last executing test programs: 2m13.974541562s ago: executing program 4 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2m13.805941244s ago: executing program 4 (id=1490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2m13.554007087s ago: executing program 4 (id=1493): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$kcm(0xa, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/188, 0xbc) 2m12.852419808s ago: executing program 4 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m12.720179676s ago: executing program 4 (id=1505): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000100)='nfs4\x00', 0x1) syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x208a00) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\xa8n\x91\x9c\xd1\xc0\x02n\xd6\xecB\xc7\xae\xe4\xc3\x80\xa5\xbe\xc6o\xc3\x9f\x8d\xa6@\xab5\xe8\xb2_\xb7\x86\xb2H=)Wv\xd0\xf5\x90\x99\x02\x9e\a\xf3\xb2t)\x88\xc6\x06\xe9z\x0e0~e\xb5D\xba\x00\x00\x00\x00\x00\x00\x00{*\x19\x9et\xa6\xefm\f\xa7k\f\x0eO\xd2\x1d\xd8\x0eyP\b\xd7\x88\x1b\x13lmr\x80B[L6~ Q\xa6\xa5\xae$,\xd7\x18\xb67\xb1?\xadRr\x11m\xd4\x9d\x16\x16D\x13*lcj\xf6u\nF7\xf2\xaf\x04\x1da\xc9\xa9\x1am[\xbb\x8a~\xa9F\x1a\xd3S\xe4Fd', &(0x7f0000002400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r2, @ANYBLOB="000000200000002728c35d2fab6b0000000000000000000000000077947c9c99939b663137a2244c9329d8539f803c9922619585d9d3a32f07e4e808b55300721241f91f04aa69434f90fdb9d208034e1982fe3e4a1dfd8589e940f911b2cd583ec0352bdc5bc600bd705ceeaf16850b32ed3a816638ecb9e4380fa91a2025a4e75280bb0d6c55a393265dad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500002007000000b70000000000000095000000001c7300000024632c0bb67f43788ef59c24f7c88029"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 1m57.387971374s ago: executing program 32 (id=1506): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x400000000003f) r1 = dup(r0) fallocate(r1, 0x11, 0x8000000, 0x200) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000000000000001090224000100000000090400000103000000092100000001220500090501030000000000ded6510803b93a4a973109d9e483632121a0bf659bd3c5d4fde535ca6f60ba10930000000000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2001"], 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r2, @ANYBLOB="000000200000002728c35d2fab6b0000000000000000000000000077947c9c99939b663137a2244c9329d8539f803c9922619585d9d3a32f07e4e808b55300721241f91f04aa69434f90fdb9d208034e1982fe3e4a1dfd8589e940f911b2cd583ec0352bdc5bc600bd705ceeaf16850b32ed3a816638ecb9e4380fa91a2025a4e75280bb0d6c55a393265dad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500002007000000b70000000000000095000000001c7300000024632c0bb67f43788ef59c24f7c88029"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r11, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) 15.074045269s ago: executing program 5 (id=1913): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000002c0)={{r2}, "e899ed633253364935b605999c1b59d65f538b7704a2956d09089207184466d1f51cc49828c5ac6e9ff84b31a8aa1c844b086240a09b6a1ff82d75d3266c786e2481b08d4062f6e2c7a7f39f9e16bae44e91758fd10b2adfc759867dfa55737f20b1713786bb250dfaac2284e78253fb9b335f5f5697de6dc11680893c9a0c123784726f3f8d670b9dc9b40a965bd0f6e003716130009fcd63f67aa3f749058fd39c6378352c960bf48144f766905d93ff89b295ab5fdf7bf0c4a62b73389e1d77b6fca3d5d7eb32d20218294673a7321dd2fcfc38ca915513ee6e6ec3302c8f219d012bf248930f189a91e323c09f7c5bb65b103a2fb097a49636427f379b9b72e10789858d589376139871f18c77c14d0e046cf00dd1e8ff755ad828abd5ca67d444d5d611da053410bb919af41dda4c49fe94266360e115640a70a38f591a39e86bfc597dc29d6ec4c941ef47820ff648579d7672a7964ed0f47df97360f834c05c4ca3de0a5676d46e15f2ad4124fd7a64579e84e85cad07c6a549a374b7a1b47735d389df74662eff01c742d703ecd32d00fb24243010d498a940381c3748adecbd355aa6382cc78978396b1ace75656b837f71fb62e83b7dc947d59782d5a2adbfc71d2860b2ef60d14e8775a55eed0a20b215281bf4e7906e167e59eebfdce03bfa09805be0e7dbaef7ea3aa69a585c69e5c7cf91f4e95d0aa3b39ab19621882be0a74b041bbe2a9cb46cefcfe4d1e0a7223a128baa33f62fc297e89018529c1e062137b428642d68d8ec451ba9ae410fb60d9f5cb49015fff3be1a3b2413b112bb45495e6929ffa625be0ec4fe97256c21a46ea9750d27e1c6f6396aa8e4ac89f0acbcdd4c546a9199534abf4cc03761ef394c145f09db8759597e3641c2138d1c4af28755f9386f4f6528bfbf03f518d13ea9d7a2dc02256e40b0fc849c616d62f206ecd8047436bffa1d6bc9bd3dbec860396e92b34484ceadea3b7fe79cf13ea47ff60f0ac0654c9bd132b635020357a68bea7632789d6b5b99ad2ad05d49ad1a20c6e4a9f126c9e67539f1313d113b9ad7e3525a8bd2f7fc790d43fed191967cd2c31239e1c39a00479a3b49b6348bbf223bc9c1e99dd553896685e074b57e0e6ce58dc35d3da36aca0563144ed4e998774ba296d3f199057c67b9abd93458491db8f7467338c0933a76f28024ec416bdceef5a06c7edec15a80a50620aaf97938e5bd0e7e186d3eb88679ad519d96c294bc53a62d923c6e1db29391950e72c93e80251a9a757b7634ca7f40563af07d2c08ec5f69dbfea87f61a82b004e9693dc179c6c1df16cf04fa745dc3ad7e00a8855bccd816eaa1ff3512b250ae09dd3b6b04200c837310fd2e8b6e43e3a7626012cfdd6b00908c05273e72d6bd58d371af118763440df435e868157d0596ed14a319b7c53315fe61dbee7deee736be2d203abdbd3c43d12cbee72ae82500292debbff9002299931831c3de8087d52b320d52a299238254bf9e754900127cba72961cc1e3174bbfc5989e2445048de69f358337e44cadbd3ab17c01514befb27db12a2545017ec5b45d1977bab04938c70f8ac203d21ebcd913e5185ae42e40c05e219b33d41af56ced0d816cc58bfce76bd21800f057f828ac760d5a04b1c1226f3103a1a8e3496b159de315311803adb9631ec068f990c6d7ef8cd9721f2053d5124c44de4e7a65bf88bf1652a849ce7d4aa265e1ac1f4df3f116386f91ae9e815b91d882191b04614aaca715a8569ae56263645006f30801277dc463c14360fbdce1a9ba3818f3fe322e2c5324b75be233510b2132c7c51e67c249db7d3a55064b7ef60a272284d4bd60fa0c0f58288eec6bff54fc46b6439523fec6023dd9d9708a3c6fe94bef823b7b1daaf42ec6e0d0bbe44fb5a30364bbb20558ce3b54d45b3be503cc754e1ef1691a7aa3acdebed4b8318ea1833f6801a4daf36c4b6c839b996be12747534171fc63b2c5051f293a677f1e1ab7a5c31e526ebb6f0361a1954f471a80afcea44723909f9953aca1d398473da226f0ca3d9021d957d5d28d1379e6be451f48d13851977919a2aeafa5fa3dcbb22a02cd5a6dd8ffced19593a7ad7b99b89dfa672d1a771f9c2596a0d2f54930398c57bc654010462d8b1719ab6901143a9ef92283d772adccff04dac29eb0b0894d03785bf5cb9a63cd4cb7af0b67e5c3320ce7d0c86053a8a8a5693657f2792b145100430144a17e7f7af86c476c9fd1017de4c67bd1579983ecfb60d3de4a641f344797b880b48818c1d09895ff0a4e278ee1d29aa94c16eb6b9f82187838e4f9243549e98e2a93c1989eb7d4eadb11c9b50336823cb02eae48cf2634ccfe35d6d5c88a720ee07d47ab3beb1d7ebacde05043e75356fc920e38f4d9799bf4d7cb613aa5a87f80521704c6c72899b5f356740a41f8506b122ed55d5f174bf56b2e232df99335b5c9da00d04ae9de58c11f07005eb72354fcb63d77abb8add391d14a6064871f38e0be94c7a4849e2c79a4a1e59f7a713859cb448a387bc1fab50166e8af6d4991de10c42727076d0f3aeefc9c37725873e4323a975a14fd03f511260e0e0927f1f23729f10b1eda1b842f859bbcea16ecf80954ed5bc0976382d90295528aefa2aafa7fb9dd1a8e0653681d6675c41ba56be3fb0521a3c721c20345f6a42c7616767bf1a70e88129f6b69ddd19633e58d82bc5084faa729d711c81d5a2735483eedf887b9496294a63a15690143a82cf30f44287bf7df6d245dd1450bf5ecbc1537f6d29420ce8d686a15da5293c013233d30c5e97f08a74b4932be75af2cebbca67ea270e6caf8633cce6f952a6d460acae8f33b37b9f7e90066d22552cd6282585e57d2b6e2c32e73507581940516b88c8d50686ffbb240437a7eef85b143d91e2c5857f41f2a1709fde29f3a46d653348cc07a1154d32f293dbc46fa0062174579c5e234d5bea5a1ff8853187528b42788e80cf6444f1397dbebeadbcd3044781f2300565ce4d1f28bfb966cd538bc91afd542489ddb174366d0695c416e7f72b89b9a0099899a53cefb16bf14701ebf1be5280ef0f14db3bc7a10d2dad5640d0da4bccc57470ad88fbcd3d6089ce1b2daf3e88d17acf8b56e6d00b9d45cb50bd124c111e6d9ab5becb327a69f28d2f0938664ac98f762519e5b144c21eab6f4c5cf7dbe59d3c9150e35f507dbdd1a6aef4dd8a5b3b92e4a0296fa17294dc3426614ee48b664b5d950aac988a9ca04809153315c52e79af9e48b2b3a038568cf9144279109b1b5a6b774b0d7d62c65f7e389b76f300495353d2bdc327ffca03d355d0b53ffad943e303e1b0e2d655ecd82e1619ae2b94086ec5fecda37be0962bc508c819470c8c839c17b555d058a1fbc995b8c285799e36964aaf3a66706dd65c6fc49b59d06064ff307dbb4b542a1ad4ff5bf0d9d8eab89ccf92fe7067255e91cf036e91c756d3948270af9c7dd6d51eb008d63bad9d3eb151f6eb5ab37ec3284d1031b1df050d2d4d2c4d579c898f6d64664d908abae91d367541cb5af5ef24a84eccf2852dc2f7fe15821bf7d73454aba24e830f59122585d2a501abb12e2a8873b3a59f343a313eaa2342c5d077ad20cbda5eac2972e6ca0b644cef1fb633573ffd9bb51b0c4472eeb4d36b299957ac3204844fae8653d23ddb392c2e49a54707257a34163a4c24639887ac789306094b54be8be0b106590d860bfcdbd2565a8545e012c910c7de3f1f0e04a96c324b08843d4b4333719473ca93613b678049d7ab63f6197c5f8aee1da09ab939ddfe8511ce4c643c296fd184dcc0acc778f84db6da33f7e23dce57e489b2e0b3de6034485fca451491423f43b4e3fec9062415d6245bd55df7181f4a7624cd7b174dd6ede326167314c31242344ec812490e6dffe636c7aa9a8827bd43b74cb341a4985ee0cdc1f464042cc2d85bc7b280217017be309755e063e65c731dd9606db259ed8331f61a0b3ddbf0ee9383e2c4bf3e3974136af4a56034fef17cf8571c7d20cf74c0ce00bd88340d5f42b886913392d041169f92e5a450faaddfdb22262fa243b75fd53fa9ed97f874bcd2dae1eb95b2a01b21eb5d9ee4a9265405f0056b1fb3bf8fb111c27a7f77769bfdbdaeab5ba49f97b7bb7f7e11d690f2e07302f63dd8f4b749ec3923b1eee8a36e0e0a933e80eb122f681dd951a7dac998dbde91a6784ae3a1bde10a71d3c520dea5bca77a7b54eb4ee12c46980f9b55dec85fbee69b4fc2916ba7a65285bbe4fb2aeadce930bd438a16a3917e5d975f699c11a4ff47d8d1ee647a2c8698246915dd8244132a2637a15577d4b4c940af31e66288f8acc45c6e49a6d74f400ff2e101ae7de40bcd893e2368378a328d7723f1472b0ccfc32ffc872b1aa2ff58e76b1d006b4a1355a183c5ffd30b4f0536770d31348115df9a28c518b84951a65e0e06aa9ae347e3eb9a067d5411dabe453480fbadc5f35ec98e07b568023098460a38484569bb68db9cf583b12e52e39f34556ae1b0e0f44e1d0b8dbd5a4b02be3c85ba0a1cb70c0af196109dbb399a6036751856e7fc0bccc335c12b605da3b59cee3563d7878a13f3689c21297fd76e8d10f1c52bb7c7981fc075a0112b71d6bd5f1236694a91693ff1f696c4f320741dd9286feeb77c2180b38575165b1d4327e2945e5ad97bcfb42b32d111104b041cf43eb68c73f56b4c3297b61769ad3e79370a785e1d0799b96662c621c665dd6df84f846ac731e3fc52e77a7abf81558a6c00b52af3058ad9971053d7e5b6a59aacc299ca2be11696e7ca2c95e3aacce8f72fa24b404677f00929fe14bd6f7fbf7bb804876778d906a5435844ff6d4128f83f3ae63a06c9be3368ea66f4ac919d27b66914dd7c37db5a7db8be8e959c26c688fcb1f1f694e003afdeb8072adee163b55c4ed317e14a9b84a8962ff66c3b1860ad0888182db821d4a5d487b1a9a6a15a551797173c25b5e21c989f1ad42b3cbc4d69cb4f7f549f3e8776a11e514ac0554f0f5e01da557914a784ac968e83286c66f0dac9ac8a9d8cd71cf024b61e05743bd6a5bc1c8d9536a3a4d63129aad99cb832e15f434c797930c6b3be8c07d8f6f013aedf9805600cb44bddaa600757d538b5280bbbf9a0e465d8111febf19b11fffd02c5f3ee53c397ecfc4ecc831df1d5c3f063826c0dbc7ff5d593dbb34b7f274e0f9cb5c196e0783f24af50816df89d1055f1b7fd6edcce8bd177903370234c09a9690350ea4d0ae9bfdb18ae9e93017c6a7efffddb2d8807c4c50caa57fa0a11918c1f5af8bcf92f5f6639e48bfd99a432bfb1e8c7ef958254752bed37c526a06751a6356e8ad6d66dcdbbe1eee6c3118072b331a967116e7c3f4f29951d6c2d5e196d8ae25c99d279605ad705cb72071b69f2706616cfe11e0dcd039b7e5463fba68de14bc8ec34bfa5c0a554684cc261b8af8529b660237c44bf3a9b9fc770f97a7e03c2198b5b388a7ceb190f603aa4181f89fbf7d0a76c51c7392fc7c3ef314a8b6e7f15fac0f55446cd86fa6cd878d2791f2025d5a837016bc0c1d47d48b95bb0b503c4d3e8a2140c13bdc3de4456a8551b235c023ea4011d49d0f263654138ee09e4e9568e0d2701fd33254e400f34439a613d25ef9f6476c571375d2d5e8015e7c707c36cb290ad03d9f9454a57097c2983f6d0b79fdf25b49d9085011c0cc5562c1f3495ef969d242c71ac60a73010d99d58f1cb83ff6ae39857fba08db84e0daf61259f03196616b292cf5d"}) close(r3) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd70000000000022000000180001801400020064756d6d79300000000000000000000014a1fd5741bd8c6219451efdb38ef40eacfed88b48e5644987dc7b295fafb5f19d73e5684c62ffaa80e3d99edd6568454fff3e5070fbf6e80892c079ce1d424a902d7989d43c41691ebf3c7f6d9805007b7c3efad4efa595b89eb9ded429fb5632eae5ac724b41c1d11195955f0f55c4"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0) 11.878036366s ago: executing program 5 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x230}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000380)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000180)={0x1, 0x401}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000140001001e26c6028218ae950a7fd49b3ec78c162e2adabff486887d8fb0ef3114172aeb908be553366160fbf2dc50c33a5e5b56abb6a2de888ee5ed40e2a8517b8907b17444fb3b7b96b7533aafb4e9acbd118ad6e34baee44b7f7e5f49a3fe22b7dddc2b7d7f8a0de5edad", @ANYRES32=r1], 0x34}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01000921e700070122b30409050c0200020103400905df02"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f00000000c0)=0xb997, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x3, 0xfff0}}}, 0x24}}, 0x40044) 9.329239155s ago: executing program 5 (id=1935): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10100}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x80000) unshare(0x4020400) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x7a, 0x3000, 0x8, r5}) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000080)={0x4ffd, 0x3000, 0x0, r5, 0x4}) (async) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x400) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000080)) 9.042048431s ago: executing program 2 (id=1936): syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x2, 0x3, 0x63, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0xfe}}]}}]}}]}}, 0x0) (async) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) 8.955572336s ago: executing program 5 (id=1938): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000f3000040"]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0x6, 0xd, 0x6, 0x0, 0x4, 0xea, 0x5, 0xff, 0x3, 0x5, 0x8, 0x1, 0x0, 0x1, 0x6, 0x5, 0x9, 0xc3, 0x9, '\x00', 0x3, 0x12d16ea5}) r6 = socket(0x1000000000000010, 0x80802, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x9, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.98605974s ago: executing program 3 (id=1942): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x0, 0xe1d9, 0x1101, 0xff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x0, 0xe1d9, 0x1101, 0xff}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x40400, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x61) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x61) r3 = socket$nl_generic(0x10, 0x3, 0x10) tee(r3, r3, 0x7f, 0x1) remap_file_pages(&(0x7f0000f2d000/0x3000)=nil, 0x3000, 0x2000000, 0xf, 0x2000) (async) remap_file_pages(&(0x7f0000f2d000/0x3000)=nil, 0x3000, 0x2000000, 0xf, 0x2000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x46032, 0xffffffffffffffff, 0x0) 7.9578935s ago: executing program 3 (id=1943): creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 7.886563114s ago: executing program 3 (id=1944): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x7, 0x14, 0x0, 0x0, 0x0, [@sadb_key={0x6, 0x8, 0x108, 0x0, "041f6255dd400d223296421054f011855acec306fd5e47b5a703e12c5826a2e7e3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev, 0x1000}}, @sadb_sa={0x1, 0x1, 0x0, 0x0, 0x1, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x52, @mcast1}}]}, 0xa0}, 0x1, 0x7}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) 7.807482532s ago: executing program 5 (id=1945): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a8) fanotify_mark(r0, 0x80, 0x48000035, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000540), 0xfffffffffffff3c8, 0x1c9600) r1 = socket$can_raw(0x1d, 0x3, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000500)={0x80000001, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000380)=""/245, 0xf5}, {&(0x7f0000000180)=""/75, 0x4b}], &(0x7f00000004c0), 0x4}, 0x20) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (rerun: 32) bind$can_raw(r1, &(0x7f0000000000), 0x10) (async, rerun: 64) read(r1, &(0x7f00000017c0)=""/4090, 0xffa) (rerun: 64) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) (async) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) syz_emit_ethernet(0x4d6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) 7.681896788s ago: executing program 2 (id=1946): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r6, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000001c0)=0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x51, 0x80) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.538768598s ago: executing program 5 (id=1947): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mkdir(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x9, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080), 0xb, 0x444c0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xa, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x26, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r0, @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c0e6}, 0x4010) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0x10003, 0x50565559, 0x780, 0x438, 0x0, @stepwise={{}, {}, {0x2}}}) syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e39a, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x3ce317de064e748d) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000001880)="bf31c7f9d357ddcf28706a3b7e066c66633874b1349a053d14881dbd539998cd360cc7da20612974c742d1e7b3a3d15bc61a2e8bf2e52c5e36821977746706e2d77d6f466f375b12dd64df41874ce4a6232a4bca86865bcf72ebee2c64d207c41e4d271c02779ad5d051058c46b286a0e5021c0c7e8885d86c71dfd7b00abfd29c4b8e9dd2b7812054d025c8803f3b4195510698dab9f77d20768ae575d87442b272af23db8f3eb0801f20d9d83cb04049b9299ce1a46814ffeb6530c61bbda251e419f5de80699a1317cccdaa5ab227294ea3edba3e856bc360083e37937f88612f7890df7cad160ce5", 0xea, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, r8, r8, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r9) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) 7.113486024s ago: executing program 33 (id=1947): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mkdir(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000600)="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", 0xfd1, 0x9, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000080), 0xb, 0x444c0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r6, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0xa, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x26, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES16=r0, @ANYRESHEX=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c0e6}, 0x4010) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0x10003, 0x50565559, 0x780, 0x438, 0x0, @stepwise={{}, {}, {0x2}}}) syz_usb_connect_ath9k(0x3, 0x8a, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e39a, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x3ce317de064e748d) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000001880)="bf31c7f9d357ddcf28706a3b7e066c66633874b1349a053d14881dbd539998cd360cc7da20612974c742d1e7b3a3d15bc61a2e8bf2e52c5e36821977746706e2d77d6f466f375b12dd64df41874ce4a6232a4bca86865bcf72ebee2c64d207c41e4d271c02779ad5d051058c46b286a0e5021c0c7e8885d86c71dfd7b00abfd29c4b8e9dd2b7812054d025c8803f3b4195510698dab9f77d20768ae575d87442b272af23db8f3eb0801f20d9d83cb04049b9299ce1a46814ffeb6530c61bbda251e419f5de80699a1317cccdaa5ab227294ea3edba3e856bc360083e37937f88612f7890df7cad160ce5", 0xea, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, r8, r8, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r9) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) 6.546045637s ago: executing program 2 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) 6.520791411s ago: executing program 3 (id=1952): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x4}) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRES8=r0], 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000f1401"], 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x20000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r3, 0x1, 0x2, &(0x7f0000000080)=""/137, &(0x7f0000000000)=0x89) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x0, 0x14, 0x1, "f7"}, 0x0, 0x0}) 6.498101733s ago: executing program 2 (id=1953): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @broadcast, 0x17, 0x1c}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @broadcast, 0x17, 0x1c}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540)=@known='user.incfs.metadata\x00', &(0x7f0000000580)='\x00', 0x1, 0x1) (async) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000540)=@known='user.incfs.metadata\x00', &(0x7f0000000580)='\x00', 0x1, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x5a, 0xa, 0x0, "3205c546e8b51e04f4bf40070700", 0x4f424752}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x11) (async) connect$unix(r5, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @local, 0xffffffff}}, 0x24) r7 = syz_io_uring_setup(0x6f52, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300000c0000000000000000000000030006000000000002004e22e000000100000000000000000200010000000000000000000000000005000500000000000a00000000000000ff01000000000000000000000000000100000002000000009fa4ac47c0a1413c83773c0f1c"], 0x60}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000000c0)=[0x10c, 0x2], 0x2) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.753770899s ago: executing program 3 (id=1955): r0 = socket(0x1d, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060080"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0004000008050000000500"}}}]}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/202, 0xca}, 0xc}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000efffffffffffffff000000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a00000000000000ff000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000001000000b705000008000000850000005600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r8, 0x40086602, &(0x7f0000000000)) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803", @ANYRESOCT], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000d40)={0x14, &(0x7f0000000c00)={0x20, 0x21, 0xcf, {0xcf, 0xe, "82891c318fe2bee03859ba6d0792b0c35bb740d99ec38f4ae92ec527bb1de0557e842294fa77a9c2bf07d1e38b44afe909e500f1c3fde57ac28add93243bacb08ae358bbf8320ace9a4f6f60ed4f449b186fc145e8732d1dd67db7bec25b22e048ea111a753b0c187ee1de944fc02088ad3d1dcf4bd334da0e693e89512efcf243e686348b96b87a703baf3832e314fcda96bf73d7ccceaefaa92a34dd2642f0ae282773702d5dd39148412267c7d53aedf30736444e5c9c20d113059d976a4b2424f3e29f1504702808719836"}}, &(0x7f0000000d00)={0x0, 0x3, 0x14, @string={0x14, 0x3, "fa803e6e75cf06f1c9c79038b82cf4da045a"}}}, &(0x7f0000000f80)={0x44, &(0x7f0000000d80)={0x0, 0x7, 0x12, "a0f3439ef6e8cc3b278ea6c5140cb27c35ab"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e40)={0x20, 0x81, 0x2, "123d"}, &(0x7f0000000e80)=ANY=[@ANYBLOB="0000e400000000"], &(0x7f0000000ec0)={0x20, 0x83, 0x2, "023b"}, &(0x7f0000000f00)={0x20, 0x84, 0x4, "c57a44d1"}, &(0x7f0000000f40)={0x20, 0x85, 0x3, "bfc5fe"}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e00010000000000ffffff000000008004"], 0x20}], 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x13a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x128, 0x1, 0x1, 0x2, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x80, {{0xa, 0x24, 0x6, 0x0, 0x0, "6132dfa504"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x9}, [@obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0xb2, 0x24, 0x13, 0x2, "2ffa175a306ed71a4dda3e85327df52048307f4324ba946867092ee290b2c4c37f57c05b01c88aebf4a5310e814294e62c0a58ee1a23ccbc2fa6ea9c0a4dd3696d12bd948fa8514110ce0ee245ad13e3903a18ad3dac338eabac3dac823a36fa197ae68a371f00b3cf44b41ac4b5dd62de8fdd96e6270aff9fab5b0e3c6332cb91339866f1095a91ddce685e6ab44ead8bd037ec8b84604a2cced87580c2046f9ba1541f0d2ad52aaf8bf24ae567"}, @mdlm={0x15, 0x24, 0x12, 0x41f}, @dmm={0x7, 0x24, 0x14, 0xc9bc, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x4e51, 0x1, 0x8, 0x41e7, 0xf2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0xf5, 0xea}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x0, 0x54}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x66, 0x6}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0x40, 0x4e, 0x40, 0x5}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="36050f0500"], 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x74, &(0x7f0000000ac0)=@string={0x74, 0x3, "02ff2117beff1d74442d8ad5eafab289f7d20565e180ed2961362a8d3a00d076939a6c49f1a476657db473cc5d581ffe1935d74fa60814c79a204c73c3ae11baf69c0bd1ad75572ebb12981db3e662928a30ee13e3f4678ae83f2038ee0681d205317842c992151436b79abbd95be5c8fe92"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40b}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0007"], 0x44}}, 0x0) r11 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa980, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) readv(r11, &(0x7f0000000580)=[{&(0x7f0000000080)=""/125, 0x7d}, {0x0}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtclass={0x48c, 0x28, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7, 0xffe0}, {0x0, 0xfff2}, {0x6, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_htb={{0x8}, {0x448, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x9, 0x5, 0x2, 0xb6c}, {0x9, 0x2, 0x5f2, 0x5, 0xff6c, 0x1000}, 0x10001, 0x8, 0x1, 0x800, 0x40}}, @TCA_HTB_CTAB={0x404, 0x3, [0x2, 0x3, 0x4, 0x81, 0x6, 0xf, 0x4, 0x8, 0x1000, 0x8, 0x3, 0xfffffffb, 0xe956, 0x4, 0x9, 0x6, 0xf3a, 0x100, 0x0, 0x0, 0x2, 0x670, 0xc88, 0x9, 0xffff5fdb, 0x7f, 0x100, 0x6, 0x4, 0xb, 0x3, 0x3, 0x7f, 0x3, 0x65e, 0x5, 0x9, 0x8, 0x8, 0xb, 0x401, 0xffff, 0x3, 0xc, 0x3, 0x8, 0x2, 0x80, 0x5, 0x4, 0x1, 0x6, 0x8, 0x7, 0x6, 0x80, 0xd, 0x7fffffff, 0x4, 0x0, 0xffff870d, 0x3, 0xffffffff, 0xfffffc00, 0x3, 0xffffffff, 0x2, 0xd6, 0xfffffc01, 0x5, 0x6c3, 0xffffffff, 0x8, 0x1, 0x681, 0x8, 0x10001, 0x7f, 0x9, 0xfffffffa, 0x6, 0x3, 0x2, 0xff, 0x3, 0x2, 0x5, 0xffb, 0x1000, 0x401, 0x80, 0x5, 0x1, 0x9, 0x47, 0x2a, 0xed, 0x3ff, 0x7, 0x83, 0x9, 0xfff, 0x6b8, 0x8, 0x7fff, 0x9, 0x5, 0xc, 0x2, 0x0, 0x80000001, 0x9, 0x2, 0x0, 0xd, 0xd82, 0x8, 0x8, 0x5, 0x0, 0x417, 0x2, 0x273e, 0x100, 0x7, 0xaf, 0x3, 0x8, 0x1, 0x80, 0xd, 0x9, 0x400, 0x3bdb, 0x28, 0xffffffff, 0x5, 0x7f, 0x200, 0x5, 0x1, 0x6, 0x928, 0x258, 0x2, 0x8000, 0xb5, 0x9, 0x2, 0xa, 0x2, 0x6, 0x1, 0x101, 0x3, 0x7, 0x5, 0xc000, 0xccf, 0x5, 0x9, 0x10, 0xa3, 0xffffffff, 0x2, 0x4, 0x9, 0xffff, 0x10, 0x5aeb, 0x3, 0x5, 0xfffff037, 0x80000000, 0x249, 0x3, 0x1, 0xb, 0x5d35ce45, 0xfff, 0x3dd4d7e3, 0x1ff0, 0x4, 0x28, 0x180, 0x5, 0x194, 0x1, 0x4, 0x0, 0x6, 0x29, 0x7fff, 0x8a, 0x7, 0x0, 0x5, 0x9, 0xfffffff8, 0x3, 0x9, 0x0, 0x8, 0xffff, 0xfffffff8, 0x3, 0x1d, 0x4, 0x7f, 0x88, 0x10000, 0x0, 0x3, 0x6, 0x5, 0x6, 0xa05b, 0xcf6, 0x7, 0xffffffff, 0xe, 0x8, 0x9, 0x1, 0x7, 0x80000001, 0x9, 0x1, 0xd46f, 0x5, 0x8, 0xffffffd5, 0x5, 0x9a3, 0x773939cb, 0x1000, 0x2, 0x0, 0x5, 0x1ff, 0x400, 0x80000001, 0x27f, 0x7f, 0xfebe, 0x2, 0x8, 0x3, 0xa983, 0x1, 0x9, 0x2, 0x8, 0x5, 0x3, 0x9]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_tbf={0x8}]}, 0x48c}}, 0x40800) 4.494114713s ago: executing program 0 (id=1962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 4.131476134s ago: executing program 0 (id=1963): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x8c1, 0x80, 0x20203843, 0x3, [0x2], [0x810003, 0x0, 0x3ff], [0x5, 0x3, 0xffffffff, 0x46], [0x0, 0x0, 0x0, 0xfffffffffffffffd]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x8f}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x6}}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') read$FUSE(r7, &(0x7f0000001a00)={0x2020}, 0x2020) lseek(r7, 0x96, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000081000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) 3.453676696s ago: executing program 1 (id=1965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000000007baa00fe00000000b51a0200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 3.40151575s ago: executing program 0 (id=1966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)}, 0x20) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x25, &(0x7f0000000580)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x8, 0x0, 0x5, 0x1, 0x49e7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe66000}, @jmp={0x5, 0x0, 0x4, 0x9, 0xa, 0x30, 0xfffffffffffffffd}, @generic={0x6, 0xb, 0xc, 0x2465, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9, 0x1, 0x0, r2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open_by_handle_at(r3, &(0x7f0000000080)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x0, 0x7, 0x4, 0x4}, {0xf, 0x1, 0x9, 0x2}}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) socket(0x10, 0x3, 0x0) r4 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005440)=[{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000b40)="c880f16d797676f3ee67061e16e0ae00f320834a3afd3dbbcb0fe01045786ad785833813e3b830d535618c41478e45e0fef6e7c58334bb7f363bd2d9ebc0992c7ede1e667b23969c84b0f35e02c32cd36b0665fc7dcfa30963d9fddbb603816c2d80d16866be994f23bfc6772fbe8ae7917f66d031dee0bf01bd86da736d155f703307c45ea5ea2ddf819bddebbe12e1df5764555351f5b454eda6d7c9ff0e0bbbfd8f595cf19ad6f26f29b918b9baf529291c3cd3e0a8c14cfbda4e53071149d932bb07d41e8cbcb12f26be7ce22b", 0xcf}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000500)="af9fe3f2705eee40403b8a336545c7971c1c9a69c06d9548d5dff01f73396c67d94868c61f7f703d316ecdb406b8e0c2f7e43d559b539df568fa7738ded5a4", 0x3f}, {&(0x7f0000002c40)="6579d9dfae5523f926fcfdf7656a1b3cc020428d676048a96dde9238a6be50934630febb1beeda9750f5ea0ac99d534a65d8614bbe6c9e367dd87f64820e8a2518c9607cd0d695768319ec797758b3134489e2a203777cf85a45c0bfe6d351a228ab4321f9", 0x65}, {&(0x7f0000002cc0)="eb009e96e62088c856f812f0afc13cbe51e3fdefa76be2a67b06bb64d71e5912779c9bd23ac02dbddc6be54541bfc45666a57ccc4418df09dbb2e3f9a7865ccc2215e6dd962609436cf2e6fb1db18c65ea2b17f2f42d60a42cc61b48e3a07f0a062b4c82be843bba2d8af7be5889ec3f8b8389f3c82816f1b086ead13956572509136a9eb69d5ed8b99ce35d4c", 0x8d}, {&(0x7f0000000700)="0ddce7e5987797f5d83bfc9fc2d581e006d3", 0x12}, {&(0x7f0000002d80)="2c1d50247aadbe45088ee2212f8cfc0e20b6d01ce9ab2d526768d1e1ba159ca3beb81138fafe1763c3440d454fd1762a2002e6842c29fd9f69347cbe4d7d96fb436bda976e286a538788f9611f29698150ffc1a153893dae49999078156bb790baa04fc1ecd5aa17afb08f1bff55cdb0ea86e4b566f41f5dc679a1b0130a688942e074912c0d34418af130784670b425e850", 0x92}, {&(0x7f0000002e40)="0d04bd73713347e5bada7116bb4f2ca394f79f5d0f994fdd9973c29e22531ad3243227f8ff091e9b802d87723ee1ecb319233dee88b34dea8ae461d2a3cd44051372da34604ba0097aa09734261ba2df4c2382d29f8a390090dfd5ff1e59ab8c58dbf740f8dc70fda137c3013b41221a1663313a46f05f2b562f9e42cb004394d99cff86431815877553942b3c5139dd564175274658f054f481047d0620d758796e55943112c24b08b23822053f3b1f7fc7f30764acb59d2321a743a8d054714dd6c07780aef55e168ed39c8cc0e2e3e0f19df6f3076e0a4e1275e04ee77fc0a7f098f1", 0xe4}, {&(0x7f0000002f40)="050a1f6a0334ebbd17b2b28cfbfcf77a2f788d761467f83df2a9dd0bd600744964bfe70dd8fc95499186107c396bcb7907a4a1adc3b8e3fb6fc48d290feafa9aed7480944a67784b2dc4d4f464b650ed1b8b27986918bae7a717f1419700ff4fe9bcc5a58f8f80392a4b55329e8bc7f11cd6beb9773e02cd85d9f3aadf9fc2a01fde2605df", 0x85}], 0xa, &(0x7f00000030c0)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xdc5f}, @op={0x18}, @op={0x18}], 0x90, 0x24000814}, {0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000003180)="bc73a73eeea930a029d018de7b38bf429c74e86a80c3fcb54ec494cc4b013092df4e59a1de815a25af8a6da9a98e11335806c7d4c183a7f2d02df187e17dd70ab4ddff8b50577c353f6ceab917e715511cc178bb45f7c673d0e1eeff66665dfc6593cf619373ce40380c9a9de8d3cf345a16cae3e1e4bf355c4e1279cfd019dc3cda9f05faefbb256a1a2f1ddf3f4d229a6e066764f783146a78deaae6f5dc587b32c77946c09ee1aef5503e64472f08c8a3d2d3acacf648d574c76aa5617c7851b978ee9f39", 0xc6}, {&(0x7f0000003280)="28325d5f70c5b06e8b8dc47d89b57708a406921b2262a1e88c649236a79010e658a741ff9ead2d66853765d916401272a3c5becc2448326238588650fc3ac9aa3dbc024d1496ad06b44f183c90e1f4a265113af9929bf17ce3654796d6f39bf81ac4d761249d2f1823676e2953d5ef50ebdba687ffd0865a9f5eb829b505ab70d64ec9df5bec2c9fe5f0c2d75809b55745ac26d997ae0859806e2e5868196eb778b24371b33c1e73e641c4c0aa02a2ddc5cd7d80c9c46d2a4e1d38ed2ff63415aa35923a77", 0xc5}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="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", 0x1000}], 0x4, &(0x7f00000053c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x81}, @op={0x18}], 0x48, 0x40}], 0x2, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000280)={0x300, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000040)=[0x3], &(0x7f0000000200), &(0x7f00000002c0), 0x0, 0x7f}) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x6, 0x0, 0x5) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) eventfd(0x7) 3.289998353s ago: executing program 2 (id=1967): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 2.979923953s ago: executing program 1 (id=1968): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xf4f, 0x101500) poll(&(0x7f0000000140)=[{r3, 0x528}], 0x1, 0x4) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, &(0x7f00000004c0)={0x40, 0x9, 0xf3, {0xf3, 0x11, "0a7623b06da22e7b93b9c6ee41dc54d04edcf6ada3d43541a8b2f5516bbd15121fa06ee582cb98e2d8ac2fddc235b6740f9cfc69387c0f499b35ecce7f7fe16d2a0c6190433178f4f3b26147394ddc2a911108b03ecf69e53a9baf219e127775c304149f4888d0930b27c17acb59df0d856cd450bd30042c8c69c31aa03eeedf24627c8aaf48c8674ab462bd30f0aaf57add3d0a07968e6126bb8f1a1e5e846cb0a0ca699eb3496d1e5e1ee0f8936e84bd4eba7d79c0aa36f7ba09b14f85068a50e38d53d2b4ecb010cba2d12467c426719ed4cb3b45e197d6004ddc15a2b8858618fa0d6bea46f4e88cd7c771c86975ae"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f00000005c0)={0x20, 0x17, 0xffffffffffffffcc, "6aebf4e4ebdbd327d03d4aeb0019a40d7a240fb8cff0479065467ec0966a002ebf8c53cbb00609574502cd238fd7973cf83d8fb8f96d9b12f68ccf499cc698bbb6cf04531c755388e7af4ff7dfe998d653d08236661d93ef16b3c81dfd5389a922184197207f580956a40ae88ed3f197e467be3a13905ddacbe0e701abf275f7ad8a415826538bd97e6363b2b9a78b7ccfd997bb91e9320b38c8509fcb7f49074d4f69a3bd23bcc6380719bd1642447df32e83dac2b2fea6c3c94048b2d71d203299be500225e2cefcecaf3615fa53925a7dfc4334fa9183799ded539deb805d9aa11668"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x1d92, 0x91, 0x9, 0x3, 0xfff, 0x3768, 0x55a, 0x7, 0x5, 0x7fff, 0x7fff, 0x4}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0xd}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x7fb}, &(0x7f0000000700)={0x20, 0x89, 0x2}}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, 0x0}) (async) connect$pppl2tp(r1, &(0x7f0000000d00)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x3, 0x3, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0xffffffffffffffc8, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="22e1ca", 0x3}, {&(0x7f0000000800)="084c0f83cf7ab65fd9a75af7fe0fee3bf4b49ab2099a5c534be803b785d6a4bcde2940b27710c4c3e1a8e9074a87ab90a362d575b44f31323889f8a7db3a28fec36227feea2998d8185b74985f5719e28c8da101d3b63a5c29b9ba40f84323234a8392b1eb8aba130cb72ba69e6d0e0d322a0f5b65afcad753e832b6bdf987f37cc3f8ce2dffaa848d9675d877de21709247e284d209f69708a6a7e894dc90fdac534e", 0xa3}, {&(0x7f00000008c0)="c0fddb1ed8b996582d7c5cd0ffe57e8132de719755a791058a7eb538a267f42a3d5c4ca6b883b16f274a5557c4a1001f76b357887fda3ac2ca091212acc9538da57f2ab669eef2acbcf98b859bfb8c8ef6b186356858890b787feedc", 0x5c}, {&(0x7f0000000940)="3bc39126dd7d47f083c324eb98b156019010215f0867e64bcabff5454bfa9c7f2d2933ea87e141463ecf1158f11fcc82c0ad8a5c9c5fb80b9da421e42b4a84c5ab2f1bca0fdcc82a11a04692b278dbc70827eb61c17e8ddaf778983b96e3460cbc450e4dc19e22ff3257b380254e7299ec36ad890465b6e8f69462990ca872be18697162d0b80b4e798a702588fbc01fcdca2ace94e3c5411b9b452c587fea9e902038dc859ad66c6e9e43fb5217180f380e981bfb507177e75a525f2bcdeb", 0xbf}, {&(0x7f0000000a00)="2c3103f1d2a4d53a851039b23f5448c729ddaa4159991a6be0cbb36e3d7d7ac997ee8f7c910199bbd4eac2a4eaaa58d556d325fe079ef548e2c27848137c1b7a877cdde3e18f360cc5714505c634f721a52338f019a3ff933951b69983f09f45e01bb32a30a2e9f28bac2612b07b8d8f76272a06be93fa0d1fbce9416d4d1c149b89c9318645b0b8598f6fa09a473d2dff1fedf0a7bc", 0x96}, {&(0x7f0000000b00)="92a23547557d670093bbb97c9cc8326c4dd548ede0680f90f7517823f8a3ef36dcc0d7c5835eb01856730baf3e938637c46e825cc2f04aa1fa5b77944676774ed24c87e6eab7a6e285422d431c5bfd28d2ce5a53a1d8ec49f196c6921a8f91e9c68e0402a3ca4c1b5046a2eedf86f58d7d6e86339b5e8bea1563baafcc2bc8b7480808e03fffcc54bf5283b938bb8bfd28ad3740477312d23e9577106e91976727399195466a55b074", 0xa9}, {&(0x7f0000000bc0)="60cc72a4b3c15ec794aef9eb1ed18575e71ab4c1fe14adf9f072536e4cdcbba288ca4ae89115589aa266539c689b8d64f36df2049e59ef663d210db92c9119f96a50f498a458e5cdfc43cd9ad1f222bb91be2fa636cd385fd50bce53dd9d35e12a8082a04243f836d8659fc708faa104475cbe78b84772c81a0a9cfa18d892bf62c7b54727fc8d5a8630e90db4b52c174ce2b56a63", 0x95}], 0x7}, 0x0) 2.974471672s ago: executing program 2 (id=1969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) modify_ldt$read(0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x5, 0x8}) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000140)={0x3, 0x4, 0x46}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x52}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x8, &(0x7f0000000040)=""/225, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) 2.800204675s ago: executing program 0 (id=1970): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#/S\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x22302) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x200, 0x3f5, 0x20, 0x32, 0x200}, 0x9c) ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4, 0x0, 0x1, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz1\x00', {0x4, 0x0, 0x2}, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x87, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x514], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x80008, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x871], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe, 0x0, 0x8001, 0x59a, 0x3, 0x0, 0x0, 0x6]}, 0x45c) accept4(r0, &(0x7f0000000bc0)=@isdn, &(0x7f0000000c40)=0x80, 0x80000) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xff, 0x3, 0x5, 0x5, 0xfffffff5, 0x101, 0x7, 0x1}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000500160001000000080005"], 0x48}}, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x288800, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r7, 0x80106720, &(0x7f00000002c0)={0x3, &(0x7f0000000b40)=[{0x2, 0x9e, &(0x7f0000000a00)="f905ddc2d17010612869a0517815f32d40a947149d02ff6f7af3a5e1ee50f7bc512da52c6fc3c97b4710ae63384985fb4393022ab31cd78e8520521edd8a206c76ee320737b46eeb0c95972f7b2e246996d6d8e9d141ad90f878b806aa08efd75e55dbee52087f38a28e2f139fb346bde4e170fdf8b97252f23edca1a0b7dff75c9bc992e16ce9323b6ee02a973b5de6764031585464b0e43a22f58750a5", 0x0, 0x1}, {0x8, 0x77, &(0x7f00000007c0)="34ace40797207f3d32c623dcd02889b86297f5a0cbc5f8870f6eb1563dcb6142c6aa69c3acfd59af8b6c263cbc3fbd9c3cdd921ac69b198ae820e972e67e6c6c1be985f516f23de3c7d46853b3169e9d619ac115467f131536611471b9ebcf80d2cf357223aeb9df341a47b8c511e6019edb08c9c2da69", 0x0, 0x1}, {0x7, 0x60, &(0x7f0000000ac0)="f0a786e525091a290ad213385e6570484f977752fe1bad017465e191829948ddb2420f9c0425f3c5c4fe7e1168b1f4f9fbf41c52d5693d1ab018d53fd5dd9b40bbd9559357c730f503506a00ba6eadb51dfe6b1a002385c8572197de9ea6fc21"}]}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x2) ioctl$SNDCTL_DSP_CHANNELS(r6, 0x80105013, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0xffffff9c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r9 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002600)=[{{&(0x7f0000000c80)=@ax25={{0x3, @default}, [@remote, @null, @netrom, @remote, @remote, @netrom, @remote, @bcast]}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000d00)=""/204, 0xcc}, {&(0x7f0000000e40)=""/182, 0xb6}, {&(0x7f0000000f00)=""/219, 0xdb}, {&(0x7f0000001000)=""/26, 0x1a}, {&(0x7f0000001040)=""/178, 0xb2}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000000100)}], 0x7}, 0x5}, {{&(0x7f00000021c0)=@nfc, 0x80, &(0x7f0000002380)=[{&(0x7f0000002240)=""/34, 0x22}, {&(0x7f0000002280)=""/224, 0xe0}], 0x2, &(0x7f00000023c0)=""/125, 0x7d}, 0x6}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/11, 0xb}, {&(0x7f00000024c0)=""/232, 0xe8}], 0x2}, 0x4}], 0x3, 0x40000000, 0x0) sendmmsg$alg(r9, &(0x7f0000004c00)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd", 0xa}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) 2.357990231s ago: executing program 3 (id=1971): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)={0x24, 0x2e, 0x503, 0x0, 0x0, "", [@generic="1acc00781f102815f18c893202435fbf1f"]}, 0x24}], 0x1}, 0x400c080) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$inet(r1, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="09009ebc1a092272a4dee2b42781b0b7e8853f5eebce", 0x16}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0xc, &(0x7f00000002c0)=@ccm_128={{0x303}, "5bd205e99363d416", "89d0010000001600000094309441660a", "2dc43948", "b3d3ce48a680caf7"}, 0x28) 2.224264024s ago: executing program 1 (id=1972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.030149841s ago: executing program 1 (id=1973): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) (async) 1.553556587s ago: executing program 1 (id=1974): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') read$FUSE(r0, &(0x7f000000ac40)={0x2020}, 0x2020) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r5, 0x7, r3, &(0x7f0000000040)={r4, r3}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0x29, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10000001}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200}, 0x20) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="400b01"], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x2c, 0x0, &(0x7f0000000140)) r9 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/igmp\x00') pread64(r9, &(0x7f0000000240)=""/76, 0x4c, 0x33c) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, &(0x7f0000000500)={0x28, 0x5, r10, 0x0, 0x10001, 0x8, 0x3}) r11 = socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) r12 = socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x73) sendmsg$key(r12, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0xf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, [@sadb_key={0x10, 0x9, 0x388, 0x0, "95edfe9d68e118dc2bf609fea6b2b6db6a92e1878c1a3f2613fbb316326b41272b7c9fec9178f05966002ee46f0f2cce7414022965b852d79d84d12cc65cde0560a64176fc5b227c6adea3a5b4dfb4bcfc8b9567978d28b477b190b22755d934ad793b9ae430556636323c8e97d4e3321c"}, @sadb_key={0x1f, 0x8, 0x760, 0x0, "a044a9f82154d0ef223dbc03364acd1caf1f5f06a2c549b5c57e243b29b2a4067b5689d72a971de7522ec227eba4fcc0209d4e65cd8590c7e13c8b03afc5dd00ee632dc5fa3b8404f6dee61cc6663f12b66007e54fe51b81fb84e0d02af1764db484db6cb22066a8f709c0820dc5176aed68bf759d1f5fe8fd1e0f03d2d720365fd16c2368f7ea81edab2b2c182bce9aefa750e44f0d43af8f9aa6c9624d0763fbf1eee35ac523ba78b79232c491bc38bc1fc4b57c39e405365926bc14a3e4e2c1fb24e68e80a87ab2c97b1b59668b85b509398bf6abd4e38f9a7c769030fb99f28a99e18b2127cdc9f546c5"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd29}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb3, 0x1000, {0x6, 0x18, 0x7f, 0x6, 0x0, 0xffff, 0x0, @in=@local, @in6=@empty}}]}, 0x200}}, 0x0) socket(0x10, 0x80000, 0xfffffffa) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x70) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc010203010902120001000000000904000000ff0201"], 0x0) 556.071532ms ago: executing program 0 (id=1975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) (async) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc000000070a0101000000000000000001000003c00004801c0001800b00010074756e6e656c00000c0002800800014000000000100001940b000100736f636b657400001c0001800000010071756575650000001800018008000100647570"], 0xfc}, 0x1, 0x0, 0x0, 0x40c0}, 0x10000000) 386.627469ms ago: executing program 0 (id=1976): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) getrandom(&(0x7f00000001c0)=""/286, 0x11e, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x5c5d, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000400207e01002dbd7000000000000a4941000000000001000000e6e63ec1ae08000e00ffffff7f"], 0x24}, 0x1, 0x0, 0x0, 0x2000c8c4}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=r7], 0x68}}, 0xc0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000440)={'#! ', './cgroup/file0', [], 0xa, "1836d4486eb861b4cfdb6422f796055382c8edc96a7c04a5e07c22ccbe533346ce7f3b80f17c2f197b22fcd317a7d5da034ca9e691cc8990268a746ef2308fd7bf7ef87684c9b241139f1af01fbd7d9b54dd3e5138a0c55357d52087e9dd95b91956fe699d219954658579c14d57b602d8ab6bb4057c30f79b9a1c8f6aec1ec099e76e81640e905920"}, 0x9b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r9, &(0x7f00000002c0)='./cgroup/file0\x00', &(0x7f0000000040)={0xf0101, 0x148, 0x10}, 0x18) preadv(r8, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 0s ago: executing program 1 (id=1977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x101) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x6e, 0x66, 0x88, 0x40, 0x1b71, 0x3002, 0xe2bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x3, 0x10, 0x8, [{{0x9, 0x4, 0x96, 0x10, 0x0, 0x97, 0x82, 0xc8}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0xa21, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0xa21, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) kernel console output (not intermixed with test programs): 83.239567][ T47] usb 3-1: device descriptor read/8, error -71 [ 483.474454][T11559] netlink: 'syz.0.1573': attribute type 12 has an invalid length. [ 483.490490][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1574'. [ 483.493841][ T47] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 483.543256][ T47] usb 3-1: device descriptor read/8, error -71 [ 483.669694][ T47] usb usb3-port1: unable to enumerate USB device [ 483.679972][T11568] binder: 11567:11568 ioctl c0306201 2000000003c0 returned -14 [ 484.008500][T11440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.054353][T11440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.096477][T11440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.111372][T11440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.467410][T11440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.527768][T11440] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.546526][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.553780][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.626816][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.634091][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.753491][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.764474][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.789333][ T5888] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 484.798680][T11440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.934193][T11440] veth0_vlan: entered promiscuous mode [ 484.960157][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 484.977276][T11440] veth1_vlan: entered promiscuous mode [ 484.994697][ T5888] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 485.019033][ T5888] usb 4-1: config 179 has no interface number 0 [ 485.045835][ T5888] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 485.100196][ T5888] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 485.112668][T11440] veth0_macvtap: entered promiscuous mode [ 485.126362][ T5888] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 485.143315][ T5888] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 485.155591][T11440] veth1_macvtap: entered promiscuous mode [ 485.177190][ T5888] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 485.198516][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.213568][ T5888] usb 4-1: config 179 interface 65 has no altsetting 0 [ 485.222098][ T5888] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 485.231518][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.246308][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.256077][T11440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.275789][T11594] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 485.299675][ T47] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 485.302931][ T5888] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input42 [ 485.334393][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.391770][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.433332][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.457826][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.468451][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.491514][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 485.519420][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.529464][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 485.529495][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 485.529521][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 485.533983][ T47] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 485.593259][T11440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.604869][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.615414][ T47] usb 3-1: Product: syz [ 485.619975][T11440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.630446][ T47] usb 3-1: Manufacturer: syz [ 485.635083][ T47] usb 3-1: SerialNumber: syz [ 485.643425][T11440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.685426][ T5888] usb 4-1: USB disconnect, device number 104 [ 485.685516][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 485.718464][ T47] usb 3-1: config 0 descriptor?? [ 485.727710][ T5888] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 485.758697][T11440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.771865][T11611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.782392][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'. [ 485.785735][ T47] mcba_usb 3-1:0.0: Can't find endpoints [ 485.804651][T11440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.823843][T11440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.843557][T11440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.990634][ T5906] usb 3-1: USB disconnect, device number 113 [ 486.010204][T11628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.072851][T11628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.134301][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.175421][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.209471][ T5905] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 486.287535][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.303942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.390059][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.419368][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.447677][ T5905] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.458670][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.483012][ T5905] usb 1-1: SerialNumber: syz [ 486.638467][T11646] veth1_macvtap: left promiscuous mode [ 486.644329][T11646] macsec0: entered promiscuous mode [ 486.657331][T11646] veth1_macvtap: entered promiscuous mode [ 486.663408][T11646] macsec0: left promiscuous mode [ 486.746081][ T5905] usb 1-1: 0:2 : does not exist [ 486.793227][ T5905] usb 1-1: USB disconnect, device number 99 [ 487.119932][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.539021][ T47] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 487.709136][ T47] usb 4-1: device descriptor read/64, error -71 [ 487.881661][T11668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1592'. [ 487.950826][T11671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1592'. [ 487.980062][ T47] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 488.138785][T11675] bond3: entered promiscuous mode [ 488.147333][T11675] bond3: entered allmulticast mode [ 488.159631][ T47] usb 4-1: device descriptor read/64, error -71 [ 488.195724][T11675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.269829][ T47] usb usb4-port1: attempt power cycle [ 488.293900][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1596'. [ 488.544076][T11692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.569821][T11694] syz_tun: left allmulticast mode [ 488.574923][T11694] syz_tun: left promiscuous mode [ 488.579042][ T5885] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 488.585622][T11694] bridge0: port 4(syz_tun) entered disabled state [ 488.644029][ T47] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 488.741821][ T47] usb 4-1: device descriptor read/8, error -71 [ 488.760159][T11694] bridge_slave_0: left allmulticast mode [ 488.767931][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.805852][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 488.814892][ T5885] usb 6-1: can't read configurations, error -61 [ 488.836050][T11694] bridge_slave_1: left allmulticast mode [ 488.844391][T11694] bridge_slave_1: left promiscuous mode [ 488.851525][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.877905][T11694] bond0: (slave 4): Releasing backup interface [ 488.927044][T11694] bond0: (slave bond_slave_1): Releasing backup interface [ 488.949577][ T5885] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 488.989278][ T47] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 489.007585][T11694] team0: Failed to send options change via netlink (err -105) [ 489.016015][ T47] usb 4-1: device descriptor read/8, error -71 [ 489.025833][T11694] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 489.048057][T11694] team0: Port device team_slave_0 removed [ 489.070158][T11694] team0: Failed to send options change via netlink (err -105) [ 489.078556][T11694] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 489.229242][ T47] usb usb4-port1: unable to enumerate USB device [ 489.229353][T11694] team0: Port device team_slave_1 removed [ 489.478253][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 489.489597][ T5885] usb 6-1: can't read configurations, error -61 [ 489.509187][ T5885] usb usb6-port1: attempt power cycle [ 489.510568][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.597885][T11694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.640623][T11694] macsec0: left allmulticast mode [ 489.646864][T11694] veth1_macvtap: left allmulticast mode [ 489.655470][T11694] macsec0: left promiscuous mode [ 489.665815][T11694] bridge0: port 3(macsec0) entered disabled state [ 489.711911][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 489.711927][ T30] audit: type=1800 audit(1746185171.027:1484): pid=11685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1594" name="/" dev="fuse" ino=0 res=0 errno=0 [ 489.784572][T11694] bond1: (slave gretap1): Releasing active interface [ 489.800897][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.861425][T11694] bond2: (slave gretap2): Releasing active interface [ 489.889025][ T5885] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 489.906895][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 489.971665][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 489.984414][ T5833] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 489.995899][ T5885] usb 6-1: can't read configurations, error -61 [ 490.022314][ T5833] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 490.076428][ T5906] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 490.087276][ T5906] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 490.179409][ T5885] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 490.197597][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1599'. [ 490.241411][ T5833] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 490.251404][ T5885] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 490.259382][ T5885] usb 6-1: can't read configurations, error -61 [ 490.288671][ T5885] usb usb6-port1: unable to enumerate USB device [ 490.399318][ T5906] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 490.695253][ T5833] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 490.771003][T11733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.795587][T11733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.879444][ T5906] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 491.019372][ T5833] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 491.041164][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 491.056542][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 491.074438][ T5906] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 491.085782][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 491.098559][ T5906] usb 1-1: Product: syz [ 491.118261][ T5906] usb 1-1: Manufacturer: syz [ 491.134522][ T5906] usb 1-1: SerialNumber: syz [ 491.146959][ T5906] usb 1-1: config 0 descriptor?? [ 491.163655][T11730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.194240][ T5906] hub 1-1:0.0: bad descriptor, ignoring hub [ 491.202700][ T5906] hub 1-1:0.0: probe with driver hub failed with error -5 [ 491.679101][ T5906] usb 1-1: reset high-speed USB device number 100 using dummy_hcd [ 491.720081][ T5906] usb 1-1: device reset changed ep0 maxpacket size! [ 491.733467][ T5906] usb 1-1: USB disconnect, device number 100 [ 492.129137][ T5906] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 492.186329][T11785] gtp0: entered allmulticast mode [ 492.319935][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 492.325515][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.330065][ T5906] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 492.356424][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.389747][ T5906] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 492.457384][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.491959][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.502672][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.518231][ T5906] usb 1-1: Product: syz [ 492.523155][ T5906] usb 1-1: Manufacturer: syz [ 492.528308][ T5906] usb 1-1: SerialNumber: syz [ 493.340901][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.353777][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.405808][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 493.559018][ T5885] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 493.913050][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 493.929929][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.948567][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.109629][ T5906] usb 1-1: 0:2 : does not exist [ 494.257151][ T5885] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 494.315773][ T5906] usb 1-1: USB disconnect, device number 101 [ 494.356477][T11823] netlink: 'syz.0.1616': attribute type 7 has an invalid length. [ 494.426563][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.470100][T11823] netlink: 'syz.0.1616': attribute type 8 has an invalid length. [ 494.558160][ T5885] usb 3-1: config 0 descriptor?? [ 494.647236][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.742814][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.785521][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 494.850635][T11833] program syz.1.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.117011][T11806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.238784][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.261897][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.302153][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 496.423333][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.509425][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.702945][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 496.757311][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 496.831938][ T5885] usb 3-1: USB disconnect, device number 114 [ 497.287892][T11882] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20002 [ 497.358642][T11887] netlink: 'syz.0.1635': attribute type 2 has an invalid length. [ 497.368923][ T5885] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.389129][T11887] netlink: 'syz.0.1635': attribute type 11 has an invalid length. [ 497.456370][T11887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1635'. [ 497.523037][T11891] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20002 [ 497.531080][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1634'. [ 497.669347][ T47] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.003697][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 498.017452][ T5885] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 498.027140][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.037999][ T5885] usb 6-1: Product: syz [ 498.042767][ T47] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.058443][ T5885] usb 6-1: Manufacturer: syz [ 498.064829][ T5885] usb 6-1: SerialNumber: syz [ 498.079453][ T5885] usb 6-1: config 0 descriptor?? [ 498.139318][ T5887] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.237311][ T5906] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.291932][ T5885] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 498.329320][ T5906] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.346842][ T5885] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 498.397340][ T5885] usb-storage 6-1:0.0: USB Mass Storage device detected [ 498.502246][ T5887] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.560071][T11903] usb usb8: usbfs: process 11903 (syz.3.1637) did not claim interface 0 before use [ 498.599224][ T5887] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.619786][ T5885] usb-storage 6-1:0.0: device ignored [ 498.822835][ T5887] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 498.839017][ T5906] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 499.192224][ T5885] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 499.415918][ T5906] usb 4-1: too many configurations: 154, using maximum allowed: 8 [ 499.509331][ T5906] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.617828][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.648982][ T5906] usb 4-1: Product: syz [ 499.653350][ T5906] usb 4-1: Manufacturer: syz [ 499.698316][ T5906] usb 4-1: SerialNumber: syz [ 499.732347][ T5906] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.795440][T11635] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 500.859135][T11635] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 500.977877][T11635] ath9k_htc: Failed to initialize the device [ 501.030743][T11635] usb 4-1: ath9k_htc: USB layer deinitialized [ 501.277437][ T5905] usb 4-1: USB disconnect, device number 109 [ 501.459383][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.465744][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.495687][ T5905] usb 6-1: USB disconnect, device number 6 [ 502.448995][ T5906] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 502.610747][ T5906] usb 6-1: device descriptor read/64, error -71 [ 502.839168][T11635] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 502.868935][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 502.968994][T11635] usb 4-1: device descriptor read/64, error -71 [ 503.004950][ T5906] usb 6-1: device descriptor read/64, error -71 [ 503.059280][ T5885] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 503.119136][ T5906] usb usb6-port1: attempt power cycle [ 503.208982][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 503.217325][ T5885] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 503.219137][T11635] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 503.227035][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.242793][ T5885] usb 1-1: Product: syz [ 503.247703][ T5885] usb 1-1: Manufacturer: syz [ 503.252462][ T5885] usb 1-1: SerialNumber: syz [ 503.259161][ T5888] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 503.261091][ T5885] usb 1-1: config 0 descriptor?? [ 503.335682][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.348643][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.365249][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.374043][T11635] usb 4-1: device descriptor read/64, error -71 [ 503.380933][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.421240][ T5888] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 503.430730][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.442121][ T5888] usb 3-1: config 0 descriptor?? [ 503.455735][ T5888] cp210x 3-1:0.0: cp210x converter detected [ 503.461894][ T5906] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 503.499479][T11635] usb usb4-port1: attempt power cycle [ 503.505944][ T5906] usb 6-1: device descriptor read/8, error -71 [ 503.659890][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.669119][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.720517][ T5885] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 503.752483][ T5885] usb 1-1: USB disconnect, device number 102 [ 503.762210][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 503.790020][ T5906] usb 6-1: device descriptor read/8, error -71 [ 503.878967][T11635] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 503.886865][ T5888] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 503.909065][ T5906] usb usb6-port1: unable to enumerate USB device [ 503.916976][T11635] usb 4-1: device descriptor read/8, error -71 [ 503.954580][T11964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1648'. [ 504.016665][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.027549][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.105258][ T5888] usb 3-1: cp210x converter now attached to ttyUSB0 [ 504.159195][T11635] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 504.181054][T11635] usb 4-1: device descriptor read/8, error -71 [ 504.292937][T11635] usb usb4-port1: unable to enumerate USB device [ 504.306074][ T5885] usb 3-1: USB disconnect, device number 115 [ 504.325272][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 504.349539][ T5885] cp210x 3-1:0.0: device disconnected [ 504.631752][T11976] usb usb8: usbfs: process 11976 (syz.0.1651) did not claim interface 0 before use [ 504.918914][ T5888] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 505.280554][ T5888] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 505.458694][ T5888] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 505.467882][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.478925][ T5887] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 505.487758][ T5888] usb 1-1: Product: syz [ 505.496041][ T5888] usb 1-1: Manufacturer: syz [ 505.502483][ T5888] usb 1-1: SerialNumber: syz [ 505.602249][T11635] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 505.621496][ T5888] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 505.683462][ T5906] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 505.698927][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 505.725888][ T5887] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 505.738586][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.739008][T11635] usb 6-1: device descriptor read/64, error -71 [ 505.765404][ T5887] usb 3-1: config 0 has no interface number 0 [ 505.794910][ T5887] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 505.804064][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.908840][ T5887] usb 3-1: Product: syz [ 505.977242][ T5887] usb 3-1: Manufacturer: syz [ 506.000494][ T5887] usb 3-1: SerialNumber: syz [ 506.034640][ T5887] usb 3-1: config 0 descriptor?? [ 506.109156][T11635] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 506.249084][T11635] usb 6-1: device descriptor read/64, error -71 [ 506.273485][T11988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.282373][T11988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.313727][ T24] usb 3-1: USB disconnect, device number 116 [ 506.359243][T11635] usb usb6-port1: attempt power cycle [ 506.698971][ T5906] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 506.706836][ T5906] ath9k_htc: Failed to initialize the device [ 506.770211][ T5906] usb 1-1: ath9k_htc: USB layer deinitialized [ 506.828955][T11635] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 506.866207][T11635] usb 6-1: device descriptor read/8, error -71 [ 507.111775][T11635] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 507.125376][T12014] fuse: Unknown parameter 'no' [ 507.161739][T11635] usb 6-1: device descriptor read/8, error -71 [ 507.289417][T11635] usb usb6-port1: unable to enumerate USB device [ 507.322340][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.344236][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 507.380207][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.423674][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.436900][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.448730][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.458017][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.474810][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.487859][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.497908][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.518612][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.540471][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.563766][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.599658][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.676000][ T5887] usb 1-1: USB disconnect, device number 103 [ 507.728925][ T5833] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 507.762461][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.858189][T11635] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 507.878543][T11635] hid-generic 00A0:0006:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 507.946652][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.957765][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.976898][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.987105][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.085009][ T5833] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 508.188602][ T5833] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 508.235620][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.328015][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.569373][ T5885] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 508.752099][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 508.781248][ T5885] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 508.791740][ T5885] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.817392][ T5885] usb 1-1: config 0 has no interface number 0 [ 508.845619][ T5885] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 508.862391][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.885356][ T5885] usb 1-1: Product: syz [ 508.889958][ T5887] usb 6-1: device descriptor read/64, error -71 [ 508.904069][ T5885] usb 1-1: Manufacturer: syz [ 508.916758][ T5885] usb 1-1: SerialNumber: syz [ 508.947915][ T5885] usb 1-1: config 0 descriptor?? [ 508.967006][ T5885] ims_pcu 1-1:0.41: Missing CDC union descriptor [ 508.976781][ T5885] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 509.128982][ T5887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 509.168027][ T24] usb 1-1: USB disconnect, device number 104 [ 509.269345][ T5887] usb 6-1: device descriptor read/64, error -71 [ 509.390729][ T5887] usb usb6-port1: attempt power cycle [ 509.739169][ T5887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 509.773587][ T5887] usb 6-1: device descriptor read/8, error -71 [ 510.039515][ T5887] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 510.070642][ T5887] usb 6-1: device descriptor read/8, error -71 [ 510.179587][ T5887] usb usb6-port1: unable to enumerate USB device [ 510.319157][ T5887] usb 3-1: USB disconnect, device number 117 [ 511.158941][ T5833] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 511.683060][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 511.720527][ T5833] usb 3-1: no configurations [ 511.725251][ T5833] usb 3-1: can't read configurations, error -22 [ 511.898997][ T5833] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 512.113277][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 512.155240][ T5833] usb 3-1: no configurations [ 512.176462][ T5833] usb 3-1: can't read configurations, error -22 [ 512.194357][ T5833] usb usb3-port1: attempt power cycle [ 512.644401][ T5833] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 512.660853][T12130] usb usb8: usbfs: process 12130 (syz.3.1672) did not claim interface 0 before use [ 512.750387][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 512.763497][ T5833] usb 3-1: no configurations [ 512.794396][ T5833] usb 3-1: can't read configurations, error -22 [ 512.908930][ T5887] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 512.958993][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.968056][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.977629][ T30] audit: type=1326 audit(1746185194.257:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 513.169297][ T5833] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 513.178334][ T30] audit: type=1326 audit(1746185194.257:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 513.228085][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 513.262363][ T5887] usb 4-1: too many configurations: 154, using maximum allowed: 8 [ 513.277176][ T5833] usb 3-1: no configurations [ 513.283162][ T5833] usb 3-1: can't read configurations, error -22 [ 513.355919][ T5887] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.365075][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.371886][ T5833] usb usb3-port1: unable to enumerate USB device [ 513.384542][ T30] audit: type=1326 audit(1746185194.257:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 513.428890][ T5887] usb 4-1: Product: syz [ 513.448866][ T5887] usb 4-1: Manufacturer: syz [ 513.520143][ T5887] usb 4-1: SerialNumber: syz [ 513.827744][ T30] audit: type=1326 audit(1746185194.257:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 513.870725][ T5887] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.903535][ T5885] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 514.409050][ T30] audit: type=1326 audit(1746185194.257:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.531625][ T30] audit: type=1326 audit(1746185194.257:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.626618][ T30] audit: type=1326 audit(1746185194.257:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.660898][ T30] audit: type=1326 audit(1746185194.257:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.785462][ T30] audit: type=1326 audit(1746185194.257:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.847975][ T30] audit: type=1326 audit(1746185194.257:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 514.898877][ T5888] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 514.902647][ T24] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 514.939092][ T5885] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 514.952136][ T5885] ath9k_htc: Failed to initialize the device [ 515.037384][ T5885] usb 4-1: ath9k_htc: USB layer deinitialized [ 515.068975][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 515.082058][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 515.104025][ T24] usb 3-1: config 64 has an invalid interface number: 162 but max is 0 [ 515.113790][ T5888] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 515.135023][ T24] usb 3-1: config 64 has no interface number 0 [ 515.146104][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6a05, bcdDevice=58.fc [ 515.172223][ T5887] usb 4-1: USB disconnect, device number 114 [ 515.222223][ T5888] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 515.227677][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.249316][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 515.267728][ T24] usb 3-1: Product: syz [ 515.284629][ T24] usb 3-1: Manufacturer: syz [ 515.296385][ T24] usb 3-1: SerialNumber: syz [ 515.391151][ T5888] usb 1-1: Product: syz [ 515.520737][ T5888] usb 1-1: Manufacturer: syz [ 515.525404][ T5888] usb 1-1: SerialNumber: syz [ 515.553797][ T24] usb 3-1: USB disconnect, device number 122 [ 515.626938][ T5888] usb 1-1: config 0 descriptor?? [ 515.671696][T12152] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 515.753406][ T5888] hub 1-1:0.0: bad descriptor, ignoring hub [ 515.795393][ T5888] hub 1-1:0.0: probe with driver hub failed with error -5 [ 515.993683][ T5888] usb 1-1: USB disconnect, device number 105 [ 516.268916][ T5887] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 516.371716][T12173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1681'. [ 516.411558][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 516.426359][ T5887] usb 6-1: device descriptor read/64, error -71 [ 516.489778][T12177] hsr0: entered promiscuous mode [ 516.506010][T12177] macsec1: entered allmulticast mode [ 516.516044][T12177] hsr0: entered allmulticast mode [ 516.531883][T12177] hsr_slave_0: entered allmulticast mode [ 516.558733][T12177] hsr_slave_1: entered allmulticast mode [ 516.596903][T12177] hsr0: left allmulticast mode [ 516.647299][T12177] hsr_slave_0: left allmulticast mode [ 516.678953][ T5887] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 516.690606][T12177] hsr_slave_1: left allmulticast mode [ 516.850549][ T5887] usb 6-1: device descriptor read/64, error -71 [ 516.994000][ T5887] usb usb6-port1: attempt power cycle [ 517.349472][ T5887] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 517.431109][ T5887] usb 6-1: device descriptor read/8, error -71 [ 517.669166][ T5887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 517.709714][ T5887] usb 6-1: device descriptor read/8, error -71 [ 517.839118][ T5887] usb usb6-port1: unable to enumerate USB device [ 517.979677][ T5888] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 518.128910][ T5888] usb 1-1: device descriptor read/64, error -71 [ 518.199002][ T5833] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 518.369106][ T5888] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 518.377977][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 518.547323][ T5833] usb 4-1: config 0 has no interfaces? [ 518.553023][ T5888] usb 1-1: device descriptor read/64, error -71 [ 518.596979][ T5833] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 518.608870][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.617159][ T5833] usb 4-1: Product: syz [ 518.626258][ T5833] usb 4-1: Manufacturer: syz [ 518.633702][ T5833] usb 4-1: SerialNumber: syz [ 518.653713][ T5833] usb 4-1: config 0 descriptor?? [ 518.690468][ T5888] usb usb1-port1: attempt power cycle [ 518.763291][T12223] input: syz0 as /devices/virtual/input/input43 [ 519.069490][ T5888] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 519.099694][ T5888] usb 1-1: device descriptor read/8, error -71 [ 519.349044][ T5888] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 519.378961][ T5885] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 519.393783][ T5888] usb 1-1: device descriptor read/8, error -71 [ 519.509270][ T5905] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 519.517213][ T5888] usb usb1-port1: unable to enumerate USB device [ 519.554154][ T5885] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.567350][ T5885] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.582646][ T5885] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.593859][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.613794][T12226] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.636050][ T5885] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.691393][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 519.711517][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.717407][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 519.717426][ T30] audit: type=1800 audit(1746185201.027:1537): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1686" name="bus" dev="fuse" ino=0 res=0 errno=0 [ 519.758015][ T5905] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 519.773164][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.782496][ T5905] usb 6-1: Product: syz [ 519.793881][ T5905] usb 6-1: Manufacturer: syz [ 519.802893][ T5905] usb 6-1: SerialNumber: syz [ 519.822592][ T5905] usb 6-1: config 0 descriptor?? [ 519.833405][ T5905] hub 6-1:0.0: bad descriptor, ignoring hub [ 519.833709][ T5885] usb 3-1: USB disconnect, device number 123 [ 519.854711][ T5905] hub 6-1:0.0: probe with driver hub failed with error -5 [ 519.894232][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.945800][ T5905] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 520.002615][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 520.096962][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.105888][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.122045][T12232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.130973][T12232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.139535][ T5887] usb 6-1: USB disconnect, device number 23 [ 520.203281][T12233] openvswitch: netlink: Flow actions attr not present in new flow. [ 520.855689][T11635] usb 4-1: USB disconnect, device number 115 [ 521.009655][ T5888] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 521.180650][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 521.188885][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.200547][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.212490][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 521.223906][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.223911][ T5887] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 521.245733][ T5888] usb 3-1: config 0 descriptor?? [ 521.349254][ T5905] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 521.378892][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 521.387897][ T5887] usb 6-1: config 0 has an invalid interface number: 210 but max is 0 [ 521.413508][ T5887] usb 6-1: config 0 has no interface number 0 [ 521.429688][ T5887] usb 6-1: too many endpoints for config 0 interface 210 altsetting 133: 75, using maximum allowed: 30 [ 521.454243][ T5887] usb 6-1: config 0 interface 210 altsetting 133 has 0 endpoint descriptors, different from the interface descriptor's value: 75 [ 521.489117][ T5905] usb 4-1: device descriptor read/64, error -71 [ 521.498853][ T5887] usb 6-1: config 0 interface 210 has no altsetting 0 [ 521.516366][ T5887] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.537261][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.555691][ T5887] usb 6-1: Product: syz [ 521.561259][ T5887] usb 6-1: Manufacturer: syz [ 521.565884][ T5887] usb 6-1: SerialNumber: syz [ 521.575974][ T5887] usb 6-1: config 0 descriptor?? [ 521.658680][ T5888] savu 0003:1E7D:2D5A.001B: item fetching failed at offset 6/8 [ 521.681832][ T5888] savu 0003:1E7D:2D5A.001B: parse failed [ 521.687600][ T5888] savu 0003:1E7D:2D5A.001B: probe with driver savu failed with error -22 [ 521.759699][ T5905] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 521.889165][ T5905] usb 4-1: device descriptor read/64, error -71 [ 522.009267][ T5905] usb usb4-port1: attempt power cycle [ 522.165533][T12263] usb usb8: usbfs: process 12263 (syz.0.1703) did not claim interface 0 before use [ 522.228209][T12250] sctp: [Deprecated]: syz.5.1700 (pid 12250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.228209][T12250] Use struct sctp_sack_info instead [ 522.370457][ T5905] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 522.409885][ T5833] usb 3-1: USB disconnect, device number 124 [ 522.448555][ T5905] usb 4-1: device descriptor read/8, error -71 [ 522.455356][ T5888] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 522.640838][ T5888] usb 1-1: too many configurations: 154, using maximum allowed: 8 [ 522.710359][ T5905] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 522.748081][ T5905] usb 4-1: device descriptor read/8, error -71 [ 522.778405][ T5888] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 522.787841][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.795932][ T5888] usb 1-1: Product: syz [ 522.802020][ T5888] usb 1-1: Manufacturer: syz [ 522.806674][ T5888] usb 1-1: SerialNumber: syz [ 522.859577][ T5905] usb usb4-port1: unable to enumerate USB device [ 522.899463][ T5888] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 522.955639][ T5905] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 523.987770][ T5906] usb 6-1: USB disconnect, device number 24 [ 523.995856][ T5905] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 524.025199][ T5905] ath9k_htc: Failed to initialize the device [ 524.038952][T12290] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 524.286830][ T5905] usb 1-1: ath9k_htc: USB layer deinitialized [ 524.449514][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 524.619133][ T5833] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 524.791432][ T5833] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 524.800887][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.888522][ T5833] usb 6-1: config 0 descriptor?? [ 525.027213][ T5906] usb 1-1: USB disconnect, device number 110 [ 525.049070][ T24] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 525.119027][ T5887] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 525.142222][ T5833] usb 6-1: Cannot read MAC address [ 525.199578][ T5833] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 525.220870][ T24] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 525.230780][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.260510][ T5833] usb 6-1: USB disconnect, device number 25 [ 525.260748][ T24] usb 4-1: config 0 has no interface number 0 [ 525.283487][ T5887] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 525.303996][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.357948][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 525.377439][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.398500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.408630][ T5887] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 525.421223][ T24] usb 4-1: config 0 descriptor?? [ 525.427624][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.438201][ T24] hub 4-1:0.3: bad descriptor, ignoring hub [ 525.445157][ T24] hub 4-1:0.3: probe with driver hub failed with error -5 [ 525.457803][ T5887] usb 3-1: config 0 descriptor?? [ 525.482170][ T24] sierra 4-1:0.3: Sierra USB modem converter detected [ 525.575863][T12305] input: syz0 as /devices/virtual/input/input44 [ 525.591290][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1714'. [ 525.663355][ T24] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 525.730120][ T24] usb 4-1: USB disconnect, device number 120 [ 525.769763][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 525.800419][ T24] sierra 4-1:0.3: device disconnected [ 525.813370][T12304] kvm: user requested TSC rate below hardware speed [ 525.893158][ T5887] dragonrise 0003:0079:0006.001C: item fetching failed at offset 0/2 [ 525.910004][ T5887] dragonrise 0003:0079:0006.001C: parse failed [ 525.916410][ T5887] dragonrise 0003:0079:0006.001C: probe with driver dragonrise failed with error -22 [ 526.049476][ T5906] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 526.197874][T12315] netlink: 'syz.2.1713': attribute type 5 has an invalid length. [ 526.215832][T12315] ip6erspan1: entered promiscuous mode [ 526.359281][ T5906] usb 6-1: device descriptor read/64, error -71 [ 526.659257][ T5906] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 526.909000][ T5906] usb 6-1: device descriptor read/64, error -71 [ 526.933872][T12321] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 12321 comm: syz.3.1718) [ 526.979473][ T30] audit: type=1800 audit(1746185208.267:1538): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1718" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=27448 res=0 errno=0 [ 527.035194][ T5906] usb usb6-port1: attempt power cycle [ 527.273655][T12329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.306375][T12329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.428904][ T5906] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 527.489811][ T5906] usb 6-1: device descriptor read/8, error -71 [ 527.739071][ T5906] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 527.779666][ T5906] usb 6-1: device descriptor read/8, error -71 [ 527.949350][ T5888] usb 3-1: USB disconnect, device number 125 [ 527.964462][ T5906] usb usb6-port1: unable to enumerate USB device [ 528.905348][ T30] audit: type=1326 audit(1746185210.217:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12352 comm="syz.3.1728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b51d8e969 code=0x0 [ 530.439116][ T5887] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 530.651454][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 530.691184][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.795522][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 531.053680][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.058962][ T5905] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 531.443041][ T5905] usb 6-1: config 0 has no interfaces? [ 531.502627][ T5905] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 531.512806][ T5887] usb 1-1: usb_control_msg returned -32 [ 531.526760][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 531.539966][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.609030][ T5905] usb 6-1: Product: syz [ 531.613401][ T5905] usb 6-1: Manufacturer: syz [ 531.618028][ T5905] usb 6-1: SerialNumber: syz [ 531.681970][ T5905] usb 6-1: config 0 descriptor?? [ 532.003657][ T5885] usb 1-1: USB disconnect, device number 111 [ 532.153023][ T5905] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 532.349045][ T5905] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 532.372901][ T5905] usb 3-1: config 0 has no interface number 0 [ 532.405238][ T5905] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 532.441164][ T5905] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 532.465547][ T5905] usb 3-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 532.478066][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.503011][ T5905] usb 3-1: Product: syz [ 532.513098][ T5905] usb 3-1: Manufacturer: syz [ 532.535095][ T5905] usb 3-1: SerialNumber: syz [ 532.560220][ T5905] usb 3-1: config 0 descriptor?? [ 532.579001][ T5885] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 532.595078][T12382] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 532.609302][T12382] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 532.633514][ T5905] usb-storage 3-1:0.133: USB Mass Storage device detected [ 532.776731][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 532.792422][ T5885] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 532.808345][ T5885] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 532.817764][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 532.845536][T12409] IPVS: set_ctl: invalid protocol: 43 172.30.1.2:20002 [ 532.855520][ T5885] usb 1-1: Product: syz [ 532.908222][T12410] usb usb8: usbfs: process 12410 (syz.3.1741) did not claim interface 0 before use [ 532.973706][ T24] usb 3-1: USB disconnect, device number 126 [ 532.982924][ T5885] usb 1-1: Manufacturer: syz [ 532.995118][ T5885] usb 1-1: SerialNumber: syz [ 533.041910][ T5885] usb 1-1: config 0 descriptor?? [ 533.113516][T12397] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 533.131270][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 533.168543][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 533.176312][ T5887] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 533.577685][ T5887] usb 4-1: too many configurations: 154, using maximum allowed: 8 [ 533.648880][ T5885] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 533.679384][ T5833] usb 6-1: USB disconnect, device number 30 [ 533.888893][ T5885] usb 1-1: device descriptor read/64, error -71 [ 534.139287][ T5885] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 534.174160][ T5887] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 534.222321][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.248312][ T5887] usb 4-1: Product: syz [ 534.279034][ T5885] usb 1-1: device descriptor read/64, error -71 [ 534.301601][ T5887] usb 4-1: Manufacturer: syz [ 534.396050][ T5887] usb 4-1: SerialNumber: syz [ 534.604762][ T5885] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 534.614228][ T5887] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 534.649971][ T5885] usb 1-1: device descriptor read/8, error -71 [ 534.670180][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 534.809097][ T47] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 534.906407][ T5885] usb 1-1: reset high-speed USB device number 112 using dummy_hcd [ 534.950029][ T5885] usb 1-1: device descriptor read/8, error -71 [ 534.988983][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 534.997795][ T47] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.007620][ T47] usb 3-1: config 0 has no interface number 0 [ 535.019315][ T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 535.031281][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.040335][ T47] usb 3-1: Product: syz [ 535.045002][ T47] usb 3-1: Manufacturer: syz [ 535.050705][ T47] usb 3-1: SerialNumber: syz [ 535.061058][ T5885] usb 1-1: USB disconnect, device number 112 [ 535.071761][ T47] usb 3-1: config 0 descriptor?? [ 535.118382][ T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 535.209724][ T47] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 535.289724][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.292961][ T5905] usb 3-1: USB disconnect, device number 127 [ 535.453739][ T5885] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 535.738954][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 535.753070][ T24] ath9k_htc: Failed to initialize the device [ 535.802703][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 535.929916][ T5167] usb 4-1: USB disconnect, device number 121 [ 536.323031][ T30] audit: type=1326 audit(1746185217.637:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.2.1748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febd3b8e969 code=0x0 [ 536.435490][T12433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.468277][T12433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.538186][T12437] dvmrp0: entered allmulticast mode [ 536.552409][T12436] Invalid logical block size (13) [ 536.939115][ T5885] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 537.067136][T12447] syzkaller1: entered promiscuous mode [ 537.077704][T12447] syzkaller1: entered allmulticast mode [ 537.089183][ T5885] usb 6-1: Using ep0 maxpacket: 32 [ 537.104311][ T5885] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 537.124027][ T5885] usb 6-1: config 0 has no interface number 0 [ 537.134554][ T5885] usb 6-1: New USB device found, idVendor=041e, idProduct=9901, bcdDevice=c2.57 [ 537.155098][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.170819][ T5885] usb 6-1: Product: syz [ 537.179345][ T5885] usb 6-1: Manufacturer: syz [ 537.186834][ T5885] usb 6-1: SerialNumber: syz [ 537.195001][ T5885] usb 6-1: config 0 descriptor?? [ 537.210128][T12454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.252219][T12454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.391974][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.428479][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.451204][T12460] macvlan0: entered promiscuous mode [ 537.552997][T12460] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 537.588412][T12460] netlink: 'syz.2.1758': attribute type 2 has an invalid length. [ 537.769266][ T5905] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 537.940942][ T5905] usb 4-1: device descriptor read/64, error -71 [ 538.199056][ T5905] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 538.266658][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 538.399069][ T5905] usb 4-1: device descriptor read/64, error -71 [ 538.428912][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 538.437305][ T5888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 538.449426][ T5888] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 538.463440][ T5888] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.475115][ T5888] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 538.509876][ T5905] usb usb4-port1: attempt power cycle [ 538.515404][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 538.569723][ T5888] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 538.692752][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.817278][ T5888] usb 3-1: config 0 descriptor?? [ 538.899130][ T5905] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 538.949174][ T5905] usb 4-1: device descriptor read/8, error -71 [ 539.188933][ T5905] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 539.209867][ T5905] usb 4-1: device descriptor read/8, error -71 [ 539.241566][ T5888] microsoft 0003:045E:00F9.001D: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 539.274734][ T5888] microsoft 0003:045E:00F9.001D: no inputs found [ 539.344766][ T5888] microsoft 0003:045E:00F9.001D: could not initialize ff, continuing anyway [ 539.379269][ T5905] usb usb4-port1: unable to enumerate USB device [ 539.584803][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.596091][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.876041][ T5885] usb 6-1: USB disconnect, device number 31 [ 540.329259][ T5905] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 540.489260][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 540.496316][ T5905] usb 6-1: descriptor type invalid, skip [ 540.513883][ T5905] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 540.543612][ T5905] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 540.578999][ T5905] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 540.613079][ T5905] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 540.632393][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.646095][ T5905] usb 6-1: Product: syz [ 540.653997][ T5905] usb 6-1: Manufacturer: syz [ 540.658641][ T5905] usb 6-1: SerialNumber: syz [ 540.887972][ T5905] usb 6-1: 0:2 : does not exist [ 540.935636][ T5905] usb 6-1: USB disconnect, device number 32 [ 540.966941][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.002571][ T24] usb 3-1: USB disconnect, device number 2 [ 541.129206][ T5167] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 541.281595][ T5167] usb 4-1: device descriptor read/64, error -71 [ 541.294596][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 541.589236][ T5167] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 541.743922][ T5167] usb 4-1: device descriptor read/64, error -71 [ 541.850021][T12514] usb usb8: usbfs: process 12514 (syz.5.1773) did not claim interface 0 before use [ 541.901863][ T5167] usb usb4-port1: attempt power cycle [ 542.065519][T12516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.072869][T12516] IPv6: NLM_F_CREATE should be set when creating new route [ 542.080222][T12516] IPv6: NLM_F_CREATE should be set when creating new route [ 542.178496][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.178943][ T5885] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 542.196441][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.328921][ T5167] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 542.361763][ T5167] usb 4-1: device descriptor read/8, error -71 [ 542.383015][ T5885] usb 6-1: too many configurations: 154, using maximum allowed: 8 [ 542.420418][ T5885] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 542.429769][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.437810][ T5885] usb 6-1: Product: syz [ 542.452279][ T5885] usb 6-1: Manufacturer: syz [ 542.458854][ T5885] usb 6-1: SerialNumber: syz [ 542.593554][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 542.608994][ T5167] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 542.659812][ T5167] usb 4-1: device descriptor read/8, error -71 [ 542.733573][ T5885] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 542.759183][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.769437][ T5167] usb usb4-port1: unable to enumerate USB device [ 542.776017][ T24] usb 3-1: device descriptor read/64, error -71 [ 542.815523][ T47] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 542.835241][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.057623][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 543.259193][ T24] usb 3-1: device descriptor read/64, error -71 [ 543.369740][ T24] usb usb3-port1: attempt power cycle [ 543.444951][T12528] usb usb8: usbfs: process 12528 (syz.0.1777) did not claim interface 0 before use [ 543.721111][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 543.753615][ T24] usb 3-1: device descriptor read/8, error -71 [ 543.917748][ T47] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 543.939483][ T47] ath9k_htc: Failed to initialize the device [ 544.007502][ T47] usb 6-1: ath9k_htc: USB layer deinitialized [ 544.014035][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 544.094300][ T24] usb 3-1: device descriptor read/8, error -71 [ 544.218353][T12530] netlink: 'syz.3.1778': attribute type 8 has an invalid length. [ 544.248422][ T24] usb usb3-port1: unable to enumerate USB device [ 544.590581][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 544.870333][T12534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 544.878073][T12534] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 544.898682][T12534] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 545.149054][ T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 545.330688][ T24] usb 4-1: config 0 has an invalid interface number: 94 but max is 0 [ 545.376801][ T24] usb 4-1: config 0 has no interface number 0 [ 545.383882][ T5888] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 545.391829][ T24] usb 4-1: config 0 interface 94 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 545.415687][ T24] usb 4-1: config 0 interface 94 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 545.437121][ T24] usb 4-1: config 0 interface 94 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 4 [ 545.468401][ T24] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=d3.37 [ 545.487723][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.496210][ T24] usb 4-1: Product: syz [ 545.499652][T12548] usb usb8: usbfs: process 12548 (syz.1.1784) did not claim interface 0 before use [ 545.506994][ T24] usb 4-1: Manufacturer: syz [ 545.514427][ T24] usb 4-1: SerialNumber: syz [ 545.515871][T12546] bridge8: entered promiscuous mode [ 545.530104][T12546] loop2: detected capacity change from 0 to 7 [ 545.535098][ T24] usb 4-1: config 0 descriptor?? [ 545.556703][ T5888] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 545.566730][T12546] Dev loop2: unable to read RDB block 7 [ 545.585664][ T5888] usb 1-1: config 0 has no interface number 0 [ 545.596336][ T24] imon_raw 4-1:0.94: IR endpoint missing [ 545.614360][T12546] loop2: unable to read partition table [ 545.639545][ T5888] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 545.652183][T12546] loop2: partition table beyond EOD, truncated [ 545.677593][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.678424][T12546] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 545.696431][ T5888] usb 1-1: Product: syz [ 545.706085][ T5888] usb 1-1: Manufacturer: syz [ 545.726687][ T5888] usb 1-1: SerialNumber: syz [ 545.745397][ T5888] usb 1-1: config 0 descriptor?? [ 545.799645][ T5905] usb 4-1: USB disconnect, device number 4 [ 545.857488][T11635] usb 6-1: USB disconnect, device number 33 [ 545.968767][ T30] audit: type=1326 audit(1746185227.237:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.035747][ T30] audit: type=1326 audit(1746185227.237:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.132661][ T30] audit: type=1326 audit(1746185227.237:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.175827][T12566] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1790'. [ 546.182641][ T30] audit: type=1326 audit(1746185227.237:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.197596][T12566] openvswitch: netlink: Flow key attr not present in new flow. [ 546.220712][ T5888] usb 1-1: Firmware version (0.0) predates our first public release. [ 546.234569][ T5888] usb 1-1: Please update to version 0.2 or newer [ 546.239285][ T30] audit: type=1326 audit(1746185227.237:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.264378][ T5888] usb 1-1: Firmware: build [ 546.295634][ T30] audit: type=1326 audit(1746185227.237:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.347081][ T30] audit: type=1326 audit(1746185227.237:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.385700][T11635] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 546.406929][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.425953][ T30] audit: type=1326 audit(1746185227.237:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.485636][ T30] audit: type=1326 audit(1746185227.237:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.509360][ T30] audit: type=1326 audit(1746185227.237:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.1.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 546.533525][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.571857][T11635] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 546.590276][T11635] usb 6-1: can't read configurations, error -61 [ 546.741907][T11635] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 546.841760][ T5888] usb 1-1: USB disconnect, device number 114 [ 546.869461][T11434] Bluetooth: hci5: command 0x0c1a tx timeout [ 546.911045][T11635] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 546.919033][T11635] usb 6-1: can't read configurations, error -61 [ 546.927376][T11635] usb usb6-port1: attempt power cycle [ 547.349647][T11635] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 547.401895][T11635] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 547.433045][T11635] usb 6-1: can't read configurations, error -61 [ 547.548986][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 547.568311][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.597249][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.609092][T11635] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 547.636964][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.671609][T11635] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 547.681722][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.695339][T11635] usb 6-1: can't read configurations, error -61 [ 547.713690][T11635] usb usb6-port1: unable to enumerate USB device [ 547.740707][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.776147][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.209179][ T24] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 548.380099][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 548.388317][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 548.419974][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.447310][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.496503][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.529680][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.553581][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.574653][ T24] usb 1-1: Product: syz [ 548.585511][ T24] usb 1-1: Manufacturer: syz [ 548.607421][ T24] usb 1-1: SerialNumber: syz [ 548.849103][ T24] usb 1-1: unit 1 not found! [ 548.935769][ T24] usb 1-1: USB disconnect, device number 115 [ 548.952595][T11434] Bluetooth: hci5: command 0x0c1a tx timeout [ 549.628933][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 549.788890][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 549.839339][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.887395][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.936149][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 549.949117][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.981172][ T24] usb 3-1: config 0 descriptor?? [ 550.108915][ T47] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 550.157238][T12622] fuse: Unknown parameter 'fh30x0000000000000003' [ 550.269106][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 550.281353][ T47] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 550.298945][ T47] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 550.311796][ T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 550.322132][ T47] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 550.425379][ T47] usb 1-1: Product: syz [ 550.435299][ T47] usb 1-1: Manufacturer: syz [ 550.446836][ T47] usb 1-1: SerialNumber: syz [ 550.709534][ T47] usb 1-1: USB disconnect, device number 116 [ 551.019304][T11434] Bluetooth: hci5: command 0x0c1a tx timeout [ 552.334488][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 552.341043][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 552.416098][ T24] usb 3-1: USB disconnect, device number 8 [ 552.721020][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 552.901960][ T5905] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 553.102344][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.173847][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.184537][ T5905] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 553.204196][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.265353][ T5905] usb 4-1: config 0 descriptor?? [ 553.350130][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 553.529492][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 553.597351][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 553.610827][ T24] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 553.620476][ T24] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 553.628688][ T24] usb 6-1: Product: syz [ 553.633641][ T24] usb 6-1: Manufacturer: syz [ 553.638732][ T24] usb 6-1: SerialNumber: syz [ 553.662950][ T24] usb 6-1: config 0 descriptor?? [ 553.681126][T12678] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 553.697196][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 553.704713][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 554.029273][ T5885] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 554.037281][T12691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.067889][T12691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.211758][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 554.225424][ T5885] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 554.256473][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.337526][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 554.359811][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 554.391871][ T5885] usb 3-1: Product: syz [ 554.406742][ T5885] usb 3-1: Manufacturer: syz [ 554.424709][ T5885] usb 3-1: SerialNumber: syz [ 554.434600][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.446890][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.477861][ T5885] appletouch 3-1:1.0: Could not find int-in endpoint [ 554.503071][ T5885] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 554.518245][ T5885] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 554.679416][ T5888] usb 3-1: USB disconnect, device number 9 [ 555.693863][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 555.717614][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 555.775813][ T5905] usb 4-1: USB disconnect, device number 5 [ 556.128895][T11635] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 556.344831][T11635] usb 3-1: config 3 has an invalid interface number: 51 but max is 1 [ 556.375673][T11635] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 556.384862][ T5888] usb 6-1: USB disconnect, device number 38 [ 556.443377][T11635] usb 3-1: config 3 has an invalid descriptor of length 113, skipping remainder of the config [ 556.461514][T11635] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 556.472692][T11635] usb 3-1: config 3 has no interface number 0 [ 556.478992][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 556.479324][T11635] usb 3-1: config 3 interface 51 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 556.503405][T11635] usb 3-1: config 3 interface 51 has no altsetting 0 [ 556.513061][T11635] usb 3-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice=35.71 [ 556.522740][T11635] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.537065][T11635] usb 3-1: Product: ࠔ [ 556.544875][T11635] usb 3-1: Manufacturer: 뼬ꄂไꞅ荢㋠㝒㠥꘳鮬㏐⯔蛝蓄䉮峌馯쬕눵䉷࿏䲈㋰粖ꀩ븡㉑뼝ꉹ쥁렀ᄄʶ祜吖ᠬꧫ寯늠䣠扢 [ 556.581724][T11635] usb 3-1: SerialNumber: 錗꣦㸁뾉櫙ᩗ춙펧낗ᇘ昽﫴湢咸Ძ톂᫒௉뚅庹௦贴ŷ䌚붖꧜넸﷤禷⻔滅꣮감㋒ꢺ奔᜴뭎⹇㋛鴳꺐䑳䗲䙮롗䨎⼼홐䥄뙹繤舘단권犣ౢ冣엪ꄃ踑곉ꑕ끛饋ே䩓嚯ᲊ [ 556.606356][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.779062][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 556.788278][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.797538][ T5885] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 556.807862][ T5885] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 556.827479][ T5885] usb 4-1: string descriptor 0 read error: -22 [ 556.834273][ T5885] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 556.843917][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.011591][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.039022][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.056503][T11635] gspca_main: se401-2.14.0 probing 03e8:0004 [ 557.453511][T12756] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20002 [ 557.855051][T11635] gspca_se401: read req failed req 0x06 error -19 [ 557.880593][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.905233][T11635] usb 3-1: USB disconnect, device number 10 [ 557.946978][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.034563][T12769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.079288][ T5905] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 558.114112][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.114533][T12769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.185181][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.296946][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.415642][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.453244][ T5905] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 558.496794][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.545859][ T5905] usb 1-1: config 0 descriptor?? [ 559.091428][T12776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.100839][T12776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.309165][ T5885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 560.368141][ T5888] usb 4-1: USB disconnect, device number 6 [ 560.489102][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 560.517863][ T5885] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 560.527416][ T5885] usb 3-1: config 0 has no interface number 0 [ 560.546661][ T5885] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 560.562802][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.611939][ T5885] usb 3-1: Product: syz [ 560.635926][ T5885] usb 3-1: Manufacturer: syz [ 560.663557][ T5885] usb 3-1: SerialNumber: syz [ 560.699926][ T5885] usb 3-1: config 0 descriptor?? [ 560.729029][ T5885] smsc95xx v2.0.0 [ 560.733230][ T5885] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 560.802278][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 560.813104][ T5885] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 560.882438][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 560.933294][ T5885] usb 3-1: USB disconnect, device number 11 [ 560.989491][ T5905] usb 1-1: USB disconnect, device number 117 [ 561.185935][T12791] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 561.192914][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.208744][T12791] vhci_hcd vhci_hcd.0: Device attached [ 561.479020][ T47] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 561.487995][ T24] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 561.660586][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 561.698678][ T47] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 561.873532][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.953652][ T47] usb 6-1: Product: syz [ 561.958340][ T47] usb 6-1: Manufacturer: syz [ 562.007824][ T47] usb 6-1: SerialNumber: syz [ 562.022663][ T47] usb 6-1: config 0 descriptor?? [ 562.043439][ T47] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 562.044743][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 562.044762][ T30] audit: type=1326 audit(1746185243.357:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.063193][ T47] usb 6-1: Detected FT232H [ 562.143306][T12813] netlink: 'syz.0.1855': attribute type 6 has an invalid length. [ 562.217106][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1854'. [ 562.228668][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.237831][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.252883][T12794] usb 43-1: recv xbuf, 0 [ 562.264565][ T30] audit: type=1326 audit(1746185243.357:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.288486][ T81] vhci_hcd: stop threads [ 562.297559][ T81] vhci_hcd: release socket [ 562.318029][ T81] vhci_hcd: disconnect device [ 562.373091][ T30] audit: type=1326 audit(1746185243.357:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.456151][ T30] audit: type=1326 audit(1746185243.357:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.658979][ T30] audit: type=1326 audit(1746185243.357:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.705457][ T5885] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 562.733891][ T30] audit: type=1326 audit(1746185243.397:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.756298][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.851093][T12822] binder: 12821:12822 ioctl c0306201 200000000080 returned -14 [ 562.859422][T12822] binder: 12821:12822 ioctl c0306201 2000000003c0 returned -14 [ 562.868506][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875184][ T47] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 562.875196][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.895916][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.919914][ T30] audit: type=1326 audit(1746185243.397:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 562.942374][ C0] vkms_vblank_simulate: vblank timer overrun [ 562.943241][ T47] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 562.956880][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.991014][ T30] audit: type=1326 audit(1746185243.407:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 563.014230][ T30] audit: type=1326 audit(1746185243.407:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 563.023817][ T47] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 563.037757][ T30] audit: type=1326 audit(1746185243.407:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12805 comm="syz.1.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f539598e969 code=0x7ffc0000 [ 563.045339][ T5885] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 563.105870][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.135975][ T47] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 563.173161][ T47] usb 6-1: USB disconnect, device number 39 [ 563.188259][ T5885] usb 4-1: config 0 descriptor?? [ 563.213965][ T5167] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 563.232199][ T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 563.307476][ T47] ftdi_sio 6-1:0.0: device disconnected [ 563.369385][ T5167] usb 3-1: Using ep0 maxpacket: 32 [ 563.381806][ T5167] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.430254][ T5167] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 563.508001][ T5167] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 563.572340][ T5167] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 563.584386][ T5167] usb 3-1: config 128 has no interface number 0 [ 563.591597][ T5167] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 563.603540][ T5167] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.614308][ T5167] usb 3-1: config 128 interface 127 has no altsetting 0 [ 563.645252][ T5167] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 563.655999][ T5167] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.675560][ T5167] usb 3-1: Product: syz [ 563.688028][ T5167] usb 3-1: Manufacturer: syz [ 563.700005][ T5167] usb 3-1: SerialNumber: syz [ 563.983007][T12834] binder: 12821:12834 ioctl c0306201 200000000080 returned -22 [ 564.005681][T12834] delete_channel: no stack [ 564.101006][ T5887] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 564.137973][ T5167] usb 3-1: USB disconnect, device number 12 [ 564.225752][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 564.274931][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.295408][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 564.324101][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 564.332794][ T5887] usb 6-1: can't read configurations, error -61 [ 564.499056][ T5887] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 564.554498][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 564.662648][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 564.825355][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 564.856206][ T5887] usb 6-1: can't read configurations, error -61 [ 564.866711][ T5887] usb usb6-port1: attempt power cycle [ 565.219001][ T5887] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 565.291605][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 565.324316][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 565.367578][ T5887] usb 6-1: can't read configurations, error -61 [ 565.539114][ T5887] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 565.563217][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 565.589042][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 565.605172][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 565.628944][ T5885] usb 4-1: USB disconnect, device number 7 [ 565.645371][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 565.668943][ T5887] usb 6-1: can't read configurations, error -61 [ 565.688236][ T5887] usb usb6-port1: unable to enumerate USB device [ 565.860536][T12869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1871'. [ 565.869799][T12869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1871'. [ 565.879045][T12869] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1871'. [ 565.999967][T12873] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1872'. [ 566.034961][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 566.306551][T12870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1871'. [ 566.779177][T11635] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 566.969646][T11635] usb 3-1: Using ep0 maxpacket: 16 [ 566.992319][T11635] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.028422][T11635] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.050278][T11635] usb 3-1: config 0 interface 0 has no altsetting 0 [ 567.057018][T11635] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 567.080347][T11635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.096306][T11635] usb 3-1: config 0 descriptor?? [ 567.128947][ T5885] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 567.179568][T12894] hsr0: entered allmulticast mode [ 567.204891][T12894] hsr_slave_0: entered allmulticast mode [ 567.239582][T12894] hsr_slave_1: entered allmulticast mode [ 567.291858][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.310352][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.333716][ T5885] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 567.369991][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.384984][ T5885] usb 4-1: config 0 descriptor?? [ 567.599135][ T5905] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 567.653564][T11635] hid (null): unknown global tag 0xd [ 567.672455][T11635] hid (null): invalid report_count 60216 [ 567.678202][T11635] hid (null): global environment stack underflow [ 567.698753][T11635] hid (null): report_id 2676298326 is invalid [ 567.770803][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 567.793148][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.805942][ T5888] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 567.824577][ T5905] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 567.842520][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.868489][ T5905] usb 1-1: config 0 descriptor?? [ 568.032953][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 568.134800][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 568.148028][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 568.171709][ T5885] hid-led 0003:04D8:F372.001F: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 568.173820][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 568.196896][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 568.229270][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 568.289840][ T5888] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 568.304891][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.324885][ T5888] usb 6-1: Product: syz [ 568.337257][ T5888] usb 6-1: Manufacturer: syz [ 568.457492][ T5888] usb 6-1: SerialNumber: syz [ 568.515209][ T5888] usb 6-1: config 0 descriptor?? [ 568.553707][ T5885] hid-led 0003:04D8:F372.001F: Greynut Luxafor initialized [ 568.890286][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 568.898002][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 568.907680][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 568.923692][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 568.974934][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1883'. [ 568.996627][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.046862][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.074791][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.114160][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.162890][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.173207][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.180793][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.187925][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.195243][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.202374][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.219021][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.226012][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.235849][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.244637][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.255052][ T5888] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 569.264925][ T5888] input input45: Timeout waiting for response from device. [ 569.287424][ T5888] usb 6-1: USB disconnect, device number 44 [ 569.665579][ T5885] usb 3-1: USB disconnect, device number 13 [ 569.954014][ T5888] usb 4-1: USB disconnect, device number 8 [ 569.972766][ T3561] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 570.007845][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 570.051754][T10540] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 570.060223][T12933] IPVS: set_ctl: invalid protocol: 100 127.0.0.1:20001 [ 570.083486][ T36] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 570.113906][ T36] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 570.125497][ T36] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 570.148442][ T36] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 570.171597][ T13] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 570.183133][ T3561] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 570.215496][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 570.253542][ T13] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 570.316218][T10540] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 570.328946][ T5833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 570.413847][T12938] IPVS: set_ctl: invalid protocol: 43 172.30.1.6:20002 [ 570.500687][T10540] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 570.512210][T10540] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 570.525200][T10540] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 570.539455][T10540] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 570.550897][T10540] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 570.594703][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 570.609735][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 570.628889][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 570.636024][ T5833] usb 3-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 570.650017][ T13] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 570.656763][ T5905] usb 1-1: USB disconnect, device number 118 [ 570.664070][ T5833] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.680466][ T5833] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 570.798927][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.822643][ T5833] usb 3-1: Product: syz [ 570.840182][ T5833] usb 3-1: Manufacturer: syz [ 570.852776][ T5833] usb 3-1: SerialNumber: syz [ 570.883971][ T5833] usb 3-1: config 0 descriptor?? [ 571.579353][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.627604][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.158978][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 572.359056][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 572.376346][ T5888] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 572.388725][ T5888] usb 4-1: config 0 has no interface number 0 [ 572.426682][ T5888] usb 4-1: config 0 interface 84 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 572.472529][ T5888] usb 4-1: config 0 interface 84 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 572.486274][ T5888] usb 4-1: New USB device found, idVendor=0403, idProduct=f9d4, bcdDevice=48.a1 [ 572.510583][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.518816][ T5888] usb 4-1: Product: syz [ 572.523270][ T5888] usb 4-1: Manufacturer: syz [ 572.527963][ T5888] usb 4-1: SerialNumber: syz [ 572.542423][ T5888] usb 4-1: config 0 descriptor?? [ 572.555377][T12957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 572.563533][T12957] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 572.581478][ T5888] ftdi_sio 4-1:0.84: FTDI USB Serial Device converter detected [ 572.592630][ T5888] ftdi_sio ttyUSB0: unknown device type: 0x48a1 [ 572.788183][ T5887] usb 4-1: USB disconnect, device number 9 [ 572.797289][ T5887] ftdi_sio 4-1:0.84: device disconnected [ 572.869361][ T5833] usb 3-1: USB disconnect, device number 14 [ 573.285830][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 573.285850][ T30] audit: type=1326 audit(1746185254.597:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12969 comm="syz.0.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469518e969 code=0x7ffc0000 [ 573.299189][ T5833] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 573.417775][ T30] audit: type=1326 audit(1746185254.637:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12969 comm="syz.0.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469518e969 code=0x7ffc0000 [ 573.508907][ T30] audit: type=1326 audit(1746185254.637:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12969 comm="syz.0.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f469518e969 code=0x7ffc0000 [ 573.575993][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 573.612008][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.626401][ T5833] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 573.649432][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.650110][ T30] audit: type=1326 audit(1746185254.637:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12969 comm="syz.0.1902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469518e969 code=0x7ffc0000 [ 573.673098][ T5833] usb 3-1: config 0 descriptor?? [ 573.739845][T12985] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1905'. [ 573.796210][T12988] kernel read not supported for file /eth0 (pid: 12988 comm: syz.0.1907) [ 573.809331][ T30] audit: type=1800 audit(1746185255.117:1580): pid=12988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1907" name="eth0" dev="mqueue" ino=43166 res=0 errno=0 [ 573.838300][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.851129][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.876768][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1907'. [ 574.750315][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 574.929080][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 574.936064][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 574.975019][ T47] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 574.996679][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.008033][ T47] usb 4-1: Product: syz [ 575.016658][ T47] usb 4-1: Manufacturer: syz [ 575.025783][ T47] usb 4-1: SerialNumber: syz [ 575.053915][ T47] usb 4-1: config 0 descriptor?? [ 575.084910][T13007] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 575.142363][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.179170][ T5888] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 575.238972][ T5887] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 575.348397][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.361324][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.373158][ T47] usb 4-1: USB disconnect, device number 10 [ 575.380250][ T5887] usb 6-1: device descriptor read/64, error -71 [ 575.408591][ T5888] usb 1-1: config 0 has no interfaces? [ 575.418305][ T5888] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 575.427591][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.439759][ T5888] usb 1-1: Product: syz [ 575.475378][ T5888] usb 1-1: Manufacturer: syz [ 575.508209][ T5888] usb 1-1: SerialNumber: syz [ 575.534426][ T5888] usb 1-1: config 0 descriptor?? [ 575.630423][ T5887] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 575.791858][ T5887] usb 6-1: device descriptor read/64, error -71 [ 575.810731][T13022] program syz.0.1915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.820507][T13022] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 575.950416][ T5887] usb usb6-port1: attempt power cycle [ 576.028244][ T5833] usbhid 3-1:0.0: can't add hid device: -71 [ 576.069569][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 576.128939][ T5833] usb 3-1: USB disconnect, device number 15 [ 576.299506][T13037] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20002 [ 576.388328][ T5887] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 576.430351][ T5887] usb 6-1: device descriptor read/8, error -71 [ 576.668908][ T5887] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 576.709654][ T5887] usb 6-1: device descriptor read/8, error -71 [ 576.834748][ T5887] usb usb6-port1: unable to enumerate USB device [ 576.940300][T13039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.949588][T13039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.967443][T13040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.012093][T13040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.682857][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1921'. [ 577.844757][ T5888] usb 1-1: USB disconnect, device number 119 [ 578.148905][ T5905] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 578.388978][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 578.452927][ T5905] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 578.490697][ T5905] usb 6-1: config 8 has no interface number 0 [ 578.502586][ T5905] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 578.575232][ T5905] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 578.612570][ T5905] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 578.662667][ T5905] usb 6-1: config 8 interface 39 has no altsetting 0 [ 578.706941][ T5905] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 578.741967][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.773176][ T5905] usb 6-1: Product: syz [ 578.793478][ T5905] usb 6-1: Manufacturer: syz [ 578.820109][ T5905] usb 6-1: SerialNumber: syz [ 579.069179][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1921'. [ 579.602949][ T5905] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 579.633471][ T5905] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 579.679116][ T5905] usb 6-1: USB disconnect, device number 49 [ 579.798152][T13067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.818026][T13067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.191807][T13079] xt_cgroup: path and classid specified [ 580.469087][ T5833] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 580.619091][ T5833] usb 1-1: device descriptor read/64, error -71 [ 580.739770][ T5905] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 580.786787][T13106] netlink: 'syz.5.1938': attribute type 15 has an invalid length. [ 580.889117][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 580.897481][ T5905] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 580.908630][ T5905] usb 3-1: config 0 has no interface number 0 [ 580.922987][ T5905] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 580.933558][ T5905] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 580.946504][ T5833] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 580.955579][ T5905] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 580.972628][ T5905] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 580.984075][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.994410][ T5905] usb 3-1: Product: syz [ 580.999068][ T5905] usb 3-1: Manufacturer: syz [ 581.005789][ T5905] usb 3-1: SerialNumber: syz [ 581.023552][ T5905] usb 3-1: config 0 descriptor?? [ 581.034630][T13096] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 581.053222][ T5905] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.69/input/input46 [ 581.089361][ T5833] usb 1-1: device descriptor read/64, error -71 [ 581.199347][ T5833] usb usb1-port1: attempt power cycle [ 581.249382][ T5189] bcm5974 3-1:0.69: could not read from device [ 581.264460][ T5189] bcm5974 3-1:0.69: could not read from device [ 581.282279][ T5905] usb 3-1: USB disconnect, device number 16 [ 581.292679][ T5189] bcm5974 3-1:0.69: could not read from device [ 581.559501][ T5833] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 581.599770][ T5833] usb 1-1: device descriptor read/8, error -71 [ 581.849136][ T5833] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 581.870506][ T5833] usb 1-1: device descriptor read/8, error -71 [ 581.878889][ T5905] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 581.988304][ T5833] usb usb1-port1: unable to enumerate USB device [ 582.043025][ T30] audit: type=1800 audit(1746185263.357:1581): pid=13124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1946" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=49244 res=0 errno=0 [ 582.075156][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.080848][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 582.092724][ T5905] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 582.108940][ T5905] usb 4-1: config 7 has no interface number 0 [ 582.144290][ T5905] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 582.163423][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.181796][ T5905] usb 4-1: Product: 㯑 [ 582.195104][ T5905] usb 4-1: Manufacturer: 떒 [ 582.463207][ T5905] usb 4-1: USB disconnect, device number 11 [ 582.994277][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 583.005347][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 583.013953][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 583.029680][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 583.044740][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 583.149926][T13141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1952'. [ 583.354433][T13145] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 583.362099][T13146] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 583.368454][T13146] PKCS7: Only support pkcs7_signedData type [ 583.382454][T13145] PKCS7: Only support pkcs7_signedData type [ 583.557919][T13138] chnl_net:caif_netlink_parms(): no params data found [ 583.975230][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1955'. [ 583.988106][T13155] can: request_module (can-proto-0) failed. [ 584.065148][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.073638][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.086768][T13138] bridge_slave_0: entered allmulticast mode [ 584.103092][T13138] bridge_slave_0: entered promiscuous mode [ 584.116162][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.133820][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.143790][T13138] bridge_slave_1: entered allmulticast mode [ 584.156581][T13138] bridge_slave_1: entered promiscuous mode [ 584.264214][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.284412][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.293819][ T5885] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 584.408467][T13138] team0: Port device team_slave_0 added [ 584.431899][T13138] team0: Port device team_slave_1 added [ 584.458865][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 584.471262][ T5885] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 584.488821][ T5885] usb 4-1: config 0 has no interface number 0 [ 584.519207][ T5885] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 584.546631][T13164] kvm: kvm [13163]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x400b [ 584.563547][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.572653][T13168] qrtr: Invalid version 7 [ 584.592707][ T5885] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 584.607630][T13164] kvm: kvm [13163]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0xb [ 584.616523][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.644755][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.656719][ T5885] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 584.669125][ T5885] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 584.677741][ T5885] usb 4-1: Product: syz [ 584.682043][ T5885] usb 4-1: Manufacturer: syz [ 584.686675][ T5885] usb 4-1: SerialNumber: syz [ 584.693653][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.703926][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.731337][ T5885] usb 4-1: config 0 descriptor?? [ 584.741292][ T5885] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 584.766464][ T5885] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 584.777198][T13170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.788619][ T5885] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 584.797829][T13170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.807059][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.829694][ T5885] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 584.861783][ T5885] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 584.896952][ T5885] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 584.927031][ T5885] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 584.972624][ T5885] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 585.028948][ T5885] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 585.078174][ T5885] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 585.099321][T11434] Bluetooth: hci3: command tx timeout [ 585.245289][T13138] hsr_slave_0: entered promiscuous mode [ 585.275413][T13138] hsr_slave_1: entered promiscuous mode [ 585.315109][T13138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.341934][T13138] Cannot create hsr debugfs directory [ 585.351481][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.360519][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.282697][T13138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 586.344819][ T30] audit: type=1326 audit(1746185267.657:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b8e969 code=0x7ffc0000 [ 586.351664][T13138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 586.387306][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 586.391124][T13194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 586.426783][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 586.447291][ T30] audit: type=1326 audit(1746185267.697:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13193 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febd3b8e969 code=0x7ffc0000 [ 586.467103][T13138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 586.556671][T13138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 586.835537][T13205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.845593][T13210] kAFS: unable to lookup cell '/Sjˡ8' [ 586.993376][ T5885] usb 4-1: USB disconnect, device number 12 [ 587.005672][ T5885] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 587.018326][ T5885] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 587.036274][ T5885] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 587.067299][T13205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.078136][ T5885] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 587.123821][ T5885] keyspan 4-1:0.107: device disconnected [ 587.179999][T11434] Bluetooth: hci3: command tx timeout [ 587.225788][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.289553][T11634] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 587.378521][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.419195][ T47] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 587.489406][T11634] usb 1-1: Using ep0 maxpacket: 32 [ 587.512949][T11634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.526829][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.533961][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.544753][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 587.569245][T11634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.614943][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.622152][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.632690][ T47] usb 3-1: config 0 has no interfaces? [ 587.632849][T11634] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 587.649225][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 587.659061][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.667051][ T47] usb 3-1: Product: syz [ 587.680079][ T47] usb 3-1: Manufacturer: syz [ 587.687433][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 587.701368][ T47] usb 3-1: SerialNumber: syz [ 587.708329][T11634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.710624][ T47] usb 3-1: config 0 descriptor?? [ 587.739200][ T5885] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 587.760818][ T5885] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 587.772405][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 587.790307][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 587.811487][ T5885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 587.831963][T11634] usb 1-1: config 0 descriptor?? [ 587.885743][T11634] hub 1-1:0.0: USB hub found [ 587.924607][ T5885] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 587.937950][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 587.970602][ T5885] usb 4-1: Product: syz [ 587.974851][ T5885] usb 4-1: Manufacturer: syz [ 587.984963][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.007191][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 588.019664][ T5885] cdc_wdm 4-1:1.0: skipping garbage [ 588.043676][ T5885] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 588.053903][T11634] hub 1-1:0.0: config failed, hub has too many ports! (err -19) [ 588.158659][ T5885] cdc_wdm 4-1:1.0: Unknown control protocol [ 588.176259][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.262725][T11634] usbhid 1-1:0.0: can't add hid device: -71 [ 588.268735][T11634] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 588.301332][T11634] usb 1-1: USB disconnect, device number 124 [ 588.345815][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.454364][T13138] veth0_vlan: entered promiscuous mode [ 588.580966][T13138] veth1_vlan: entered promiscuous mode [ 588.678519][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.709759][T13138] veth0_macvtap: entered promiscuous mode [ 588.722049][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.742542][T13138] veth1_macvtap: entered promiscuous mode [ 588.802036][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.822225][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.833290][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.851144][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.867964][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.892527][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.903941][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.921570][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.972253][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.992294][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.007707][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.026671][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.037651][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.072295][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.094285][T13138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.116715][T13138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.145826][T13138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.164952][T13138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.218638][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067673000: rx timeout, send abort [ 589.269097][T11434] Bluetooth: hci3: command tx timeout [ 589.346112][T10540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.374606][T10540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.468807][T10540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.491722][T10540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.631200][T13235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.647549][T13138] ================================================================== [ 589.655666][T13138] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 589.663427][T13138] Write of size 8 at addr ffff888026dc3408 by task syz-executor/13138 [ 589.671578][T13138] [ 589.673909][T13138] CPU: 1 UID: 0 PID: 13138 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 589.673930][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 589.673941][T13138] Call Trace: [ 589.673948][T13138] [ 589.673961][T13138] dump_stack_lvl+0x189/0x250 [ 589.673993][T13138] ? __kasan_check_byte+0x12/0x40 [ 589.674022][T13138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.674045][T13138] ? lock_release+0x4b/0x3e0 [ 589.674066][T13138] ? lock_release+0x4b/0x3e0 [ 589.674089][T13138] ? __virt_addr_valid+0x469/0x540 [ 589.674112][T13138] print_report+0xb4/0x290 [ 589.674132][T13138] ? binder_add_device+0x5f/0xa0 [ 589.674151][T13138] kasan_report+0x118/0x150 [ 589.674172][T13138] ? binder_add_device+0x5f/0xa0 [ 589.674195][T13138] binder_add_device+0x5f/0xa0 [ 589.674215][T13138] binderfs_binder_device_create+0x8b7/0xaf0 [ 589.674239][T13138] binderfs_fill_super+0xa0e/0xe90 [ 589.674262][T13138] ? __pfx_binderfs_fill_super+0x10/0x10 [ 589.674291][T13138] ? shrinker_register+0x16b/0x230 [ 589.674313][T13138] ? sget_fc+0x962/0xa40 [ 589.674329][T13138] ? __pfx_set_anon_super_fc+0x10/0x10 [ 589.674345][T13138] ? __pfx_binderfs_fill_super+0x10/0x10 [ 589.674365][T13138] get_tree_nodev+0xb8/0x150 [ 589.674382][T13138] vfs_get_tree+0x8f/0x2b0 [ 589.674401][T13138] do_new_mount+0x24a/0xa40 [ 589.674425][T13138] __se_sys_mount+0x317/0x410 [ 589.674448][T13138] ? __pfx___se_sys_mount+0x10/0x10 [ 589.674470][T13138] ? do_syscall_64+0xba/0x210 [ 589.674489][T13138] ? __x64_sys_mount+0x20/0xc0 [ 589.674509][T13138] do_syscall_64+0xf6/0x210 [ 589.674527][T13138] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 589.674544][T13138] ? clear_bhb_loop+0x45/0xa0 [ 589.674563][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.674579][T13138] RIP: 0033:0x7fd44079010a [ 589.674594][T13138] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.674609][T13138] RSP: 002b:00007fd440adff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.674626][T13138] RAX: ffffffffffffffda RBX: 00007fd440810e74 RCX: 00007fd44079010a [ 589.674639][T13138] RDX: 00007fd4408208cb RSI: 00007fd440810e74 RDI: 00007fd4408208cb [ 589.674652][T13138] RBP: 00007fd4408110bd R08: 0000000000000000 R09: 0000000000000000 [ 589.674663][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4407ec1a8 [ 589.674674][T13138] R13: 00007fd4407ec180 R14: 0000000000000009 R15: 0000000000000000 [ 589.674691][T13138] [ 589.674697][T13138] [ 589.923973][T13138] Allocated by task 11440: [ 589.928392][T13138] kasan_save_track+0x3e/0x80 [ 589.933078][T13138] __kasan_kmalloc+0x93/0xb0 [ 589.937672][T13138] __kmalloc_cache_noprof+0x230/0x3d0 [ 589.943053][T13138] binderfs_binder_device_create+0x17f/0xaf0 [ 589.949055][T13138] binderfs_fill_super+0xa0e/0xe90 [ 589.954167][T13138] get_tree_nodev+0xb8/0x150 [ 589.958758][T13138] vfs_get_tree+0x8f/0x2b0 [ 589.963191][T13138] do_new_mount+0x24a/0xa40 [ 589.967697][T13138] __se_sys_mount+0x317/0x410 [ 589.972378][T13138] do_syscall_64+0xf6/0x210 [ 589.976891][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.982789][T13138] [ 589.985115][T13138] Freed by task 5887: [ 589.989095][T13138] kasan_save_track+0x3e/0x80 [ 589.993805][T13138] kasan_save_free_info+0x46/0x50 [ 589.998840][T13138] __kasan_slab_free+0x62/0x70 [ 590.003605][T13138] kfree+0x193/0x440 [ 590.007502][T13138] binder_proc_dec_tmpref+0x228/0x4f0 [ 590.012880][T13138] binder_deferred_func+0x13a5/0x1520 [ 590.018252][T13138] process_scheduled_works+0xadb/0x17a0 [ 590.023805][T13138] worker_thread+0x8a0/0xda0 [ 590.028417][T13138] kthread+0x70e/0x8a0 [ 590.032493][T13138] ret_from_fork+0x4b/0x80 [ 590.036907][T13138] ret_from_fork_asm+0x1a/0x30 [ 590.041669][T13138] [ 590.044002][T13138] The buggy address belongs to the object at ffff888026dc3400 [ 590.044002][T13138] which belongs to the cache kmalloc-512 of size 512 [ 590.058056][T13138] The buggy address is located 8 bytes inside of [ 590.058056][T13138] freed 512-byte region [ffff888026dc3400, ffff888026dc3600) [ 590.071678][T13138] [ 590.074002][T13138] The buggy address belongs to the physical page: [ 590.080426][T13138] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026dc3c00 pfn:0x26dc0 [ 590.090505][T13138] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 590.099020][T13138] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 590.107524][T13138] page_type: f5(slab) [ 590.111533][T13138] raw: 00fff00000000240 ffff88801a041c80 ffffea0001fb1810 ffffea0001fa2110 [ 590.120118][T13138] raw: ffff888026dc3c00 000000000010000c 00000000f5000000 0000000000000000 [ 590.128703][T13138] head: 00fff00000000240 ffff88801a041c80 ffffea0001fb1810 ffffea0001fa2110 [ 590.137376][T13138] head: ffff888026dc3c00 000000000010000c 00000000f5000000 0000000000000000 [ 590.146171][T13138] head: 00fff00000000002 ffffea00009b7001 00000000ffffffff 00000000ffffffff [ 590.154841][T13138] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 590.163504][T13138] page dumped because: kasan: bad access detected [ 590.170006][T13138] page_owner tracks the page as allocated [ 590.175720][T13138] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5204, tgid 5204 (udevd), ts 308728216748, free_ts 308512540982 [ 590.198054][T13138] post_alloc_hook+0x1d8/0x230 [ 590.202859][T13138] get_page_from_freelist+0x21ce/0x22b0 [ 590.208454][T13138] __alloc_frozen_pages_noprof+0x181/0x370 [ 590.214286][T13138] alloc_pages_mpol+0x232/0x4a0 [ 590.219153][T13138] allocate_slab+0x8a/0x3b0 [ 590.223662][T13138] ___slab_alloc+0xbfc/0x1480 [ 590.228346][T13138] __kmalloc_cache_noprof+0x296/0x3d0 [ 590.233721][T13138] kernfs_fop_open+0x397/0xca0 [ 590.238485][T13138] do_dentry_open+0xdf0/0x1970 [ 590.243256][T13138] vfs_open+0x3b/0x340 [ 590.247331][T13138] path_openat+0x2ee5/0x3830 [ 590.251922][T13138] do_filp_open+0x1fa/0x410 [ 590.256430][T13138] do_sys_openat2+0x121/0x1c0 [ 590.261116][T13138] __x64_sys_openat+0x138/0x170 [ 590.265973][T13138] do_syscall_64+0xf6/0x210 [ 590.270477][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.276371][T13138] page last free pid 8969 tgid 8967 stack trace: [ 590.282714][T13138] __free_frozen_pages+0xb0e/0xcd0 [ 590.287829][T13138] __slab_free+0x326/0x400 [ 590.292244][T13138] qlist_free_all+0x9a/0x140 [ 590.296849][T13138] kasan_quarantine_reduce+0x148/0x160 [ 590.302312][T13138] __kasan_slab_alloc+0x22/0x80 [ 590.307167][T13138] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 590.312632][T13138] security_inode_alloc+0x39/0x330 [ 590.317747][T13138] inode_init_always_gfp+0x9ed/0xdc0 [ 590.323039][T13138] alloc_inode+0x82/0x1b0 [ 590.327377][T13138] __sock_create+0x12d/0x9f0 [ 590.331973][T13138] __sys_socket+0xd7/0x1b0 [ 590.336386][T13138] __x64_sys_socket+0x7a/0x90 [ 590.341066][T13138] do_syscall_64+0xf6/0x210 [ 590.345571][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.351462][T13138] [ 590.353781][T13138] Memory state around the buggy address: [ 590.359412][T13138] ffff888026dc3300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 590.367472][T13138] ffff888026dc3380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 590.375531][T13138] >ffff888026dc3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.383590][T13138] ^ [ 590.387914][T13138] ffff888026dc3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.395975][T13138] ffff888026dc3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.404032][T13138] ================================================================== [ 590.412223][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.419832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067673000: abort rx timeout. Force session deactivation [ 590.424358][T13235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.584686][ T5887] usb 4-1: USB disconnect, device number 13 [ 590.869973][T13138] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 590.877230][T13138] CPU: 1 UID: 0 PID: 13138 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 590.889496][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 590.899581][T13138] Call Trace: [ 590.902882][T13138] [ 590.905833][T13138] dump_stack_lvl+0x99/0x250 [ 590.910463][T13138] ? __asan_memcpy+0x40/0x70 [ 590.915078][T13138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.920305][T13138] ? __pfx__printk+0x10/0x10 [ 590.924915][T13138] panic+0x2db/0x790 [ 590.928824][T13138] ? __pfx_preempt_schedule+0x10/0x10 [ 590.934201][T13138] ? __pfx_panic+0x10/0x10 [ 590.938642][T13138] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 590.944551][T13138] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 590.950888][T13138] ? binder_add_device+0x5f/0xa0 [ 590.955836][T13138] check_panic_on_warn+0x89/0xb0 [ 590.960782][T13138] ? binder_add_device+0x5f/0xa0 [ 590.965725][T13138] end_report+0x78/0x160 [ 590.969976][T13138] kasan_report+0x129/0x150 [ 590.974491][T13138] ? binder_add_device+0x5f/0xa0 [ 590.979438][T13138] binder_add_device+0x5f/0xa0 [ 590.984212][T13138] binderfs_binder_device_create+0x8b7/0xaf0 [ 590.990222][T13138] binderfs_fill_super+0xa0e/0xe90 [ 590.995434][T13138] ? __pfx_binderfs_fill_super+0x10/0x10 [ 591.001083][T13138] ? shrinker_register+0x16b/0x230 [ 591.006203][T13138] ? sget_fc+0x962/0xa40 [ 591.010448][T13138] ? __pfx_set_anon_super_fc+0x10/0x10 [ 591.015910][T13138] ? __pfx_binderfs_fill_super+0x10/0x10 [ 591.021549][T13138] get_tree_nodev+0xb8/0x150 [ 591.026142][T13138] vfs_get_tree+0x8f/0x2b0 [ 591.030562][T13138] do_new_mount+0x24a/0xa40 [ 591.035074][T13138] __se_sys_mount+0x317/0x410 [ 591.039761][T13138] ? __pfx___se_sys_mount+0x10/0x10 [ 591.044984][T13138] ? do_syscall_64+0xba/0x210 [ 591.049674][T13138] ? __x64_sys_mount+0x20/0xc0 [ 591.054449][T13138] do_syscall_64+0xf6/0x210 [ 591.058964][T13138] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 591.064615][T13138] ? clear_bhb_loop+0x45/0xa0 [ 591.069314][T13138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.075215][T13138] RIP: 0033:0x7fd44079010a [ 591.079643][T13138] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.099259][T13138] RSP: 002b:00007fd440adff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.107686][T13138] RAX: ffffffffffffffda RBX: 00007fd440810e74 RCX: 00007fd44079010a [ 591.115665][T13138] RDX: 00007fd4408208cb RSI: 00007fd440810e74 RDI: 00007fd4408208cb [ 591.123652][T13138] RBP: 00007fd4408110bd R08: 0000000000000000 R09: 0000000000000000 [ 591.131646][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd4407ec1a8 [ 591.139626][T13138] R13: 00007fd4407ec180 R14: 0000000000000009 R15: 0000000000000000 [ 591.147631][T13138] [ 591.150966][T13138] Kernel Offset: disabled [ 591.155302][T13138] Rebooting in 86400 seconds..