last executing test programs: 11.111742442s ago: executing program 4 (id=2799): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x5, 0x8, &(0x7f0000000280)="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"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e0000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 10.180168772s ago: executing program 4 (id=2804): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = io_uring_setup(0x5f45, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) 9.027536719s ago: executing program 3 (id=2808): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) rmdir(0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b880da9b8166efbafc0c66b88c00000066ef0f00daba4100ed0fd11bb8c00b8ec00f011b0f01c566b9800000c00f326635008000000f30360f201cf0811c0090", 0x44}], 0x1, 0x40, &(0x7f0000000200)=[@cstype0], 0x1) 7.689828434s ago: executing program 3 (id=2811): openat$audio1(0xffffffffffffff9c, 0x0, 0x282a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) gettid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 7.504036119s ago: executing program 2 (id=2812): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, &(0x7f0000000200)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x14, 0x3f, 0x200, 0x2, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}}, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x70) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0], 0x0, 0x1, r9}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r10 = syz_io_uring_setup(0x88d, &(0x7f00000004c0)={0x0, 0xcfe8, 0x0, 0xffffffff, 0x11e}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.309299768s ago: executing program 1 (id=2813): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000940)={0xe134, 0x0, 0x1}, 0xfffffffffffffff0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 5.63031601s ago: executing program 3 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x1f}, 0x2}, [{}, {}, {}, {}, {0x5943}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {0x0, 0x0, 0xfffffffe}, {0x0, 0x8, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff8000}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2ca2}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x47d6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x40000000, 0x1}, {0x2}, {}, {0x80000}, {0x0, 0x0, 0x0, 0xffffffff, 0x6}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0x4}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9d}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x6}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe68}}, 0x0) 5.513394383s ago: executing program 2 (id=2815): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000280)='0', 0x1) r3 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r6, &(0x7f00000000c0)=""/47, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r9 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r9, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llrX'}, {0x20, 'ax\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111) r10 = dup(r8) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000180)={0x50, 0x0, r12, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18, 0xffffffffffffffda, r12, {0x200000000000}}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) chdir(&(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 5.451908605s ago: executing program 1 (id=2816): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x19) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r6, 0x9, 0x30}, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) preadv(r8, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800", @ANYBLOB="0800010070975f32b7ea54dab463690011000200303030303a30303a3130a357ceeac342d72e300ed286499696a37f31bc4a93d86c4283", @ANYRES32=r8, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00030000"], 0x148}, 0x1, 0x0, 0x0, 0x4048005}, 0x40d4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) 5.295886602s ago: executing program 4 (id=2817): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0xffff37e7, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000480)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(0x0, 0x44842, 0x0) io_pgetevents(0x0, 0x6, 0x1, &(0x7f0000000340)=[{}], &(0x7f0000000380), &(0x7f0000000600)={&(0x7f00000005c0)={[0x9]}, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x2c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r8, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x46) 4.737996883s ago: executing program 3 (id=2818): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000380), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x55595659, 0x0, 0x0, [{}, {}, {}, {0x4}]}}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f00000004c0)={0x28, 0x5, r2, 0x0, 0x0, 0x0, 0xf}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x29, 0xd, 0x0, &(0x7f0000000b00)) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x200080f5) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000004900000000000000ed8eb619260095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='cq_poll\x00', r8}, 0x18) r10 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r11 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) copy_file_range(r1, 0x0, r9, 0x0, 0x6, 0x0) keyctl$KEYCTL_MOVE(0x1e, r10, 0xffffffffffffffff, r11, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0008000056ef24b80000000800007d1339cbf8040000000000000000a5ff65378fe558f0af53c961634366c286b0a9064ceb0da94dbf162a458d19f894211b4338797d4a0163853f4046de4ae84e8418c471637df1eb5526762d0d7776dc2fd235c8fcf05becc6a3f35fe22839db01861cf371b52310e25753e17fbac428bbe2b57880508ed40391e95b401dac3ce7008a1bd422bcc977508b9af654957db767b179f0ed9934b089fa2f82ab62942e2d49b590cb55c5d93d4ee2f4ac351e490c61084284ae43110d5d28c92acd44fefdb2cb012522094ab4c8d4f23697"], 0x50) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000001a00000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 4.674146254s ago: executing program 1 (id=2819): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) sendto$inet(r0, &(0x7f0000000240)="eb0c0000", 0x4, 0x1, 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'virt_wifi0\x00', 0x2ff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4.515886829s ago: executing program 2 (id=2820): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd600000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100"], 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="200100000074529f00"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) syz_open_dev$midi(&(0x7f0000000140), 0x4, 0x1) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="d8ace4f8deaea3e1efef011e0485e44724667f372cdc06857e837b77c8b9ec33af3be5b28a0652c1a2e3b7f9e6db790a3d6988c4853ee036517989fe94b46263dbfd887cd14b19d3f1f5b23820e98ef7aebe65d03afc5bfcb72c5e6f37abc3f08d258f80c7fd512c6168d463a23170f177ce900964a6fab04205787bc49c75ec0c96cd61285cb326542387fff9", 0x8d, r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.515198609s ago: executing program 3 (id=2821): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0x29}]}, 0x10) syz_usb_connect(0x1, 0x3, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) write$P9_RXATTRWALK(r6, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$cgroup_subtree(r6, 0x0, 0xfe1b) ioctl$EVIOCGLED(r4, 0x80284504, &(0x7f0000000000)=""/56) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa", 0xd}], 0x1}}, {{0x0, 0x2a, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647", 0xda}], 0x1}}], 0x2, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @multicast1}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @cipso={0x86, 0x2b, 0x3, [{0x5, 0x9, "1fb71346d36c44"}, {0x6, 0xc, "a595ba914c6f2bb29843"}, {0x5, 0x10, "edcfaca2904e07db35164f023362"}]}]}}, "55fcf5950d375d61"}}}}}, 0x0) 3.833511735s ago: executing program 0 (id=2822): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.799803795s ago: executing program 4 (id=2823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000380)=0xd1, 0x4) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=@can={{0x2, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "f95b0600000e5666"}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000091) bind$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) r4 = socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)) r6 = socket$kcm(0xf, 0x5, 0x2) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000002c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000003c0)={{@hyper, 0x2}, @host, 0x5, 0x0, 0x20005e, 0x0, 0xa, 0x5}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@host, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x20005e, 0x0, 0x0, 0xfffffffd, 0x931}) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000600)="584be8c759b53f612629dd6dc5fc569ca125f390b317c29d0a7e8b742a7ed0d499f8823688077c779aa006eb6f31b2d3b0b9c707000000000000003da6254d3dd6a453c954a196410707fa6222d703060aaeae47065f0d1de324f19f070cf9bfa0bb3104b66a202eaf70de0b617e8954a21de499e4b075dae544fa7845d2c8524021e6796430b7ec595080191427683fe6c11c1dac697efcbb0b5411e5d6bb8228d60a247efc258572c0f4b579a3d642ace28647d6e5d32b0edb400da62a37283c14f2609d5a83cd9a53a14fb8c3d565db201b7fe38f7671c11137c5c385002bf9e5ed2aa8898f7ff0d50000000000", 0xef}, {&(0x7f0000000300)="c52b9be5c7ee39aee086642a5438f5d03f7e7d51bd34c12c9dcee8f787fe0f1826b88eaa97ddac3b38869cbbd190e01f610721b732a8b8065a156c4196461daca33f74b7ddfa5103c12cc349975a13b72b4ea409dc", 0x55}], 0x3}, 0xa0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x2, &(0x7f0000000700)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000017c0)="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", 0x1000, 0x1, 0x0, 0x1, r9}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x800, 0xffffffffffffffff, &(0x7f0000008380)="273f699b072f60ef9438976ac4aecd322ab27ad1e71b1f9a437a770e3aa286d742d4096c1b7c9a2c11c959492f9ff272e384f5ff4238d8a6ce67dded711d62345ce1d3d2a16ea7609d51005cc9405d123ec20bf6cc68ce794ad2d5d2c0fecf4cce37454aab8a42503c693db2b5b8120d0098255f09c3984fb5927b028747e44b15cfd50fb15ae4f04cfa70698b750b0d56ead6f9ec722f334f834b87f89177d766367a88740bf667fc1f8a64383b7e14398a001aeba40f7f59c59eb9d39b6e6e4805a2c02c0ac6", 0xc7, 0x7}]) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3], 0x68}}, 0x40000) 2.783930499s ago: executing program 0 (id=2824): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004002d2be2220000017deba98c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r2, &(0x7f0000000000)=0x7fffffff, 0x12) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x1, 0xd8, {{0x20, 0x4, 0x2, 0x6, 0x80, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @empty, {[@timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0xe, [{@broadcast, 0x1}, {@remote, 0x9}]}, @ssrr={0x89, 0x7, 0xad, [@rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xfffffffb}]}, @generic={0x94, 0x5, "0d83ac"}, @lsrr={0x83, 0x13, 0x73, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010101, @local]}, @end, @timestamp={0x44, 0x28, 0xcc, 0x0, 0x5, [0x3, 0x6, 0x9, 0x1, 0xc, 0x7, 0x2f51, 0x5, 0x2]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e0000000f00000100000000000084337eeb8008", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0400000000000000040000000200"/24, @ANYRES32, @ANYBLOB], 0x50) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @private=0xa010101}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, &(0x7f0000000b40)="3c83a82072308fb12fef51139d1ac4542b36aa029f5c0b87f42469d8a73fc0489444487fb424ade95f144a2dd78ad484616f218b4805bed306e148401b95888e1e6a0c668db0015897c7a6810bcf66b4fe4ecf97690162f0a1c096b2de416a1b547283f7f8082d45f3e80520893c134c8463dc2c87d06cc9ed387fbfe49e92d7d18d6d480c0e24e0e333be007d994195a5e49594af063521b2b8e9e9f68d9ef5ee8337a0ad1093ca0fe348aa1e52e2cf68f7ac90f4633ce801", 0xb9, 0xc0, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r7 = accept4$inet(r0, 0x0, &(0x7f0000000280), 0x703bafe09154733e) sendto$inet(r7, &(0x7f0000000480)="8404798f4b05dd4024b8690f1b606e49b02d47a94db18ef69c192f07ebcf4741736199f5c2b8f4ef9022832d0671c93cf923c847038bc06e7609bb8d4803a60d3b753fdebd8c408884282bf4a45107981b6a19ce3f3f9b252598d1a907bf7f8e14fc89ba99bd75e4b6905fc38fa8ad92de", 0xfffffffffffffed8, 0x10, 0x0, 0xfffffffffffffcce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a000000000006113380000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000000)="d1ecde1e274380316cd675a6378559f05bea2e0fa9893f3aa626142442c956a2840f18b016eff20111", 0x29}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000440)="8a", 0x1}, {&(0x7f0000002b40)="ad", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000003c0)="ce", 0x1}, {&(0x7f0000000400)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="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", 0x128}, {&(0x7f0000000cc0)="02", 0x1}, {&(0x7f0000003040)="c2", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000d80)='<', 0x1}, {&(0x7f0000000580)='[', 0x1}, {&(0x7f0000000e00)="e4", 0x1}, {&(0x7f0000000ec0)='3', 0x1}], 0x5}}], 0x4, 0x4000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x5, &(0x7f0000000180)=[{0x2, 0x3, 0x40, 0xe}, {0x2, 0xb, 0xc0, 0x4}, {0x10, 0x9, 0x2, 0x1}, {0x100, 0x1, 0x3, 0x8}, {0x100e, 0x6, 0x6, 0x9}]}, 0xfffffddb) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)="8c", 0x1}, {&(0x7f0000000600)='\f', 0x1}, {&(0x7f0000000840)="c8", 0x1}], 0x3}}], 0x1, 0x40088c0) 2.701504592s ago: executing program 0 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000001c0)=""/56, &(0x7f00000002c0)=0x38) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 2.69244519s ago: executing program 4 (id=2826): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002b00)={'sit0\x00', &(0x7f0000002a40)={'tunl0\x00', 0x0, 0x40, 0x20, 0x80000000, 0x101, {{0x19, 0x4, 0x2, 0x2b, 0x64, 0x67, 0x0, 0xc7, 0x4, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x9, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}]}, @timestamp_prespec={0x44, 0x34, 0x97, 0x3, 0x7, [{@empty, 0x3ff}, {@broadcast, 0x6}, {@private=0xa010100, 0xd}, {@broadcast, 0xbef}, {@local, 0x2}, {@broadcast, 0x80000000}]}]}}}}}) sendmmsg(r0, &(0x7f0000005540)=[{{&(0x7f0000000040)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="28341fb7c800698af50b6abe39c58be81017c46fb4818f035e05c3423a8104ef48ff5a9f8d46e9d9d76cfeb6a46ff5103b98e8475e608e9fa4a91777b56d5870858de037e22a53407be3", 0x4a}, {&(0x7f0000000140)="64a7683a42d0880ec4a12332487ee2429d618332dd0c43220690dcd93644fe5840d2d012fdb6a2f81a1c131be5628becfc4fbd694d87e434846db3a8e22592502620885cea43f680b605c4ab2121a4b55761d8e48bfb9c28d03f3ac3b6aae1", 0x5f}, {&(0x7f00000001c0)="48fce9c61aa822edb77d00e6811f1cb1efb3fe0f4f7b4ec778f2a6c0e6d3de707a8fb1cfbdd17e13ca761a7661f8d9cc5a864375e4d0ad9c0c5be8cba2cf9fa60f32dbfeb4f82afa787e32407bdddbea37d18eac27cc0fdbb49e", 0x5a}, {&(0x7f0000000240)="5d4495e8abc58fa09898ad5823335f76a35cfad77c53d103e72df32dc0e2e1ffcd", 0x21}, {&(0x7f0000000280)="31e1814c0596fc8efd0d79fff4f40357c492a493477df2100a93f8f83222f49ccc01cd46638a2b6f6aa102b6aba4f2f0005b305dd557d8d65e1b530a73f45a1e575597bc7a13a639be966d8aaf678ba5d61c0e0b8ba8ade997937ca41ee0d5c533db57de1b6a1f9b7776bc9756d35d9e23c355f458194f3407ca25bcab9f9c4cf2d27754099c16c0053b78e8a908fece13554b571434972e84cb06d11ccb48620bd5859978e5f1d44b3cb96a2bd4aeb92dab515fb8304bf5adb1d79591e1aac184dec064106231f2d3c139210c0cd38134f3e8be1c6b9f47d5803605", 0xdc}, {&(0x7f0000000380)="71951a4e123533bad25c4e81f295e577b17a966a8ecb9f297d2169c36196edd3e3bb8b32cdad28e38593ce256a5e35edb454249cdce19c07b896b45cfee6cccb23c5abea7ad703bf30e4a7d3f476826d1dd0ecb99646cd14217bd5603c7c368d0208c4cbe4de645b37dc225e8e8c77e4a21eb2f4240263ed7da6bd4d12f9a577c73ebe636c6b1a475293ae0a3112", 0x8e}, {&(0x7f0000000440)="53141339096eab9b7f6c5c1bfcfe3b98e1f44b63b8f93c827c85ad685a0c23cf2afe169a5a9a78f0f7493ad0297bd810ccc9f843713147b213e657f2ce6c89b1b093bab91de5999ab770ce09914b5d0aa470a1d216bdf4f617cf", 0x5a}], 0x7, &(0x7f0000000540)=[{0xc0, 0x6, 0x3, "7da2e5206654d06bfa0d90e10a231c47bc02562147e0426fa469ca60fcabad791c3554d10560076249543c0ddf699f9798cabb3a63475927306f027b49353f6d5e70f50a0445208f52d89506db1486ead62f3ad9d1049db172d2b78ab2b85e7b4fc831390b6a18e3608d512ef3253754da4c0398770d0a56dac7b312d2921b19bd212b2ba8541584a0fefabbfef2ea8b20bc4206fcfd3b59e351abea5e2b52e58ca73d5407131d5c21"}, {0x18, 0x29, 0x2, "c0eeef3cf31151"}, {0x70, 0x110, 0x0, "b42a7b24c1ba90ae00d4378764d4e937b421ae2cdad584ec1f1ade468f8b75d3a431bd8c0771d5243d811010730825dceeea81cdf965f9eb65f2fcc13c8b012c893fac61c4d484844b10a23021664bee1e356725b65122c57838a7e8"}, {0x90, 0x1a, 0x7f, "be8db2b3a80c6c58d517506e2d5c9de524cc37e7947f64ac3c0901a6807d01dd8679137711f501a622ea0721dcc42b674299b7008407ea458514adfc425d17b0bce4ae4eee58f0577046a1183be2f16b5bc89588a775dcf65726ea3f288061195ca83a217cdf96c3b7889fe81ea30fd220c3e7445e29afaa8f0ffab9811dbf"}, {0x100, 0x112, 0x2, "9dbe9f3d4df0f800bff6308616c8abbefc5e1d984156492d19e6bdf39b7e7bf5d477cd8fae7c5f6d9047419e3471ad8d50c19dec24fe84d19f417b44d0d8007d6c8f04231887cb75195c1ef328e76e826ea4e60d4f586aab775f2e1ffd3b07eb6af28fc7c72f01311efac3530d2b4c8e3f405d8baa1b5a7ed1ae5bc649eb8867b73b18ac868a62fe5485bfca614fece6a6fb1a4f5873714cb2d0cacf01a0e687a38ca1e356adf1742108f2ff24c36aa70a77fd0c0ba9b13e21cbe40495f2fe31e250146277b81f2e038afb385af708de6bd3764539c482f9048b22be1236c5855b343285a739ecfa13b682bb"}, {0xf8, 0x110, 0x81, "db67080b5fc2ebba292ad907439766e6956910ab3338a156164b5847d2c87209021831e269e0288ac5ec56dbe92c13a2bce5860a9bb1177dca8cead542bf3c319fc987573a348e16a4ff415ba62c1605b022e71582a07450f313547bddc63b17afc3c4853f128e019a38ca7d2b66070e2ff435c26cbf542a44e8765cdc06a2e7e26deb71dc19b51401bc67a761f0a6d298475afcfc70dc18079608585b634e7125bc5d102872a727a38f04d43621375415dfa4d107edef7bbf19bed3a8c643cd6b38ccabb835299867b5f6c0a67b027b36d58cdb30b842799421046bd2d70ff7530d7148770cc871"}, {0x1010, 0x10d, 0x0, "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"}, {0x100, 0x10f, 0x9, "bb243657d37cefc737d98621b70fbb0a095e06909715ab7db636427c74be1fa4c293a59715f354273498bf812770b36f3c5addc14bf29672de976532a0eb47e751b976c0cea74f34c0e52983f1222788f7fa599d1320428a5f0772be64f39b7979cced193f84cf1f90ddf9a333c7b8f0b614eeedbdfe53099b163c029fca426d3ceb2a63b9b398530b727064d2bfe0783425d64a7ba5d73696b557fb886aa72b5bdb0f8a81ddedd257b0e1b6cade65fe10f1af162614c60a786d40d90efea699f9b972b23ddda4221d278eeec2b760edf39c06ca86536fb0f1785f955abe58a087bd92882d032ff48bf44e4a08"}, {0x1010, 0x115, 0xbfed, "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"}], 0x24f0}}, {{&(0x7f0000002b40)=@xdp={0x2c, 0x6, r2, 0x10}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002bc0)="c6486bc46e3cf4db718671ab54eaafda7cedf90455806b54cfff075887a078f0e15241beb9061c5db9bbc93a9d869fe5446d544b0cda4e02f491adcd5b6551a21a0718e80a61a7eb43c9ac7441134af301b918ed091f900ad41ac83a195b6a9d8d44098333e4c2818a205e0fcb268ecb2b486c24f178c1e2d6c2ea0de064b60f43433b0293c36445009f4f8b53ee39bb", 0x90}], 0x1, &(0x7f0000002cc0)=[{0x88, 0x119, 0x7, "337de952e654f045e981b4fbabcb77651149be102a48498e69b6f4446430b3df5c35b7ae5741223e459ddaeae585c0416fe1fc69f7fd4156f4a9df2cf7865b227d1d56781fdf584dd2a59715113ee18c493f554a62065f4379373a26c25e2ef3cd70cd2211a205fd893adb973274cdc219"}, {0x80, 0x107, 0x4, "0542ba9425aeb141d20b0023c4e743625973363965a1ca95fb57644612cb1475f8373889230323aaf00cca549187589a228b1ced02c8e7fb315800b8ce0264dbc81943163c10b821261af03d20f89b6a54f1962a6eafaf3eb2eaab6a28f8f118f632946b6ba115c7722b692cec"}], 0x108}}, {{&(0x7f0000002e00)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)="303c86e6c7203c33fefa9a1613c0df06e1d4b5ec64b4db7eea00875b64c6a6f9eb2f7d2a32f25e3f9d36f4b5c09a42fc941312f8b696bb424196cba799e35e54e8a7dcb61de3a88b15ad1da0a50c04b4ca4be703ba2f24a15a0e89020aa3b44b16c121cbf91f6c9f7beb39e044c50e12b83e924e5fea7b2eb495e106fe8a84f055db8660fbdec3ac82cce2a1db6493adac092af23b77d20ce03a8eb86605e4bb9b81", 0xa2}], 0x1, &(0x7f0000002f80)=[{0x88, 0x117, 0x7, "d8386e1153c1dc0514fb237a85c6d358ad439c1d6ef4c3ddd66139c49700ebeb350e201e46be8c4c6b695b4a1ecae7a09090f3a964704455aad4c06c31f10b865935c67776063baab4a4333a9a862fd3a89c6bb3887fa28f355a5a63820c099631f69ed3d040cc3ed21462512d1c49a36f18be7098"}, {0x1010, 0x88, 0xe995, "4f246a202173f9dec3a0fff90bd8574efb495a208841351b32ecd19710515ee202debf1fa97a7f37481740819d1d323cf30019a55656b955796fb5fd0a27eb6a1588882393c0506993242243c96695d4709e2f18089f7b66c740f965edbfd384a151d26c8caec468fdfee2b10424280a4b894a77a4f64bcc9af34f2311e6e35c4cad48be23188cd90710955d1d97eadb730edcfcb79c4770f03c9f1e65e95741d21e871c30e3181cceea46b22dbe410e44e32e01efa6de9f95b0bf947d9ce7f43abb3085ba4de10c49903514b57666ff1b08fe5ed6cd40c1213c636e2a05019c23818be37e574e9d709f93c52abc4ce7dcf4c9db3792c4ab8cbfdccb885659c428989089b6f6a6b551d6d101fd3742e1153bcc2a33a8df38ffa0d28d8e5fa3d56bf6ee4cb036317614f18f02d4963725033e12bd19439192f8271d2156520996f0cf7e04a6ddb11d1b2069a12c87511e5c74c7255987751104d620b657dc5e4c6b2ce170aed446144a2594e10cca76f0674adce71aa94f6a7501b2adfdeb28e33a702ba4852df856704e3e65e532b2dc7bb84cc4aa5cf8d19f15224e9cb0e54ac5ee3c919198a346fa742df5f9ec4a522096cb0ae91285f3816298f2bb58b17c8616f00f3b7d5e44a5796b5a15d38952c4c1a4224f3526fed536dfaaedeee57753dde40373d2f0ba47e710bb1c6da11e0b174468b9e0911334718b7efa38dd6a2e9b801546a1ed0ec956a77d5b184a022999dde5338ab613e742e1585b32fdb9571b7776dfd8dc19d386cfa6352bca575eea997d820b9094f921fa2533cb350bf6430b50902ea6e2bf1471c1916e11792f896d7d78c8c31c4e08552eb8a470a143c794e898536639b103cf2c8fae2a5a96c54c69b2e4ef79011cbda5336bac78cf276a866299e09782b5824fca2f281be3541681fb3f8272c6264c498cd19dc76404dce084fbc68cf5c159ebb4328455e8f50745300cff6a86f3da1bb4cd70eba4f20357b8ae7b82f263139c17e463fd05d08e9405874af838f59d7d41f92fd5000c80c73bdb0f2d0f6b94fc41d8ca588530d99c9fbb42e0f7e70675a574af743c9334744cd1fc60fe7b23b83c3b47214e5c9c6fbc244183bf88eb241a430d84bd591e9733159700a31c5797cfc13119c2567a4d431f99fe5636f5faab36c8edd9e9cd17d5d0a801348ce625e27fb31100bf1e42e355d933a29ce0f918ea333a11bf1224741f7d14f2200a5265fb8586dc10f1c891788b66d984905e8b338395508412fda0e35a046a911e923b6a91b0b7e1e583caf32bd8bfa0d7d8a2d3c619eb6158bc5fac5c9e922fc878d0def0f93c2b2a3568fa0cca621678b0c7137ef081c966b61a772149901bd5e7e52abdd83680da1d000818f083a41010883fc79d6d317514c2feddba47765a83b0f3d6ab8e4dd12b2434adae4331b930ac26239047c2c16a3542013c5525dc0061f0c6cf0a079d1d87d1c47dc2976edf11edb8cd383e6cd8ed1a69e7fc2ae301f7a396d146627b6dcd59146c3783c64586b43984f6a759ee1f34d9e1e666f212674c54d3051d5286f767e4dd72bf0ae15ebfeae1ac81d565e3d164a38a49193c1262ed5cd3efa446ae2b336557d478658463b5dda25487d0a06d925eeda92ac689568ae17fe90294083178532665b6515d717687f3c23275b270d6ebed30626847b34df5a258dfd18423c8aaa6e85e801d417f34c1d114c289ce33bece3243075ff16d15b6cd33199a0af023664dc0085292a38c00a0073cb7e19f9ba606f4db40b15babf183b270534470a3e193bfe7544dba3bb06a2d5526eac0a2709c1d6e62317b0b854e08f27734ac872f2f4090cdd2dc6ac20d5e56cc0253b7e1d53485c374ebbe9ec6d371603713a1dc9aa824fa277896dec629b749dd8623d7cb7f071e500dbeb4cf43f9aa6114d1c8ecdc988617c1916639929e57f4c7e2589678471da5e1393e49f1918a2554232c756d337f1fe6aab5f286d75c462cd681ae6c4827b67c77331da1cbef396be895e2a3d5fd514363cb4c00d865b132ace00d8a99d110827647120516ca8ca37887cd2a7a537aed5fb4b57c54f00237bbcbb13ac37ca2c75c44b299a53b14340d425f90cf3ae387be99c9cbd3fcf40f5ab484dffc73e4425a6ee524d130e2ba5e3c7ddf97ae07ca460c4a40111db0e302d3a90c90c64547f766daa0955033b523b9e84de582e022fdd5ec052269987e3da2051725bb8aab12eb9c2b5f5ee5f3d75cf1e6bcc58b1158ef14db956f3ef25b18371d5817d1d207e3aff24eebf68bc95591fb2c2e41e05481763a793bab9d6af6a4ec3e884de6cb98035719701c71897ac6758935d5731977aa22deacf40c514e107764d716f12d0d3160543171b3635948f3f2fc603a721e8c0bc1ffc91b514f88f50b22522449811dd2f83f4a8ea56bebeee959bcf22ff71c77e9e82f2f2ec1a1093cdd40d7c14e59fc2b7f23678f904316bf27317f69b0cb833913cd7321b76c251925c5c406a89c5ed304744835bf6bd63d6dea6c351da15ad64206cea78f9ee6274afcfc6d9fec1bc534e65b8aea312a29d2467908c87b9d296484f28355fcf0acd7eff5d9cb09059f2c59bce48a630d6ab85e17abb2f2d9e240fd8099de50cd276e213603dca1852edae0e2d4eed81e72a5d20c827111051939ac99fc6672ff5d5eaa4c65a38968b1ade833cd993634b91164b8a8d9f759231cc3d3535fae4c39fd209312df4a1c8216c096e8ecf634728b4facd0f336e8aa31b7948a2ed95011420a1fef426285b622149ae33d2c217b22e3e38b8313bb29ec072de73be3330c8f3af53179e9ae010e3c525ba32ed5895cc3eb8db4d5315871abfae93dfc8b3e75a4a9b286529773737eb609045b42226b69289052a874c384372128434a05a74eef61b34823b82562e67f5574b91939a2385bb1221b410cc86ca1263b25f5a6cb99a2bebb6221d83e989135e3e6cc2b8f5eae8fa296dc02943cb470686a5f814efab98690d6c40ac5fb5cbc17bee87b2e3868434d1db3a2dfbde2b57dfb69e5b7edca735c12a7564ceecf52e5b357813e81a72251a8abd24a2c25d6d2b15cf044bc77a3450457b8080f9b2f45466b12c40f798226bae08cc0081bae1f094e4c435e579080e685d4a0bd81e91c2a067e53225fa1667cdbc162c07e90882a6ba9c809ae7c8eda2d2b455e91a7aeb06c68e103536ddb9bc75af51b8ea06c1b93ac9f4df0f8bf142962c9250f543231ef889fb016c73f9213963d8ed00691f966647490b2aaad25a1b40e13dc8c1432345e63411f59cfbf0da054921440f77ef5f67a79faa90a1e47c03030fb326a52e41cd84b03538a3e9b34a6b2ba48a10800f1f05464562b006ae177dc7274dc3ea8cc6bbb30d728ebad061193a2ec5bfde533772aa5073069e2e7883a47cde6a8243b2b31f593eef93c0bda3f72254fd55f2e71345a722b5748d82c0611b039e01b144e5c682a961ee698b689a87a80126ed933fa125524abe9ba6ca2dd09873e7cf31f4fe1c9a285ffbe803ab9e75c1b8765299f88032ace2d89aa958e17c7bde47c0e81b28773e8fe49ef19b1f155faea6a89751533b8f81ddd1a8c037a96a18d1ffc4c1de42fa7be5b1a5eaf3e2d82433193bfa0582ac54936aad7720e32b2758947581b35be694f8dbb3bfa1770473ec398587298427dc11cdca6eeb86fcc0851ba6507af7f3c77b96c2a1a392ef6915ac081fe8aa521b10fb35cbbbfa4e42b6b5b19e4b7ff9fc4ee199805b5bfe1e6f6bccc6e78fae0110fec90e917a57437876cd3dcc8237175ab542a6083f3dc4ff0d5ceefb0f50fd27aa46c74550b1c00ef8d1fc4fc090859dc14e077791b98616a0e08e3f9015a29ab931246c038688d9c129b3d6073d74dc8774f575b04f02434e0e9c23edb49dc4cad4f8d9f9bb49dc6e6d0c2daabd6a177b6d06c60c923ad28398624f78ccba107598b48f637c00dae7903f83bee9885dee6353a2384e4eed07d53dd9dcab47b5f189c48cc6834019654f26006d40687abf72868fa389e5c3e92f6d4aa0feb9595eb4de2a8c8ddaf20c6ecc64e3309d8b7376b475ad30378a79faa5ec6c3a99e41de7c7e4c6b1e7e300ad7493d1db9b7ee9e83634db90a489ffb0dc391dda054d201f5241ae7f33f4a37db253e38088166a100d1e0959b6ab201667de7e76a32a5db505ccad5d7f9273bd82179ef9144782c5fb5165e0c0df143f176effd73ead0b9875553b8c365cd253fdf0be4ae603a3f35ffa1be1e9b05c7b8a26dc955bfd603bf1d3e03292c4f66d67cb1371754b68b2075dc74fbe30efb4143ed31f4afcd7ec780a641e437fc85a1b0bb16726357900206c808a59a40a98b591ce7d852f280c43fc26200d80d205f1c7f23ca72fc9ad284a4e7f0992a36ddf58bd502903141854030b71c1a6bbf447e48920e3585ae9d3e38a3b2473995dc1f7e4651e7f3433ae5ddfb602274f4bc8f8d6d8204b9a08ebaaccfae4f12f0ab30730366ef62c6109196ff2f9490f8174281fb2c2e0f0dfc0d956126b7d8a3aa7467bcf9245e0d90b841ac9ded24170815fc235e249ed0f5898bc16632baa83a63c79ba1a0f7d5e71e59fa8978690a27a9758fc2620368be3c14359fba219a93b7daecf6be4cca284da415f5a607d9a380c6df3f0014016342101b5219011e558772c10a92f823ff7580f875ea702ebf3e4df58bd0c4aef5419c3fa34e4604689ab1163f1ef66ad6c23f309642acdce6ecccf435a0c941d81f44b38635b9f7e39df7c8ff16204b27711f5984b780fbf8b8a161767a4601ade60953644553f1e43c0a1334158e11f69376f9b061c03c8d170e16cc2fce297e5e69c2e931a0c8d25a5a42e9e21d55e85a23e0d045a40450b1057a8a12e68b2f0bca345c6d2787ccc1526d90c11a5cf0a4d67211467ec469f8a87194b15bc954ea8c4425458ccf76ced9a6c2a0021b4f42f4aa40973c91f277818053903e7a3835d86443297476ceb98615e39464f88dd8240874e9f2fdbfd2efe26d5c604d9c08e34080a8a86e568a683011e5dc645e2e18e8147a55da3fcf76030583be57d816d48d06662d61a4ae3bc0df5b894b0349f960a4707485e3737f5f767a5d2c6977805dcc9c0a657e54b521b40ba4895f17236ddfd69b907494d50f1db6a240c004e61a3c93b2c13fe5ea951043f80d825327ee8a60caf5a19f537c778ba69017bf9c1c93f00a4c95aafee668beaf926840c06a9bf751ffe4517e25b5e67cf0d98d42137afb7b82fadb86080abc536ccb5fc2e74ec72c6c05145460a3156fb79b284789b94adc5ae4e73ff95988f496ae32e5ec669a3a495f033c5caa7b4090d5fc11a3f95287e7c2657be76fb5574e0ccf3407f8d4218bb850b4b244f3a26006223a4abf4d8c9c72278ee906cb69f005ddb5802da4bfb08353aec754b0b5d1eeeaef7f1ace238f3d066b17a3fd58a67631105d057070550b193efd22e2c44887177f991ac60a073dbe5f751dc34586790e8d7604d375ade54533f522c80c07cb6f327587e0f4f117e655dfa215d9a1b641fc5b04acc171ff8cdb7566d4f1ee4e1f93cb3dd165329053b6929b6df57c5356ef325e40cdf138619e348732ff88b1adf4479f55ee349cdc1a7d3bd532a362f9e6c7cafaf7733a9c3dfc8250bd0152d5b2272da2b911a80f2888763227664b1121f8ea79876972f2fd0b2827b173f417f4cf1e07620ca4ba45263ec8d129ebf8dce1e89e57d899c8e005f95641865ad60391751f5bee4c0bbe45745e509305dc944b913d12f5951a99"}], 0x1098}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004040)="9121dbc6ba74357f5df9706757cb0513e2942f1757601507be86bea7e27791dc4e96548779e63f0f912f219286db5120ac1ff4820dc3cada2da1cdd27d11e18e5c4e0d1eac41cb384d7544dafe2c6a36e45846f0ddbb34c08de95b62606db2b88acf03c1320d66203b4dbbd1ef20f538487f373bb15649a60fb22d0cf89a5ff4d3b4bcce68a54b46ee83533f2bbb5f9fd41ad31e3ae563c971ec3834dd15f2a74813225a7cbb365924324e407b5d40557ac43d88f8975bb1fb8c9f131cc33e25e72db5e9f5c61d1470d866c9d8ba19b4b58190c67006475e22df", 0xda}, {&(0x7f0000004140)="b9abb62d0c57dd642051b41fd0eac14dc20ce61cbe5259a18b6002a06c615be415ebbb4c654e966d97f6dcd413f2ab8ff842f0c07e88750003d339bcb9a4eca8e8a10125868e829e3f227b83a6f674fe31846011568e28a9059f8fc444741435e7e1745bf7df410eaa36f26816a7983b6d17be44dd7cb2de5dc51fe714caf48fd01a5526637315136df83a2ba58d58bb07e3e3c8e8d473328719805e38709e9537a70cb7e199fd46b993070685d0f0527e146d814ab98f43168b91", 0xbb}, {&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="690dab8ee727c5cb21bf12dc1e1d2793504d4d12226ef75cc085dd806c9fb0e0f3f598da5954c4910e7427374a393def8082c91559259944265bfa3703d7b903e403868a1f944f52ba63573775ff7a", 0x4f}, {&(0x7f0000005280)="71d68d85bef47e3d7eb86fda448ad82821f4f5459ef0eca26e43a78f3b7129457d84ddda99eb4c0e7b57703119d8d1117564f31e820b057394fceca202f159ee53b1317335529b93c9e18e826a2052fdeee940998fdf9653e63b2df7c25d407119edc4086cb5ad848c408f3e081b2ebeafb2306ee1c6565200483b6f31cc26425a56e8fed163fdccb7b91ba357399bd702b4db8646b8f46ffd75f30c96468c255bed27a579b0c5ba6d31f9ca", 0xac}, {&(0x7f0000005340)="670e61ec88270116e32ccd595d2fd8ca16b4412f74d878dc1686e0aac80d013dae3dc9b0130fe22fa18eba5080bff3e0a48a00f60a3afe3a5155db1c07d51a76ae994a8481d1b003410aff824b2203cc3503a13b9c845775b8c326312d2f2891ebda6035b1849c5c8303c793ae2dee1e977b9f27c74b3da11bfbf5ddf1cd45145b25c800d8ecdbca59066851fd8fe28144d197d373b90c1d29f0ae534197552f98eff484912807ce0252dc4004df4196c3e1ae6b23b785e8608d6282879d859016a11f65", 0xc4}, {&(0x7f0000005440)="c84f84e0b5760c3846830676792344d4b902d8ba4aab7131ae3cd0d7e138f64d4620e44c1dcdd637a05b2ff93c98d4d05a5f2046e894ae65e6", 0x39}], 0x7, &(0x7f0000005500)}}], 0x4, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$COMEDI_UNLOCK(r3, 0x6406) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000005880)={&(0x7f0000005640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000005740)=[{&(0x7f00000056c0)=""/69, 0x45}], 0x1, &(0x7f0000005780)=""/227, 0xe3}, 0x0) connect$pppoe(r3, &(0x7f00000058c0)={0x18, 0x0, {0x1, @broadcast, 'veth1_to_hsr\x00'}}, 0x1e) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000005900)=0x101000, 0x4) r5 = creat(&(0x7f0000005940)='./file0\x00', 0x8) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x4, 0x50, r3, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000005980)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd_index=0x9, 0x5, 0x0, 0x0, 0x14, 0x0, {0x3, r7}}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000005a00), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x34, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'sit0\x00'}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '}/\xfd]\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005b40), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000005c40)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x30, r9, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x701, 0x27}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40008}, 0x844) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000005c80), 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r11, 0x4008941a, &(0x7f0000005cc0)=0x2) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000061c0)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006180)={&(0x7f0000005d40)={0x408, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x14}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffd0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x395}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6b, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @private2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @loopback, 0x6e39fe2a}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @local, 0x5}}}}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "d499b1ae8a18bf4d6cb798a2ccfdae9d5acd98bb00c17969281e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "633f09480ffdc533146bd3ccfe291dcaceb2a8600a6541682f5305263e6839"}}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd39d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xed50}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfa07}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x44}, 0x40) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000006200)=0x0) sched_setscheduler(r12, 0x6, &(0x7f0000006240)=0xadd6) bpf$TOKEN_CREATE(0x24, &(0x7f0000006280)={0x0, r1}, 0x8) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000062c0)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000006380)={{0x0, 0x0, 0x911a, 0x101, '\x00', 0x3}, 0x0, 0x10, 0x4, r12, 0x2, 0x10000, 'syz1\x00', &(0x7f0000006340)=['veth1\x00', '\xff\xff\xff\xff\xff\xff'], 0xc}) 2.50002214s ago: executing program 0 (id=2827): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000101c0)=ANY=[@ANYBLOB="021800090b0000000000000000000000030005000000000002000000e00000010000000000000000030012000000000002000000000000000000000000000000030006000000000002"], 0x58}}, 0x0) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) dup2(r6, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = syz_open_dev$vivid(&(0x7f0000000540), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f0000000700)=@multiplanar_overlay={0x5, 0xc, 0x4, 0x10, 0x5, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0xff, 0x7, 0x7, "105dcef9"}, 0xffffffff, 0x3, {0x0}, 0xffffffff, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f0000000080)={0x6, 0x7fffffff, 0x3}) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) getsockopt$inet_buf(r10, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 1.748483222s ago: executing program 4 (id=2828): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r4 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x3, 0x800) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, 0x0, 0x0) 1.663797383s ago: executing program 0 (id=2829): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x19) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000040)={r6, 0x9, 0x30}, 0xc) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) preadv(r8, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800", @ANYBLOB="0800010070975f32b7ea54dab463690011000200303030303a30303a3130a357ceeac342d72e300ed286499696a37f31bc4a93d86c4283", @ANYRES32=r8, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00030000"], 0x148}, 0x1, 0x0, 0x0, 0x4048005}, 0x40d4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) 848.076158ms ago: executing program 1 (id=2830): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8800) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @scatter={0x2, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/150, 0x96}, {&(0x7f00000001c0)=""/207, 0xcf}]}, &(0x7f00000008c0)="519e0eb33ea2", 0x0, 0xfc000000, 0x40, 0x3, 0x0}) 847.375378ms ago: executing program 2 (id=2831): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb8adcfb98448d922, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) (async) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x1a, &(0x7f0000000e00)=ANY=[@ANYBLOB="184b0000fdffffff0000000000000000184a0000060000000000000000000000184b0000fcffffff0000000000000000184b0000fbffffff000000000000000085000000a5000000186000000c00000000000000090000004b01f0ff10000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000ec7f0403438ff0fb000c0000e900000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xfffeffff, 0x4c, &(0x7f0000000180)=""/76, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xd, 0x9, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x5, 0x3, 0xb, 0x8}, {0x2, 0x1, 0xa, 0xa}, {0x4, 0x4, 0x9, 0x7}, {0x0, 0x2, 0x3, 0x8}, {0x3, 0x3, 0x6, 0x5}, {0x1, 0x2, 0xf, 0x2}], 0x10, 0xb5d}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000008"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000008"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRESDEC], 0x0) (async) r6 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x4000, 0x8000000b, 0x0, 0x1, 0x4, 0x10, 0x40, 0x6, 0xe, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) getrandom(&(0x7f0000000740)=""/216, 0xd8, 0x3) (async) getrandom(&(0x7f0000000740)=""/216, 0xd8, 0x3) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000901bffff0000000002000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200375d58b2960008000000b7030000030000008500000006000000186a00000c00000000000000250000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000f9ffffff9500000000000000"], &(0x7f0000000f00)='syzkaller\x00', 0x9, 0x56, &(0x7f0000000580)=""/86, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x4, 0xb}, {0x2, 0x4, 0x3, 0x4}, {0x1, 0x5, 0x0, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x16, 0x0, 0x0, @void, @value=r8}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 795.912311ms ago: executing program 3 (id=2832): r0 = open(&(0x7f0000000000)='./file1\x00', 0x60840, 0x21) flock(r0, 0x1) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000140)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x149403, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r8}, 0x18) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r7, r7, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r9, r7, 0x4, r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r10, 0x0, 0x0) 716.188338ms ago: executing program 1 (id=2833): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0x4, &(0x7f0000000340)=ANY=[@ANYRES8=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @cgroup_device, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], 0x0, 0x0, 0x2}}, 0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 572.083569ms ago: executing program 0 (id=2834): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x30000, 0x40, 0x6dd, 0x20, 0x1, 0x2, 0x8000, 0xffffff6f, 0x9, 0x2, 0x8, &(0x7f0000000040)=[0x8, 0x6, 0x1, 0x6], 0x4, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) futex(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x2) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 466.540631ms ago: executing program 2 (id=2835): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffff1f, 0x2, {0xfffffffa, "60d7f74b38433ed7bf20a5dc0dfbb554"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x50}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x0, 0x1ce) lseek(r2, 0xffffffffffffffda, 0x3) r3 = syz_open_dev$dri(&(0x7f0000000dc0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80000, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000200)={r4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x283) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x1010, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0xa0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {}, {0x0, 0x6}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2, 0x2}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) unlinkat(r8, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x7, 0x7f, 0x0, @mcast2, @private0, 0x0, 0x8000, 0x9, 0x25}}) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r10, &(0x7f00000002c0)='./file0\x00', 0x2) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x840, &(0x7f0000000580)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}], [{@appraise_type}]}}) 438.124779ms ago: executing program 1 (id=2836): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xa1]}, 0x8, 0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000380)={0xf94, [0x8, 0x9, 0x3], [{0xfffff17b, 0xc2a, 0x0, 0x0, 0x1}, {0x5, 0x10001, 0x0, 0x0, 0x1}, {0x1, 0x2, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x1}, {0x2d, 0x9cb, 0x0, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xf5, 0x80000000, 0x0, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x9, 0x1, 0x1, 0x0, 0x1}, {0xc, 0x8, 0x0, 0x1, 0x1}], 0x4a46ac0}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x1, 0xc7, 0xc7, 0xcd, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x0, 0xfd, 0xda}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000005c0)={0x0, 0xc00000, 0x2, {0x9, @pix_mp={0x1, 0x0, 0x0, 0x9, 0x3, [{0xfffffffa}, {0x3}, {0x0, 0x100004}, {0x2, 0x2}, {}, {0x1, 0x9}, {0x0, 0x40000000}, {0xffffffff, 0x100}], 0x7, 0x0, 0x0, 0x0, 0x1}}, 0x9}) 0s ago: executing program 2 (id=2837): openat$vcsu(0xffffff9c, 0x0, 0x14d002, 0x0) syz_usb_connect$uac1(0x6, 0xab, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902990003010000000904000000010100000a240100000002010211240600000500000000000000000000000c2407000000003e8e7a70e108240400005cc3bc090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000e24020100011002e53a08000000072401000000000905820908", @ANYBLOB="fc43e258c01af6536dd9ce5d9902c33ea73bfea0ad12839cdad258a7d43c0c489884830e2713b82f3ec55ce5ddc870345e44567e44f46cb95ddf3ba64dbd853529eaa8a16622975dc90accf57226021574b91999fedd47415b0005b60cb2bd512694cafb2e1f3209ce936ceb49530d2191a5e29c1a0deefc1d60d409743df41f6d073b684533375233a3dc21c55117e171a962395f6d7b5769f3f26f5ed678335b8d9efb4c71a56ed29af6778dcf3d392c915710018f33a9b566999b7bcc78cf4ea01198182294900ac3b5e23d77cdeecc7f63dd0bc8c4d6373396b2fd2b8b84b484f4700afb165cf9ea8cb218ec6a63e3"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x19, &(0x7f0000000300), 0x0) r2 = socket(0x10, 0x5, 0xe) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000680001002dbd7000fddbdf25020001000500000006000300000000000400040014000600ffffffff00000000000000000000000006190300010000000800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c001}, 0x0) timer_create(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): evice number 53 [ 973.550815][ T5191] bcm5974 2-1:1.0: could not read from device [ 973.573585][ T5905] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 973.583445][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.593228][ T5905] usb 3-1: Product: syz [ 973.597737][ T5905] usb 3-1: Manufacturer: syz [ 973.603069][ T5905] usb 3-1: SerialNumber: syz [ 973.608694][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 973.621030][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.631571][ T5905] usb 3-1: config 0 descriptor?? [ 973.636891][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 973.649811][ T5905] imon_raw 3-1:0.0: IR endpoint missing [ 973.657819][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.689745][ T24] usb 4-1: config 0 descriptor?? [ 973.786154][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 973.798837][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2149'. [ 973.815376][T13945] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2149'. [ 973.911636][ T5905] usb 3-1: USB disconnect, device number 51 [ 973.984126][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2150'. [ 974.175909][ T24] logitech-hidpp-device 0003:046D:C262.000C: item fetching failed at offset 0/3 [ 974.202944][ T24] logitech-hidpp-device 0003:046D:C262.000C: hidpp_probe:parse failed [ 974.588367][ T24] logitech-hidpp-device 0003:046D:C262.000C: probe with driver logitech-hidpp-device failed with error -22 [ 974.619886][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.679633][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.781594][ T5919] usb 4-1: USB disconnect, device number 59 [ 976.747210][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 976.765388][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 976.860534][ T5919] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 977.057137][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 977.060341][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 977.120810][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 977.185265][T14004] netlink: 'syz.1.2165': attribute type 6 has an invalid length. [ 977.204408][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 977.253721][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2165'. [ 977.423520][ T5919] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 977.433027][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.454266][ T5919] usb 1-1: Product: syz [ 977.606094][ T5919] usb 1-1: Manufacturer: syz [ 977.611535][ T5919] usb 1-1: SerialNumber: syz [ 977.618809][ T5919] usb 1-1: config 0 descriptor?? [ 977.627689][ T30] audit: type=1326 audit(1755901661.986:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.657706][ T5919] usb 1-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 977.696671][T13988] ceph: No mds server is up or the cluster is laggy [ 977.719861][ T30] audit: type=1326 audit(1755901662.014:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.748461][ T30] audit: type=1326 audit(1755901662.099:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.822786][ T30] audit: type=1326 audit(1755901662.099:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.852295][ T30] audit: type=1326 audit(1755901662.108:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.953880][ T30] audit: type=1326 audit(1755901662.108:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 977.975861][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.042843][ T30] audit: type=1326 audit(1755901662.108:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 978.064593][ C0] vkms_vblank_simulate: vblank timer overrun [ 978.103807][ T30] audit: type=1326 audit(1755901662.127:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 978.170784][ T30] audit: type=1326 audit(1755901662.127:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 978.201339][ T5919] usb 1-1: USB disconnect, device number 36 [ 978.241907][ T30] audit: type=1326 audit(1755901662.127:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14002 comm="syz.1.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 978.381541][T14017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2168'. [ 979.828899][T14029] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2171'. [ 979.849591][T14034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2171'. [ 980.051579][T14029] program syz.3.2171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 981.643893][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 981.866898][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059182400: rx timeout, send abort [ 982.411413][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059182400: abort rx timeout. Force session deactivation [ 982.912814][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880335ec800: rx timeout, send abort [ 983.100599][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 983.236167][T14082] openvswitch: netlink: IPv6 tunnel dst address is zero [ 983.455544][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff8880335ec800: abort rx timeout. Force session deactivation [ 983.467929][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 983.651903][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 983.703916][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 983.747555][ T24] usb 2-1: config 1 has no interface number 1 [ 983.753780][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 983.936410][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.947519][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.968761][ T24] usb 2-1: Product: syz [ 983.973000][ T24] usb 2-1: Manufacturer: syz [ 983.979747][ T24] usb 2-1: SerialNumber: syz [ 985.821339][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.005807][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.091189][ T24] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 986.422210][ T24] usb 2-1: 2:1 : unsupported sample bitwidth 8 in 5 bytes [ 986.641479][ T24] usb 2-1: USB disconnect, device number 54 [ 986.780604][T14109] Invalid logical block size (16385) [ 988.193254][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 988.826127][T14131] PKCS8: Unsupported PKCS#8 version [ 988.887541][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 988.897800][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 988.907814][T14133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.044693][T14135] netlink: 'syz.4.2193': attribute type 6 has an invalid length. [ 989.070985][T14135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'. [ 989.410211][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 989.410230][ T30] audit: type=1326 audit(1755901673.016:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.675711][ T30] audit: type=1326 audit(1755901673.016:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.701143][ T30] audit: type=1326 audit(1755901673.100:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.726141][ T30] audit: type=1326 audit(1755901673.100:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.777937][ T30] audit: type=1326 audit(1755901673.100:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.799973][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.907031][T14133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.937217][ T30] audit: type=1326 audit(1755901673.100:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 989.958890][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.052620][T14145] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 990.079497][T14145] CIFS mount error: No usable UNC path provided in device string! [ 990.079497][T14145] [ 990.090369][T14145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 990.179586][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 990.264996][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 990.856230][T14121] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 990.998932][ T30] audit: type=1326 audit(1755901673.100:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 991.003462][T14121] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 991.027534][T14121] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 991.033734][T14121] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 991.189891][ T30] audit: type=1326 audit(1755901673.100:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 991.213229][ T30] audit: type=1326 audit(1755901673.100:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 991.235754][ T30] audit: type=1326 audit(1755901673.100:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14127 comm="syz.4.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 993.182982][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 993.257848][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 993.264026][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 993.862233][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 994.437122][ T5960] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 994.849493][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.894962][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.947049][ T5960] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 994.979233][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.012224][ T5960] usb 2-1: config 0 descriptor?? [ 995.246092][ T5905] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 996.231800][ T5960] cm6533_jd 0003:0D8C:0022.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 996.251276][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 996.285985][ T5905] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 996.322784][ T5905] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 996.359188][ T5905] usb 1-1: config 0 has no interface number 0 [ 996.419880][ T5905] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.472006][ T5960] usb 2-1: USB disconnect, device number 55 [ 996.478124][ T5905] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 996.478198][ T5905] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 996.479995][ T5905] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 996.573922][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 996.597259][ T5905] usb 1-1: Product: syz [ 996.626031][ T5905] usb 1-1: config 0 descriptor?? [ 996.644338][T14195] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 997.229807][T14213] fuse: Bad value for 'fd' [ 997.405736][T14216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 997.866878][ T5905] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input28 [ 998.645870][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 998.731160][T14206] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 998.736248][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 999.464140][T14206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 999.485814][T14206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.513704][T14206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 999.705297][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 999.714920][ T24] usb 1-1: USB disconnect, device number 37 [ 999.810840][ T5905] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1000.793845][T14229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 1000.959305][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1001.294632][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2222'. [ 1001.304039][T14238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2222'. [ 1001.387912][T14238] vlan0: entered allmulticast mode [ 1001.393384][T14238] bridge_slave_0: entered allmulticast mode [ 1001.638356][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 1001.723904][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 1003.395096][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1005.275231][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1005.372794][T14258] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1005.379018][T14258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1005.396908][T14258] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1005.406476][T14258] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1006.617863][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1007.538788][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1007.544964][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 1007.551112][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 1007.625548][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 1007.883448][T14300] syz_tun: entered allmulticast mode [ 1007.912972][T14307] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1009.050545][ T24] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1009.240924][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'. [ 1009.246114][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1009.631895][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.746790][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1009.794050][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.834558][ T24] usb 5-1: config 0 descriptor?? [ 1010.106015][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1011.241176][T14338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 1011.552772][ T24] logitech-hidpp-device 0003:046D:C262.000E: item fetching failed at offset 0/3 [ 1011.678104][ T24] logitech-hidpp-device 0003:046D:C262.000E: hidpp_probe:parse failed [ 1011.697038][ T24] logitech-hidpp-device 0003:046D:C262.000E: probe with driver logitech-hidpp-device failed with error -22 [ 1011.725561][ T24] usb 5-1: USB disconnect, device number 67 [ 1012.009215][T14347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1012.020828][T14347] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1012.263686][ T5919] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1012.423733][ T5960] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1012.443005][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1012.464187][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1012.491409][ T5919] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1012.511606][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.533767][ T5919] usb 4-1: config 0 descriptor?? [ 1012.540041][T14351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1012.620138][ T5960] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1012.630980][ T5960] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1012.643758][ T5960] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1012.658580][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1012.668941][ T5960] usb 3-1: Product: syz [ 1012.673560][ T5960] usb 3-1: Manufacturer: syz [ 1012.678606][ T5960] usb 3-1: SerialNumber: syz [ 1012.688613][ T5960] usb 3-1: config 0 descriptor?? [ 1012.698897][ T5960] usb 3-1: selecting invalid altsetting 0 [ 1012.712666][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1012.807104][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 1012.814891][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1012.826237][ T5919] usb 4-1: USB disconnect, device number 60 [ 1012.882443][T14373] overlayfs: failed to resolve './file0': -2 [ 1012.904946][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1012.952199][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1013.120399][ T24] usb 5-1: can't read configurations, error -61 [ 1013.278991][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1015.671564][ T9381] usb 3-1: USB disconnect, device number 53 [ 1015.679559][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1015.734274][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1016.241150][ T24] usb 5-1: can't read configurations, error -61 [ 1016.313082][ T24] usb usb5-port1: attempt power cycle [ 1016.541283][T14392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 1016.711427][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1016.828477][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1016.972374][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1017.035522][ T24] usb 5-1: can't read configurations, error -61 [ 1017.255401][ T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1017.736481][ T24] usb 5-1: device descriptor read/8, error -71 [ 1017.780078][ T5919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1017.867332][ T24] usb usb5-port1: unable to enumerate USB device [ 1017.963892][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1017.987058][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1018.495200][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1018.541050][ T5919] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1018.561173][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.668677][T14414] comedi: No check for data length of config insn id 4095 is implemented [ 1018.677476][T14414] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1018.687000][T14414] comedi: Assuming n=15 is correct [ 1018.783000][ T5919] usb 2-1: Product: syz [ 1018.869636][ T5919] usb 2-1: Manufacturer: syz [ 1018.874315][ T5919] usb 2-1: SerialNumber: syz [ 1019.214038][ T5919] usb 2-1: config 0 descriptor?? [ 1019.473632][T14416] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2265'. [ 1019.526938][T14419] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2265'. [ 1020.251881][T14430] overlayfs: overlapping lowerdir path [ 1020.520823][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'. [ 1021.230510][T14432] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1021.456218][T14444] 9pnet_fd: Insufficient options for proto=fd [ 1021.915911][T14449] netlink: 'syz.1.2277': attribute type 6 has an invalid length. [ 1021.969877][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1022.140671][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1022.207286][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1022.295178][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1022.415426][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1022.564612][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1022.613392][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1022.656457][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1022.677141][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1022.696076][ T24] usb 3-1: Product: syz [ 1022.717641][ T24] usb 3-1: Manufacturer: syz [ 1022.733375][ T24] usb 3-1: SerialNumber: syz [ 1022.784864][ T24] usb 3-1: config 0 descriptor?? [ 1022.820372][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1022.865615][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1022.908067][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2277'. [ 1022.931405][ T9381] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 1023.003001][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1023.003016][ T30] audit: type=1326 audit(1755901704.421:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14447 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 1023.078258][ T24] usb 3-1: USB disconnect, device number 54 [ 1023.147479][ T9381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1023.367059][ T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1023.377905][ T30] audit: type=1326 audit(1755901704.421:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14447 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 1023.399806][ C1] vkms_vblank_simulate: vblank timer overrun [ 1023.418533][ T9381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.400784][T14446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1024.420091][ T9381] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1024.492395][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1024.516637][ T9381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.563160][ T9381] usb 4-1: config 0 descriptor?? [ 1024.695223][ T30] audit: type=1326 audit(1755901704.431:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14447 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 1024.977474][T14468] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1024.988559][T14468] overlayfs: failed to set xattr on upper [ 1024.995098][T14468] overlayfs: ...falling back to index=off. [ 1025.079757][ T30] audit: type=1326 audit(1755901704.515:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14447 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 1025.082925][T14468] overlayfs: ...falling back to uuid=null. [ 1025.363746][ T30] audit: type=1326 audit(1755901704.515:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14447 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1618ebe9 code=0x7ffc0000 [ 1025.580560][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'. [ 1025.627301][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2282'. [ 1025.683806][T14473] netlink: 492 bytes leftover after parsing attributes in process `syz.0.2282'. [ 1025.703187][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.751285][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.801898][ T9381] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review [ 1025.888047][ T9381] bigben 0003:146B:0902.000F: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 1025.921379][ T9381] bigben 0003:146B:0902.000F: missing HID_OUTPUT_REPORT 0 [ 1025.934394][ T9381] bigben 0003:146B:0902.000F: no output report found [ 1026.069407][ T5960] usb 4-1: USB disconnect, device number 61 [ 1029.066859][ T5929] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1029.251300][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 1029.262636][ T5929] usb 1-1: config 1 has an invalid interface number: 110 but max is 0 [ 1029.284821][ T5929] usb 1-1: config 1 has no interface number 0 [ 1029.303756][ T5929] usb 1-1: config 1 interface 110 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1029.328860][ T5929] usb 1-1: config 1 interface 110 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1029.362039][ T5929] usb 1-1: config 1 interface 110 has no altsetting 0 [ 1029.391014][ T5929] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=8d.7f [ 1029.415654][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.445868][ T5929] usb 1-1: Product: syz [ 1029.456675][ T5929] usb 1-1: Manufacturer: syz [ 1029.477019][ T5929] usb 1-1: SerialNumber: syz [ 1029.499649][T14496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.517903][T14496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1029.550104][ T5929] ipaq 1-1:1.110: PocketPC PDA converter detected [ 1029.605229][ T7617] libceph: connect (1)[c::]:6789 error -22 [ 1029.623351][ T7617] libceph: mon0 (1)[c::]:6789 connect error [ 1029.662573][T14505] ceph: No mds server is up or the cluster is laggy [ 1029.703956][T14512] x_tables: duplicate underflow at hook 2 [ 1029.955537][ T7617] libceph: connect (1)[c::]:6789 error -22 [ 1030.012613][ T7617] libceph: mon0 (1)[c::]:6789 connect error [ 1030.391980][ T5929] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 1030.456048][ T5929] usb 1-1: USB disconnect, device number 38 [ 1030.478852][ T5929] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 1030.518246][ T5929] ipaq 1-1:1.110: device disconnected [ 1030.627877][ T5919] iguanair 2-1:0.0: failed to get version [ 1030.635390][ T5919] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 1030.662846][ T5919] usb 2-1: USB disconnect, device number 56 [ 1030.760437][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2296'. [ 1030.772142][T14523] @: renamed from vlan0 (while UP) [ 1030.841695][ T9381] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1031.386759][ T5919] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1031.408068][ T9381] usb 4-1: Using ep0 maxpacket: 32 [ 1031.423891][ T9381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.448538][ T9381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.462500][ T9381] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1031.473032][ T9381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.496979][ T9381] usb 4-1: config 0 descriptor?? [ 1031.509852][ T9381] hub 4-1:0.0: USB hub found [ 1031.551496][T14538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1031.561206][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1031.566672][T14538] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2300'. [ 1031.587346][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.599093][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1031.608391][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.624833][ T5919] usb 2-1: config 0 descriptor?? [ 1031.639953][ T5919] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1031.760620][ T7617] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1031.775279][T14540] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1031.952910][ T7617] usb 5-1: Using ep0 maxpacket: 16 [ 1031.960850][ T7617] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 1031.969378][ T7617] usb 5-1: config 0 has no interface number 0 [ 1031.979367][ T7617] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1031.992333][ T7617] usb 5-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.008041][ T7617] usb 5-1: config 0 interface 63 has no altsetting 0 [ 1032.015040][ T7617] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1032.024627][ T7617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.037068][ T7617] usb 5-1: config 0 descriptor?? [ 1032.052559][ T5929] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1032.234126][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.245907][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1032.254337][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.264847][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.279047][ T5929] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1032.288509][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.301584][ T5929] usb 3-1: config 0 descriptor?? [ 1032.434092][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1032.445721][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1032.455862][ T24] usb 1-1: config 0 has an invalid interface number: 82 but max is 1 [ 1032.464011][ T24] usb 1-1: config 0 has an invalid interface number: 159 but max is 1 [ 1032.472410][ T24] usb 1-1: config 0 has no interface number 0 [ 1032.479345][ T24] usb 1-1: config 0 has no interface number 1 [ 1032.485543][ T24] usb 1-1: config 0 interface 82 has no altsetting 0 [ 1032.489858][ T7617] uclogic 0003:28BD:0909.0010: interface is invalid, ignoring [ 1032.492335][ T24] usb 1-1: config 0 interface 159 has no altsetting 0 [ 1032.511005][ T24] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 1032.520276][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.535022][ T24] usb 1-1: Product: syz [ 1032.539406][ T24] usb 1-1: Manufacturer: syz [ 1032.546174][ T24] usb 1-1: SerialNumber: syz [ 1032.555437][ T24] usb 1-1: config 0 descriptor?? [ 1032.713947][ T7617] usb 5-1: USB disconnect, device number 72 [ 1032.775491][ T5929] chicony 0003:04F2:1236.0011: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 1032.852275][ T24] usb 1-1: USB disconnect, device number 39 [ 1032.977759][ T7617] usb 3-1: USB disconnect, device number 55 [ 1033.420058][ T5919] gspca_vc032x: reg_w err -71 [ 1033.443312][ T5919] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1033.478449][ T5919] usb 2-1: USB disconnect, device number 57 [ 1033.655428][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.665387][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.878899][ T9381] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1033.915330][ T9381] usbhid 4-1:0.0: can't add hid device: -71 [ 1033.937841][ T9381] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1034.166296][ T9381] usb 4-1: USB disconnect, device number 62 [ 1034.917086][ T5919] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1035.396695][ T5919] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1035.406140][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.434716][ T5919] usb 2-1: config 0 descriptor?? [ 1035.523312][T14578] netlink: 'syz.2.2314': attribute type 2 has an invalid length. [ 1035.531335][T14578] netlink: 'syz.2.2314': attribute type 1 has an invalid length. [ 1035.543041][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 1035.678103][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.702396][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.745628][ T9381] kernel write not supported for file /input/event2 (pid: 9381 comm: kworker/1:1) [ 1035.823384][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.843306][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.860143][T14589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2316'. [ 1035.897609][ T5919] usb 2-1: can't set first interface for hiFace device. [ 1035.916224][ T5919] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1035.949852][ T5919] usb 2-1: USB disconnect, device number 58 [ 1036.681528][T14603] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1036.682429][T14593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1036.692719][T14595] 9pnet: Could not find request transport: z5 [ 1036.710067][T14593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1036.731435][T14593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1036.748516][T14593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1037.819107][T14618] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2325'. [ 1037.841948][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2325'. [ 1038.117477][ T5919] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1038.837589][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 1038.923745][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1038.930154][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 1038.946790][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 1038.987898][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1039.042390][ T5919] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1039.055961][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.178962][T14623] batadv_slave_1: entered promiscuous mode [ 1039.195106][T14628] batadv_slave_1: left promiscuous mode [ 1039.530076][ T7617] IPVS: starting estimator thread 0... [ 1039.557850][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1039.957701][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 1039.967255][ T9] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 1039.976089][ T5919] pvrusb2: ********** [ 1039.980741][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1039.991483][T14630] IPVS: using max 48 ests per chain, 115200 per kthread [ 1040.000884][T14633] netlink: 'syz.1.2324': attribute type 7 has an invalid length. [ 1040.009474][T14633] netlink: 'syz.1.2324': attribute type 8 has an invalid length. [ 1040.019166][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 1040.073734][ T5919] pvrusb2: Important functionality might not be entirely working. [ 1040.184456][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1040.199853][ T5919] pvrusb2: ********** [ 1040.306714][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1040.583566][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.597107][T14626] Invalid ELF header magic: != ELF [ 1040.633384][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.676488][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1040.701864][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1040.712187][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.731998][ T9] usb 1-1: invalid UAC_HEADER (v1) [ 1040.756732][ T5919] usb 2-1: USB disconnect, device number 59 [ 1040.766019][ T5919] pvrusb2: Device being rendered inoperable [ 1040.845687][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1040.899173][T14640] erspan0: entered promiscuous mode [ 1041.172535][T14640] batman_adv: batadv0: Adding interface: macvlan2 [ 1041.516042][ T5960] usb 1-1: USB disconnect, device number 40 [ 1041.551979][T14640] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.583399][T14640] batman_adv: batadv0: Interface activated: macvlan2 [ 1043.056626][T14672] cgroup: Unknown subsys name 'cpuset' [ 1044.274919][T14682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1044.488267][T14682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1044.528575][T14682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1044.547155][T14682] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1045.466039][ T5954] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1045.494127][T14700] kvm: pic: non byte write [ 1045.592568][ T5960] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1045.624863][ T5954] usb 5-1: device descriptor read/64, error -71 [ 1045.766740][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 1045.793385][ T5960] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1045.821749][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.841511][ T5960] usb 4-1: config 0 has no interface number 0 [ 1045.850779][ T5960] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1045.870175][ T5960] usb 4-1: New USB device found, idVendor=19d2, idProduct=0284, bcdDevice=7a.d9 [ 1045.880086][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.889314][ T5960] usb 4-1: Product: syz [ 1045.895411][ T5960] usb 4-1: Manufacturer: syz [ 1045.900338][ T5960] usb 4-1: SerialNumber: syz [ 1045.911819][ T5960] usb 4-1: config 0 descriptor?? [ 1045.913400][ T5954] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1046.060007][T14711] comedi: No check for data length of config insn id 4095 is implemented [ 1046.068920][T14711] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1046.078372][T14711] comedi: Assuming n=15 is correct [ 1046.459078][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 1046.557699][T14631] usb 4-1: USB disconnect, device number 63 [ 1046.597322][ T5954] usb 5-1: device descriptor read/64, error -71 [ 1046.704256][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 1046.711750][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1046.718188][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1046.725996][ T5954] usb usb5-port1: attempt power cycle [ 1047.185277][ T5954] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1047.220105][ T5954] usb 5-1: device descriptor read/8, error -71 [ 1047.477187][ T5954] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1047.519475][ T5954] usb 5-1: device descriptor read/8, error -71 [ 1047.562863][T14718] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.646982][ T5954] usb usb5-port1: unable to enumerate USB device [ 1047.694519][T14718] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.794457][T14718] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.837463][T14631] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1047.929957][T14718] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.960500][ T5954] kernel read not supported for file /input/event2 (pid: 5954 comm: kworker/1:6) [ 1048.040635][T14631] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1048.113952][T14631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.123187][T14631] usb 2-1: Product: syz [ 1048.128538][T14631] usb 2-1: Manufacturer: syz [ 1048.133194][T14631] usb 2-1: SerialNumber: syz [ 1048.143549][T14631] usb 2-1: config 0 descriptor?? [ 1048.254352][ T5954] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1048.491986][T14631] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1048.500349][T14631] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1048.508155][T14631] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1048.544736][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1048.561033][T14631] usb 2-1: USB disconnect, device number 60 [ 1048.570847][ T5954] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1048.595117][ T5954] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1048.612578][ T5954] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1048.684718][ T5954] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1048.695979][T14718] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.709010][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1048.720692][ T5954] usb 1-1: SerialNumber: syz [ 1048.724118][T14718] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.743189][T14726] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1048.750992][T14718] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.856947][T14718] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.096929][ T5954] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1049.332087][ T5954] usb 1-1: USB disconnect, device number 41 [ 1049.664298][T14741] comedi: No check for data length of config insn id 4095 is implemented [ 1049.674003][T14741] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1049.688914][T14741] comedi: Assuming n=15 is correct [ 1049.857567][ T5960] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1049.996875][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1050.154519][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 1050.388429][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 1050.408943][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1050.418402][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.431021][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.439192][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.453640][ T5960] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1050.464086][ T9] usb 5-1: config 0 descriptor?? [ 1050.500395][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.510735][T14743] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1050.596539][ T5960] usb 3-1: config 0 descriptor?? [ 1050.664067][ T5960] hub 3-1:0.0: USB hub found [ 1051.205952][ T5960] hub 3-1:0.0: 1 port detected [ 1051.258393][ T9] uclogic 0003:5543:0003.0012: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 1051.360283][T14759] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2367'. [ 1051.451853][ T9] usb 5-1: USB disconnect, device number 77 [ 1051.469106][ T5954] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1051.642748][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1051.870251][ T5960] hub 3-1:0.0: activate --> -90 [ 1051.909995][ T5954] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1052.152455][ T5960] usb 3-1-port1: config error [ 1052.284222][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1052.290577][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1052.832413][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1052.939095][ T5954] usb usb1-port1: attempt power cycle [ 1052.952372][T14631] usb 3-1: USB disconnect, device number 56 [ 1052.956734][ T5960] usb 3-1-port1: attempt power cycle [ 1053.084285][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.096100][ T9] usb 2-1: config 0 descriptor?? [ 1053.105453][ T9] cp210x 2-1:0.0: cp210x converter detected [ 1053.191652][T14779] comedi: No check for data length of config insn id 4095 is implemented [ 1053.198181][T14770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1053.203210][T14779] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1053.214688][T14770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1053.216452][T14779] comedi: Assuming n=15 is correct [ 1053.222925][T14770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1053.245360][T14770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.299554][ T5954] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1053.342837][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1053.560479][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2375'. [ 1053.598808][ T5954] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1053.629814][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1053.643455][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1053.657713][ T9] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 1053.670168][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 1053.681015][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1053.761127][ T5954] usb usb1-port1: unable to enumerate USB device [ 1055.203602][ T5919] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1055.341086][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 1055.431032][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 1055.431095][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 1055.437132][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1055.451743][ T5919] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1055.581509][ T5919] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1055.647095][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1055.671969][ T5919] usb 1-1: config 1 has no interface number 0 [ 1055.702239][ T5919] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1055.869181][ T5919] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1056.250055][ T5919] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1056.259548][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.315869][ T5919] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1056.607838][ T5954] usb 2-1: USB disconnect, device number 61 [ 1057.425918][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1057.433408][T14824] comedi: No check for data length of config insn id 4095 is implemented [ 1057.453208][ T5919] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1057.459031][ T5954] cp210x 2-1:0.0: device disconnected [ 1057.483490][T14824] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1057.506246][T14824] comedi: Assuming n=15 is correct [ 1057.636521][ T9] usb 1-1: USB disconnect, device number 46 [ 1057.666364][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1058.386753][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2387'. [ 1058.520156][T14843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2389'. [ 1059.221342][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1059.437309][ T9] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 1059.457721][ T9] usb 1-1: config 0 has no interface number 0 [ 1059.463858][ T9] usb 1-1: config 0 interface 235 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 1059.492752][ T9] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2800, bcdDevice=8c.f6 [ 1059.509133][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.518119][ T9] usb 1-1: Product: syz [ 1059.518511][T14853] netlink: 'syz.3.2393': attribute type 12 has an invalid length. [ 1059.522663][ T9] usb 1-1: Manufacturer: syz [ 1059.535715][ T9] usb 1-1: SerialNumber: syz [ 1059.548191][ T9] usb 1-1: config 0 descriptor?? [ 1060.060818][T14848] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.140615][T14853] netlink: 'syz.3.2393': attribute type 29 has an invalid length. [ 1060.300438][T14853] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1060.309931][T14853] netlink: 'syz.3.2393': attribute type 2 has an invalid length. [ 1060.336911][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 1060.362191][ T5954] usb 1-1: USB disconnect, device number 47 [ 1061.789491][T14870] comedi: No check for data length of config insn id 4095 is implemented [ 1061.798276][T14870] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1061.807630][T14870] comedi: Assuming n=15 is correct [ 1063.935458][ T5954] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1065.412348][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.431379][ T5954] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1065.454888][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.466217][ T5954] usb 1-1: config 0 descriptor?? [ 1065.677666][T14923] comedi: No check for data length of config insn id 4095 is implemented [ 1065.686364][T14923] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1065.697401][T14923] comedi: Assuming n=15 is correct [ 1066.616780][ T5954] macally 0003:060B:0001.0013: item fetching failed at offset 0/2 [ 1066.660379][ T5954] macally 0003:060B:0001.0013: probe with driver macally failed with error -22 [ 1066.796499][ T5954] usb 1-1: USB disconnect, device number 48 [ 1068.339290][ T30] audit: type=1804 audit(1755901745.668:1485): pid=14941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.2415" name="/newroot/476/file0" dev="tmpfs" ino=2528 res=1 errno=0 [ 1068.585546][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 1069.245232][T14956] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1070.536301][T14979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1070.691055][T14982] comedi: No check for data length of config insn id 4095 is implemented [ 1070.699662][T14982] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1070.709265][T14982] comedi: Assuming n=15 is correct [ 1072.458970][T14996] lo: entered allmulticast mode [ 1072.526378][T14996] tunl0: entered allmulticast mode [ 1072.544557][T14996] gre0: entered allmulticast mode [ 1072.659365][T14996] gretap0: entered allmulticast mode [ 1072.713222][T14996] erspan0: entered allmulticast mode [ 1072.740449][T14996] ip_vti0: entered allmulticast mode [ 1072.770554][T14996] ip6_vti0: entered allmulticast mode [ 1072.793374][T14996] sit0: entered allmulticast mode [ 1072.825583][T14996] ip6tnl0: entered allmulticast mode [ 1072.854108][T14996] ip6gre0: entered allmulticast mode [ 1072.937051][ T5954] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1073.014342][T14996] syz_tun: entered allmulticast mode [ 1073.040072][T14996] ip6gretap0: entered allmulticast mode [ 1073.065638][T14996] bond0: entered allmulticast mode [ 1073.089245][T14996] bond_slave_0: entered allmulticast mode [ 1073.099938][T14996] bond_slave_1: entered allmulticast mode [ 1073.117485][ T5954] usb 4-1: device descriptor read/64, error -71 [ 1073.133255][T14996] team0: entered allmulticast mode [ 1073.143538][T14996] team_slave_0: entered allmulticast mode [ 1073.150733][T14996] team_slave_1: entered allmulticast mode [ 1073.165869][T14996] dummy0: entered allmulticast mode [ 1073.190588][T14996] nlmon0: entered allmulticast mode [ 1073.210537][T14996] caif0: entered allmulticast mode [ 1073.217772][T14996] batadv0: entered allmulticast mode [ 1073.233210][T14996] vxcan0: entered allmulticast mode [ 1073.243656][T14996] vxcan1: entered allmulticast mode [ 1073.253890][T14996] veth0: entered allmulticast mode [ 1073.270744][T14996] veth1: entered allmulticast mode [ 1073.285770][T14996] wg1: entered allmulticast mode [ 1073.296698][T14996] wg2: entered allmulticast mode [ 1073.305783][T14996] veth0_to_bridge: entered allmulticast mode [ 1073.326689][T14996] veth1_to_bridge: entered allmulticast mode [ 1073.340078][T14996] bridge_slave_1: entered allmulticast mode [ 1073.371155][T14996] veth0_to_bond: entered allmulticast mode [ 1073.384691][ T5954] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1073.399328][T14996] veth1_to_bond: entered allmulticast mode [ 1073.419692][T14996] veth0_to_team: entered allmulticast mode [ 1073.440158][T14996] veth1_to_team: entered allmulticast mode [ 1073.458289][T14996] veth0_to_batadv: entered allmulticast mode [ 1073.479283][T14996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.491180][T14996] batadv_slave_0: entered allmulticast mode [ 1073.507464][T14996] veth1_to_batadv: entered allmulticast mode [ 1073.519435][T14996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.531575][T14996] batadv_slave_1: entered allmulticast mode [ 1073.544216][T14996] xfrm0: entered allmulticast mode [ 1073.562938][T14996] veth0_to_hsr: entered allmulticast mode [ 1073.571356][ T5954] usb 4-1: device descriptor read/64, error -71 [ 1073.574793][T14996] hsr_slave_0: entered allmulticast mode [ 1073.593152][T14996] hsr0: entered allmulticast mode [ 1073.601433][T14996] veth1_virt_wifi: entered allmulticast mode [ 1073.610825][T14996] veth0_virt_wifi: entered allmulticast mode [ 1073.624422][T14996] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1073.637271][T14996] veth1_vlan: entered allmulticast mode [ 1073.651555][T14996] veth0_vlan: entered allmulticast mode [ 1073.670941][T14996] vlan1: entered allmulticast mode [ 1073.683047][T14996] macvlan0: entered allmulticast mode [ 1073.698802][T14996] macvlan1: entered allmulticast mode [ 1073.705921][ T5954] usb usb4-port1: attempt power cycle [ 1073.716758][T14996] ipvlan0: entered allmulticast mode [ 1073.722276][T14996] ipvlan1: entered allmulticast mode [ 1073.729874][T14996] veth1_macvtap: entered allmulticast mode [ 1073.738781][T14996] veth0_macvtap: entered allmulticast mode [ 1073.747142][T14996] macvtap0: entered allmulticast mode [ 1073.758118][T14996] macsec0: entered allmulticast mode [ 1073.766447][T14996] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.775506][T14996] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.784575][T14996] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.794581][T14996] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.804708][T14996] geneve0: entered allmulticast mode [ 1073.813002][T14996] geneve1: entered allmulticast mode [ 1073.818608][T14996] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1073.828060][T14996] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1073.836740][T14996] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1073.849801][T14996] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1073.859924][T14996] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1073.884923][T14996] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1073.901781][T14996] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1073.912352][T14996] bond1: entered allmulticast mode [ 1073.917588][T14996] : entered allmulticast mode [ 1073.922938][T14996] syztnl1: entered allmulticast mode [ 1073.928542][T14996] tap0: entered allmulticast mode [ 1073.935950][T14996] bond2: entered allmulticast mode [ 1073.941530][T14996] veth2: entered allmulticast mode [ 1073.946837][T14996] veth3: entered allmulticast mode [ 1074.080137][ T5954] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1074.130287][ T5954] usb 4-1: device descriptor read/8, error -71 [ 1075.672090][ T5954] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1076.483761][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1076.565919][ T5954] usb 4-1: device descriptor read/8, error -71 [ 1076.822279][ T5954] usb usb4-port1: unable to enumerate USB device [ 1077.372991][T15045] comedi: No check for data length of config insn id 4095 is implemented [ 1077.381872][T15045] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1077.391503][T15045] comedi: Assuming n=15 is correct [ 1078.056886][T15048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1080.825309][T15070] block nbd0: server does not support multiple connections per device. [ 1080.844539][T15070] block nbd0: shutting down sockets [ 1080.850114][ T5960] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1082.286027][T15080] bond2 (unregistering): Released all slaves [ 1082.724083][ T5960] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1082.755633][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.806274][ T5960] usb 4-1: Product: syz [ 1082.838375][ T5960] usb 4-1: Manufacturer: syz [ 1082.869788][ T5960] usb 4-1: SerialNumber: syz [ 1083.040062][ T5960] usb 4-1: config 0 descriptor?? [ 1083.795252][ T5960] usb 4-1: can't set config #0, error -71 [ 1083.875364][ T5960] usb 4-1: USB disconnect, device number 68 [ 1084.838358][T15101] comedi: No check for data length of config insn id 4095 is implemented [ 1084.847225][T15101] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1084.857645][T15101] comedi: Assuming n=15 is correct [ 1085.710485][ T9381] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1086.062105][ T9381] usb 1-1: device descriptor read/64, error -71 [ 1086.822585][ T9381] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1087.968374][T15142] comedi: No check for data length of config insn id 4095 is implemented [ 1087.977852][T15142] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1087.987681][T15142] comedi: Assuming n=15 is correct [ 1089.610328][T15160] : entered promiscuous mode [ 1090.080939][T15162] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2475'. [ 1092.632674][T15185] binder: 15176:15185 ioctl c0306201 0 returned -14 [ 1092.660330][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.683883][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.924663][ T5919] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1093.181724][ T30] audit: type=1804 audit(1755901770.066:1486): pid=15198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2485" name="/newroot/484/file0" dev="tmpfs" ino=2597 res=1 errno=0 [ 1093.243397][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 1093.255120][ T5919] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 1093.264864][ T5919] usb 5-1: config 0 has no interface number 0 [ 1093.271864][ T5919] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1094.143926][ T5919] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1094.153073][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.200647][ T5919] usb 5-1: Product: syz [ 1094.209551][ T5919] usb 5-1: Manufacturer: syz [ 1094.250337][ T5919] usb 5-1: SerialNumber: syz [ 1094.297987][ T5919] usb 5-1: config 0 descriptor?? [ 1094.312037][T15190] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.528218][T15204] netlink: 'syz.1.2487': attribute type 12 has an invalid length. [ 1094.570805][ T5919] asix 5-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1094.593318][ T5919] asix 5-1:0.191: probe with driver asix failed with error -71 [ 1094.632773][ T5919] usb 5-1: USB disconnect, device number 78 [ 1094.846351][T15204] syzkaller0: entered promiscuous mode [ 1094.856029][T15204] syzkaller0: entered allmulticast mode [ 1095.726188][T15215] serio: Serial port ptm0 [ 1096.378093][T15219] MPI: mpi too large (130952 bits) [ 1096.736457][T15223] netlink: 'syz.0.2491': attribute type 30 has an invalid length. [ 1097.172401][ T5905] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1097.339436][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 1097.352102][ T5905] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1097.371324][ T5905] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1097.391395][ T5905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1097.414114][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1097.424345][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1097.456950][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1097.489142][ T5905] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1097.519469][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.551311][ T5905] usb 1-1: config 0 descriptor?? [ 1097.830750][ T5905] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1097.869683][ T5905] usb 1-1: USB disconnect, device number 51 [ 1097.907647][ T5905] usblp0: removed [ 1098.226541][ T5954] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1098.407363][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 1098.413086][ T5905] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1098.445350][ T5954] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1098.460506][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.484533][ T5954] usb 4-1: config 0 descriptor?? [ 1098.507745][ T5954] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1098.590736][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 1099.055257][ T5954] gspca_sunplus: reg_w_riv err -110 [ 1099.071036][ T5905] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1099.087707][ T5954] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1099.112077][ T5905] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1099.131552][ T5905] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1099.141476][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1099.151422][ T5905] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1099.161501][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1099.175084][ T5905] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1099.184757][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.234809][ T5905] usb 1-1: config 0 descriptor?? [ 1099.479760][ T5905] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1099.507721][T15245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.517163][T15245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.742496][ T5919] usb 1-1: USB disconnect, device number 52 [ 1099.766693][ T5919] usblp0: removed [ 1101.593195][ T5905] usb 4-1: USB disconnect, device number 69 [ 1102.310881][T15273] binder: 15269:15273 ioctl c0306201 0 returned -14 [ 1103.508171][T15284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1103.531392][T15284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1103.747927][T15284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1103.784622][T15284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1105.623536][ T5156] Bluetooth: hci1: command 0x0c1a tx timeout [ 1105.714030][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 1105.883005][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 1105.966122][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 1107.584227][T15327] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 1107.690686][T15329] lo speed is unknown, defaulting to 1000 [ 1108.140145][T15345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2515'. [ 1109.003549][T15350] can: request_module (can-proto-0) failed. [ 1109.689572][T15361] binder_alloc: binder_alloc_mmap_handler: 15356 200000ffd000-200001000000 already mapped failed -16 [ 1109.742544][T15359] binder: 15356:15359 unknown command 4294967295 [ 1109.750835][T15362] binder: 15356:15362 unknown command 4294967295 [ 1109.782284][T15362] binder: 15356:15362 ioctl c0306201 2000000003c0 returned -22 [ 1109.795177][T15361] binder_alloc: 15356: binder_alloc_buf, no vma [ 1109.810658][T15359] binder: 15356:15359 ioctl c0306201 2000000003c0 returned -22 [ 1110.209229][ T5954] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1110.391371][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 1110.552450][ T5954] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 1110.665093][ T5954] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.810359][ T5954] usb 5-1: config 0 has no interface number 0 [ 1110.880763][ T5954] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1110.917370][ T5954] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1110.958276][ T5954] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1110.997905][ T5954] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 1111.018966][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.049668][ T5954] usb 5-1: Product: syz [ 1111.068395][ T5954] usb 5-1: Manufacturer: syz [ 1111.087597][ T5954] usb 5-1: SerialNumber: syz [ 1111.147277][ T5954] usb 5-1: config 0 descriptor?? [ 1111.922840][ T5954] usb 5-1: probing VID:PID(0424:012C) [ 1111.925852][T15394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.949665][ T5954] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 1111.976957][ T5954] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1112.030458][T15403] support for cryptoloop has been removed. Use dm-crypt instead. [ 1112.042915][ T5954] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 1112.080266][ T5954] usb 5-1: USB disconnect, device number 79 [ 1112.258475][T15409] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1113.517754][T15426] netlink: 'syz.3.2539': attribute type 4 has an invalid length. [ 1113.525805][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 1115.560317][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1115.919791][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1115.949802][ T9] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 1115.958086][ T9] usb 4-1: config 0 has no interface number 0 [ 1115.980526][ T9] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=68.96 [ 1116.000758][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.027333][ T9] usb 4-1: Product: syz [ 1116.039848][ T9] usb 4-1: Manufacturer: syz [ 1116.052281][ T9] usb 4-1: SerialNumber: syz [ 1116.077141][ T9] usb 4-1: config 0 descriptor?? [ 1116.098305][T15442] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1116.101022][ T9] powermate 4-1:0.108: probe with driver powermate failed with error -5 [ 1116.127537][T15442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1116.142353][T15442] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1117.218450][T15451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2541'. [ 1117.689073][ T9381] usb 4-1: USB disconnect, device number 70 [ 1117.884137][ T5954] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1118.066182][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 1118.104947][ T5954] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1118.124127][ T5954] usb 5-1: config 0 has no interface number 0 [ 1118.154510][ T5954] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1118.178267][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.219568][ T5954] usb 5-1: Product: syz [ 1118.223901][ T5954] usb 5-1: Manufacturer: syz [ 1118.241177][ T5954] usb 5-1: SerialNumber: syz [ 1118.270131][ T5954] usb 5-1: config 0 descriptor?? [ 1118.547186][ T5954] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1118.553668][ T5954] usb 5-1: Failed to initialize entity for entity 6 [ 1118.589603][ T5954] usb 5-1: Failed to register entities (-22). [ 1118.765389][ T9381] usb 5-1: USB disconnect, device number 80 [ 1118.911153][T15472] syz.3.2552: attempt to access beyond end of device [ 1118.911153][T15472] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1119.008187][T15472] SQUASHFS error: Failed to read block 0x0: -5 [ 1119.054401][T15472] unable to read squashfs_super_block [ 1119.270743][ T5954] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1119.676806][ T5954] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.711943][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.274087][ T5954] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.354052][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.407291][ T5954] usb 2-1: Product: syz [ 1120.417674][ T5954] usb 2-1: Manufacturer: syz [ 1120.422323][ T5954] usb 2-1: SerialNumber: syz [ 1120.860895][ T5954] usb 2-1: unknown interface protocol 0xf8, assuming v1 [ 1120.928422][ T5954] usb 2-1: cannot find UAC_HEADER [ 1121.259235][ T30] audit: type=1326 audit(1755901796.345:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1121.556978][ T5954] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1121.665847][ T30] audit: type=1326 audit(1755901796.354:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1121.717699][ T5954] usb 2-1: USB disconnect, device number 62 [ 1122.272763][ T30] audit: type=1326 audit(1755901796.373:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1122.405759][ T30] audit: type=1326 audit(1755901796.383:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1122.544691][ T30] audit: type=1326 audit(1755901796.383:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1122.782465][ T30] audit: type=1326 audit(1755901796.383:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1123.049580][ T30] audit: type=1326 audit(1755901796.383:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1124.772454][ T30] audit: type=1326 audit(1755901796.383:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1124.953932][ T30] audit: type=1326 audit(1755901796.383:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1125.292156][ T30] audit: type=1326 audit(1755901796.383:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15484 comm="syz.2.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8cd18d550 code=0x7ffc0000 [ 1125.639737][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 1126.310498][T15529] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1127.695887][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 1130.244578][T15558] binder: 15557:15558 ioctl 8010671f 200000000480 returned -22 [ 1130.884253][T15562] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1132.332058][T15573] xt_TCPMSS: Only works on TCP SYN packets [ 1132.350580][T15573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2574'. [ 1132.645738][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1133.509277][T15582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 1133.892716][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1133.993142][ T5905] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1134.356418][ T5905] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1134.739327][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.757745][ T5905] usb 2-1: Product: syz [ 1134.761998][ T5905] usb 2-1: Manufacturer: syz [ 1134.768843][ T5905] usb 2-1: SerialNumber: syz [ 1134.816058][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1134.817195][ T5905] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1135.077676][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1135.106559][ T9] usb 4-1: config 0 has no interface number 0 [ 1135.140301][ T5954] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1135.201205][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1135.265120][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.275655][ T9] usb 4-1: Product: syz [ 1135.280479][ T9] usb 4-1: Manufacturer: syz [ 1135.288056][ T9] usb 4-1: SerialNumber: syz [ 1135.363615][ T9] usb 4-1: config 0 descriptor?? [ 1135.692320][ T9] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1135.699262][ T9] usb 4-1: Failed to initialize entity for entity 6 [ 1135.700934][T15585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.713885][ T9] usb 4-1: Failed to register entities (-22). [ 1135.759939][T15585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.898247][ T9] usb 4-1: USB disconnect, device number 71 [ 1136.098186][ C1] sd 0:0:1:0: [sda] tag#7699 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1136.108696][ C1] sd 0:0:1:0: [sda] tag#7699 CDB: Read(6) 08 00 0c 6a 08 48 [ 1137.074630][ T5954] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1137.081906][ T5954] ath9k_htc: Failed to initialize the device [ 1138.956380][ T5954] usb 2-1: ath9k_htc: USB layer deinitialized [ 1139.022355][ T5905] usb 2-1: USB disconnect, device number 63 [ 1139.741321][T15624] xt_hashlimit: max too large, truncated to 1048576 [ 1142.459616][ T5905] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1142.630370][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1143.346364][ T5905] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1143.442835][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1143.442901][ T30] audit: type=1326 audit(1755901817.076:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1143.591606][ T30] audit: type=1326 audit(1755901817.076:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1143.615308][ T30] audit: type=1326 audit(1755901817.085:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1143.720713][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1143.766572][ T30] audit: type=1326 audit(1755901817.085:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1143.793495][ T30] audit: type=1326 audit(1755901817.085:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1143.854651][ T5905] usb usb3-port1: attempt power cycle [ 1143.891305][ T30] audit: type=1326 audit(1755901817.085:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1144.035589][ T30] audit: type=1326 audit(1755901817.085:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1144.233360][ T5905] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1144.251228][ T30] audit: type=1326 audit(1755901817.085:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1144.302630][ T30] audit: type=1326 audit(1755901817.104:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1144.381123][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'. [ 1144.685810][ T5905] usb 3-1: device not accepting address 63, error -71 [ 1144.907845][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1145.270409][ T30] audit: type=1326 audit(1755901817.338:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15651 comm="syz.4.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41a38ebe9 code=0x7ffc0000 [ 1145.567940][T15674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1145.977588][T15678] xt_hashlimit: max too large, truncated to 1048576 [ 1146.332247][T15675] wg2: left allmulticast mode [ 1146.695377][T15685] comedi: No check for data length of config insn id 4095 is implemented [ 1146.704287][T15685] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1146.713888][T15685] comedi: Assuming n=15 is correct [ 1147.504249][ T5905] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1147.684106][ T5905] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1147.719699][ T5905] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1147.745898][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1147.761344][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1147.779075][ T5905] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1147.810102][ T5905] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1147.825159][T15697] veth5: entered promiscuous mode [ 1147.831329][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1147.840527][ T5905] usb 5-1: Product: syz [ 1147.845890][ T5905] usb 5-1: Manufacturer: syz [ 1147.888708][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 1147.894430][ T5905] cdc_wdm 5-1:1.0: skipping garbage [ 1147.928825][ T5905] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1147.939114][ T5905] cdc_wdm 5-1:1.0: Unknown control protocol [ 1147.943714][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1147.969592][T15700] netlink: 'syz.3.2608': attribute type 18 has an invalid length. [ 1148.035932][ T9] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 1148.057806][T15700] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.066497][T15700] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.075458][T15700] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.083863][T15700] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.352836][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1149.143130][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1149.177816][ T9] usb 2-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 1149.202124][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1149.247575][ T9] usb 2-1: string descriptor 0 read error: -22 [ 1149.259916][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 1149.274778][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.415071][T15700] netlink: 'syz.3.2608': attribute type 18 has an invalid length. [ 1149.730682][T15698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1150.208967][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input32 [ 1150.415473][ T5919] usb 5-1: USB disconnect, device number 81 [ 1150.437438][ T5954] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1150.462979][T15702] syzkaller1: entered promiscuous mode [ 1150.473399][T15702] syzkaller1: entered allmulticast mode [ 1150.664885][T15716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2611'. [ 1151.181659][ T5191] bcm5974 2-1:1.0: could not read from device [ 1151.187975][ T9] usb 2-1: USB disconnect, device number 64 [ 1151.377368][ T5954] usb 4-1: device descriptor read/all, error -71 [ 1151.909446][T15722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1152.121570][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1152.121584][ T30] audit: type=1326 audit(1755901825.224:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15730 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee58ebe9 code=0x7ffc0000 [ 1152.292629][T15733] xt_hashlimit: max too large, truncated to 1048576 [ 1152.896131][ T30] audit: type=1326 audit(1755901825.224:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15730 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fee58ebe9 code=0x7ffc0000 [ 1153.016297][ T30] audit: type=1326 audit(1755901825.234:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15730 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fee58ebe9 code=0x7ffc0000 [ 1153.061199][ T30] audit: type=1326 audit(1755901825.982:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.096340][ T30] audit: type=1326 audit(1755901825.982:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.196654][ T30] audit: type=1326 audit(1755901825.982:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.233133][ T30] audit: type=1326 audit(1755901825.982:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.537631][ T30] audit: type=1326 audit(1755901825.982:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.560278][ T30] audit: type=1326 audit(1755901825.982:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1153.582271][ T30] audit: type=1326 audit(1755901825.982:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15726 comm="syz.0.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x7ffc0000 [ 1154.121035][ T5905] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 1154.986801][ T5905] usb 5-1: string descriptor 0 read error: -22 [ 1155.004117][ T5905] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1155.215733][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.286855][ T5905] usb 5-1: config 0 descriptor?? [ 1155.607594][ T5905] usbtest 5-1:0.0: FX2 device [ 1155.612352][ T5905] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1155.762817][T15764] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2624'. [ 1157.003952][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 1157.926282][ T9] delete_channel: no stack [ 1158.171233][ T5905] usb 5-1: USB disconnect, device number 82 [ 1158.572842][T15789] xt_hashlimit: max too large, truncated to 1048576 [ 1159.509251][T14631] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1159.757479][T14631] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1159.784315][T14631] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.820910][T14631] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1159.995702][T14631] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1161.268719][T14631] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1161.335348][T14631] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1161.365436][T14631] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1161.482557][T15818] xt_connbytes: Forcing CT accounting to be enabled [ 1161.489796][T15818] set match dimension is over the limit! [ 1161.539055][T14631] usb 1-1: Product: syz [ 1161.555895][T14631] usb 1-1: Manufacturer: syz [ 1161.737997][T14631] usb 1-1: can't set config #1, error -71 [ 1161.832023][T14631] usb 1-1: USB disconnect, device number 53 [ 1162.316387][T14631] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1162.522956][T14631] usb 1-1: device descriptor read/64, error -71 [ 1163.443159][T14631] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1163.603704][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1163.803282][T14631] usb 1-1: device descriptor read/64, error -71 [ 1163.960425][T14631] usb usb1-port1: attempt power cycle [ 1165.108372][T14631] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1165.255811][T14631] usb 1-1: device descriptor read/8, error -71 [ 1165.287889][T15856] netlink: 'syz.1.2649': attribute type 10 has an invalid length. [ 1165.725466][ T5905] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1166.052023][ T5905] usb 5-1: config 1 has an invalid interface number: 228 but max is 2 [ 1166.222062][ T5905] usb 5-1: config 1 has no interface number 1 [ 1166.242906][ T5905] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1166.333110][ T5905] usb 5-1: config 1 interface 228 has no altsetting 0 [ 1166.365072][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.393642][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.448356][ T5905] usb 5-1: Product: syz [ 1166.467272][ T5905] usb 5-1: Manufacturer: syz [ 1166.470605][T15870] netlink: 'syz.1.2652': attribute type 64 has an invalid length. [ 1166.493724][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2652'. [ 1166.493868][ T5905] usb 5-1: SerialNumber: syz [ 1166.646944][T15874] sctp: [Deprecated]: syz.0.2654 (pid 15874) Use of int in maxseg socket option. [ 1166.646944][T15874] Use struct sctp_assoc_value instead [ 1166.717461][T14631] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1166.830493][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.840529][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.849250][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.858024][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.866611][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.875438][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.883952][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.893111][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.901647][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.910322][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.918931][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.928468][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.936976][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.947072][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1166.958310][T15877] overlay: filesystem on ./bus not supported as upperdir [ 1167.006145][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'. [ 1167.182199][ T5905] usb 5-1: USB disconnect, device number 83 [ 1167.204610][T14631] usb 3-1: Using ep0 maxpacket: 8 [ 1167.216953][T14631] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1167.225286][T14631] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1167.246540][T14631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1167.293218][T14631] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1167.309079][T14631] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1167.323097][T14631] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1167.333964][T14631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.389889][T15886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2658'. [ 1167.720206][T14631] usb 3-1: GET_CAPABILITIES returned 0 [ 1167.735554][T14631] usbtmc 3-1:16.0: can't read capabilities [ 1168.544248][ T5919] usb 3-1: USB disconnect, device number 65 [ 1171.159419][T15913] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2665'. [ 1171.444730][T15918] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2667'. [ 1171.602048][T15926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.611060][T15926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.708914][T15926] overlayfs: failed to resolve './file0': -2 [ 1171.784602][T15931] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1171.865160][ T5905] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1172.574952][T15929] loop8: detected capacity change from 0 to 1 [ 1172.605964][T15929] Dev loop8: unable to read RDB block 1 [ 1172.627350][T15929] loop8: unable to read partition table [ 1172.642333][T15929] loop8: partition table beyond EOD, truncated [ 1172.652371][T15929] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1172.661927][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1172.806094][T14631] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1172.850274][T15944] tipc: Started in network mode [ 1172.855502][T15944] tipc: Node identity 0245782f3c71, cluster identity 4711 [ 1172.866848][T15944] tipc: Enabled bearer , priority 0 [ 1172.875205][T15944] syzkaller0: entered promiscuous mode [ 1172.886441][T15944] syzkaller0: entered allmulticast mode [ 1172.911387][T15944] syzkaller0: mtu greater than device maximum [ 1172.927690][ T5905] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1172.941246][T15943] tipc: Resetting bearer [ 1172.977892][T14631] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1173.017963][T14631] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.031415][T14631] usb 2-1: config 0 descriptor?? [ 1173.041502][T14631] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1173.095121][ T5905] usb 3-1: device descriptor read/64, error -71 [ 1173.145778][T15943] tipc: Disabling bearer [ 1173.215273][ T5905] usb usb3-port1: attempt power cycle [ 1174.293066][T15959] vivid-000: disconnect [ 1174.388937][ T5905] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1174.763575][T15950] vivid-000: reconnect [ 1174.868157][ T5905] usb 3-1: device descriptor read/8, error -71 [ 1175.223567][T14631] usb 2-1: USB disconnect, device number 65 [ 1176.874970][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1176.874989][ T30] audit: type=1326 audit(1755901848.388:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15975 comm="syz.0.2684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc72278ebe9 code=0x0 [ 1177.310363][ T5905] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1178.472222][ T5905] usb 2-1: device descriptor read/64, error -71 [ 1178.546431][ T5954] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1178.760197][ T5905] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1178.774091][ T5954] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1178.788260][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.801253][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.817668][ T5954] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1178.840638][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1178.850734][ T5954] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1178.863809][ T5954] usb 5-1: Manufacturer: syz [ 1178.872863][ T5954] usb 5-1: config 0 descriptor?? [ 1178.920359][ T5905] usb 2-1: device descriptor read/64, error -71 [ 1179.113088][ T5905] usb usb2-port1: attempt power cycle [ 1179.119834][ T5919] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1179.294719][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 1179.304116][ T5919] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1179.317885][ T5919] usb 1-1: config 179 has no interface number 0 [ 1179.328182][ T5919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1179.343528][ T5919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1179.356762][ T5919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1179.372640][ T5919] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1179.373844][ T5954] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 1179.384891][ T5919] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1179.405297][ T5919] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1179.414663][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.416787][ T5954] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1179.436679][T16008] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1179.476051][ T5905] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1179.500975][ T5905] usb 2-1: device descriptor read/8, error -71 [ 1179.556785][T16017] lo speed is unknown, defaulting to 1000 [ 1179.726426][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.766069][ T5905] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1179.786276][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.808305][ T5905] usb 2-1: device descriptor read/8, error -71 [ 1179.925263][ T5905] usb usb2-port1: unable to enumerate USB device [ 1181.315256][ T7617] usb 1-1: USB disconnect, device number 58 [ 1181.315325][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1181.329561][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1181.445100][ T5919] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 1182.088306][T16049] sp0: Synchronizing with TNC [ 1182.125422][ T5919] usb 5-1: device descriptor read/64, error -71 [ 1182.415786][ T5858] Bluetooth: hci4: command 0x0405 tx timeout [ 1182.565784][ T5919] usb 5-1: reset high-speed USB device number 84 using dummy_hcd [ 1182.814053][T16061] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1183.051473][ T5919] usb 5-1: device firmware changed [ 1183.067905][ T9] usb 5-1: USB disconnect, device number 84 [ 1183.390044][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1184.438931][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.510431][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1184.530355][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.576640][ T9] usb 5-1: config 0 descriptor?? [ 1184.612403][T16072] 9pnet_virtio: no channels available for device syz [ 1185.183851][ T9] elecom 0003:056E:00FE.0015: item fetching failed at offset 0/3 [ 1185.230267][ T9] elecom 0003:056E:00FE.0015: probe with driver elecom failed with error -22 [ 1185.393044][T16094] netlink: 'syz.2.2714': attribute type 6 has an invalid length. [ 1185.478977][T16094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1185.698882][T16039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.732838][T16039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.745944][ T5954] usb 5-1: USB disconnect, device number 85 [ 1186.150662][ T30] audit: type=1326 audit(1755901857.051:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.289279][ T30] audit: type=1326 audit(1755901857.060:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.376281][ T30] audit: type=1326 audit(1755901857.116:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.483696][ T30] audit: type=1326 audit(1755901857.116:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.584394][ T30] audit: type=1326 audit(1755901857.116:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.615411][ T30] audit: type=1326 audit(1755901857.116:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.643726][T16105] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2717'. [ 1186.673210][T16105] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2717'. [ 1186.753147][ T30] audit: type=1326 audit(1755901857.116:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1186.815764][T16109] Can't find a SQUASHFS superblock on nullb0 [ 1186.823803][T16108] /dev/nullb0: Can't open blockdev [ 1186.878862][ T30] audit: type=1326 audit(1755901857.116:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1187.028493][T16113] comedi: No check for data length of config insn id 4095 is implemented [ 1187.038136][T16113] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1187.049464][T16113] comedi: Assuming n=15 is correct [ 1187.206552][ T30] audit: type=1326 audit(1755901857.116:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1187.556164][ T30] audit: type=1326 audit(1755901857.116:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16092 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1187.818936][T16124] netlink: 'syz.4.2723': attribute type 2 has an invalid length. [ 1187.838108][T16123] netlink: 'syz.3.2720': attribute type 12 has an invalid length. [ 1187.906052][T16126] netlink: 'syz.4.2723': attribute type 83 has an invalid length. [ 1187.919789][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1187.955983][T16123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2720'. [ 1187.997883][T16129] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1189.005587][T16124] bridge: entered promiscuous mode [ 1189.174472][T16137] sp0: Synchronizing with TNC [ 1189.328072][T16141] lo speed is unknown, defaulting to 1000 [ 1189.432717][T16146] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1189.542766][T16144] lo speed is unknown, defaulting to 1000 [ 1189.967860][T16148] smc: net device bond0 applied user defined pnetid SYZ2 [ 1190.011868][T16153] netlink: 'syz.4.2729': attribute type 29 has an invalid length. [ 1190.465090][T16154] netlink: 'syz.4.2729': attribute type 29 has an invalid length. [ 1191.630186][ T5954] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1191.709284][T16176] netlink: 'syz.2.2734': attribute type 21 has an invalid length. [ 1191.717493][T16176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1191.775996][T16176] netlink: 'syz.2.2734': attribute type 5 has an invalid length. [ 1191.806009][T16176] netlink: 'syz.2.2734': attribute type 6 has an invalid length. [ 1191.826342][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 1191.836570][T16176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1191.842474][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.884094][ T5954] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1191.904866][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.929351][ T5954] usb 2-1: Product: syz [ 1191.936663][ T5954] usb 2-1: Manufacturer: syz [ 1191.957704][ T5954] usb 2-1: SerialNumber: syz [ 1191.994805][ T5954] usb 2-1: config 0 descriptor?? [ 1192.052828][ T5954] usb 2-1: bad CDC descriptors [ 1192.072674][ T5954] usb 2-1: unsupported MDLM descriptors [ 1193.412777][T16201] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=640 (1280 ns) > initial count (34 ns). Using initial count to start timer. [ 1194.753663][ T9] usb 2-1: USB disconnect, device number 70 [ 1195.165567][T16218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1195.187712][T16218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1195.198666][T16218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.211521][T16218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1195.422360][T16233] ubi: mtd0 is already attached to ubi31 [ 1195.670295][ T5954] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1197.009611][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 1197.181330][ T5954] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1197.202532][ T5954] usb 3-1: config 0 has no interface number 0 [ 1197.210277][ T5954] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1197.220801][ T5954] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 144 [ 1197.235715][ T5954] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1197.251306][T15575] Bluetooth: hci1: command 0x0c1a tx timeout [ 1197.262699][ T5954] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1197.287527][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.338006][ T5954] usb 3-1: Product: syz [ 1197.342585][ T5954] usb 3-1: Manufacturer: syz [ 1197.365538][ T5954] usb 3-1: SerialNumber: syz [ 1197.378606][ T5954] usb 3-1: config 0 descriptor?? [ 1197.383672][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1197.389846][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 1197.395897][T15575] Bluetooth: hci4: command 0x0405 tx timeout [ 1197.402442][ T7617] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1197.421240][T16236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.434102][T16236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.611216][ T7617] usb 5-1: Using ep0 maxpacket: 16 [ 1197.639668][ T7617] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 1197.659511][ T7617] usb 5-1: config 8 has no interface number 0 [ 1197.676610][ T7617] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1197.699430][ T7617] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1197.700298][T16236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.750741][ T7617] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1197.772612][T16236] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1197.790162][ T7617] usb 5-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 1197.822122][ T7617] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1197.884824][ T7617] usb 5-1: config 8 interface 206 has no altsetting 0 [ 1197.911275][ T7617] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1197.942333][ T7617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.967261][ T7617] usb 5-1: Product: syz [ 1197.979306][ T7617] usb 5-1: Manufacturer: syz [ 1197.984017][ T7617] usb 5-1: SerialNumber: syz [ 1198.045953][T16247] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1198.286493][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.355085][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.022690][ T5954] Error reading MAC address [ 1199.030416][T16255] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1199.037725][T16255] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1199.074016][ T7617] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 1199.104970][ T7617] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1199.154372][ T7617] usb 5-1: USB disconnect, device number 86 [ 1199.208021][ T7617] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1199.233097][ T7617] garmin_gps 5-1:8.206: device disconnected [ 1200.305444][T16266] comedi: No check for data length of config insn id 4095 is implemented [ 1200.314246][T16266] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 1200.324982][T16266] comedi: Assuming n=15 is correct [ 1200.438185][ T5954] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1200.628290][ T5954] usb 3-1: USB disconnect, device number 70 [ 1200.952625][T16268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2756'. [ 1201.397092][T16284] can0: slcan on pty24. [ 1202.500783][ T5954] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1202.889881][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1202.901581][ T5954] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1202.903702][ T5919] libceph: connect (1)[c::]:6789 error -22 [ 1202.917691][ T5954] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1202.937481][ T5954] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1202.958031][ T5954] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1202.978566][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.024162][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 1203.040598][ T5954] usb 2-1: Product: syz [ 1203.058453][T16307] ceph: No mds server is up or the cluster is laggy [ 1203.108912][ T5954] usb 2-1: Manufacturer: syz [ 1203.259857][ T5954] usb 2-1: SerialNumber: syz [ 1203.340508][T16274] can0 (unregistered): slcan off pty24. [ 1203.381299][T16303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1203.410729][ T5954] cdc_mbim 2-1:1.0: skipping garbage [ 1203.633524][T16317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.780474][T16303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1203.805390][T16303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1204.108500][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.122297][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.180763][T16325] tipc: Started in network mode [ 1204.211694][T16325] tipc: Node identity f2f5c3f0c349, cluster identity 4711 [ 1204.271369][T16325] tipc: Enabled bearer , priority 0 [ 1204.297006][ T5919] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1204.321165][T16326] syzkaller0: entered promiscuous mode [ 1204.339428][T16326] syzkaller0: entered allmulticast mode [ 1204.451219][T16326] tipc: Resetting bearer [ 1204.530842][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.611170][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1204.643658][T16326] tipc: Disabling bearer [ 1204.662021][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.708722][ T5919] usb 4-1: config 0 descriptor?? [ 1204.750402][ T5954] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 1204.763271][ T5954] cdc_mbim 2-1:1.0: bind() failure [ 1204.777656][ T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1204.783171][ T5954] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1204.803763][ T5954] cdc_ncm 2-1:1.1: bind() failure [ 1204.831913][ T5954] usb 2-1: USB disconnect, device number 71 [ 1204.948886][ T9] usb 5-1: device descriptor read/64, error -71 [ 1205.005962][T16344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2774'. [ 1205.173539][T16319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.214738][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.224001][T16319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.254776][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1205.298970][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.457019][ T9] usb 5-1: device descriptor read/64, error -71 [ 1205.612228][ T9] usb usb5-port1: attempt power cycle [ 1206.876436][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1206.916419][ T9] usb 5-1: device descriptor read/8, error -71 [ 1207.021696][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 1207.033071][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1207.050278][ T5919] usb 4-1: USB disconnect, device number 74 [ 1207.132138][T16368] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2781'. [ 1207.193489][ T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1207.449912][ T9] usb 5-1: device descriptor read/8, error -71 [ 1207.781422][T16362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1207.793164][T16362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1207.828838][T16362] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1207.835503][T16362] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1207.856614][ T9] usb usb5-port1: unable to enumerate USB device [ 1208.540250][ T5919] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1208.704083][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 1208.713855][ T5919] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 1208.723166][ T5919] usb 4-1: config 0 has no interface number 0 [ 1208.729523][ T5919] usb 4-1: config 0 interface 96 has no altsetting 0 [ 1208.738905][ T5919] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 1208.748334][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.756849][ T5919] usb 4-1: Product: syz [ 1208.762234][ T5919] usb 4-1: Manufacturer: syz [ 1208.767418][ T5919] usb 4-1: SerialNumber: syz [ 1208.774346][ T5919] usb 4-1: config 0 descriptor?? [ 1208.781782][ T5919] legousbtower 4-1:0.96: interrupt endpoints not found [ 1208.788838][ T9] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1209.097008][T14631] usb 4-1: USB disconnect, device number 75 [ 1209.177572][ T9] usb 2-1: config 0 has an invalid interface number: 138 but max is 0 [ 1209.186121][ T9] usb 2-1: config 0 has no interface number 0 [ 1209.192426][ T9] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 1209.204099][ T9] usb 2-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87 [ 1209.217128][ T9] usb 2-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1209.227256][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66 [ 1209.317586][T16408] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2794'. [ 1209.327124][T15575] Bluetooth: hci1: command 0x0c1a tx timeout [ 1209.342318][ T5954] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1209.528153][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1209.640936][ T5954] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1209.763111][ T5954] usb 1-1: config 7 has an invalid interface number: 79 but max is 0 [ 1209.869905][ T5954] usb 1-1: config 7 has no interface number 0 [ 1209.876122][ T5954] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1209.894780][ T5954] usb 1-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 1209.907028][ T5954] usb 1-1: config 7 interface 79 has no altsetting 0 [ 1209.923700][ T5954] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 1209.937525][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.945887][ T5954] usb 1-1: Product: syz [ 1209.950111][ T5954] usb 1-1: Manufacturer: syz [ 1209.959691][T15575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1209.967833][ T5954] usb 1-1: SerialNumber: syz [ 1209.984059][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.012757][ T9] usb 2-1: config 0 descriptor?? [ 1210.037021][ T5858] Bluetooth: hci3: command 0x0c1a tx timeout [ 1210.043214][T15575] Bluetooth: hci4: command 0x0405 tx timeout [ 1210.237954][T16405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.242963][ T9] usb 2-1: string descriptor 0 read error: -71 [ 1210.332823][T16417] netlink: 'syz.2.2797': attribute type 6 has an invalid length. [ 1210.352747][T16417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2797'. [ 1210.534372][ T9] usbtest 2-1:0.138: couldn't get endpoints, -22 [ 1210.543483][ T9] usbtest 2-1:0.138: probe with driver usbtest failed with error -22 [ 1210.732133][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1210.732199][ T30] audit: type=1326 audit(1755901879.905:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1210.772983][ T9] usb 2-1: USB disconnect, device number 72 [ 1210.898790][T16405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.969029][ T30] audit: type=1326 audit(1755901879.905:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1211.002237][ T5954] usb 1-1: USB disconnect, device number 59 [ 1211.002262][ T30] audit: type=1326 audit(1755901879.905:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1211.038314][ T30] audit: type=1326 audit(1755901880.317:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1211.067969][ T30] audit: type=1326 audit(1755901880.317:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16415 comm="syz.2.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8cd18ebe9 code=0x7ffc0000 [ 1211.213198][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2798'. [ 1211.900346][T16431] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2799' sets config #1 [ 1213.089487][T16444] lo speed is unknown, defaulting to 1000 [ 1213.393260][ T5820] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1213.578067][ T5820] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1213.601590][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1213.624211][ T5820] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1213.813530][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1214.307552][ T5820] usb 5-1: Product: syz [ 1214.336698][ T5820] usb 5-1: Manufacturer: syz [ 1214.362350][ T5820] usb 5-1: SerialNumber: syz [ 1214.444982][ T5820] usb 5-1: config 0 descriptor?? [ 1214.672329][ T5820] usb 5-1: selecting invalid altsetting 0 [ 1215.930758][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 1216.162518][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2813'. [ 1217.013751][ T5954] usb 5-1: USB disconnect, device number 91 [ 1218.026910][ T5919] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1218.410100][ T5820] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1218.534866][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 1218.553005][ T5919] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1218.562454][ T5919] usb 2-1: config 0 has no interface number 0 [ 1218.593680][ T5919] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1218.619157][ T5919] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1218.650098][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.658517][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1218.701219][ T5919] usb 2-1: Product: syz [ 1218.705482][ T5919] usb 2-1: Manufacturer: syz [ 1218.722781][ T5919] usb 2-1: SerialNumber: syz [ 1218.744932][ T5919] usb 2-1: config 0 descriptor?? [ 1218.941053][ T5820] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1219.090601][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1219.220588][ T5820] usb usb3-port1: attempt power cycle [ 1219.593300][ T5820] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1219.629329][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1219.913941][ T5820] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1219.948154][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1220.074659][ T5820] usb usb3-port1: unable to enumerate USB device [ 1220.963830][ T5820] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1221.494601][ T5919] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 1221.504683][ T5919] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1221.516616][ T5919] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1221.525857][ T5919] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1221.540965][ T5820] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1221.565838][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1221.595339][ T5820] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1221.621475][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1221.635496][ T5919] usb 2-1: USB disconnect, device number 73 [ 1221.651595][ T5820] usb 5-1: Product: syz [ 1221.683172][ T5820] usb 5-1: Manufacturer: syz [ 1221.687934][ T5820] usb 5-1: SerialNumber: syz [ 1221.714857][T16544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.724635][ T5820] usb 5-1: config 0 descriptor?? [ 1221.758751][ T5820] usb 5-1: selecting invalid altsetting 0 [ 1221.773987][T16544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.995605][T16554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'. [ 1222.073214][T16557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2835'. [ 1222.160188][T16557] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 1222.335224][T16554] nbd: socks must be embedded in a SOCK_ITEM attr [ 1222.457699][ T9] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1223.187677][ T6274] [ 1223.190070][ T6274] ====================================================== [ 1223.197114][ T6274] WARNING: possible circular locking dependency detected [ 1223.204149][ T6274] 6.16.0-syzkaller #0 Not tainted [ 1223.209281][ T6274] ------------------------------------------------------ [ 1223.216408][ T6274] kworker/u8:10/6274 is trying to acquire lock: [ 1223.222662][ T6274] ffff88807c972358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 1223.231956][ T6274] [ 1223.231956][ T6274] but task is already holding lock: [ 1223.239354][ T6274] ffff88807c2ce988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1223.249069][ T6274] [ 1223.249069][ T6274] which lock already depends on the new lock. [ 1223.249069][ T6274] [ 1223.259963][ T6274] [ 1223.259963][ T6274] the existing dependency chain (in reverse order) is: [ 1223.269012][ T6274] [ 1223.269012][ T6274] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1223.277496][ T6274] lock_acquire+0x120/0x360 [ 1223.282569][ T6274] down_write+0x96/0x1f0 [ 1223.287392][ T6274] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1223.293676][ T6274] nbd_start_device+0x16c/0xac0 [ 1223.299085][ T6274] nbd_ioctl+0x636/0xeb0 [ 1223.303891][ T6274] blkdev_ioctl+0x5a8/0x6d0 [ 1223.308966][ T6274] __se_sys_ioctl+0xfc/0x170 [ 1223.314139][ T6274] do_syscall_64+0xfa/0x3b0 [ 1223.319224][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.325672][ T6274] [ 1223.325672][ T6274] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 1223.333537][ T6274] lock_acquire+0x120/0x360 [ 1223.338623][ T6274] __mutex_lock+0x182/0xe80 [ 1223.343686][ T6274] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1223.350153][ T6274] nbd_config_put+0x2c/0x790 [ 1223.355431][ T6274] nbd_release+0xfe/0x140 [ 1223.360335][ T6274] bdev_release+0x533/0x650 [ 1223.365450][ T6274] blkdev_release+0x15/0x20 [ 1223.370601][ T6274] __fput+0x449/0xa70 [ 1223.375153][ T6274] fput_close_sync+0x119/0x200 [ 1223.380569][ T6274] __x64_sys_close+0x7f/0x110 [ 1223.385810][ T6274] do_syscall_64+0xfa/0x3b0 [ 1223.390860][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.397298][ T6274] [ 1223.397298][ T6274] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 1223.405171][ T6274] validate_chain+0xb9b/0x2140 [ 1223.410514][ T6274] __lock_acquire+0xab9/0xd20 [ 1223.415748][ T6274] lock_acquire+0x120/0x360 [ 1223.420947][ T6274] __mutex_lock+0x182/0xe80 [ 1223.426002][ T6274] __del_gendisk+0x129/0x9e0 [ 1223.431145][ T6274] del_gendisk+0xe8/0x160 [ 1223.436024][ T6274] nbd_dev_remove_work+0x47/0xe0 [ 1223.441548][ T6274] process_scheduled_works+0xade/0x17b0 [ 1223.447650][ T6274] worker_thread+0x8a0/0xda0 [ 1223.452070][ T5954] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1223.452773][ T6274] kthread+0x70e/0x8a0 [ 1223.464935][ T6274] ret_from_fork+0x3fc/0x770 [ 1223.470160][ T6274] ret_from_fork_asm+0x1a/0x30 [ 1223.475482][ T6274] [ 1223.475482][ T6274] other info that might help us debug this: [ 1223.475482][ T6274] [ 1223.485814][ T6274] Chain exists of: [ 1223.485814][ T6274] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 1223.485814][ T6274] [ 1223.500111][ T6274] Possible unsafe locking scenario: [ 1223.500111][ T6274] [ 1223.507574][ T6274] CPU0 CPU1 [ 1223.512984][ T6274] ---- ---- [ 1223.518403][ T6274] rlock(&set->update_nr_hwq_lock); [ 1223.523735][ T6274] lock(&nbd->config_lock); [ 1223.530893][ T6274] lock(&set->update_nr_hwq_lock); [ 1223.538683][ T6274] lock(&disk->open_mutex); [ 1223.543306][ T6274] [ 1223.543306][ T6274] *** DEADLOCK *** [ 1223.543306][ T6274] [ 1223.551476][ T6274] 3 locks held by kworker/u8:10/6274: [ 1223.556878][ T6274] #0: ffff888142fe8148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1223.568009][ T6274] #1: ffffc9000ea87bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1223.580346][ T6274] #2: ffff88807c2ce988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1223.590389][ T6274] [ 1223.590389][ T6274] stack backtrace: [ 1223.596285][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1223.596305][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1223.596317][ T6274] Workqueue: nbd-del nbd_dev_remove_work [ 1223.596340][ T6274] Call Trace: [ 1223.596346][ T6274] [ 1223.596352][ T6274] dump_stack_lvl+0x189/0x250 [ 1223.596373][ T6274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1223.596389][ T6274] ? __pfx__printk+0x10/0x10 [ 1223.596409][ T6274] ? print_lock_name+0xde/0x100 [ 1223.596427][ T6274] print_circular_bug+0x2ee/0x310 [ 1223.596447][ T6274] check_noncircular+0x134/0x160 [ 1223.596466][ T6274] validate_chain+0xb9b/0x2140 [ 1223.596485][ T6274] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1223.596506][ T6274] ? look_up_lock_class+0x74/0x170 [ 1223.596522][ T6274] ? register_lock_class+0x51/0x320 [ 1223.596546][ T6274] __lock_acquire+0xab9/0xd20 [ 1223.596562][ T6274] ? __del_gendisk+0x129/0x9e0 [ 1223.596580][ T6274] lock_acquire+0x120/0x360 [ 1223.596593][ T6274] ? __del_gendisk+0x129/0x9e0 [ 1223.596613][ T6274] ? check_path+0x21/0x40 [ 1223.596630][ T6274] __mutex_lock+0x182/0xe80 [ 1223.596646][ T6274] ? __del_gendisk+0x129/0x9e0 [ 1223.596667][ T6274] ? __del_gendisk+0x129/0x9e0 [ 1223.596685][ T6274] ? __pfx___mutex_lock+0x10/0x10 [ 1223.596701][ T6274] ? __pfx___might_resched+0x10/0x10 [ 1223.596720][ T6274] ? __lock_acquire+0xab9/0xd20 [ 1223.596733][ T6274] ? disk_del_events+0xb5/0x210 [ 1223.596753][ T6274] ? __del_gendisk+0xc1/0x9e0 [ 1223.596771][ T6274] __del_gendisk+0x129/0x9e0 [ 1223.596790][ T6274] ? del_gendisk+0xe0/0x160 [ 1223.596809][ T6274] ? __pfx___del_gendisk+0x10/0x10 [ 1223.596829][ T6274] ? down_read+0x1ad/0x2e0 [ 1223.596847][ T6274] del_gendisk+0xe8/0x160 [ 1223.596866][ T6274] nbd_dev_remove_work+0x47/0xe0 [ 1223.596883][ T6274] ? process_scheduled_works+0x9ef/0x17b0 [ 1223.596899][ T6274] process_scheduled_works+0xade/0x17b0 [ 1223.596924][ T6274] ? __pfx_process_scheduled_works+0x10/0x10 [ 1223.596954][ T6274] worker_thread+0x8a0/0xda0 [ 1223.596979][ T6274] kthread+0x70e/0x8a0 [ 1223.596999][ T6274] ? __pfx_worker_thread+0x10/0x10 [ 1223.597014][ T6274] ? __pfx_kthread+0x10/0x10 [ 1223.597033][ T6274] ? _raw_spin_unlock_irq+0x23/0x50 [ 1223.597046][ T6274] ? lockdep_hardirqs_on+0x9c/0x150 [ 1223.597060][ T6274] ? __pfx_kthread+0x10/0x10 [ 1223.597078][ T6274] ret_from_fork+0x3fc/0x770 [ 1223.597094][ T6274] ? __pfx_ret_from_fork+0x10/0x10 [ 1223.597109][ T6274] ? __switch_to_asm+0x39/0x70 [ 1223.597126][ T6274] ? __switch_to_asm+0x33/0x70 [ 1223.597143][ T6274] ? __pfx_kthread+0x10/0x10 [ 1223.597162][ T6274] ret_from_fork_asm+0x1a/0x30 [ 1223.597186][ T6274] [ 1223.913064][ T5954] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1223.925972][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.935198][ T5954] usb 1-1: config 0 descriptor?? [ 1223.997016][ T9] usb 2-1: device descriptor read/64, error -71 [ 1224.156919][ T5954] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1224.253923][ T9] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1224.304704][T14631] usb 5-1: USB disconnect, device number 92 [ 1224.372573][ T5954] [drm:udl_init] *ERROR* Selecting channel failed [ 1224.382500][ T5954] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1224.389222][ T5954] [drm] Initialized udl on minor 2 [ 1224.395067][ T5954] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1224.403273][ T9] usb 2-1: device descriptor read/64, error -71 [ 1224.403625][ T5954] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1224.417803][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1224.425820][ T5905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1224.442221][ T5954] usb 1-1: USB disconnect, device number 60 [ 1224.532520][ T9] usb usb2-port1: attempt power cycle [ 1224.894933][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1224.919581][ T9] usb 2-1: device descriptor read/8, error -71 [ 1225.173093][ T9] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1225.205282][ T9] usb 2-1: device descriptor read/8, error -71 [ 1225.323374][ T9] usb usb2-port1: unable to enumerate USB device