324619][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 526.351646][ T5913] usb 4-1: string descriptor 0 read error: -71 [ 526.359445][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.369628][T12376] bond9: left allmulticast mode [ 526.375225][ T5913] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.385227][ T5914] usb 5-1: Product: syz [ 526.391794][ T5914] usb 5-1: Manufacturer: syz [ 526.406071][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.415337][ T5914] usb 5-1: SerialNumber: syz [ 526.425854][ T5914] usb 5-1: config 0 descriptor?? [ 526.433670][ T5913] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 526.443949][ T5913] usb 4-1: no configuration chosen from 1 choice [ 526.454881][ T5914] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 526.466228][ T5914] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 526.479871][ T5913] usb 4-1: USB disconnect, device number 92 [ 526.589805][T12384] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 526.596385][T12384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 526.620498][T12384] vhci_hcd vhci_hcd.0: Device attached [ 526.649312][ T24] usb 5-1: USB disconnect, device number 91 [ 526.878864][ T5914] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 526.908695][ T5906] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 526.945458][T12389] loop9: detected capacity change from 0 to 7 [ 526.972592][ T5856] Dev loop9: unable to read RDB block 7 [ 526.988975][ T5856] loop9: unable to read partition table [ 526.995007][ T5856] loop9: partition table beyond EOD, truncated [ 527.014505][T12389] Dev loop9: unable to read RDB block 7 [ 527.033603][T12389] loop9: unable to read partition table [ 527.041271][T12389] loop9: partition table beyond EOD, truncated [ 527.049013][T12389] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 527.111330][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.128114][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.539019][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 527.714650][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.727784][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 527.744962][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.763369][ T24] usb 5-1: config 0 descriptor?? [ 527.775539][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 527.992170][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 528.030107][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 528.048766][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 528.070530][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 528.079350][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 528.086311][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 528.098969][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 528.105906][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 528.115126][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 528.127484][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 528.135451][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 528.165518][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 528.181035][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 528.202044][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 528.204164][T12416] netlink: '+}[@': attribute type 10 has an invalid length. [ 528.211114][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 528.233656][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 528.269257][ T24] pwc: Registered as video103. [ 528.276400][T12416] team0: Port device dummy0 added [ 528.294266][T12417] netlink: 'syz.3.1590': attribute type 10 has an invalid length. [ 528.310681][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 528.366519][ T24] usb 5-1: USB disconnect, device number 92 [ 528.424606][T12417] team0: Port device dummy0 removed [ 528.461036][T12417] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 528.661048][T12427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1594'. [ 528.787108][ T24] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 528.968905][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 528.994147][ T24] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 529.014113][ T24] usb 5-1: config 0 has no interface number 0 [ 529.038628][ T24] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 529.081171][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 529.098702][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.110443][ T24] usb 5-1: Product: syz [ 529.114819][ T24] usb 5-1: Manufacturer: syz [ 529.123969][ T24] usb 5-1: SerialNumber: syz [ 529.134181][ T24] usb 5-1: config 0 descriptor?? [ 529.445920][ T24] usb 5-1: USB disconnect, device number 93 [ 529.519939][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.744545][ T5906] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.766315][T12385] vhci_hcd: connection reset by peer [ 529.783783][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.812367][T10135] vhci_hcd: stop threads [ 529.823573][T10135] vhci_hcd: release socket [ 529.830483][ T5906] usb 2-1: can't set config #1, error -71 [ 529.839201][T10135] vhci_hcd: disconnect device [ 529.849128][ T5906] usb 2-1: USB disconnect, device number 99 [ 529.946281][T12439] loop9: detected capacity change from 0 to 7 [ 529.965928][T12439] Dev loop9: unable to read RDB block 7 [ 529.979445][T12439] loop9: unable to read partition table [ 529.989944][T12439] loop9: partition table beyond EOD, truncated [ 530.004254][T12439] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.788836][ T5906] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 530.956953][ T5906] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 530.965507][ T5906] usb 4-1: config 0 has no interface number 0 [ 530.975110][ T5906] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 531.083615][ T5906] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 531.115429][ T24] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 531.450769][ T5906] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.464120][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.475693][ T5906] usb 4-1: config 0 descriptor?? [ 531.507037][T12463] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 531.576801][ T5906] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 531.622237][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 531.632294][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.681720][ T24] usb 2-1: Product: syz [ 531.685931][ T24] usb 2-1: Manufacturer: syz [ 531.779408][ T5906] usb 4-1: USB disconnect, device number 93 [ 531.785427][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 531.798978][ T24] usb 2-1: SerialNumber: syz [ 531.999195][ T5914] vhci_hcd: vhci_device speed not set [ 532.528628][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 532.644322][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 532.682584][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 532.754761][ T9] usb 1-1: config 162 has an invalid interface number: 46 but max is 1 [ 532.767985][ T9] usb 1-1: config 162 has no interface number 0 [ 532.778077][T12495] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1610'. [ 532.788131][ T9] usb 1-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 532.808452][T12495] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 532.826924][ T9] usb 1-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 532.841595][ T9] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x2 is Bulk; changing to Interrupt [ 532.862326][ T9] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 8 [ 532.884477][ T9] usb 1-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 532.902540][ T9] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x86 is Bulk; changing to Interrupt [ 532.926178][ T9] usb 1-1: config 162 interface 46 altsetting 1 endpoint 0x85 has invalid maxpacket 64, setting to 8 [ 532.965810][ T9] usb 1-1: config 162 interface 46 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 532.986620][ T9] usb 1-1: config 162 interface 1 has no altsetting 0 [ 533.015585][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 533.029181][ T9] usb 1-1: config 162 interface 46 has no altsetting 0 [ 533.065409][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 533.081046][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.097140][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 533.140117][ T24] usb 2-1: USB disconnect, device number 100 [ 534.287576][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'. [ 534.429352][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 534.589008][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 534.653180][ T24] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 534.709065][ T24] usb 4-1: config 0 has no interface number 0 [ 534.727452][ T24] usb 4-1: config 0 interface 29 has no altsetting 0 [ 534.767516][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0514, bcdDevice=39.ac [ 534.785010][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.804220][ T24] usb 4-1: Product: syz [ 534.815299][ T24] usb 4-1: Manufacturer: syz [ 534.824262][ T24] usb 4-1: SerialNumber: syz [ 534.842448][ T24] usb 4-1: config 0 descriptor?? [ 535.121332][T12548] usb usb8: usbfs: process 12548 (syz.4.1616) did not claim interface 0 before use [ 535.152072][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 535.152091][ T30] audit: type=1400 audit(1759455993.978:1174): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=12521 comm="syz.4.1616" [ 535.197745][ T9] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 535.207751][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.240699][ T9] usb 1-1: can't set config #162, error -71 [ 535.277973][ T9] usb 1-1: USB disconnect, device number 14 [ 535.290727][T12552] fuse: Unknown parameter 'mGN‡8o«ad' [ 535.342583][ T24] usb 4-1: USB disconnect, device number 94 [ 535.690364][T12556] No buffer was provided with the request [ 535.697099][T12556] trusted_key: encrypted_key: insufficient parameters specified [ 535.707722][T12556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.751619][T12558] syzkaller0: entered promiscuous mode [ 535.782802][T12558] syzkaller0: entered allmulticast mode [ 535.914493][T12558] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 535.968521][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 536.168340][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 536.182650][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 536.192984][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.217397][ T9] usb 1-1: Product: syz [ 536.226496][ T9] usb 1-1: Manufacturer: syz [ 536.237434][ T9] usb 1-1: SerialNumber: syz [ 536.246448][ T9] usb 1-1: config 0 descriptor?? [ 536.338274][ T5850] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 536.579171][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 536.594559][T12577] netlink: 'syz.1.1629': attribute type 1 has an invalid length. [ 536.665017][ T5850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 536.678450][ T5850] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 536.687958][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 536.747878][ T5850] usb 5-1: Product: syz [ 536.761007][ T5850] usb 5-1: Manufacturer: syz [ 536.829669][ T5850] usb 5-1: SerialNumber: syz [ 536.841748][T12582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.849653][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 536.930777][ T5850] usb 5-1: config 0 descriptor?? [ 536.936634][T12562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 536.968028][ T5850] hub 5-1:0.0: bad descriptor, ignoring hub [ 536.976581][ T5850] hub 5-1:0.0: probe with driver hub failed with error -5 [ 537.289099][ T24] usb 5-1: USB disconnect, device number 94 [ 537.853102][ T24] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 537.941253][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 537.968563][ T5850] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 538.021279][ T24] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 538.052152][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.065377][ T24] usb 3-1: config 0 has no interface number 0 [ 538.072832][ T24] usb 3-1: config 0 interface 224 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 538.091639][ T24] usb 3-1: config 0 interface 224 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 538.117286][ T24] usb 3-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 538.150369][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 538.176040][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 538.176044][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.176066][ T24] usb 3-1: Product: syz [ 538.195777][ T24] usb 3-1: Manufacturer: syz [ 538.204250][ T24] usb 3-1: SerialNumber: syz [ 538.208502][ T5850] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 538.225968][ T24] usb 3-1: config 0 descriptor?? [ 538.231729][ T5850] usb 5-1: config 0 has no interface number 0 [ 538.248839][ T5850] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 538.270983][ T24] ldusb 3-1:0.224: Interrupt in endpoint not found [ 538.318299][ T5850] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 538.357789][ T5850] usb 5-1: New USB device found, idVendor=07c0, idProduct=1500, bcdDevice=b8.c5 [ 538.386480][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.417605][ T5850] usb 5-1: Product: syz [ 538.424779][ T24] usb 1-1: USB disconnect, device number 15 [ 538.429647][ T5850] usb 5-1: Manufacturer: syz [ 538.458490][ T5850] usb 5-1: SerialNumber: syz [ 538.482584][ T5914] usb 3-1: USB disconnect, device number 111 [ 538.543840][ T5850] usb 5-1: config 0 descriptor?? [ 538.744627][T12626] input: syz1 as /devices/virtual/input/input33 [ 538.951274][T12630] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1645'. [ 538.958336][ T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 538.983262][ T5850] iowarrior 5-1:0.186: IOWarrior product=0x1500, serial=42424242 interface=186 now attached to iowarrior0 [ 538.999594][ T5914] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 539.120835][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 539.151352][ T24] usb 1-1: config 0 has no interface number 0 [ 539.158954][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 539.179675][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 539.190334][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.199977][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.219472][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.232189][ T24] usb 1-1: config 0 descriptor?? [ 539.240770][ T24] usb 1-1: selecting invalid altsetting 1 [ 539.247485][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 539.255177][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 539.265597][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.275268][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.337072][ T5914] usb 3-1: Product: syz [ 539.383774][ T5914] usb 3-1: Manufacturer: syz [ 539.446289][ T5914] usb 3-1: SerialNumber: syz [ 539.449653][ T5850] usb 5-1: USB disconnect, device number 95 [ 539.592536][ T24] DVB: Unable to find symbol cx22700_attach() [ 539.737091][ T24] DVB: Unable to find symbol tda10046_attach() [ 539.869835][ T5914] usb 3-1: 0:2 : does not exist [ 539.911175][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 539.945186][ T5914] usb 3-1: unit 6 not found! [ 540.034801][T12643] openvswitch: netlink: Message has 4 unknown bytes. [ 540.096333][ T5914] usb 3-1: USB disconnect, device number 112 [ 540.115600][T12649] rtc_cmos 00:00: Alarms can be up to one day in the future [ 540.269397][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.362952][ T5906] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 540.482884][T12656] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 540.541605][T12643] netlink: 'syz.3.1648': attribute type 10 has an invalid length. [ 540.558830][T12643] netlink: 'syz.3.1648': attribute type 11 has an invalid length. [ 540.578617][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 540.648847][ T5914] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 540.758630][ T24] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 540.798980][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 540.817536][ T5914] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 540.896552][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.978585][ T24] usb 3-1: device descriptor read/64, error -71 [ 541.001598][ T5914] usb 5-1: config 0 descriptor?? [ 541.039221][ T5914] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 541.248834][ T24] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 541.442793][ T5914] gspca_nw80x: reg_r err -32 [ 541.447556][ T5914] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 541.456043][ T24] usb 3-1: device descriptor read/64, error -71 [ 541.564481][T12667] wireguard0: entered promiscuous mode [ 541.570358][T12667] wireguard0: entered allmulticast mode [ 541.578811][ T24] usb usb3-port1: attempt power cycle [ 541.783720][ T5931] usb 1-1: USB disconnect, device number 16 [ 541.948901][ T24] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 541.974219][ T24] usb 3-1: device descriptor read/8, error -71 [ 542.218911][ T24] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 542.369586][ T24] usb 3-1: device descriptor read/8, error -71 [ 542.496575][ T24] usb usb3-port1: unable to enumerate USB device [ 542.637519][T12685] loop9: detected capacity change from 0 to 7 [ 542.650931][ T5856] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 542.666512][ T5856] loop9: partition table partially beyond EOD, truncated [ 542.694963][ T5856] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 542.736934][T12685] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 542.752517][T12685] loop9: partition table partially beyond EOD, truncated [ 542.770030][T12685] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 542.798924][ T5914] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 542.897241][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 542.929300][ T5906] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 542.931881][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 542.943347][ T5906] usb 4-1: can't read configurations, error -71 [ 542.998589][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 543.005309][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 543.013439][ T5914] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 543.041672][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.064091][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1659'. [ 543.091246][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 543.092175][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.156541][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.187256][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.219831][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 543.282731][ T5914] usb 1-1: config 168 interface 0 has no altsetting 0 [ 543.297394][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 543.314064][ T5914] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 543.364974][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 543.398742][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.416583][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.615666][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 543.641527][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 543.830182][ T5850] usb 5-1: USB disconnect, device number 96 [ 543.831006][ T5914] usb 1-1: config 168 interface 0 has no altsetting 0 [ 543.852072][ T5914] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 544.079265][ T5914] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 544.104667][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 544.133791][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.229920][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 544.283121][ T5914] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 544.350069][T12705] syzkaller1: entered promiscuous mode [ 544.355632][ T5914] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 544.374265][T12705] syzkaller1: entered allmulticast mode [ 544.421185][ T5914] usb 1-1: config 168 interface 0 has no altsetting 0 [ 544.462619][ T5914] usb 1-1: string descriptor 0 read error: -22 [ 544.473851][ T5914] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 544.517381][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.557321][ T5914] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 544.758728][ T5906] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 544.899108][ T5914] usb 1-1: USB disconnect, device number 17 [ 545.022561][ T5906] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 545.032268][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.053166][ T5906] usb 5-1: Product: syz [ 545.057349][ T5906] usb 5-1: Manufacturer: syz [ 545.100868][ T5906] usb 5-1: SerialNumber: syz [ 545.586492][T12724] loop9: detected capacity change from 0 to 7 [ 545.596446][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 545.616630][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 545.658270][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 545.661303][T12724] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 545.683914][T12724] loop9: partition table partially beyond EOD, truncated [ 545.684337][ T5906] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 545.694712][T12724] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 545.836116][ T5906] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 545.844435][ T9439] udevd[9439]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 545.984299][T12733] netlink: 'syz.1.1669': attribute type 15 has an invalid length. [ 546.002428][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'. [ 546.013052][ T5906] usb 5-1: USB disconnect, device number 97 [ 546.448905][ T5914] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 546.640998][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.670449][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.696905][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 546.710058][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.747691][ T5914] usb 4-1: SerialNumber: syz [ 548.961103][ T5914] usb 4-1: 0:2 : does not exist [ 549.015206][ T5914] usb 4-1: unit 5: unexpected type 0x0d [ 549.057728][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 549.098785][ T5914] usb 4-1: USB disconnect, device number 97 [ 549.151494][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.309599][T12793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.120388][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 550.212062][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1688'. [ 550.298600][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 550.309683][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 550.340496][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 550.361771][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 550.371377][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.392512][ T9] usb 3-1: Product: syz [ 550.402184][ T9] usb 3-1: Manufacturer: syz [ 550.418789][ T9] usb 3-1: SerialNumber: syz [ 550.435460][ T9] usb 3-1: config 0 descriptor?? [ 550.456865][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 550.479972][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 550.667333][T12826] loop2: detected capacity change from 0 to 7 [ 550.857435][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.885364][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.899307][T12829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.909846][T12829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.938414][ T5931] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 551.181927][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.207656][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.209428][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.225318][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.225347][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.225388][ T5931] usb 2-1: Product: syz [ 551.225405][ T5931] usb 2-1: Manufacturer: syz [ 551.225422][ T5931] usb 2-1: SerialNumber: syz [ 551.247201][ T5850] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 551.259538][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.449664][ T5931] usb 2-1: 0:2 : does not exist [ 551.470276][ T5931] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 551.482012][ T5850] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.493531][ T5850] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 551.518692][ T5931] usb 2-1: USB disconnect, device number 101 [ 551.526970][ T5850] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.552951][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.579276][T12831] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 551.592374][ T5850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.604953][ T9439] udevd[9439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.686502][T12808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.706719][T12808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.748660][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 551.757887][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 551.776022][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 551.795832][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 551.812451][ T5914] usb 5-1: USB disconnect, device number 98 [ 551.923537][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 551.950822][T12839] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.150111][ T30] audit: type=1326 audit(1759456011.018:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 552.221129][ T30] audit: type=1326 audit(1759456011.048:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.3.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 552.515030][T12853] loop6: detected capacity change from 0 to 524287487 [ 552.527630][T12853] buffer_io_error: 310 callbacks suppressed [ 552.527649][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.547101][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.567667][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.585810][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.595094][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.603254][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.611872][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.619926][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.627915][T12853] ldm_validate_partition_table(): Disk read failed. [ 552.639915][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.648060][T12853] Buffer I/O error on dev loop6, logical block 0, async page read [ 552.659902][T12853] Dev loop6: unable to read RDB block 0 [ 552.666002][T12853] loop6: unable to read partition table [ 552.675108][T12853] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 552.791526][T12857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.871252][ T5914] usb 3-1: USB disconnect, device number 117 [ 552.882198][ T5914] em28xx 3-1:0.0: Disconnecting em28xx [ 552.960750][ T5914] em28xx 3-1:0.0: Freeing device [ 553.298566][ T24] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 553.348695][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.434525][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.460853][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.486479][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.544374][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.563445][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.573133][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.589228][ T24] usb 5-1: SerialNumber: syz [ 553.594821][T12870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.624600][T12870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.640148][ T24] usb 5-1: bad CDC descriptors [ 553.819116][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 553.916400][T12873] netdevsim netdevsim1: Direct firmware load for . [ 553.916400][T12873] failed with error -2 [ 553.927723][T12873] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 553.927723][T12873] [ 554.149413][ T5850] usb 5-1: USB disconnect, device number 99 [ 554.421410][ T9] usb 4-1: device descriptor read/64, error -71 [ 554.718484][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 554.868846][ T9] usb 4-1: device descriptor read/64, error -71 [ 555.002568][ T9] usb usb4-port1: attempt power cycle [ 555.388466][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 555.420668][ T9] usb 4-1: device descriptor read/8, error -71 [ 555.568744][ T5850] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 555.668422][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 555.711304][ T9] usb 4-1: device descriptor read/8, error -71 [ 555.728280][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 555.736460][ T5850] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 555.748497][ T5850] usb 3-1: config 0 has no interface number 0 [ 555.755860][ T5850] usb 3-1: config 0 interface 89 has no altsetting 0 [ 555.769194][ T5850] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 555.778329][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.786392][ T5850] usb 3-1: Product: syz [ 555.791808][ T5850] usb 3-1: Manufacturer: syz [ 555.796488][ T5850] usb 3-1: SerialNumber: syz [ 555.816277][ T5850] usb 3-1: config 0 descriptor?? [ 555.832656][ T9] usb usb4-port1: unable to enumerate USB device [ 555.845379][ T5850] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 555.857415][ T5850] em28xx 3-1:0.89: Video interface 89 found: bulk [ 555.922981][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 555.964943][T12886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 556.448616][ T5850] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 556.810321][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 556.819504][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1714'. [ 557.063195][T12905] tipc: Enabling of bearer rejected, failed to enable media [ 557.380373][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.439292][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.569620][ T5850] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 557.616208][ T5850] em28xx 3-1:0.89: board has no eeprom [ 557.718335][ T5850] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 557.754801][ T5850] em28xx 3-1:0.89: analog set to bulk mode. [ 557.854963][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 558.094164][ T5850] usb 3-1: USB disconnect, device number 118 [ 558.121443][ T5850] em28xx 3-1:0.89: Disconnecting em28xx [ 558.244589][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 558.366738][ T5931] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 558.438595][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 558.448378][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 558.541237][ T9] usb 3-1: Decoder not found [ 558.560921][ T9] em28xx 3-1:0.89: failed to create media graph [ 558.567226][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 558.606084][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 558.637417][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input35 [ 558.663938][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 558.689826][ T5850] em28xx 3-1:0.89: Closing input extension [ 558.700796][ T5931] usb 2-1: config 0 has no interfaces? [ 558.710445][ T5850] em28xx 3-1:0.89: Deregistering snapshot button [ 558.717271][ T5931] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 558.726507][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.117839][ T5931] usb 2-1: Product: syz [ 559.150613][ T5931] usb 2-1: Manufacturer: syz [ 559.155244][ T5931] usb 2-1: SerialNumber: syz [ 559.297982][ T5931] usb 2-1: config 0 descriptor?? [ 559.305100][ T5850] em28xx 3-1:0.89: Freeing device [ 559.388239][ T5932] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 559.648620][ T5850] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 559.662064][T12949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1724'. [ 559.822526][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.838591][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.850176][ T5850] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 559.866049][ T5850] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 559.875798][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.892252][ T5850] usb 3-1: config 0 descriptor?? [ 559.918548][ T5931] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 560.098405][ T5932] usb 5-1: device descriptor read/64, error -71 [ 560.104766][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 560.116282][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 560.126312][ T5931] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 560.181779][ T5931] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 560.195922][ T5931] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 560.206457][ T5931] usb 4-1: config 7 has no interface number 0 [ 560.212639][ T5931] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 560.225115][ T5931] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 560.235603][ T5931] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 560.247384][ T5931] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 560.260699][ T5931] usb 4-1: config 7 interface 128 has no altsetting 0 [ 560.271776][ T5931] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 560.281142][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.289799][ T5931] usb 4-1: Product: syz [ 560.294178][ T5931] usb 4-1: Manufacturer: syz [ 560.299941][ T5931] usb 4-1: SerialNumber: syz [ 560.308926][T12949] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 560.322694][ T5850] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 560.348285][ T5932] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 560.530236][ T5931] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.537797][ T5931] usb 4-1: MIDIStreaming interface descriptor not found [ 560.547032][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.561087][ T5932] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 560.573386][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.591526][ T24] usb 3-1: USB disconnect, device number 119 [ 560.604171][ T5932] usb 5-1: config 0 descriptor?? [ 560.633008][ T5932] pwc: Askey VC010 type 2 USB webcam detected. [ 560.654187][ T5931] usb 4-1: USB disconnect, device number 102 [ 561.025830][ T5932] pwc: recv_control_msg error -32 req 02 val 2b00 [ 561.033050][ T5932] pwc: recv_control_msg error -32 req 02 val 2700 [ 561.040747][ T5932] pwc: recv_control_msg error -32 req 02 val 2c00 [ 561.049552][ T5932] pwc: recv_control_msg error -32 req 04 val 1000 [ 561.056741][ T5932] pwc: recv_control_msg error -32 req 04 val 1300 [ 561.064912][ T5932] pwc: recv_control_msg error -32 req 04 val 1400 [ 561.072302][ T5932] pwc: recv_control_msg error -32 req 02 val 2000 [ 561.085732][ T5932] pwc: recv_control_msg error -32 req 02 val 2100 [ 561.267365][ T24] usb 2-1: USB disconnect, device number 102 [ 561.276292][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1726'. [ 561.306691][T12955] program syz.3.1725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.412847][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 561.621745][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1729'. [ 561.838626][ T5931] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 561.991523][ T5931] usb 2-1: config 7 has an invalid interface number: 112 but max is 1 [ 562.098716][ T5931] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 562.112933][ T5931] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 562.210796][ T5931] usb 2-1: config 7 has no interface number 0 [ 562.226039][ T5931] usb 2-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.255920][ T5931] usb 2-1: config 7 interface 112 has no altsetting 0 [ 562.274044][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 562.289153][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 562.307770][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.563099][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.583576][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.674185][ T5931] usb 2-1: USB disconnect, device number 103 [ 562.798043][ T5932] pwc: recv_control_msg error -71 req 02 val 2500 [ 562.840895][ T5932] pwc: recv_control_msg error -71 req 02 val 2400 [ 562.892359][T12981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 562.992826][ T5932] pwc: recv_control_msg error -71 req 02 val 2600 [ 562.994412][T12983] loop9: detected capacity change from 0 to 7 [ 563.020266][T12983] Dev loop9: unable to read RDB block 7 [ 563.025888][T12983] loop9: unable to read partition table [ 563.032190][ T5932] pwc: recv_control_msg error -71 req 02 val 2900 [ 563.055431][T12983] loop9: partition table beyond EOD, truncated [ 563.055956][ T5932] pwc: recv_control_msg error -71 req 02 val 2800 [ 563.062594][T12983] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 563.068676][ T24] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 563.092336][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.099298][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.118086][ T5932] pwc: recv_control_msg error -71 req 04 val 1100 [ 563.146901][ T5932] pwc: recv_control_msg error -71 req 04 val 1200 [ 563.176254][ T5932] pwc: Registered as video103. [ 563.218947][ T5932] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 563.285852][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 563.307373][ T5932] usb 5-1: USB disconnect, device number 101 [ 563.326430][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 563.414558][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 563.425070][T12990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1735'. [ 563.441014][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.517778][T12978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.578042][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 563.806751][ T24] usb 3-1: USB disconnect, device number 120 [ 563.911662][T12999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1739'. [ 564.919788][T13007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1741'. [ 564.929768][T13007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1741'. [ 565.178498][ T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 565.329632][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 565.336497][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.346061][ T24] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 565.355039][ T24] usb 5-1: config 8 has no interface number 0 [ 565.361645][ T24] usb 5-1: config 8 interface 255 has no altsetting 0 [ 565.378862][ T24] usb 5-1: string descriptor 0 read error: -22 [ 565.385817][ T24] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 565.395523][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.709557][T13015] dlm: plock device version mismatch: kernel (1.2.0), user (1.875831296.926103344) [ 565.859157][ T24] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 565.908836][ T24] usb 5-1: USB disconnect, device number 102 [ 565.930554][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'. [ 566.001392][T13025] bridge_slave_0: left allmulticast mode [ 566.007477][T13025] bridge_slave_0: left promiscuous mode [ 566.014709][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.025070][T13025] bridge_slave_1: left allmulticast mode [ 566.031374][T13025] bridge_slave_1: left promiscuous mode [ 566.037630][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.052985][T13026] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 566.063916][T13025] bond0: (slave bond_slave_0): Releasing backup interface [ 566.076513][T13025] bond0: (slave bond_slave_1): Releasing backup interface [ 566.086475][T13025] team0: Port device team_slave_0 removed [ 566.094380][T13025] team0: Port device team_slave_1 removed [ 566.103014][T13025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.111202][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 566.121284][T13025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.130974][T13025] bond2: (slave gretap1): Releasing active interface [ 566.142872][T13025] batman_adv: batadv0: Interface deactivated: macsec1 [ 566.151546][T13025] batman_adv: batadv0: Removing interface: macsec1 [ 566.162738][T13026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.172071][T13026] team0: Port device bond0 added [ 566.591871][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 566.798308][ T5932] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 566.977323][ T5932] usb 5-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 566.998982][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.090235][ T5932] usb 5-1: config 0 descriptor?? [ 567.100657][ T5932] usb-storage 5-1:0.0: USB Mass Storage device detected [ 567.245411][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1753'. [ 567.390948][ T5932] usb 5-1: USB disconnect, device number 103 [ 568.487688][T13078] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 568.633042][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1759'. [ 568.748699][ T24] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 568.910956][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 568.951047][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.986223][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 569.024767][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.094710][ T24] usb 2-1: config 0 descriptor?? [ 569.111069][T13088] input: syz0 as /devices/virtual/input/input38 [ 569.127959][T13078] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 569.519412][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 569.754259][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 569.760673][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 569.776682][ T24] usb 2-1: USB disconnect, device number 104 [ 570.218267][ T5931] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 570.331825][T13103] pimreg: tun_chr_ioctl cmd 1074025677 [ 570.337575][T13103] pimreg: linktype set to 780 [ 570.400774][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 570.427016][ T5931] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.438110][ T5931] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.477901][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.512753][ T5931] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 570.522910][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.535779][ T5931] usb 5-1: config 0 descriptor?? [ 570.792931][ T5931] hid (null): unknown global tag 0xd [ 570.812357][ T5931] hid (null): unknown global tag 0xe [ 570.876218][ T5931] hid_parser_main: 14 callbacks suppressed [ 570.876243][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.896472][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.903742][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.916284][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.932081][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.951972][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 570.979214][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.008842][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 571.016485][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.028977][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 571.094601][T13119] fuse: Bad value for 'fd' [ 571.151987][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 571.202508][ T5931] cougar 0003:060B:500A.0024: unknown main item tag 0x0 [ 571.265886][ T5931] cougar 0003:060B:500A.0024: unexpected long global item [ 571.461178][ T5931] cougar 0003:060B:500A.0024: parse failed [ 571.536627][ T5931] cougar 0003:060B:500A.0024: probe with driver cougar failed with error -22 [ 571.537449][T13126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.605066][T13129] fuse: Bad value for 'fd' [ 571.720168][ T5931] usb 5-1: USB disconnect, device number 104 [ 572.675220][T13155] input: syz1 as /devices/virtual/input/input40 [ 573.388717][T13162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1780'. [ 574.358710][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 574.532186][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.572858][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 574.594102][T13178] loop9: detected capacity change from 0 to 7 [ 574.605642][T13178] Dev loop9: unable to read RDB block 7 [ 574.611757][T13178] loop9: unable to read partition table [ 574.617847][T13178] loop9: partition table beyond EOD, truncated [ 574.633461][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 574.650483][T13178] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 574.737011][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.802314][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 574.854627][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.915517][ T24] usb 3-1: config 0 descriptor?? [ 575.147724][ T24] usb 3-1: USB disconnect, device number 121 [ 575.198799][ T5914] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 575.246554][T13186] loop9: detected capacity change from 0 to 7 [ 575.282341][T13186] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 575.304331][T13186] loop9: partition table partially beyond EOD, truncated [ 575.340399][T13186] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 575.350798][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 575.367085][ T5914] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 575.415801][ T5914] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 575.436249][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 575.454394][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 575.482480][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 575.505245][ T5914] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 575.517103][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.529311][ T5914] usb 4-1: Product: syz [ 575.536968][ T5914] usb 4-1: Manufacturer: syz [ 575.545501][ T5914] usb 4-1: SerialNumber: syz [ 575.552330][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 575.572952][ T5914] usb 4-1: config 0 descriptor?? [ 575.579166][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 575.597187][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub [ 575.607156][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5 [ 575.640877][ T5914] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 575.811106][ T5914] usb 4-1: USB disconnect, device number 103 [ 575.933631][ T24] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 576.006921][ T30] audit: type=1326 audit(1759456034.868:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.179001][T13202] fuse: Unknown parameter '0000000000000000000001300000000000000000000' [ 576.198010][ T30] audit: type=1326 audit(1759456034.868:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.221020][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 576.230400][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.298075][ T30] audit: type=1326 audit(1759456034.868:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.324884][ T30] audit: type=1326 audit(1759456034.868:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.348869][ T30] audit: type=1326 audit(1759456034.868:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.348953][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 576.372345][ T30] audit: type=1326 audit(1759456034.868:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13189 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfd38eec9 code=0x7ffc0000 [ 576.576305][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.596794][ T24] usb 5-1: Product: syz [ 576.732337][ T24] usb 5-1: Manufacturer: syz [ 576.745990][ T24] usb 5-1: SerialNumber: syz [ 576.907690][ T24] usb 5-1: config 0 descriptor?? [ 576.944977][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 577.191117][ T5914] usb 5-1: USB disconnect, device number 105 [ 577.217308][T10128] usb 5-1: Failed to submit usb control message: -71 [ 577.268281][T10128] usb 5-1: unable to send the bmi data to the device: -71 [ 577.295737][T10128] usb 5-1: unable to get target info from device [ 577.328199][T10128] usb 5-1: could not get target info (-71) [ 577.338961][T10128] usb 5-1: could not probe fw (-71) [ 577.632834][T13215] loop9: detected capacity change from 0 to 7 [ 577.640539][T13215] Dev loop9: unable to read RDB block 7 [ 577.698485][T13215] loop9: unable to read partition table [ 577.704490][T13215] loop9: partition table beyond EOD, truncated [ 577.734733][T13215] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.066831][T13227] loop9: detected capacity change from 0 to 7 [ 578.100836][T13227] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 578.106393][T13227] loop9: partition table partially beyond EOD, truncated [ 578.133822][T13227] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 578.223621][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 578.488816][ T5914] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 578.859507][ T5931] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 578.943237][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 578.952503][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.960855][ T5914] usb 4-1: Product: syz [ 578.974278][ T5914] usb 4-1: Manufacturer: syz [ 578.997606][ T5914] usb 4-1: SerialNumber: syz [ 579.037787][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.054486][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.065714][ T5931] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 579.080158][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.112974][ T5931] usb 5-1: config 0 descriptor?? [ 579.248629][ T5932] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 579.430825][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 579.442114][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 579.459432][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 579.487527][ T5932] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 579.497462][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.506063][ T5932] usb 3-1: Product: syz [ 579.517860][ T5932] usb 3-1: Manufacturer: syz [ 579.526107][ T5932] usb 3-1: SerialNumber: syz [ 579.553970][ T5932] usb 3-1: config 0 descriptor?? [ 579.565567][ T5932] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 579.581740][ T5932] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 579.622460][ T5931] sony 0003:054C:024B.0025: unexpected long global item [ 579.637636][ T5931] sony 0003:054C:024B.0025: parse failed [ 579.644857][ T5931] sony 0003:054C:024B.0025: probe with driver sony failed with error -22 [ 579.785534][T13248] fuse: Unknown parameter '0000000000000000000001300000000000000000000' [ 580.260308][ T5932] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 580.423921][ T5932] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 580.955474][ T24] usb 5-1: USB disconnect, device number 106 [ 581.085531][ T5932] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 581.156913][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 581.224230][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 581.251420][ T5914] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 581.302213][ T5914] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 581.363825][ T5914] usb 4-1: USB disconnect, device number 104 [ 581.575155][ T30] audit: type=1326 audit(1759456040.408:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 581.632964][ T30] audit: type=1326 audit(1759456040.408:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 581.785101][ T30] audit: type=1326 audit(1759456040.408:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 581.823224][ T30] audit: type=1326 audit(1759456040.408:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 581.862201][ T30] audit: type=1326 audit(1759456040.408:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 581.890289][ T30] audit: type=1326 audit(1759456040.408:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13251 comm="syz.3.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 582.083787][ T5932] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 582.130881][ T5932] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 582.161293][ T5932] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 582.182758][ T5932] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 582.229661][ T5932] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 582.263593][ T5932] usb 3-1: USB disconnect, device number 122 [ 582.385645][T13262] bridge0: port 3(batadv0) entered blocking state [ 582.392333][T13262] bridge0: port 3(batadv0) entered forwarding state [ 582.400867][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.408093][T13262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.415655][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.422903][T13262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.458839][T13262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.828437][ T5932] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 583.002401][ T5932] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 583.033856][ T5932] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 583.121385][T13273] loop9: detected capacity change from 0 to 7 [ 583.249402][ T5932] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 583.261099][T13273] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 583.287947][T13273] loop9: partition table partially beyond EOD, truncated [ 583.295520][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.309985][T13273] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 583.435268][T13267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 583.460859][ T5932] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.798767][ T5906] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 583.857443][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 584.234488][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'. [ 584.245839][ T5906] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 584.246375][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 584.272372][ T5906] usb 4-1: config 1 has no interface number 0 [ 584.304562][ T5906] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 584.307632][T13267] fuse: Bad value for 'fd' [ 584.319474][ T5906] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 584.319506][ T5906] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1023 [ 584.319530][ T5906] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 584.648300][ T5906] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 584.664286][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.679760][T13292] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1818'. [ 584.780683][ T5906] usb 4-1: Product: syz [ 584.795886][ T5906] usb 4-1: Manufacturer: syz [ 584.838843][ T5850] usb 3-1: USB disconnect, device number 123 [ 584.887324][ T5906] usb 4-1: SerialNumber: syz [ 585.354999][T13275] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 585.438620][T13275] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 585.660102][ T5906] usb 4-1: Error in usbnet_get_endpoints (-71) [ 585.766007][ T5906] usb 4-1: USB disconnect, device number 105 [ 586.329114][T13299] binder: 13298:13299 unknown command 1207959552 [ 586.344406][T13299] binder: 13298:13299 ioctl c0306201 200000000300 returned -22 [ 586.493806][T13307] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 587.093616][T13315] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3356708090 (26853664720 ns) > initial count (9735166528 ns). Using initial count to start timer. [ 587.254391][T13315] kvm: Disabled LAPIC found during irq injection [ 587.359665][T13324] tipc: Enabled bearer , priority 10 [ 587.368449][T13324] tipc: Enabled bearer , priority 0 [ 587.556306][T13326] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 587.599111][T13326] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 588.174737][T13331] netlink: 'syz.0.1827': attribute type 9 has an invalid length. [ 588.502410][T13334] openvswitch: netlink: Message has 16 unknown bytes. [ 588.591253][ T5850] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 588.705489][T13356] bridge0: port 3(batadv0) entered disabled state [ 588.784087][T13356] bridge_slave_0: left allmulticast mode [ 588.829526][ T5906] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 588.843033][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 588.863311][T13356] bridge_slave_0: left promiscuous mode [ 588.879118][ T5850] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 588.890546][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.925855][ T5850] usb 3-1: Product: syz [ 588.930801][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.963939][ T5850] usb 3-1: Manufacturer: syz [ 588.972109][ T5850] usb 3-1: SerialNumber: syz [ 589.000200][ T5906] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 589.000518][ T5850] usb 3-1: config 0 descriptor?? [ 589.020117][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.035995][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.100194][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.129831][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.160396][T13356] bridge_slave_1: left allmulticast mode [ 589.177221][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.197176][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.231898][T13356] bridge_slave_1: left promiscuous mode [ 589.239536][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.239794][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.249765][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.328036][T13368] fuse: Unknown parameter 'user_i00000000000000000000' [ 589.336626][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.345092][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.355537][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.358834][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.403010][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.425950][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.455576][T13356] bond0: (slave bond_slave_0): Releasing backup interface [ 589.465820][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.466280][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.495814][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.525940][T13356] bond0: (slave bond_slave_1): Releasing backup interface [ 589.532141][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.557855][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.565881][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.597074][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.607606][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.647076][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.672380][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.677677][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.701169][ T5906] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.775200][ T5906] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 589.805424][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.812978][ T5850] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 589.825522][ T5850] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 589.833105][ T5906] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 589.858569][ T5906] usb 2-1: Product: syz [ 589.862784][ T5906] usb 2-1: Manufacturer: syz [ 589.896070][ T5906] usb 2-1: SerialNumber: syz [ 589.898445][ T5850] usb 3-1: USB disconnect, device number 124 [ 589.937811][ T5906] usb 2-1: config 0 descriptor?? [ 589.965676][T13356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.987389][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.991686][ T5906] yurex 2-1:0.0: Could not find endpoints [ 590.087294][T13378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.126263][T13356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.205179][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.305275][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.810421][ T30] audit: type=1326 audit(1759456049.638:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 590.840976][ T30] audit: type=1326 audit(1759456049.638:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 590.867841][ T30] audit: type=1326 audit(1759456049.638:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 590.893317][ T30] audit: type=1326 audit(1759456049.638:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 590.937248][ T5914] usb 2-1: USB disconnect, device number 105 [ 590.990867][ T5906] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 591.017168][ T30] audit: type=1326 audit(1759456049.638:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 591.146294][ T30] audit: type=1326 audit(1759456049.638:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13384 comm="syz.4.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b22f8eec9 code=0x7ffc0000 [ 591.268924][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 591.294883][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.305151][ T5906] usb 4-1: config 0 has an invalid interface number: 165 but max is 0 [ 591.314296][ T5906] usb 4-1: config 0 has no interface number 0 [ 591.323142][ T5906] usb 4-1: config 0 interface 165 has no altsetting 0 [ 591.333503][ T5906] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 591.344357][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.412636][ T5913] hid_parser_main: 176 callbacks suppressed [ 591.412659][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.426936][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.466263][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.474552][ T5914] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 591.489686][ T5906] usb 4-1: Product: syz [ 591.511441][ T5906] usb 4-1: Manufacturer: syz [ 591.522424][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.530783][ T5906] usb 4-1: SerialNumber: syz [ 591.540108][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.554630][ T5906] usb 4-1: config 0 descriptor?? [ 591.574428][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.592080][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.644885][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.664022][ T5914] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 591.674836][ T24] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 591.685435][ T5914] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 591.703342][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.711944][ T5914] usb 3-1: config 220 interface 0 has no altsetting 0 [ 591.764701][ T5913] hid-generic 00A0:0006:800003.0026: unknown main item tag 0x0 [ 591.774850][ T5914] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 591.798537][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1839'. [ 591.798778][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.872639][ T24] usb 2-1: config 0 has no interfaces? [ 591.897398][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 591.934870][ T5913] hid-generic 00A0:0006:800003.0026: hidraw0: HID v0.05 Device [syz1] on syz0 [ 592.026322][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.035319][ T5914] usb 3-1: Product: syz [ 592.053763][ T5914] usb 3-1: Manufacturer: syz [ 592.067375][ T5914] usb 3-1: SerialNumber: syz [ 592.094130][ T24] usb 2-1: config 0 descriptor?? [ 592.307723][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.323609][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 592.345281][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.518377][ T5914] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 592.554249][ T5914] usb 3-1: No valid video chain found. [ 592.622112][ T5914] usb 3-1: USB disconnect, device number 125 [ 592.741184][ T5906] ni6501 4-1:0.165: driver 'ni6501' failed to auto-configure device. [ 592.835405][ T5906] usb 4-1: USB disconnect, device number 106 [ 593.408800][ T5906] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 593.428874][T13417] loop6: detected capacity change from 0 to 524287487 [ 593.436060][T13417] buffer_io_error: 7 callbacks suppressed [ 593.436071][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.453566][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.463774][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.472674][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.483188][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.496332][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.519558][ T5914] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 593.562974][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.591277][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.607050][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 593.616578][ T5906] usb 3-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 593.637858][ T5906] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.663177][T13417] ldm_validate_partition_table(): Disk read failed. [ 593.671201][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.680374][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 593.697985][ T5914] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 593.711241][ T5914] usb 5-1: config 0 has no interface number 0 [ 593.719045][ T5914] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.730956][T13417] Buffer I/O error on dev loop6, logical block 0, async page read [ 593.731388][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 593.747750][ T5914] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 593.762053][ T5914] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 593.784066][ T5914] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 593.795767][ T5914] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 593.796010][T13417] Dev loop6: unable to read RDB block 0 [ 593.809561][ T5914] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 593.825316][ T5906] usb 3-1: New USB device found, idVendor=0c43, idProduct=c65b, bcdDevice=80.8e [ 593.837490][ T5906] usb 3-1: New USB device strings: Mfr=100, Product=51, SerialNumber=3 [ 593.846553][T13417] loop6: unable to read partition table [ 593.853206][T13417] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 593.866327][ T5906] usb 3-1: Product: syz [ 593.915727][ T5906] usb 3-1: Manufacturer: syz [ 593.922350][ T5914] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 593.935916][ T5906] usb 3-1: SerialNumber: syz [ 593.944071][T13421] netlink: 'syz.0.1847': attribute type 2 has an invalid length. [ 593.955363][ T5914] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 593.967975][ T5906] usb 3-1: config 0 descriptor?? [ 594.027326][ T5914] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 594.067387][ T5914] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.227616][ T5906] usb 3-1: USB disconnect, device number 126 [ 594.257033][ T5914] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 594.273191][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.295154][ T5914] usb 5-1: Product: syz [ 594.347262][ T5914] usb 5-1: Manufacturer: syz [ 594.425276][ T24] usb 2-1: USB disconnect, device number 106 [ 594.458823][ T5914] usb 5-1: SerialNumber: syz [ 594.482840][ T5914] usb 5-1: config 0 descriptor?? [ 594.540944][T13411] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 594.574860][T13411] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 594.592129][ T5914] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 594.604742][ T5914] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 594.672657][ T5914] scsi host1: microtekX6 [ 595.127178][T13452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1853'. [ 596.490564][ T24] usb 5-1: USB disconnect, device number 107 [ 596.783671][T13467] loop6: detected capacity change from 0 to 524287487 [ 596.799660][T13467] ldm_validate_partition_table(): Disk read failed. [ 596.806681][T13467] Dev loop6: unable to read RDB block 0 [ 596.815154][T13467] loop6: unable to read partition table [ 596.822908][T13467] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 596.968525][ T5931] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 597.139865][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 597.152122][ T5931] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 597.174242][ T5931] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 597.186688][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 597.219126][ T5931] usb 2-1: Product: syz [ 597.223464][ T5931] usb 2-1: Manufacturer: syz [ 597.329719][ T5931] usb 2-1: SerialNumber: syz [ 597.354763][ T5931] usb 2-1: config 0 descriptor?? [ 597.362769][T13464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.372874][ T5931] hub 2-1:0.0: bad descriptor, ignoring hub [ 597.379745][ T5932] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 597.387630][ T5850] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 597.397951][ T5931] hub 2-1:0.0: probe with driver hub failed with error -5 [ 597.558390][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 597.567819][ T5932] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 597.581266][ T5932] usb 5-1: config 0 has no interface number 0 [ 597.595389][ T5932] usb 5-1: config 0 interface 184 has no altsetting 0 [ 597.612608][ T5932] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 597.622816][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.633168][ T5932] usb 5-1: Product: syz [ 597.637383][ T5932] usb 5-1: Manufacturer: syz [ 597.645126][ T5932] usb 5-1: SerialNumber: syz [ 597.656546][ T5932] usb 5-1: config 0 descriptor?? [ 597.683883][ T5932] smsc75xx v1.0.0 [ 598.211110][ T5931] usb 2-1: USB disconnect, device number 107 [ 598.405907][ T5932] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 598.420651][ T5932] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 598.528255][ T5931] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 598.681167][ T5931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 598.689887][ T5931] usb 2-1: config 0 has no interface number 0 [ 598.696039][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 598.707056][ T5931] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 598.717904][ T5931] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 598.727031][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.737835][ T5931] usb 2-1: config 0 descriptor?? [ 598.743984][T13483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.760312][ T5931] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 598.949198][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 599.004531][ T5931] usb 2-1: USB disconnect, device number 108 [ 599.010704][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 599.059934][ T5932] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 599.084604][ T5932] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 599.128347][ T5932] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 599.164250][ T5932] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 599.527374][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 600.100912][T13505] loop9: detected capacity change from 0 to 7 [ 600.138575][ T5931] usb 5-1: USB disconnect, device number 108 [ 600.167834][T13505] Dev loop9: unable to read RDB block 7 [ 600.188574][T13505] loop9: unable to read partition table [ 600.198800][T13505] loop9: partition table beyond EOD, truncated [ 600.249354][T13505] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 600.985427][T13521] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (252) [ 601.264957][T13526] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[13526] [ 601.493386][T13528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1875'. [ 602.666934][T13537] loop9: detected capacity change from 0 to 7 [ 602.676497][ T5856] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 602.686707][ T5856] loop9: partition table partially beyond EOD, truncated [ 602.695840][ T5856] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 602.716455][T13537] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 602.726873][T13537] loop9: partition table partially beyond EOD, truncated [ 602.738988][T13537] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 602.882243][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 602.931140][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 602.980029][T13542] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1878'. [ 603.216135][T13551] loop9: detected capacity change from 0 to 7 [ 603.226119][T13551] Dev loop9: unable to read RDB block 7 [ 603.232288][T13551] loop9: unable to read partition table [ 603.238927][T13551] loop9: partition table beyond EOD, truncated [ 603.245366][T13551] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 603.326635][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 603.682250][T13558] loop2: detected capacity change from 0 to 7 [ 603.771258][T13558] Dev loop2: unable to read RDB block 7 [ 603.788441][T13558] loop2: unable to read partition table [ 603.813077][T13558] loop2: partition table beyond EOD, truncated [ 603.834271][T13558] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.277297][ T5914] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 604.434631][T13571] tap0: tun_chr_ioctl cmd 1074025677 [ 604.448402][T13571] tap0: linktype set to 6 [ 604.593916][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.621050][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 604.730515][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 604.766313][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.813706][ T5914] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 604.878752][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.973510][ T5914] usb 3-1: config 0 descriptor?? [ 605.027582][T13580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1890'. [ 605.089084][T13580] netem: unknown loss type 13 [ 605.096346][T13580] netem: change failed [ 605.484184][T13558] loop6: detected capacity change from 0 to 524287999 [ 605.543957][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 605.559568][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 605.612712][ T5914] usb 3-1: USB disconnect, device number 127 [ 605.990183][T13593] loop9: detected capacity change from 0 to 7 [ 606.014381][T13593] Dev loop9: unable to read RDB block 7 [ 606.029280][T13593] loop9: unable to read partition table [ 606.059949][T13593] loop9: partition table beyond EOD, truncated [ 606.078364][T13593] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.296075][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 606.380253][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 606.534604][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1895'. [ 606.543707][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.560531][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.650146][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 606.683097][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.717768][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 607.098584][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 607.337497][ T30] audit: type=1326 audit(1759456066.198:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 607.398069][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short [ 607.423115][ T5914] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 607.466829][ T5914] usb 3-1: config 1 interface 1 has no altsetting 0 [ 607.523460][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.538906][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.578933][ T5914] usb 3-1: Product: syz [ 607.602436][ T5914] usb 3-1: Manufacturer: syz [ 607.607053][ T5914] usb 3-1: SerialNumber: syz [ 607.668587][ T30] audit: type=1326 audit(1759456066.248:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 607.791857][ T30] audit: type=1326 audit(1759456066.248:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 607.818698][ T30] audit: type=1326 audit(1759456066.248:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 607.854606][T13627] loop9: detected capacity change from 0 to 7 [ 607.862729][T13627] Dev loop9: unable to read RDB block 7 [ 607.868511][T13627] loop9: unable to read partition table [ 607.874481][T13627] loop9: partition table beyond EOD, truncated [ 607.880804][T13627] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 607.888739][ T5906] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 608.135881][ T5906] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 608.166340][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.243178][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.266936][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 608.396596][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 608.407587][ T5906] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 608.472099][ T5906] usb 4-1: Manufacturer: syz [ 608.532172][ T5906] usb 4-1: config 0 descriptor?? [ 608.567192][ T30] audit: type=1326 audit(1759456067.428:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 608.666978][ T30] audit: type=1326 audit(1759456067.428:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.3.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd5b8eec9 code=0x7ffc0000 [ 609.130659][ T5906] appleir 0003:05AC:8243.0027: item fetching failed at offset 0/1 [ 609.145308][ T5906] appleir 0003:05AC:8243.0027: parse failed [ 609.153925][ T5906] appleir 0003:05AC:8243.0027: probe with driver appleir failed with error -22 [ 609.209284][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1906'. [ 610.061501][ T5914] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 610.200511][ T5914] usb 3-1: USB disconnect, device number 2 [ 610.210879][T13402] usb 5-1: new low-speed USB device number 109 using dummy_hcd [ 610.280814][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.395860][ T5906] usb 4-1: USB disconnect, device number 108 [ 610.410183][T13652] dvmrp8: entered allmulticast mode [ 610.421985][T13402] usb 5-1: config 7 has an invalid interface number: 112 but max is 1 [ 610.431040][T13402] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 610.454488][T13402] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 610.479885][T13402] usb 5-1: config 7 has no interface number 0 [ 610.494954][T13402] usb 5-1: config 7 interface 112 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.538180][T13402] usb 5-1: config 7 interface 112 has no altsetting 0 [ 610.555620][T13402] usb 5-1: string descriptor 0 read error: -22 [ 610.563861][T13402] usb 5-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=ff.2b [ 610.593959][T13402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.608736][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 610.622477][T13661] loop9: detected capacity change from 0 to 7 [ 610.642200][T13661] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 610.652618][T13661] loop9: partition table partially beyond EOD, truncated [ 610.660952][T13661] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 610.765505][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 610.780720][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.799881][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 610.857286][ T5914] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 610.867030][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.884145][ T5914] usb 3-1: config 0 descriptor?? [ 610.988413][ T5931] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 611.045798][T13666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.061891][T13666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.093334][T13667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.103607][T13667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.140793][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 611.147972][ T5931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 611.171526][ T5931] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 611.192156][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.203546][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 611.203599][ T5931] usb 4-1: Product: syz [ 611.231054][ T5931] usb 4-1: Manufacturer: syz [ 611.238895][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 611.254598][ T5931] usb 4-1: SerialNumber: syz [ 611.293864][ T5931] usb 4-1: config 0 descriptor?? [ 611.312616][ T5914] usb 3-1: USB disconnect, device number 3 [ 611.739980][T13662] mmap: syz.3.1914 (13662): VmData 37593088 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 611.753386][ T5931] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 611.780118][ T5931] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 611.810723][ T5931] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 611.874933][ T5931] usb 4-1: USB disconnect, device number 109 [ 611.888696][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 612.061290][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 612.083301][ T5914] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 612.083335][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.085749][ T5914] usb 3-1: config 0 descriptor?? [ 612.327549][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 612.352159][T13690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1919'. [ 612.402316][T10128] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.414201][T10128] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.427404][T10128] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.451536][ T5914] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 612.460850][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 612.477212][T10128] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.487842][ T5914] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 612.496229][ T5914] usb 3-1: media controller created [ 612.501782][T13690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 612.501819][T13690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 612.574418][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 612.859097][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 612.865431][ T5914] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 612.978833][ T24] usb 5-1: USB disconnect, device number 109 [ 613.081530][ T5914] rc_core: IR keymap rc-dib0700-rc5 not found [ 613.189953][ T5914] Registered IR keymap rc-empty [ 613.558460][ T5932] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 613.798924][T13718] ±ÿ: renamed from batadv_slave_1 (while UP) [ 613.821736][ T5932] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.832548][ T5932] usb 2-1: config 0 has no interface number 0 [ 613.853795][ T5932] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 613.875716][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.899761][ T5932] usb 2-1: config 0 descriptor?? [ 613.913499][ T5932] usb 2-1: selecting invalid altsetting 1 [ 613.948476][ T5932] dvb_ttusb_budget: ttusb_init_controller: error [ 613.980096][ T5932] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 614.082514][T13722] loop6: detected capacity change from 0 to 524287487 [ 614.106370][T13722] buffer_io_error: 23 callbacks suppressed [ 614.106413][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.153992][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.162942][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.202959][ T5932] DVB: Unable to find symbol cx22700_attach() [ 614.204870][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.252790][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.295516][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.350596][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.352379][ T5932] DVB: Unable to find symbol tda10046_attach() [ 614.360381][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.371297][ T5932] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 614.375761][T13722] ldm_validate_partition_table(): Disk read failed. [ 614.428673][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.436915][T13722] Buffer I/O error on dev loop6, logical block 0, async page read [ 614.451951][T13722] Dev loop6: unable to read RDB block 0 [ 614.462608][T13739] fuse: Unknown parameter '0000000000000000000001300000000000000000000' [ 614.479854][T13722] loop6: unable to read partition table [ 614.606652][T13722] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 614.924266][T13745] trusted_key: encrypted_key: hex blob is missing [ 614.989521][T13745] veth3: entered promiscuous mode [ 616.039392][T13756] kvm: pic: non byte write [ 616.298765][T13402] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 616.628730][T13402] usb 4-1: Using ep0 maxpacket: 32 [ 616.641550][T13402] usb 4-1: config 1 has an invalid interface number: 137 but max is 0 [ 616.651850][T13402] usb 4-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 616.666940][T13402] usb 4-1: config 1 has no interface number 0 [ 616.675684][T13402] usb 4-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 2 [ 616.697912][T13402] usb 4-1: config 1 interface 137 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.746905][T13402] usb 4-1: config 1 interface 137 has no altsetting 0 [ 616.787357][T13402] usb 4-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 616.799034][T13402] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.814526][T13402] usb 4-1: Product: syz [ 616.860741][T13402] usb 4-1: Manufacturer: syz [ 616.906897][T13402] usb 4-1: SerialNumber: syz [ 616.916473][T13772] loop9: detected capacity change from 0 to 7 [ 616.930994][ T5856] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 616.942534][T13756] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 616.950354][ T5856] loop9: partition table partially beyond EOD, truncated [ 616.963492][ T5856] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 616.983770][T13772] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 616.991651][T13772] loop9: partition table partially beyond EOD, truncated [ 617.046105][T13772] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 617.153057][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 617.222942][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 617.316128][T13778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1941'. [ 617.370732][T13780] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1942'. [ 617.393494][T13780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1942'. [ 617.706395][ T5914] dvb-usb: could not initialize remote control. [ 617.721575][ T5914] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 617.737123][T13714] ------------[ cut here ]------------ [ 617.742832][T13714] usb 3-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 617.788794][T13714] WARNING: CPU: 0 PID: 13714 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830 [ 617.798662][T13714] Modules linked in: [ 617.802929][T13714] CPU: 0 UID: 0 PID: 13714 Comm: syz.1.1925 Not tainted syzkaller #0 PREEMPT(full) [ 617.812383][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.822514][T13714] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 617.828214][T13714] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 ec ef 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 e6 87 98 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 617.847902][T13714] RSP: 0018:ffffc900045d7850 EFLAGS: 00010246 [ 617.857153][T13714] RAX: 58cd08770c58cf00 RBX: ffff888070f46200 RCX: ffff88802dbfbc80 [ 617.865201][T13714] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 617.873242][T13714] RBP: 1ffff1100a0de2d8 R08: 0000000000000003 R09: 0000000000000004 [ 617.881303][T13714] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 617.889351][T13714] R13: ffff8880506f16c0 R14: 0000000080000480 R15: ffff888079ccf5a0 [ 617.897371][T13714] FS: 00007f7d25cd16c0(0000) GS:ffff888126380000(0000) knlGS:0000000000000000 [ 617.906371][T13714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 617.913049][T13714] CR2: 000020000015f000 CR3: 00000000506ec000 CR4: 00000000003526f0 [ 617.921175][T13714] Call Trace: [ 617.924460][T13714] [ 617.927395][T13714] usb_start_wait_urb+0x114/0x4c0 [ 617.932543][T13714] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 617.938290][T13714] usb_control_msg+0x232/0x3e0 [ 617.943075][T13714] dib0700_i2c_xfer+0xba7/0xf70 [ 617.947932][T13714] ? __lock_acquire+0xab9/0xd20 [ 617.952826][T13714] __i2c_transfer+0x871/0x2170 [ 617.957597][T13714] ? i2c_transfer+0x120/0x3a0 [ 617.962365][T13714] ? __pfx___i2c_transfer+0x10/0x10 [ 617.967568][T13714] ? rt_mutex_lock_nested+0x172/0x1e0 [ 617.973012][T13714] ? i2c_transfer+0x120/0x3a0 [ 617.977704][T13714] i2c_transfer+0x25b/0x3a0 [ 617.982258][T13714] ? __pfx_i2c_transfer+0x10/0x10 [ 617.987291][T13714] ? _copy_from_user+0x94/0xb0 [ 617.992139][T13714] i2cdev_ioctl_rdwr+0x460/0x740 [ 617.997110][T13714] i2cdev_ioctl+0x64b/0x7f0 [ 618.001782][T13714] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 618.006832][T13714] ? __fget_files+0x3a0/0x420 [ 618.011635][T13714] ? __fget_files+0x2a/0x420 [ 618.016261][T13714] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.021284][T13714] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 618.026339][T13714] __se_sys_ioctl+0xfc/0x170 [ 618.031106][T13714] do_syscall_64+0xfa/0x3b0 [ 618.035628][T13714] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.040917][T13714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.046997][T13714] ? clear_bhb_loop+0x60/0xb0 [ 618.051782][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.057689][T13714] RIP: 0033:0x7f7d24d8eec9 [ 618.062243][T13714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.073782][T13787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 618.081978][T13714] RSP: 002b:00007f7d25cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.082032][T13714] RAX: ffffffffffffffda RBX: 00007f7d24fe6180 RCX: 00007f7d24d8eec9 [ 618.082048][T13714] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 000000000000000d [ 618.082063][T13714] RBP: 00007f7d24e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.082075][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.082086][T13714] R13: 00007f7d24fe6218 R14: 00007f7d24fe6180 R15: 00007f7d2510fa28 [ 618.082118][T13714] [ 618.082147][T13714] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 618.082163][T13714] CPU: 0 UID: 0 PID: 13714 Comm: syz.1.1925 Not tainted syzkaller #0 PREEMPT(full) [ 618.082185][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 618.082198][T13714] Call Trace: [ 618.082207][T13714] [ 618.082216][T13714] dump_stack_lvl+0x99/0x250 [ 618.082255][T13714] ? __asan_memcpy+0x40/0x70 [ 618.082278][T13714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.082304][T13714] ? __pfx__printk+0x10/0x10 [ 618.082338][T13714] vpanic+0x281/0x750 [ 618.082364][T13714] ? __pfx__printk+0x10/0x10 [ 618.082382][T13714] ? __pfx_vpanic+0x10/0x10 [ 618.082406][T13714] ? is_bpf_text_address+0x292/0x2b0 [ 618.082437][T13714] panic+0xb9/0xc0 [ 618.082460][T13714] ? __pfx_panic+0x10/0x10 [ 618.082497][T13714] __warn+0x31b/0x4b0 [ 618.082521][T13714] ? usb_submit_urb+0x112b/0x1830 [ 618.082548][T13714] ? usb_submit_urb+0x112b/0x1830 [ 618.082570][T13714] report_bug+0x2be/0x4f0 [ 618.082593][T13714] ? usb_submit_urb+0x112b/0x1830 [ 618.082616][T13714] ? usb_submit_urb+0x112b/0x1830 [ 618.082639][T13714] ? usb_submit_urb+0x112d/0x1830 [ 618.082663][T13714] handle_bug+0x84/0x160 [ 618.082690][T13714] exc_invalid_op+0x1a/0x50 [ 618.082715][T13714] asm_exc_invalid_op+0x1a/0x20 [ 618.082734][T13714] RIP: 0010:usb_submit_urb+0x112b/0x1830 [ 618.082758][T13714] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 20 ec ef 8b 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 e6 87 98 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80 [ 618.082776][T13714] RSP: 0018:ffffc900045d7850 EFLAGS: 00010246 [ 618.082794][T13714] RAX: 58cd08770c58cf00 RBX: ffff888070f46200 RCX: ffff88802dbfbc80 [ 618.082809][T13714] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 618.082822][T13714] RBP: 1ffff1100a0de2d8 R08: 0000000000000003 R09: 0000000000000004 [ 618.082835][T13714] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: dffffc0000000000 [ 618.082850][T13714] R13: ffff8880506f16c0 R14: 0000000080000480 R15: ffff888079ccf5a0 [ 618.082897][T13714] usb_start_wait_urb+0x114/0x4c0 [ 618.082930][T13714] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 618.082975][T13714] usb_control_msg+0x232/0x3e0 [ 618.083007][T13714] dib0700_i2c_xfer+0xba7/0xf70 [ 618.083052][T13714] ? __lock_acquire+0xab9/0xd20 [ 618.083077][T13714] __i2c_transfer+0x871/0x2170 [ 618.083105][T13714] ? i2c_transfer+0x120/0x3a0 [ 618.083134][T13714] ? __pfx___i2c_transfer+0x10/0x10 [ 618.083159][T13714] ? rt_mutex_lock_nested+0x172/0x1e0 [ 618.083187][T13714] ? i2c_transfer+0x120/0x3a0 [ 618.083210][T13714] i2c_transfer+0x25b/0x3a0 [ 618.083241][T13714] ? __pfx_i2c_transfer+0x10/0x10 [ 618.083266][T13714] ? _copy_from_user+0x94/0xb0 [ 618.083295][T13714] i2cdev_ioctl_rdwr+0x460/0x740 [ 618.083328][T13714] i2cdev_ioctl+0x64b/0x7f0 [ 618.083349][T13714] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 618.083372][T13714] ? __fget_files+0x3a0/0x420 [ 618.083400][T13714] ? __fget_files+0x2a/0x420 [ 618.083430][T13714] ? bpf_lsm_file_ioctl+0x9/0x20 [ 618.083453][T13714] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 618.083474][T13714] __se_sys_ioctl+0xfc/0x170 [ 618.083499][T13714] do_syscall_64+0xfa/0x3b0 [ 618.083522][T13714] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.083543][T13714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.083563][T13714] ? clear_bhb_loop+0x60/0xb0 [ 618.083588][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.083607][T13714] RIP: 0033:0x7f7d24d8eec9 [ 618.083626][T13714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.083644][T13714] RSP: 002b:00007f7d25cd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.083664][T13714] RAX: ffffffffffffffda RBX: 00007f7d24fe6180 RCX: 00007f7d24d8eec9 [ 618.083680][T13714] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 000000000000000d [ 618.083694][T13714] RBP: 00007f7d24e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 618.083707][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.083720][T13714] R13: 00007f7d24fe6218 R14: 00007f7d24fe6180 R15: 00007f7d2510fa28 [ 618.083751][T13714] [ 618.091699][T13714] Kernel Offset: disabled