last executing test programs: 1m22.096115406s ago: executing program 1 (id=1672): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x1c}, 0x20) 1m21.516122276s ago: executing program 1 (id=1674): futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x41, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) ptrace(0x10, 0x1) (async) bind$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff86) (async) inotify_init1(0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000f9d21bfe56", @ANYRES16=r6, @ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') (async, rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') (rerun: 64) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0x80184132, &(0x7f00000003c0)) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0x8c}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}, {}, 0xc}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.204022134s ago: executing program 1 (id=1677): r0 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) r1 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa1}}) io_uring_enter(r1, 0x2def, 0xb80c, 0x4e, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02050909070000000200edffffffffff04000700000000000a"], 0x38}}, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0x17) 1m21.089571345s ago: executing program 1 (id=1679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x56, 0x1, 0x0, 0xb49, 0xa1, 0x8, 0x0, 0x3}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000d041) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{0x0}], 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd1a, 0x0) r4 = gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0xff, 0x0, 'wlan0\x00', 'ip6tnl0\x00', {}, {}, 0x21, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x1070, 0x2, [0xb, 0x40, 0x4, 0x3e, 0x27, 0x35, 0x2f, 0x3, 0x36, 0x25, 0x6, 0x24, 0x4, 0x2c, 0x7, 0x37], 0x0, 0xfff, 0x80000001}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "44f6f70f0c76234ab055ef077ebacfcc3fc5ef1372371f4b27a7c531de0a"}}, {{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'wlan1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x4, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1338000, 0x1000, 0x0, 0x2}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32=0x0], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64010000060a09040000000000000000020000002c000480280001800a00010072616e67650000001800028008000140000000240800024000000003040003800900010073797a30000000000900020073797a3200000000bd000740"], 0x18c}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m20.140570981s ago: executing program 1 (id=1685): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x191, 0x4, 0x10, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') getdents(r7, &(0x7f0000000140)=""/72, 0x48) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe230b889c89ce4fe5dd5a3a77b6514a454d127a5906203b8dcb063d12821a8e133f6d3e70d7d4c300ac1c7f81af3ccf8b841cc8e29bf0532c557b3bed6a3c6564b74b8b6505628a2e4fc69dbf90ba8acc545f3c6de0799e1dd28ce62b36b7aeade006a764cac0724515244a909ade98177a986d0b815a781c70b411d0138a74e6adeff49f6f5b8445145faa75279e2ef81b2d36cd54397117a596b6b3202896cc70fec826530d582aa98314"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x1e) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x8) r11 = openat$cgroup_pressure(r10, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) read(r11, &(0x7f0000000040)=""/252, 0xfc) 1m16.954593777s ago: executing program 1 (id=1699): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) fchmod(r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix_mp={0xaeb, 0x9a63, 0x3132564e, 0x1, 0x1, [{0x0, 0x100}, {0x3, 0x6}, {0xe, 0xfffffff9}, {0x101, 0x2}, {0x2, 0x7}, {0x8, 0xd59e}, {0xffffff2a, 0x7}, {0xe, 0x3}], 0x40, 0x9, 0x8, 0x0, 0x3}}) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x1b5e, 0x3b9, &(0x7f0000000040)="ca8dacdbe4d310a780cfb9d797ffe8b427f3966f758956e40825732205988b687c84971b80eb252738d335776e4acfb97558d5b8518c9d64b748143c33729def58f936140c96e96fe6738d456835a85c9bf855b8961226b028ac9070e0f249d865717280fb55954e073d46142071c3b150fe7de4ec7d975259d9dd242ca7be2bf513a160b1608fba668654ae7e3e3a151698d0439a468796a2deff08983c9cca90f816144f5582a0452c8fdbc8345ae3896dd2403037ae8e2e19a9ccc4c30222ebcf57c10b27cf5281bc5b3f79993018386b4489ad4523be5fdb295b8691a337", &(0x7f0000000240)="e1d7427790e7d227d7b63c515cb60c79dfbf379bcc00c3db25feb5d1d5e2b0352ad8038f56e03d1f5720c5580356d9403a681de8334ba7394fbdad772e952132c64e3658cdcc06a71fe181eee4b4ff8b8387889d29f107a9d6d9a1677d6924cd5a12a31c1ce6f96c223bb1f1846d2c1ea2596c75d61a91abba90e895cfca5d4c563721f6179262e86f3c942cd8586950a93a9473842022ae456f2cd767337b8e0a3469890866a6f61f9d944e08c391c85635319401cfe0ea6d3705838f36565e8b5f0ddf037915e0dced0428fc2f91d1ca4ec5540a31292c12793f3f03257491703f55f993", 0xe0, 0xe5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r3, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = epoll_create1(0x80000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022050001009724051047061ff49998491aa672d4a8164bad2222cb7799d73f591ed304a1916d0b5587579ac61c6132d14cf03cf135de1a0ffe71a2674c106471d7e0e2c806956b8976c6fb6d2266861aaaeb92978166138cd64ebb417423c0f6299493d10ce9b03ab84fde4bba9f957290c794ac610dd8b193b8059f0c1c01efb3a384a51d25b3a2d1b151938f544014171690e965e9c176fe5b021134525b81548a09a3af487198be47c856531942c1e798fae6697ef64a"], 0x0}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0xa000000d}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x9dc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x394}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000600)) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="780100001900674c000000000000000000000000000000000000ffffac1e0101ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x4c050) openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) 1m1.905363457s ago: executing program 32 (id=1699): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/config', 0x0, 0x0) fchmod(r0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix_mp={0xaeb, 0x9a63, 0x3132564e, 0x1, 0x1, [{0x0, 0x100}, {0x3, 0x6}, {0xe, 0xfffffff9}, {0x101, 0x2}, {0x2, 0x7}, {0x8, 0xd59e}, {0xffffff2a, 0x7}, {0xe, 0x3}], 0x40, 0x9, 0x8, 0x0, 0x3}}) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x1b5e, 0x3b9, &(0x7f0000000040)="ca8dacdbe4d310a780cfb9d797ffe8b427f3966f758956e40825732205988b687c84971b80eb252738d335776e4acfb97558d5b8518c9d64b748143c33729def58f936140c96e96fe6738d456835a85c9bf855b8961226b028ac9070e0f249d865717280fb55954e073d46142071c3b150fe7de4ec7d975259d9dd242ca7be2bf513a160b1608fba668654ae7e3e3a151698d0439a468796a2deff08983c9cca90f816144f5582a0452c8fdbc8345ae3896dd2403037ae8e2e19a9ccc4c30222ebcf57c10b27cf5281bc5b3f79993018386b4489ad4523be5fdb295b8691a337", &(0x7f0000000240)="e1d7427790e7d227d7b63c515cb60c79dfbf379bcc00c3db25feb5d1d5e2b0352ad8038f56e03d1f5720c5580356d9403a681de8334ba7394fbdad772e952132c64e3658cdcc06a71fe181eee4b4ff8b8387889d29f107a9d6d9a1677d6924cd5a12a31c1ce6f96c223bb1f1846d2c1ea2596c75d61a91abba90e895cfca5d4c563721f6179262e86f3c942cd8586950a93a9473842022ae456f2cd767337b8e0a3469890866a6f61f9d944e08c391c85635319401cfe0ea6d3705838f36565e8b5f0ddf037915e0dced0428fc2f91d1ca4ec5540a31292c12793f3f03257491703f55f993", 0xe0, 0xe5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r3, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r4 = epoll_create1(0x80000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0022050001009724051047061ff49998491aa672d4a8164bad2222cb7799d73f591ed304a1916d0b5587579ac61c6132d14cf03cf135de1a0ffe71a2674c106471d7e0e2c806956b8976c6fb6d2266861aaaeb92978166138cd64ebb417423c0f6299493d10ce9b03ab84fde4bba9f957290c794ac610dd8b193b8059f0c1c01efb3a384a51d25b3a2d1b151938f544014171690e965e9c176fe5b021134525b81548a09a3af487198be47c856531942c1e798fae6697ef64a"], 0x0}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000140)={0xa000000d}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_io_uring_setup(0x9dc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x394}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r4, &(0x7f0000000600)) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="780100001900674c000000000000000000000000000000000000ffffac1e0101ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x4c050) openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) 17.831044274s ago: executing program 3 (id=1902): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) poll(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) gettid() timer_settime(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, 0x0, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_LIMIT={0x1, 0x1, 0xfffffffe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 14.526716976s ago: executing program 3 (id=1910): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7}) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x0, 0xe1d, &(0x7f0000019600)=""/4096}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(0x0, 0x208c, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) listen(r5, 0xda90) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xffff, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x800) accept4(r5, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) syz_io_uring_setup(0x37ff, &(0x7f00000002c0)={0x0, 0x918d, 0x40, 0x2, 0x20b}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x2b, @multicast2, 0x0, 0x2, 'wlc\x00', 0x6, 0x1, 0x3}, {@empty, 0x2, 0x2, 0x7, 0x0, 0x2}}, 0x44) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, &(0x7f0000000040)) unshare(0x62040200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 12.691007138s ago: executing program 5 (id=1921): r0 = socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x88500, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x20, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 11.876056048s ago: executing program 0 (id=1922): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x80000000000000a, 0x313e20d7a35df3b9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x48, 0x0, &(0x7f0000000240)) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x800d1}, 0x20000880) preadv(r2, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000380)={0x1, 0x0, [{0xd, 0x20c73835, 0x8, 0xff, 0x9}]}) sendmmsg$inet(r0, &(0x7f000000ae00)=[{{&(0x7f0000004780)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000006900)=[{&(0x7f00000047c0)="745ecf9f0154a510feed74a1ad70038b15689469", 0x14}], 0x1}}, {{&(0x7f0000006980)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x24004040) 10.541368219s ago: executing program 3 (id=1925): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c10000000000000000000", 0x58}], 0x1) r5 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) ptrace(0x10, r5) ptrace$cont(0x18, r5, 0xe, 0x1000000a) r6 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r4, 0x0) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000a40)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xab8b]}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r7, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000040)={0x1, 0xa0, &(0x7f00000002c0)="ec88d99e0071a45f8af084e64c5958d200178bf2cbc8fa4269386224497e84a84815a0ba0607e1a2d18d5c206d6304a6cf51a6530f887655a6ab43cdf8d237c95b495f22f368cfbdbdc7d4fe4ac259253e5bdf67c1c0cb85a6ae02920fcacdac80ad1841c7ab51ca588265eea60bcc9ef94890223cd41295ee2e182cf7dc5286e0b5b8e571980ecb0df8e9bc96549af5722af3b49fad1201dea5f5b281181aae"}) 6.728960779s ago: executing program 0 (id=1932): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x254000, 0x0) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0xc, 0x7}, [{0x3, 0x6, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x5}]}, 0x58) r2 = fanotify_init(0x200, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x14, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40008c0) fanotify_mark(r2, 0x1, 0x8001021, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.631768268s ago: executing program 5 (id=1934): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3d03, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000000000000500", "24431a1e77a68e174f000000000000000010e200000000000000000000000200", [0x0, 0x3]}}) 6.554562633s ago: executing program 3 (id=1936): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0) poll(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) gettid() timer_settime(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, 0x0, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x20) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_LIMIT={0x1, 0x1, 0xfffffffe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18380000000000000000000001000000b7080000000000007b8af8ff00000000b508000000000000638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32, @ANYBLOB="0000000002000000b703000008000000850000006900000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.439751049s ago: executing program 0 (id=1937): mmap(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, 0xffffffffffffffff, 0xbf439000) r0 = eventfd2(0x1ff, 0x80001) syz_usb_connect(0x2, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000077249f08ec1888323a3f010203010902fc0001870000000904e67e"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20100000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 6.366928616s ago: executing program 4 (id=1938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000002d00090027bd7000000000e604000000100018000cac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250f0000001c0007800c000300fffffffffff9b0640b000400"], 0x30}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x17b482, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x40000060) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r6) sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="03f4ff002d7014bdbf580602793fe934d90bd834a26d1883438cd91ff32837a498553c01f7016ea0040b7cd393cf32fa55c94393827abb0575ca28cd37a07f5f23f0d03c33ba6e2d9801b6d6404537093d633e7d58e7d05c2c53ac7fc5d8", @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7b) syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x143a81) 6.178804874s ago: executing program 5 (id=1939): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES64=r1]) 6.091025272s ago: executing program 5 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000110400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a3100"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400ff001206030300000000000000f0ff00000005001e2289b5370100160000000d0003006c6973743a736574000000000c000780060004404e2400000900020073797a30000020000500050002000000050004"], 0x54}}, 0x4008080) syz_open_dev$midi(&(0x7f0000000140), 0x3, 0x884c1) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x6}, 0xf) r5 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r5], 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) socket$kcm(0x29, 0x2, 0x0) syz_usb_disconnect(r2) close_range(r1, 0xffffffffffffffff, 0x0) 5.246195204s ago: executing program 4 (id=1943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0xabe) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r3, 0x0, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c000000000101040000000000000000020000082400018014000180080001000000000008000200ac1414280c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002c2ff0200e000000208000740000000001800068008000a00ac1414000c000380060002004e220000"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000003000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 4.010317385s ago: executing program 5 (id=1947): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043558100040000000001090224000100000000090400000103110000092100004001220700090581030000a00000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x2, 0x4ee59ce4, 0x1, 0xfffffffc, 0x6}, 0x0) r4 = getpid() ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r7, 0x0, 0x201f00) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="7261777b6f00000000000000000000000000000000000000fbffffff0000000000000500c600e3df576c8f3b65f7c7b380eecdc96e9528661ef6c2c7d0dfdf0a539846c24d6d825f9f71e1309a01ea4709d569a8c6337e2e52bb65d93aedd1e874e16ed4d0a52c44ca48164ff0359eb03c000000000000000000"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x4c481) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, 0x0) setns(r5, 0x8020000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x249c, &(0x7f00000066c0)={[{0xad, 0x4e00, "3ccc31126ddae4c9e65d2e4eb17c8f5c449aa9611b68be0ac66dd75f7496a1d782d770595f20c4514219b965839212132f7634e3e36172832d1ee6cda6f35a7033bbbbca304943d8d6fef3bd7667b5e4c1d98755760cb6d8aec99488eea1c3c99b9bab5c4df620cb0366a552205958d4e2d9c8a00013b01b2b27001a31b7e643c5157d7516038d70fa4b3aa5227c52d5ad88e4a4739b6e1b4acd49fc967d5333cfd1503f43fe11dd925c6274a5"}, {0x8c, 0x4e00, "4c55cf08bea86937ac95be243f73c491749661cdda0614e7cae851409f3d016a80c4e95332acd040fbb4aac99791b04731fdb6a9e8054cdf1262369b45c9a1381ccce18f97c47f12e5f9dc2b5fe26951cd403c658d8808d585f479908566f5358336a68ed62208d85187d56f2bbb3c410e522e85811c848976523126d94ffcd0142074f6280585f8814c65e0"}, {0xe7, 0x4e00, "d375d275f1c0c85818b6847af774ebe4a9784a65812fd98594de4beeb928d4f64101041b2ad01411638b3defd05719841363f6c5fb4a6b056f900671db0737770ae23469331963818d0d2196170df33e49b3ed6f35f34e8d21569e66e43c6a5f2336d21b84bc3d58956f4770c42b5ac95ab9f3ab7e0517fbfe9ed7a1b6db3dc9836797793742b2774b39f459df31f8124c05d9f3ab96fed162729f0ee0f537d052522ddbb6d1506d6be776191f49dab08c6b6b783a35a57346497261b2be99b702727e8d4a92a47a51fc01d5db0466e046e91c19b3a4ddba4a3151f578320c42c4fc89714047e3"}, {0x1000, 0x4e00, "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"}, {0x31, 0x4e00, "0067873381447af57d587b73a55f8b62e6a93d29bf492ece8cf94f5f6e291e61118bd076a981165a81adc0e5570bafc4f9"}, {0xe2, 0x4e00, "2d238a049381ac30112588f6dc00786532482956cbf60ab0a2db323178f0f383cb97d6759780d0cbf011016c5ffe660ab59cbd511637ebc1bd826bb0578ad12ece15d14a701ab92a99a444f3b08c56573972b29bda085b77975afd6e56f53b38b216bdb71f685d9826ea6ff3f3005cc1c5994c26dfe9c850fea2ba5c3c9b63ee3e6fe6561c8b8008e68c3ceff2f67d13e906f98e510bede45d9bf9d9cc10ffd5d5cc81fc6f64643e0b1bc9152070b1d4f8796fbb0c1545d5d6e078df5295aab2883a9f65039e98bfe96e17a2e88123873291c6830ae92187d9a7acb7ff9056e15801"}, {0x1000, 0x4e00, "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"}, {0x51, 0x4e00, "941a57b8b17ae6453e28eb0a363c8a8b952d6dcafedcd27ba5477fb452bdcfe30a9bcdd4ef4d52c3e8f4f9ae044421ba30262ac6c7314050ba6d2742108450159bfdeff3b325f60432d461e66e2fff7dba"}, {0x8b, 0x4e00, "9eab21d106f9c132107b0ce86868de964efb2642e12c40738b96facfa75adc6023a3e654f01626940a0950e6574d9d4010957c0c3b95b9bfd40d54686ef55ae101609bd17ae51d587a6d00b630a4647810fc8f218dbb0c88ff28e7c95bc02f8c87ca9fbe7b810c5ece7aef6f99ad27ad0b68f0ee9acea040b940872bc67dc68a00fe6335e6060bbf73d0a1"}, {0x57, 0x4e00, "58a83e137e15dff73169de91ece91ba9abc0239367fb536aa761cd09512315fa7c0000eca4f0bdb176d8ded27c1774d38a0aa55ed097913139581ee64c5034e7744bed86b6efba00"/87}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_open_dev$usbfs(0x0, 0x20000007b, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, '\x00\x00\x00\"'}, @local=@item_012={0x1, 0x2, 0x0, "d3"}]}}, 0x0}, 0x0) 3.896287812s ago: executing program 2 (id=1948): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000040)={0x40, 0x14, 0xb2, "2378a4dd56961c840000000000955031fa6d405018e0e7c30b0369ef7301adf51d65dd9a4081fb7ab7e483971e1c676309b9727ead2914169a99d3411233dc89f4094693565a9b705e05205a9056eecd95879df14459ee9097cb3aca1f2c9b274dd8a2e397a4541b1c5aa82fc0d9529220adc0f20da2049084ba5e199d03bc267ea66a9c22b6535daac085f41ae3e5d83a47f7c7310004e430d0a963c4753d24f85af47ff834b5e8b93f95c9379b06400e09"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1d, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtclass={0x24, 0x28, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {0xb, 0x9}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048020}, 0x4000) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04023904aa04220a547300ff"], 0x3c) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r6, 0x0, &(0x7f00000003c0)) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b44, 0x10000000000004) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) userfaultfd(0x801) (async) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d044fc200000000000109022400010000400009040009010300020009210500000122040009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f0000000940)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00$u'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.706145059s ago: executing program 4 (id=1949): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3d03, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000000000000600", "24431a1e77a68e174f000000000000000010e200000000000000000000000200", [0x0, 0x3]}}) 3.598563444s ago: executing program 4 (id=1950): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES64=r1]) 3.460556145s ago: executing program 4 (id=1951): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x800, 0x0) syz_clone3(&(0x7f00000008c0)={0x15348380, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffff47, 0x0, &(0x7f0000001180)=[0x0], 0x1}, 0x58) getdents64(r1, 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x4e22, @empty}}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000440)="d1fc7f", 0x3}], 0x1}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.22635561s ago: executing program 0 (id=1952): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r3]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES64=r2]) 2.960341665s ago: executing program 3 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) semget$private(0x0, 0x0, 0x1a0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x300, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfbd002c117c89920}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) 2.694606658s ago: executing program 2 (id=1954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c00014000000000000001010c0004400000000000000006080002"], 0x188}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x7, 0x0, 0x26}, 0x3e, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x102, 0x1, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x4b6, 0x1, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x8, 0x0, 0x2, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0xfffffffe, 0x0, 0x20004, 0x0, 0x0, 0x105, 0xbd, 0x0, 0xfffffffe], [0x10, 0xffffffff, 0x80007, 0x0, 0xfffffffb, 0x9, 0x0, 0x0, 0x2, 0x0, 0xf1, 0x2, 0x7, 0x2, 0xfffffffe, 0x8, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x100, 0x0, 0x3, 0xec6b, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x5, 0x0, 0x18c, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0xfffffffc, 0x100004, 0x0, 0x0, 0x4, 0x3fffffd, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x9e, 0x0, 0x0, 0xffffffff, 0x2, 0xa000000, 0x0, 0x29, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x3, 0x10200, 0x4, 0x0, 0x520, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0xfe2f, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x100, 0x8, 0x2, 0xb, 0x0, 0x25a1], [0x4, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x6, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x5, 0x7fff, 0xfffffffe, 0xd, 0x3, 0x0, 0xfffffffe, 0x8069, 0x0, 0x4, 0xc000000, 0x0, 0xa, 0x3, 0x0, 0x0, 0x7, 0x8, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x4, 0x6, 0x3, 0x6e, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x5, 0x1]}, 0x45c) r2 = memfd_secret(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x8}]}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000800)={@remote, @local, 0x0}, &(0x7f0000000840)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd0060f709532877b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x88}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001240)=ANY=[], 0xfce) fremovexattr(r2, &(0x7f0000000280)=@random={'osx.', '\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000004fa448b7e6e1541c07970eca5a985ea08bd6df78127cccbf737e9eb36d85ebfce18a3a505e8a7ceb8545cfcd5ce63ef75eb04432f804d674160406d6d4e9c59e2c4c2b63ea2994f6285357d5b5da88", @ANYRES16=r9, @ANYBLOB="000329bd7000fedbdf25160000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r10, r11, r10}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 2.63966997s ago: executing program 0 (id=1955): r0 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r0, &(0x7f0000000cc0), 0x0, 0x40002102, &(0x7f0000000180)={0x0, 0x989680}) r1 = semget(0x3, 0x2, 0xa8) semop(r1, &(0x7f00000001c0)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}, {0x4, 0xff0a, 0x800}], 0x3) semtimedop(r1, &(0x7f0000000000)=[{0x2, 0xc, 0x1800}, {0x0, 0xfffe, 0x1000}], 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x7, 0x7, {{0x10, 0x4, 0x3, 0x3a, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x7, 0xbd, [@remote]}, @end, @ssrr={0x89, 0x7, 0x80, [@multicast2]}, @timestamp_prespec={0x44, 0x14, 0xf5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x6}]}]}}}}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@rand_addr=0x64010100, @in=@remote, 0x4e24, 0x0, 0x4e24, 0x4, 0x2, 0x80, 0x80, 0x3c, r3, r4}, {0xffc, 0x5, 0xf15, 0x9, 0x7fff, 0x7ff, 0x65b, 0x8}, {0x8000000000000001, 0x6062, 0x1ac, 0xffae}, 0xc000000, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x3501, 0x4, 0x1, 0x2, 0x52c, 0x3, 0x8}}, 0xe8) r5 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340), 0x8) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000180)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000140)}}) close(0x3) socket(0x2, 0x80805, 0x0) close(0x3) r7 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x100, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x79f43, 0x20b}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.538326922s ago: executing program 3 (id=1956): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/90, 0x5a}], 0x4, 0x3b, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xba, 0x7ffc0002}]}) setresuid(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000ac0)={'wg2\x00'}) 2.031731538s ago: executing program 2 (id=1957): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000001000e0000001000000000000000000000000e0000001000000000000000000020000276eb0aa00000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/101], 0xb8}}, 0x0) 1.589432035s ago: executing program 4 (id=1958): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x10000008, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0xa2, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x327681, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550c, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000240)) dup(r5) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000300)=0x5, 0x7fffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102381, 0x18fed}], 0x1, 0x9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.538410611s ago: executing program 0 (id=1959): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socket(0x22, 0x800, 0x2) close(0x3) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000000), 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r10, 0x2, &(0x7f00000000c0)={0x3}, 0x0) syz_usb_connect(0x4, 0x81c, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2085], &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)={0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x21, 0xf0}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x3, 0xd}]}, 0x4, [{0x0, 0x0}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd0397c200"/193]}, {0x7f, &(0x7f0000000f80)=ANY=[@ANYBLOB="7f039811916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f15f8a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fb0ddf48d83daa2299ecfe21af62ffe1f55f30d21cfdb6009ae317fd0d655f8cabc6abbb19a940640fc7a623471bf45b1303367a5343025d77ee226e0d66c5044638c347d03e546732b7cff68738bc31dab333c4862716a1ada6ddfafb587cfecd9bf05a23ee9809bbf0a371de86c8de688debabf022048fcb97a87971737f966ccc8f1a8062"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]}) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r8, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.089804795s ago: executing program 2 (id=1960): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0x6bd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x1, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1a3d03, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200000000000000000000000000000000000000000000000700", "24431a1e77a68e174f000000000000000010e200000000000000000000000200", [0x0, 0x3]}}) 245.850879ms ago: executing program 2 (id=1961): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8=r2]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000900)=ANY=[@ANYRES32=r3, @ANYRES64=r1]) 0s ago: executing program 2 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) r3 = syz_io_uring_setup(0x98, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r3, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00001092c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "40f845d8f5e9ee"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000010a2c0)={{0x0, 0x3, 0x0, 0x0, 0x2, 0x2, 0x22, 0x5, 0x3, 0x3, 0x95d, 0x5, 0x9, 0xa, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010b2c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000010b4c0)={{0x0, 0x3ff, 0x1000, 0x1, 0x7, 0x7fffffff, 0x9, 0xf6, 0x65a, 0x52702081, 0x0, 0x5, 0x3ff, 0xffffffffffffffff, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f000010b580)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x22, "128bbc9364935e"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000010c580)={{0x0, 0x100, 0x401, 0x9, 0x0, 0x8, 0x7, 0xd7, 0x80000001, 0x6b, 0x800, 0x5, 0x4, 0x101, 0xb2}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000010d580)={{0x0, 0x4, 0x40, 0x3, 0x8001, 0x0, 0x7, 0x400, 0x1, 0x8, 0x40, 0x10001, 0xdd}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000010e580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000010f580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000010f780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000010f980)={{0x0, 0x3, 0x2, 0x5, 0xe618, 0x2, 0x5, 0xda, 0x9, 0x8, 0x8, 0x80000001, 0x6a86790d, 0x0, 0x100000000}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000110980)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "b29b6248f7811a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000111980)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "5db2b1ad5a217d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000112980)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000112b80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000112d80)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8, r9}, {r10}, {0x0, r11}, {r12}, {r13, r14}, {r15, r16}, {r17, r18}, {r19}, {}, {r20, r21}], 0x0, "523875624fdc5f"}) kernel console output (not intermixed with test programs): 83691][ T979] usb 3-1: ath9k_htc: USB layer deinitialized [ 498.700541][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 498.702729][T11167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 498.841010][T11173] veth0_to_batadv: left allmulticast mode [ 498.889748][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.889779][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.894116][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.894149][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.894171][ T10] usb 3-1: SerialNumber: syz [ 499.201042][ T5986] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 499.380668][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 499.427249][ T5986] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 499.464164][ T5986] usb 2-1: config 0 has no interface number 0 [ 499.488331][ T5986] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 499.537403][ T5986] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 499.670855][ T5986] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 499.709898][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.796892][ T5986] usb 2-1: Product: syz [ 499.840242][ T5986] usb 2-1: Manufacturer: syz [ 499.867096][ T5986] usb 2-1: SerialNumber: syz [ 499.917769][ T5986] usb 2-1: config 0 descriptor?? [ 499.977374][T11179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 499.987273][T11179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 500.314783][T11179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 500.374921][T11179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 500.906124][ T30] audit: type=1326 audit(1759057053.005:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 500.929013][ T5920] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 501.000261][ T5986] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 501.016958][ T5986] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 501.050569][ T30] audit: type=1326 audit(1759057053.005:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 501.078777][ T5986] asix 2-1:0.251: probe with driver asix failed with error -71 [ 501.119378][ T5986] usb 2-1: USB disconnect, device number 59 [ 501.168744][ T5920] usb 5-1: device descriptor read/64, error -71 [ 501.389248][ T30] audit: type=1326 audit(1759057053.005:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 501.416286][ T30] audit: type=1326 audit(1759057053.005:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 501.677710][ T30] audit: type=1326 audit(1759057053.005:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 501.702664][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.760633][ T5920] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 501.881662][ T30] audit: type=1326 audit(1759057053.005:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 501.960533][ T5920] usb 5-1: device descriptor read/64, error -71 [ 502.001140][ T30] audit: type=1326 audit(1759057053.005:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 502.074307][ T5920] usb usb5-port1: attempt power cycle [ 502.085172][T11201] loop2: detected capacity change from 0 to 7 [ 502.093163][T11201] Dev loop2: unable to read RDB block 7 [ 502.119929][T11201] loop2: unable to read partition table [ 502.129828][ T30] audit: type=1326 audit(1759057053.005:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 502.166703][T11201] loop2: partition table beyond EOD, truncated [ 502.220314][T11201] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 502.316528][ T30] audit: type=1326 audit(1759057053.005:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 502.346924][ T10] usb 3-1: 0:2 : does not exist [ 502.369646][ T10] usb 3-1: unit 5: unexpected type 0x0b [ 502.457065][ T5920] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 502.464543][ T30] audit: type=1326 audit(1759057053.005:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 502.537632][ T30] audit: type=1326 audit(1759057053.005:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11195 comm="syz.3.1387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 502.597658][ T10] usb 3-1: USB disconnect, device number 80 [ 502.616303][ T5920] usb 5-1: device descriptor read/8, error -71 [ 502.930789][ T5920] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 502.981283][ T5920] usb 5-1: device descriptor read/8, error -71 [ 503.040581][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 503.118008][ T5920] usb usb5-port1: unable to enumerate USB device [ 503.220454][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 503.244166][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'. [ 503.253604][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 503.263964][T11222] netlink: 'syz.0.1393': attribute type 12 has an invalid length. [ 503.285793][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 503.311103][ T10] usb 3-1: config 4 has an invalid interface number: 246 but max is 0 [ 503.320500][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 503.336711][ T10] usb 3-1: config 4 has no interface number 0 [ 503.354386][ T10] usb 3-1: config 4 interface 246 has no altsetting 0 [ 503.370268][ T10] usb 3-1: string descriptor 0 read error: -22 [ 503.400167][ T10] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 503.419830][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.506272][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 503.520543][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 503.536859][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 503.545574][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 503.553105][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 503.564944][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.578064][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.612887][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 503.620693][ T9] usb 4-1: Product: syz [ 503.650850][ T9] usb 4-1: Manufacturer: syz [ 503.659249][ T10] usb 3-1: media controller created [ 503.664629][ T9] usb 4-1: SerialNumber: syz [ 503.679613][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.690966][ T9] usb 4-1: config 0 descriptor?? [ 503.716867][ T10] dw2102: i2c transfer failed. [ 503.724506][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 503.735969][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.746150][ T10] dw2102: i2c transfer failed. [ 503.757506][ T9] usb 4-1: Detected FT-X [ 503.761943][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.778914][ T10] dw2102: i2c transfer failed. [ 503.795242][T11205] dvb-usb: bulk message failed: -22 (5/0) [ 503.849382][T11205] dw2102: i2c transfer failed. [ 503.898183][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.928237][ T10] dw2102: i2c transfer failed. [ 503.941910][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.956547][ T10] dw2102: i2c transfer failed. [ 503.970484][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 503.986559][ T10] dw2102: i2c transfer failed. [ 504.058636][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 504.243526][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.304109][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 504.341118][ T10] dw2102: command 0x0e transfer failed. [ 504.353848][T11244] loop2: detected capacity change from 0 to 7 [ 504.364378][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 504.373178][ T10] dw2102: command 0x0e transfer failed. [ 504.379567][ T6269] Dev loop2: unable to read RDB block 7 [ 504.386593][ T6269] loop2: unable to read partition table [ 504.393507][ T6269] loop2: partition table beyond EOD, truncated [ 504.404215][T11244] Dev loop2: unable to read RDB block 7 [ 504.410687][T11244] loop2: unable to read partition table [ 504.425639][T11244] loop2: partition table beyond EOD, truncated [ 504.439900][T11244] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 504.660142][T11248] futex_wake_op: syz.4.1401 tries to shift op by -1; fix this program [ 504.690618][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 504.739391][ T10] dw2102: command 0x0e transfer failed. [ 504.758082][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 504.783152][ T10] dw2102: command 0x0e transfer failed. [ 504.799084][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 504.829061][ T10] dw2102: command 0x51 transfer failed. [ 504.853096][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 504.875906][ T10] dw2102: i2c probe for address 0x68 failed. [ 504.889213][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 504.906288][ T10] dw2102: i2c probe for address 0x69 failed. [ 504.917111][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 504.926471][ T10] dw2102: i2c probe for address 0x6a failed. [ 504.936064][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 504.949184][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 505.167887][T11258] trusted_key: syz.2.1404 sent an empty control message without MSG_MORE. [ 505.182302][ T10] rc_core: IR keymap rc-tt-1500 not found [ 505.188731][ T10] Registered IR keymap rc-empty [ 505.205279][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 505.268442][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input49 [ 505.314595][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 505.326577][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 505.333727][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 505.349113][ T10] usb 3-1: USB disconnect, device number 81 [ 505.541754][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 505.975028][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 505.992656][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 506.084774][ T9] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 506.093103][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 506.109957][ T9] usb 4-1: USB disconnect, device number 53 [ 506.116971][T11266] binder: BINDER_SET_CONTEXT_MGR already set [ 506.157345][T11266] binder: 11264:11266 ioctl 4018620d 200000000040 returned -16 [ 506.188124][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 506.212028][T11266] binder: 11264:11266 ioctl c0306201 200000000240 returned -11 [ 506.233935][ T9] ftdi_sio 4-1:0.0: device disconnected [ 506.735969][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 506.744376][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.750909][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.918851][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 506.928274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.947860][ T9] usb 4-1: config 0 descriptor?? [ 507.038653][ T9] cp210x 4-1:0.0: cp210x converter detected [ 507.480579][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 507.533225][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 507.684886][ T10] usb 5-1: config 0 has no interfaces? [ 507.696531][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 507.726390][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 507.747595][ T10] usb 5-1: Product: syz [ 507.772201][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 507.780867][ T10] usb 5-1: Manufacturer: syz [ 507.807046][ T10] usb 5-1: SerialNumber: syz [ 507.842318][ T10] usb 5-1: config 0 descriptor?? [ 507.959728][ T9] usb 4-1: USB disconnect, device number 54 [ 507.974978][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 508.006623][ T9] cp210x 4-1:0.0: device disconnected [ 508.140843][ T10] usb 5-1: USB disconnect, device number 87 [ 508.276235][T11289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1414'. [ 508.611823][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 508.775240][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.780539][ T5986] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 508.786455][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.804223][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 508.811929][ T10] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 508.821839][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.833337][ T10] usb 2-1: config 0 descriptor?? [ 508.843982][ T10] usbhid 2-1:0.0: can't add hid device: -22 [ 508.860543][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 508.945579][ T5986] usb 3-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.958401][ T5986] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.970020][ T5986] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.980342][ T5986] usb 3-1: config 0 interface 0 has no altsetting 0 [ 508.980708][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 508.992187][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.006086][ T5986] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08 [ 509.009775][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.020505][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.033106][ T9] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 509.048597][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.085096][ T5986] usb 3-1: Product: syz [ 509.086976][ T9] usb 4-1: config 0 descriptor?? [ 509.089333][ T5986] usb 3-1: Manufacturer: syz [ 509.089355][ T5986] usb 3-1: SerialNumber: syz [ 509.102515][ T5986] usb 3-1: config 0 descriptor?? [ 509.176197][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.435847][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.464451][ T5986] usbtest 3-1:0.0: Linux user mode ISO test driver [ 509.472932][ T5920] usb 2-1: USB disconnect, device number 60 [ 509.474148][ T5986] usbtest 3-1:0.0: high-speed {control iso-in} tests (+alt) [ 509.673324][ T5986] usb 3-1: USB disconnect, device number 82 [ 509.874362][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 509.880630][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 509.891787][ T9] usb 4-1: USB disconnect, device number 55 [ 510.617605][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 510.617629][ T30] audit: type=1326 audit(1759057062.735:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.4.1424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e5d78eec9 code=0x0 [ 512.387786][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 512.520637][ T10] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 512.713278][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 512.751471][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.820820][ T979] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 512.872128][ T10] usb 5-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 512.912507][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.926585][T11355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.941580][ T10] usb 5-1: config 0 descriptor?? [ 512.963489][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.062448][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.090761][ T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.101508][ T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 4 [ 513.133409][ T979] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 513.142914][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.158134][ T979] usb 4-1: Product: syz [ 513.163013][ T979] usb 4-1: Manufacturer: syz [ 513.191148][ T5920] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 513.350578][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 513.357506][ T5920] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 513.366646][ T5920] usb 2-1: config 0 has no interface number 0 [ 513.388919][ T5920] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 513.399212][ T979] usb 4-1: SerialNumber: syz [ 513.409054][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 513.409361][ T979] usb 4-1: config 0 descriptor?? [ 513.425705][ T5920] usb 2-1: Product: syz [ 513.443463][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 513.454260][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 513.649531][ T5920] usb 2-1: config 0 descriptor?? [ 513.663187][ T10] usb 5-1: USB disconnect, device number 88 [ 513.683104][ T5920] usb 2-1: NDI device with a latency value of 1 [ 513.850517][ T5986] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 513.892241][ T5920] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 513.906255][ T5920] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 513.925853][ T5920] usb 2-1: USB disconnect, device number 61 [ 513.963732][ T5920] ftdi_sio 2-1:0.255: device disconnected [ 514.280543][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 514.296517][ T5986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.308869][ T5986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.323649][ T5986] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 514.340924][ T5986] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 514.357994][ T5986] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 514.380799][ T5986] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.410603][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 514.463235][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 514.473022][ T5986] usb 3-1: SerialNumber: syz [ 514.661257][T11366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 514.699315][ T5986] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 514.872135][ T5986] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 515.277929][T11377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1438'. [ 515.329027][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 515.681177][ T5957] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 515.850907][T11385] pim6reg: entered allmulticast mode [ 515.860653][ T5957] usb 2-1: device descriptor read/64, error -71 [ 516.160913][ T5957] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 516.329756][ T5957] usb 2-1: device descriptor read/64, error -71 [ 516.499402][ T5957] usb usb2-port1: attempt power cycle [ 516.883876][ T979] usb 4-1: USB disconnect, device number 56 [ 516.899881][ T5957] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 516.967804][ T5957] usb 2-1: device descriptor read/8, error -71 [ 517.068600][T11391] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 517.176421][T11394] tipc: Enabling of bearer rejected, failed to enable media [ 517.270524][ T5957] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 517.331368][ T5957] usb 2-1: device descriptor read/8, error -71 [ 517.413092][ T10] usb 3-1: USB disconnect, device number 83 [ 517.449682][ T5957] usb usb2-port1: unable to enumerate USB device [ 517.850581][ T5955] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 517.977218][T11408] loop1: detected capacity change from 0 to 6 [ 517.985148][T11408] buffer_io_error: 28 callbacks suppressed [ 517.985162][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.003624][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.114247][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 518.128296][T11402] openvswitch: netlink: Message has 8 unknown bytes. [ 518.167485][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.180670][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.214069][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.224998][ T5955] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 518.225487][T11408] ldm_validate_partition_table(): Disk read failed. [ 518.241247][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.249336][ T5955] usb 4-1: Product: syz [ 518.249497][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.304468][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.319387][ T5955] usb 4-1: Manufacturer: syz [ 518.331917][ T5955] usb 4-1: SerialNumber: syz [ 518.397233][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.423322][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.530796][T11408] Dev loop1: unable to read RDB block 0 [ 518.541234][T11408] Buffer I/O error on dev loop1, logical block 0, async page read [ 518.557669][T11408] loop1: unable to read partition table [ 518.565918][T11408] loop1: partition table beyond EOD, truncated [ 518.573489][T11408] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ) failed (rc=-5) [ 518.627347][ C0] blk_print_req_error: 9 callbacks suppressed [ 518.627370][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.654451][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.670545][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.685598][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.700969][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.715254][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.729036][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.739751][ T5235] ldm_validate_partition_table(): Disk read failed. [ 518.747794][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.760204][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.773124][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.788535][ T5235] Dev loop9: unable to read RDB block 0 [ 518.802028][ T5235] loop9: unable to read partition table [ 518.821106][ T5235] loop9: partition table beyond EOD, truncated [ 519.410710][ T5986] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 519.600688][ T5986] usb 5-1: Invalid ep0 maxpacket: 64 [ 519.730514][ T5986] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 519.880516][ T979] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 519.910551][ T5986] usb 5-1: Invalid ep0 maxpacket: 64 [ 519.916550][ T5986] usb usb5-port1: attempt power cycle [ 519.925840][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 520.280672][ T5986] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 520.314220][ T5986] usb 5-1: Invalid ep0 maxpacket: 64 [ 520.333263][ T979] usb 3-1: device descriptor read/64, error -71 [ 520.450778][ T5986] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 520.481312][ T5986] usb 5-1: Invalid ep0 maxpacket: 64 [ 520.487961][ T5986] usb usb5-port1: unable to enumerate USB device [ 520.548676][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 520.580536][ T979] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 520.590909][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 520.603975][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 520.623903][ T5955] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 520.641845][ T5955] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 520.669815][ T5955] usb 4-1: USB disconnect, device number 57 [ 520.765833][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.780212][ T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.791042][ T979] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 520.800151][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.822984][ T979] usb 3-1: config 0 descriptor?? [ 521.249379][T11439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.274324][T11439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.308123][ T979] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 521.488549][ T979] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 521.496781][ T979] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 521.506414][ T979] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 521.527513][ T979] usb 3-1: USB disconnect, device number 85 [ 522.800653][ T5920] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 522.950465][ T5920] usb 4-1: device descriptor read/64, error -71 [ 523.190495][ T5920] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 523.320870][ T5955] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 523.360699][ T5920] usb 4-1: device descriptor read/64, error -71 [ 523.480977][ T5920] usb usb4-port1: attempt power cycle [ 523.845692][ T5920] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 523.888926][ T5920] usb 4-1: device descriptor read/8, error -71 [ 524.026812][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1468'. [ 524.060823][ T5956] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 524.083436][T11490] bridge2: entered promiscuous mode [ 524.141450][ T5920] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 524.175239][ T5920] usb 4-1: device descriptor read/8, error -71 [ 524.225192][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.240999][ T5956] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.257834][ T5956] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 524.267782][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.300662][ T5920] usb usb4-port1: unable to enumerate USB device [ 524.328729][ T5956] usb 2-1: config 0 descriptor?? [ 525.119078][ T5956] hid_parser_main: 5 callbacks suppressed [ 525.119096][ T5956] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 525.139604][ T5956] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 525.174608][ T5956] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000F/input/input51 [ 525.248605][ T5956] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 525.319407][ T5956] usb 2-1: USB disconnect, device number 66 [ 525.349075][T11500] fido_id[11500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 525.510491][ T5920] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 525.551232][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 525.633407][T11504] binder: BINDER_SET_CONTEXT_MGR already set [ 525.641231][T11504] binder: 11503:11504 ioctl 4018620d 200000000100 returned -16 [ 525.650288][T11504] binder: BINDER_SET_CONTEXT_MGR already set [ 525.657592][T11504] binder: 11503:11504 ioctl 4018620d 200000000100 returned -16 [ 525.665785][T11505] binder: BINDER_SET_CONTEXT_MGR already set [ 525.668271][ T5920] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 525.674081][T11505] binder: 11503:11505 ioctl 4018620d 2000000002c0 returned -16 [ 525.680970][ T5920] usb 5-1: config 0 has no interface number 0 [ 525.695755][T11504] binder: BINDER_SET_CONTEXT_MGR already set [ 525.702916][ T5920] usb 5-1: config 0 interface 41 has no altsetting 0 [ 525.709906][T11504] binder: 11503:11504 ioctl 4018620d 200000000100 returned -16 [ 525.722181][ T5920] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 525.731504][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.742518][ T5920] usb 5-1: Product: syz [ 525.747063][ T5920] usb 5-1: Manufacturer: syz [ 525.752289][ T5920] usb 5-1: SerialNumber: syz [ 525.764943][ T5920] usb 5-1: config 0 descriptor?? [ 528.280330][T11535] IPv6: addrconf: prefix option has invalid lifetime [ 529.440628][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 529.452627][T11542] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 529.471729][T11544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1484'. [ 529.563801][T11544] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 529.581772][T11544] netlink: 'syz.3.1484': attribute type 2 has an invalid length. [ 529.748267][ T5920] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 529.891566][ T5920] usb 5-1: USB disconnect, device number 93 [ 530.450542][ T5920] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 530.459285][T11561] loop6: detected capacity change from 0 to 1 [ 530.494854][T11561] Dev loop6: unable to read RDB block 1 [ 530.507455][T11561] loop6: unable to read partition table [ 530.522181][T11561] loop6: partition table beyond EOD, truncated [ 530.535038][T11561] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 530.659277][ T5920] usb 5-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 530.757908][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 530.912447][ T5920] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 530.937262][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 530.956443][ T5920] usb 5-1: SerialNumber: syz [ 531.190512][T11575] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1490'. [ 531.215191][ T5920] usb 5-1: 0:2 : does not exist [ 531.251304][T11575] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1490'. [ 531.344370][ T5920] usb 5-1: USB disconnect, device number 94 [ 531.416380][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.718770][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 532.732382][T11599] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.320567][ T5955] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 534.482764][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 534.499170][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.519458][ T5955] usb 3-1: config 8 has an invalid interface number: 24 but max is 0 [ 534.528681][ T5955] usb 3-1: config 8 has no interface number 0 [ 534.535970][ T5955] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 534.550581][ T5955] usb 3-1: config 8 interface 24 has no altsetting 0 [ 534.583345][T11619] loop6: detected capacity change from 0 to 1 [ 534.590580][ T979] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 534.625314][T11619] Dev loop6: unable to read RDB block 1 [ 534.631184][ T5955] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 534.640665][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.653892][ T5955] usb 3-1: Product: syz [ 534.658095][ T5955] usb 3-1: Manufacturer: syz [ 534.667537][ T5955] usb 3-1: SerialNumber: syz [ 534.676913][T11619] loop6: unable to read partition table [ 534.683480][T11619] loop6: partition table beyond EOD, truncated [ 534.711250][T11619] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 534.742012][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 534.769605][ T979] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 534.785013][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.811706][ T979] usb 4-1: Product: syz [ 534.841687][ T979] usb 4-1: Manufacturer: syz [ 534.850181][ T979] usb 4-1: SerialNumber: syz [ 534.868232][ T979] usb 4-1: config 0 descriptor?? [ 534.880088][ T979] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 534.902994][ T30] audit: type=1326 audit(1759057087.045:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 534.933993][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 534.942008][ T30] audit: type=1326 audit(1759057087.045:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 534.965434][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.019909][T11625] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 535.097852][T11625] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 535.102885][ T30] audit: type=1326 audit(1759057087.065:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.170337][ T30] audit: type=1326 audit(1759057087.065:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.310819][ T30] audit: type=1326 audit(1759057087.065:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.333313][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.474355][ T30] audit: type=1326 audit(1759057087.065:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.496735][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.564120][ T30] audit: type=1326 audit(1759057087.065:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.593811][ T30] audit: type=1326 audit(1759057087.065:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.616232][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.633734][ T30] audit: type=1326 audit(1759057087.065:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.668089][ T30] audit: type=1326 audit(1759057087.065:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.1.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7d38eec9 code=0x7ffc0000 [ 535.794852][T11641] fuse: Bad value for 'group_id' [ 535.806318][T11641] fuse: Bad value for 'group_id' [ 535.840915][ T979] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 535.895809][ T5957] usb 4-1: USB disconnect, device number 62 [ 536.743519][T11653] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 536.790524][ T5957] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 537.064892][ T5957] usb 2-1: config 0 has no interfaces? [ 537.085401][ T5957] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.142276][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.176294][ T5957] usb 2-1: Product: syz [ 537.191731][ T5957] usb 2-1: Manufacturer: syz [ 537.202076][ T5957] usb 2-1: SerialNumber: syz [ 537.315520][T11658] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1511'. [ 537.382988][T11658] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1511'. [ 537.429778][ T5957] usb 2-1: config 0 descriptor?? [ 537.647772][T11644] fuse: Bad value for 'group_id' [ 537.670881][T11644] fuse: Bad value for 'group_id' [ 537.817791][T11644] 8021q: VLANs not supported on vxcan1 [ 537.825798][ T5955] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 537.887462][ T5955] usb 3-1: USB disconnect, device number 87 [ 537.929393][ T5942] usb 2-1: USB disconnect, device number 67 [ 538.889301][ T5955] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 539.127176][ T5955] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 539.290645][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.335570][ T5955] usb 2-1: config 0 has no interface number 0 [ 539.380626][ T5955] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 539.425933][ T5955] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.485888][ T5955] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 539.518501][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.724702][ T5955] usb 2-1: Product: syz [ 539.739185][ T5955] usb 2-1: Manufacturer: syz [ 539.744071][ T5955] usb 2-1: SerialNumber: syz [ 539.771086][ T5955] usb 2-1: config 0 descriptor?? [ 539.998378][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.014817][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.148755][T11691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.380713][ T5957] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 540.533255][ T5957] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 540.545816][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.559593][ T5955] usb 2-1: USB disconnect, device number 68 [ 540.591273][ T5957] usb 5-1: config 0 descriptor?? [ 540.660105][ T5957] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 540.826980][ T10] usb 5-1: USB disconnect, device number 95 [ 541.603688][T11713] netlink: 'syz.4.1529': attribute type 12 has an invalid length. [ 542.141446][ T10] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 542.284365][ T10] usb 5-1: device descriptor read/64, error -71 [ 542.398633][T11732] fuse: Unknown parameter 'grou_id' [ 542.540966][ T10] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 542.670684][ T10] usb 5-1: device descriptor read/64, error -71 [ 542.780882][ T10] usb usb5-port1: attempt power cycle [ 543.121001][ T10] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 543.169272][ T10] usb 5-1: device descriptor read/8, error -71 [ 543.490565][ T10] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 543.531108][ T10] usb 5-1: device descriptor read/8, error -71 [ 543.720767][ T10] usb usb5-port1: unable to enumerate USB device [ 545.283585][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 546.345250][T11768] loop6: detected capacity change from 0 to 1 [ 546.371195][T11768] Dev loop6: unable to read RDB block 1 [ 546.405248][T11768] loop6: unable to read partition table [ 546.425999][T11768] loop6: partition table beyond EOD, truncated [ 546.453520][T11768] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 547.048900][T11783] fuse: Unknown parameter '184467440737095516150x0000000000000001' [ 548.618710][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 548.618730][ T30] audit: type=1326 audit(1759057100.755:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11802 comm="syz.3.1550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x0 [ 549.577090][T11821] loop6: detected capacity change from 0 to 1 [ 549.662132][T11821] Dev loop6: unable to read RDB block 1 [ 549.704481][T11821] loop6: unable to read partition table [ 549.713571][T11825] netlink: 'syz.1.1555': attribute type 10 has an invalid length. [ 549.734520][T11825] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 549.743450][T11821] loop6: partition table beyond EOD, truncated [ 549.751457][T11821] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 549.840458][ T5920] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 550.104293][ T5920] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.136655][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.147099][ T5942] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 550.202130][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.213037][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.248604][ T5920] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.294396][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.318999][ T5942] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 550.329319][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.350128][ T5942] usb 2-1: config 0 descriptor?? [ 550.389968][ T5920] usb 4-1: Product: syz [ 550.404148][ T5920] usb 4-1: Manufacturer: syz [ 550.433244][ T5920] cdc_wdm 4-1:1.0: skipping garbage [ 550.441906][ T5920] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 550.465100][ T5942] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 550.496732][ T5942] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 550.635753][ T5942] usb 4-1: USB disconnect, device number 63 [ 551.512917][T11843] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 552.488122][T11827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.501727][ T5955] usb 2-1: USB disconnect, device number 69 [ 552.671842][ T5942] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 552.833610][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 552.900706][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 552.910086][ T5942] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 552.920072][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.946477][ T5942] usb 4-1: Product: syz [ 552.956520][ T5942] usb 4-1: Manufacturer: syz [ 552.966651][ T5942] usb 4-1: SerialNumber: syz [ 552.985558][ T5942] usb 4-1: config 0 descriptor?? [ 552.999338][ T5942] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 553.042925][ T5942] usb 4-1: Detected FT232H [ 553.448622][ T5942] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 553.474905][ T5942] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 553.505707][ T5942] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 553.535512][T11872] program syz.1.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.554248][ T5942] usb 4-1: USB disconnect, device number 64 [ 553.593357][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 553.632071][ T5942] ftdi_sio 4-1:0.0: device disconnected [ 554.293012][T11875] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 554.310651][T11875] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 554.739142][ T979] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 554.891741][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 554.910452][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 554.917328][T11887] loop6: detected capacity change from 0 to 524287999 [ 554.917963][ T979] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 555.005162][ T979] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 555.027304][T11892] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 555.067788][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 555.093914][ T979] usb 5-1: config 1 has no interface number 0 [ 555.105375][ T979] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 555.134147][ T979] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 555.166851][ T979] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 555.275177][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.287375][T11900] syz_tun: entered allmulticast mode [ 555.316557][T11898] dvmrp8: entered allmulticast mode [ 555.344993][ T979] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 555.454243][T11898] syz_tun: left allmulticast mode [ 555.549304][ T979] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 555.598830][T11907] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 556.199598][ T30] audit: type=1326 audit(1759057108.315:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.292879][ T30] audit: type=1326 audit(1759057108.315:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.428397][ T30] audit: type=1326 audit(1759057108.315:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.570635][ T979] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 556.572390][ T30] audit: type=1326 audit(1759057108.315:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.625397][T11921] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.633314][T11921] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.760246][ T30] audit: type=1326 audit(1759057108.315:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.784449][ T30] audit: type=1326 audit(1759057108.315:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.816355][ T30] audit: type=1326 audit(1759057108.315:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.904228][ T30] audit: type=1326 audit(1759057108.315:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 556.987255][ T30] audit: type=1326 audit(1759057108.315:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 557.030164][ T30] audit: type=1326 audit(1759057108.315:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 557.224918][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.249031][T11921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.417797][ T979] usb 5-1: USB disconnect, device number 100 [ 557.432054][ T979] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 557.901584][T11921] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 557.918565][T11921] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 558.081326][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.310905][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.343927][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.538742][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.545616][T11958] netlink: 'syz.4.1596': attribute type 8 has an invalid length. [ 559.060467][ T10] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 559.210861][ T10] usb 5-1: device descriptor read/64, error -71 [ 559.700874][ T10] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 559.810627][ T5957] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 559.850601][ T10] usb 5-1: device descriptor read/64, error -71 [ 559.997818][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 560.016706][ T10] usb usb5-port1: attempt power cycle [ 560.450889][ T10] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 560.487233][ T10] usb 5-1: device descriptor read/8, error -71 [ 560.651925][T11972] tipc: Enabling of bearer rejected, failed to enable media [ 560.792762][ T10] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 560.882749][ T10] usb 5-1: device descriptor read/8, error -71 [ 561.023235][ T10] usb usb5-port1: unable to enumerate USB device [ 561.835673][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 561.876528][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 562.268189][T11991] @: renamed from vlan0 (while UP) [ 562.517006][T11994] team0: Device gtp0 is of different type [ 563.481137][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 563.503733][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 563.538404][ T5957] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 563.568256][ T5957] usb 3-1: can't read configurations, error -71 [ 563.618622][T12013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'. [ 563.640488][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 563.648890][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 563.671907][ T10] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 563.695534][ T10] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.713006][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 563.753508][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.777930][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.818041][ T10] usb 2-1: Product: syz [ 563.867722][ T10] usb 2-1: Manufacturer: syz [ 563.900978][ T10] usb 2-1: SerialNumber: syz [ 563.941067][T12011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.948640][T12011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 564.005712][T12020] tipc: Enabling of bearer rejected, failed to enable media [ 564.211896][ T10] usb 2-1: bad CDC descriptors [ 564.245707][ T10] usb 2-1: USB disconnect, device number 70 [ 564.776212][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 565.153696][ T979] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 565.483627][T12049] binder: 12038:12049 ioctl c00c620f 200000000200 returned -22 [ 565.555957][ T979] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.080867][ T979] usb 2-1: config 0 has no interface number 0 [ 566.087107][ T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 566.124804][ T979] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 566.166358][ T979] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.189795][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.229114][ T979] usb 2-1: config 0 descriptor?? [ 566.246813][T12036] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 566.299513][ T979] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 566.643243][ T5955] usb 2-1: USB disconnect, device number 71 [ 567.110726][ T5955] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 567.451397][ T5955] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.467231][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0 [ 567.476794][ T5955] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 567.486018][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.497178][ T5955] usb 4-1: config 0 descriptor?? [ 568.221504][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.228292][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.766113][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 570.719174][ T5955] usbhid 4-1:0.0: can't add hid device: -71 [ 570.767207][ T5955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 570.826180][ T5955] usb 4-1: USB disconnect, device number 65 [ 571.049118][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 571.306733][T12112] ALSA: seq fatal error: cannot create timer (-19) [ 571.380959][ T5955] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 571.495832][ T979] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 571.550554][ T5955] usb 4-1: Using ep0 maxpacket: 8 [ 571.568276][ T5955] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 571.591116][ T5955] usb 4-1: config 179 has no interface number 0 [ 571.609522][ T5955] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 571.638253][ T5955] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 571.664628][ T5955] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 32, changing to 9 [ 571.677388][ T5955] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 571.690401][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 571.697076][ T979] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00 [ 571.709457][ T5955] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 571.727763][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.746345][ T5955] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 571.764971][ T979] usb 2-1: config 0 descriptor?? [ 571.776082][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.822926][T12108] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 571.976102][T12126] netlink: 'syz.0.1637': attribute type 21 has an invalid length. [ 571.999263][T12126] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1637'. [ 572.067356][ T5955] usb 4-1: USB disconnect, device number 66 [ 572.067415][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 572.067452][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 572.201135][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: unknown main item tag 0x0 [ 572.215290][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: unknown main item tag 0x0 [ 572.224505][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: unknown main item tag 0x0 [ 572.271665][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: unknown main item tag 0x0 [ 572.361464][T12147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1642'. [ 572.388722][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: unknown main item tag 0x0 [ 572.410864][T12147] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1642'. [ 572.422154][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1e] on usb-dummy_hcd.1-1/input0 [ 572.578515][T12120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.646473][T12149] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1642'. [ 572.969854][ T5957] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 573.096716][T12120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.120219][T12120] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1636'. [ 573.265867][ T5957] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 573.452704][ T5957] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 573.464827][ T5955] hid-corsair-void 0003:1B1C:0A1E.0010: failed to request battery (reason: -71) [ 573.466422][ T10] usb 2-1: USB disconnect, device number 72 [ 573.529171][ T979] hid-corsair-void 0003:1B1C:0A1E.0010: failed to request firmware (reason: -71) [ 573.565448][ T5957] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 573.705358][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.901920][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 573.998120][T12143] fuse: Bad value for 'user_id' [ 574.007730][T12143] fuse: Bad value for 'user_id' [ 574.348361][ T979] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 574.581378][ T979] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 574.592267][ T979] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.620477][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.684014][ T979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.782403][ T979] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 575.071099][T12165] delete_channel: no stack [ 575.094834][ T979] usb 4-1: USB disconnect, device number 67 [ 575.098635][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.233072][ T5942] usb 3-1: USB disconnect, device number 90 [ 575.289939][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1649'. [ 575.528827][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 575.550738][T12177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1650'. [ 577.090050][T12196] unsupported nla_type 52263 [ 577.385717][T12203] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1658'. [ 578.040089][T12220] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1660'. [ 578.065529][T12220] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1660'. [ 578.218371][T12224] tipc: Enabling of bearer rejected, failed to enable media [ 578.330600][ T5957] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 578.504068][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 578.525343][ T5957] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 578.544139][ T5957] usb 2-1: config 0 has no interface number 0 [ 578.564361][ T5957] usb 2-1: config 0 interface 33 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 578.608436][ T5957] usb 2-1: config 0 interface 33 has no altsetting 0 [ 578.640694][ T5957] usb 2-1: New USB device found, idVendor=0ccd, idProduct=02b3, bcdDevice=2e.04 [ 578.650381][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.678843][ T5957] usb 2-1: Product: syz [ 578.683681][ T5957] usb 2-1: Manufacturer: syz [ 578.688333][ T5957] usb 2-1: SerialNumber: syz [ 578.712552][ T5957] usb 2-1: config 0 descriptor?? [ 578.945156][ T5957] usb 2-1: USB disconnect, device number 73 [ 578.966122][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1666'. [ 579.001284][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1666'. [ 579.303760][ T10] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 579.652307][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.691331][ T10] usb 4-1: config 0 has no interface number 0 [ 579.697617][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 579.715730][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 579.749669][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 579.759017][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.813051][ T10] usb 4-1: config 0 descriptor?? [ 579.818807][T12238] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 579.933345][ T10] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 581.140575][ T5942] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 581.219962][T12273] vivid-000: disconnect [ 581.228776][T12272] vivid-000: reconnect [ 581.243569][T12275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1678'. [ 581.292726][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 581.320184][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 581.335420][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 581.348996][ T5942] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 581.359054][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.387270][ T5942] usb 3-1: config 0 descriptor?? [ 581.404810][T12262] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 581.633355][ T5942] ath6kl: Failed to submit usb control message: -71 [ 581.654081][ T5942] ath6kl: unable to send the bmi data to the device: -71 [ 581.662057][ T5942] ath6kl: Unable to send get target info: -71 [ 581.668957][ T5942] ath6kl: Failed to init ath6kl core: -71 [ 581.687750][ T5942] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 581.718895][ T5942] usb 3-1: USB disconnect, device number 91 [ 582.384708][ T5957] usb 4-1: USB disconnect, device number 68 [ 582.636846][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1686'. [ 582.893201][T12307] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 583.069397][T12311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1684'. [ 583.087362][T12311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1684'. [ 583.530552][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 584.376947][T12327] pimreg: entered allmulticast mode [ 584.432952][T12333] tipc: Enabling of bearer rejected, failed to enable media [ 585.518275][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 585.850546][ T5955] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 585.880674][ T5957] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 586.024982][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.040467][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 586.053001][ T5957] usb 4-1: unable to get BOS descriptor or descriptor too short [ 586.066997][ T5957] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 586.075334][ T5957] usb 4-1: config 8 has no interface number 0 [ 586.084814][ T5957] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 586.097344][ T5957] usb 4-1: config 8 interface 24 has no altsetting 0 [ 586.118470][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.125906][ T5957] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 586.138826][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.140588][ T5955] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 586.163226][ T5957] usb 4-1: Product: syz [ 586.170870][ T5957] usb 4-1: Manufacturer: syz [ 586.177800][ T5957] usb 4-1: SerialNumber: syz [ 586.237685][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.274899][ T5955] usb 2-1: config 0 descriptor?? [ 586.470574][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 586.923068][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 586.932975][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.951367][ T10] usb 5-1: config 0 descriptor?? [ 586.972988][ T10] cp210x 5-1:0.0: cp210x converter detected [ 587.130559][ T5920] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 587.142840][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.167346][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.291117][ T5920] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 587.312498][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.339037][ T5920] usb 3-1: Product: syz [ 587.351629][ T5920] usb 3-1: Manufacturer: syz [ 587.376865][ T5920] usb 3-1: SerialNumber: syz [ 587.387474][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 587.428197][ T5920] usb 3-1: config 0 descriptor?? [ 587.566049][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 587.612007][ T5920] usb 3-1: setting power ON [ 587.648931][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 587.718391][ T5920] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 587.923185][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 588.009918][ T5920] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 589.031836][T12369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.193208][T12362] delete_channel: no stack [ 589.203714][ T979] usb 3-1: USB disconnect, device number 92 [ 589.316570][ T5957] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 589.343678][ T5957] usb 4-1: USB disconnect, device number 69 [ 589.432031][ T10] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 589.439601][ T10] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 589.502519][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 589.547501][ T10] usb 5-1: USB disconnect, device number 105 [ 589.594950][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 589.649841][ T10] cp210x 5-1:0.0: device disconnected [ 590.043634][T12385] QAT: Invalid ioctl 1075883590 [ 590.098870][T12385] QAT: Invalid ioctl 1075883590 [ 590.158962][T12385] QAT: Invalid ioctl 1075883590 [ 590.190968][T12385] QAT: Invalid ioctl 1075883590 [ 590.218166][T12385] QAT: Invalid ioctl 1075883590 [ 590.272059][T12385] QAT: Invalid ioctl 1075883590 [ 590.300183][T12385] QAT: Invalid ioctl 1075883590 [ 590.386903][T12385] QAT: Invalid ioctl 1075883590 [ 590.392548][T12385] QAT: Invalid ioctl 1075883590 [ 590.397578][T12385] QAT: Invalid ioctl 1075883590 [ 591.630561][ T5942] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 591.810749][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 591.867221][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.904241][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 591.926907][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.950948][ T5955] usbhid 2-1:0.0: can't add hid device: -32 [ 591.957017][ T5955] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 591.987563][ T5942] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 591.997963][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.029041][ T5942] usb 5-1: Product: syz [ 592.112579][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 592.140562][ T5942] usb 5-1: Manufacturer: syz [ 592.209315][ T5942] usb 5-1: SerialNumber: syz [ 592.238437][ T5942] usb 5-1: config 0 descriptor?? [ 592.304449][ T5942] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 592.321398][ T5942] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -8) [ 592.451688][ T5942] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -8 [ 592.496057][ T5942] usb 5-1: USB disconnect, device number 106 [ 593.136336][T12397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.071734][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 595.181871][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 596.188958][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 596.188980][ T30] audit: type=1326 audit(1759057148.325:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.342295][ T30] audit: type=1326 audit(1759057148.325:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.365696][ T30] audit: type=1326 audit(1759057148.335:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.390243][ T30] audit: type=1326 audit(1759057148.335:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.427751][ T30] audit: type=1326 audit(1759057148.325:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.470686][ T30] audit: type=1326 audit(1759057148.335:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.510525][ T5955] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 596.584724][ T30] audit: type=1326 audit(1759057148.335:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.700599][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 596.706330][ T30] audit: type=1326 audit(1759057148.335:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.780528][ T5955] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 596.789644][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.810581][ T30] audit: type=1326 audit(1759057148.335:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 596.851575][ T5955] usb 3-1: config 0 descriptor?? [ 596.956997][ T30] audit: type=1326 audit(1759057148.335:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.1720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37d758eec9 code=0x7ffc0000 [ 597.063456][ T5955] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 597.101896][ T5955] asix 3-1:0.0: probe with driver asix failed with error -32 [ 597.174674][ T5957] usb 3-1: USB disconnect, device number 93 [ 598.096753][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 598.293276][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 598.820528][ T5957] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 598.992808][ T5957] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 599.004271][T12498] netlink: 'syz.4.1733': attribute type 46 has an invalid length. [ 599.014228][ T5957] usb 4-1: config 0 has no interface number 0 [ 599.033146][ T5957] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 599.050437][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.065081][ T5957] usb 4-1: Product: syz [ 599.075280][ T5957] usb 4-1: Manufacturer: syz [ 599.085481][ T5957] usb 4-1: SerialNumber: syz [ 599.111707][ T5957] usb 4-1: config 0 descriptor?? [ 599.336095][ T5957] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 599.400227][ T5957] usb 4-1: No valid video chain found. [ 599.434074][ T5957] usb 4-1: USB disconnect, device number 70 [ 599.564597][T12505] tipc: Enabling of bearer rejected, failed to enable media [ 600.890472][ T979] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 600.919697][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.930269][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.942195][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.953003][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.963093][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.062532][ T979] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 601.078210][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.105354][ T979] usb 4-1: config 0 descriptor?? [ 601.121854][ T979] cp210x 4-1:0.0: cp210x converter detected [ 601.325492][T12544] chnl_net:caif_netlink_parms(): no params data found [ 601.514965][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.523301][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.535743][ T979] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 601.544522][T12544] bridge_slave_0: entered allmulticast mode [ 601.554321][T12544] bridge_slave_0: entered promiscuous mode [ 601.564918][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.572830][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.580208][T12544] bridge_slave_1: entered allmulticast mode [ 601.589505][T12544] bridge_slave_1: entered promiscuous mode [ 601.677031][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.698832][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.747180][ T979] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 601.758703][ T979] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 601.779794][ T979] usb 4-1: cp210x converter now attached to ttyUSB0 [ 601.812169][ T979] usb 4-1: USB disconnect, device number 71 [ 601.841602][ T979] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 601.857510][T12544] team0: Port device team_slave_0 added [ 601.865092][ T979] cp210x 4-1:0.0: device disconnected [ 601.880862][T12544] team0: Port device team_slave_1 added [ 601.968418][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.977294][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.009836][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.025720][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.033069][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.061073][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.150235][T12544] hsr_slave_0: entered promiscuous mode [ 602.158099][T12544] hsr_slave_1: entered promiscuous mode [ 602.173189][T12544] debugfs: 'hsr0' already exists in 'hsr' [ 602.179988][T12544] Cannot create hsr debugfs directory [ 602.610439][ T9] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 602.627253][T12544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 602.647730][T12544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.662953][T12544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 602.677437][T12544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 602.772495][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 602.787672][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.812578][ T9] usb 4-1: config 0 descriptor?? [ 602.831773][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 602.887763][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.935602][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.966189][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.973547][ T9699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.997224][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.004503][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.050922][ T5871] Bluetooth: hci5: command tx timeout [ 603.284556][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.361827][ T9] gspca_vc032x: reg_r err -110 [ 603.369386][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.387661][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.395962][T12544] veth0_vlan: entered promiscuous mode [ 603.404411][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.415264][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.427263][T12544] veth1_vlan: entered promiscuous mode [ 603.443909][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.468994][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.489671][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.503156][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.522764][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.549683][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.551877][T12544] veth0_macvtap: entered promiscuous mode [ 603.559587][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.567261][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.586378][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.630196][T12544] veth1_macvtap: entered promiscuous mode [ 603.630916][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.672597][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.683925][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.692740][T12566] tipc: Enabling of bearer rejected, failed to enable media [ 603.713800][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.714016][T12544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.719141][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 603.719155][ T9] gspca_vc032x: Unknown sensor... [ 603.719252][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 603.765002][T12544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.808887][ T1103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.828552][ T1103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.874196][ T9] usb 4-1: USB disconnect, device number 72 [ 603.895096][ T1103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.932851][ T1103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.972260][T12574] netlink: 'syz.4.1752': attribute type 1 has an invalid length. [ 603.981473][T12574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1752'. [ 604.362871][ T9699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.417306][ T9699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.649539][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.688317][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.790730][ T979] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 604.992859][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 605.039675][ T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 605.124456][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.130939][ T5871] Bluetooth: hci5: command tx timeout [ 605.213794][ T979] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 605.251822][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.264885][ T979] usb 4-1: Product: syz [ 605.274857][ T979] usb 4-1: Manufacturer: syz [ 605.285008][ T979] usb 4-1: SerialNumber: syz [ 605.310020][ T979] usb 4-1: config 0 descriptor?? [ 605.358186][ T979] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 605.521072][ T979] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 605.855397][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 606.043742][ T979] em28xx 4-1:0.0: unknown em28xx chip ID (100) [ 606.256633][ T979] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 606.311809][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.320524][ T979] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 606.343550][ T979] em28xx 4-1:0.0: No AC97 audio processor [ 606.392389][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.221561][ T5871] Bluetooth: hci5: command tx timeout [ 607.585189][T12627] tipc: Enabling of bearer rejected, failed to enable media [ 608.620443][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 608.860690][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 608.892514][ T5920] usb 6-1: config 12 has an invalid interface number: 98 but max is 1 [ 608.900800][ T5942] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 608.920562][ T5920] usb 6-1: config 12 has an invalid interface number: 105 but max is 1 [ 608.921008][ T5955] usb 4-1: USB disconnect, device number 73 [ 608.942426][ T5920] usb 6-1: config 12 has an invalid interface number: 48 but max is 1 [ 608.952210][ T5955] em28xx 4-1:0.0: Disconnecting em28xx [ 608.974216][ T5955] em28xx 4-1:0.0: Freeing device [ 609.030531][ T5920] usb 6-1: config 12 has 3 interfaces, different from the descriptor's value: 2 [ 609.060974][ T5942] usb 3-1: device descriptor read/64, error -71 [ 609.070113][ T5920] usb 6-1: config 12 has no interface number 0 [ 609.096062][ T5920] usb 6-1: config 12 has no interface number 1 [ 609.112832][ T5920] usb 6-1: config 12 has no interface number 2 [ 609.119125][ T5920] usb 6-1: config 12 interface 105 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.182295][ T5920] usb 6-1: too many endpoints for config 12 interface 48 altsetting 42: 242, using maximum allowed: 30 [ 609.225483][ T5920] usb 6-1: config 12 interface 48 altsetting 42 has an invalid descriptor for endpoint zero, skipping [ 609.280579][ T5920] usb 6-1: config 12 interface 48 altsetting 42 has an invalid descriptor for endpoint zero, skipping [ 609.292055][ T5871] Bluetooth: hci5: command tx timeout [ 609.300460][ T5942] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 609.316460][ T5920] usb 6-1: config 12 interface 48 altsetting 42 has 3 endpoint descriptors, different from the interface descriptor's value: 242 [ 609.344533][ T5920] usb 6-1: config 12 interface 98 has no altsetting 0 [ 609.360146][ T5920] usb 6-1: config 12 interface 105 has no altsetting 0 [ 609.381298][ T5920] usb 6-1: config 12 interface 48 has no altsetting 0 [ 609.405676][ T5920] usb 6-1: New USB device found, idVendor=eb1a, idProduct=2861, bcdDevice=aa.c4 [ 609.415271][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.428818][ T5920] usb 6-1: Product:  [ 609.430531][ T5942] usb 3-1: device descriptor read/64, error -71 [ 609.440563][ T5920] usb 6-1: Manufacturer: 痞繨⣡󧀮젪㞵സ笓涐빢뙢࣒´ሗꁀන桢쟵 [ 609.470437][ T5920] usb 6-1: SerialNumber: ൪㳐뇟▸휵ⵚ沷ीᇃפㇼ⯳ᄲ෫∕೸悶㯙道麪䌹猭ᩓ변뾴﫟햝 [ 609.591126][ T5942] usb usb3-port1: attempt power cycle [ 609.761591][T12651] ======================================================= [ 609.761591][T12651] WARNING: The mand mount option has been deprecated and [ 609.761591][T12651] and is ignored by this kernel. Remove the mand [ 609.761591][T12651] option from the mount to silence this warning. [ 609.761591][T12651] ======================================================= [ 610.190183][T12651] fuse: Bad value for 'fd' [ 610.230462][ T5942] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 610.290582][ T5942] usb 3-1: device descriptor read/8, error -71 [ 610.290953][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.326842][ T5920] usb 6-1: USB disconnect, device number 2 [ 610.416817][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.540600][ T5942] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 610.561138][ T5957] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 610.611296][ T5942] usb 3-1: device descriptor read/8, error -71 [ 610.720824][ T5942] usb usb3-port1: unable to enumerate USB device [ 611.271194][T12676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1777'. [ 611.288384][T12676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1777'. [ 611.424676][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 612.880908][ T5955] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 613.041077][ T5955] usb 3-1: Using ep0 maxpacket: 8 [ 613.108527][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short [ 613.125786][ T5955] usb 3-1: config 8 has an invalid interface number: 24 but max is 0 [ 613.134867][ T5955] usb 3-1: config 8 has no interface number 0 [ 613.141480][ T5955] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 613.169354][ T5955] usb 3-1: config 8 interface 24 has no altsetting 0 [ 613.208557][ T5955] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 613.218509][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.233335][ T5955] usb 3-1: Product: syz [ 613.237751][ T5955] usb 3-1: Manufacturer: syz [ 613.247167][ T5955] usb 3-1: SerialNumber: syz [ 613.978876][T12710] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 614.380577][ T5942] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 614.542596][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 614.550264][ T5942] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 614.559005][ T5942] usb 4-1: config 0 has no interface number 0 [ 614.583486][ T5942] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 614.627245][ T5942] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 614.670578][ T5942] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 614.704222][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 614.842410][ T5942] usb 4-1: Product: syz [ 614.846683][ T5942] usb 4-1: SerialNumber: syz [ 614.950138][ T5942] usb 4-1: config 0 descriptor?? [ 615.013205][ T5942] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 615.030150][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1787'. [ 615.067115][ T5942] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input53 [ 616.080710][ T5942] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 616.238192][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.383994][ T5942] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 616.422797][ T5942] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 616.456846][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.481971][ T5942] usb 6-1: Product: syz [ 616.498866][ T5942] usb 6-1: Manufacturer: syz [ 616.523065][ T5942] usb 6-1: SerialNumber: syz [ 616.575888][ T5942] usb 6-1: config 0 descriptor?? [ 616.610043][ T5955] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 616.665243][ T5955] usb 3-1: USB disconnect, device number 98 [ 616.983624][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 616.993073][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.000269][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.008670][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.015885][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.023178][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.030409][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.037646][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.044811][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.051974][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 617.062400][ T5955] usb 4-1: USB disconnect, device number 75 [ 617.068389][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 617.097324][ T5955] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 617.309563][T12732] loop1: detected capacity change from 0 to 6 [ 617.337880][T12732] buffer_io_error: 45 callbacks suppressed [ 617.337896][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.377289][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.394201][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.447450][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.561203][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.635765][T12732] ldm_validate_partition_table(): Disk read failed. [ 617.654109][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.668441][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.678025][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.709264][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.743518][T12732] Dev loop1: unable to read RDB block 0 [ 617.766958][T12732] Buffer I/O error on dev loop1, logical block 0, async page read [ 617.799795][T12732] loop1: unable to read partition table [ 617.821314][T12732] loop1: partition table beyond EOD, truncated [ 617.874552][T12732] loop_reread_partitions: partition scan of loop1 (被xڬdƤݡ) failed (rc=-5) [ 618.016697][T12758] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1797'. [ 618.190778][ T5942] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 618.352008][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 618.365066][ T5942] usb 3-1: config index 0 descriptor too short (expected 32274, got 18) [ 618.378785][ T5942] usb 3-1: config 253 has too many interfaces: 173, using maximum allowed: 32 [ 618.398128][ T5942] usb 3-1: config 253 has an invalid descriptor of length 112, skipping remainder of the config [ 618.420192][ T5956] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 618.429024][ T5942] usb 3-1: config 253 has 0 interfaces, different from the descriptor's value: 173 [ 618.467088][ T5942] usb 3-1: New USB device found, idVendor=808e, idProduct=9500, bcdDevice=b6.d8 [ 618.479138][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.501904][ T5942] usb 3-1: Product: syz [ 618.506295][ T5942] usb 3-1: Manufacturer: syz [ 618.564098][ T5942] usb 3-1: SerialNumber: syz [ 618.580572][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 618.652641][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 618.690722][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 618.719828][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 618.755764][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.774980][ T5956] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.785697][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.802793][ T5956] usb 5-1: config 0 descriptor?? [ 618.845995][T12765] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 618.965765][T12769] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 618.989971][T12769] team0: Device ipvlan2 is already an upper device of the team interface [ 619.114622][ T5921] usb 2-1: USB disconnect, device number 74 [ 619.261820][ T5956] microsoft 0003:045E:07DA.0011: unknown main item tag 0x2 [ 619.285138][ T5956] microsoft 0003:045E:07DA.0011: unknown main item tag 0x6 [ 619.343834][T12771] 8021q: VLANs not supported on ip_vti0 [ 619.350427][ T5956] microsoft 0003:045E:07DA.0011: unknown main item tag 0x6 [ 619.372754][ T5956] microsoft 0003:045E:07DA.0011: unknown main item tag 0x6 [ 619.441780][ T5956] microsoft 0003:045E:07DA.0011: unknown main item tag 0x6 [ 619.502023][ T5956] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 619.588193][ T5956] microsoft 0003:045E:07DA.0011: no inputs found [ 619.629022][ T5956] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 619.692176][ T5956] usb 5-1: USB disconnect, device number 107 [ 619.847967][T12775] fido_id[12775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 620.215726][ T5921] usb 6-1: USB disconnect, device number 3 [ 620.309297][ T5942] usb 3-1: USB disconnect, device number 99 [ 620.647163][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 620.676084][T12788] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 620.695038][T12788] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 620.759859][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 620.793307][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 620.815583][T12786] netlink: 'syz.4.1807': attribute type 19 has an invalid length. [ 621.071999][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 621.525923][T12817] trusted_key: encrypted_key: master key parameter 'use2:`' is invalid [ 621.736175][T12818] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1812'. [ 621.920619][ T5921] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 622.177873][ T5921] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 622.197743][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 622.320543][ T5921] usb 3-1: can't read configurations, error -61 [ 622.505866][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1815'. [ 622.516729][ T5921] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 622.671232][ T5921] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 622.679185][T12829] input: syz0 as /devices/virtual/input/input55 [ 622.755548][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 622.768716][ T5921] usb 3-1: can't read configurations, error -61 [ 622.803925][ T5921] usb usb3-port1: attempt power cycle [ 623.281424][ T5921] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 623.312319][ T5921] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 623.342802][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 623.356408][ T5921] usb 3-1: can't read configurations, error -61 [ 623.518726][ T5921] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 623.692509][ T5921] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 623.725541][ T5921] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 623.740496][ T5921] usb 3-1: can't read configurations, error -61 [ 623.786965][ T5921] usb usb3-port1: unable to enumerate USB device [ 624.682276][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'. [ 625.592500][T12874] all (unregistering): Released all slaves [ 625.877084][T12883] netdevsim netdevsim5: Direct firmware load for . [ 625.877084][T12883] failed with error -2 [ 625.894798][T12883] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 625.894798][T12883] [ 626.481578][T12905] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 626.941018][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 627.096615][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'. [ 627.217162][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 627.499972][T12926] vivid-004: kernel_thread() failed [ 628.149013][T12936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.177858][T12936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.390706][ T5957] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 628.570748][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 628.718229][ T5957] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 628.740512][ T5957] usb 3-1: can't read configurations, error -71 [ 628.772165][T12946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.088193][T12954] loop4: detected capacity change from 0 to 4 [ 629.463808][T12957] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1846'. [ 629.524930][T12962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1846'. [ 629.615309][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.624300][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.073583][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 631.632687][T12991] program syz.5.1855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.911107][ T5921] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 632.062082][ T5921] usb 4-1: device descriptor read/64, error -71 [ 632.310457][ T5921] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 632.462586][ T5921] usb 4-1: device descriptor read/64, error -71 [ 632.571895][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 632.588328][ T5921] usb usb4-port1: attempt power cycle [ 632.808592][T13022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.885284][T13017] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 632.934395][ T5956] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 632.940477][ T5921] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 632.970945][ T5921] usb 4-1: device descriptor read/8, error -71 [ 633.094183][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.108993][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.125475][ T5956] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 633.148913][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.261067][ T5921] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 633.291558][ T5921] usb 4-1: device descriptor read/8, error -71 [ 633.299308][ T5956] usb 3-1: config 0 descriptor?? [ 633.452335][ T5921] usb usb4-port1: unable to enumerate USB device [ 633.745381][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.760572][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.778871][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.800504][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.809587][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.839565][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.848992][ T5956] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 633.877087][ T5956] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 633.961704][ T5956] cp2112 0003:10C4:EA90.0012: Part Number: 0x00 Device Version: 0x00 [ 634.229256][ T5956] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 634.240228][ T5956] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -5 [ 634.542087][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 634.660500][ T5942] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 634.831685][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 634.847625][ T5942] usb 6-1: unable to get BOS descriptor or descriptor too short [ 634.868825][ T5942] usb 6-1: config 8 has an invalid interface number: 24 but max is 0 [ 634.978701][ T5942] usb 6-1: config 8 has no interface number 0 [ 635.003697][ T5942] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 635.035817][ T5942] usb 6-1: config 8 interface 24 has no altsetting 0 [ 635.084733][ T5942] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 635.114290][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.176371][ T5942] usb 6-1: Product: syz [ 635.188622][ T5942] usb 6-1: Manufacturer: syz [ 635.206298][ T5942] usb 6-1: SerialNumber: syz [ 635.993653][ T5920] usb 3-1: USB disconnect, device number 106 [ 636.660588][ T5956] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 636.833479][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.859374][ T5956] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 636.904328][ T5956] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 637.011373][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.064509][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1875'. [ 637.335207][ T5956] usb 3-1: config 0 descriptor?? [ 637.390584][ T5986] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 637.660788][ T5986] usb 5-1: Using ep0 maxpacket: 32 [ 637.756964][ T5956] Bluetooth: Can't get state to change to load configuration err [ 637.846420][ T5986] usb 5-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 637.867572][ T5956] Bluetooth: Loading sysconfig file failed [ 637.881864][ T5986] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.900831][ T5956] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 637.956838][ T5986] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 637.976935][ T5956] usb 3-1: USB disconnect, device number 107 [ 637.986762][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.059768][T13066] loop6: detected capacity change from 0 to 1 [ 638.066228][ T5986] usb 5-1: Product: syz [ 638.099233][ T5986] usb 5-1: Manufacturer: syz [ 638.109486][T13066] Dev loop6: unable to read RDB block 1 [ 638.115436][ T5986] usb 5-1: SerialNumber: syz [ 638.127646][T13066] loop6: unable to read partition table [ 638.151350][ T5986] usb 5-1: config 0 descriptor?? [ 638.183675][T13066] loop6: partition table beyond EOD, truncated [ 638.336633][T13066] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 638.401108][ T5942] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 638.573678][ T5942] usb 6-1: USB disconnect, device number 4 [ 638.961501][ T5942] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 639.011400][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1881'. [ 639.139533][ T5942] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.150067][ T5942] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 639.173876][ T5942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 639.315665][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 639.344002][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 639.395610][ T5942] usb 6-1: SerialNumber: syz [ 639.498665][ T5942] usb 6-1: 0:2 : does not exist [ 639.990711][T13100] tipc: Enabled bearer , priority 0 [ 640.018226][T13100] syzkaller0: entered promiscuous mode [ 640.030950][ T5920] usb 6-1: USB disconnect, device number 5 [ 640.067401][T13100] syzkaller0: entered allmulticast mode [ 640.150432][ T5921] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 640.232814][T13100] tipc: Resetting bearer [ 640.316764][T13100] tipc: Disabling bearer [ 640.349891][ T5942] usb 5-1: USB disconnect, device number 108 [ 640.360632][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 640.367540][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.398320][ T5921] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 640.475204][ T5921] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 640.489992][ T5921] usb 4-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 640.536580][ T5921] usb 4-1: Manufacturer: syz [ 640.557131][ T5921] usb 4-1: config 0 descriptor?? [ 640.598326][T13107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.740693][ T5942] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 641.019753][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 641.072390][ T5942] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 641.114447][ T5942] usb 5-1: config 0 has no interface number 0 [ 641.163093][ T5942] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 641.205184][ T5942] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 641.220684][ T5942] usb 5-1: config 0 interface 41 has no altsetting 0 [ 641.246441][ T5942] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 641.256806][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.270156][ T5942] usb 5-1: Product: syz [ 641.274495][ T5942] usb 5-1: Manufacturer: syz [ 641.279244][ T5942] usb 5-1: SerialNumber: syz [ 641.320917][ T5942] usb 5-1: config 0 descriptor?? [ 641.343499][T13105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 641.367248][T13105] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 641.390721][ T5986] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 641.566771][ T5986] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 641.575063][ T5986] usb 6-1: config 1 has no interface number 0 [ 641.585864][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.595606][ T5986] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 641.600995][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.617734][ T5986] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 641.643348][T13105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.652591][T13105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.672396][ T5942] dm9601 5-1:0.41: probe with driver dm9601 failed with error -71 [ 641.681802][ T5986] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.700985][ T5942] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 641.715259][ T5986] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 641.801079][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.810653][ T5986] usb 6-1: Product: syz [ 641.815109][ T5986] usb 6-1: Manufacturer: syz [ 641.825772][ T5942] usb 5-1: USB disconnect, device number 109 [ 641.858272][ T5986] usb 6-1: SerialNumber: syz [ 641.925829][T13115] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 642.196986][T13115] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1889'. [ 642.323005][T13115] syzkaller1: entered promiscuous mode [ 642.359227][T13115] syzkaller1: entered allmulticast mode [ 642.408381][T13115] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 642.513679][T13125] input: syz1 as /devices/virtual/input/input56 [ 642.566013][ T5956] usb 4-1: USB disconnect, device number 80 [ 642.633723][T13125] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 642.827377][T13126] gretap1: entered allmulticast mode [ 642.837795][T13126] bond5: (slave gretap1): making interface the new active one [ 642.904972][T13126] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 643.181918][ T5986] usb 6-1: Incompatible driver and firmware versions [ 643.375281][ T5986] usb 6-1: USB disconnect, device number 6 [ 643.480121][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1895'. [ 643.579507][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 643.615138][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1894'. [ 643.628559][T13137] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 643.686466][T13137] bond2: entered promiscuous mode [ 643.693839][T13137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.909705][T13139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 643.924044][T13139] bond2: (slave bond3): making interface the new active one [ 643.940154][T13139] bond3: entered promiscuous mode [ 643.946953][T13139] bond2: (slave bond3): Enslaving as an active interface with an up link [ 644.500695][ T5921] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 644.683068][ T5921] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 644.691976][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.713434][ T5921] usb 3-1: config 0 has no interface number 0 [ 644.744438][ T5921] usb 3-1: config 0 interface 205 has no altsetting 0 [ 644.760479][T12576] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 644.794039][ T5921] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 644.810582][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.819449][ T5921] usb 3-1: Product: syz [ 644.824147][ T5921] usb 3-1: Manufacturer: syz [ 644.839891][ T5921] usb 3-1: SerialNumber: syz [ 644.909750][T12576] usb 6-1: device descriptor read/64, error -71 [ 644.940395][T13163] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1899'. [ 644.967029][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 645.016461][T13163] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1899'. [ 645.066511][ T5921] usb 3-1: config 0 descriptor?? [ 645.084933][ T5921] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 645.099987][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 645.210943][T12576] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 645.278682][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 645.306926][ T5921] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 645.328404][ T5921] usb 3-1: media controller created [ 645.350255][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.360457][T12576] usb 6-1: device descriptor read/64, error -71 [ 645.496486][T12576] usb usb6-port1: attempt power cycle [ 645.533206][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 645.544560][ T5921] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 645.579630][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 645.615474][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 645.674412][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 645.700450][ T5921] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 645.775920][ T5921] usb 3-1: USB disconnect, device number 108 [ 645.832793][ T5921] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 645.871508][T12576] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 645.901285][T12576] usb 6-1: device descriptor read/8, error -71 [ 646.150668][T12576] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 646.178657][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1906'. [ 646.188614][T12576] usb 6-1: device descriptor read/8, error -71 [ 646.306355][T12576] usb usb6-port1: unable to enumerate USB device [ 647.223858][T13194] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1908'. [ 647.319221][T13188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1907'. [ 648.700478][ T5986] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 649.491704][T13236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1918'. [ 649.515656][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 649.981129][T13247] netlink: 'syz.5.1921': attribute type 5 has an invalid length. [ 649.989147][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1921'. [ 650.177923][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 650.347755][T12576] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 650.750730][T12576] usb 6-1: Using ep0 maxpacket: 8 [ 650.967324][T13258] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1922'. [ 652.367275][T12576] usb 6-1: unable to get BOS descriptor or descriptor too short [ 654.304624][T13274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1927'. [ 655.234447][T12576] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 655.242282][T12576] usb 6-1: can't read configurations, error -71 [ 655.534573][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1930'. [ 655.768558][T13288] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1933'. [ 656.241639][T13313] netlink: 'syz.4.1938': attribute type 4 has an invalid length. [ 656.363065][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 656.399500][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1940'. [ 656.670650][ T5920] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 656.882434][ T5920] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 656.908733][ T5920] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 656.933547][ T5920] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.944779][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.958007][T13315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 656.999342][ T5920] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.213889][ T5920] usb 6-1: USB disconnect, device number 13 [ 657.264489][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 657.775319][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1943'. [ 657.788719][T13332] openvswitch: netlink: Flow actions attr not present in new flow. [ 658.360678][T13343] ptrace attach of "./syz-executor exec"[5878] was attempted by "./syz-executor exec"[13343] [ 658.680652][ T5986] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 658.780613][ T5942] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 658.842235][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.853072][ T5986] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.04 [ 658.881466][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.923787][ T5986] usb 6-1: config 0 descriptor?? [ 658.931856][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 658.952866][ T5942] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 658.962125][ T5942] usb 3-1: config 0 has no interface number 0 [ 658.981605][ T5942] usb 3-1: config 0 interface 89 has no altsetting 0 [ 659.029086][ T5942] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 659.043564][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.057889][ T5942] usb 3-1: Product: syz [ 659.064081][ T5942] usb 3-1: Manufacturer: syz [ 659.068969][ T5942] usb 3-1: SerialNumber: syz [ 659.093724][ T5942] usb 3-1: config 0 descriptor?? [ 659.325585][ T5942] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 659.336119][ T5942] em28xx 3-1:0.89: Video interface 89 found: bulk [ 659.509781][T13363] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 659.624444][T13363] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 659.642293][ T5942] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 659.780782][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 659.884252][T13371] input: syz1 as /devices/virtual/input/input58 [ 659.930243][ T5942] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 659.981029][ T5942] em28xx 3-1:0.89: board has no eeprom [ 660.060459][ T5942] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 660.306693][ T5942] em28xx 3-1:0.89: analog set to bulk mode. [ 660.478208][ T5956] em28xx 3-1:0.89: Registering V4L2 extension [ 660.691242][ T5942] usb 3-1: USB disconnect, device number 110 [ 660.747061][ T5956] em28xx 3-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 661.017382][ T5942] em28xx 3-1:0.89: Disconnecting em28xx [ 661.261881][ T5956] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 661.275949][ T5956] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 661.639946][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 661.639968][ T30] audit: type=1326 audit(1759057213.775:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 661.752308][ T5956] em28xx 3-1:0.89: No AC97 audio processor [ 661.781779][ T5956] usb 3-1: Decoder not found [ 661.786499][ T5956] em28xx 3-1:0.89: failed to create media graph [ 661.908858][ T5956] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 662.250061][ T30] audit: type=1326 audit(1759057213.775:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 662.780720][ T30] audit: type=1326 audit(1759057213.785:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 662.867277][ T30] audit: type=1326 audit(1759057213.785:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 662.975690][ T30] audit: type=1326 audit(1759057213.785:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 663.088967][ T30] audit: type=1326 audit(1759057213.785:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 663.195643][ T30] audit: type=1326 audit(1759057213.785:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 663.409690][ T30] audit: type=1326 audit(1759057213.785:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f207b18d710 code=0x7ffc0000 [ 663.595107][ T5956] em28xx 3-1:0.89: Registering snapshot button... [ 663.603642][ T30] audit: type=1326 audit(1759057213.785:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 663.630936][T13399] ================================================================== [ 663.639163][T13399] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 663.646685][T13399] Read of size 8 at addr ffff888028bfc740 by task v4l_id/13399 [ 663.654616][T13399] [ 663.656977][T13399] CPU: 0 UID: 0 PID: 13399 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 663.657008][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 663.657024][T13399] Call Trace: [ 663.657037][T13399] [ 663.657047][T13399] dump_stack_lvl+0x189/0x250 [ 663.657077][T13399] ? rcu_is_watching+0x15/0xb0 [ 663.657098][T13399] ? __kasan_check_byte+0x12/0x40 [ 663.657125][T13399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.657143][T13399] ? rcu_is_watching+0x15/0xb0 [ 663.657166][T13399] ? lock_release+0x4b/0x3e0 [ 663.657202][T13399] ? __virt_addr_valid+0x1c8/0x5c0 [ 663.657231][T13399] ? __virt_addr_valid+0x4a5/0x5c0 [ 663.657260][T13399] print_report+0xca/0x240 [ 663.657281][T13399] ? v4l2_fh_open+0xc7/0x430 [ 663.657447][T13399] kasan_report+0x118/0x150 [ 663.657475][T13399] ? v4l2_fh_open+0xc7/0x430 [ 663.657495][T13399] v4l2_fh_open+0xc7/0x430 [ 663.657524][T13399] em28xx_v4l2_open+0x157/0x9a0 [ 663.657565][T13399] v4l2_open+0x20f/0x360 [ 663.657590][T13399] chrdev_open+0x4c9/0x5e0 [ 663.657611][T13399] ? __pfx_chrdev_open+0x10/0x10 [ 663.657625][T13399] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 663.657653][T13399] ? __pfx_chrdev_open+0x10/0x10 [ 663.657672][T13399] do_dentry_open+0x950/0x13f0 [ 663.657703][T13399] vfs_open+0x3b/0x340 [ 663.657723][T13399] ? path_openat+0x2ecd/0x3830 [ 663.657750][T13399] path_openat+0x2ee5/0x3830 [ 663.657773][T13399] ? arch_stack_walk+0xfc/0x150 [ 663.657799][T13399] ? stack_depot_save_flags+0x40/0x860 [ 663.657897][T13399] ? __pfx_path_openat+0x10/0x10 [ 663.657921][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.657944][T13399] do_filp_open+0x1fa/0x410 [ 663.657962][T13399] ? __lock_acquire+0xab9/0xd20 [ 663.657997][T13399] ? __pfx_do_filp_open+0x10/0x10 [ 663.658035][T13399] ? _raw_spin_unlock+0x28/0x50 [ 663.658054][T13399] ? alloc_fd+0x64c/0x6c0 [ 663.658087][T13399] do_sys_openat2+0x121/0x1c0 [ 663.658105][T13399] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.658123][T13399] ? exc_page_fault+0x76/0xf0 [ 663.658151][T13399] ? do_user_addr_fault+0xc8a/0x1390 [ 663.658173][T13399] __x64_sys_openat+0x138/0x170 [ 663.658199][T13399] do_syscall_64+0xfa/0x3b0 [ 663.658225][T13399] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.658240][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.658256][T13399] ? clear_bhb_loop+0x60/0xb0 [ 663.658280][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.658301][T13399] RIP: 0033:0x7f98b25c8407 [ 663.658323][T13399] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 663.658342][T13399] RSP: 002b:00007ffd78a7e8d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 663.658364][T13399] RAX: ffffffffffffffda RBX: 00007f98b1f9b880 RCX: 00007f98b25c8407 [ 663.658381][T13399] RDX: 0000000000000000 RSI: 00007ffd78a7ff1c RDI: ffffffffffffff9c [ 663.658396][T13399] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 663.658409][T13399] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 663.658422][T13399] R13: 00007ffd78a7eb20 R14: 00007f98b2821000 R15: 0000558caf7ff4d8 [ 663.658446][T13399] [ 663.658455][T13399] [ 663.971781][T13399] Allocated by task 5956: [ 663.976134][T13399] kasan_save_track+0x3e/0x80 [ 663.980865][T13399] __kasan_kmalloc+0x93/0xb0 [ 663.985572][T13399] __kmalloc_cache_noprof+0x230/0x3d0 [ 663.991004][T13399] em28xx_v4l2_init+0x10b/0x2e70 [ 663.995973][T13399] em28xx_init_extension+0x120/0x1c0 [ 664.001318][T13399] process_scheduled_works+0xade/0x17b0 [ 664.006899][T13399] worker_thread+0x8a0/0xda0 [ 664.011513][T13399] kthread+0x711/0x8a0 [ 664.015634][T13399] ret_from_fork+0x439/0x7d0 [ 664.020235][T13399] ret_from_fork_asm+0x1a/0x30 [ 664.025042][T13399] [ 664.027389][T13399] Freed by task 5956: [ 664.031387][T13399] kasan_save_track+0x3e/0x80 [ 664.036115][T13399] kasan_save_free_info+0x46/0x50 [ 664.041226][T13399] __kasan_slab_free+0x5b/0x80 [ 664.046143][T13399] kfree+0x18e/0x440 [ 664.050096][T13399] em28xx_v4l2_init+0x1683/0x2e70 [ 664.055155][T13399] em28xx_init_extension+0x120/0x1c0 [ 664.060481][T13399] process_scheduled_works+0xade/0x17b0 [ 664.066230][T13399] worker_thread+0x8a0/0xda0 [ 664.070853][T13399] kthread+0x711/0x8a0 [ 664.074984][T13399] ret_from_fork+0x439/0x7d0 [ 664.079641][T13399] ret_from_fork_asm+0x1a/0x30 [ 664.084518][T13399] [ 664.086887][T13399] The buggy address belongs to the object at ffff888028bfc000 [ 664.086887][T13399] which belongs to the cache kmalloc-8k of size 8192 [ 664.101240][T13399] The buggy address is located 1856 bytes inside of [ 664.101240][T13399] freed 8192-byte region [ffff888028bfc000, ffff888028bfe000) [ 664.115257][T13399] [ 664.117872][T13399] The buggy address belongs to the physical page: [ 664.124330][T13399] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28bf8 [ 664.133117][T13399] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 664.141645][T13399] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 664.149665][T13399] page_type: f5(slab) [ 664.153705][T13399] raw: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 664.162504][T13399] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 664.171121][T13399] head: 00fff00000000040 ffff88801a442280 0000000000000000 dead000000000001 [ 664.179826][T13399] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 664.188540][T13399] head: 00fff00000000003 ffffea0000a2fe01 00000000ffffffff 00000000ffffffff [ 664.197515][T13399] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 664.206299][T13399] page dumped because: kasan: bad access detected [ 664.212762][T13399] page_owner tracks the page as allocated [ 664.218512][T13399] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 5880, tgid 5880 (syz-executor), ts 88982518155, free_ts 63358833943 [ 664.238528][T13399] post_alloc_hook+0x240/0x2a0 [ 664.243340][T13399] get_page_from_freelist+0x21e4/0x22c0 [ 664.248911][T13399] __alloc_frozen_pages_noprof+0x181/0x370 [ 664.254743][T13399] alloc_pages_mpol+0x232/0x4a0 [ 664.259631][T13399] allocate_slab+0x8a/0x370 [ 664.264253][T13399] ___slab_alloc+0xbeb/0x1420 [ 664.268965][T13399] __kvmalloc_node_noprof+0x429/0x5f0 [ 664.274444][T13399] tun_attach+0x901/0x1610 [ 664.278901][T13399] tun_net_init+0x309/0x3d0 [ 664.283455][T13399] register_netdevice+0x6bc/0x1ae0 [ 664.288637][T13399] tun_set_iff+0x844/0xef0 [ 664.293105][T13399] __tun_chr_ioctl+0x788/0x1df0 [ 664.298004][T13399] __se_sys_ioctl+0xfc/0x170 [ 664.302734][T13399] do_syscall_64+0xfa/0x3b0 [ 664.307512][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.313450][T13399] page last free pid 5666 tgid 5666 stack trace: [ 664.320069][T13399] __free_frozen_pages+0xbc4/0xd30 [ 664.325223][T13399] __put_partials+0x156/0x1a0 [ 664.329930][T13399] put_cpu_partial+0x17c/0x250 [ 664.334745][T13399] __slab_free+0x2d5/0x3c0 [ 664.339196][T13399] qlist_free_all+0x97/0x140 [ 664.343828][T13399] kasan_quarantine_reduce+0x148/0x160 [ 664.349327][T13399] __kasan_slab_alloc+0x22/0x80 [ 664.354206][T13399] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 664.359856][T13399] getname_flags+0xb8/0x540 [ 664.364509][T13399] vfs_fstatat+0x43/0x170 [ 664.368874][T13399] __x64_sys_newfstatat+0x116/0x190 [ 664.374199][T13399] do_syscall_64+0xfa/0x3b0 [ 664.378797][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.384724][T13399] [ 664.387076][T13399] Memory state around the buggy address: [ 664.392733][T13399] ffff888028bfc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.400914][T13399] ffff888028bfc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.409103][T13399] >ffff888028bfc700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.417287][T13399] ^ [ 664.424063][T13399] ffff888028bfc780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.432261][T13399] ffff888028bfc800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 664.440440][T13399] ================================================================== [ 664.470484][ T30] audit: type=1326 audit(1759057213.785:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13374 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f207b18eec9 code=0x7ffc0000 [ 664.791112][ T5956] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input59 [ 664.898466][T13399] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 664.905836][T13399] CPU: 0 UID: 0 PID: 13399 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 664.914982][T13399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.925080][T13399] Call Trace: [ 664.928383][T13399] [ 664.931350][T13399] dump_stack_lvl+0x99/0x250 [ 664.936026][T13399] ? __asan_memcpy+0x40/0x70 [ 664.940657][T13399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 664.946032][T13399] ? __pfx__printk+0x10/0x10 [ 664.951279][T13399] vpanic+0x281/0x750 [ 664.955307][T13399] ? preempt_schedule+0xae/0xc0 [ 664.960284][T13399] ? __pfx_vpanic+0x10/0x10 [ 664.964917][T13399] ? preempt_schedule_common+0x83/0xd0 [ 664.970487][T13399] ? preempt_schedule+0xae/0xc0 [ 664.975359][T13399] ? __pfx_preempt_schedule+0x10/0x10 [ 664.980769][T13399] panic+0xb9/0xc0 [ 664.984536][T13399] ? __pfx_panic+0x10/0x10 [ 664.988994][T13399] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 664.994941][T13399] ? v4l2_fh_open+0xc7/0x430 [ 664.999560][T13399] check_panic_on_warn+0x89/0xb0 [ 665.004537][T13399] ? v4l2_fh_open+0xc7/0x430 [ 665.009151][T13399] end_report+0x78/0x160 [ 665.013541][T13399] kasan_report+0x129/0x150 [ 665.018093][T13399] ? v4l2_fh_open+0xc7/0x430 [ 665.022740][T13399] v4l2_fh_open+0xc7/0x430 [ 665.027201][T13399] em28xx_v4l2_open+0x157/0x9a0 [ 665.032095][T13399] v4l2_open+0x20f/0x360 [ 665.036394][T13399] chrdev_open+0x4c9/0x5e0 [ 665.040867][T13399] ? __pfx_chrdev_open+0x10/0x10 [ 665.045860][T13399] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 665.052333][T13399] ? __pfx_chrdev_open+0x10/0x10 [ 665.057486][T13399] do_dentry_open+0x950/0x13f0 [ 665.062296][T13399] vfs_open+0x3b/0x340 [ 665.066575][T13399] ? path_openat+0x2ecd/0x3830 [ 665.071541][T13399] path_openat+0x2ee5/0x3830 [ 665.076356][T13399] ? arch_stack_walk+0xfc/0x150 [ 665.081828][T13399] ? stack_depot_save_flags+0x40/0x860 [ 665.087369][T13399] ? __pfx_path_openat+0x10/0x10 [ 665.092420][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.098945][T13399] do_filp_open+0x1fa/0x410 [ 665.103759][T13399] ? __lock_acquire+0xab9/0xd20 [ 665.109342][T13399] ? __pfx_do_filp_open+0x10/0x10 [ 665.114406][T13399] ? _raw_spin_unlock+0x28/0x50 [ 665.119302][T13399] ? alloc_fd+0x64c/0x6c0 [ 665.123672][T13399] do_sys_openat2+0x121/0x1c0 [ 665.128384][T13399] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.133623][T13399] ? exc_page_fault+0x76/0xf0 [ 665.138342][T13399] ? do_user_addr_fault+0xc8a/0x1390 [ 665.143729][T13399] __x64_sys_openat+0x138/0x170 [ 665.148634][T13399] do_syscall_64+0xfa/0x3b0 [ 665.153175][T13399] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.158425][T13399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.164634][T13399] ? clear_bhb_loop+0x60/0xb0 [ 665.169402][T13399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.175340][T13399] RIP: 0033:0x7f98b25c8407 [ 665.179777][T13399] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 665.199418][T13399] RSP: 002b:00007ffd78a7e8d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 665.207998][T13399] RAX: ffffffffffffffda RBX: 00007f98b1f9b880 RCX: 00007f98b25c8407 [ 665.216010][T13399] RDX: 0000000000000000 RSI: 00007ffd78a7ff1c RDI: ffffffffffffff9c [ 665.224010][T13399] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 665.231993][T13399] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 665.239991][T13399] R13: 00007ffd78a7eb20 R14: 00007f98b2821000 R15: 0000558caf7ff4d8 [ 665.247997][T13399] [ 665.251371][T13399] Kernel Offset: disabled [ 665.255701][T13399] Rebooting in 86400 seconds..