last executing test programs: 5m3.081857817s ago: executing program 3 (id=79): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1bc, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x5a) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r4, 0x0, 0x7}, 0x38) 5m1.980942907s ago: executing program 3 (id=93): r0 = syz_open_dev$loop(&(0x7f0000000a00), 0x6b, 0x8000) sync_file_range(r0, 0x1, 0x8, 0x1) 5m1.805211105s ago: executing program 3 (id=94): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5m1.60976237s ago: executing program 3 (id=97): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x8) 5m1.392345855s ago: executing program 3 (id=102): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4m59.942548712s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x44, r1, 0x1, 0x3, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x44}}, 0x0) 4m59.349338008s ago: executing program 32 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000280)={0x44, r1, 0x1, 0x3, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x44}}, 0x0) 4m59.021341092s ago: executing program 1 (id=117): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) 4m58.993667807s ago: executing program 1 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a0015010000000000"], 0x1c}}, 0x0) 4m57.411726744s ago: executing program 1 (id=127): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x35, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "20fd13831b3a8ba20729fbbee9423270aa69a6a181b46a4562be6c67508f1db1", "549c5024e9cd85956d3bdb579239e91c", {"b0a1754e1eb45ff016a5b322d7396dc3", "da8c4e861f33f6def6190bbb0b4f9b0b"}}}}}}}, 0x0) 4m57.107861407s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0xb109a, 0x0) 4m56.778043503s ago: executing program 1 (id=137): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x12) ptrace$getregset(0x4205, r0, 0x102, &(0x7f0000000240)={0x0}) 4m56.101373216s ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 4m55.851553164s ago: executing program 33 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 3m43.761511732s ago: executing program 5 (id=373): r0 = creat(0x0, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r2, {0x7, 0x1f, 0xffffffff, 0x2301508, 0x0, 0x401, 0x100, 0x8}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x6) 3m43.439642402s ago: executing program 5 (id=374): open$dir(0x0, 0x204200, 0x111) r0 = io_uring_setup(0xdac, &(0x7f0000000300)={0x0, 0x0, 0x400}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3c4}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x5, 0x0, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x1000000000000, &(0x7f00000005c0)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000640)={0x13, 0x10, 0x7, {0x0, r5, 0x2}}, 0x18) syz_io_uring_submit(r2, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, 0x0, 0x4040891) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) r8 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x37, 0x0, 0x34, 0x62, 0x0, 0x0, 0x32, 0x37, 0x37, 0x0, 0x65, 0x0, 0x0, 0x32, 0x61]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xffffffff}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4004890) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) syz_emit_ethernet(0x6a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) 3m42.868791784s ago: executing program 5 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000007f00000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) 3m42.601417506s ago: executing program 5 (id=380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(&(0x7f00000004c0)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0xffffffea}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwrite64(r3, &(0x7f0000000000)="3bf273", 0x3, 0x1000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) getgroups(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 3m39.758338232s ago: executing program 5 (id=385): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mlock2(&(0x7f00000df000/0x4000)=nil, 0x4000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') lseek(r1, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x141081, 0x0) setuid(0xee00) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800000000000000ea0b00000008000300", @ANYRES32=r5, @ANYRES8=r0], 0x60}}, 0x0) 3m38.612564393s ago: executing program 5 (id=388): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000180)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = socket(0x1, 0x800, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x44004) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000240)={{0x10, 0x71}, 0x1, 0x81, 0x9, {0x5, 0xe}, 0x9, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000001100)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) r7 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 3m22.824265776s ago: executing program 34 (id=388): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000180)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = socket(0x1, 0x800, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003500), 0x0, 0x44004) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000240)={{0x10, 0x71}, 0x1, 0x81, 0x9, {0x5, 0xe}, 0x9, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000001100)=0x8, 0x4) sendto$inet6(r6, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) r7 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) 11.34926473s ago: executing program 7 (id=1079): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcd946929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/vmcoreinfo', 0x210042, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x6, 0x1, 0x0, 0x0, 0xc08, 0x9, 0x213dc94e, r5}, 0x20) io_setup(0x20, &(0x7f0000001140)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x5, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0d32818e7e6ae0cd", 0x8}]) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 10.33574506s ago: executing program 6 (id=1087): r0 = socket(0x10, 0x803, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002200)=@delqdisc={0x9c4, 0x25, 0x300, 0x70bd2c, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x5}, {0xc, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xee}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_drr={0x8}, @qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xf926}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffe4ee}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x3}}, {0xa, 0x2, [0xfffa, 0xfff7, 0x61]}}, {{0x1c, 0x1, {0x8, 0x9, 0xfff3, 0x2, 0x2, 0x9, 0x2, 0x6}}, {0x10, 0x2, [0x5, 0x1, 0x3, 0xc, 0x1, 0x9]}}, {{0x1c, 0x1, {0x4, 0x6, 0x661b, 0x1769, 0x0, 0x4, 0xc1, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x1, 0x7, 0x6, 0x7f, 0x2, 0x0, 0x6, 0x1}}, {0x6, 0x2, [0x3d]}}, {{0x1c, 0x1, {0x4, 0x3, 0x0, 0x73, 0x0, 0x4, 0x8001, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x8, 0xf, 0x459, 0xe, 0x2, 0xb65e, 0x6, 0x6}}, {0x10, 0x2, [0xe2b3, 0x400, 0x4, 0x8, 0x81, 0xfffe]}}]}, @qdisc_kind_options=@q_tbf={{0x8}, {0x844, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x100}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x1, 0x6, 0x2e, 0x200, 0x3682, 0x1, 0xdf15, 0x0, 0x40, 0xfffffff7, 0xc4, 0x2, 0x6, 0x7, 0x0, 0x80000001, 0x211b, 0x10001, 0xe43, 0x8, 0x6, 0xc, 0x3508, 0x1, 0x8, 0x5, 0xf, 0x8, 0xc00, 0x9, 0x2, 0x9, 0x2, 0x1d, 0x4, 0x4, 0x8, 0x6, 0x10001, 0xff, 0xe, 0x7, 0x6, 0x1, 0x7, 0x9, 0x6, 0x9, 0xf21f7b5, 0x80000001, 0x8, 0xc6e8, 0x1, 0xfff, 0x2, 0x1000, 0x1000000, 0x5, 0xf350, 0xfffffff7, 0x2, 0x5, 0x0, 0x1000, 0xb64, 0x400, 0xffffffff, 0x7, 0x4, 0xfffff400, 0x3, 0x7fffffff, 0x5, 0x81, 0x7, 0x1, 0x4b15fc15, 0x6cfe, 0xff, 0x1, 0x2b4d, 0x8, 0x2, 0x4, 0x6, 0x5, 0x4, 0x1, 0x3, 0x0, 0x52, 0x0, 0x4, 0xfffffffe, 0x2, 0xffffff80, 0x4, 0x9, 0x8, 0x7d, 0x9, 0x5, 0x0, 0x4, 0x0, 0x8, 0x7, 0x7, 0x5, 0x9, 0xc, 0x0, 0x1, 0xca64, 0xffffffff, 0x7, 0x4, 0x6, 0x4, 0x6, 0xd, 0x800, 0x9, 0x3fa2, 0xed99, 0x4, 0x7, 0x180, 0xfffffad8, 0x6, 0x8, 0x7f, 0xff, 0x8, 0xc, 0x7, 0x7, 0x5, 0xb, 0xa, 0x800, 0x9, 0x522, 0x7, 0x8, 0x80000000, 0x8, 0x6, 0x5, 0x3, 0x6d7, 0x6, 0x5, 0xc0b, 0x8, 0x4, 0x7, 0x20, 0x26, 0x2, 0x2, 0x1, 0x200, 0x75e, 0x4, 0x7, 0xa00000, 0xfffffff8, 0x10001, 0x4, 0x0, 0x35, 0x8, 0x5, 0x883, 0x3, 0x6, 0x4, 0x0, 0x8, 0x7, 0x1, 0x10d, 0x8, 0x7, 0xe8, 0xfffffffb, 0x101, 0x8, 0x3, 0x7, 0x69, 0xffff0b90, 0x2, 0xffff0001, 0x7abe, 0x5, 0x20003, 0x5, 0xc0f, 0x7, 0x101, 0x9, 0x7, 0x9, 0x7, 0x5, 0xb, 0xa, 0x0, 0x8, 0x2, 0x78e, 0x1000, 0x9, 0x2, 0x5, 0x2, 0x800, 0xbc, 0xfff, 0x54c1, 0x0, 0x6, 0x5, 0x1000, 0x80000001, 0x3, 0x80000001, 0x2d, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0xffff, 0x9, 0x1, 0x9, 0x8ce, 0x5, 0x4, 0x2, 0x800, 0x3, 0x100, 0x1000, 0xffff7fff, 0x7, 0x3, 0x5, 0x2, 0x2, 0x6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6, 0x2, 0x9, 0x1}, {0x2, 0x0, 0x4, 0x7, 0x521, 0x1}, 0x2, 0x0, 0x1925}}, @TCA_TBF_RTAB={0x404, 0x2, [0x5, 0xb, 0x6cc, 0x5, 0x8, 0xf, 0x1, 0x9, 0x1, 0x0, 0x3d0, 0x0, 0xfffffffe, 0x4, 0x80, 0x10001, 0x40, 0x26, 0x1, 0x8, 0xa29, 0x7, 0x8, 0x5, 0x80, 0x2, 0x3, 0x7, 0xfffffff9, 0xfff, 0x0, 0x5, 0xe121, 0x5, 0x7, 0x7ff, 0x40, 0x401, 0x6, 0x5, 0x80000001, 0x0, 0x8, 0x1, 0xfffffffa, 0x5, 0x3, 0x7, 0x4, 0x1, 0x2, 0x5, 0xfffffffa, 0x10001, 0x4, 0x4, 0x8001, 0xf, 0x9, 0xe, 0xf, 0x4, 0xf, 0x9, 0x2, 0x19d, 0x3, 0x4, 0x408c, 0x5, 0x4, 0x2, 0x0, 0x0, 0x3ba600, 0x1, 0x7, 0xfffffff7, 0x0, 0xa, 0x5, 0xfe6, 0x89, 0x2, 0x1, 0x200, 0x6, 0x1, 0x1, 0x101, 0x6, 0x7fff, 0xd27, 0x8, 0x0, 0x1, 0x6, 0xe8, 0x4, 0xb6, 0xf491, 0x6, 0x101, 0x579c, 0x1, 0x9, 0x7fffffff, 0x9, 0x2, 0x2, 0xfb, 0x6, 0x9, 0x7, 0x5, 0x5, 0xfffffe16, 0x800, 0xcd9, 0x7, 0x4, 0x1ff, 0x3ff, 0xffffb4ab, 0x1, 0xfffffffa, 0x7, 0x5, 0xa4ed442, 0x4, 0x80, 0x2, 0x401, 0x0, 0x1000, 0x2f, 0x2, 0x5, 0x7f, 0xfffffffb, 0x1, 0x7, 0x10001, 0xd, 0x6, 0x3ff, 0x80000000, 0x4, 0x5, 0x7, 0xe, 0x41a, 0x8000, 0xfff, 0x7, 0x5, 0x7, 0x9, 0xaa0, 0x23, 0xf3, 0x2, 0x0, 0x3, 0x2, 0x1ff, 0x7fffffff, 0xfffffffb, 0x7f, 0x7, 0x7, 0x33, 0x8, 0xfffffffe, 0x6, 0x0, 0x6, 0xfff, 0xbee8, 0x2c24925, 0xbbb, 0x2, 0x5, 0x96, 0x401, 0x275d, 0x80000000, 0x2, 0x9842, 0x7fff, 0x1, 0x97, 0x9, 0x7, 0x1, 0xff, 0xc6a, 0x7, 0xa872, 0xfffffffd, 0x1, 0x7, 0x2, 0x6d, 0x0, 0x4, 0x7fff, 0xffffffff, 0x3, 0xe9, 0xc44, 0x8, 0xfff, 0x0, 0xc, 0x6, 0x7ff7, 0x7fffffff, 0xf4c4, 0x4, 0x6, 0x4, 0x7, 0x6, 0x9, 0xd17, 0x5ad, 0x1, 0xd1d5d796, 0x10, 0x4, 0x4, 0x8, 0x2, 0x7fff, 0xa0, 0x10000, 0x756, 0x0, 0x4, 0x8, 0x0, 0x8, 0x782, 0x10001, 0x5, 0x5, 0xb8, 0x10000, 0x1, 0x2, 0xfffffffd, 0x401, 0x297, 0x100, 0x8]}, @TCA_TBF_PBURST={0x8, 0x7, 0xca8}]}}]}, 0x9c4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$alg(r5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x50844}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x11040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r7}, 0x50) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r8, &(0x7f0000001140)=""/4096, 0x1000) 10.285340839s ago: executing program 7 (id=1088): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x22, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fbffffff000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000d780c001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200ee5f00000007020000f8ffffffb7030000008200000018110800", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00101c00bfa200000000000007020000f8ffffa12b7592b2845f0d16106c8a8d93ffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084020000b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2, 0x0, 0x0, 0x61}, 0x3, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, 0x0) 6.890049682s ago: executing program 7 (id=1097): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x174}}, 0x8010) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4bfa, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x2, 0x7]}) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x6a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.88314455s ago: executing program 6 (id=1098): r0 = socket(0x28, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d1f000000000000006923c63a4541062101a59ea9cba39a989ca8c70b3692930208", 0x2b, r1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f00000006c0)="1a641e28f4d88a4454a8b70a1721f186d9fb02061c135db066cd67a29a254bab853b299576f6669b35f64ddaa6a42891e4d8838e68edf86b4858d77e5f8c51a4e06872d6fcd90980ffd50aab3af0e56643d26868decddaf87d938d691d196a012c4846f033e91007be88573c6ae419a813036e51fd2c1bf57603f3b08612a3dabd6eeea0fd061093d3cfec864b6800a62557ed90fbdd5ba8ac8109c1cb178995cefa7091f353542f2f65906ab291083b9f41aea435f45421ca2aede21829d20b46ab25653d3d0bc2453978e8cc1dd9855c3d792628e6628f39162f33bc09381e1551d7512914f520f964e599ed6fdf1b8658b2262843e1924d446b5bd57b5a0f0f14bf36d8bcee2011949a83a0853b45f55c7e5d5fc42109ba3bfce4930c9dc91dd8224283af19ea78fffdca9bc0a0a95ea464bf48c0718b732fa2f77e2e5821c566b49ffc5fcb6b45141190adbf76be513fd4fe0397d6471bbacccabd606d9c5848da0f97a4eb015306f616f0aa9aa77f44e4ee52cc679718f4006f56c3fccf456577661b3f4f081d60fa05928f9cb327e69274afe998bec4c1eb1efce32b8447ad94d48f2a6fbed9b6a2a6029e7fdf1fef26c24ebb1c5789e575873accb9877a7a5b6c904c5cee46a44b6ba8ca10ef74160a589b5c68cc1f80a7b88384bc4f00bd88ae721156359a731cb155dd03aa6ce42f469698388ebb6d904786d1c2b0c7861c623fe09b8b26822936452f51573663b02bfde610a85059b78082cd55515ff6c22a1515bc6ea12c95e4501279af31441425d3da5c7be61be026b32563fe9d6efef61fa6db44b211a44d880ef13fe57d61a6a4d24b5b02eac2d429418c90227067c9d68edc2af0d2c4e3ebaee646975a4ef723f45552cebaa8903c3c5620e3a8d95be5b8679d8e65cfa6147f55e1a7c9f3df5314ab9860f5de5992e3337d1b99bd8f4db96a9794cf6c250fe14a6e57af1573a16923ec52671fbfc06ca0ac2865e059ab5fc3dbdfe121df6c5374cd8be9cb5999ab41d3f23a55d17d4ca4ce5e62b7085fabef3c9b0b07f220842ae1a7ee4e838bcdb903b7a434e8c8de73d2a4dc75239aeac868f34cd743d98e0c62f2752b5157940166b513654160183a97025cc8ed6808a856e2c942839d5c53b28fd91dea1077a5f585d05f51ed88308f0008963e39c9fb56e0cbb5cd969241e95750942639013929881d6c79c8e21d0154a4b3396292f25cf09d6e635a648682eda1cdc78df8979666ecb758f08977031fb99dd2a63ddfce52cb844451dce5b5c44868221c5643dbcd305d4dd56da11a485c68ef3e1f80f1ac72858b1808a284bcf098c02624008552609929857c7ea2b732bfad178d6b76f2497e106a5a141ff00d54322613f7dcd0e05178a36923b932034fe799e8b45f33ec40e8611affcbb4f1d766f1f869b3fd862a03d64c09718e3bc2ddaefa8c93b9594a368748bd92c2cb9ec4deb741514d69d4110f931687dc4ee1bb9eb483480b007f0d0b7108aeae0db4634ad1d5c8d68a81c60759ac536f17878ffb67ad3f68a182b42ff1339c73304f2dd67257b7c370133b9e5843087074b3d406d58c5facb153b1a81a39546504d0b01f733b43b6a71df031b0b6e678b0cbe2dc496639c2fbd1076a6938a94833de70ad03b9c5e932f2386ab4db8323c23e88c8f79bf5ec717de55bc7ac8698a9030dc28a7b83db6f46afcda599c5f424b96e4e034ef158174385d86cc315fd0529e2a26ddf39319bd9ba4cc17af8c8ca683aea8db186419f8766f7f94bcb8326e2a3fb448115541146d2cb94981a657180251f5b90fd826aac39e520ba6120a4af6447d1e7dffad9190ba327f4e6f8a2254a23a29321336f4940658360a270a7a87b67e087768360d2fc5aaf3f66116515140f390d70d3dd7da24a313b5341be9b135db56a64e39d8a4a93a2c3d879e954ea179fda4b049bb4edcaabba367e9bc50a68083b417211f2b4cae3b23cb02df239b9c8ca1e0df82bba4c846245bf969adc5a823feb0a224dbf8f9af839b2df721839a85999919eff89cbac9d32d4b8e978890121231359ea46c879c8002b4be3669fb5e76b2049d2a11453278666c2eb4667e699b4de0f6f330e4f6fe3ce9ad8d020813b3105b6df2b9632763e4030ec84902e697eb69fec5cd399149327eb1621c27c352d87da9d5fda6d19540bfd32a74920e1e25e1c9332b563c37193e051c6f1b348da2878e98465b747e5f34dd44b5e1b7e630284e7ecaa883d93a5c08f42631c3fba63c3483317597bf457e8cc070c78ed0af7fde154ee54a2ca8f049b490eea4924bd2dd41293503585a318ad32a259f028b4d8acc380e13297845f5764beec514642f11ffe25d292604965913c0a8e90a0a98ebe3214f9d8d25d4625964407c1a88d8cd67cb1c3376c69010c498b91601d0aa4da9ee10fb50ea6878cf04e1560cdd5670a936002cd2d05fcfc03d9dbf99d133d3a0351ca3aa03632a5c890ce1f5cafb017d99d46f9b817ad0b85d3d9462463f8ef4adf72b69a017fb9b57c2b2456f034844823801fac3d2bf8d8ac3eff119dce896a0473330e79c46c80aa97123af9a1a26b9e7979c177bdc3f433d0ed797602333645dfb00faf5b87bfd90fa1c00289eadfe5f553c0b988638b86e43194cca99514c7af74e066d80dec639c767075a437c774a9b5c36f3e68e31bf5c944fdd739773a88362d28c963d1d5357b2397fe191147e083a23e2ddabf444662d4a615ee79ad6438a3c65f79a17517ff647e27310964504d1990f85a834caf6ba44618d7691f749bb155bdec24e865dd64b8be91a54a9c4533a96c92f5f88957d3dfc81bd576123e7e5bf735b5cba3fa06963ef88788b40ff936d10f004ad0b9297ffd6fa674967fab9889c5452d2d72d7c36381bbf67da48a52eaf842b69d4f38afdb7a4dc1ec814bf72091988e93aa205b6f6f9dbe2cfa99d0650ad367444cf04a68d5b0bb0d5c475c4f8de3756f01f230562dca68bc1ef1409ce018ee428e585fefe6be78f9887baccfa92607bc12b86e69097082e1047fde987f560c447ed48d08d6ed2b381a49a3c105599663d0f2bde75c9e2f826d2a7bfc15c1ec53987da87feac39a85732962cd6f3edb8301c597ef4905d32959908b9266851a6322f662607b205d061adc1d2c42686d96d429d21a2b6aba54fa3fc903f08e7dd88e923c658211867c33ca9301d051e149cf99c4fec641a7087288e3ed3340445c44a39454710d8060866c405c6854080b7947b65579206aab02e9ada4d250d68d4a7c7c9d0263caab8b4b11deda4657176b249fba6eda4f8f198647f4246b748730bd5e9573c167f8cd30cc762d9ba186a1fca1614273f7b5c674f567d461bdbc9365ea20a00d3c1f562070fa515c4412997f8ce437093e98a6c5a6a5a8556407ceaf86f7d40ee3b5ef7d434b1929ee1f7e78762f747466a4fa920667b5392983dd46f4f01da17edf911d8502bceed08d139b07935ed0b8ed452db1c658f5230c18ce6e2d0311b5470abf68997ec92290d4979a9927f0c912ca891b860f5d5e37dad2010b9165f2f18222092cd5c5c3f9fc25905576c9f20a1f72f76ec01597431e76afb37874a5e0ac38e85c8ea95843c0c3cbc65ed55dcd7a17659adfb40373b0bf608dbf9995055c58a799c9bab6b4f2023b0e424c0010df35b7a4d3d3d0afea4aedbb8fe5ed8e0d757d7da9ef0f6f8dc7fc571dfb7677f10402dc76786b5bb020f91108b60977605efdbaad028f309456c96cdb978ae1a9a80b693c08f9934a485a0731f9f6bfe39ee6373e36e90e28291ff694923add4fbfe24e1e806e3a0fc9e14cdf3082c3ec56e1944a2ba82b760e9d22ba865d9dd0d2ba651aaa315fe6728bed51d7ca4068f2fd5bec60b235c58637789d86f2b9c6e857e7ef8b0ea16561a071865229e45b6e4a21dfa6c12e2997b95daac0e7601cfd1f1eeec1195c76a5a47b19114e6633824066ac9b999908b666f8b94b9dff7038cb4ee2a80d7a3a232346e6bbdc77aa9743a7024c4ad79d83d98bf87aed9045265c9827469344462e68bd20c9c934da723788f5b51d9f49ae49b3fc37ee5f16f062b1bdee4c5312221b6d649d5cfde331606a307e84e4a36776733172620b610d03d00b8490d9ac11f4cbcfa642162cbb87e6af941f64b8ea02c9e280880f462b920aa2b3bd1acc86bf93b8fc8a080e1c3510e9c0070f37b12a23bfd7e54837e1beb5f608e73c91612e3d30f6a5b4be41cd0cc25fbdcade7356c3f78f6f70060f97a6b1516781e54b7e0c86813be1370a337111ddaa8d19dc9015e5edf6237662d5005b082a9e751e87d7ff28a0797ea100db0cbf4f2cf77e38034bd1fe9494e448995cd0a7b16777e36a096e93a7bed9d14a180439e112d5bc4a36afcea601c61e5204608325a99f8e6bf1ea6c70b24e53315eea40906ad684de8613d3e8a6d2e0f79d8df83b16f862c128a2189a98ff4df15b15310d16dde87a43c16bd61449cc401f34f234a303f4350cc778bf6408a7cc8ac13882dce71f3718cfb6214ce45f5bb97f4309afa5a592aecf0f9685c3a83bfab1224be1c9dddc8f2e737b0c10f8ac89551cb82f30c232dac84e46a6359b6bb885387b935acd09d4bad74f5cc9aa0914bcf20713397a88bced4f530eed46d6dd9a6090aa0542139ec15e8aa11a5952f18018ba56fa28704567b0e37957f6202b0334a1ad1240425e5dc6704c39071b863e1e369f826c89da16126786914035fa0f066c389fef81f0fb275a9016c1c0d526a59f42b346439d60942a154be7fdf9c68fadbc63fc382bd94b886dd26c41f37747b6350f519df0d579066be7388d93362601f27df11b0dc5a189d3634e2f9968906c303924cf361f39166e57f0ce8d6a0b8fb77d8fecb0f957bde5c1a0ce131e067eb044a54000e1039194836d5410d71f8cb8f859a1ca9d2f2687e77565294605356dfd37427aeb2b57ad6d7b292a0d39bf1fa5a4f4a43cd4af54aa05a7ef485ee58c88269db017d1040be3af5a9e3321abf216025d0845fd957ea0f7e9899ab42d166a98fb0f28c96da7d62b4213f98f506b801ee8472bafe8c4370dec281240c503db507039041184b21945ca7a4308fda9f6456418498718761e38f1876290ebb8b6ab76022bdd5f64c487d39e7fb4be7bd3c92c3094830a8dea4c4206236405cb443afb61cb53ca2a6ead790043a43e356d129d6eee690debb481955d3ae88d79d6e7fa89a16d5f62a4", 0xe80}], 0x2}}], 0x1, 0x40084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000001440)={&(0x7f0000a88000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3000}) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000b7a000/0x1000)=nil, 0x1000, 0x0, 0x3032, r2, 0xe8be0000) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x1, 0x80, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d61347"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x4, 0xbf}, {0x6, 0x24, 0x1a, 0x8, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x34c7, 0x5, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xd, 0xf9, 0xad}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x9}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x7, 0x1, 0x3, 0x40, 0xc0}, 0x23, &(0x7f0000000300)={0x5, 0xf, 0x23, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "538bb7c7740f46bb058c8892d1c64694"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x0, 0x8}]}, 0x2, [{0x7e, &(0x7f0000000340)=@string={0x7e, 0x3, "28ce7863c1c4354ffced7a17674974370bb46379bf1cc8d821f6e6af78a6686d8f0e03374c822d4957b247d721f0d481c1b8ac23b4f61b7a9ffdd3acd157fee0584013c784f76734a1ee89d286cb7710abaad13cff1a7413094e51219387ff8f93712be40f538001a5c34f3b85813db7222ee1d9ed32b54d188fd5cf"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc71}}]}) syz_usb_control_io(r9, &(0x7f0000001600)={0x2c, &(0x7f0000000540)={0x20, 0x31, 0xc7, {0xc7, 0xf, "c407f4cf3e1b9db4a70194c83d5af088edefb53b4efd78918c8256aa3d7146898d5ac007ebe4b2675ef9fb047834192bf80e66f9255050a64bb075ecc26ac1b18ccc7c868ffe0d4ec7437e775738beeda60eb1941cb746395d8c726f18013b4253fe1998db4461219f355f1eb05ec3317819ba6055cc738153e33f9cfbf0495ea8a27d93de5e79ab424e355dd13111277b06bac895aebc9f02365a8611fc8663765216c45fdb241f24ebf2e0055061f339e3ec5661e5da6aaa81f17430f0371c5920b3579a"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}, &(0x7f0000001540)={0x0, 0xf, 0x7d, {0x5, 0xf, 0x7d, 0x6, [@generic={0x4b, 0x10, 0xb, "5a36f7af8ea771d5b3e2d70d66dbf52c22029c3d7ab3772ee523232bd759c875bed19eb65b4d8c5aa5cfdc64af5b098bf1c98ba33aa2aa2dccd45c8e68c36760c71c1123c309520c"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0x7, 0x4}, @generic={0x16, 0x10, 0xa, "ca89d3be57ef0e904b9ca353d6ea8737e4c026"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x5, 0x6}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x98, 0x9, "5501d44a", "19967b37"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x4, 0x3, 0x17, 0x1, 0xc}}}, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x20, 0xe, 0x5a, "981c87abf3b9853004ad709c49a9ae0da8e20d43b5a980ed24977187fcccd184f5b704db8ae606c32346e7b8280089ea44fae6db2a9f1f0a941fe588cbcaaee4bb49612fa992a88420f7d7a8b0c7561612b17de045f38f46bd66"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000001740)={0x20, 0x0, 0x4}, &(0x7f0000001780)={0x20, 0x0, 0x8, {0x120, 0x10, [0x1100]}}, &(0x7f00000017c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000001840)={0x40, 0xb, 0x2, '|\b'}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0x4}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001940)={0x40, 0x19, 0x2, "82b3"}, &(0x7f0000001980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000019c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001c40)={0x14, &(0x7f0000001b40)={0x20, 0x21, 0x94, {0x94, 0x8, "825ebeafe7dcb486e5d7302cf7519b3f91ad0a19f9f9d4864c2f1fcb29ff9760dd0f58065150f8c9669060f51d035bac44ce7ba65c517cb6a91d68d0f2151d30618b22aa3ea6f3de95c61404665b457dc743ed61adbcf82d3e2a01af4dd6bc28ec7b556ced27258280e636a9e8a7efcd08a63b4134faf49cbd03e42d0996a1c0c094a3f111362baba0dd198ed09fc2ef268f"}}, &(0x7f0000001c00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d40)={0x1c, &(0x7f0000001c80)={0x0, 0x13, 0x1a, "9de70a1de579a910b5e43359ab6c0b09f1ffc3924381beeaa155"}, &(0x7f0000001cc0)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000001d00)={0x0, 0x8, 0x1, 0x7}}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @loopback}]}, 0x2c}}, 0x0) recvfrom$unix(r5, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 3.985652121s ago: executing program 7 (id=1108): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x20000003, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1001c], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14\\//\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x3, 0x6, 0x6, 0x9}) 3.453868943s ago: executing program 0 (id=1110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) 3.346683182s ago: executing program 6 (id=1111): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x8980}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000ad811008591e020096910102030109021200010000006709045400000d953600e6011a214209d1185f3c160ccb998f2d10111c3663a24644cf5241cc571e22d416de618d6e9cdf4464a3e98f9df485eae235210ba1bdac3e"], 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000000c0)={{}, 0x2, &(0x7f0000000080)=[0x3, 0x7], 0x100000001, 0x0, 0x1}) 2.905202031s ago: executing program 0 (id=1114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000005c0)=ANY=[]) 2.865539626s ago: executing program 2 (id=1115): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ea509e20720507cb19f601020301090212800100000000090400000008018100c107184b19a74e229416d3897bafb77dae45cc42724cc6882df1291d389965129e6580dcbbd96df4208ca5c16b0b7d00de2449bf04c188a03040524c0ff68a6b802654fb1f342dcad72f685273baf892d89bb210b76af2cd66919554e675dadfddbab3088f4355bbebde880a8060caa011555d85d7f4b1c7c0bbfcef0d277fb1be88105d5466a6880651f459745367f77e83aa03f74cb89720df8eb80fcb42f807a56e4a1076685207bb78b0bb1c304e6c068713e7d013032d4af9eff0b650984067"], 0x0) 2.691654369s ago: executing program 0 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x44, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x40) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x10ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c00)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000005000)={&(0x7f0000004e40)=[0x0], 0x0, r9, 0x0, '\x00', 0x1, 0x2}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, &(0x7f0000000c40)=@x86={0xa9, 0x5, 0x8, 0x0, 0x3, 0x6, 0xad, 0x0, 0x40, 0x3, 0x9, 0xfd, 0x0, 0x5, 0x7, 0x88, 0x7, 0x13, 0x35, '\x00', 0x8, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x4, 0x3, 0x8080000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000040)={0x0, 0x8, [0x2, 0x1, 0x7, 0x6, 0x7, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.616480718s ago: executing program 4 (id=1117): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "e9ff000a06a03d543f77fa2c31"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x5c}}, 0x0) 2.481213651s ago: executing program 4 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)={0x14, 0x3, 0x3, 0x801}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) 2.400418373s ago: executing program 7 (id=1119): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x0, 0x7, 0x2, 0x880, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r0, 0x40046201, &(0x7f0000000040)='/&]\x00') r1 = creat(&(0x7f0000000080)='./file0\x00', 0x88) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) syz_clone3(&(0x7f0000000c40)={0x0, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)=0x0, {0x1f}, &(0x7f0000000b00)=""/179, 0xb3, &(0x7f0000000bc0)=""/16, &(0x7f0000000c00)=[0xffffffffffffffff, 0x0, 0x0, 0x0], 0x4}, 0x58) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000cc0)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002d40)='devices.deny\x00', 0x2, 0x0) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000002d80), 0x101000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002dc0)=0x0) getresgid(&(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)=0x0) r13 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003540)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000003640)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(0xffffffffffffff9c, &(0x7f0000003740)='./file0\x00', 0x0, 0x100, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r18 = socket$kcm(0x29, 0x2, 0x0) r19 = openat$nci(0xffffffffffffff9c, &(0x7f0000003940), 0x2, 0x0) r20 = syz_open_dev$mouse(&(0x7f0000003980), 0x2, 0x25a001) r21 = userfaultfd(0x1800) lstat(&(0x7f00000039c0)='./file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003a80)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003dc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003e00)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000003f00)=0xe8) statx(0xffffffffffffffff, &(0x7f0000003f40)='./file0\x00', 0x4000, 0x0, &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(r1, &(0x7f00000041c0)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)}, {&(0x7f0000000280)="9959de80cb323af789dfd0862fa4b3ae86e944777cc4370362b1153ba7d464f322b88635646459a56a5d6d7bb0258190f21fa782c916a1d1be4420", 0x3b}, {&(0x7f00000002c0)="6836cd3b20dfba8f3001808fce9aa99b0af9a693b5d90f8c319f59f4f9853de8177c3fc9da2eaac62446d07da22775639f61772d9d26421987c1f6b30135518359286ff069ccfde8b1b56f8403b81003e6de57ac0dc7a77bfceb0941e1d7a8957129639c1bcc658c18ee236b5ee0ac689e75080b9c7fcbc558a7fb05954bcdb9afba743798c51faa617df46983021f29b41eee69211ba5e97b7257d463583066f1fbdb5cd597a598d5ca45c8943e6d9f9e76caa658c4f7d58932dd92db7ad756513204f69248249a7785dc6ebbc444b18d03aa28aef0527285475970082878b6", 0xe0}], 0x4, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x20008080}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="3e217232487a4552c5909650538a2f02096cea7caa6bfff3e1ac382c92dbe79ee5d919015abc09177fc2d705069001c9735e6b7281bdccc1f42a7673a1bcabe16e736513b0168ef232e2978abfb430215172c5ff255c41affb86c713c04c63422197b5a2b25a9cc3f0e9ad23083e0fadc8cd87954be656c0d3f4f94af2746efa5c9ba60aceccc983365c44fbb26d4de7b135d99f3a1c0e5ffe7926f1a5fb7f3d050cf826dc1aa6bbcce513da9710a38d2a3c4b3658e086", 0xb7}, {&(0x7f0000000700)="1e2ec02bc6ae340053487bcb615dc70f30fe49a405806997824ddcd0ee637453f29cc270ba424270a928b7c219866a2e251e994046694588633d3695b94a66970a68885281faa724ab9c7f6427ce53c1b51c964bab6a7c7525d4e45eb5ec272984b809d9bf9366631255d917e6af18633d2a4b3a5db1b586aad7467a863bf8e8f8a5412670bc58a35fec015058765cfe241d075796ba6d9f12be08aa9ccbdb495fd65499e3dae775b8967dc883b7129ae83e415d73a55ba859ac56b490ee464a111c13720a0d957982f6194e9e66c3bad351f7ff3c15755886b04bb0a371", 0xde}, {&(0x7f0000000800)}, {&(0x7f0000000840)="3ab273c923fd0a98fcbbc79dee2ffd427a4b025eb3f42b716574757ca087112fd5c2388bba3fa0dce2a5e96cfd0c98e2466c97af72aa1dde2392c4b90b0c5a1e3caa193f61c815700e5b0213cabc431b34b217cca287bb933df1ddbb612a152b896a03bc0d3fabf15afdfcf49bb4913742d36d2d6b050c888c9f852a99a2979ef3929e24d25fb3f03e926604709245b856d4b1c58af05509ff6699a2b43db92ad81f4120e3e60ae1809d0ac7176ca5719c5a706b42f38da0ff657cf2ab2b51f40ed4dcdfd15b384dfc615c7199", 0xcd}], 0x4, &(0x7f0000002ec0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r9, r0, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee01, r12}}}], 0x88, 0x8011}}, {{&(0x7f0000002f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000003000)="dc1a225cdf58e576d3c175e7d16ee553afb5", 0x12}, {&(0x7f0000003040)="9c1f5d292072af2fa153b3e659a1320300fa99445aee41b36e8f6995bfc04e7eff931ea7a45d197bc32ce634142fa0be276b447e1c07c158b46f5327310f4177fc5f8a4a01b4", 0x46}], 0x2, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000003100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003180)="b577dab1df294cf02fee9ac3f8a8c3913e1e", 0x12}, {&(0x7f00000031c0)="cbeded540b5d6c91b65734cca45c4d499a9974e062a67e1eb38786de3fa3d701dd", 0x21}, {&(0x7f0000003200)="dd025a9229cdf20def05e0453d64571adf", 0x11}, {&(0x7f0000003240)="6e3fb31bd02f721813b53b54c45d60706c34adeebd1b51fb8eee06f11b587b0175b04c8cb45a79b703f0e835e1de98aac45802b2320f5b9872041ef006d6c4867677a7280f7bf13f618e924203d79a7ed927bb3e25c57c26466c92c5f501a90cbbc283018247399c8be987203efd55c7b015e44e38b21266e7e1a9d5f05f6c24f6e9d57a076a96dbb5e4090ad6c029dacfc8c1d801fbd971ea221449e453f47d", 0xa0}, {&(0x7f0000003300)="e06a8efdaf1d6067a6f880a128fb736f5ae2f4c8c7da497cd47a4ec5757dde2e3c8d961bd2c20f56d2af8ba48a10146902da7842ff64bf7a8e5471da5f3de2a829da78382d1bf5d1c2ddc402f0b866e7097a2ceaa9f341d0c4cd4366a559a4e71b09488455eff1ccb6e6ef669af085edc9564e9b73041769226457ee9b9ee14250cf68a32c67c4b5e094f1ad2c32ba0d147b407eb2814c4a347dd820275c74d56237cef2139ad8", 0xa7}, {&(0x7f00000033c0)="5c33e7251f3dc905ae0bb16066b489dfb9717d35c8a9c11bc8ccbae088e379284ff1b2c17a3c", 0x26}, {&(0x7f0000003400)="272d7a28ceaaf04bd37ecc20cca8a77270225866830c24fa365cbaef248e33ba12e5ce1b043bbbe89d44fd2ca81abd78ce9ae7d2f3832f3803aaa6a31a43ffc8b81e21cc9009faac66fac92e766f557c3923b51cfdeb63e4e38536cc5c2ecfac3ec02fdb8b1aff95c0b8bab0d3906e1e", 0x70}, {&(0x7f0000003480)="26172efda7980b", 0x7}], 0x8, &(0x7f0000003ac0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r16, r17}}}, @rights={{0x34, 0x1, 0x1, [r0, r18, r19, r20, r0, r0, r0, r21, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r22, r23}}}], 0xb0, 0x20000}}, {{&(0x7f0000003b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003c00)="df165fc4348613e09b4978a8409d2a4a5789b5d4fcea44578d4c943706b61689e648a7e7f5118debbdf9b2cf47f534f723c7849e84ddead426dc81c0e6593027869bfb885fe54acd33979e83dc8803c8c79ac21378a2fb369d", 0x59}, {&(0x7f0000003c80)="6a9d7dc4efdc6a8a0deb6e032144a7d822023cee2715a2905c93ebca36cfbe1fd0d5dac8c0f43386cf7f", 0x2a}, {&(0x7f0000003cc0)="5ec70eef7fd08320702381300434a8776896db88a9b0530cac300aceaa16a5", 0x1f}, {&(0x7f0000003d00)="7de616d0a6cc112b1de215d65ada27ea3dc184d39c3f14798596abf57f9deaf4c037758b0739a855ac0db366df6cd652dd1bdacf3f37dc572321938a3a87886b16e7812cc3c9939a7a1eab4b550fa974a249786c6cbc2996464c5ae277", 0x5d}], 0x4, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r27, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x68, 0x4000000}}], 0x5, 0x0) 1.990122957s ago: executing program 7 (id=1120): syz_usb_connect(0x2, 0x1b, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x24, 0x55, 0xed, 0x8, 0xeb1a, 0x2881, 0x9cc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x3}}]}}, 0x0) syz_usb_connect$uac1(0x4, 0xf3, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x2, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3f}, [@selector_unit={0x7, 0x24, 0x5, 0x6, 0x66, "89a7"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x4, 0x9, "c1"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x6, "3abf"}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x7a78, 0x7, "febc8cda"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x7, 0xee, 'z'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x81, 0x4, 0x6, 0x9, 'j0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x8, 0x400000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r5, 0x2dfc1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x890) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) timer_settime(r3, 0x1, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) fchown(r2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs(r8, &(0x7f00000001c0)='status\x00') syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010300000a2401"], 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000fdffff8c04"]) 1.477076991s ago: executing program 2 (id=1122): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r1 = userfaultfd(0x80801) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x23, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty}, {0x4e20, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.3874672s ago: executing program 2 (id=1123): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x6, {0x0, 0xff, 0x4}}, 0x18) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xff, 0x4}}, 0x18) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRES8=r1], 0xf0}}, 0x4004020) 1.213495337s ago: executing program 2 (id=1124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[]) 1.143756666s ago: executing program 4 (id=1125): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@void, @val={0xc}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, 0x0, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0) 1.06374527s ago: executing program 2 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) syz_io_uring_complete(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000a0000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x208, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) io_setup(0x203, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 920.695854ms ago: executing program 4 (id=1127): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e500000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = io_uring_setup(0x7507, &(0x7f00000002c0)) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040f04060007049f1c66c424c847cc6456809ecbafce2adc5516da9566ee448688674b5e3d572b9839c525ec2dd00944fd278e84b2f58c0b274aa2b7ad0000000000000000970762880ad72c71df06b9740d1ec24e52d807000000008e42dff609b6e479be29dadcd63720f7e4ceb06ede5dfa38347bdfa67aced4d2fa6b9d71ad48874a826b9f7a7b5538cc46ccb5"], 0x7) (async) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040f04060007049f1c66c424c847cc6456809ecbafce2adc5516da9566ee448688674b5e3d572b9839c525ec2dd00944fd278e84b2f58c0b274aa2b7ad0000000000000000970762880ad72c71df06b9740d1ec24e52d807000000008e42dff609b6e479be29dadcd63720f7e4ceb06ede5dfa38347bdfa67aced4d2fa6b9d71ad48874a826b9f7a7b5538cc46ccb5"], 0x7) syz_emit_vhci(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) accept(r2, &(0x7f0000000200)=@can, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') (async) chdir(&(0x7f0000001180)='./bus\x00') lstat(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0xe0ff, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x74800) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 280.186419ms ago: executing program 0 (id=1128): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20044840) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) r3 = socket(0xf, 0x3, 0x2) write(r3, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@dev}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = io_uring_setup(0x79af, &(0x7f0000001240)={0x0, 0x2875}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r7, 0x0, 0x4000800) (async) close_range(r6, 0xffffffffffffffff, 0x200000000000000) 181.891309ms ago: executing program 4 (id=1129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = epoll_create(0x4) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x80000) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000240)=0x7b6b7255, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x581400, 0x0) preadv2(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/125, 0x7d}], 0x1, 0x2, 0x9c, 0x13) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ecef49168352"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x400641, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000540)={'sit0\x00', r4, 0x7, 0x1, 0x100, 0xce, {{0x3e, 0x4, 0x2, 0x6, 0xf8, 0x68, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0x69, 0x3, 0x0, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x4}, {@multicast2, 0x3}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xa63d}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0x6, [{@broadcast}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x94, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x9}, {@empty, 0x2000400}, {@broadcast, 0xa}, {@local, 0x3}, {@multicast1, 0xded0}]}, @lsrr={0x83, 0x7, 0xce, [@private=0xa010102]}, @timestamp={0x44, 0x24, 0xa0, 0x0, 0x1, [0x5, 0x7, 0xce4, 0x3, 0x5, 0x7, 0x5, 0x0]}, @ssrr={0x89, 0xb, 0xa1, [@multicast2, @local]}, @cipso={0x86, 0x40, 0xffffffffffffffff, [{0x6, 0xe, "ea29940250bf5d6da2f570a6"}, {0x0, 0x11, "45f458f6d7dcf4f945c4d1b1ee2d1f"}, {0x2, 0x5, "c2830a"}, {0x2, 0x12, "602ece5abff37b882c430fe4306802cf"}, {0x0, 0x4, "d582"}]}, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x10, 0x80000000, 0x7807, 0x0, 0x104c, 0xffffffffffffffff, 0x10001, '\x00', r7, r6, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000940)=r9) setsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000000980), 0x4) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f00000009c0)={0x8f, 0x0, 0xc}) r10 = socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, 0xee00, &(0x7f0000000a40)) pwritev(r1, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cc006c663268a309f6d10a22975b20e2e35b532836a5da5535a10d64d6bac6e19385c5", 0x23}, {&(0x7f0000000b00)="4e49a63b1dc0ca0e9c2d7bae5a75dcfd4c3e22b2dea1a0c2ee3c40176a49c903ccd7fb6621c5aff230ec663722d42337670f677ef486be53ad69e0a20619022ec1e5403fe40d4cb3a4546b65be29dbcb88b26270bb45a2aa9e6111d0a3a26aa6445810f69f606dc1ea0bb09bf186a7551d6ecd254fdb76e7e3f1701d6877d79edc303fc5d04c225d6fa3b98b9d9039fbd8b50c4b9c176b6b4737d8dd2e6eb5907ab8bdfeed523c9f5156fc993f2d6e914fb39d88b5a520", 0xb7}, {&(0x7f0000000bc0)="edbf1cfd9e00fc485932c59deb9b784c3558297352083e1c109fabb9841b85c807a643711d680c1ba7b2d3b176c995595ba3a1279dcf798f055c445eace5b5ee6709893d6f8fe5fb183b0a73ed78e6e960080e904737", 0x56}], 0x3, 0x0, 0x9) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r6, 0x80045400, &(0x7f0000000c80)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000cc0)={0x2, 'ipvlan0\x00', {0x80000000}, 0x3}) sendmsg$alg(r6, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000d00)="26eb5fd5ad8f0fb3446db20bcd2f6b8f971ef3d38768f52708633d89307f9ee0bc497dd77b057ddbbb1464efd005a4cb69f8c33cf7e06c18aeda3501c08ddb9996f77129972cdcf815b2ae0ceef694012bc311031b62399102b95a493931fc91bb039a10310383cd86ab660b98a6d39b567bd92e4880", 0x76}, {&(0x7f0000000d80)="02fb7fe97cc0cf3c1060a3c55b78b7bf717f899092bfe4462777660d745d2a1d2a7a121b506b13d5087906c418ca6c0ced798e98cc7b6c2ef45e87ccd3b881130e99b257699bf7f83465fad37aa7daabcecedffc692c2cef5dd50990c19a82c30469750296bc4474dc2684dcb6cc47917e365033f9e284de6d57e56a531b2f04f541f7dd0a0a934b032c1d86eb3020326b672bdfcbfdbf5323389ef85f6db153065bee4ce49ab5589beacaceee89bad6fa9329ef68a17204f4b18d3ffafa039a0fc2cdd0730cbecd97baa97d37c57964617e896d254c0575628024", 0xdb}, {&(0x7f0000000e80)="219abf500f1dbe9a376cd1076a1311029affc4a466fad5238339102009de56525e446e8e587bb50e4b72f558096d0d51c14339719f39751a510837e915af11f78f222bb9b6616dc02e9ad6a22f230c61af66bd7cd10fb490988267572da34dcd6f8cec7bd07c57e8790a2ef1a6e0ff98556daf87e6e7b0930e490073810a7325615ec75396e7a3ac9d4a586af0b042954bf88c9ac2d0a638e4e24355b58939fb2af3773424b83c831ff46e5252fda55e8e1c7ddb2a58e6199bda83f9996fd286ffdc30aa3401b2832ebc95e74b62e7b2bca9a53cf13f29260e37d381cf8bf3e8add1454a32b84c", 0xe7}, {&(0x7f0000000f80)="9428629b0a28357eb1594713a510589ca17869bcdd9f224462c69b2db69c72f1d5372db39bbb2c8f4cca1d3f894e325560a48fd208380afd3c4dd4e598b6e0ccb7e89c0e5b320e73a95d5f5d20807843363250ead925ff9b793b312c150eb1487a6080418b090c42d038a7adf66febf1abdabd915d9d6469c107b6030b454c9b1c778931261a541bf3f814774ff23ff5e45c392755207458692f7063a87fcf1fa9a339dc822ae5d2de51e428a688f3c5c1be77640d6db375739fb5123cba0dec5b491acd53a507176d06ccf134a9b11453f51f26b527719cb62f3394f3dd11d03f7dcd1417ad32ceaa0fa79d2ddf73", 0xef}, {&(0x7f0000001080)="770cfc6975c0121b3f87fc6d9aeb5d575d86573a7a2c07967d2b9bd1efd7467992b6b63a2d2abfa937521e385b5bc9bffe55ecfed28eac8da6672a76ef952973308d214d0f32ea3b1602da3ea7cd402a737d5cc30f0591663d3d860bbbd47d442896095ecd1e36762ed36adf4e10fddfb087af528a611902a857781a8413c99fec8929ada3cc93e05566482ddcbdf815eece93f79d290d27018b268e7e5dbc", 0x9f}, {&(0x7f0000001140)="84855fc2aa4b74ca859b64354dedca46791764aec90868e57df9880608be534ad4124c118c95b252e9d422ca67f0e183c6bdd370f245af69a3d43c744488ec679bc232f4933d8223d9aeb4e005fad51ebe0a9421239c17e32802261243c1874039780cf92141f64a4acb29ccf68250b9a24862015bd5ebe6c0e050dd4113e09681822ef1602c4fb9afbbc55d29997638144556aa06ea011d6bb913de54622ed1dbecda0238e08e59eb5932857d74d6173fddf7b56fdc7b4028e8767a4f0fb666660994554fc31e8a4ef0fa4ffde0df33be3edd7e787e8ad3e3c27cef88679b8d", 0xe0}, {&(0x7f0000001240)="ec27b52f5ef3ea0b5a4bf7528845553cf096b020dfb57a833c6288e8f7079ef5d977e20c9a42065b35465834b11393f9082009a9944afede9a689dd8a36c78b2dde9fb357ef42e4103678900de54e1541d493342a8c1d5c5cda424823f212b269578a848bbaff07059ecceb91382efdd25eca7b4d21619a3983d3f212b3f3362fe5094ffbf62f721d0b67c9e0a6a1f4bea4a066a9dd23d", 0x97}, {&(0x7f0000001300)="6ee65e2655bed6a110e828a0cdcdab275be1333c899a9bf72d1d836360cf185249bf2c5f86e20dda397ff4fa7d8a535c2176467f0dba8512df7ebb385ee5c424f481d381b59e0ad0af6477aec3d4d4d1ac950ea1e0359cebccefba5b3dc741c89096966dec689d28afd1a80b3f1d45af86bc888bfa614379ce1c5ad5e38034cd7b8473d55487272cadb3", 0x8a}, {&(0x7f00000013c0)="48c466d50544ba16a38740b42093a5fddad87a6fee3d10e0b1307f4edc1374990edc7a182588f6f7d9cce09153ad9879420ba25413298bf8ade7fe9f9a8ad69d93bee392f21637be5434bc7a346f4a2e4d2c7e42ae3e99e1b1877160", 0x5c}], 0x9, 0x0, 0x0, 0x4000}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001580), r10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r11, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, r12, 0x8, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0xfffffff2}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x0, 0x4) 101.421853ms ago: executing program 6 (id=1130): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x1401, 0x1}, 0x10}}, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x5c7d}}, './file0\x00'}) 100.816373ms ago: executing program 0 (id=1131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000ff011400"/20], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x4100, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async, rerun: 64) syz_init_net_socket$x25(0x3, 0x5, 0x3) (rerun: 64) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000500330000000a00000000000000fe8000000000000000000000000000aa0000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000fe800000000000000000000000000000000000000000000007001900"], 0xd8}}, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) (async) io_setup(0x401, &(0x7f00000004c0)=0x0) r4 = timerfd_create(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x58, 0x5, 0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x6}]) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10, 0xffffffffffffffff}, 0x4) (async) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000300)={0x2, 0x2}) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000090000000084000000b70000000000000095000000000000001312"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r13}, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012cbd7000fedbdf250d00000008000300", @ANYRES32=r9, @ANYBLOB="080001000004000000000c00050000000cb8d1c486e966cf810006000000e44680ec022d6b490300", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20048051}, 0x4011) 95.825726ms ago: executing program 2 (id=1132): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001400010000000000000000000a883100010069d8cef310226f8be0d20c4af369fdd72faa666e4be0d1ba504a7986007e8ac0a88a4987a98a15b98680ec0c9700000000009e575d8bbe365103fff5efdbd50e4d87ac61f9faf9cd402ed3409137010de27ad2ab6364f2cb304356c3b7e55f55c808ea8e8dd18c879a022c4c19e1fcf699b316c26c46286724e79703792a7cb7d0eeb0f27c0644849c1cbeef9deae28d941f7a85c49e27370163d5a2a41b586d4153e19420341820b1fed7dd75be02c22b3c7bf6a553d00bbf81e6f460da2761a0894c7fb496"], 0x48}}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r5 = syz_open_dev$usbfs(0x0, 0x1, 0x303862) (rerun: 64) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='contention_begin\x00'}, 0x10) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613cbf14916367d1769f7308b573ebb93d67ab2fbf196aea78464cb1578"}) (async, rerun: 64) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1, {0x0, 0xfffffffe, 0x0, 0x0, 0x4000000}}) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r4, 0x42a2}, {r4, 0x20}], 0x4, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) (async) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 934.266µs ago: executing program 4 (id=1133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = gettid() ioprio_get$pid(0x2, r2) clock_settime(0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1, 0x60, 0x4, 0x800}, {0x80, 0x0, 0x7e, 0x7fffffff}, {0x5, 0x3, 0x1, 0x6}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0x10132) recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 0s ago: executing program 6 (id=1134): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(&(0x7f00000004c0)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}, 0x1, 0xffffffea}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwrite64(r3, &(0x7f0000000000)="3bf273", 0x3, 0x1000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) getgroups(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040ac0532020000000000010902240001000000000904000005030002000921000033012205000905810308001c0062e6fa03eab7d9c98ed79c665522d75f771b38930186399d07c14e3091603c3297f73dde9bd48c26402de5a5d61c61fe95756db3577ccad91242de8fd37207aea82fae6cbe2c851b1faada564a3ac0bcc4f81e43d51839cb1c370da6ef489507bc3f24c2112f53584b6d1d58fec614a8cd660d9332fec5163063d9c8845179834053b00b2077f803ad6acea563a7ee622379375a64316981ee3f4b60387bdd32b4a28c365d1c20d5a255448c63c5eae1a31d2018d7e89305833281c9aaf2e1bc72b2d67a2134838f131463de06326172361480"], 0x0) kernel console output (not intermixed with test programs): h: hci0: command 0x0c1a tx timeout [ 194.510851][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.517314][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.531373][ T974] r8152-cfgselector 1-1: USB disconnect, device number 6 [ 196.071763][ T5842] Bluetooth: hci1: unknown advertising packet type: 0xae [ 196.163143][ T7578] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 196.178621][ T7578] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 196.187161][ T7578] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 197.569725][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 197.635911][ T974] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.757335][ T9] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 197.774777][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.867426][ T974] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 197.879249][ T9] usb 7-1: config 0 descriptor?? [ 197.893914][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.940708][ T974] usb 1-1: config 0 descriptor?? [ 198.127433][ T974] usb 1-1: string descriptor 0 read error: -71 [ 198.226459][ T974] kaweth 1-1:0.0: Firmware present in device. [ 198.329079][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.337932][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.546379][ T974] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 198.555865][ T974] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 198.567652][ T974] usb 1-1: USB disconnect, device number 7 [ 200.263628][ T9] usb 7-1: string descriptor 0 read error: -71 [ 200.372039][ T9] kaweth 7-1:0.0: Firmware present in device. [ 200.408553][ T9] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 200.465364][ T9] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 200.555541][ T9] usb 7-1: USB disconnect, device number 6 [ 200.765430][ T974] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.025383][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 201.300681][ T7641] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 201.319589][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 201.319633][ T29] audit: type=1326 audit(1733866738.860:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.103675][ T974] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 202.111143][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 202.118158][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 202.124190][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 202.141063][ T974] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 202.195389][ T29] audit: type=1326 audit(1733866738.860:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.205754][ T974] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 202.220284][ T29] audit: type=1326 audit(1733866738.860:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.248929][ T29] audit: type=1326 audit(1733866738.860:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.272113][ T29] audit: type=1326 audit(1733866738.860:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.293741][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.293776][ T974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.345521][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 202.348838][ T29] audit: type=1326 audit(1733866738.870:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.359327][ T974] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 202.390191][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.477820][ T974] usb 1-1: config 0 descriptor?? [ 202.521432][ T29] audit: type=1326 audit(1733866738.870:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.649335][ T29] audit: type=1326 audit(1733866738.870:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.691234][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.701076][ T974] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 202.717459][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.725914][ T5917] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 202.734504][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.746670][ T974] usb 1-1: USB disconnect, device number 8 [ 202.758214][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.773565][ T5842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 202.777112][ T29] audit: type=1326 audit(1733866738.870:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.801833][ C1] vkms_vblank_simulate: vblank timer overrun [ 202.823728][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.851426][ T974] usblp0: removed [ 202.887460][ T29] audit: type=1326 audit(1733866738.880:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7633 comm="syz.4.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 202.929510][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 203.015686][ T5917] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 203.031415][ T5917] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 203.089158][ T5917] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 203.135337][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 203.188756][ T5917] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 203.223118][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.265268][ T5917] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.284742][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.290379][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 203.317601][ T5917] usb 7-1: config 0 descriptor?? [ 204.052783][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.064563][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 204.158651][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.182830][ T5917] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 204.215304][ C1] hrtimer: interrupt took 142274 ns [ 204.217155][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.242714][ T5917] usb 7-1: USB disconnect, device number 7 [ 204.302751][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.338981][ T5917] usblp0: removed [ 204.378128][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.444479][ T5880] usb 5-1: config 0 descriptor?? [ 204.478629][ T7664] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 204.525131][ T7204] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.584422][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 204.772852][ T7204] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.885859][ T5831] Bluetooth: hci5: command tx timeout [ 204.994670][ T5880] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 205.038806][ T5880] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 205.048620][ T7204] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.193978][ T5880] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.273102][ T5880] usb 5-1: USB disconnect, device number 9 [ 205.568968][ T7204] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.839800][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.862213][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.882645][ T7656] bridge_slave_0: entered allmulticast mode [ 205.892990][ T7656] bridge_slave_0: entered promiscuous mode [ 205.912141][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.072257][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.126510][ T7656] bridge_slave_1: entered allmulticast mode [ 206.178538][ T7656] bridge_slave_1: entered promiscuous mode [ 206.667755][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.680185][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.885310][ T5831] Bluetooth: hci5: command tx timeout [ 208.071689][ T7656] team0: Port device team_slave_0 added [ 208.131736][ T7656] team0: Port device team_slave_1 added [ 208.182315][ T5831] Bluetooth: hci4: unknown advertising packet type: 0xae [ 208.280443][ T7204] bridge_slave_1: left allmulticast mode [ 208.332325][ T7204] bridge_slave_1: left promiscuous mode [ 208.346349][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.378947][ T7204] bridge_slave_0: left allmulticast mode [ 208.387390][ T7204] bridge_slave_0: left promiscuous mode [ 208.404756][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.929419][ T5831] Bluetooth: hci5: command tx timeout [ 210.896787][ T7204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.921303][ T7204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.957409][ T7204] bond0 (unregistering): Released all slaves [ 211.022492][ T7763] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 211.031082][ T7763] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 211.040647][ T7763] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 211.168331][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.176513][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.230123][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.125589][ T5831] Bluetooth: hci5: command tx timeout [ 212.507726][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.527548][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.611327][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.640817][ T7656] hsr_slave_0: entered promiscuous mode [ 213.709874][ T7656] hsr_slave_1: entered promiscuous mode [ 213.796915][ T7656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.807934][ T7656] Cannot create hsr debugfs directory [ 214.694429][ T5831] Bluetooth: hci2: unknown advertising packet type: 0xae [ 214.994768][ T7204] hsr_slave_0: left promiscuous mode [ 215.010595][ T7204] hsr_slave_1: left promiscuous mode [ 215.022889][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.032812][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.069801][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.086332][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.098275][ T7848] xt_CT: No such helper "netbios-ns" [ 215.151723][ T7204] veth1_macvtap: left promiscuous mode [ 215.161432][ T7204] veth0_macvtap: left promiscuous mode [ 215.174287][ T7204] veth1_vlan: left promiscuous mode [ 215.190493][ T7204] veth0_vlan: left promiscuous mode [ 216.360687][ T7862] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 216.699295][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 216.699314][ T29] audit: type=1326 audit(1733866753.930:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.735641][ T29] audit: type=1326 audit(1733866753.930:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.792140][ T29] audit: type=1326 audit(1733866753.930:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.814559][ T29] audit: type=1326 audit(1733866753.930:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.836960][ T29] audit: type=1326 audit(1733866753.930:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.859382][ T29] audit: type=1326 audit(1733866753.930:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.889470][ T29] audit: type=1326 audit(1733866753.930:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.932415][ T29] audit: type=1326 audit(1733866753.930:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 216.960260][ T29] audit: type=1326 audit(1733866753.930:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 217.018839][ T29] audit: type=1326 audit(1733866753.940:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7859 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 217.217900][ T7204] team0 (unregistering): Port device team_slave_1 removed [ 217.278978][ T7204] team0 (unregistering): Port device team_slave_0 removed [ 218.179391][ T7876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 218.399200][ T7829] bridge_slave_0: left allmulticast mode [ 218.425370][ T7829] bridge_slave_0: left promiscuous mode [ 218.431478][ T7829] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.442340][ T7837] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 218.450880][ T7837] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 218.459390][ T7837] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 218.581767][ T7876] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.590904][ T7876] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.599737][ T7876] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.609855][ T7876] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.621025][ T7876] vxlan0: entered promiscuous mode [ 218.635845][ T7877] dvmrp2: entered allmulticast mode [ 218.969655][ T7656] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 219.030220][ T7656] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.073024][ T7656] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.084086][ T7656] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 219.735498][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.952682][ T7911] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 220.949756][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.617191][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.674944][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.682172][ T6778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.730908][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.738235][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.647818][ T7935] bridge_slave_0: left allmulticast mode [ 222.654486][ T7935] bridge_slave_0: left promiscuous mode [ 222.666133][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.737872][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 222.737893][ T29] audit: type=1326 audit(1733866760.310:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 222.921536][ T29] audit: type=1326 audit(1733866760.350:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 223.015669][ T29] audit: type=1326 audit(1733866760.350:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 223.975955][ T29] audit: type=1326 audit(1733866760.350:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.048399][ T29] audit: type=1326 audit(1733866760.360:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.070117][ T29] audit: type=1326 audit(1733866760.360:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.073894][ T5879] usb 3-1: device descriptor read/64, error -71 [ 224.091692][ T29] audit: type=1326 audit(1733866760.360:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.091741][ T29] audit: type=1326 audit(1733866760.370:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.091778][ T29] audit: type=1326 audit(1733866760.370:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.091816][ T29] audit: type=1326 audit(1733866760.370:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7936 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 224.207553][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.436247][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.627829][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.655793][ T5879] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 224.693355][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.729867][ T5879] usb 3-1: config 0 descriptor?? [ 224.781730][ T7656] veth0_vlan: entered promiscuous mode [ 224.841679][ T7656] veth1_vlan: entered promiscuous mode [ 224.925384][ T974] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 224.948830][ T7656] veth0_macvtap: entered promiscuous mode [ 224.958779][ T7656] veth1_macvtap: entered promiscuous mode [ 224.978607][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.989400][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.999603][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.010481][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.020411][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.031069][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.041045][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.051768][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.063090][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.082933][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.093562][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.103520][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.114296][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.114618][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.135749][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.146663][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.157022][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.164075][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.167769][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.189738][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.200740][ T7656] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.212639][ T7656] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.221723][ T7656] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.230848][ T7656] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.241375][ T974] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 225.275305][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.513250][ T7986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.488'. [ 225.713878][ T974] usb 7-1: config 0 descriptor?? [ 226.271679][ T974] zeroplus 0003:0C12:0030.0004: unbalanced delimiter at end of report description [ 226.323116][ T974] zeroplus 0003:0C12:0030.0004: parse failed [ 226.422445][ T974] zeroplus 0003:0C12:0030.0004: probe with driver zeroplus failed with error -22 [ 226.502325][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.546524][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.591561][ T974] usb 7-1: USB disconnect, device number 8 [ 226.865086][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.955068][ T7995] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 226.999344][ T5879] usb 3-1: USB disconnect, device number 13 [ 227.017657][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.919189][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.148729][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.635632][ T974] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.651109][ T8017] sg_write: data in/out 1048540/17 bytes for SCSI command 0x0-- guessing data in; [ 229.651109][ T8017] program syz.0.498 not setting count and/or reply_len properly [ 230.155367][ T8050] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 230.170703][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 230.170776][ T29] audit: type=1326 audit(1733866767.710:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.199411][ T29] audit: type=1326 audit(1733866767.710:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.221815][ T29] audit: type=1326 audit(1733866767.720:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.243907][ T29] audit: type=1326 audit(1733866767.720:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.265929][ T29] audit: type=1326 audit(1733866767.720:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.288021][ T29] audit: type=1326 audit(1733866767.720:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.310379][ T29] audit: type=1326 audit(1733866767.720:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.335149][ T29] audit: type=1326 audit(1733866767.720:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.357366][ T29] audit: type=1326 audit(1733866767.720:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.379323][ T29] audit: type=1326 audit(1733866767.730:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 230.625662][ T5842] Bluetooth: hci0: command 0x1003 tx timeout [ 230.634985][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.496920][ T8024] can0: slcan on ptm0. [ 232.660970][ T8073] netlink: 68 bytes leftover after parsing attributes in process `syz.4.507'. [ 232.708378][ T8024] can0 (unregistered): slcan off ptm0. [ 232.725309][ T5134] Bluetooth: hci4: command 0x0406 tx timeout [ 233.120622][ T8084] xt_hashlimit: overflow, try lower: 4096/0 [ 234.052808][ T8115] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 234.061432][ T8115] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 234.070159][ T8115] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 234.138688][ T5920] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 234.295317][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 234.306914][ T5920] usb 1-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=b2.3d [ 234.325425][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.344765][ T5920] usb 1-1: Product: syz [ 234.352859][ T5920] usb 1-1: Manufacturer: syz [ 234.370337][ T5920] usb 1-1: SerialNumber: syz [ 234.384715][ T5920] usb 1-1: config 0 descriptor?? [ 235.685910][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.030190][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 236.042469][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 237.221394][ T5920] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 237.272169][ T5920] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 237.372461][ T46] usb 5-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 237.374787][ T5920] usb 1-1: USB disconnect, device number 9 [ 237.384658][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.403227][ T46] usb 5-1: Product: syz [ 237.407522][ T46] usb 5-1: Manufacturer: syz [ 237.412154][ T46] usb 5-1: SerialNumber: syz [ 237.451527][ T46] usb 5-1: config 0 descriptor?? [ 237.679251][ T46] usb 5-1: USB disconnect, device number 11 [ 237.752541][ T974] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 238.415462][ T974] usb 7-1: Using ep0 maxpacket: 16 [ 238.422564][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.448224][ T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.467165][ T974] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 238.487497][ T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.530564][ T974] usb 7-1: config 0 descriptor?? [ 240.258866][ T8201] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 240.267325][ T8201] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 240.275864][ T8201] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 240.417119][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.429691][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.517092][ T974] hid-alps 0003:044E:120C.0005: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 240.597945][ T5880] usb 7-1: USB disconnect, device number 9 [ 241.155761][ T46] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 241.325883][ T46] usb 5-1: device descriptor read/64, error -71 [ 241.875438][ T46] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 242.005548][ T46] usb 5-1: device descriptor read/64, error -71 [ 242.117892][ T46] usb usb5-port1: attempt power cycle [ 242.903647][ T46] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 242.945929][ T46] usb 5-1: device descriptor read/8, error -71 [ 243.634300][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 243.634362][ T29] audit: type=1326 audit(1733866781.180:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.664547][ T46] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 243.687673][ T46] usb 5-1: device descriptor read/8, error -71 [ 243.745574][ T29] audit: type=1326 audit(1733866781.180:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.768163][ T29] audit: type=1326 audit(1733866781.190:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.789756][ T29] audit: type=1326 audit(1733866781.190:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.811481][ T29] audit: type=1326 audit(1733866781.190:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.833396][ T29] audit: type=1326 audit(1733866781.190:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.855937][ T29] audit: type=1326 audit(1733866781.190:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.877441][ T29] audit: type=1326 audit(1733866781.200:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.898928][ T29] audit: type=1326 audit(1733866781.200:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 243.920858][ T29] audit: type=1326 audit(1733866781.200:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8286 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f71f7ff19 code=0x7ffc0000 [ 244.016935][ T46] usb usb5-port1: unable to enumerate USB device [ 244.803523][ T8317] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 245.667346][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 246.983718][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 246.996420][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 247.007892][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.019485][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.036744][ T5880] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 247.055232][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.063384][ T5880] usb 3-1: Product: syz [ 247.067624][ T5880] usb 3-1: Manufacturer: syz [ 247.072264][ T5880] usb 3-1: SerialNumber: syz [ 247.099172][ T5880] usb 3-1: config 0 descriptor?? [ 247.111509][ T5880] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 247.311193][ T5880] usb 3-1: USB disconnect, device number 14 [ 249.121728][ T8389] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 249.134482][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 249.134527][ T29] audit: type=1326 audit(1733866786.680:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 249.790143][ T8378] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 249.798868][ T8378] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 249.807703][ T8378] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 249.822483][ T29] audit: type=1326 audit(1733866786.680:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 249.892683][ T29] audit: type=1326 audit(1733866786.690:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 249.965112][ T29] audit: type=1326 audit(1733866786.690:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.095512][ T8395] sp0: Synchronizing with TNC [ 250.106437][ T29] audit: type=1326 audit(1733866786.690:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.215257][ T29] audit: type=1326 audit(1733866786.690:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.283466][ T29] audit: type=1326 audit(1733866786.690:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.333392][ T29] audit: type=1326 audit(1733866786.690:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.417637][ T29] audit: type=1326 audit(1733866786.690:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.472733][ T29] audit: type=1326 audit(1733866786.700:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.6.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 250.945828][ T5836] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 251.035397][ T5875] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 251.035967][ T8427] netlink: 256 bytes leftover after parsing attributes in process `syz.7.575'. [ 251.092565][ T8429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.107259][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.137693][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.153593][ T5836] usb 7-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 251.164539][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.194035][ T5836] usb 7-1: config 0 descriptor?? [ 251.215480][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 251.225004][ T5875] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 251.241844][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.274117][ T5875] usb 5-1: config 0 descriptor?? [ 251.285053][ T5875] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 251.416042][ T8435] syz.7.576 (8435) used greatest stack depth: 18680 bytes left [ 251.497252][ T5875] usb 5-1: USB disconnect, device number 16 [ 251.589266][ T8] IPVS: starting estimator thread 0... [ 251.691450][ T5836] sony 0003:1430:474C.0006: hidraw0: USB HID v0.20 Device [HID 1430:474c] on usb-dummy_hcd.6-1/input0 [ 251.696862][ T8446] IPVS: using max 19 ests per chain, 45600 per kthread [ 251.709634][ T5836] sony 0003:1430:474C.0006: failed to claim input [ 251.914163][ T8454] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 251.945378][ T8454] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 251.978446][ T8454] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 254.129608][ T46] usb 7-1: USB disconnect, device number 10 [ 254.296433][ T8504] netlink: 'syz.7.590': attribute type 5 has an invalid length. [ 254.304173][ T8504] netlink: 'syz.7.590': attribute type 17 has an invalid length. [ 254.323287][ T974] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 254.515445][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 254.533224][ T974] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 254.574491][ T974] usb 1-1: config 179 has no interface number 0 [ 254.899391][ T974] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 255.042464][ T8511] loop2: detected capacity change from 0 to 7 [ 255.057878][ T974] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 255.086974][ T8511] Dev loop2: unable to read RDB block 7 [ 255.092911][ T8511] loop2: unable to read partition table [ 255.100450][ T8511] loop2: partition table beyond EOD, truncated [ 255.101986][ T974] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.150032][ T8511] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.165766][ T974] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 255.225364][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 255.348273][ T974] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 255.361649][ T974] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 255.371123][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.385048][ T8494] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 255.598149][ T8] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 255.607631][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.644864][ T8] usb 7-1: config 0 descriptor?? [ 255.706047][ T5842] Bluetooth: hci3: unknown advertising packet type: 0xae [ 255.794058][ T8527] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 255.811534][ T8527] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 255.813165][ T8490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.829305][ T5836] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 255.829366][ T8527] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 255.928538][ T8490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.958929][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.966737][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.015726][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 256.617049][ T5880] usb 1-1: USB disconnect, device number 10 [ 256.617108][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 256.633460][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 256.674979][ T5836] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 256.683334][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.805296][ T5836] usb 5-1: config 0 has no interface number 0 [ 256.831877][ T5836] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 256.915710][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.925491][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.949392][ T8] usb 7-1: string descriptor 0 read error: -71 [ 256.952913][ T5836] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.987898][ T5836] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 257.000456][ T8] kaweth 7-1:0.0: Firmware present in device. [ 257.013132][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=75 [ 257.037205][ T5836] usb 5-1: Product: syz [ 257.041444][ T5836] usb 5-1: Manufacturer: syz [ 257.063776][ T8] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 257.073238][ T8] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 257.082787][ T5836] usb 5-1: SerialNumber: syz [ 257.099447][ T8] usb 7-1: USB disconnect, device number 11 [ 257.126829][ T5836] usb 5-1: config 0 descriptor?? [ 257.257150][ T5836] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 257.365550][ T3566] usb 5-1: Failed to submit usb control message: -71 [ 257.372962][ T5836] usb 5-1: USB disconnect, device number 17 [ 257.403410][ T3566] usb 5-1: unable to send the bmi data to the device: -71 [ 257.435043][ T3566] usb 5-1: unable to get target info from device [ 257.478245][ T3566] usb 5-1: could not get target info (-71) [ 257.509599][ T3566] usb 5-1: could not probe fw (-71) [ 258.085890][ T46] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.315821][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 258.450527][ T46] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 258.539705][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.619792][ T46] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 258.629357][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.637918][ T46] usb 3-1: Product: syz [ 258.642137][ T46] usb 3-1: Manufacturer: syz [ 258.655274][ T46] usb 3-1: SerialNumber: syz [ 258.678447][ T46] usb 3-1: config 0 descriptor?? [ 258.729663][ T46] rndis_host 3-1:0.0: skipping garbage [ 258.748530][ T46] rndis_host 3-1:0.0: skipping garbage [ 258.756740][ T46] usb 3-1: bad CDC descriptors [ 258.783979][ T46] cdc_acm 3-1:0.0: skipping garbage [ 258.795463][ T46] cdc_acm 3-1:0.0: skipping garbage [ 258.970698][ T5836] usb 3-1: USB disconnect, device number 15 [ 259.301100][ T8584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.597'. [ 259.429067][ T8584] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.437916][ T8584] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.446893][ T8584] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.455750][ T8584] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.538100][ T8584] vxlan0: entered promiscuous mode [ 259.700837][ T8586] dvmrp2: entered allmulticast mode [ 260.707234][ T5836] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 260.905365][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 260.915349][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 260.932823][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49664, setting to 1024 [ 260.946261][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 260.962079][ T5836] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 260.983945][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.012071][ T5836] usb 1-1: config 0 descriptor?? [ 261.019353][ T8611] block nbd2: NBD_DISCONNECT [ 261.042378][ T5836] usbhid 1-1:0.0: can't add hid device: -22 [ 261.067771][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 261.251712][ T8] usb 1-1: USB disconnect, device number 11 [ 261.813701][ T8616] cgroup: none used incorrectly [ 262.390734][ T8616] orangefs_mount: mount request failed with -4 [ 264.345461][ T5836] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.485397][ T5836] usb 3-1: device descriptor read/64, error -71 [ 264.735449][ T5836] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 265.335310][ T5836] usb 3-1: device descriptor read/64, error -71 [ 265.505665][ T5836] usb usb3-port1: attempt power cycle [ 266.116927][ T5836] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 266.230244][ T5836] usb 3-1: device descriptor read/8, error -71 [ 267.184066][ T5836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 267.455079][ T5836] usb 3-1: device descriptor read/8, error -71 [ 267.663718][ T8689] netlink: 40 bytes leftover after parsing attributes in process `syz.7.632'. [ 267.805105][ T5836] usb usb3-port1: unable to enumerate USB device [ 267.885087][ T8696] block device autoloading is deprecated and will be removed. [ 269.191101][ T8718] kvm: kvm [8714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x190000000000 [ 270.442444][ T5842] Bluetooth: hci4: unknown advertising packet type: 0xae [ 270.500444][ T8766] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 270.590307][ T8766] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 270.615981][ T8766] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 271.208834][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 271.677921][ T8798] netlink: 'syz.4.647': attribute type 1 has an invalid length. [ 271.686075][ T8798] netlink: 'syz.4.647': attribute type 3 has an invalid length. [ 271.693759][ T8798] netlink: 224 bytes leftover after parsing attributes in process `syz.4.647'. [ 275.385405][ T974] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 275.417788][ T5875] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 275.765615][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 275.805471][ T974] usb 3-1: device descriptor read/all, error -71 [ 275.909406][ T5875] usb 1-1: device descriptor read/all, error -71 [ 277.160860][ T974] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 277.335888][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 277.352385][ T974] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.443329][ T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.495468][ T5917] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 277.569612][ T974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.611462][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.653382][ T974] usb 3-1: Product: syz [ 277.678493][ T974] usb 3-1: Manufacturer: syz [ 277.702069][ T974] usb 3-1: SerialNumber: syz [ 277.725629][ T5917] usb 1-1: device descriptor read/64, error -71 [ 278.106901][ T5917] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 278.275633][ T5917] usb 1-1: device descriptor read/64, error -71 [ 278.303810][ T974] usb 3-1: cannot find UAC_HEADER [ 278.328767][ T974] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 278.365586][ T974] usb 3-1: USB disconnect, device number 22 [ 278.418668][ T5917] usb usb1-port1: attempt power cycle [ 278.633500][ T8879] netlink: 'syz.6.666': attribute type 1 has an invalid length. [ 278.646818][ T8879] netlink: 'syz.6.666': attribute type 3 has an invalid length. [ 278.654554][ T8879] netlink: 224 bytes leftover after parsing attributes in process `syz.6.666'. [ 279.546637][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 279.581397][ T5917] usb 1-1: device descriptor read/8, error -71 [ 279.616039][ T8929] syz.7.674 (8929): drop_caches: 0 [ 279.661217][ T8932] syz.7.674 (8932): drop_caches: 0 [ 280.235447][ T5917] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.194476][ T8950] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.211132][ T5917] usb 1-1: device descriptor read/8, error -71 [ 281.225935][ T5920] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 281.315738][ T58] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 281.325655][ T5917] usb usb1-port1: unable to enumerate USB device [ 281.380542][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 281.395589][ T5920] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 281.406882][ T5920] usb 5-1: config 0 has no interface number 0 [ 281.596673][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 281.625879][ T58] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 281.963104][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.976715][ T5920] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 281.987548][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.999541][ T58] usb 7-1: config 0 descriptor?? [ 282.004992][ T5920] usb 5-1: Product: syz [ 282.013155][ T5920] usb 5-1: Manufacturer: syz [ 282.018164][ T5920] usb 5-1: SerialNumber: syz [ 282.031481][ T5920] usb 5-1: config 0 descriptor?? [ 282.070578][ T5920] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 283.329399][ T5920] usb 5-1: qt2_attach - failed to power on unit: -71 [ 283.378550][ T5920] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 283.490026][ T5920] usb 5-1: USB disconnect, device number 18 [ 285.588998][ T9003] dvmrp2: entered allmulticast mode [ 286.119948][ T58] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 286.132952][ T58] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 286.175700][ T58] asix 7-1:0.0: probe with driver asix failed with error -71 [ 286.194077][ T58] usb 7-1: USB disconnect, device number 12 [ 287.436004][ T58] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 287.755272][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 288.096451][ T58] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 288.104623][ T58] usb 3-1: config 0 has no interface number 0 [ 288.173396][ T58] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 288.184078][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.214985][ T58] usb 3-1: Product: syz [ 288.226246][ T58] usb 3-1: Manufacturer: syz [ 288.240961][ T58] usb 3-1: SerialNumber: syz [ 288.259946][ T58] usb 3-1: config 0 descriptor?? [ 288.455331][ T5917] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 288.524918][ T9091] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 288.532814][ T9091] netlink: 'syz.0.689': attribute type 3 has an invalid length. [ 288.540642][ T9091] netlink: 224 bytes leftover after parsing attributes in process `syz.0.689'. [ 289.006302][ T58] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 289.016791][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 289.024848][ T58] dib0700: firmware download failed at 7 with -22 [ 289.085466][ T58] usb 3-1: USB disconnect, device number 23 [ 289.645735][ T9103] ALSA: mixer_oss: invalid OSS volume '' [ 289.774661][ T9103] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 290.574439][ T5917] usb 5-1: device descriptor read/all, error -71 [ 291.402722][ T9115] netlink: 'syz.4.699': attribute type 21 has an invalid length. [ 291.422647][ T9115] netlink: 156 bytes leftover after parsing attributes in process `syz.4.699'. [ 291.566028][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 291.720832][ T9121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.702'. [ 291.739882][ T58] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 291.758701][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.787831][ T58] usb 3-1: config 0 descriptor?? [ 291.833292][ T9121] fuse: Bad value for 'user_id' [ 291.848483][ T9121] fuse: Bad value for 'user_id' [ 292.221681][ T58] ath6kl: Failed to submit usb control message: -71 [ 292.235369][ T58] ath6kl: unable to send the bmi data to the device: -71 [ 292.265720][ T58] ath6kl: Unable to send get target info: -71 [ 292.308797][ T58] ath6kl: Failed to init ath6kl core: -71 [ 292.354406][ T58] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 292.389938][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 292.433081][ T58] usb 3-1: USB disconnect, device number 24 [ 293.470949][ T58] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 293.683842][ T9151] ======================================================= [ 293.683842][ T9151] WARNING: The mand mount option has been deprecated and [ 293.683842][ T9151] and is ignored by this kernel. Remove the mand [ 293.683842][ T9151] option from the mount to silence this warning. [ 293.683842][ T9151] ======================================================= [ 293.718738][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.273724][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 294.280988][ T58] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 294.289204][ T58] usb 7-1: config 0 has no interface number 0 [ 294.307096][ T58] usb 7-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 295.178243][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.186507][ T58] usb 7-1: Product: syz [ 295.190757][ T58] usb 7-1: Manufacturer: syz [ 295.195555][ T58] usb 7-1: SerialNumber: syz [ 295.210964][ T58] usb 7-1: config 0 descriptor?? [ 295.386777][ T9166] dvmrp2: entered allmulticast mode [ 296.635280][ T58] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 296.651837][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 296.660169][ T58] dib0700: firmware download failed at 7 with -22 [ 296.755374][ T58] usb 7-1: USB disconnect, device number 13 [ 297.291876][ T5842] Bluetooth: hci1: unknown advertising packet type: 0xae [ 297.352535][ T9191] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 297.368128][ T9191] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 297.376888][ T9191] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 299.383028][ T974] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 299.849829][ T974] usb 7-1: Using ep0 maxpacket: 32 [ 299.920766][ T974] usb 7-1: too many configurations: 178, using maximum allowed: 8 [ 300.204222][ T974] usb 7-1: config index 0 descriptor too short (expected 259, got 18) [ 300.289866][ T974] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 300.298925][ T974] usb 7-1: can't read configurations, error -22 [ 300.339696][ T5836] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 301.087183][ T974] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 301.708058][ T5836] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 301.733972][ T5836] usb 1-1: config 0 has no interface number 0 [ 301.798657][ T5836] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 301.812716][ T5836] usb 1-1: config 0 has no interface number 0 [ 301.833056][ T5836] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 301.843568][ T5836] usb 1-1: config 0 has no interface number 0 [ 301.947215][ T5836] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 302.041802][ T5836] usb 1-1: config 0 has no interface number 0 [ 302.122127][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 302.141447][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.151710][ T5836] usb 1-1: config 0 descriptor?? [ 303.272406][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.288568][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.858140][ T5917] usb 1-1: USB disconnect, device number 18 [ 305.296851][ T5880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 305.467258][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 305.483418][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.497049][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 305.511737][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.530761][ T5880] usb 5-1: config 0 descriptor?? [ 305.542091][ T5880] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 305.665391][ T58] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 305.825478][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 305.839462][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 305.871057][ T58] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 305.888622][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 305.903209][ T58] usb 3-1: Product: syz [ 305.912451][ T58] usb 3-1: Manufacturer: syz [ 305.923306][ T58] usb 3-1: SerialNumber: syz [ 305.933209][ T58] usb 3-1: config 0 descriptor?? [ 305.968189][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 306.013456][ T58] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 306.166011][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.181236][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.191815][ T5920] usb 3-1: USB disconnect, device number 25 [ 306.335717][ T58] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.545289][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 306.553780][ T58] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 306.562172][ T58] usb 1-1: config 0 has no interface number 0 [ 306.583892][ T58] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 306.593191][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.601341][ T58] usb 1-1: Product: syz [ 306.605684][ T58] usb 1-1: Manufacturer: syz [ 306.610760][ T58] usb 1-1: SerialNumber: syz [ 306.618236][ T58] usb 1-1: config 0 descriptor?? [ 306.985528][ T5880] gspca_vc032x: reg_r err -110 [ 307.000326][ T5880] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 309.178870][ T5836] usb 5-1: USB disconnect, device number 21 [ 309.257743][ T58] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 309.270668][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 309.301276][ T58] dib0700: firmware download failed at 7 with -22 [ 309.365623][ T58] usb 1-1: USB disconnect, device number 19 [ 310.544514][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 310.575615][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 310.591633][ T9317] netlink: 'syz.0.757': attribute type 6 has an invalid length. [ 310.648095][ T9325] openvswitch: netlink: nsh attr 11470 is out of range max 3 [ 310.670546][ T9325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.775376][ T5836] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.959575][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 311.961292][ T58] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 312.007412][ T5836] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 312.024685][ T5836] usb 1-1: config 0 has no interface number 0 [ 312.076972][ T5836] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 312.135624][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.173728][ T5836] usb 1-1: Product: syz [ 312.195791][ T5836] usb 1-1: Manufacturer: syz [ 312.217719][ T58] usb 5-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 312.225257][ T5836] usb 1-1: SerialNumber: syz [ 312.227773][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.398719][ T5836] usb 1-1: config 0 descriptor?? [ 312.409696][ T58] usb 5-1: config 0 descriptor?? [ 312.439994][ T58] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 312.705674][ T9359] Illegal XDP return value 54251520 on prog (id 147) dev N/A, expect packet loss! [ 312.862614][ T9367] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 312.862614][ T9367] The task syz.4.765 (9367) triggered the difference, watch for misbehavior. [ 313.025530][ T58] gspca_zc3xx: reg_w_i err -110 [ 313.030538][ T58] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 313.582508][ T9379] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 313.612952][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 313.613001][ T29] audit: type=1326 audit(1733866851.140:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.141388][ T29] audit: type=1326 audit(1733866851.140:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.251719][ T9381] QAT: Invalid ioctl 35142 [ 314.286003][ T29] audit: type=1326 audit(1733866851.150:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.297837][ T9381] QAT: Invalid ioctl 18437 [ 314.333999][ T29] audit: type=1326 audit(1733866851.150:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.335858][ T9381] QAT: Invalid ioctl -2147202746 [ 314.385371][ T29] audit: type=1326 audit(1733866851.150:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.443153][ T29] audit: type=1326 audit(1733866851.150:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.520044][ T29] audit: type=1326 audit(1733866851.150:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.569132][ T29] audit: type=1326 audit(1733866851.150:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 314.706628][ T5836] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 314.717478][ T5836] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 314.725734][ T5836] dib0700: firmware download failed at 7 with -22 [ 314.735999][ T5836] usb 1-1: USB disconnect, device number 20 [ 315.625716][ T974] usb 5-1: USB disconnect, device number 22 [ 315.715480][ T29] audit: type=1326 audit(1733866851.150:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 315.755256][ T29] audit: type=1326 audit(1733866851.160:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.6.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 317.500793][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.512555][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.014498][ T9435] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 319.145675][ T974] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 319.297311][ T974] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 319.467906][ T9445] kvm: kvm [9442]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000007) [ 320.235359][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.335661][ T974] usb 5-1: config 0 descriptor?? [ 320.352206][ T9454] netlink: 'syz.0.797': attribute type 3 has an invalid length. [ 321.693094][ T5842] Bluetooth: hci5: unknown advertising packet type: 0xae [ 321.762356][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.778019][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.365323][ T5879] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 323.431829][ T9458] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 323.440353][ T9458] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 323.448853][ T9458] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 323.491617][ T974] usb 5-1: string descriptor 0 read error: -71 [ 323.516944][ T5879] usb 1-1: device descriptor read/64, error -71 [ 323.519639][ T974] kaweth 5-1:0.0: Firmware present in device. [ 323.537001][ T974] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 323.551964][ T974] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 323.775346][ T5879] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 323.788748][ T974] usb 5-1: USB disconnect, device number 23 [ 324.784997][ T5879] usb 1-1: device descriptor read/64, error -71 [ 324.957826][ T5879] usb usb1-port1: attempt power cycle [ 325.537420][ T9488] overlayfs: failed to resolve './file0': -2 [ 325.940140][ T9489] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 325.949100][ T9489] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 326.135940][ T974] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 326.906890][ T9500] xt_HMARK: proto mask must be zero with L3 mode [ 327.058045][ T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.069329][ T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.090636][ T974] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.100024][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.109375][ T974] usb 5-1: SerialNumber: syz [ 327.350370][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.455610][ T5879] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 327.488356][ T974] usb 5-1: 0:2 : does not exist [ 327.547240][ T5842] Bluetooth: hci1: unknown advertising packet type: 0xae [ 327.665032][ T974] usb 5-1: USB disconnect, device number 24 [ 327.670913][ T5879] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 327.689235][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.697372][ T5879] usb 1-1: Product: syz [ 327.701577][ T5879] usb 1-1: Manufacturer: syz [ 327.706276][ T5879] usb 1-1: SerialNumber: syz [ 327.724911][ T5879] usb 1-1: config 0 descriptor?? [ 327.732541][ T5879] ch341 1-1:0.0: ch341-uart converter detected [ 327.976675][ T5879] usb 1-1: failed to receive control message: -32 [ 327.983794][ T5879] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 328.008892][ T9524] hub 2-0:1.0: USB hub found [ 328.015259][ T9524] hub 2-0:1.0: 1 port detected [ 328.624221][ T9518] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 328.645274][ T9518] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 328.660580][ T9518] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 328.993951][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'. [ 329.075642][ T58] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 329.259505][ T58] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 329.286275][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.313162][ T58] usb 7-1: config 0 descriptor?? [ 329.614931][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.624414][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.679167][ T58] usb 7-1: string descriptor 0 read error: -71 [ 329.687302][ T5134] Bluetooth: hci5: command 0x0406 tx timeout [ 329.718101][ T58] kaweth 7-1:0.0: Firmware present in device. [ 329.729830][ T58] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 329.741839][ T58] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 329.762817][ T58] usb 7-1: USB disconnect, device number 16 [ 330.135360][ T5880] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 330.295782][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 330.310704][ T5880] usb 3-1: config 1 has an invalid interface number: 120 but max is 0 [ 330.331765][ T5880] usb 3-1: config 1 has no interface number 0 [ 330.342778][ T5880] usb 3-1: config 1 interface 120 altsetting 16 endpoint 0x3 has invalid maxpacket 1951, setting to 1024 [ 330.354989][ T5880] usb 3-1: config 1 interface 120 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1024 [ 330.366105][ T5880] usb 3-1: config 1 interface 120 altsetting 16 bulk endpoint 0x83 has invalid maxpacket 1023 [ 330.382912][ T5880] usb 3-1: config 1 interface 120 has no altsetting 0 [ 330.402509][ T5880] usb 3-1: New USB device found, idVendor=0cde, idProduct=0013, bcdDevice=23.a1 [ 330.423710][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.439356][ T5880] usb 3-1: Product: syz [ 330.445028][ T5880] usb 3-1: Manufacturer: syz [ 330.451517][ T5880] usb 3-1: SerialNumber: syz [ 330.460219][ T9564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 330.475537][ T9564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 330.575393][ T974] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 330.698749][ T5880] usb 3-1: Could not find all expected endpoints [ 330.723049][ T5880] usb 3-1: USB disconnect, device number 26 [ 330.735305][ T974] usb 5-1: Using ep0 maxpacket: 8 [ 330.742387][ T974] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 330.766717][ T974] usb 5-1: config 0 has no interface number 0 [ 330.782163][ T58] usb 1-1: USB disconnect, device number 24 [ 330.782600][ T974] usb 5-1: config 0 interface 25 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 330.792464][ T58] ch341 1-1:0.0: device disconnected [ 330.845832][ T974] usb 5-1: config 0 interface 25 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 330.863998][ T974] usb 5-1: config 0 interface 25 altsetting 2 endpoint 0xB has invalid wMaxPacketSize 0 [ 330.913970][ T974] usb 5-1: config 0 interface 25 has no altsetting 0 [ 330.942213][ T974] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 330.951505][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.970603][ T974] usb 5-1: Product: syz [ 330.975219][ T974] usb 5-1: Manufacturer: syz [ 330.990164][ T974] usb 5-1: SerialNumber: syz [ 331.007338][ T974] usb 5-1: config 0 descriptor?? [ 331.032870][ T974] usbtouchscreen 5-1:0.25: probe with driver usbtouchscreen failed with error -90 [ 331.155790][ T9587] syzkaller0: entered allmulticast mode [ 331.173169][ T9586] syzkaller0 (unregistering): left allmulticast mode [ 331.334538][ T9597] netlink: 120 bytes leftover after parsing attributes in process `syz.7.833'. [ 331.364197][ T974] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 331.402708][ T9597] netlink: 88 bytes leftover after parsing attributes in process `syz.7.833'. [ 331.577150][ T58] usb 5-1: USB disconnect, device number 25 [ 331.725379][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 331.736063][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.752494][ T974] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.766603][ T974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 331.773675][ T9598] netlink: 'syz.2.834': attribute type 3 has an invalid length. [ 331.779822][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 331.797943][ T974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 331.812724][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 331.822603][ T974] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 331.836851][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 331.854984][ T974] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 331.864355][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.872565][ T974] usb 1-1: Product: syz [ 331.880749][ T974] usb 1-1: Manufacturer: syz [ 331.889761][ T974] usb 1-1: SerialNumber: syz [ 331.899550][ T974] usb 1-1: config 0 descriptor?? [ 331.909076][ T9581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 332.124821][ T974] cxacru_cm: 1 callbacks suppressed [ 332.124849][ T974] cxacru 1-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 332.143875][ T974] cxacru 1-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 332.214179][ T9607] netlink: 'syz.7.836': attribute type 1 has an invalid length. [ 332.222056][ T9607] netlink: 'syz.7.836': attribute type 3 has an invalid length. [ 332.229792][ T9607] netlink: 224 bytes leftover after parsing attributes in process `syz.7.836'. [ 332.775380][ T29] audit: type=1326 audit(1733866870.340:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 332.885709][ T29] audit: type=1326 audit(1733866870.340:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 332.907239][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.436224][ T974] cxacru 1-1:0.0: probe with driver cxacru failed with error -22 [ 333.448856][ T974] usb 1-1: USB disconnect, device number 25 [ 333.612383][ T29] audit: type=1326 audit(1733866870.390:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea36f7e880 code=0x7ffc0000 [ 333.640256][ T29] audit: type=1326 audit(1733866870.390:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea36f7e880 code=0x7ffc0000 [ 333.672108][ T9623] openvswitch: netlink: IP tunnel dst address not specified [ 333.895533][ T29] audit: type=1326 audit(1733866870.390:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 334.092289][ T29] audit: type=1326 audit(1733866870.420:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 334.113957][ T29] audit: type=1326 audit(1733866870.420:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 334.136331][ T29] audit: type=1326 audit(1733866870.420:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 334.157785][ T29] audit: type=1326 audit(1733866870.420:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9612 comm="syz.4.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 334.245256][ T974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 334.645267][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 334.652215][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.959909][ T974] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 334.969250][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.977474][ T974] usb 3-1: Product: syz [ 334.981682][ T974] usb 3-1: Manufacturer: syz [ 335.032666][ T974] usb 3-1: SerialNumber: syz [ 335.043222][ T974] usb 3-1: config 0 descriptor?? [ 336.685030][ T974] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 336.707484][ T974] usb 3-1: USB disconnect, device number 27 [ 337.345379][ T5836] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 337.585685][ T974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 337.686373][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 337.699968][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 337.795042][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.838394][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.876969][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 337.958923][ T974] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.999707][ T5836] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 338.035377][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.043776][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.061741][ T5836] usb 7-1: Product: syz [ 338.067079][ T5836] usb 7-1: Manufacturer: syz [ 338.071734][ T5836] usb 7-1: SerialNumber: syz [ 338.095757][ T974] usb 3-1: config 0 descriptor?? [ 338.101851][ T5836] usb 7-1: config 0 descriptor?? [ 338.108765][ T9665] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 338.188906][ T9677] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 338.196736][ T9677] netlink: 'syz.0.850': attribute type 3 has an invalid length. [ 338.204484][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.850'. [ 338.715539][ T5836] rc_core: IR keymap rc-streamzap not found [ 338.721522][ T5836] Registered IR keymap rc-empty [ 338.728777][ T5836] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 338.797913][ T5836] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input11 [ 338.939722][ T974] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 338.951297][ T974] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 338.972636][ T974] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 338.998022][ T5836] usb 7-1: USB disconnect, device number 17 [ 339.003650][ T9684] futex_wake_op: syz.2.860 tries to shift op by 144; fix this program [ 339.016209][ T974] usb 3-1: USB disconnect, device number 28 [ 339.118551][ T9687] fuse: Bad value for 'user_id' [ 339.123931][ T9687] fuse: Bad value for 'user_id' [ 340.675896][ T5836] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 341.340970][ T9726] gfs2: not a GFS2 filesystem [ 341.356317][ T9726] No such timeout policy "syz0" [ 341.371316][ T9726] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 341.725438][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 341.734860][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.758071][ T5875] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 341.766139][ T5836] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 341.775605][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.784534][ T5836] usb 5-1: Product: syz [ 341.903485][ T5836] usb 5-1: Manufacturer: syz [ 341.908747][ T5836] usb 5-1: SerialNumber: syz [ 341.917715][ T5836] usb 5-1: config 0 descriptor?? [ 341.930031][ T5836] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 341.992766][ T9728] fuse: Bad value for 'user_id' [ 341.999216][ T9728] fuse: Bad value for 'user_id' [ 342.007774][ T5875] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.017744][ T5875] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.038454][ T5875] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.065435][ T5875] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.085566][ T5875] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.107874][ T5875] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.118554][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.148981][ T5875] usb 7-1: Product: syz [ 342.153287][ T5875] usb 7-1: Manufacturer: syz [ 342.186741][ T5875] cdc_wdm 7-1:1.0: skipping garbage [ 342.195344][ T5875] cdc_wdm 7-1:1.0: skipping garbage [ 342.213395][ T5875] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 342.233404][ T5875] cdc_wdm 7-1:1.0: Unknown control protocol [ 343.180270][ T5836] gspca_sunplus: reg_r err -32 [ 344.278756][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 344.592217][ T974] usb 7-1: USB disconnect, device number 18 [ 345.676363][ T5836] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 345.840723][ T5836] usb 5-1: USB disconnect, device number 26 [ 348.773834][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 348.773855][ T29] audit: type=1326 audit(1733866886.340:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 348.801456][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.854669][ T29] audit: type=1326 audit(1733866886.340:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 348.899066][ T29] audit: type=1326 audit(1733866886.380:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 348.941449][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.6.892'. [ 349.010591][ T9795] libceph: resolve '0..' (ret=-3): failed [ 349.058863][ T29] audit: type=1326 audit(1733866886.380:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.084858][ T9794] "syz.4.893" (9794) uses obsolete ecb(arc4) skcipher [ 349.112727][ T29] audit: type=1326 audit(1733866886.380:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.134479][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.163495][ T29] audit: type=1326 audit(1733866886.400:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.184991][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.222709][ T29] audit: type=1326 audit(1733866886.400:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.264873][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.284887][ T29] audit: type=1326 audit(1733866886.400:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.313992][ T29] audit: type=1326 audit(1733866886.410:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.342920][ T29] audit: type=1326 audit(1733866886.410:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9789 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5432f7ff19 code=0x7ffc0000 [ 349.675324][ T5875] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 349.855694][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 349.906487][ T5875] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=b3.67 [ 350.064846][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.073015][ T5875] usb 7-1: Product: syz [ 350.077348][ T5875] usb 7-1: Manufacturer: syz [ 350.081994][ T5875] usb 7-1: SerialNumber: syz [ 350.095112][ T5875] usb 7-1: config 0 descriptor?? [ 350.111618][ T5875] usb_ehset_test 7-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 350.304992][ T5880] usb 7-1: USB disconnect, device number 19 [ 355.509542][ T9882] x_tables: duplicate underflow at hook 3 [ 355.548792][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 355.873695][ T9882] hsr_slave_1 (unregistering): left promiscuous mode [ 356.730368][ T9907] netlink: 292 bytes leftover after parsing attributes in process `syz.7.925'. [ 356.855545][ T5917] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 357.025504][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 357.036813][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.048752][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 357.080571][ T5917] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.106792][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.131090][ T5917] usb 5-1: config 0 descriptor?? [ 357.205629][ T5879] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 357.369795][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.395588][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.419246][ T5879] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.445855][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.453942][ T5879] usb 1-1: Product: syz [ 357.459003][ T5879] usb 1-1: Manufacturer: syz [ 357.463658][ T5879] usb 1-1: SerialNumber: syz [ 357.562448][ T5917] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 357.590787][ T5917] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 357.637818][ T5917] microsoft 0003:045E:07DA.0008: no inputs found [ 357.648627][ T5917] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 357.681799][ T5879] usb 1-1: 0:2 : does not exist [ 357.692682][ T5879] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 357.716044][ T5879] usb 1-1: USB disconnect, device number 26 [ 357.907136][ T9898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.930890][ T9898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.064376][ T9932] overlay: Unknown parameter 'context' [ 360.273184][ T5875] usb 5-1: USB disconnect, device number 27 [ 361.252790][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.949'. [ 361.291636][ T9981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 361.326191][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.949'. [ 361.358049][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.4.949'. [ 361.502744][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.950'. [ 362.118484][ T5842] Bluetooth: hci3: unknown advertising packet type: 0xae [ 362.344098][ T9991] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 362.360262][ T9991] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 362.369121][ T9991] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 363.145293][ T58] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 363.825538][ T5879] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.847778][ T58] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 363.856090][ T58] usb 5-1: config 0 has no interface number 0 [ 363.862266][ T58] usb 5-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 363.873545][ T58] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 363.885575][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.902316][ T58] usb 5-1: config 0 descriptor?? [ 363.947563][ T58] ttusbir 5-1:0.83: cannot find expected altsetting [ 364.033324][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 364.053208][ T5879] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 364.062040][ T5879] usb 3-1: config 0 has no interface number 0 [ 364.071357][ T5879] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 364.080850][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.090274][ T5879] usb 3-1: Product: syz [ 364.096055][ T5879] usb 3-1: Manufacturer: syz [ 364.100862][ T5879] usb 3-1: SerialNumber: syz [ 364.107849][ T5879] usb 3-1: config 0 descriptor?? [ 364.726851][ T5879] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 364.858864][ T5879] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 364.867432][ T5879] dib0700: firmware download failed at 7 with -22 [ 364.895050][ T5879] usb 3-1: USB disconnect, device number 29 [ 365.173079][ T5879] usb 5-1: USB disconnect, device number 28 [ 365.211542][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.962'. [ 365.722038][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 365.837451][T10035] tmpfs: Unknown parameter 'óma~Øfh«”' [ 366.670245][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 366.679686][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.967'. [ 366.764072][T10050] syzkaller1: entered promiscuous mode [ 366.769915][T10050] syzkaller1: entered allmulticast mode [ 367.505962][T10054] fuse: Invalid rootmode [ 367.830913][T10068] futex_wake_op: syz.0.974 tries to shift op by 144; fix this program [ 368.045395][ T5920] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 368.208430][ T5920] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 368.235298][ T5920] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.309698][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 368.339313][ T5920] usb 3-1: New USB device found, idVendor=1477, idProduct=1021, bcdDevice= 0.40 [ 368.369323][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.404356][ T5920] usb 3-1: Product: syz [ 368.424619][ T5920] usb 3-1: Manufacturer: syz [ 368.465858][ T5920] usb 3-1: SerialNumber: syz [ 368.506186][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 368.602076][T10085] overlayfs: failed to resolve './file2': -2 [ 368.827995][ T5842] Bluetooth: hci5: unknown advertising packet type: 0xae [ 369.085525][T10094] fuse: Invalid rootmode [ 369.176004][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.184754][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.203999][T10090] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 369.212875][T10090] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 369.221416][T10090] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 371.092128][ T5920] usbhid 3-1:1.0: can't add hid device: -71 [ 371.119048][ T5920] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 371.154469][ T5920] usb 3-1: USB disconnect, device number 30 [ 371.302034][T10122] binder: 10121:10122 ioctl c0306201 200003c0 returned -14 [ 371.658036][T10139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 371.671771][T10139] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.680623][T10139] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.689622][T10139] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.698439][T10139] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.707347][T10139] vxlan0: entered promiscuous mode [ 371.785476][ T5875] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 371.899535][T10141] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.971437][ T5875] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 371.979841][ T5875] usb 5-1: config 0 has no interface number 0 [ 371.986319][ T5875] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.997918][ T5875] usb 5-1: config 0 interface 66 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.008050][ T5875] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 372.020952][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.076929][ T5875] usb 5-1: config 0 descriptor?? [ 372.600121][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.620628][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.628141][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.636531][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.644524][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.652107][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.659590][ T5875] uclogic 0003:5543:0522.0009: unknown main item tag 0x0 [ 372.674417][ T5875] uclogic 0003:5543:0522.0009: No inputs registered, leaving [ 372.700129][ T5875] uclogic 0003:5543:0522.0009: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input66 [ 373.455973][ T5875] usb 5-1: USB disconnect, device number 29 [ 373.515282][ T5920] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 373.811246][ T5920] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 373.915372][ T5875] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 373.922680][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.196620][ T5920] usb 3-1: config 0 descriptor?? [ 374.355521][ T5875] usb 5-1: device descriptor read/64, error -71 [ 374.696870][ T5875] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 375.110299][T10159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.118892][T10159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.136084][ T5875] usb 5-1: device descriptor read/64, error -71 [ 375.272784][ T5875] usb usb5-port1: attempt power cycle [ 375.403641][ T5920] usb 3-1: string descriptor 0 read error: -71 [ 375.465188][ T5920] kaweth 3-1:0.0: Firmware present in device. [ 375.484574][ T5920] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 375.529911][ T5920] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 375.755515][ T5920] usb 3-1: USB disconnect, device number 31 [ 375.765305][ T5875] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 375.941388][T10199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 376.075964][ T5875] usb 5-1: device descriptor read/8, error -71 [ 376.315373][ T5875] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 376.353506][ T5875] usb 5-1: device descriptor read/8, error -71 [ 376.500784][ T5875] usb usb5-port1: unable to enumerate USB device [ 377.806104][T10217] veth0_vlan: left allmulticast mode [ 378.818563][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.824948][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.596111][T10247] trusted_key: encrypted_key: insufficient parameters specified [ 379.715370][ T58] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 379.885300][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 380.424472][ T58] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 380.433246][ T58] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 380.442251][ T58] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 380.451856][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 380.461723][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.471813][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 380.485084][ T58] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 380.496576][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.497635][ T5880] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 380.519630][ T58] usb 3-1: config 0 descriptor?? [ 380.601504][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 381.739820][ T58] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 381.753726][ T58] usb 3-1: USB disconnect, device number 32 [ 381.762124][ T58] usblp0: removed [ 381.854897][ T5880] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 381.864890][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.882853][ T5880] usb 7-1: config 0 descriptor?? [ 382.015397][ T5879] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 382.116769][ T5880] usb 7-1: string descriptor 0 read error: -71 [ 382.133738][ T5880] kaweth 7-1:0.0: Firmware present in device. [ 382.143545][ T5880] kaweth 7-1:0.0: Error reading configuration (-71), no net device created [ 382.162649][ T5880] kaweth 7-1:0.0: probe with driver kaweth failed with error -5 [ 382.179951][ T5880] usb 7-1: USB disconnect, device number 20 [ 382.187325][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 382.195075][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.211990][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.224474][ T5879] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.243402][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.251735][ T5879] usb 1-1: Product: syz [ 382.271744][ T5879] usb 1-1: Manufacturer: syz [ 382.282891][ T5879] usb 1-1: SerialNumber: syz [ 382.756472][T10290] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1038'. [ 382.815374][ T58] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 382.863418][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1036'. [ 383.005293][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 383.012699][ T58] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 383.021257][ T58] usb 3-1: config 0 has no interface number 0 [ 383.030712][ T58] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 383.040292][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.048452][ T58] usb 3-1: Product: syz [ 383.052875][ T58] usb 3-1: Manufacturer: syz [ 383.057749][ T58] usb 3-1: SerialNumber: syz [ 383.064631][ T58] usb 3-1: config 0 descriptor?? [ 383.275081][ T58] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 383.287550][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 383.297233][ T58] dib0700: firmware download failed at 7 with -22 [ 383.308155][ T58] usb 3-1: USB disconnect, device number 33 [ 384.064889][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.085863][ T5879] usb 1-1: 0:2 : does not exist [ 384.116871][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.128965][ T5879] usb 1-1: USB disconnect, device number 27 [ 384.267745][T10310] bridge4: entered promiscuous mode [ 384.273052][T10310] bridge4: entered allmulticast mode [ 384.295241][ T58] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 384.322292][T10310] @: renamed from vlan0 (while UP) [ 384.412244][ T5880] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 384.590098][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 384.602100][ T5880] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 384.611569][ T5880] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 384.629891][ T5880] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 384.645240][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.655080][ T5880] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 384.665033][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 384.678467][ T5880] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 384.688155][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.698396][ T58] usb 5-1: device descriptor read/64, error -71 [ 384.709343][ T5880] usb 7-1: config 0 descriptor?? [ 384.770068][T10325] netlink: 'syz.2.1051': attribute type 10 has an invalid length. [ 384.803655][T10325] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 384.996820][ T5880] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 385.011567][ T5880] usb 7-1: USB disconnect, device number 21 [ 385.020308][ T5880] usblp0: removed [ 385.135267][ T58] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 385.175090][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1050'. [ 385.295325][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 385.302140][ T58] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.310326][ T58] usb 5-1: config 0 has no interface number 0 [ 385.316605][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.327953][ T58] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.335321][ T5917] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 385.338106][ T58] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 385.354513][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.364133][ T58] usb 5-1: config 0 descriptor?? [ 385.455380][ T5875] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 385.496637][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 385.503873][ T5917] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 385.512354][ T5917] usb 3-1: config 0 has no interface number 0 [ 385.522784][ T5917] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 385.533857][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.555769][ T5917] usb 3-1: Product: syz [ 385.560024][ T5917] usb 3-1: Manufacturer: syz [ 385.564668][ T5917] usb 3-1: SerialNumber: syz [ 385.606515][ T5917] usb 3-1: config 0 descriptor?? [ 385.687119][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.707020][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.707053][ T5875] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 385.718110][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.735553][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.775362][ T5875] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.787862][ T5875] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 385.798328][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 385.849818][ T5917] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 385.863318][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 386.184977][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.269576][ T5917] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 386.271464][ T58] uclogic 0003:28BD:0071.000A: pen parameters not found [ 386.312629][ T5917] dib0700: firmware download failed at 7 with -22 [ 386.377580][ T58] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 386.385345][ T5875] usb 1-1: config 0 descriptor?? [ 386.393871][ T58] usb 5-1: USB disconnect, device number 35 [ 386.405273][ T5917] usb 3-1: USB disconnect, device number 34 [ 386.481896][T10343] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 386.490320][T10343] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 386.499008][T10343] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 386.527436][ T5842] Bluetooth: hci5: unknown advertising packet type: 0xae [ 386.530927][ T5842] Bluetooth: hci0: urb ffff888031c04200 submission failed (90) [ 386.617362][ T58] usb 1-1: USB disconnect, device number 28 [ 386.639085][ T5842] Bluetooth: hci4: unknown advertising packet type: 0xae [ 388.736903][T10381] overlayfs: failed to resolve './file0': -2 [ 390.223279][ T5842] Bluetooth: hci2: unknown advertising packet type: 0xae [ 390.275436][ T5875] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 390.306830][ T5917] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 390.309987][T10407] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 390.326404][T10407] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 390.336634][T10407] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 390.475521][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 390.491271][ T5875] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 390.500022][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 390.525457][ T5917] usb 7-1: config 14 has an invalid interface number: 7 but max is 2 [ 390.538716][ T5875] usb 3-1: config 0 has no interface number 0 [ 390.565748][ T5917] usb 7-1: config 14 has an invalid interface number: 228 but max is 2 [ 390.574259][ T5917] usb 7-1: config 14 has an invalid interface number: 188 but max is 2 [ 390.611480][ T5875] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 390.635948][ T5917] usb 7-1: config 14 has no interface number 0 [ 390.659399][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.669631][ T5917] usb 7-1: config 14 has no interface number 1 [ 390.676027][ T5917] usb 7-1: config 14 has no interface number 2 [ 390.682840][ T5875] usb 3-1: Product: syz [ 390.692833][ T5917] usb 7-1: config 14 interface 7 altsetting 129 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 390.704301][ T5875] usb 3-1: Manufacturer: syz [ 390.709080][ T5875] usb 3-1: SerialNumber: syz [ 390.721695][ T5917] usb 7-1: config 14 interface 7 altsetting 129 endpoint 0x8B has invalid maxpacket 26161, setting to 64 [ 390.739769][ T5875] usb 3-1: config 0 descriptor?? [ 390.790443][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 390.810607][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 390.822456][ T5917] usb 7-1: config 14 interface 228 altsetting 127 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 390.838971][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 390.936645][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 391.026899][ T5875] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 391.049581][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 391.106365][ T5875] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 391.120316][ T5875] dib0700: firmware download failed at 7 with -22 [ 391.152926][ T5917] usb 7-1: config 14 interface 228 altsetting 127 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 391.208250][ T5875] usb 3-1: USB disconnect, device number 35 [ 391.235339][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has an endpoint descriptor with address 0x59, changing to 0x9 [ 391.252757][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1075'. [ 391.261959][ T5917] usb 7-1: config 14 interface 228 altsetting 127 endpoint 0x9 has an invalid bInterval 69, changing to 10 [ 391.262000][ T5917] usb 7-1: config 14 interface 228 altsetting 127 endpoint 0x9 has invalid maxpacket 42975, setting to 1024 [ 391.262033][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 391.262060][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 391.262087][ T5917] usb 7-1: config 14 interface 228 altsetting 127 bulk endpoint 0x6 has invalid maxpacket 24 [ 391.325540][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 391.325540][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 391.325564][ T29] audit: type=1326 audit(1733866928.890:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.325621][ T29] audit: type=1326 audit(1733866928.890:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.331672][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 391.331701][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 391.331726][ T5917] usb 7-1: config 14 interface 228 altsetting 127 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 391.331774][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 391.365424][ T29] audit: type=1326 audit(1733866928.890:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.387443][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has a duplicate endpoint with address 0xE, skipping [ 391.477256][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 391.490124][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has a duplicate endpoint with address 0x1, skipping [ 391.502054][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 391.513390][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has a duplicate endpoint with address 0xE, skipping [ 391.524482][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has a duplicate endpoint with address 0x9, skipping [ 391.535754][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 391.547335][ T5917] usb 7-1: config 14 interface 188 altsetting 126 has a duplicate endpoint with address 0x7, skipping [ 391.558691][ T5917] usb 7-1: config 14 interface 7 has no altsetting 0 [ 391.565512][ T5917] usb 7-1: config 14 interface 228 has no altsetting 0 [ 391.572434][ T5917] usb 7-1: config 14 interface 188 has no altsetting 0 [ 391.585521][ T29] audit: type=1326 audit(1733866928.890:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.607554][ T5917] usb 7-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=31.55 [ 391.607592][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.607615][ T5917] usb 7-1: Product: syz [ 391.607634][ T5917] usb 7-1: Manufacturer: и [ 391.607652][ T5917] usb 7-1: SerialNumber: syz [ 391.703311][ T29] audit: type=1326 audit(1733866928.890:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.732314][ T29] audit: type=1326 audit(1733866928.890:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.770002][ T29] audit: type=1326 audit(1733866928.890:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10416 comm="syz.4.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea36f7ff19 code=0x7ffc0000 [ 391.815863][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.842600][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.858474][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.875059][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.038090][ T5917] usb 7-1: Error in usbnet_get_endpoints (-22) [ 392.047187][ T974] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 392.064186][ T5917] sierra 7-1:14.188: Sierra USB modem converter detected [ 392.091010][ T5917] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 392.113143][ T5917] usb 7-1: USB disconnect, device number 22 [ 392.150217][ T5917] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 392.159654][ T5917] sierra 7-1:14.188: device disconnected [ 392.255469][ T974] usb 5-1: device descriptor read/64, error -71 [ 392.515267][ T974] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 392.799998][ T974] usb 5-1: device descriptor read/64, error -71 [ 393.550498][ T974] usb usb5-port1: attempt power cycle [ 393.905468][ T974] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 393.927026][ T974] usb 5-1: device descriptor read/8, error -71 [ 394.155226][ T5880] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 394.245508][ T974] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 394.266232][ T974] usb 5-1: device descriptor read/8, error -71 [ 394.383941][ T974] usb usb5-port1: unable to enumerate USB device [ 394.764941][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 394.772048][ T5880] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 394.780576][ T5880] usb 3-1: config 0 has no interface number 0 [ 394.808065][ T5880] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 394.820847][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.837627][ T5880] usb 3-1: Product: syz [ 394.850634][ T5880] usb 3-1: Manufacturer: syz [ 394.877158][ T5880] usb 3-1: SerialNumber: syz [ 394.906681][ T5880] usb 3-1: config 0 descriptor?? [ 394.928249][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1094'. [ 395.213132][ T5880] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 395.590284][ T5880] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 395.649628][ T5880] dib0700: firmware download failed at 7 with -22 [ 395.667002][ T5880] usb 3-1: USB disconnect, device number 36 [ 396.405706][ T5880] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 396.670415][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 396.717077][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 396.973513][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 397.151363][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 397.223162][ T5880] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 397.273659][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.288389][T10508] QAT: failed to copy from user cfg_data. [ 397.330410][ T5880] usb 5-1: config 0 descriptor?? [ 397.347040][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 397.354042][T10494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.374359][ T5880] hub 5-1:0.0: USB hub found [ 397.495444][ T5879] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 397.590918][ T5880] hub 5-1:0.0: 2 ports detected [ 397.675598][ T5879] usb 7-1: device descriptor read/64, error -71 [ 397.683185][T10513] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 397.691203][T10513] team0: Device ipvlan2 is already an upper device of the team interface [ 398.629895][ T5842] Bluetooth: hci2: unknown advertising packet type: 0xae [ 398.705644][ T5879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 398.885290][ T5879] usb 7-1: device descriptor read/64, error -71 [ 398.963633][T10523] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 398.972017][T10523] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 398.982197][T10523] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 399.011935][T10526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1107'. [ 399.038074][T10529] input: syz0 as /devices/virtual/input/input15 [ 399.113746][ T5880] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 399.119529][ T5836] kernel write not supported for file /snd/seq (pid: 5836 comm: kworker/1:3) [ 399.122705][ T5879] usb usb7-port1: attempt power cycle [ 399.769414][ T5880] usb 5-1: Failed to suspend device, error -71 [ 399.776294][ T5836] usb 5-1: USB disconnect, device number 40 [ 399.819345][T10543] fuse: Unknown parameter 'user_i00000000000000000000' [ 400.205271][ T5879] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 400.239811][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 400.254182][ T5879] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 400.263610][ T5879] usb 7-1: config 0 has no interface number 0 [ 400.284173][ T5879] usb 7-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 400.304020][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.312291][ T5879] usb 7-1: Product: syz [ 400.317514][ T5879] usb 7-1: Manufacturer: syz [ 400.324776][ T5879] usb 7-1: SerialNumber: syz [ 400.337536][ T5879] usb 7-1: config 0 descriptor?? [ 400.385628][ T5880] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 400.505383][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 400.575643][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 400.635341][ T5880] usb 3-1: config index 0 descriptor too short (expected 32786, got 18) [ 400.646512][ T5880] usb 3-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=f6.19 [ 400.655855][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.663971][ T5880] usb 3-1: Product: syz [ 400.668607][ T5880] usb 3-1: Manufacturer: syz [ 400.673272][ T5880] usb 3-1: SerialNumber: syz [ 400.680744][ T5880] usb 3-1: config 0 descriptor?? [ 400.785358][ T974] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 400.893169][ T5880] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 400.915819][ T5880] usb 3-1: USB disconnect, device number 37 [ 400.959921][ T974] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 400.979172][ T974] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 401.002839][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.014148][ T974] usb 5-1: Product: syz [ 401.020447][ T974] usb 5-1: Manufacturer: syz [ 401.029655][ T974] usb 5-1: SerialNumber: syz [ 401.046089][ T974] usb 5-1: config 0 descriptor?? [ 401.264856][ T974] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 401.286146][ T974] asix 5-1:0.0: probe with driver asix failed with error -71 [ 401.304869][ T974] usb 5-1: USB disconnect, device number 41 [ 402.291145][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 402.346161][ T5842] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 402.765730][ T5879] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 402.806684][ T5879] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 402.814807][ T5879] dib0700: firmware download failed at 7 with -22 [ 402.864421][ T5879] usb 7-1: USB disconnect, device number 25 [ 508.265098][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 508.272120][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10610/1:b..l [ 508.280746][ C1] rcu: (detected by 1, t=10502 jiffies, g=35305, q=49 ncpus=2) [ 508.288404][ C1] task:syz.2.1132 state:R running task stack:25072 pid:10610 tgid:10608 ppid:5825 flags:0x00004000 [ 508.301156][ C1] Call Trace: [ 508.304480][ C1] [ 508.307440][ C1] __schedule+0x17fb/0x4be0 [ 508.312006][ C1] ? __pfx___schedule+0x10/0x10 [ 508.316889][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.322903][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.329272][ C1] ? preempt_schedule+0xe1/0xf0 [ 508.334155][ C1] preempt_schedule_common+0x84/0xd0 [ 508.339477][ C1] preempt_schedule+0xe1/0xf0 [ 508.344206][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 508.349626][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 508.355138][ C1] preempt_schedule_thunk+0x1a/0x30 [ 508.360371][ C1] _raw_spin_unlock+0x3e/0x50 [ 508.365089][ C1] unmap_page_range+0x36c3/0x4040 [ 508.370169][ C1] ? __pfx___schedule+0x10/0x10 [ 508.375056][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.381079][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 508.386499][ C1] ? mas_next_slot+0xdc6/0xea0 [ 508.391311][ C1] ? uprobe_munmap+0x183/0x460 [ 508.396126][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 508.401207][ C1] unmap_vmas+0x3cc/0x5f0 [ 508.405590][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 508.410486][ C1] ? preempt_schedule+0xe1/0xf0 [ 508.415379][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 508.420781][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 508.426306][ C1] exit_mmap+0x275/0xc20 [ 508.430621][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 508.435464][ C1] ? __pfx_exit_aio+0x10/0x10 [ 508.440187][ C1] ? uprobe_clear_state+0x271/0x290 [ 508.445410][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 508.450734][ C1] __mmput+0x115/0x3b0 [ 508.454838][ C1] exit_mm+0x220/0x310 [ 508.458935][ C1] ? __pfx_exit_mm+0x10/0x10 [ 508.463553][ C1] ? taskstats_exit+0x326/0xa60 [ 508.468441][ C1] do_exit+0x9b2/0x28e0 [ 508.472644][ C1] ? __pfx_do_exit+0x10/0x10 [ 508.477262][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.482678][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.488691][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.495050][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 508.500192][ C1] do_group_exit+0x207/0x2c0 [ 508.504809][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 508.510034][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 508.515261][ C1] get_signal+0x16b2/0x1750 [ 508.519806][ C1] ? __pfx_get_signal+0x10/0x10 [ 508.524702][ C1] arch_do_signal_or_restart+0x96/0x860 [ 508.530293][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 508.536472][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.542492][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 508.548266][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 508.553854][ C1] do_syscall_64+0x100/0x230 [ 508.558473][ C1] ? clear_bhb_loop+0x35/0x90 [ 508.563177][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.569098][ C1] RIP: 0033:0x7f2f71f7ff19 [ 508.573538][ C1] RSP: 002b:00007f2f72cad058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.581982][ C1] RAX: 0000000000000048 RBX: 00007f2f72145fa0 RCX: 00007f2f71f7ff19 [ 508.590069][ C1] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000044 [ 508.598056][ C1] RBP: 00007f2f71ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 508.606048][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.614038][ C1] R13: 0000000000000000 R14: 00007f2f72145fa0 R15: 00007ffef0e926e8 [ 508.622046][ C1] [ 508.625085][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10478 jiffies! g35305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 508.637430][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=24450 [ 508.645334][ C1] rcu: rcu_preempt kthread starved for 10479 jiffies! g35305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 508.656746][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 508.666737][ C1] rcu: RCU grace-period kthread stack dump: [ 508.672767][ C1] task:rcu_preempt state:I stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 508.683024][ C1] Call Trace: [ 508.686332][ C1] [ 508.689291][ C1] __schedule+0x17fb/0x4be0 [ 508.693858][ C1] ? __pfx___schedule+0x10/0x10 [ 508.698751][ C1] ? __pfx_lock_release+0x10/0x10 [ 508.703816][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.710178][ C1] ? schedule+0x90/0x320 [ 508.714450][ C1] schedule+0x14b/0x320 [ 508.718639][ C1] schedule_timeout+0x15a/0x290 [ 508.723521][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 508.728927][ C1] ? __pfx_process_timeout+0x10/0x10 [ 508.734253][ C1] ? prepare_to_swait_event+0x330/0x350 [ 508.739848][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 508.744758][ C1] ? rcu_gp_init+0x1256/0x1630 [ 508.749584][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 508.754574][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 508.760777][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 508.766096][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 508.772032][ C1] ? finish_swait+0xd4/0x1e0 [ 508.776655][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 508.781282][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 508.786520][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 508.792467][ C1] ? __kthread_parkme+0x169/0x1d0 [ 508.797542][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 508.802780][ C1] kthread+0x2f0/0x390 [ 508.806884][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 508.812112][ C1] ? __pfx_kthread+0x10/0x10 [ 508.816741][ C1] ret_from_fork+0x4b/0x80 [ 508.821182][ C1] ? __pfx_kthread+0x10/0x10 [ 508.825803][ C1] ret_from_fork_asm+0x1a/0x30 [ 508.830647][ C1] [ 508.833687][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 508.840038][ C1] Sending NMI from CPU 1 to CPUs 0: [ 508.845271][ C0] NMI backtrace for cpu 0 [ 508.845286][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 508.845305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 508.845315][ C0] RIP: 0010:kasan_check_range+0x5/0x290 [ 508.845343][ C0] Code: f6 5b 06 8e e8 ac ba e3 ff 90 0f 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 508.845358][ C0] RSP: 0018:ffffc900000079d0 EFLAGS: 00000046 [ 508.845373][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a9934 [ 508.845385][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90183af0 [ 508.845396][ C0] RBP: ffffc90000007b28 R08: 0000000000000001 R09: 0000000000000000 [ 508.845407][ C0] R10: ffffc90000007c40 R11: fffff52000000f8a R12: 1ffff92000000f44 [ 508.845420][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 508.845432][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 508.845446][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.845458][ C0] CR2: 000000110c2859a5 CR3: 000000000e736000 CR4: 00000000003526f0 [ 508.845474][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 508.845485][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 508.845496][ C0] Call Trace: [ 508.845503][ C0] [ 508.845510][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 508.845538][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 508.845567][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 508.845606][ C0] ? nmi_handle+0x2a/0x5a0 [ 508.845649][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 508.845675][ C0] ? nmi_handle+0x14f/0x5a0 [ 508.845694][ C0] ? nmi_handle+0x2a/0x5a0 [ 508.845714][ C0] ? kasan_check_range+0x5/0x290 [ 508.845740][ C0] ? default_do_nmi+0x63/0x160 [ 508.845758][ C0] ? exc_nmi+0x123/0x1f0 [ 508.845776][ C0] ? end_repeat_nmi+0xf/0x53 [ 508.845806][ C0] ? lock_acquire+0xd4/0x550 [ 508.845824][ C0] ? kasan_check_range+0x5/0x290 [ 508.845851][ C0] ? kasan_check_range+0x5/0x290 [ 508.845877][ C0] ? kasan_check_range+0x5/0x290 [ 508.845903][ C0] [ 508.845909][ C0] [ 508.845915][ C0] lock_acquire+0xd4/0x550 [ 508.845936][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 508.845955][ C0] ? __lock_acquire+0x1397/0x2100 [ 508.845983][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 508.846004][ C0] ? debug_object_activate+0x17f/0x580 [ 508.846031][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 508.846058][ C0] debug_object_activate+0x17f/0x580 [ 508.846085][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 508.846111][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 508.846137][ C0] ? advance_sched+0xa02/0xca0 [ 508.846160][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 508.846180][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 508.846203][ C0] enqueue_hrtimer+0x30/0x3c0 [ 508.846229][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 508.846261][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 508.846283][ C0] ? sched_clock+0x4a/0x70 [ 508.846308][ C0] ? read_tsc+0x9/0x20 [ 508.846331][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 508.846353][ C0] hrtimer_interrupt+0x403/0xa40 [ 508.846388][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 508.846410][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 508.846432][ C0] [ 508.846439][ C0] [ 508.846445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 508.846472][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 508.846489][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 95 35 a8 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 508.846504][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 508.846518][ C0] RAX: ffffffff8e6965c0 RBX: ffff888143693064 RCX: 000000000054f981 [ 508.846532][ C0] RDX: 0000000000000001 RSI: ffff888143693000 RDI: ffff888143693064 [ 508.846545][ C0] RBP: 000000000003a878 R08: ffff8880b8637cdb R09: 1ffff110170c6f9b [ 508.846558][ C0] R10: dffffc0000000000 R11: ffffffff8bc05c00 R12: ffff888146ebf800 [ 508.846571][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10e120 [ 508.846592][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 508.846614][ C0] acpi_idle_enter+0xe4/0x140 [ 508.846632][ C0] cpuidle_enter_state+0x109/0x470 [ 508.846657][ C0] ? __pfx_menu_select+0x10/0x10 [ 508.846684][ C0] cpuidle_enter+0x5d/0xa0 [ 508.846706][ C0] do_idle+0x372/0x5c0 [ 508.846735][ C0] ? __pfx_do_idle+0x10/0x10 [ 508.846764][ C0] ? do_idle+0x11/0x5c0 [ 508.846789][ C0] ? rest_init+0x31/0x300 [ 508.846805][ C0] cpu_startup_entry+0x42/0x60 [ 508.846830][ C0] rest_init+0x2dc/0x300 [ 508.846846][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 508.846870][ C0] start_kernel+0x47f/0x500 [ 508.846899][ C0] x86_64_start_reservations+0x2a/0x30 [ 508.846920][ C0] x86_64_start_kernel+0x9f/0xa0 [ 508.846940][ C0] common_startup_64+0x13e/0x147 [ 508.846970][ C0]