last executing test programs: 15.975144847s ago: executing program 4 (id=1721): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') syz_usb_disconnect(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x6, 0x8, 0x7, 0xffffffff}, {0x1, 0x6, 0x9, 0x8}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) fchown(r5, 0xee01, 0x0) r6 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8000002) 11.975351903s ago: executing program 4 (id=1729): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x98, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) lseek(r2, 0x0, 0x2) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x141, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {0x0}, {&(0x7f00000002c0)="d238577f92411fbb7e1b375e170c6776baea17aa460c46faff7e7e19852bbb784647f77b5449421bf7043d6fd555de986c9c8b65b14b15277af57e5b3a31055d5343", 0x42}, {&(0x7f0000000900)}], 0x4, &(0x7f0000000740)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048080}}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES16=r5, @ANYBLOB="000100000002000071000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x70, 0x404}}], 0x3, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x59b0, 0x3180, 0x3, 0x2c0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) 10.854036789s ago: executing program 0 (id=1730): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x10}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) shmget$private(0x0, 0x2000, 0x78000a42, &(0x7f0000ffc000/0x2000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x2b, 0x3, 0x0, {0x2, 0xa, 0x0, '@}(&)!!({+'}}, 0x2b) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "65cb0629f5a3e37d035000ed1ea2"}}]}, 0x30}}, 0x0) 10.552690035s ago: executing program 2 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800", 0x2}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xfff3, 0xfff5}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.257774394s ago: executing program 4 (id=1733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) sendfile(r7, r5, 0x0, 0x578410eb) mmap(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x27ffff3, 0x13, r1, 0x8572000) 9.510925129s ago: executing program 2 (id=1735): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xc, 0xc1}) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 8.899754087s ago: executing program 0 (id=1737): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50) io_uring_enter(r2, 0x2219, 0x2d93, 0x51, 0x0, 0x0) 8.630127951s ago: executing program 4 (id=1738): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r4, 0x40, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) 8.216323726s ago: executing program 3 (id=1739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00140000ffe00500000000000000ac1414aa"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = syz_open_dev$sg(0x0, 0xf9ba, 0x501) tee(r3, r3, 0x9, 0xb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x68600, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.818038325s ago: executing program 1 (id=1741): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000005f40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f0000002280)="c478", 0x2}], 0x1}}, {{&(0x7f0000002780)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000002e80)=[{&(0x7f00000027c0)='I%', 0x2}], 0x1}}, {{&(0x7f0000002c80)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000000240)="e70d83", 0x3}], 0x1}}], 0x3, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000700)={[&(0x7f00000004c0)=',\x00']}, 0x0) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000280)={[{0x4fba, 0x5, 0xfd, 0x7, 0x98, 0xf8, 0x4, 0x1, 0x9, 0x5, 0x4, 0x6, 0x9}, {0x10, 0x400, 0x4, 0x9, 0x7, 0x6, 0x33, 0x2, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xe, 0x5c, 0x8, 0x4, 0x4, 0x68, 0x7, 0x0, 0x6, 0x1e7}], 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x80, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.280026651s ago: executing program 2 (id=1742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xa4, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x7d, 0xa8, @random="1c019168f2b57661b6f5a9cd8a2816bc6e863ae86ac6e25f90ae2c323c1cd7a8a3f5b97414fe40d4407dd0e17ea45b2dc9b8474f97ae3e13121f5419ef7d3a03eab056fded9598b4cd2fa6ec95944496feca9f95c4907eea3e6a50c4c6c5a1130416270392b772f6f2c73c6bba7d18dbe495a4257363e92fd3"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x8002) timer_create(0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2f86dd"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0xd0, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xa0, 0x2, [@TCA_FLOW_EMATCHES={0x9c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6be}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x7c, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xb, 0x4, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x4, 0x4, 0x9}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x5}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x542a1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6.091131705s ago: executing program 1 (id=1743): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x201, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/252, 0xfc}], 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)=""/162, &(0x7f0000000140)=0xa2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x20040880) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{0x0}], 0x1}}], 0x1, 0x4c040) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 5.492813325s ago: executing program 0 (id=1744): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\a'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000f0601080000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.287635835s ago: executing program 0 (id=1745): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x2a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x10}, 0x0, 0x0, 0x0}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 5.087729944s ago: executing program 4 (id=1746): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000480)={0xff, 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[0xd, 0x5, 0x1, 0xe, 0x1ff], &(0x7f0000000400)=[0x2, 0x6], &(0x7f0000000440)=[0x3]}) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x18, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x6, &(0x7f0000001380)=0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x105004, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.937847412s ago: executing program 3 (id=1747): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0x17, 0x0, 0x3, 0x1, 0xffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000380)={0x5, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2", 0x43353039}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x288400, 0x48) unshare(0x600) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x83}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x400c891}, 0x24000000) 4.548486236s ago: executing program 1 (id=1748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) close(r4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0x9, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x4, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.339189577s ago: executing program 2 (id=1749): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000540)={0xa, @raw_data="5d542f5cee57bb0367bcff367003bb8e250b036fd9ee1f5a22a32063d91764760c8bdf78bfd83e1f140362244ed1c33eb57be72914ed1b8454ad18ebe81d8518ad2e6617b538d4487bc73b8a8114991d93f3e3d9a1943a96af622ef0f832539da0681cc5fb6ee4c4511d7e2e239bc74f40b3a3ce3dde861d5a57acd868b1d553211589052db455de878a6da378f7e9f01137262ac3a7f30f1257f11bba829c80e58d42bd5f0b0fbd112a2b3550f6cb54a53407b15140c2f1eb6cfc0a5ec909d41e97c9a29a7e99d5"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.094045417s ago: executing program 1 (id=1750): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000480)={0xff, 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[0xd, 0x5, 0x1, 0xe, 0x1ff], &(0x7f0000000400)=[0x2, 0x6], &(0x7f0000000440)=[0x3]}) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x18, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x6, &(0x7f0000001380)=0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x105004, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.495372208s ago: executing program 2 (id=1751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0xffffffffffffffff, 0x2, &(0x7f0000000040)="25b6"}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) r3 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000004c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x8, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7ec, 0x4, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5], 0x1, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) 3.492993325s ago: executing program 0 (id=1752): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r7, r8, &(0x7f0000000080)=0x7f, 0xffff) 3.373884354s ago: executing program 3 (id=1753): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fcntl$addseals(r2, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x30, 0xe, 0x3, {0xa, @ah_ip4_spec={@private=0xa010102, @rand_addr=0x64010102, 0x3}, {0x0, @local, 0xff80, 0x2, [0x8000, 0xfffffff8]}, @tcp_ip4_spec={@rand_addr=0x64010100, @rand_addr=0x64010100, 0x4e20, 0x4e22, 0x2}, {0x0, @random="4e9a47f7c43e", 0x7fff, 0x4, [0xd, 0x4]}, 0x7ff, 0x40}, 0x1, [0xffff0000]}}) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000180)={0x0, 0x8, @status={[0xfff, 0x7, 0x1, 0xd30, 0x6, 0x3]}, [0x3, 0x0, 0xfffffffffffffffe, 0x8000, 0x3, 0x400, 0x2, 0x2, 0x5, 0x10000, 0x3, 0x18, 0x4, 0xfffffffffffffffd, 0x7fff, 0x1, 0x0, 0x80000000, 0x7287, 0x4, 0x72, 0x2ce0, 0x7, 0x1, 0x0, 0x60, 0x6, 0x80000001, 0x88, 0xd, 0x4206, 0x5, 0x7f, 0x0, 0x1, 0x94e4, 0x16, 0x9, 0x3, 0x62cb, 0xfffffffffffffff7, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x7, 0x4, 0x8, 0x2, 0x3ff, 0x4b86, 0x6, 0x8000000000000000, 0x3, 0xffff, 0x1, 0x0, 0x2, 0x5, 0x5, 0x6, 0x5]}) 3.035592814s ago: executing program 4 (id=1754): r0 = socket$inet6(0xa, 0x3, 0x7) syz_pidfd_open(0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x8, 0x7}, {0x9, 0xa6}, 0x6, 0x5, 0x9}) read(r1, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x8a, 0x1000, 0x0, 0x0}, {0xfffa, 0x8000, 0xfe, &(0x7f00000003c0)="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"}], 0x2}) syz_usb_control_io(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42100, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/19, 0x13}, 0x101}], 0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d000001a0010014000300776c616e3100000000100000000000000a00010001"], 0x40}}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x25, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xd343, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 2.075504118s ago: executing program 1 (id=1755): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\a'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000f0601080000000006"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r3, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.78261032s ago: executing program 1 (id=1756): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r4, 0x40, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) 1.618580003s ago: executing program 3 (id=1757): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x8000, 0x3, 0xc}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x7ffffff5, 0x8000ffff, 0xa, 0x1ff, 0x1}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000000)={r9, 0x0, 0x1, 0x0, 0x1000000000000}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000100)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[r4, r7, 0x0, r11, r12], 0x5, 0x80000}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r13, 0xffffffffffffffff, 0x0) 1.606156574s ago: executing program 0 (id=1758): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) getpid() setns(0xffffffffffffffff, 0x24020000) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYBLOB]) write$FUSE_ATTR(r3, &(0x7f0000007100)={0x78, 0x0, 0x0, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x80000003, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r4, 0x6f58, 0x0, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 1.523545148s ago: executing program 2 (id=1759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r4, &(0x7f0000003100)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) 1.372101828s ago: executing program 3 (id=1760): socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@abs, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00') r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x1, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["72cebd4049ffea080000b968", '\x00', "004bf9f954df8ad152676f00", "00000000000000000100"]}) socket$netlink(0x10, 0x3, 0x10) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ffd3bf79a1f5c5dc34cf2645cbc11c4562d22db8780edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b000000fb354673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0100f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce78754182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f26df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132155fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DROP_PRIVILEGES(r6, 0x4004551e, &(0x7f0000000140)=0xfffff801) 0s ago: executing program 3 (id=1761): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000540)={0xa, @raw_data="5d542f5cee57bb0367bcff367003bb8e250b036fd9ee1f5a22a32063d91764760c8bdf78bfd83e1f140362244ed1c33eb57be72914ed1b8454ad18ebe81d8518ad2e6617b538d4487bc73b8a8114991d93f3e3d9a1943a96af622ef0f832539da0681cc5fb6ee4c4511d7e2e239bc74f40b3a3ce3dde861d5a57acd868b1d553211589052db455de878a6da378f7e9f01137262ac3a7f30f1257f11bba829c80e58d42bd5f0b0fbd112a2b3550f6cb54a53407b15140c2f1eb6cfc0a5ec909d41e97c9a29a7e99d5"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r5 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): med from bond0 [ 485.285801][ T5905] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 485.455153][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 485.486083][ T5905] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.549950][ T5905] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.610156][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 485.652683][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.00 [ 485.681272][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.737150][ T5905] usb 4-1: config 0 descriptor?? [ 485.779868][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 485.814246][ T29] audit: type=1326 audit(1774767530.233:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 485.991566][ T29] audit: type=1326 audit(1774767530.293:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 486.130747][ T29] audit: type=1326 audit(1774767530.293:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 486.225951][ T29] audit: type=1326 audit(1774767530.293:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 486.814774][ T29] audit: type=1326 audit(1774767531.233:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 486.952234][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 486.965882][ T29] audit: type=1326 audit(1774767531.233:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 487.029510][ T29] audit: type=1326 audit(1774767531.303:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 487.145814][ T29] audit: type=1326 audit(1774767531.303:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 487.352156][ T5907] usb 1-1: USB disconnect, device number 24 [ 487.365793][ T29] audit: type=1326 audit(1774767531.313:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 487.510291][ T29] audit: type=1326 audit(1774767531.313:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11159 comm="syz.1.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 487.741299][T11183] xt_connbytes: Forcing CT accounting to be enabled [ 487.767388][T11183] set match dimension is over the limit! [ 488.808641][ T5178] bcm5974 4-1:0.0: could not read from device [ 488.942882][ T5178] bcm5974 4-1:0.0: could not read from device [ 489.052728][ T5178] bcm5974 4-1:0.0: could not read from device [ 489.064343][ T5905] usb 4-1: USB disconnect, device number 28 [ 490.195080][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 490.417336][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 490.442823][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 490.485919][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 490.525627][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.555049][ T24] usb 5-1: Product: syz [ 490.566976][ T24] usb 5-1: Manufacturer: syz [ 490.589155][ T24] usb 5-1: SerialNumber: syz [ 490.626133][ T24] usb 5-1: config 0 descriptor?? [ 490.658468][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 490.702819][ T24] usb 5-1: setting power ON [ 490.720744][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 490.757389][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.803481][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 490.842615][ T24] usb 5-1: media controller created [ 490.870643][T11210] dvb-usb: bulk message failed: -22 (3/0) [ 490.884135][T11210] dvb-usb: bulk message failed: -22 (3/0) [ 490.918917][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.931723][T11223] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹u' already exists in 'ieee80211' [ 490.990586][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 491.029155][ T24] usb 5-1: selecting invalid altsetting 6 [ 491.048684][ T24] usb 5-1: digital interface selection failed (-22) [ 491.113615][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 491.162018][ T24] usb 5-1: setting power OFF [ 491.193516][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 491.220834][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 491.264320][ T24] (NULL device *): no alternate interface [ 491.331901][T11220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'. [ 491.382050][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 491.425140][ T24] usb 5-1: USB disconnect, device number 42 [ 491.705185][ T5905] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 491.990012][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 492.005681][ T5905] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 492.065833][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.103599][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.124901][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 492.193241][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.243832][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.329865][ T5905] usbtmc 3-1:16.0: bulk endpoints not found [ 494.147014][T11256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1282'. [ 495.164016][ T5905] usb 3-1: USB disconnect, device number 40 [ 495.351438][T11276] syzkaller0: entered promiscuous mode [ 495.362757][T11276] syzkaller0: entered allmulticast mode [ 495.975057][ T5905] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 496.050427][T11288] syzkaller1: entered promiscuous mode [ 496.059693][T11288] syzkaller1: entered allmulticast mode [ 496.165087][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 496.184301][ T5905] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 496.218071][ T5905] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 496.241233][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.269857][ T5905] usb 3-1: Product: syz [ 496.284006][ T5905] usb 3-1: Manufacturer: syz [ 496.300135][ T5905] usb 3-1: SerialNumber: syz [ 496.325394][ T5905] usb 3-1: config 0 descriptor?? [ 496.350209][ T5905] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 496.377227][ T5905] usb 3-1: setting power ON [ 496.391966][ T5905] dvb-usb: bulk message failed: -22 (2/0) [ 496.421088][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 496.454400][ T5905] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 496.482764][ T5905] usb 3-1: media controller created [ 496.538989][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.557820][T11280] dvb-usb: bulk message failed: -22 (3/0) [ 496.577113][T11280] dvb-usb: bulk message failed: -22 (3/0) [ 496.612039][ T5905] usb 3-1: selecting invalid altsetting 6 [ 496.643391][ T5905] usb 3-1: digital interface selection failed (-22) [ 496.658442][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 496.669603][ T5905] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 496.712830][ T5905] usb 3-1: setting power OFF [ 496.745038][ T5905] dvb-usb: bulk message failed: -22 (2/0) [ 496.771092][ T5905] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 496.814047][ T5905] (NULL device *): no alternate interface [ 496.873329][ T5905] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 496.937336][ T5905] usb 3-1: USB disconnect, device number 41 [ 498.265728][T11297] syz.2.1290 (11297): drop_caches: 2 [ 498.516440][T11303] syzkaller1: entered promiscuous mode [ 498.548714][T11303] syzkaller1: entered allmulticast mode [ 498.586294][T11304] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 498.895103][ T5897] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 499.056197][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 499.068407][ T5897] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 499.147753][ T5897] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 499.209729][ T5897] usb 2-1: config 1 has no interface number 1 [ 499.264922][ T5897] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 499.327012][ T5897] usb 2-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.365049][ T5897] usb 2-1: config 1 interface 105 has no altsetting 0 [ 499.381990][ T5897] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 499.393401][T11320] trusted_key: encrypted_key: insufficient parameters specified [ 499.455745][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.465072][ T5897] usb 2-1: Product: syz [ 499.471037][ T5897] usb 2-1: Manufacturer: syz [ 499.476613][ T5897] usb 2-1: SerialNumber: syz [ 499.596670][T11303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.897358][T11303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1292'. [ 499.955857][ T5897] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 500.221327][ T5905] usb 2-1: USB disconnect, device number 45 [ 501.329761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.336500][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.269337][T11346] SET target dimension over the limit! [ 503.869738][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 503.869756][ T29] audit: type=1326 audit(1774767548.293:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 503.959919][ T29] audit: type=1326 audit(1774767548.293:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.028423][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 504.050617][ T29] audit: type=1326 audit(1774767548.303:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.126808][ T29] audit: type=1326 audit(1774767548.303:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.238396][ T29] audit: type=1326 audit(1774767548.303:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.374048][ T29] audit: type=1326 audit(1774767548.303:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.521770][ T29] audit: type=1326 audit(1774767548.303:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.623359][ T29] audit: type=1326 audit(1774767548.303:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.709839][ T29] audit: type=1326 audit(1774767548.303:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 504.780487][ T29] audit: type=1326 audit(1774767548.303:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11361 comm="syz.1.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 505.091179][T11378] xt_hashlimit: max too large, truncated to 1048576 [ 505.738220][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 506.315145][ T5905] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 506.498179][ T5905] usb 4-1: config 0 has no interfaces? [ 506.519092][ T5905] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 506.563099][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.610538][ T5905] usb 4-1: config 0 descriptor?? [ 507.189227][T11404] fuse: Bad value for 'fd' [ 507.907662][T11409] ip6gretap0: entered promiscuous mode [ 507.915289][T11409] macvtap2: entered promiscuous mode [ 507.969621][T11409] ip6gretap0: left promiscuous mode [ 509.108491][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 509.139256][ T5905] usb 4-1: USB disconnect, device number 29 [ 509.476707][T11417] loop2: detected capacity change from 0 to 7 [ 509.506153][T11417] Dev loop2: unable to read RDB block 7 [ 509.511723][T11417] loop2: AHDI p1 p2 p3 [ 509.520057][T11417] loop2: partition table partially beyond EOD, truncated [ 509.543678][T11417] loop2: p1 start 1601398130 is beyond EOD, truncated [ 509.551515][T11417] loop2: p2 start 1702059890 is beyond EOD, truncated [ 510.175096][T11428] bond3: Removing last ns target with arp_interval on [ 511.095125][ T5907] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 511.421808][ T5907] usb 2-1: config 1 has no interfaces? [ 511.431613][ T5907] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 511.542762][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.716815][T11444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.781171][ T5907] usb 2-1: string descriptor 0 read error: -71 [ 513.812259][ T5907] usb 2-1: USB disconnect, device number 46 [ 515.115787][T11474] kAFS: unable to lookup cell 'ÿ' [ 515.126849][T11474] kAFS: unable to lookup cell '(,c¾Ì' [ 515.815288][T11486] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 516.565097][ T5897] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 516.715045][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 516.729588][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 516.744511][ T5897] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 516.753873][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 516.785003][ T5897] usb 2-1: Product: syz [ 516.801807][ T5897] usb 2-1: Manufacturer: syz [ 516.825607][ T5897] usb 2-1: SerialNumber: syz [ 516.851714][ T5897] usb 2-1: config 0 descriptor?? [ 516.874884][T11488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 517.359852][ T5897] usb 2-1: USB disconnect, device number 47 [ 517.835070][ T5897] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 518.025649][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 518.044830][ T5897] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 518.072698][ T5897] usb 5-1: config 0 has no interface number 0 [ 518.081299][ T5897] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 518.102158][T11511] Cannot find set identified by id 0 to match [ 518.109530][ T5897] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 518.125338][T11510] xt_TCPMSS: Only works on TCP SYN packets [ 518.133177][ T5897] usb 5-1: config 0 interface 41 has no altsetting 0 [ 518.161076][ T5897] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 518.178874][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.194862][ T5897] usb 5-1: Product: syz [ 518.200017][ T5897] usb 5-1: Manufacturer: syz [ 518.210501][ T5897] usb 5-1: SerialNumber: syz [ 518.234691][ T5897] usb 5-1: config 0 descriptor?? [ 518.261093][T11500] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.299091][T11500] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.675759][T11500] loop5: detected capacity change from 0 to 7 [ 518.717906][T11500] Dev loop5: unable to read RDB block 7 [ 518.733555][T11514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.770328][T11500] loop5: AHDI p1 p2 [ 518.799062][T11500] loop5: partition table partially beyond EOD, truncated [ 518.835382][T11514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.853656][T11500] loop5: p1 size 150995456 extends beyond EOD, truncated [ 518.942232][ T5897] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 519.040218][ T5897] usb 5-1: USB disconnect, device number 43 [ 519.064232][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 519.750821][T11533] trusted_key: syz.3.1340 sent an empty control message without MSG_MORE. [ 520.717357][ T5898] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 520.917502][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 520.944344][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.004694][ T5898] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 521.036691][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.071610][ T5898] usb 2-1: Product: syz [ 521.092674][ T5898] usb 2-1: Manufacturer: syz [ 521.121598][ T5898] usb 2-1: SerialNumber: syz [ 521.151472][ T5898] usb 2-1: config 0 descriptor?? [ 521.180088][ T5898] usb 2-1: bad CDC descriptors [ 521.196473][ T5898] usb 2-1: unsupported MDLM descriptors [ 521.722552][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 523.256066][ T5897] usb 2-1: USB disconnect, device number 48 [ 523.802096][ T5897] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 524.024030][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.080693][ T5897] usb 2-1: config 0 has no interfaces? [ 524.114350][ T5897] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.143489][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.165568][ T5897] usb 2-1: config 0 descriptor?? [ 524.246925][ C0] hrtimer: interrupt took 15993 ns [ 524.589489][T11571] kvm: kvm [11570]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffb800000000 [ 524.616420][T11571] kvm: kvm [11570]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 524.636702][T11571] kvm: kvm [11570]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfff000000000 [ 525.417120][T11591] loop2: detected capacity change from 0 to 7 [ 525.427457][ T5818] Dev loop2: unable to read RDB block 7 [ 525.437340][ T5818] loop2: AHDI p1 p2 p3 [ 525.442758][ T5818] loop2: partition table partially beyond EOD, truncated [ 525.450882][ T5818] loop2: p1 start 1601398130 is beyond EOD, truncated [ 525.457946][ T5818] loop2: p2 start 1702059890 is beyond EOD, truncated [ 525.506774][T11591] Dev loop2: unable to read RDB block 7 [ 525.515749][T11591] loop2: AHDI p1 p2 p3 [ 525.527219][T11591] loop2: partition table partially beyond EOD, truncated [ 525.534886][T11591] loop2: p1 start 1601398130 is beyond EOD, truncated [ 525.543000][T11591] loop2: p2 start 1702059890 is beyond EOD, truncated [ 525.863980][T11599] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1355'. [ 526.135069][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 526.315075][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 526.339194][ T10] usb 4-1: config 16 has an invalid descriptor of length 142, skipping remainder of the config [ 526.360609][ T10] usb 4-1: config 16 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 526.428625][ T10] usb 4-1: config 16 interface 0 has no altsetting 0 [ 526.450116][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.479532][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.728787][ T5907] usb 2-1: USB disconnect, device number 49 [ 528.104534][ T5907] IPVS: starting estimator thread 0... [ 528.205244][T11630] IPVS: using max 54 ests per chain, 129600 per kthread [ 528.514215][T11634] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 528.980766][ T10] usb 4-1: string descriptor 0 read error: -71 [ 529.062034][ T10] usb 4-1: USB disconnect, device number 30 [ 529.185463][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 529.385121][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 529.423616][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.495371][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 529.545194][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 529.564540][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.682424][ T24] usb 5-1: config 0 descriptor?? [ 530.170980][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 530.211718][T11656] netem: invalid attributes len -7 [ 530.262054][T11656] netem: change failed [ 531.742648][ T5907] usb 5-1: USB disconnect, device number 44 [ 532.155058][ T5907] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 532.377330][ T5907] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 532.428961][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.515167][ T5907] usb 5-1: Product: syz [ 532.531172][ T5907] usb 5-1: Manufacturer: syz [ 532.550399][ T5907] usb 5-1: SerialNumber: syz [ 532.785134][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 532.965097][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 532.999204][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 533.077315][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 533.139979][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.211630][ T10] usb 4-1: Product: syz [ 533.242925][ T10] usb 4-1: Manufacturer: syz [ 533.287230][ T10] usb 4-1: SerialNumber: syz [ 533.309093][ T10] usb 4-1: config 0 descriptor?? [ 533.340184][ T5907] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 533.359509][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 533.410175][ T5907] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 533.424232][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 533.453425][ T5907] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 533.526313][ T5907] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 533.588304][ T5907] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.638119][ T5907] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 533.716588][ T5907] usb 5-1: USB disconnect, device number 45 [ 533.962798][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 534.412812][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 534.443821][ T10] em28xx 4-1:0.0: board has no eeprom [ 535.265391][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 535.273352][ T5898] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 535.474230][T11721] picdev_read: 77 callbacks suppressed [ 535.474248][T11721] kvm: pic: non byte read [ 535.493263][ T5898] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 535.504813][T11721] kvm: pic: level sensitive irq not supported [ 535.504890][T11721] kvm: pic: non byte read [ 535.517168][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.530544][T11721] kvm: pic: level sensitive irq not supported [ 535.530605][T11721] kvm: pic: non byte read [ 535.535030][ T5898] usb 1-1: config 0 has no interfaces? [ 535.547456][ T5898] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 535.560631][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.575468][ T5898] usb 1-1: config 0 descriptor?? [ 535.585631][T11721] kvm: pic: level sensitive irq not supported [ 535.585692][T11721] kvm: pic: non byte read [ 535.589901][ T24] usb 2-1: config 2 has an invalid interface number: 211 but max is 0 [ 535.616528][ T24] usb 2-1: config 2 has no interface number 0 [ 535.622622][ T24] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 535.633741][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 535.641966][T11721] kvm: pic: level sensitive irq not supported [ 535.642023][T11721] kvm: pic: non byte read [ 535.652850][T11721] kvm: pic: level sensitive irq not supported [ 535.652904][T11721] kvm: pic: non byte read [ 535.663634][T11721] kvm: pic: level sensitive irq not supported [ 535.663692][T11721] kvm: pic: non byte read [ 535.678970][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 535.700289][ T5907] em28xx 4-1:0.0: Binding DVB extension [ 535.725424][ T10] usb 4-1: USB disconnect, device number 31 [ 535.741927][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 535.787083][T11721] kvm: pic: level sensitive irq not supported [ 535.795097][T11721] kvm: pic: non byte read [ 535.812445][ T24] usb 2-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.847855][ T5907] em28xx 4-1:0.0: Registering input extension [ 535.873142][ T10] em28xx 4-1:0.0: Closing input extension [ 535.894410][T11721] kvm: pic: level sensitive irq not supported [ 535.895510][T11721] kvm: pic: non byte read [ 535.925132][T11721] kvm: pic: level sensitive irq not supported [ 535.932003][T11721] kvm: pic: non byte read [ 535.957183][T11721] kvm: pic: level sensitive irq not supported [ 535.994422][ T10] em28xx 4-1:0.0: Freeing device [ 536.715584][ T5898] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 536.905131][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 536.960847][ T5898] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 536.994502][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.039765][ T5898] usb 3-1: Product: syz [ 537.049707][T11740] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 537.073893][ T5898] usb 3-1: Manufacturer: syz [ 537.082303][T11740] team0: Port device batadv1 added [ 537.099628][ T5898] usb 3-1: SerialNumber: syz [ 537.136987][ T5898] usb 3-1: config 0 descriptor?? [ 537.148003][ T5898] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 537.445988][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 537.460660][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.544463][ T24] usb 2-1: Product: syz [ 537.572697][ T24] usb 2-1: Manufacturer: syz [ 537.608829][ T24] usb 2-1: SerialNumber: syz [ 537.663717][T11719] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 537.747968][ T24] em28xx 2-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 537.795689][ T24] em28xx 2-1:2.211: Device initialization failed. [ 537.820728][ T24] em28xx 2-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 538.061210][ T24] usb 1-1: USB disconnect, device number 25 [ 538.223479][ T5884] usb 2-1: USB disconnect, device number 50 [ 538.613329][T11757] batman_adv: batadv0: Adding interface: macsec2 [ 538.637550][T11757] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.790425][T11757] batman_adv: batadv0: Interface activated: macsec2 [ 539.402209][ T5898] gspca_sonixj: reg_w1 err -71 [ 539.447094][ T5898] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 539.502329][ T5898] usb 3-1: USB disconnect, device number 42 [ 539.545110][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 539.705101][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 539.729991][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.763046][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.839548][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.924154][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 540.018106][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.121225][ T10] usb 5-1: config 0 descriptor?? [ 541.046325][T11777] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 541.198834][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.255087][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.315704][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.338369][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.376359][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.383678][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.431023][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.456379][ T10] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 541.489080][ T10] microsoft 0003:045E:07DA.0008: item fetching failed at offset 32/34 [ 541.502641][T11777] bond0: entered promiscuous mode [ 541.522210][ T10] microsoft 0003:045E:07DA.0008: parse failed [ 541.540100][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.575416][ T10] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 541.817002][T11778] bond0: (slave bridge2): making interface the new active one [ 541.895343][T11778] bridge2: entered promiscuous mode [ 541.955261][T11778] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 542.915046][ T5829] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 542.983173][T11794] hub 9-0:1.0: USB hub found [ 543.049877][T11794] hub 9-0:1.0: 1 port detected [ 543.095561][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 543.122563][ T5829] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 543.171730][ T5829] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 543.212890][ T5829] usb 3-1: config 162 has no interface number 0 [ 543.233683][ T5829] usb 3-1: config 162 has no interface number 1 [ 543.287424][ T5829] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 543.307203][ T5829] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 543.318177][ T5829] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 543.330040][ T5829] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 543.351517][ T5829] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 543.371869][ T5829] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 543.392290][ T5829] usb 3-1: config 162 interface 84 has no altsetting 0 [ 543.399248][ T5829] usb 3-1: config 162 interface 2 has no altsetting 0 [ 543.411646][ T5829] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 543.422490][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.438985][ T5829] usb 3-1: Product: syz [ 543.466365][ T5829] usb 3-1: Manufacturer: syz [ 543.521986][ T5829] usb 3-1: SerialNumber: syz [ 543.595624][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 543.759319][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 543.788215][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.844297][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 543.884763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.948808][ T10] usb 4-1: Product: syz [ 544.006310][T11764] syz.4.1387 (11764): drop_caches: 3 [ 544.011731][ T10] usb 4-1: Manufacturer: syz [ 544.022636][ T10] usb 4-1: SerialNumber: syz [ 544.041886][ T5898] usb 5-1: USB disconnect, device number 46 [ 544.130786][ T10] usb 4-1: config 0 descriptor?? [ 544.203455][ T10] usb 4-1: bad CDC descriptors [ 544.392204][ T10] usb 4-1: unsupported MDLM descriptors [ 544.551330][ T5898] usb 4-1: USB disconnect, device number 32 [ 545.852646][T11821] loop2: detected capacity change from 0 to 7 [ 545.893909][T11821] loop2: [POWERTEC] p1 p2 p3 [ 545.933053][T11821] loop2: p1 start 1852400175 is beyond EOD, truncated [ 545.968822][T11821] loop2: p2 size 524288 extends beyond EOD, truncated [ 546.036238][T11821] loop2: p3 start 1936093797 is beyond EOD, truncated [ 546.255930][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 546.346546][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 546.408539][ T5829] usb 3-1: USB disconnect, device number 43 [ 548.330784][T11861] netlink: 'syz.1.1405': attribute type 29 has an invalid length. [ 548.915068][ T5907] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 549.199481][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.236450][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 549.251253][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.267412][ T5907] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 549.309571][T11870] bridge_slave_1 (unregistering): left allmulticast mode [ 549.324276][T11870] bridge_slave_1 (unregistering): left promiscuous mode [ 549.326762][ T5907] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 549.331710][T11870] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.394599][ T5907] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.447911][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.487304][ T5907] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.535194][ T5829] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 549.689551][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 549.699547][ T5829] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.708841][ T5829] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 549.721906][ T5829] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 549.738151][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.746565][ T5829] usb 4-1: Product: syz [ 549.750775][ T5829] usb 4-1: Manufacturer: syz [ 549.757254][ T5829] usb 4-1: SerialNumber: syz [ 549.844393][ T5907] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 549.945170][ T5907] usb 3-1: USB disconnect, device number 44 [ 550.047366][ T5829] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 550.066038][ T5829] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 550.168549][T11868] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 550.178804][T11878] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1408'. [ 550.256937][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 550.256954][ T29] audit: type=1326 audit(1774767594.683:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.0.1408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6f1f9c799 code=0x0 [ 550.496272][ T5829] usb 4-1: 2:1 : can't get Cluster Descriptor [ 551.098143][ T5829] usb 4-1: USB disconnect, device number 33 [ 551.989172][T11899] fuse: Unknown parameter 'euid<00000000000000000000' [ 552.855072][ T5884] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 553.067201][ T5884] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 553.110870][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.169580][ T5884] usb 3-1: config 0 has no interfaces? [ 553.197195][ T5884] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 553.250892][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.334721][ T5884] usb 3-1: config 0 descriptor?? [ 554.055033][ T5884] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 554.225852][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 554.247691][ T5884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 554.298781][ T5884] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 554.320453][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 554.338587][ T5884] usb 4-1: Product: syz [ 554.360771][ T5884] usb 4-1: Manufacturer: syz [ 554.372690][ T5884] usb 4-1: SerialNumber: syz [ 554.421534][ T5884] usb 4-1: config 0 descriptor?? [ 554.433369][T11928] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 555.399758][ T5898] usb 4-1: USB disconnect, device number 34 [ 555.771341][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 555.799487][T11955] veth0_to_bond: Caught tx_queue_len zero misconfig [ 555.867845][ T5829] usb 3-1: USB disconnect, device number 45 [ 556.715050][ T5898] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 556.885061][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 556.927518][ T5898] usb 2-1: config 0 has no interfaces? [ 556.943541][T11971] UHID_CREATE from different security context by process 1175 (syz.2.1428), this is not allowed. [ 556.957671][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 556.967832][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 556.975727][ T5898] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 556.998457][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.023870][ T5898] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 557.035321][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.052494][ T5898] usb 2-1: Manufacturer: syz [ 557.063045][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.086375][ T5898] usb 2-1: config 0 descriptor?? [ 557.098113][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.126338][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.143693][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.161498][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.188168][ T5829] hid-generic 0000:0000:0004.0009: unknown main item tag 0x0 [ 557.230328][ T5829] hid-generic 0000:0000:0004.0009: hidraw0: HID v0.03 Device [syz1] on syz0 [ 558.188814][T11967] Set syz1 is full, maxelem 6117 reached [ 558.545048][ T5897] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 558.705063][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 558.711569][ T5897] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 558.722889][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.768178][ T5897] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.787515][T11996] binder: 11989:11996 ioctl 4018620d 0 returned -22 [ 558.811241][ T5897] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 558.897499][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 558.916775][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.932812][ T5897] usbtmc 3-1:16.0: bulk endpoints not found [ 559.116809][T11997] binder: 11989:11997 ioctl c0306201 0 returned -14 [ 559.665214][ T5897] usb 2-1: USB disconnect, device number 51 [ 560.738693][T12015] tipc: Enabled bearer , priority 0 [ 560.757263][T12015] syzkaller0: entered promiscuous mode [ 560.775111][T12015] syzkaller0: entered allmulticast mode [ 560.830474][T12014] tipc: Resetting bearer [ 560.884319][T12014] tipc: Disabling bearer [ 561.170549][ T5898] usb 3-1: USB disconnect, device number 46 [ 561.455923][T12032] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1442'. [ 561.650279][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 561.723920][T12033] veth1_macvtap: left promiscuous mode [ 562.769507][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.776400][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.175860][T12043] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 563.184446][T12043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1444'. [ 563.282730][ T29] audit: type=1326 audit(1774767607.703:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.408538][ T29] audit: type=1326 audit(1774767607.703:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.494092][ T29] audit: type=1326 audit(1774767607.703:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.536963][ T29] audit: type=1326 audit(1774767607.703:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.588502][ T29] audit: type=1326 audit(1774767607.743:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.615069][ T5907] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 563.681566][ T29] audit: type=1326 audit(1774767607.743:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.748273][ T29] audit: type=1326 audit(1774767607.763:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.855979][ T29] audit: type=1326 audit(1774767607.763:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 563.895041][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 563.947478][ T29] audit: type=1326 audit(1774767607.763:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 564.057140][ T29] audit: type=1326 audit(1774767607.763:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12044 comm="syz.1.1445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa64f5cfce code=0x7ffc0000 [ 564.241785][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 564.390066][T12055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.446048][ T5907] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.475254][ T5907] usb 2-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.495997][ T5907] usb 2-1: config 1 interface 0 has no altsetting 0 [ 564.504133][ T5907] usb 2-1: language id specifier not provided by device, defaulting to English [ 564.557311][ T5907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40 [ 564.566951][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.586258][ T5907] usb 2-1: Manufacturer: ä°Š [ 564.597252][ T5907] usb 2-1: SerialNumber: syz [ 565.685570][ T5898] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 565.760303][ T5897] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 565.849567][T12073] tipc: Enabled bearer , priority 0 [ 565.888273][T12073] syzkaller0: entered promiscuous mode [ 565.903967][ T5898] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.933846][ T5898] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 565.974879][ T5898] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.011613][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.011653][T12073] syzkaller0: entered allmulticast mode [ 566.064542][ T5897] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 566.085384][ T5898] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 566.126838][ T5897] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 566.138098][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 566.174792][ T5898] usb 5-1: Product: syz [ 566.194666][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.221731][ T5898] usb 5-1: Manufacturer: syz [ 566.238824][ T5898] usb 5-1: SerialNumber: syz [ 566.249120][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.277457][T12072] tipc: Resetting bearer [ 566.295871][T12071] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 566.355736][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.454678][T12072] tipc: Disabling bearer [ 566.529922][ T5898] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 566.554558][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.580988][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.789043][ T5898] usb 5-1: USB disconnect, device number 47 [ 566.822574][ T5898] usblp0: removed [ 566.985091][ T5884] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 567.147072][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 567.167812][ T5884] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.194253][ T5884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 567.220624][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 567.250175][ T5884] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 567.287245][ T5884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.311511][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.355211][ T5884] usbtmc 1-1:16.0: bulk endpoints not found [ 568.785735][ T5884] usb 4-1: USB disconnect, device number 35 [ 569.447231][ T5884] usb 1-1: USB disconnect, device number 26 [ 569.979501][ T5907] usbhid 2-1:1.0: can't add hid device: -32 [ 570.009557][ T5907] usbhid 2-1:1.0: probe with driver usbhid failed with error -32 [ 570.675160][ T5907] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 570.765080][ T5884] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 570.826223][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 570.833405][ T5907] usb 4-1: config 0 has an invalid interface number: 213 but max is 1 [ 570.867625][ T5907] usb 4-1: config 0 has no interface number 1 [ 570.883258][ T5907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.915153][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 570.927461][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.963591][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 570.984914][ T5907] usb 4-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 571.018072][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.048491][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 571.065413][ T5907] usb 4-1: Product: syz [ 571.090667][ T5907] usb 4-1: Manufacturer: syz [ 571.115022][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.141831][ T5907] usb 4-1: SerialNumber: syz [ 571.154353][ T5884] usb 5-1: config 0 descriptor?? [ 571.187701][ T5907] usb 4-1: config 0 descriptor?? [ 571.196726][ T5884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 571.282781][ T5907] usb 4-1: selecting invalid altsetting 0 [ 571.306396][ T5907] usb 4-1: Could not set interface, error -22 [ 571.543532][ T5897] usb 2-1: USB disconnect, device number 52 [ 571.604008][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1459'. [ 572.065026][ T5898] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 572.095563][ T5897] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 572.278450][ T5897] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 572.287551][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.287672][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.307952][ T5897] usb 2-1: config 0 has no interfaces? [ 572.319856][ T5897] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 572.337743][ T5898] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 572.353179][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.375854][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.393548][ T5897] usb 2-1: config 0 descriptor?? [ 572.423523][ T5898] usb 1-1: config 0 descriptor?? [ 572.439998][ T5898] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 572.638274][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.650621][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.821474][T12135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 572.915168][ T5898] usb 1-1: USB disconnect, device number 27 [ 573.375992][ T5897] usb 5-1: USB disconnect, device number 48 [ 573.576591][ T5907] usb 4-1: USB disconnect, device number 36 [ 574.030151][T12145] binder: 12144:12145 ioctl 4018620d 0 returned -22 [ 574.145228][T12145] loop2: detected capacity change from 0 to 7 [ 574.248557][ T5818] Dev loop2: unable to read RDB block 7 [ 574.278417][ T5818] loop2: AHDI p1 p2 p3 [ 574.303437][ T5818] loop2: partition table partially beyond EOD, truncated [ 574.329758][ T5818] loop2: p1 start 1601398130 is beyond EOD, truncated [ 574.375660][ T5818] loop2: p2 start 1702059890 is beyond EOD, truncated [ 574.428066][T12145] Dev loop2: unable to read RDB block 7 [ 574.455601][T12145] loop2: AHDI p1 p2 p3 [ 574.473827][T12145] loop2: partition table partially beyond EOD, truncated [ 574.517778][T12145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 574.551903][T12145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 574.890233][ T5884] usb 2-1: USB disconnect, device number 53 [ 575.512290][T12169] trusted_key: encrypted_key: insufficient parameters specified [ 575.554313][T12169] netlink: 'syz.0.1471': attribute type 8 has an invalid length. [ 575.562267][T12169] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 575.571778][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 575.592692][T12170] openvswitch: netlink: Flow actions attr not present in new flow. [ 576.524068][T12170] bridge0: entered promiscuous mode [ 579.890997][T12202] binder: 12201:12202 ioctl 4018620d 0 returned -22 [ 579.909472][T12202] loop2: detected capacity change from 0 to 7 [ 579.939373][T12202] Dev loop2: unable to read RDB block 7 [ 579.980967][T12202] loop2: AHDI p1 p2 p3 [ 580.007359][T12202] loop2: partition table partially beyond EOD, truncated [ 580.050229][T12202] loop2: p1 start 1601398130 is beyond EOD, truncated [ 580.062234][T12206] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1477'. [ 580.076198][T12202] loop2: p2 start 1702059890 is beyond EOD, truncated [ 580.419170][T12212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1479'. [ 582.743852][T12239] loop2: detected capacity change from 0 to 7 [ 582.784077][T12239] loop2: [POWERTEC] p1 p2 p3 [ 582.813460][T12239] loop2: p1 start 1852400175 is beyond EOD, truncated [ 582.840703][T12239] loop2: p2 size 524288 extends beyond EOD, truncated [ 582.869136][T12239] loop2: p3 start 1936093797 is beyond EOD, truncated [ 583.008148][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 583.020070][T12244] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 584.170511][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 584.170529][ T29] audit: type=1326 audit(1774767628.593:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 584.712337][ T29] audit: type=1326 audit(1774767628.593:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 584.795163][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 584.847691][ T29] audit: type=1326 audit(1774767628.713:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 584.955009][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 585.022431][ T29] audit: type=1326 audit(1774767628.713:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 585.066961][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 585.165275][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.267622][ T10] usb 3-1: Product: syz [ 585.275447][ T10] usb 3-1: Manufacturer: syz [ 585.280133][ T29] audit: type=1326 audit(1774767628.793:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 585.328612][ T10] usb 3-1: SerialNumber: syz [ 585.384705][ T10] usb 3-1: config 0 descriptor?? [ 585.598400][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 047 [ 586.037863][ T29] audit: type=1326 audit(1774767630.463:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 586.146893][ T29] audit: type=1326 audit(1774767630.493:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 586.290420][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1495'. [ 587.368034][ T10] usb 3-1: USB disconnect, device number 47 [ 588.035061][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 588.256279][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 588.275349][ T10] usb 4-1: string descriptor 0 read error: -22 [ 588.281646][ T10] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.40 [ 588.325543][T12305] macvtap1: entered promiscuous mode [ 588.336508][T12305] ip6gretap0: entered promiscuous mode [ 588.336537][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.363149][T12305] ip6gretap0: left promiscuous mode [ 588.435093][ T5907] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 588.588745][ T5907] usb 2-1: config index 0 descriptor too short (expected 8192, got 18) [ 588.616626][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.660874][ T5907] usb 2-1: config 0 has no interfaces? [ 588.684877][ T5907] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 588.710475][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.735863][ T5907] usb 2-1: Product: syz [ 588.750952][ T5907] usb 2-1: Manufacturer: syz [ 588.768650][ T5907] usb 2-1: SerialNumber: syz [ 588.794909][ T5907] usb 2-1: config 0 descriptor?? [ 589.173751][ T10] hid_parser_main: 91 callbacks suppressed [ 589.173767][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.260759][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.289293][T12310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.305082][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.313972][T12310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.352546][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.373278][T12306] veth0_vlan: left promiscuous mode [ 589.393735][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.403485][T12306] veth0_vlan: entered promiscuous mode [ 589.425797][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.476243][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.516979][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.544742][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.566723][ T10] razer 0003:1532:010D.000A: unknown main item tag 0x0 [ 589.725985][ T10] razer 0003:1532:010D.000A: hidraw0: USB HID vff.7f Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 590.025868][ T24] usb 4-1: USB disconnect, device number 37 [ 590.074443][T12321] fido_id[12321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:1532:010D.000A/report_descriptor': No such file or directory [ 590.825142][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 591.009481][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 591.020383][T12336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.061648][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 591.106755][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 591.145791][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 591.207441][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.240940][ T10] usb 3-1: Product: syz [ 591.260239][ T10] usb 3-1: Manufacturer: syz [ 591.288639][ T10] usb 3-1: SerialNumber: syz [ 591.364956][ T10] usb 3-1: config 0 descriptor?? [ 591.391507][T12323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.413407][T12323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 591.436294][ T10] usb 3-1: ucan: probing device on interface #0 [ 591.631956][ T5907] usb 2-1: USB disconnect, device number 54 [ 591.894130][ T10] usb 3-1: ucan: device reported invalid device info [ 591.915012][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 592.072744][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.117982][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.195252][T12345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.468706][T12356] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 592.746311][T12356] bond0: entered promiscuous mode [ 592.770315][T12365] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 592.782609][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.826035][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 593.005075][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 593.035200][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 593.041135][ T10] usb 2-1: config 0 has no interfaces? [ 593.073084][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.128994][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 593.167318][ T10] usb 2-1: Manufacturer: syz [ 593.202897][ T10] usb 2-1: config 0 descriptor?? [ 593.206758][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.234883][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 593.273050][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.311481][ T24] usb 5-1: config 0 descriptor?? [ 593.328696][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 593.532539][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.571227][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.653857][T12357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.843908][T12360] [U] J"—E:ÀÆ" [ 593.881695][ T5897] usb 3-1: USB disconnect, device number 48 [ 595.306916][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'. [ 595.322280][T12396] netem: invalid attributes len -7 [ 595.331148][T12396] netem: change failed [ 595.649330][ T5907] usb 2-1: USB disconnect, device number 55 [ 596.309059][ T5907] usb 5-1: USB disconnect, device number 49 [ 597.855317][T12425] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 598.359993][T12429] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[12429] [ 598.445416][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 599.044779][T12441] bond0: (slave bond_slave_1): Releasing backup interface [ 599.104193][T12441] bond_slave_1: left promiscuous mode [ 599.375494][T12441] bond_slave_0: left promiscuous mode [ 599.604752][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.671776][T12441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.705375][ T5898] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 599.896309][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 599.916998][ T5898] usb 1-1: config 0 has no interfaces? [ 599.931527][ T5898] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 599.954129][T12441] veth1_to_hsr: left allmulticast mode [ 599.967557][ T5898] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 600.002361][ T5898] usb 1-1: Manufacturer: syz [ 600.014508][T12441] batman_adv: batadv0: Interface deactivated: macsec2 [ 600.029977][ T5898] usb 1-1: config 0 descriptor?? [ 600.060236][ T6336] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.094198][ T6336] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.176239][ T6336] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.236240][ T6336] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.297356][ T6336] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.337663][ T6336] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.436413][ T6336] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.468357][ T6336] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.595167][ T5898] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 600.751378][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.778650][ T5898] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 600.818645][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.851679][ T5898] usb 5-1: config 0 descriptor?? [ 600.893434][ T5898] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 600.935545][ T5907] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 601.111436][T12455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.168870][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.180669][T12455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.216926][ T5907] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.322125][ T5907] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 601.372498][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.418381][ T5907] usb 2-1: Product: syz [ 601.442024][ T5907] usb 2-1: Manufacturer: syz [ 601.477157][ T5907] usb 2-1: SerialNumber: syz [ 601.520401][ T5907] usb 2-1: config 0 descriptor?? [ 602.206757][T12473] loop7: detected capacity change from 0 to 16383 [ 602.936540][ T5897] usb 1-1: USB disconnect, device number 28 [ 603.417637][T12483] syz_tun: entered promiscuous mode [ 603.512935][ T5897] usb 5-1: USB disconnect, device number 50 [ 603.787107][ T5907] usb 2-1: USB disconnect, device number 56 [ 604.465675][T12495] syzkaller0: entered promiscuous mode [ 604.492227][T12495] syzkaller0: entered allmulticast mode [ 605.455409][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1541'. [ 605.505323][T12509] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.629408][T12513] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 606.436955][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 606.635391][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 606.652747][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.695038][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.724508][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 606.757487][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.813575][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'. [ 606.826318][ T10] usb 2-1: config 0 descriptor?? [ 606.864165][T12525] No such timeout policy "syz1" [ 606.952790][ T10] hub 2-1:0.0: USB hub found [ 607.056282][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 607.475576][ T10] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 607.568495][ T5884] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 607.745134][ T5907] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 607.754467][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.773793][ T5884] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 607.798462][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.811503][ T5884] usb 1-1: config 0 descriptor?? [ 607.819266][ T5884] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 607.915217][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 607.929491][ T5907] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 607.944603][ T5907] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 607.953965][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 607.963053][ T5907] usb 4-1: Product: syz [ 607.968310][ T5907] usb 4-1: Manufacturer: syz [ 607.972889][ T5907] usb 4-1: SerialNumber: syz [ 607.980361][ T5907] usb 4-1: config 0 descriptor?? [ 607.986950][T12535] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 608.022629][T12531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.033835][T12531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.204736][T12519] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 608.473367][T12550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 608.613117][ T5897] usb 4-1: USB disconnect, device number 38 [ 608.681577][ T24] usb 2-1: USB disconnect, device number 57 [ 608.689228][T12519] usbhid 2-1:0.0: reset_resume error -19 [ 609.775155][ T24] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 609.797806][ T5907] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 609.925110][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 609.932640][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.946483][ T24] usb 2-1: config 1 has an invalid interface number: 244 but max is 1 [ 609.956241][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.965220][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 609.973629][ T24] usb 2-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 609.973882][ T5907] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 609.992439][ T24] usb 2-1: config 1 has no interface number 2 [ 609.998821][ T5907] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 610.009573][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.010859][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.042269][ T24] usb 2-1: config 1 interface 244 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.064511][ T24] usb 2-1: config 1 interface 244 has no altsetting 0 [ 610.069688][ T5907] usb 5-1: Product: syz [ 610.077914][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 610.087373][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.093914][ T5907] usb 5-1: Manufacturer: syz [ 610.100293][ T24] usb 2-1: Product: syz [ 610.104563][ T5907] usb 5-1: SerialNumber: syz [ 610.104575][ T24] usb 2-1: Manufacturer: syz [ 610.114620][ T24] usb 2-1: SerialNumber: syz [ 610.136808][ T5907] usb 5-1: config 0 descriptor?? [ 610.152462][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 610.170959][ T5907] usb 5-1: setting power ON [ 610.185078][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 610.200084][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 610.225745][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 610.241396][ T5907] usb 5-1: media controller created [ 610.263824][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 610.322917][ T5907] usb 5-1: selecting invalid altsetting 6 [ 610.348353][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 610.366340][ T24] cdc_ncm 2-1:1.0: bind() failure [ 610.373747][ T5907] usb 5-1: digital interface selection failed (-22) [ 610.399795][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 610.399798][T12559] dvb-usb: bulk message failed: -22 (3/0) [ 610.416214][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 610.428403][ T5884] usb 1-1: USB disconnect, device number 29 [ 610.434638][T12559] dvb-usb: bulk message failed: -22 (3/0) [ 610.443235][ T24] cdc_ncm 2-1:1.1: bind() failure [ 610.491529][ T5907] usb 5-1: setting power OFF [ 610.511216][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 610.511581][ T24] cdc_mbim 2-1:1.244: probe with driver cdc_mbim failed with error -71 [ 610.531617][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 610.553813][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1551'. [ 610.581945][ T5907] (NULL device *): no alternate interface [ 610.611840][ T24] usb 2-1: USB disconnect, device number 58 [ 610.757593][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 610.796568][T12567] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1552'. [ 610.814481][ T5907] usb 5-1: USB disconnect, device number 51 [ 610.903697][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 611.427300][T12580] loop7: detected capacity change from 0 to 16384 [ 611.947201][T12582] loop7: detected capacity change from 16384 to 16383 [ 612.296581][T12582] Dev loop7: unable to read RDB block 8 [ 612.304245][T12582] loop7: unable to read partition table [ 612.314643][T12582] loop_reread_partitions: partition scan of loop7 ((õÉê—) failed (rc=-5) [ 613.066575][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1557'. [ 613.420134][T12611] tipc: Enabled bearer , priority 0 [ 613.430576][T12611] syzkaller0: entered promiscuous mode [ 613.440026][T12611] syzkaller0: entered allmulticast mode [ 613.462290][T12611] tipc: Resetting bearer [ 613.631835][T12610] tipc: Resetting bearer [ 613.959515][T12610] tipc: Disabling bearer [ 614.049408][ T29] audit: type=1800 audit(1774767658.473:1015): pid=12621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1562" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=55785 res=0 errno=0 [ 614.145005][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 614.298179][ T24] usb 3-1: config 0 has no interfaces? [ 614.314414][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 614.344430][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.396154][ T24] usb 3-1: config 0 descriptor?? [ 614.524997][ T5884] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 614.688977][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.705948][ T5884] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 614.736880][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.788662][ T5884] usb 5-1: config 0 descriptor?? [ 614.813674][ T5884] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 615.011142][T12623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.034420][T12623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.765026][ T5907] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 615.925115][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 615.932997][ T5907] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 615.945495][ T5907] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 615.975058][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.986782][ T5907] usb 2-1: Product: syz [ 616.005937][ T5907] usb 2-1: Manufacturer: syz [ 616.021784][ T5907] usb 2-1: SerialNumber: syz [ 616.046235][ T5907] usb 2-1: config 0 descriptor?? [ 616.068885][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 616.091958][ T5907] usb 2-1: setting power ON [ 616.107394][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 616.132598][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 616.162818][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 616.181025][ T5907] usb 2-1: media controller created [ 616.235175][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.277043][T12636] dvb-usb: bulk message failed: -22 (3/0) [ 616.296285][T12636] dvb-usb: bulk message failed: -22 (3/0) [ 616.309622][ T5907] usb 2-1: selecting invalid altsetting 6 [ 616.334989][ T5907] usb 2-1: digital interface selection failed (-22) [ 616.361684][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 616.388780][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 616.412258][ T5907] usb 2-1: setting power OFF [ 616.425000][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 616.438837][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 616.475278][ T5907] (NULL device *): no alternate interface [ 616.584964][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 616.676115][ T5907] usb 2-1: USB disconnect, device number 59 [ 616.782924][ T24] usb 3-1: string descriptor 0 read error: -71 [ 616.821802][ T24] usb 3-1: USB disconnect, device number 49 [ 617.305123][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 617.348886][ T5897] usb 5-1: USB disconnect, device number 52 [ 617.496132][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 617.530345][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 617.558446][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 617.578872][T12665] syzkaller0: entered promiscuous mode [ 617.597225][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 617.605918][T12665] syzkaller0: entered allmulticast mode [ 617.658570][ T24] usb 2-1: Product: syz [ 617.670777][ T24] usb 2-1: Manufacturer: syz [ 617.707752][ T24] usb 2-1: SerialNumber: syz [ 617.738344][ T24] usb 2-1: config 0 descriptor?? [ 617.763499][T12648] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 618.271398][ T5907] usb 2-1: USB disconnect, device number 60 [ 619.010835][T12694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1576'. [ 619.930269][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 619.979548][T12700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1578'. [ 620.085554][T12700] vlan2: entered allmulticast mode [ 620.090792][T12700] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 620.527324][T12707] random: crng reseeded on system resumption [ 620.875031][ T5907] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 621.098534][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.128757][ T5907] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 621.166437][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.216724][ T5907] usb 1-1: config 0 descriptor?? [ 621.243080][ T5907] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 621.439966][T12710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.492580][T12710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.834327][T12719] binder: 12718:12719 ioctl c0306201 0 returned -14 [ 621.877775][T12719] loop2: detected capacity change from 0 to 7 [ 621.902155][ T5818] Dev loop2: unable to read RDB block 7 [ 621.908054][ T5818] loop2: AHDI p1 p2 p3 [ 621.942689][ T5818] loop2: partition table partially beyond EOD, truncated [ 621.982828][ T5818] loop2: p1 start 1601398130 is beyond EOD, truncated [ 621.993237][ T5818] loop2: p2 start 1702059890 is beyond EOD, truncated [ 622.005883][T12719] Dev loop2: unable to read RDB block 7 [ 622.023499][T12719] loop2: AHDI p1 p2 p3 [ 622.045028][T12719] loop2: partition table partially beyond EOD, truncated [ 622.064005][T12719] loop2: p1 start 1601398130 is beyond EOD, truncated [ 622.074538][T12719] loop2: p2 start 1702059890 is beyond EOD, truncated [ 623.614056][ T10] usb 1-1: USB disconnect, device number 30 [ 624.145183][T12377] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 624.210426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.216990][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.365063][T12377] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 624.432046][T12377] usb 3-1: config 160 has no interface number 0 [ 624.446293][T12377] usb 3-1: config 160 interface 200 has no altsetting 0 [ 624.500537][T12377] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 624.521403][T12377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.542950][T12377] usb 3-1: Product: syz [ 624.554109][T12377] usb 3-1: Manufacturer: syz [ 624.560549][T12377] usb 3-1: SerialNumber: syz [ 624.893191][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'. [ 625.121273][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.353416][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.723892][T12778] binder: 12777:12778 ioctl c0306201 0 returned -14 [ 626.790309][T12778] loop2: detected capacity change from 0 to 7 [ 626.815807][ T5818] Dev loop2: unable to read RDB block 7 [ 626.833024][ T5818] loop2: AHDI p1 p2 p3 [ 626.848743][ T5818] loop2: partition table partially beyond EOD, truncated [ 626.906483][ T5818] loop2: p1 start 1601398130 is beyond EOD, truncated [ 626.934030][ T5818] loop2: p2 start 1702059890 is beyond EOD, truncated [ 626.962132][T12778] Dev loop2: unable to read RDB block 7 [ 626.983337][T12778] loop2: AHDI p1 p2 p3 [ 626.995046][T12778] loop2: partition table partially beyond EOD, truncated [ 627.020602][T12778] loop2: p1 start 1601398130 is beyond EOD, truncated [ 627.041738][T12778] loop2: p2 start 1702059890 is beyond EOD, truncated [ 627.457784][T12783] hub 1-0:1.0: USB hub found [ 627.483862][T12783] hub 1-0:1.0: 1 port detected [ 627.607803][T12377] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.615283][T12377] usb 3-1: MIDIStreaming interface descriptor not found [ 627.815840][T12377] usb 3-1: USB disconnect, device number 50 [ 627.895417][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 628.076174][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 628.106802][ T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 628.157903][ T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 628.185043][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.213288][ T24] usb 1-1: Product: syz [ 628.229601][ T24] usb 1-1: Manufacturer: syz [ 628.243499][ T24] usb 1-1: SerialNumber: syz [ 628.277861][ T24] usb 1-1: config 0 descriptor?? [ 628.296965][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 628.333587][ T24] usb 1-1: setting power ON [ 628.367861][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 628.408438][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 628.443359][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 628.476535][ T24] usb 1-1: media controller created [ 628.532326][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.605228][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 628.624856][ T24] usb 1-1: selecting invalid altsetting 6 [ 628.655095][ T24] usb 1-1: digital interface selection failed (-22) [ 628.689726][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 628.735647][ T24] usb 1-1: setting power OFF [ 628.777193][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 628.823813][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 628.876327][ T24] (NULL device *): no alternate interface [ 629.010897][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 629.109760][ T24] usb 1-1: USB disconnect, device number 31 [ 629.286058][T12802] random: crng reseeded on system resumption [ 629.936752][T12813] netlink: 'syz.4.1601': attribute type 2 has an invalid length. [ 630.225759][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 630.405024][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 630.447156][ T24] usb 5-1: config index 0 descriptor too short (expected 36, got 35) [ 630.478499][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.514507][ T24] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 630.556093][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.616129][ T24] usb 5-1: config 0 descriptor?? [ 630.621750][T12821] netlink: 'syz.1.1603': attribute type 1 has an invalid length. [ 630.804482][T12821] bond2: entered promiscuous mode [ 630.832351][T12821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.994612][T12823] bond2: (slave bridge1): making interface the new active one [ 631.031776][T12823] bridge1: entered promiscuous mode [ 631.074482][T12823] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 632.547008][T12836] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 632.672885][T12836] bond4: entered promiscuous mode [ 632.697512][T12836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.883072][T12838] bond4: (slave bridge3): making interface the new active one [ 632.891841][T12838] bridge3: entered promiscuous mode [ 632.948327][T12838] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 633.129724][T12839] ip6gretap0: entered promiscuous mode [ 633.179788][T12839] macvtap1: entered promiscuous mode [ 633.237569][T12839] ip6gretap0: left promiscuous mode [ 633.463606][ T24] usb 5-1: string descriptor 0 read error: -71 [ 633.490714][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 633.532423][ T24] usb 5-1: USB disconnect, device number 53 [ 634.033199][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 634.227816][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 634.258133][ T24] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 634.273259][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 634.285915][ T24] usb 5-1: config 220 has no interface number 2 [ 634.292561][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 634.306116][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 634.313736][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 634.322822][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 634.371108][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 634.394856][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.423509][ T24] usb 5-1: Product: syz [ 634.441896][ T24] usb 5-1: Manufacturer: syz [ 634.508954][ T24] usb 5-1: SerialNumber: syz [ 634.820048][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.884718][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.854995][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 636.810476][ T24] usb 5-1: selecting invalid altsetting 0 [ 636.855361][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 636.940496][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 637.113200][ T24] usb 5-1: selecting invalid altsetting 0 [ 637.145378][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 637.264898][ T24] usb 5-1: USB disconnect, device number 54 [ 637.941153][T12892] ip6gre1: entered promiscuous mode [ 639.555059][T12909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1620'. [ 640.443285][T12893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 641.336442][T12930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.525000][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 641.684971][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 641.692027][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 641.712233][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 641.769897][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 641.780514][ T10] usb 2-1: Product: syz [ 641.784808][ T10] usb 2-1: Manufacturer: syz [ 641.811291][ T10] usb 2-1: SerialNumber: syz [ 641.843902][ T10] usb 2-1: config 0 descriptor?? [ 641.854149][T12932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 642.702597][ T24] usb 2-1: USB disconnect, device number 61 [ 642.892266][T12949] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 642.898806][T12949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 642.973216][T12949] vhci_hcd vhci_hcd.0: Device attached [ 643.315112][ T24] usb 40-1: SetAddress Request (6) to port 0 [ 643.321263][ T24] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 643.503665][T12950] vhci_hcd: connection reset by peer [ 643.515826][ T67] vhci_hcd vhci_hcd.3: stop threads [ 643.530228][ T67] vhci_hcd vhci_hcd.3: release socket [ 643.541994][ T67] vhci_hcd vhci_hcd.3: disconnect device [ 644.239745][T12965] bridge0: port 3(hsr0) entered blocking state [ 644.282005][T12965] bridge0: port 3(hsr0) entered disabled state [ 644.304409][T12965] hsr0: entered allmulticast mode [ 644.310395][T12965] hsr_slave_0: entered allmulticast mode [ 644.335221][T12965] hsr_slave_1: entered allmulticast mode [ 644.361323][T12965] hsr0: entered promiscuous mode [ 644.565211][T12976] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 644.654979][ T5898] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 644.807064][ T5898] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 644.826231][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 644.847149][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 644.863249][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 644.873461][ T5898] usb 2-1: Product: syz [ 644.878954][ T5898] usb 2-1: Manufacturer: syz [ 644.926357][ T5898] usb 2-1: SerialNumber: syz [ 644.992846][ T5898] usb 2-1: config 0 descriptor?? [ 645.039407][ T5898] usb 2-1: selecting invalid altsetting 0 [ 647.439797][T13000] loop2: detected capacity change from 0 to 7 [ 647.481921][ T5818] Dev loop2: unable to read RDB block 7 [ 647.508581][ T5818] loop2: AHDI p1 p2 p3 [ 647.532842][ T5818] loop2: partition table partially beyond EOD, truncated [ 647.560573][ T5907] usb 2-1: USB disconnect, device number 62 [ 647.569517][ T5818] loop2: p1 start 1601398130 is beyond EOD, truncated [ 647.615556][ T5818] loop2: p2 start 1702059890 is beyond EOD, truncated [ 647.682699][T13000] Dev loop2: unable to read RDB block 7 [ 647.714894][T13000] loop2: AHDI p1 p2 p3 [ 647.741443][T13000] loop2: partition table partially beyond EOD, truncated [ 647.777214][T13000] loop2: p1 start 1601398130 is beyond EOD, truncated [ 647.801690][T13000] loop2: p2 start 1702059890 is beyond EOD, truncated [ 647.891570][ T29] audit: type=1326 audit(1774767692.303:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.001403][ T29] audit: type=1326 audit(1774767692.303:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.028153][ T5907] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 648.107114][ T29] audit: type=1326 audit(1774767692.373:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.220482][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 648.242134][ T29] audit: type=1326 audit(1774767692.373:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.313461][ T5907] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 648.337824][ T29] audit: type=1326 audit(1774767692.373:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.400448][ T5907] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 648.434722][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 648.444747][ T29] audit: type=1326 audit(1774767692.483:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.467528][ T24] usb 40-1: device descriptor read/8, error -110 [ 648.484730][ T5907] usb 2-1: Product: syz [ 648.492924][ T5907] usb 2-1: Manufacturer: syz [ 648.507912][ T5907] usb 2-1: SerialNumber: syz [ 648.569544][ T29] audit: type=1326 audit(1774767692.513:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.603229][ T5907] usb 2-1: config 0 descriptor?? [ 648.629005][T13003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 648.698416][ T29] audit: type=1326 audit(1774767692.513:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.763323][T13013] nvme_fabrics: missing parameter 'transport=%s' [ 648.791709][T13013] nvme_fabrics: missing parameter 'nqn=%s' [ 648.847115][ T29] audit: type=1326 audit(1774767692.593:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa917f9c799 code=0x7ffc0000 [ 648.881545][ T24] usb usb40-port1: attempt power cycle [ 648.954690][ T29] audit: type=1326 audit(1774767692.603:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.4.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa917f9c502 code=0x7ffc0000 [ 649.440924][ T5898] usb 2-1: USB disconnect, device number 63 [ 649.475829][ T24] usb usb40-port1: unable to enumerate USB device [ 650.532771][T13040] netlink: 'syz.1.1647': attribute type 10 has an invalid length. [ 650.654251][T13045] ipt_ECN: cannot use operation on non-tcp rule [ 650.835062][ T24] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 651.070430][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 651.144995][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 651.215113][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 651.308575][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.463852][T13040] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 651.483315][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 651.832243][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.866329][T13051] netlink: 'syz.3.1649': attribute type 7 has an invalid length. [ 651.882105][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.910546][T13051] netlink: 'syz.3.1649': attribute type 8 has an invalid length. [ 652.300734][T13059] loop2: detected capacity change from 0 to 7 [ 652.314281][T13059] Dev loop2: unable to read RDB block 7 [ 652.329324][T13059] loop2: AHDI p1 p2 p3 [ 652.337997][T13059] loop2: partition table partially beyond EOD, truncated [ 652.354526][T13059] loop2: p1 start 1601398130 is beyond EOD, truncated [ 652.378722][T13059] loop2: p2 start 1702059890 is beyond EOD, truncated [ 653.676385][T13075] fuse: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 653.825670][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 654.030856][ T5897] usb 2-1: USB disconnect, device number 64 [ 654.426085][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 654.487833][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 654.499386][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.564484][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 654.646939][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 654.732063][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.849683][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.925808][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.934991][ T5907] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 655.085416][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 655.104809][ T5907] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 655.149132][ T5907] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 655.169781][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 655.229762][ T5907] usb 1-1: Product: syz [ 655.238781][ T5907] usb 1-1: Manufacturer: syz [ 655.251701][ T5907] usb 1-1: SerialNumber: syz [ 655.258745][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 655.285166][ T5907] usb 1-1: config 0 descriptor?? [ 655.295790][T13085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 655.304118][ T24] usbtmc 4-1:16.0: can't read capabilities [ 655.917219][ T5907] usb 1-1: USB disconnect, device number 32 [ 656.178952][T13095] trusted_key: encrypted_key: insufficient parameters specified [ 656.215996][T13095] ucma_write: process 1319 (syz.1.1659) changed security contexts after opening file descriptor, this is not allowed. [ 657.041981][T13104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 658.560289][T13121] bond2: option ad_user_port_key: invalid value (3136) [ 658.573157][T13121] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 658.642983][T13123] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1664'. [ 658.894571][T13121] bond2 (unregistering): Released all slaves [ 659.285056][T12377] usb 4-1: USB disconnect, device number 39 [ 660.065096][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 660.254966][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 660.300122][ T24] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 660.344662][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 660.428719][ T24] usb 4-1: config 4 has no interface number 0 [ 660.475211][ T24] usb 4-1: config 4 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.585229][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 660.647017][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.802308][ T24] hub 4-1:4.128: bad descriptor, ignoring hub [ 660.822457][ T24] hub 4-1:4.128: probe with driver hub failed with error -5 [ 660.860530][ T24] usbhid 4-1:4.128: couldn't find an input interrupt endpoint [ 663.515226][ T5907] usb 4-1: USB disconnect, device number 40 [ 663.867222][T13183] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 664.341051][T13187] tipc: Failed to remove unknown binding: 66,0,0/1421150181:3324185236/3324185238 [ 664.352252][T13187] tipc: Failed to remove unknown binding: 66,0,0/1421150181:3324185236/3324185237 [ 664.381532][T13187] tipc: Failed to remove unknown binding: 66,0,0/1421150181:3324185236/3324185238 [ 664.393732][T13187] tipc: Failed to remove unknown binding: 66,0,0/1421150181:3324185236/3324185237 [ 665.222189][T13208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.477594][T13215] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 666.486451][T13215] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 666.585130][T13215] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 667.241118][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 667.241135][ T29] audit: type=1326 audit(1774767711.663:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.381791][ T29] audit: type=1326 audit(1774767711.663:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.433022][ T29] audit: type=1326 audit(1774767711.693:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.505078][ T29] audit: type=1326 audit(1774767711.693:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.605027][ T29] audit: type=1326 audit(1774767711.703:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.671291][ T29] audit: type=1326 audit(1774767711.703:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.704118][ T29] audit: type=1326 audit(1774767711.963:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.730701][ T29] audit: type=1326 audit(1774767711.963:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.756784][ T29] audit: type=1326 audit(1774767712.083:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.785489][ T29] audit: type=1326 audit(1774767712.083:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938c59c799 code=0x7ffc0000 [ 667.809223][T13233] tipc: Enabled bearer , priority 0 [ 667.819559][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 667.838037][T13228] syzkaller0: entered promiscuous mode [ 667.845241][T13228] syzkaller0: entered allmulticast mode [ 667.955301][T13232] tipc: Resetting bearer [ 667.977322][T13227] tipc: Resetting bearer [ 668.053149][T13227] tipc: Disabling bearer [ 668.175028][ T5907] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 668.335052][ T5907] usb 5-1: Using ep0 maxpacket: 8 [ 668.348865][ T5907] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 668.372451][ T5907] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 668.390756][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.411300][ T5907] usb 5-1: Product: syz [ 668.422354][ T5907] usb 5-1: Manufacturer: syz [ 668.439570][ T5907] usb 5-1: SerialNumber: syz [ 668.460977][ T5907] usb 5-1: config 0 descriptor?? [ 668.528440][ T5907] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 668.561825][ T5907] usb 5-1: setting power ON [ 668.576669][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 668.633334][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 668.712118][ T5907] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 668.755000][ T5907] usb 5-1: media controller created [ 668.770464][T13235] dvb-usb: bulk message failed: -22 (3/0) [ 668.800908][T13235] dvb-usb: bulk message failed: -22 (14/0) [ 668.841396][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.933317][ T5907] usb 5-1: selecting invalid altsetting 6 [ 668.956636][ T5907] usb 5-1: digital interface selection failed (-22) [ 668.977612][ T5907] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 669.038623][ T5907] usb 5-1: setting power OFF [ 669.063255][ T5907] dvb-usb: bulk message failed: -22 (2/0) [ 669.079333][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 669.120812][ T5907] (NULL device *): no alternate interface [ 669.230483][ T5907] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 669.427523][ T5907] usb 5-1: USB disconnect, device number 55 [ 670.154605][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 670.196347][T13265] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1692'. [ 670.214504][T13264] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.134999][ T5907] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 672.316996][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.373269][ T5907] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 672.395927][T13303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 672.426873][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.472135][ T5907] usb 4-1: config 0 descriptor?? [ 672.496218][ T5907] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 672.739251][T13288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.796667][T13288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.272706][T13331] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1704'. [ 674.535391][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 674.535408][ T29] audit: type=1800 audit(1774767718.963:1044): pid=13341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1707" name="bus" dev="tmpfs" ino=1864 res=0 errno=0 [ 674.605550][T13342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.605485][ T24] usb 4-1: USB disconnect, device number 41 [ 676.043135][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1711'. [ 676.073141][T13359] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1710' sets config #1 [ 676.273371][T13360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.407741][T13356] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1710' sets config #0 [ 677.944999][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 678.148715][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 678.179201][ T24] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 678.289207][T13383] loop2: detected capacity change from 0 to 7 [ 678.299209][ T24] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.325986][T13383] Dev loop2: unable to read RDB block 7 [ 678.347125][T13383] loop2: AHDI p1 p2 p3 [ 678.364769][ T24] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.372046][T13383] loop2: partition table partially beyond EOD, truncated [ 678.402826][T13383] loop2: p1 start 1601398130 is beyond EOD, truncated [ 678.429747][T13383] loop2: p2 start 1702059890 is beyond EOD, truncated [ 678.447631][ T24] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 678.536199][T13391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.554068][ T24] usb 4-1: config 7 interface 0 has no altsetting 0 [ 678.630384][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 678.678434][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.752588][T13397] ptrace attach of ""[13399] was attempted by "./syz-executor exec"[13397] [ 678.815258][ T5884] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 678.987393][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.026835][ T5884] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 679.086914][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.158048][ T5884] usb 3-1: config 0 descriptor?? [ 679.177743][T12377] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 679.244754][ T5884] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 679.401140][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.435623][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.605108][T12377] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.665059][T12377] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 679.741798][T12377] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 679.827547][T12377] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.873356][T12377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.131350][T12377] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.431764][T12377] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 680.543512][T12377] usb 5-1: USB disconnect, device number 56 [ 680.942082][ T24] usbhid 4-1:7.0: can't add hid device: -71 [ 680.985229][ T24] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 680.995967][ T24] usb 4-1: USB disconnect, device number 42 [ 681.745002][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 681.919764][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 681.970358][ T10] usb 4-1: config 0 has no interfaces? [ 682.005715][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.098352][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.180578][ T24] usb 3-1: USB disconnect, device number 51 [ 682.189234][ T10] usb 4-1: Manufacturer: syz [ 682.257197][ T10] usb 4-1: config 0 descriptor?? [ 682.668635][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1728'. [ 682.781849][T13433] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 684.038079][T13463] tipc: Enabled bearer , priority 0 [ 684.079708][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1731'. [ 684.124706][T13463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1731'. [ 684.162136][T13463] syzkaller0: entered promiscuous mode [ 684.178493][T13463] syzkaller0: entered allmulticast mode [ 684.270831][ T5884] usb 4-1: USB disconnect, device number 43 [ 684.504402][T13466] tipc: Resetting bearer [ 684.749001][T13462] tipc: Resetting bearer [ 684.837651][T13462] tipc: Disabling bearer [ 685.012276][T13480] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.061754][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 685.086651][T13480] syz_tun: refused to change device tx_queue_len [ 685.110680][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 685.125191][T13480] syz_tun: refused to change device tx_queue_len [ 685.320427][T13485] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 685.553688][ T29] audit: type=1326 audit(1774767729.973:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 685.615031][ T5884] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 685.655729][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.662085][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.679581][ T29] audit: type=1326 audit(1774767729.973:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 685.838209][ T29] audit: type=1326 audit(1774767729.973:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 685.862360][ T5884] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 685.901350][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.937875][ T5884] usb 3-1: Product: syz [ 685.958095][ T5884] usb 3-1: Manufacturer: syz [ 685.966491][ T5884] usb 3-1: SerialNumber: syz [ 685.982911][ T29] audit: type=1326 audit(1774767729.973:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 685.993398][ T5884] usb 3-1: config 0 descriptor?? [ 686.035114][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 686.045271][ T5884] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 686.057283][ T29] audit: type=1326 audit(1774767729.973:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.080767][ T29] audit: type=1326 audit(1774767729.973:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.113880][ T29] audit: type=1326 audit(1774767729.973:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.165647][ T29] audit: type=1326 audit(1774767730.003:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.228976][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.270978][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 686.280775][ T29] audit: type=1326 audit(1774767730.003:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.309395][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.346087][ T10] usb 1-1: config 0 descriptor?? [ 686.370057][ T29] audit: type=1326 audit(1774767730.053:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa64f9c799 code=0x7ffc0000 [ 686.415355][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 686.567578][T13500] syzkaller0: entered promiscuous mode [ 686.573575][T13500] syzkaller0: entered allmulticast mode [ 686.624750][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.670953][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.694972][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 686.844989][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 686.852427][ T10] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 686.867346][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.896221][ T10] usb 4-1: config 0 descriptor?? [ 686.916259][ T10] as10x_usb: device has been detected [ 686.945670][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 687.022351][ T10] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 687.157909][ T10] as10x_usb: error during firmware upload part1 [ 687.210245][ T10] Registered device nBox DVB-T Dongle [ 688.249111][ T10] usb 3-1: USB disconnect, device number 52 [ 689.040693][ T10] usb 1-1: USB disconnect, device number 33 [ 689.557576][ T10] usb 4-1: USB disconnect, device number 44 [ 689.653841][ T10] Unregistered device nBox DVB-T Dongle [ 689.695718][ T10] as10x_usb: device has been disconnected [ 690.103265][T13540] syzkaller0: entered promiscuous mode [ 690.113492][T13540] syzkaller0: entered allmulticast mode [ 690.396930][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1749'. [ 691.381096][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 691.381112][ T29] audit: type=1326 audit(1774767735.803:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.435885][ T29] audit: type=1326 audit(1774767735.833:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.583466][ T29] audit: type=1326 audit(1774767735.833:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.705390][ T29] audit: type=1326 audit(1774767735.843:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.819743][ T29] audit: type=1326 audit(1774767735.853:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.909365][ T29] audit: type=1326 audit(1774767735.853:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 691.935350][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 692.024163][ T29] audit: type=1326 audit(1774767735.853:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 692.128150][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 692.139889][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 692.174984][ T29] audit: type=1326 audit(1774767735.883:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 692.203378][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.250626][ T24] usb 5-1: config 0 descriptor?? [ 692.293939][ T29] audit: type=1326 audit(1774767735.883:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 692.395002][ T29] audit: type=1326 audit(1774767735.883:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13555 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff319b9c799 code=0x7ffc0000 [ 692.485148][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 692.519313][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 692.549696][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 692.585005][ T24] usb 5-1: media controller created [ 692.668007][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 692.842503][ T24] DVB: Unable to find symbol dib7000p_attach() [ 692.915054][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 693.085289][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 693.113378][ T24] Registered IR keymap rc-empty [ 693.114542][T13585] fuse: Bad value for 'fd' [ 693.137991][ T24] dvb-usb: could not initialize remote control. [ 693.158726][ T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 693.525226][T13595] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 693.567198][T13595] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 694.708456][T13601] ------------[ cut here ]------------ [ 694.713998][T13601] usb 5-1: BOGUS control dir, pipe 80003980 doesn't match bRequestType c0 [ 694.722555][T13601] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.3.1761/13601 [ 694.732930][T13601] Modules linked in: [ 694.737102][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.3.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.748092][T13601] Tainted: [L]=SOFTLOCKUP [ 694.752416][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.762565][T13601] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 694.769361][T13601] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 694.789122][T13601] RSP: 0018:ffffc9000c44f948 EFLAGS: 00010246 [ 694.795254][T13601] RAX: 0000000000000000 RBX: ffff8880212d1d00 RCX: 0000000080003980 [ 694.803210][T13601] RDX: ffff88802b0224c0 RSI: ffffffff8c7f2600 RDI: ffffffff901f0640 [ 694.811223][T13601] RBP: 1ffff1100c66b8b0 R08: 00000000000000c0 R09: 0000000000000000 [ 694.819320][T13601] R10: ffffc9000c44fa40 R11: fffff52001889f54 R12: ffff88802880d100 [ 694.827431][T13601] R13: ffff88806335c580 R14: 0000000080003980 R15: ffff88802b0224c0 [ 694.835436][T13601] FS: 00007ff317df66c0(0000) GS:ffff888125459000(0000) knlGS:0000000000000000 [ 694.844352][T13601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.850965][T13601] CR2: 000020000035a030 CR3: 000000007bd2c000 CR4: 00000000003526f0 [ 694.858962][T13601] Call Trace: [ 694.862228][T13601] [ 694.865164][T13601] ? __init_swait_queue_head+0xa9/0x150 [ 694.870694][T13601] usb_start_wait_urb+0x13f/0x5b0 [ 694.875734][T13601] ? rcu_is_watching+0x15/0xb0 [ 694.880486][T13601] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 694.886062][T13601] ? trace_kmalloc+0x2a/0x110 [ 694.890730][T13601] usb_control_msg+0x234/0x3e0 [ 694.895564][T13601] dib0700_i2c_xfer+0xbb2/0xf80 [ 694.900407][T13601] __i2c_transfer+0x79a/0x2020 [ 694.905176][T13601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 694.910969][T13601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 694.916819][T13601] ? i2c_transfer+0xc8/0x2d0 [ 694.921390][T13601] i2c_transfer+0x1cc/0x2d0 [ 694.925912][T13601] i2cdev_ioctl_rdwr+0x460/0x740 [ 694.930896][T13601] i2cdev_ioctl+0x6a5/0x880 [ 694.935416][T13601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.940422][T13601] ? __fget_files+0x3a0/0x420 [ 694.945109][T13601] ? __fget_files+0x2a/0x420 [ 694.949683][T13601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 694.954604][T13601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 694.959654][T13601] __se_sys_ioctl+0xfc/0x170 [ 694.964232][T13601] do_syscall_64+0x14d/0xf80 [ 694.968838][T13601] ? trace_irq_disable+0x3b/0x150 [ 694.973870][T13601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.979943][T13601] ? clear_bhb_loop+0x40/0x90 [ 694.984604][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.990517][T13601] RIP: 0033:0x7ff319b9c799 [ 694.994973][T13601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.014743][T13601] RSP: 002b:00007ff317df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.023157][T13601] RAX: ffffffffffffffda RBX: 00007ff319e15fa0 RCX: 00007ff319b9c799 [ 695.031122][T13601] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000003 [ 695.039099][T13601] RBP: 00007ff319c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 695.047090][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.055157][T13601] R13: 00007ff319e16038 R14: 00007ff319e15fa0 R15: 00007ff319f3fa48 [ 695.063117][T13601] [ 695.066172][T13601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 695.073453][T13601] CPU: 0 UID: 0 PID: 13601 Comm: syz.3.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.084373][T13601] Tainted: [L]=SOFTLOCKUP [ 695.088677][T13601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 695.098715][T13601] Call Trace: [ 695.101978][T13601] [ 695.104895][T13601] vpanic+0x56c/0xa60 [ 695.108877][T13601] ? __pfx__printk+0x10/0x10 [ 695.113453][T13601] ? __pfx_vpanic+0x10/0x10 [ 695.117943][T13601] ? is_bpf_text_address+0x292/0x2b0 [ 695.123215][T13601] ? is_bpf_text_address+0x26/0x2b0 [ 695.128403][T13601] panic+0xc5/0xd0 [ 695.132119][T13601] ? __pfx_panic+0x10/0x10 [ 695.136535][T13601] __warn+0x315/0x4f0 [ 695.140516][T13601] ? usb_submit_urb+0x1053/0x18b0 [ 695.145530][T13601] ? usb_submit_urb+0x1053/0x18b0 [ 695.150540][T13601] __report_bug+0x29a/0x540 [ 695.155035][T13601] ? usb_submit_urb+0x1053/0x18b0 [ 695.160043][T13601] ? __pfx___report_bug+0x10/0x10 [ 695.165057][T13601] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.170245][T13601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.176044][T13601] report_bug_entry+0x19a/0x290 [ 695.180885][T13601] ? usb_submit_urb+0x1115/0x18b0 [ 695.185892][T13601] ? usb_submit_urb+0x111a/0x18b0 [ 695.190904][T13601] handle_bug+0xce/0x200 [ 695.195139][T13601] exc_invalid_op+0x1a/0x50 [ 695.199629][T13601] asm_exc_invalid_op+0x1a/0x20 [ 695.204460][T13601] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 695.210077][T13601] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 695.229670][T13601] RSP: 0018:ffffc9000c44f948 EFLAGS: 00010246 [ 695.235726][T13601] RAX: 0000000000000000 RBX: ffff8880212d1d00 RCX: 0000000080003980 [ 695.243681][T13601] RDX: ffff88802b0224c0 RSI: ffffffff8c7f2600 RDI: ffffffff901f0640 [ 695.251635][T13601] RBP: 1ffff1100c66b8b0 R08: 00000000000000c0 R09: 0000000000000000 [ 695.259590][T13601] R10: ffffc9000c44fa40 R11: fffff52001889f54 R12: ffff88802880d100 [ 695.267545][T13601] R13: ffff88806335c580 R14: 0000000080003980 R15: ffff88802b0224c0 [ 695.275512][T13601] ? usb_submit_urb+0x10a4/0x18b0 [ 695.280528][T13601] ? __init_swait_queue_head+0xa9/0x150 [ 695.286059][T13601] usb_start_wait_urb+0x13f/0x5b0 [ 695.291077][T13601] ? rcu_is_watching+0x15/0xb0 [ 695.295835][T13601] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 695.301363][T13601] ? trace_kmalloc+0x2a/0x110 [ 695.306038][T13601] usb_control_msg+0x234/0x3e0 [ 695.310793][T13601] dib0700_i2c_xfer+0xbb2/0xf80 [ 695.315645][T13601] __i2c_transfer+0x79a/0x2020 [ 695.320397][T13601] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 695.326194][T13601] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.331985][T13601] ? i2c_transfer+0xc8/0x2d0 [ 695.336565][T13601] i2c_transfer+0x1cc/0x2d0 [ 695.341055][T13601] i2cdev_ioctl_rdwr+0x460/0x740 [ 695.345983][T13601] i2cdev_ioctl+0x6a5/0x880 [ 695.350472][T13601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.355484][T13601] ? __fget_files+0x3a0/0x420 [ 695.360158][T13601] ? __fget_files+0x2a/0x420 [ 695.364745][T13601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 695.369670][T13601] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.374676][T13601] __se_sys_ioctl+0xfc/0x170 [ 695.379253][T13601] do_syscall_64+0x14d/0xf80 [ 695.383828][T13601] ? trace_irq_disable+0x3b/0x150 [ 695.388833][T13601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.394884][T13601] ? clear_bhb_loop+0x40/0x90 [ 695.399552][T13601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.405427][T13601] RIP: 0033:0x7ff319b9c799 [ 695.409827][T13601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.429414][T13601] RSP: 002b:00007ff317df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.437818][T13601] RAX: ffffffffffffffda RBX: 00007ff319e15fa0 RCX: 00007ff319b9c799 [ 695.445774][T13601] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000003 [ 695.453728][T13601] RBP: 00007ff319c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 695.461679][T13601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.469635][T13601] R13: 00007ff319e16038 R14: 00007ff319e15fa0 R15: 00007ff319f3fa48 [ 695.477602][T13601] [ 695.480906][T13601] Kernel Offset: disabled [ 695.485215][T13601] Rebooting in 86400 seconds..