last executing test programs: 11.305486411s ago: executing program 4 (id=653): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[], 0x1dc}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='task\x00') getdents64(r2, &(0x7f0000000040)=""/48, 0x59) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB='V'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="200de60000009f2f3d7558149886dc870b819f5ae066baaa27e4295897b1140680772ce27457456be488bddfec825a08c9208085dcdee69bf0b4488124c4bf2fad6daefbdfd8e3a9899d2ef66a1f38000000000000b91cd8cede490b87617756c2f19553d030bc7e303188ff80a36ec49773a03d79f3f0474fa3ebd63e4adb01fd006284d3cbecf6d01c56d4826d11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) getdents(r2, 0xffffffffffffffff, 0x7a) sendmsg$inet6(r1, &(0x7f0000000bc0)={&(0x7f00000003c0)={0xa, 0x4e1d, 0xfffffffd, @mcast1, 0x3ff}, 0x1c, &(0x7f00000006c0)}, 0x44890) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000640)='.\x00', 0x80000001) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0x9, 0x5, 0x706a, 0x10, {0x1, 0x4, 0x0, 0x8, 0x40, 0x2, 0x6, 0x9, 0xe79, 0x4000, 0x7fff, 0x0, 0x0, 0xffffff6d, 0x3}}, {0x0, 0x10}}}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) copy_file_range(r6, 0x0, r6, &(0x7f0000000500)=0x10000000002, 0x9, 0x0) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000040)={0xfffd, 0x0, 0x40, r4, 0x80008}, 0xfffffffffffffe94) 9.222094016s ago: executing program 2 (id=668): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000001640)="0ae1b3e87bfd5dfe1a61c82e56234ce023ca7ded19d823c1001112217a2317bae1af0bb4a6f78f68a68938b336701b6e1194cf0c851954592094c60edae451296daa5c68d57140222ff0324b0478dc4a42cd090534f901fa06aca3da3c9948c7d7e880d3706ab51a44ee52c898b53592b054ae39b3a2bd13a4ec93824c2600d9e84fcc16b9c106335e32f1c59bcefb3ee427183968950658e37c0cf70af9b3924045270ef159bcc8aff59102576aa3f9cdb1319cadb25182e2ee2efa7e509b56017ce835596eeb3e22e9f508588b324681ad5976fb20bf014af30c3d120bb5ad0a8a30a9f23778ad13b4318cb18e273d61e0f98f3dd3adb340c6b317496ac294f5501eb32b3d747e9866fa0a103ed7ed6dc6bb70759d372693868761b1c35958beb4712ca5b2a4cb49813213a8b53b0a27573e4468f7ea0dd5983136be26ab08017fcce0d98ca5c78b49d11f397e65532f860b14a9e69c80a67b7be240090a91c254f6b26c620745ddc377940eea9fd24ee514b3a8ecdf9563dccd4992d7b732e441b078040d163de5cf955ad948c5bc026a84337b6a943a63df3dc09b728f8a47d7f6fb01c9c72eee37f97bb040396bdc0e2bade4d28c40d97479e222927cf330e42db4c8441a7f73499e310f9b6503a30f11053d5e1e3a94148b1bb08d49d4daae5b9cf16ed623692af28572458d069addf42c55ae9fc9da4f0322b76e4663465f55917e072e3040009791a2508fea2f0699ffa424af0b671b451631514b053bbcf6b737b7474eedd03d2c4a50f1ff4920a8d4aafe6a2139d81331efc00b85f6c701579a37dc6e01dab658df500b8e9bcca316c013857839b1245092202b7034e36e861207e5b7e26faad1068dea2d5b3f410f8b90240757f0e5f2b826a581825a99baaa3754851f9c8f04baad46c8c6b44e3592586636d2abde6f3f2a7233675ed35aa4bb8dc32b952a413877bdd25750dc2bf403c4cdda92123514f80810545ce19b179aecd02e2c3d129758252d48de1de1568558bf6c06cbea580f754d527026cbc643917c6c86da27e9accc2efcf2e8c331f8c7baa07521fc7e26d7cd4cc2ece68611774ebf6b515a8d5a67141478fc0344d089101e6ffb15e23ea79067183cf26d8f62d2f45c239ea16498cdb39433f1d8f6b99241f90d4f3800fdfc8979c99b0b23ab7dd66a65c5c017fe6d65f0573e2b48eb1c34b5f100c3a1e401dfb97fce5434911edf34bb358e6a0d9836ef53e3234a2e783d6ad15b955fe5a8e2cd6ce7c1305b6d8989048da8f331ccd8c19f02b19445291e50d34e2a65b64848929427c23820f280a4cb17eea57da1b972737c41413c343fa6786a4a420980264d03498dfb48a19152272120b4cb57f6680f8988f63050adfc76cfe94e8b0a6ff85722ee6cc33e8e0161a4331ecc77b8d6a3a2365b7ef55ba946759a79361306f2ede98df926b6f199f0d23cb891b4dc786fd1b8125150c3384e74ed0a4d98f8422cc4485e50fd5abda10bb048414ba0791d79508ccaf6e78078d42ceb39727c0e302560af1a22bc337e8095c60797d97ea61e4aaaed85ccd98d1c33077a45cdbb81d54659792c1dcb469450528c140878b923f30440f839254bec87da7048552ca78a9b6b981b497b961bab865e2fc88ba117e52c5294469cbbf34eb3792794d91839398e024604d5a8b29e36f35114eba9543b47b159a3a4f45d381915b18528f9858426f81fa3ea787ef7357064c0685d8edab103a0927744e048c5354db19022bac1dc7c4fec3c00307d2f1751bebd2ee97b55a396ea6d71a1cfa65133d68b31485dc31ea98b85ea7eed584b8e64e21ee2ed51c7014904cf05cb44c9e510bd13866ca4e37f7d004ae6cd123795761624824aa01dbc0325a8f91b269693bbc744e4bde208367cc1a86280f819356464d2621d2869ba98de2ffda66d94545ac6652c2fc1f9acf11e331b779b1b8fbdc9bec6a5d06a989b19e029d2f7e2f32c446b27b355d635555dc3ec501fa723dd881e808154fdd91457cbcf1ca982e8a89226ac3b90a928ffac617c0a4c21de17eb18438225aa37fbf5d56b548337d30b94b9fd89cc66908e5eda83c845b24ca1d80c1ccfb29f368974450edddddd52322c4f1fbf351f8c299605ecd479910d0e5092d44f06069b9fbf8b2b9533775fe453e5f0229b48233ab5845f464d470ba64a0873899af75e5003f035c0f6d872db672cabde36f359537026efb9969bbf4d20469c7d9cf4907cf3d03434581ca78dcd3812ef0edfacbe65cadc17e89e4e6a5e697a3f3bd763e0c23742dbb70c1f28524e5f5c44de5b5489b06cb5382170ccc9971d3f8111bce43f932025c43314d1e98d0625f5cdc4553c2491711342826c4abdbcb37d4cbdb6ce31efd78a9124320dad7f2f9c77ba0d92d7609523405c674eb07057281675018cc895838591ee9999c15e9dfc51c802428a25bee0983f4bc4b8ac01cac49fb5d94b615d388e07784963a78868cde9b12090f1943b0ca6ddd344354b11ca6629e58953a04da126e7278acc63514c0a7048722a6189858c4a8ea72038d3f5ebc82f13bc795bfecc339fcf8c9982b99a48c881e86a315b98da39f6065de2d685d098516eb4efe44c5070db0879faece1cd7c234e634caadb64bbb7b36892a4c91930069a82691b75da9ba6c73e5ee462e9cb41249a2745700246353cb02346285f238f7bb07f1d322ee05003c222018fbd2f2560335d5aaa2bf56cd8a742b2d1eafd3640b807a6fd49b12f7b9ebbb4c97f5e31b2e8f1bff6890570cba798570f993d907ecd2a779b22cc7be03150d4089435a740319f144fb75860672f0894ece1e36b5c1da0d4c583b7eb6b02d8ff1afc79c69c80055c6b9097c9e5fc8642e1407cefac9a1723b53804807fc6f439c9128b6194a0c12cb911ff6b0cf10e88470045b4c7ad985c9020048b31ed9e63834aa2b2db022ca8a0a53fbb9f3e39b8420f8ed65fc548848dc52a58b53c7d6fff1bd68525e846fcf29de2452a0e7f968ca158a8b982dbab8f2e4aacd94eb0b6df7f9e904ce7ca74c1bfe20e306135bd3566d900011b739921d72ff21472a37d9998861248124c3e6b53757ccea0b6b37d828e635ab95004e87863085be686ef7136b5d94e285656105cb32c6eb7761f948cb6a10d69f411e749d864cc0f86f3ab984aa946b6ef9a4364bae9ba61430db9482756cd0465b3e538455e855dfccce9290675dd705f23410f41739fe94f95b5e82d699e26112a8e793d16f88273404f7417dd85cfdb748b03e974d7a8dc6a3b56db21e41932afc652d35e090842d68b8a8a6b72a846d8a855d9b18dfbb23e195d95031014913320e908e744080c226a639f7f6b9ad2ee6161095fa4c706e399e5a4292673896ce31a27aea87c5a8a06d4138209430768f61dd66be4ac439b7e0f925b0aa8e696a7618f6ea8b31bd006fde7c26b33760b745ace3650f748294d32eaf4c737f6998fdc2e7df5c98d9880faa5dcc7a7642b69a32f1770ee8b5009a23c4f5bb744cc30ac", 0x9c1}, {&(0x7f0000000380)='4\t V', 0x4}, {&(0x7f0000000040)="045ec6b8", 0x4}, {&(0x7f0000003640)="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", 0x9c1}, {&(0x7f0000000200)="26f640", 0x3}], 0x5, 0x8) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xc, 0x7, 0x5}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) write$P9_RSTATu(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000011c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8002001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xc}, 0x1c, &(0x7f0000000780)}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000680)="9888ebbba6091f43e72be5e55c138b6083638e581a36f900abc8673b56f865cf7680cb3a9e88d1b39f34bee7bdb96995885467e39f0bc5d8d350e2f3c26e39250b7fc8f1891a3a36b6d986a0033fc308e7a173a55864c8da7404204320abd58ed47cb0faf1b16fa2e04dcd2631aa8fef9eabad7c6c8dcdec82522c0f970f27af53386acb80c01faf563ee5817c", 0x8d}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffff000}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000002c0)="e3c24f29db26141d7acd4fd2c690d35c12656804d05e783a17f0fe20602636d9b31f0d7141df9aa174aa682aae81435886fe893643627280def69f248394e6b8efda95f78badd054e647c3ba57e4f34635aae9e2a68a36ba57dc13703d23520cb2af69eb75856f", 0x67}, {&(0x7f0000000a80)="2ece142d406b47543dcf0cd1a348eaff6a1bc87b4799fee214e8a16b641d7e9f3aa42fa39ef73409de28fe92dadb62e38ccdec65a04c3e354d2fc88934c6c788743b86037307d412565237e3e9c2c1f13eb6bc4df85687ae16acf9b80e530cc8a63e5a34d3a701f3e22d5d426ac89ada3e92150cf6fa2fb9613914aa860f886aec990b0397ba103e108b910c590e77ad18da3ad34403debfe9a888787fb9982eab63a169c813d630b13ccc6e206b43ed038030c72a15a7ea804c1b", 0xbb}, {&(0x7f0000000740)="acd8", 0x2}], 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000030000000000000000c204000000040000300000000000000029000000370000152b02000000000000c20400000001000100050200a8c20400000002000000000024000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000140000000000000029000000430000000100000000000000140000000000000029000000080000003961000000000000"], 0xa8}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="d6009c8892109332a87211c5839513fcfa02af3ed112edf355e2a1697e3b363dda54fd9dce6d8558cf733b85329cd15086121e01d30eef2eaedd31993a62c8cf1fd47c9f3920db5071bea71757c1204aaa052e76b4dbff0e4589c596cc920051865444d41a6974d9993b7f390d648d7ad2f7a412a58acb89432b7946416b93fa11b77021c2db46e95c4387c41c8c98c3da44033a381e19c30588a0541d193c469ded7cf21fdc75a781", 0xa9}, {&(0x7f0000000d40)="cf6df25999bcffe244d27c3bf586b62f24f486db8af10228b6493beaa62eba5da6a8c5dfb4fb1dd285e9b6db359d38ce1733e99a62d96a92b4e7172c88979674bdffa18d241248641c5ca1a9d625a1a8d9e9556a3da1d23ebd5e2675dfa0c570449ab3aaec2f879b11c954f6a4", 0x6d}, {&(0x7f0000000dc0)="65a719a8e2b2f189", 0x8}, {&(0x7f0000000e00)="9ac4aac9e82d38921b30208aa787b1130f8f8acb1798a32d890bb4e1322e147a3782ecad3e6bddabb2cf8aef441a81bad93385a64982bbdf9eeae4aa5d1952d3341824b2c429a66d623513223139bbb5b30fe76b47c3412a540246322b161891a09b9a7db02a2b2e54eb506e2d6eba32cd9773ef817c2ae0a58b80825e6e0cc61ab7e7b5fd9687e2d721dc8092ff15d7a461e36ecb17557d7bc486560ae5", 0x9e}], 0x4, &(0x7f0000000f00)=[@hopopts_2292={{0x30, 0x29, 0x36, {0xc, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x5, 0x9, [0x6]}}]}}}, @tclass={{0x14}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0xff, 0x6, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x5b, 0x8, [0x67, 0xfffffffffffffffc, 0x9, 0x2, 0x101]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfcb}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x1e0, 0x29, 0x4, {0x33, 0x38, '\x00', [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim, @hao={0xc9, 0x10, @loopback}, @generic={0xfa, 0xe1, "78d30ffe994765930cdcaaf4a72b65cd17c45a798848c81d42948681b36c128155aeb3624c454b29df95b8d9a199227c7007462916b98d31ff5fe348b732b1f19ebf1485264a6c9de49591b067214806390547407ecd34b812f2fa4d2968efa84e4a0ba48b3f8a47439d748aaab9f636396e1b0ca47c7e819097d9682b65b09bfb74ef70dfe11c7b30a4cf4f726999fb95b065d0b8f34c53b3d07814b5fac48f1841e4a85d3153f3cf6fe83ca3109997dc55110215ad3af71d7a7e3d1b04587977cf877ef2ce77b31f2c619b0a653948b5f3c8c7eef787174ccf0f81ee90589a0c"}, @generic={0x3, 0xac, "ccf2d62e63cecdd8997072925681b509d0840b766f9a45cb97dc05c7b04ddfd5f665b7ad5b9a94f03d1a7de6233aef3f7c6146e7957a69222c3d3a391a4eb80db7f63e72b13b07244ba9a4588b9d4db0d0f83e9b8c9223f6460fa10ad4e0a2ba6a927a136941da38a2b1cfa30ff2620441111e9d654854771bb43dca2c2c0ca095bda5c9d818ad0a2909243e2931890c03223c5f6f541710890da233305741a728fdf90e7c4d97ea57b127ff"}]}}}], 0x2a8}}], 0x5, 0x931766f6319eed40) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20048880}, 0x8840) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) fcntl$setstatus(r1, 0x4, 0x2800) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000480)=""/187, 0xbb, 0x1c24, 0x0, 0xe11f, 0x1000, 0xff8}}, 0x120) 8.236221423s ago: executing program 2 (id=670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) timer_create(0x5, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 8.079356626s ago: executing program 4 (id=671): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) 7.339188425s ago: executing program 4 (id=674): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'veth0\x00'}, 0x140}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x90000019}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 7.321556457s ago: executing program 3 (id=675): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 7.21612024s ago: executing program 2 (id=676): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x20, 0x30, 0xaa, {0xaa, 0x3, "7e42e6f9346b9bbca0ad71d3efd73a95328b142373f6dcbed438b0964d034975bcf7e6064bde357006913fdb1c12f9ce06cce90d0e68f53d5b841282df9e8f688efc67f34354ac0a6ea144d6d42c187f7866e11a906ffc2c3f40e3e8fd331468eda4d8b6c84526ce3910f42af65f4473b2217ada59173f9a460c5c85f3c786e90637f07487508a90aaf45ef5d85555f44b153c3579cd1c3be855794a468d2e64fb7639b238f8b797"}}, &(0x7f0000000540)={0x0, 0x3, 0xad, @string={0xad, 0x3, "169d939934748025b5258eae5520919f77d6fba5b61e69ac024026d4e9db7ae9f14ac9364d50e89a5442fff5a81b30ca87f309740331c18d51f33ce65ac75508d91cfec4b7a473e2972ce6f7de58192625676bb38b53a555a02f2892cfcfba5beb32e777138154baaeb853ea09bc52bd30bfdcd5615660745e1ed0946a8e33bb46edaf0fa3183e050e6adbaee0975ba28849a973be0fed2dbbc5c999afa8cc322c68e9210dd37db04bf9a2"}}, &(0x7f0000000600)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x4, "d9ee"}, @local=@item_012={0x1, 0x2, 0x3, "80"}, @global=@item_4={0x3, 0x1, 0x6, "c2fa2996"}, @main=@item_012={0x2, 0x0, 0xb, "52c5"}, @local=@item_012={0x1, 0x2, 0x0, '7'}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xb1e}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x20, 0xf, 0xe5, "f8853ba61e30ba42b63fd18b93154c21cd7a2fc9cc5cb79f94a606af3ee6b15f9c7599ffb5a5a05a3b7132cdbba19c19e779b4427624464ce3cacac81497e34e78626c5407054ba69f285c04e17221866db49f46a2882238398055489ecabc47d11fccbbea423e1a877b7141c3c25ff3532690e8b2167c30b24926854610f2a6adef6b964a6ae1e42bef8faeeef1ddbe05eecfe97dab4ca4b747937fa2a54761a70cb1c8eaa116a4c11124efda7ddafac25ce72b080607e84c089a4f4993e08d61d78e9304790fcfcbc4253ad941de549b963df18384852f2c079b7001d546a90160b35d7b"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000840)={0x20, 0x1, 0x48, "40699971ec4ad33c9c4d94383180d9fc872d1fb1290c3601a8def32a6173df7ed5f900688479e17fbe0bab65412d5143a6b5cfde2fec120bc3d979e5867bd0ef2a2cf1e5cb1c262b"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0xb}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x6d, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x2f, 0x0, 0xc0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "46cbb2"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x5, 0x7}, [@mdlm_detail={0x1d, 0x24, 0x13, 0x86, "10ee82f18e6ef2a6e6b8c09ffe87697940d6f663487688c91e"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xea, 0xf, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xb, 0xe4, 0x3}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x1, 0xf, 0xc0, 0x10, 0x8}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}}) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x6, &(0x7f00000003c0)={0x32, 0x1851, 0x4}) syz_usb_connect$uac2(0x2, 0xde, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x582, 0x8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x8, 0x30, 0xa, {0x8, 0xb, 0x0, 0x0, 0x1, 0xff, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x4, 0x9, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xff, 0x1f, 0x3, 0xc}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xa, 0x2, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0xf5, 0x4, 0x3, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x1, "fe", "9761"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x4, 0x0, 0xff, "", "33fc8a"}, @as_header={0x10, 0x24, 0x1, 0x6, 0xff, 0x1, 0x1001, 0x3, 0x80, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3bf, 0x8, 0xf, 0x3, {0x8, 0x25, 0x1, 0x4, 0xc, 0x0, 0xfc01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9e, 0x12, 0x8, 0x10, 0x81}, @as_header={0x10, 0x24, 0x1, 0x4, 0x0, 0x1, 0x1002, 0x6, 0x19}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2b, 0x4, 0x6, 0xfd}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xa, 0x4, 0x3, {0x8, 0x25, 0x1, 0x3, 0x3c, 0xff, 0x7}}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x4, 0x1, 0x5, 0xff, 0x7}, 0x47, &(0x7f0000000140)={0x5, 0xf, 0x47, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "10b71ffeee1f36ded2862602dabdfbbd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x9c, 0x2, 0x1003}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x2, 0xf0f, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x19, 0xf, 0x0, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x2, 0x4a}]}}) 6.798423548s ago: executing program 3 (id=677): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000ac0)=[@wr_drn={0x68, 0x20, {0x4, 0x7fffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x202b, 0xc, 0xb745, 0xd}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x7}}, @cpuid={0x64, 0x18, {0xf, 0xc4c}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x40}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x40, {0x1, 0x3, [@wrmsr={0x65, 0x20, {0x400005cc, 0x8000000000000001}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5ec1, 0x80, 0x1}}, @cpuid={0x64, 0x18, {0xadc8, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x2d}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2019, 0x6, 0x8, 0x101}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8}, @set_irq_handler={0xc8, 0x20, {0xf8, 0x2}}, @cpuid={0x64, 0x18, {0x877, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x16e7, 0x1}}, @cpuid={0x64, 0x18, {0xcd5b, 0xc}}, @nested_load_code={0x12e, 0x5a, {0x1, "420f01c366ba200066ed2e2e66410fc7350b000000f30f01dfb9a5020000b800000000ba010000000f30f7df430f7918c4a18c5c4cc8000fe0f3b8010000000f01d9"}}], 0x372}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc7, 0x9, 0xcb, 0x2, 0x1, 0x9, 0xc, 0x8, 0x8f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r4, 0x20, &(0x7f0000000280)={&(0x7f0000000500)=""/225, 0xe1, 0x0, &(0x7f0000000e40)=""/4096, 0x1000}}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}]) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6.20770474s ago: executing program 3 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf255c00000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) 6.086479941s ago: executing program 1 (id=681): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="64f30fbc2ec422819a0cbd750000006436640f01d1b805000000b9000000800f01c166baf80cb88e79f286ef66bafc0c66ed440f00d8c442d58e1fc744240052120000c744240200000000c7442406000000000f0114246767f3450fc7b00b000000c4e2593fd0", 0x67}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)) 5.713299276s ago: executing program 1 (id=682): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcc9) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708008000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x76040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40021}, 0x24008010) 5.63961143s ago: executing program 3 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x3, 0x2) getsockopt(r3, 0xff, 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r3, 0x541b, 0x20000004) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) getpid() r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 4.468138967s ago: executing program 0 (id=687): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0xb4}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 4.147106514s ago: executing program 4 (id=688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x8800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x4}}}, 0xa) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xa8, r9, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)=@dellink={0x28, 0x11, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0xb41d, 0x10}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x8001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) 4.121013923s ago: executing program 1 (id=689): r0 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) (async) r3 = socket(0x2, 0x805, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) socket$unix(0x1, 0x2, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000740)={0x4, &(0x7f0000000700)=[{0x132, 0xb, 0x5, 0x6f}, {0xc, 0x9, 0x8, 0x9}, {0x7, 0x81, 0x0, 0xff}, {0x3, 0xf, 0x7}]}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) (async) socket$netlink(0x10, 0x3, 0x14) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) close(r2) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x2000}, 0x990) 4.101832556s ago: executing program 0 (id=690): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001780), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000017c0)={0x5, 0x3, 0x3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r6 = eventfd2(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8a10"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) io_setup(0x5, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) inotify_init() io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r6}]) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @random="4922c9c66f94"}]}, 0x54}}, 0x40000) 3.947609427s ago: executing program 3 (id=691): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000020050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000001a80a000a"], 0xbc}}, 0x0) 3.947382501s ago: executing program 1 (id=692): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x148, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b99e99605c559ce285bbe0a128fedd794ce892fc407634bb3031f200afd06cbf65b4c1d98e1d4db4ca11435b6ad52b63c9c15237992f768533bd59a7c96ea70a996ecedf748f8b6b8974a7eb3af1d5c9ef1725a0f8e99f7687c1bdc2f83436e1eab1c617aed1d0f11a0f7f44b389134b51f5acaf7c50adf4726c1f2cfa26b7359ee87543e03ddea62911d9987e9a140de9477817dc1528c2401c60632be16628aa5bb579a339040136"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659ca6fabcbe6607ed00e0c670c10e5548530b2f24cd72cbf7f8cae46a10a4c28f75c6e504bba06f536"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0xe8, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0xc8, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3330}, @broadcast, @device_a, @initial, {0x9, 0x81}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @measure_req={0x0, 0x0, {0x4, [{0x26, 0x42, {0x9, 0xc, 0x9, "768c33206e4d148c4ee96d6f8ee838b1dd367a2f09fd3b03e511592552ccf9b410dbc0af87b7f38f44e1f250692deb8246f9897243e113a973e6887b8283df"}}, {0x26, 0x3, {0x1, 0xa, 0x2e}}, {0x26, 0x5a, {0x14, 0xf6, 0x6, "30cd262a5a5c5eb8ed9eb1bd93a43a9c79288251b068276dea343eb7eb0d9c0c4e1e6f9efc305585bc3db3b2912941ff0b3cc18569df3f033e9b130c8c0d06b5754c626c37d0a93aac861f3dd6134bd5a5c896e8cb3357"}}]}}}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) 3.65779185s ago: executing program 1 (id=693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$sock(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x12, "4bf8269dc8c718c9d46b6fed87700d14836709"}) socket(0x10, 0x3, 0x0) 3.600489607s ago: executing program 0 (id=694): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt(r2, 0xff, 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r2, 0x541b, 0x20000004) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 3.589003283s ago: executing program 3 (id=695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'veth0\x00'}, 0x140}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x90000019}) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2.927796816s ago: executing program 2 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) 2.821874506s ago: executing program 2 (id=697): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) (async) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) sendfile(r0, r0, 0x0, 0x9) (async) sendfile(r0, r0, 0x0, 0x9) 1.994052447s ago: executing program 2 (id=698): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x90000019}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="200161000000627ef1902ebfb2621bef4473a0c6e742e3d7c1a18625c9a1488ee33453c98223f55b9b15befe76ec06ba7847f6090192f8b0525be72bfc6827f34a3d0ce68bd2dc9d7fa19d72545b396850603090d93ddb251154d521d35b8dc0255500000000006c21e54af4484730622c1b8d05e4aa70ed5093ea73f1c921d725f752004f6068d4384fe9baeda6c331f0b66051619e1ca28c9c2db6ec249a74234c6bcca949575a74a5242f433331a099f4347f2ee2fee3a35c95acbcaf0606171df70a0980d44c284c0d61d691ffe245891448f3f4441386cfdea1879e0f208addc69330cd225de732345a203ee301c578030f90cc"], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 1.733080445s ago: executing program 4 (id=699): getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001cc0)=""/181, 0xb5}, {&(0x7f0000001d80)=""/209, 0xd1}], 0x2, &(0x7f0000001e80)=""/4087, 0xff7}, 0x6}], 0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=ANY=[@ANYRES32=r0, @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0104000000000000000002000000300004802c0001800c0001007061796c6f6164001c0002800800044000000000080003400000000008000240000000040900010073797a3000000000140000001100010000000000000000000000000a00"/132], 0x84}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) accept$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) (async) sched_setscheduler(r4, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) (async) connect$unix(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x277fffffffc, 0x4000, 0x0, r7, 0x9}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') futex_waitv(&(0x7f00000014c0)=[{0x7, &(0x7f0000000300)=0xe9, 0x82}, {0x8, &(0x7f0000000340)=0xc, 0x82}, {0x2, &(0x7f0000000380)=0x343e, 0x82}, {0x2, &(0x7f00000003c0)=0xff8, 0x2}, {0x9, &(0x7f0000000400)=0x3, 0x82}, {0x0, &(0x7f00000004c0)=0x6, 0x82}, {0x42, &(0x7f0000000500)=0xd7e4}, {0x2, &(0x7f0000000540)=0x2, 0x82}, {0xfffffffffffffffc, &(0x7f0000000580)=0xc8, 0x82}, {0x1ff, &(0x7f00000005c0)=0x8001, 0x80}, {0x5, &(0x7f0000000600), 0x82}, {0x0, &(0x7f0000000640)=0x1, 0x2}, {0xfffffffffffffffe, &(0x7f0000000680)=0x9, 0x82}, {0x80e, &(0x7f00000006c0)=0x3, 0x2}, {0x7, &(0x7f0000000700)=0x1, 0x2}, {0x1, &(0x7f0000000800)=0x7, 0x82}, {0x0, &(0x7f0000000840)=0x7, 0x2}, {0xfffffffffffffffc, &(0x7f0000000880)=0x2, 0x2}, {0xa, &(0x7f00000008c0), 0x82}, {0x1, &(0x7f0000000900)=0x204, 0x2}, {0x7fffffff, &(0x7f0000000940)=0xb1, 0x2}, {0x3, &(0x7f0000000980)=0x5, 0x80}, {0x1, &(0x7f00000009c0)=0x8000000000000001, 0x82}, {0x9, &(0x7f0000000a00)=0x17e0, 0x82}, {0x200, &(0x7f0000000a40)=0x3, 0x82}, {0x2, &(0x7f0000000a80)=0x5, 0x2}, {0x7, &(0x7f0000000ac0)=0x6, 0x2}, {0x0, &(0x7f0000000b40)=0x8, 0x2}, {0x8001, &(0x7f0000000b80)=0xfa5b, 0x82}, {0x5, &(0x7f0000000bc0)=0x5, 0x82}, {0x7, &(0x7f0000000c00)=0xa, 0x82}, {0x0, &(0x7f0000000c40)=0xa, 0x82}, {0x0, &(0x7f0000000c80)=0x77, 0x82}, {0x6, &(0x7f0000000cc0)=0x2000b3b, 0x2}, {0x1fffff, &(0x7f00000001c0)=0x8, 0x2}, {0xd, &(0x7f0000000d40)=0x1080000000, 0x82}, {0x1, &(0x7f0000000d80)=0x3, 0x2}, {0x1, &(0x7f0000000dc0)=0x8000000000000000, 0x82}, {0x5, &(0x7f0000000e00)=0x7fffffffffffffff, 0x82}, {0x1, &(0x7f0000000e40)=0x7, 0x2}, {0x3, &(0x7f0000000e80)=0x5, 0x82}, {0xffffffffffffffff, &(0x7f0000000ec0)=0x3, 0x2}, {0xe83, &(0x7f0000000f00)=0x100000001, 0x2}, {0x31c, &(0x7f0000000f40)=0x8, 0x2}, {0xfffffffffffffffc, &(0x7f0000000d00), 0x82}, {0x1020000, &(0x7f0000000fc0)=0x6, 0x2}, {0x2000000000401, &(0x7f0000001000)=0x1, 0x2}, {0x7, &(0x7f0000000180)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000001080)=0x4, 0x2}, {0x8, &(0x7f00000010c0)=0x5, 0x2}, {0x6, &(0x7f0000001100)=0x6, 0x2}, {0x383950c10000, &(0x7f0000001140)=0x7, 0x2}, {0x3, &(0x7f0000001180)=0x80, 0x82}, {0x1ae, &(0x7f00000011c0)=0x1, 0x82}, {0x3, &(0x7f0000001200)=0x3, 0x2}, {0x7fffffffffffffff, &(0x7f0000001240)=0x7eb7, 0x82}, {0x7fffffffffffffff, &(0x7f0000001280)=0x1, 0x82}, {0x0, &(0x7f00000012c0)=0x7, 0x82}, {0x8, &(0x7f0000001300)=0x9, 0x2}, {0x5, &(0x7f0000001340)=0x2, 0x82}, {0xab1, &(0x7f0000000140)=0x5, 0x82}, {0x9, &(0x7f00000013c0)=0x10000, 0x82}, {0xf94, &(0x7f0000001400), 0x82}, {0x1, &(0x7f0000001440)=0x9, 0x82}, {0xbfa9, &(0x7f0000001480)=0x7, 0x2}], 0x41, 0x0, &(0x7f0000001b00)={0x77359400}, 0x0) pread64(r8, 0x0, 0x0, 0x3) 1.248506886s ago: executing program 0 (id=700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary='rIp5'}, @typed={0x8, 0x1e, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.059830525s ago: executing program 0 (id=701): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000fdffffff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 965.938856ms ago: executing program 1 (id=702): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x76de, 0x0, 0x0, 0x0}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000540)={0xa, @raw_data="5d542f5cee57bb0367bcff367003bb8e250b036fd9ee1f5a22a32063d91764760c8bdf78bfd83e1f140362244ed1c33eb57be72914ed1b8454ad18ebe81d8518ad2e6617b538d4487bc73b8a8114991d93f3e3d9a1943a96af622ef0f832539da0681cc5fb6ee4c4511d7e2e239bc74f40b3a3ce3dde861d5a57acd868b1d553211589052db455de878a6da378f7e9f01137262ac3a7f30f1257f11bba829c80e58d42bd5f0b0fbd112a2b3550f6cb54a53407b15140c2f1eb6cfc0a5ec909d41e97c9a29a7e99d5"}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r9, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r8, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 194.398241ms ago: executing program 4 (id=703): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x148, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "b99e99605c559ce285bbe0a128fedd794ce892fc407634bb3031f200afd06cbf65b4c1d98e1d4db4ca11435b6ad52b63c9c15237992f768533bd59a7c96ea70a996ecedf748f8b6b8974a7eb3af1d5c9ef1725a0f8e99f7687c1bdc2f83436e1eab1c617aed1d0f11a0f7f44b389134b51f5acaf7c50adf4726c1f2cfa26b7359ee87543e03ddea62911d9987e9a140de9477817dc1528c2401c60632be16628aa5bb579a339040136"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "8ec7073d34eb2a47d0e1d44be840d6887c154034697e091659ca6fabcbe6607ed00e0c670c10e5548530b2f24cd72cbf7f8cae46a10a4c28f75c6e504bba06f536"}]}, 0x148}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0xe8, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0xc8, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3330}, @broadcast, @device_a, @initial, {0x9, 0x81}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @measure_req={0x0, 0x0, {0x4, [{0x26, 0x42, {0x9, 0xc, 0x9, "768c33206e4d148c4ee96d6f8ee838b1dd367a2f09fd3b03e511592552ccf9b410dbc0af87b7f38f44e1f250692deb8246f9897243e113a973e6887b8283df"}}, {0x26, 0x3, {0x1, 0xa, 0x2e}}, {0x26, 0x5a, {0x14, 0xf6, 0x6, "30cd262a5a5c5eb8ed9eb1bd93a43a9c79288251b068276dea343eb7eb0d9c0c4e1e6f9efc305585bc3db3b2912941ff0b3cc18569df3f033e9b130c8c0d06b5754c626c37d0a93aac861f3dd6134bd5a5c896e8cb3357"}}]}}}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) 0s ago: executing program 0 (id=704): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf251033"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r5, &(0x7f0000000000), 0xd4ba103) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') utimes(&(0x7f0000000040)='./file0/file1\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x3cc85000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000440)=""/236, 0xec, 0x0, &(0x7f0000000540)=""/247, 0xf7}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r9, 0x4) kernel console output (not intermixed with test programs): 160876][ T5882] usb 4-1: config 129 has no interface number 2 [ 180.184998][ T5882] usb 4-1: config 129 interface 159 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 180.272277][ T5882] usb 4-1: config 129 interface 174 altsetting 4 endpoint 0xA has invalid wMaxPacketSize 0 [ 180.336584][ T5939] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 180.360021][ T5882] usb 4-1: config 129 interface 49 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 180.386859][ T5882] usb 4-1: config 129 interface 49 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 180.412485][ T5907] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 180.421059][ T5882] usb 4-1: config 129 interface 49 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 8 [ 180.431278][ T5907] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 180.447668][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.462879][ T5882] usb 4-1: config 129 interface 49 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 180.477984][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 180.491595][ T5882] usb 4-1: config 129 interface 49 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 180.538906][ T5907] usb 5-1: config 1 has no interface number 0 [ 180.575890][ T5882] usb 4-1: config 129 interface 49 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 180.598286][ T5939] usb 2-1: device descriptor read/64, error -71 [ 180.610495][ T5907] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 180.639818][ T5882] usb 4-1: config 129 interface 159 has no altsetting 0 [ 180.647505][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.659865][ T5882] usb 4-1: config 129 interface 174 has no altsetting 0 [ 180.667483][ T5882] usb 4-1: config 129 interface 49 has no altsetting 0 [ 180.713257][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 180.721719][ T5882] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=9e.65 [ 180.735480][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.763137][ T5882] usb 4-1: Manufacturer: ꎳ酟ᦊ櫠ᬔ䞻瑮갽䮽놢啑㈁ [ 180.774607][ T5882] usb 4-1: SerialNumber: syz [ 180.833482][ T7035] warning: `syz.2.316' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 180.846580][ T5939] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 180.988558][ T5939] usb 2-1: device descriptor read/64, error -71 [ 181.019425][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.311'. [ 181.109667][ T5939] usb usb2-port1: attempt power cycle [ 181.178376][ T5882] usb 4-1: USB disconnect, device number 25 [ 181.307994][ T29] audit: type=1326 audit(1774999922.892:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7039 comm="syz.0.317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43cf79c819 code=0x0 [ 181.458820][ T5939] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 181.532315][ T5939] usb 2-1: device descriptor read/8, error -71 [ 181.891308][ T5939] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 181.921055][ T5939] usb 2-1: device descriptor read/8, error -71 [ 182.153218][ T5939] usb usb2-port1: unable to enumerate USB device [ 182.796191][ T7056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.906925][ T7065] program syz.2.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.919397][ T5907] snd_usb_pod 5-1:1.1: set_interface failed [ 183.927264][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 183.957049][ T5907] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 184.009644][ T5907] usb 5-1: USB disconnect, device number 16 [ 184.039672][ T7070] fuse: Bad value for 'fd' [ 184.239094][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 184.385525][ T7074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.398835][ T7074] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 184.571936][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.588246][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.870815][ T24] usb 3-1: Product: syz [ 184.875649][ T24] usb 3-1: Manufacturer: syz [ 184.899441][ T24] usb 3-1: SerialNumber: syz [ 185.033055][ T24] usb 3-1: config 0 descriptor?? [ 185.254875][ T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.374371][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 186.839121][ T7092] input: syz1 as /devices/virtual/input/input14 [ 186.994959][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 187.008235][ T24] usb 3-1: USB disconnect, device number 16 [ 187.158260][ T5910] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 187.340493][ T5910] usb 2-1: config 0 has an invalid interface number: 133 but max is 1 [ 187.358202][ T5910] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 187.367210][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.408200][ T5910] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 187.448200][ T5910] usb 2-1: config 0 has no interface number 0 [ 187.493803][ T5910] usb 2-1: config 0 interface 133 altsetting 2 endpoint 0x4 has an invalid bInterval 69, changing to 7 [ 187.537035][ T5910] usb 2-1: config 0 interface 133 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 187.583986][ T5910] usb 2-1: config 0 interface 133 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.604244][ T5910] usb 2-1: config 0 interface 133 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 187.685615][ T29] audit: type=1326 audit(1774999929.232:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7100 comm="syz.4.333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f155779c819 code=0x0 [ 187.728038][ T5910] usb 2-1: config 0 interface 133 has no altsetting 0 [ 187.763841][ T5910] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=90.92 [ 187.773544][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.782811][ T5910] usb 2-1: Product: syz [ 187.787341][ T5910] usb 2-1: Manufacturer: syz [ 187.792682][ T5910] usb 2-1: SerialNumber: syz [ 187.825196][ T5910] usb 2-1: config 0 descriptor?? [ 188.043941][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.056039][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.059468][ T5939] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 188.082658][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.289477][ T5939] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 188.302738][ T5939] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 188.339182][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.543575][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 188.627698][ T5939] usb 1-1: config 1 has no interface number 0 [ 188.679269][ T5939] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 188.749455][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.767174][ T5910] usb 2-1: USB disconnect, device number 29 [ 188.845356][ T6649] udevd[6649]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.133/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.934924][ T5939] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 189.237773][ T7122] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 190.438410][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 190.603011][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 190.611874][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 190.636722][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.677543][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 190.744129][ T24] usb 5-1: config 1 has no interface number 0 [ 190.758404][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 190.798228][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.843771][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 190.962876][ T5907] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 191.008272][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 191.024061][ T24] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 191.044121][ T24] snd_usb_pod 5-1:1.1: invalid control EP [ 191.064384][ T24] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 191.078376][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 191.098808][ T24] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 191.128426][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 191.162151][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.178782][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.187199][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 191.237854][ T5882] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 191.259804][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.278853][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.299680][ T5907] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 191.322776][ T7135] syzkaller0: entered promiscuous mode [ 191.331103][ T5882] usb 3-1: config 0 has no interface number 0 [ 191.331122][ T7135] syzkaller0: entered allmulticast mode [ 191.345798][ T5907] usb 4-1: can't read configurations, error -71 [ 191.370736][ T5882] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.395535][ T5939] snd_usb_pod 1-1:1.1: set_interface failed [ 191.415018][ T24] usb 5-1: USB disconnect, device number 17 [ 191.422883][ T5939] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 191.431949][ T7135] tipc: Started in network mode [ 191.433842][ T5939] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 191.449369][ T5882] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 191.451971][ T7135] tipc: Node identity e621ff4bb1ea, cluster identity 4711 [ 191.458833][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.476703][ T5882] usb 3-1: Product: syz [ 191.489188][ T7135] tipc: Enabled bearer , priority 0 [ 191.513670][ T5882] usb 3-1: Manufacturer: syz [ 191.520187][ T5939] usb 1-1: USB disconnect, device number 21 [ 191.530967][ T5882] usb 3-1: SerialNumber: syz [ 191.551173][ T7134] tipc: Resetting bearer [ 191.567659][ T5882] usb 3-1: config 0 descriptor?? [ 191.592000][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input15 [ 191.606856][ T7134] tipc: Disabling bearer [ 191.685589][ T7137] netlink: 'syz.0.343': attribute type 10 has an invalid length. [ 191.706902][ T7137] veth0_vlan: left promiscuous mode [ 191.718030][ T7137] veth0_vlan: entered promiscuous mode [ 191.761826][ T7137] team0: Device veth0_vlan failed to register rx_handler [ 191.791462][ T7132] FAULT_INJECTION: forcing a failure. [ 191.791462][ T7132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.831777][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.2.341 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.831812][ T7132] Tainted: [L]=SOFTLOCKUP [ 191.831819][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.831831][ T7132] Call Trace: [ 191.831839][ T7132] [ 191.831846][ T7132] dump_stack_lvl+0xe8/0x150 [ 191.831877][ T7132] should_fail_ex+0x412/0x560 [ 191.831910][ T7132] strncpy_from_user+0x36/0x2b0 [ 191.831941][ T7132] do_getname+0x77/0x250 [ 191.831971][ T7132] do_sys_openat2+0xca/0x200 [ 191.832003][ T7132] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.832031][ T7132] ? ksys_write+0x242/0x270 [ 191.832055][ T7132] ? __pfx_ksys_write+0x10/0x10 [ 191.832078][ T7132] __x64_sys_openat+0x138/0x170 [ 191.832108][ T7132] do_syscall_64+0x14d/0xf80 [ 191.832130][ T7132] ? trace_irq_disable+0x3b/0x150 [ 191.832145][ T7132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.832164][ T7132] ? clear_bhb_loop+0x40/0x90 [ 191.832187][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.832203][ T7132] RIP: 0033:0x7f794519c819 [ 191.832221][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.832236][ T7132] RSP: 002b:00007f7946091028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.832257][ T7132] RAX: ffffffffffffffda RBX: 00007f7945415fa0 RCX: 00007f794519c819 [ 191.832271][ T7132] RDX: 0000000000000140 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 191.832284][ T7132] RBP: 00007f7946091090 R08: 0000000000000000 R09: 0000000000000000 [ 191.832295][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.832305][ T7132] R13: 00007f7945416038 R14: 00007f7945415fa0 R15: 00007f794553fa48 [ 191.832334][ T7132] [ 191.833380][ T5939] usb 3-1: USB disconnect, device number 17 [ 191.833398][ T7139] No such timeout policy "syz0" [ 191.892690][ T7141] program syz.3.345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.357795][ T7150] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 192.428409][ T5907] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 192.548572][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 192.595453][ T5907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.621621][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.718324][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 193.228596][ T5907] usb 4-1: Product: syz [ 193.233532][ T5907] usb 4-1: Manufacturer: syz [ 193.257779][ T24] usb 2-1: config 119 has an invalid interface number: 51 but max is 1 [ 193.273868][ T5907] usb 4-1: SerialNumber: syz [ 193.284198][ T24] usb 2-1: config 119 has an invalid interface number: 85 but max is 1 [ 193.300286][ T5907] usb 4-1: config 0 descriptor?? [ 193.326915][ T24] usb 2-1: config 119 has no interface number 0 [ 193.341407][ T24] usb 2-1: config 119 has no interface number 1 [ 193.365755][ T24] usb 2-1: config 119 interface 51 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 193.397178][ T24] usb 2-1: config 119 interface 51 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 193.411885][ T24] usb 2-1: config 119 interface 51 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 193.428245][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 193.453740][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 193.477237][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 193.501997][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 193.534259][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 193.558007][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 193.559731][ T5907] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.570714][ T24] usb 2-1: config 119 interface 51 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 193.642858][ T24] usb 2-1: config 119 interface 51 altsetting 7 endpoint 0xC has invalid wMaxPacketSize 0 [ 193.670378][ T29] audit: type=1326 audit(1774999935.282:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz.2.352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f794519c819 code=0x0 [ 193.696584][ T24] usb 2-1: config 119 interface 51 altsetting 7 bulk endpoint 0xC has invalid maxpacket 0 [ 193.718335][ T24] usb 2-1: config 119 interface 51 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 193.730950][ T5939] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 193.731473][ T24] usb 2-1: config 119 interface 85 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 193.756386][ T24] usb 2-1: config 119 interface 51 has no altsetting 0 [ 193.766568][ T24] usb 2-1: config 119 interface 85 has no altsetting 0 [ 193.777497][ T24] usb 2-1: New USB device found, idVendor=0408, idProduct=ea03, bcdDevice=42.f1 [ 193.787615][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.796468][ T24] usb 2-1: Product: х [ 193.801164][ T24] usb 2-1: Manufacturer: 鉹⮄볞⾔綐ᵃµꁼ尮쓺຦妴⌨ꖖ즲㻹쳾䛹⡖痱╜꣙೯댖졺诓䷠鶗뫺ꀝʧ툓▂鐹᪺蜯멷됈녇㤺ጨ쮋ꍍ串Š橗艈῎㈒蛀຾磭✞혤쎲䧌䍥뷖ᚩ䙯⊺䛻줭舩ဃ맇侫椢紮냸 [ 193.833743][ T24] usb 2-1: SerialNumber: syz [ 193.853139][ T24] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 193.866324][ T24] usb 2-1: no configuration chosen from 1 choice [ 194.563786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.572913][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.628670][ T5910] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.658256][ T5939] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 194.778336][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 194.815720][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.832563][ T5939] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 194.836825][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.858079][ T5939] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 194.860899][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.867319][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.867347][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 194.885738][ T5910] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 194.908828][ T5939] usb 1-1: config 1 has no interface number 0 [ 194.915115][ T5939] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 194.934258][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.942934][ T5910] usb 5-1: can't read configurations, error -71 [ 194.961492][ T5939] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 195.208887][ T5907] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.312386][ T5907] usb 4-1: USB disconnect, device number 27 [ 195.340393][ T24] usb 2-1: USB disconnect, device number 30 [ 195.802768][ T29] audit: type=1326 audit(1774999937.382:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 195.863581][ T29] audit: type=1326 audit(1774999937.382:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 195.924618][ T29] audit: type=1326 audit(1774999937.382:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 195.968409][ T5907] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 195.972591][ T29] audit: type=1326 audit(1774999937.382:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.000308][ T29] audit: type=1326 audit(1774999937.382:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.027798][ T29] audit: type=1326 audit(1774999937.382:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.051169][ T29] audit: type=1326 audit(1774999937.382:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.075668][ T29] audit: type=1326 audit(1774999937.382:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.106261][ T29] audit: type=1326 audit(1774999937.382:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f155779c819 code=0x7ffc0000 [ 196.151634][ T5907] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 196.161766][ T5907] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 196.172003][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.183338][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 196.194027][ T5907] usb 2-1: config 1 has no interface number 0 [ 196.200602][ T5882] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 196.212392][ T5907] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 196.225366][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.260661][ T5907] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 196.360116][ T5882] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 196.370587][ T5882] usb 4-1: config 1 interface 0 has no altsetting 0 [ 196.385941][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 196.395690][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.411031][ T5882] usb 4-1: Product: syz [ 196.415509][ T5882] usb 4-1: Manufacturer: 蛟ꉠጺ因쯆覠䏜ﱋ擢瘝꺴霎펍륑灳鑾碑ᙟ욊폇龜癫㳐뢉쪫ﾽ炍扩ᜤ黫嬤Ҳ㕼쾍腊궛Έ瀒팒냚勠锨㢄 [ 196.434933][ T5882] usb 4-1: SerialNumber: syz [ 196.445215][ T7196] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 196.574740][ T5907] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 196.585188][ T5907] snd_usb_pod 2-1:1.1: invalid control EP [ 196.593028][ T5907] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 196.607096][ T5907] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 196.615375][ T5907] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 197.010860][ T5939] snd_usb_pod 1-1:1.1: set_interface failed [ 197.017458][ T5882] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 197.033545][ T5939] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 197.057623][ T5882] usb 4-1: USB disconnect, device number 28 [ 197.064112][ T5939] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 197.080095][ T5898] usb 2-1: USB disconnect, device number 31 [ 197.098100][ T5939] usb 1-1: USB disconnect, device number 23 [ 197.253048][ T7210] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 197.468280][ T5898] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 197.498286][ T5882] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 197.633601][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 197.644793][ T5898] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 197.660749][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.666754][ T5882] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.682353][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.683703][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.713016][ T5882] usb 4-1: Product: syz [ 197.722985][ T5882] usb 4-1: Manufacturer: syz [ 197.735019][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 197.738573][ T5882] usb 4-1: SerialNumber: syz [ 197.767660][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.800065][ T5898] usb 5-1: config 0 descriptor?? [ 197.819061][ T5882] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.862907][ T5939] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.058332][ T5912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 198.122530][ T5882] usb 4-1: USB disconnect, device number 29 [ 198.248329][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 198.269134][ T5907] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 198.269533][ T5912] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 198.310733][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.343090][ T5912] usb 3-1: config 0 has no interface number 0 [ 198.357799][ T5912] usb 3-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.380487][ T5912] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 198.385797][ T7229] program syz.3.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.398197][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.411362][ T5912] usb 3-1: Product: syz [ 198.415804][ T5912] usb 3-1: Manufacturer: syz [ 198.423325][ T5912] usb 3-1: SerialNumber: syz [ 198.428401][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 198.430061][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 198.441648][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.445295][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.452180][ T5907] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 198.460453][ T5912] usb 3-1: config 0 descriptor?? [ 198.492415][ T5907] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 198.499214][ T5898] usb 5-1: USB disconnect, device number 20 [ 198.513337][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input16 [ 198.523014][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.546413][ T5907] usb 2-1: Product: syz [ 198.551469][ T5907] usb 2-1: Manufacturer: syz [ 198.556657][ T5907] usb 2-1: SerialNumber: syz [ 198.726133][ T7215] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 199.004121][ T7217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.016949][ T7217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.031252][ T5907] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 199.041401][ T5907] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.109735][ T7238] fuse: Bad value for 'fd' [ 199.119623][ T7238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.372'. [ 199.164343][ T5939] usb 4-1: Service connection timeout for: 256 [ 199.171669][ T5939] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 199.186819][ T5939] ath9k_htc: Failed to initialize the device [ 199.203754][ T5882] usb 4-1: ath9k_htc: USB layer deinitialized [ 199.233103][ T5907] usb 2-1: USB disconnect, device number 32 [ 199.326223][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.518510][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.528502][ T5882] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 199.680294][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 199.685362][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.695895][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.840996][ T5882] usb 4-1: Product: syz [ 199.857343][ T5882] usb 4-1: Manufacturer: syz [ 199.914553][ T5882] usb 4-1: SerialNumber: syz [ 199.921869][ T5898] usb 5-1: config 7 has an invalid interface number: 208 but max is 0 [ 199.950077][ T5898] usb 5-1: config 7 has no interface number 0 [ 199.977203][ T5882] usb 4-1: config 0 descriptor?? [ 199.987351][ T5898] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=5f.ef [ 199.999179][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.040487][ T5898] usb 5-1: Product: syz [ 200.056125][ T5898] usb 5-1: Manufacturer: syz [ 200.073490][ T5898] usb 5-1: SerialNumber: syz [ 200.160869][ T5914] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 200.216222][ T5882] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.320837][ T5898] appletouch 5-1:7.208: Could not find int-in endpoint [ 200.328021][ T5898] appletouch 5-1:7.208: probe with driver appletouch failed with error -5 [ 200.342846][ T5914] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 200.344491][ T5898] usbhid 5-1:7.208: couldn't find an input interrupt endpoint [ 200.355811][ T5914] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 200.396806][ T5898] usb 5-1: USB disconnect, device number 21 [ 200.420558][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.488276][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 200.514710][ T5914] usb 2-1: config 1 has no interface number 0 [ 200.542426][ T5914] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 200.556631][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.595888][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 201.072205][ T10] usb 3-1: USB disconnect, device number 18 [ 201.359580][ T5907] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 201.399820][ T7258] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 201.531559][ T7263] syzkaller0: entered promiscuous mode [ 201.537510][ T7263] syzkaller0: entered allmulticast mode [ 201.563132][ T5907] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 201.574630][ T5907] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 201.583833][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.594261][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 201.604549][ T5907] usb 1-1: config 1 has no interface number 0 [ 201.739987][ T5882] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 201.757403][ T5907] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 201.770777][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.795153][ T5882] usb 4-1: USB disconnect, device number 30 [ 201.957203][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 202.349724][ T5907] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 202.359353][ T5907] snd_usb_pod 1-1:1.1: invalid control EP [ 202.367944][ T5907] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 202.374992][ T5907] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 202.383439][ T5907] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 202.993491][ T5914] snd_usb_pod 2-1:1.1: set_interface failed [ 203.006617][ T24] usb 1-1: USB disconnect, device number 24 [ 203.118071][ T7271] vivid-006: disconnect [ 203.179677][ T7272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.193268][ T7272] vivid-006: reconnect [ 203.338941][ T5914] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 203.422775][ T5914] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 203.471509][ T5914] usb 2-1: USB disconnect, device number 33 [ 203.558228][ T5907] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 203.768516][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 203.773222][ T5898] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 203.821416][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 203.849121][ T5907] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 195, changing to 7 [ 203.862008][ T5914] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 203.995169][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 204.016274][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 204.060015][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 204.087238][ T5907] usb 4-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 204.088714][ T5898] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 204.118188][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.132078][ T5898] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 204.158417][ T5898] usb 5-1: Manufacturer: syz [ 204.185900][ T7289] fuse: Bad value for 'fd' [ 204.195883][ T7289] netlink: 32 bytes leftover after parsing attributes in process `syz.0.385'. [ 204.242863][ T5898] usb 5-1: config 0 descriptor?? [ 204.243087][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 204.269736][ T5898] smsusb:smsusb_probe: board id=9, interface number 0 [ 204.301304][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.312583][ T5898] smsusb:smsusb_probe: Device initialized with return code -19 [ 204.331885][ T5907] usb 4-1: Product: syz [ 204.336350][ T5907] usb 4-1: Manufacturer: syz [ 204.369628][ T5914] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 204.382827][ T5907] usb 4-1: SerialNumber: syz [ 204.505544][ T5914] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 204.526513][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.550286][ T5914] usb 2-1: Product: syz [ 204.578427][ T5914] usb 2-1: Manufacturer: syz [ 204.580739][ T5898] usb 5-1: USB disconnect, device number 22 [ 204.584486][ T5914] usb 2-1: SerialNumber: syz [ 205.055773][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.099100][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.122978][ T5914] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 205.213047][ T5914] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.428313][ T5898] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 205.581580][ T5914] usb 2-1: USB disconnect, device number 34 [ 205.608679][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 205.635834][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.678660][ T5898] usb 5-1: config 17 has an invalid interface number: 9 but max is 1 [ 205.694774][ T5898] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 205.697650][ T5907] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 205.763976][ T6919] udevd[6919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.771721][ T5898] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 205.805113][ T5907] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 205.862754][ T5898] usb 5-1: config 17 has no interface number 0 [ 205.918555][ T5898] usb 5-1: config 17 interface 9 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.990705][ T5898] usb 5-1: config 17 interface 9 has no altsetting 0 [ 206.028560][ T5898] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 206.056824][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.091373][ T5898] usb 5-1: Product: syz [ 206.095957][ T5898] usb 5-1: Manufacturer: syz [ 206.146872][ T5907] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 206.148448][ T5898] usb 5-1: SerialNumber: syz [ 206.197609][ T5907] usb 4-1: USB disconnect, device number 31 [ 206.225006][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.234119][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.320683][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.490724][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.551326][ T7323] program syz.1.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.565139][ T7326] fuse: Unknown parameter 'fd<0x0000000000000004' [ 206.713740][ T5898] snd-usb-audio 5-1:17.9: probe with driver snd-usb-audio failed with error -2 [ 206.749666][ T7333] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 206.763069][ T5898] usb 5-1: USB disconnect, device number 23 [ 206.804987][ T6264] udevd[6264]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.9/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 206.838623][ T5914] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 206.848322][ T5907] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 206.884979][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 206.885240][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 206.891362][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 206.891393][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 206.891418][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 207.013530][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.021134][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 207.039688][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.059873][ T5907] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.089509][ T5914] usb 4-1: config 0 descriptor?? [ 207.094713][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.115113][ T5907] usb 2-1: Product: syz [ 207.127417][ T5907] usb 2-1: Manufacturer: syz [ 207.136191][ T5907] usb 2-1: SerialNumber: syz [ 207.153609][ T5907] usb 2-1: config 0 descriptor?? [ 207.392797][ T5907] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.588507][ T5882] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 207.711574][ T5914] video4linux radio48: keene_cmd_main failed (-71) [ 207.734430][ T5914] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 207.771177][ T5914] usb 4-1: USB disconnect, device number 32 [ 207.802485][ T5882] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 207.823916][ T5882] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.844998][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.857941][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.882778][ T5882] usb 3-1: config 1 has no interface number 0 [ 207.892242][ T5882] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.902615][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.966448][ T5882] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 207.991791][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 208.150644][ T796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.193220][ T796] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.235829][ T796] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 208.263178][ T796] usb 1-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30 [ 208.312816][ T796] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 208.359124][ T796] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 208.377491][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.388482][ T796] usb 1-1: Product: syz [ 208.394297][ T796] usb 1-1: Manufacturer: syz [ 208.410976][ T796] usb 1-1: SerialNumber: syz [ 208.473457][ T5914] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 208.628668][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 208.655240][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 208.666534][ T5914] usb 5-1: config 4 interface 0 has no altsetting 0 [ 208.684853][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 208.692566][ T5914] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 208.705776][ T5914] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 208.732661][ T796] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.745276][ T5882] snd_usb_pod 3-1:1.1: set_interface failed [ 208.764684][ T5882] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 208.775550][ T5882] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 208.785670][ T5914] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 208.793699][ T796] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 208.812301][ T5882] usb 3-1: USB disconnect, device number 19 [ 208.829548][ T5939] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 208.844522][ T5907] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.867028][ T5914] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.892702][ T5907] usb 2-1: USB disconnect, device number 35 [ 208.912211][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 208.935514][ T5914] usb 5-1: media controller created [ 208.969355][ T7362] usb 5-1: dvb_usb_au6610: wlen=245, aborting [ 208.983861][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.994330][ T5939] usb 4-1: device descriptor read/64, error -71 [ 209.048874][ T796] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 209.050827][ T5914] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.081701][ T796] usb 1-1: USB disconnect, device number 25 [ 209.129855][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.183021][ T5914] usb 5-1: USB disconnect, device number 24 [ 209.250682][ T5939] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 209.398551][ T5939] usb 4-1: device descriptor read/64, error -71 [ 209.519768][ T5939] usb usb4-port1: attempt power cycle [ 209.678709][ T796] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.766191][ T7393] fuse: Bad value for 'fd' [ 209.805820][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.4.403'. [ 209.878239][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 209.896891][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.911001][ T5939] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 209.916947][ T796] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 209.987737][ T5939] usb 4-1: device descriptor read/8, error -71 [ 209.994980][ T796] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 210.004289][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.022849][ T796] usb 3-1: Product: syz [ 210.037450][ T796] usb 3-1: Manufacturer: syz [ 210.047571][ T796] usb 3-1: SerialNumber: syz [ 210.201491][ T5898] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 210.258279][ T5939] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 210.279616][ T5939] usb 4-1: device descriptor read/8, error -71 [ 210.369947][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 210.378393][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.399414][ T5939] usb usb4-port1: unable to enumerate USB device [ 210.411257][ T5898] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 210.455576][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.490444][ T7381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.500514][ T7381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.527589][ T5898] usb 2-1: Product: syz [ 210.541142][ T5898] usb 2-1: Manufacturer: syz [ 210.549476][ T796] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 210.567543][ T5898] usb 2-1: SerialNumber: syz [ 210.577915][ T796] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 210.619942][ T5898] usb 2-1: config 0 descriptor?? [ 210.658669][ T5898] usb 2-1: bad CDC descriptors [ 210.681212][ T5898] usb 2-1: unsupported MDLM descriptors [ 210.699306][ T5898] cdc_acm 2-1:0.0: Zero length descriptor references [ 210.706234][ T5898] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 210.827690][ T796] usb 3-1: USB disconnect, device number 20 [ 210.879353][ T7420] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 210.932831][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.448361][ T5910] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 211.636622][ T5910] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 211.646190][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.658708][ T5910] usb 1-1: Product: syz [ 211.663326][ T5910] usb 1-1: Manufacturer: syz [ 211.669212][ T5910] usb 1-1: SerialNumber: syz [ 211.687948][ T5910] usb 1-1: config 0 descriptor?? [ 211.707242][ T5910] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 211.715002][ T7443] program syz.4.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.725479][ T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 211.788512][ T796] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 211.881733][ T24] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 211.890630][ T24] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 211.899952][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.910717][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 211.920221][ T24] usb 3-1: config 1 has no interface number 0 [ 211.926398][ T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 211.935900][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.958288][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 211.965371][ T796] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 211.974848][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 211.981552][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.992188][ T796] usb 4-1: config 0 has no interface number 0 [ 211.999678][ T796] usb 4-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.016693][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 212.026906][ T5907] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 212.028556][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.098643][ T796] usb 4-1: Product: syz [ 212.104214][ T796] usb 4-1: Manufacturer: syz [ 212.110205][ T796] usb 4-1: SerialNumber: syz [ 212.125251][ T796] usb 4-1: config 0 descriptor?? [ 212.203943][ T24] snd_usb_pod 3-1:1.1: set_interface failed [ 212.215749][ T796] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input17 [ 212.225653][ T24] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 212.233976][ T5910] gspca_stk1135: reg_w 0x2 err -110 [ 212.240784][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.247452][ T24] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 212.258660][ T5910] gspca_stk1135: Sensor write failed [ 212.269173][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.280131][ T24] usb 3-1: USB disconnect, device number 21 [ 212.282792][ T5907] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.286544][ T5910] gspca_stk1135: Sensor write failed [ 212.408819][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.412557][ T7439] FAULT_INJECTION: forcing a failure. [ 212.412557][ T7439] name failslab, interval 1, probability 0, space 0, times 0 [ 212.446249][ T5907] usb 5-1: Product: syz [ 212.743459][ T7445] xt_cgroup: invalid path, errno=-2 [ 212.761298][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.768447][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.3.410 Tainted: G L syzkaller #0 PREEMPT(full) [ 212.768482][ T7439] Tainted: [L]=SOFTLOCKUP [ 212.768488][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 212.768500][ T7439] Call Trace: [ 212.768508][ T7439] [ 212.768515][ T7439] dump_stack_lvl+0xe8/0x150 [ 212.768551][ T7439] should_fail_ex+0x412/0x560 [ 212.768586][ T7439] should_failslab+0xa8/0x100 [ 212.768613][ T7439] __kmalloc_cache_noprof+0x88/0x660 [ 212.768637][ T7439] ? mousedev_open+0xd4/0x4a0 [ 212.768670][ T7439] mousedev_open+0xd4/0x4a0 [ 212.768698][ T7439] ? do_raw_spin_unlock+0xf5/0x210 [ 212.768724][ T7439] chrdev_open+0x4cd/0x5e0 [ 212.768753][ T7439] ? __pfx_chrdev_open+0x10/0x10 [ 212.768775][ T7439] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 212.768801][ T7439] ? __pfx_chrdev_open+0x10/0x10 [ 212.768822][ T7439] do_dentry_open+0x785/0x14e0 [ 212.768860][ T7439] vfs_open+0x3b/0x340 [ 212.768883][ T7439] ? path_openat+0x2df0/0x3860 [ 212.768906][ T7439] path_openat+0x2e08/0x3860 [ 212.768939][ T7439] ? __pfx_stack_trace_save+0x10/0x10 [ 212.768963][ T7439] ? stack_depot_save_flags+0x33/0x810 [ 212.769009][ T7439] ? __pfx_path_openat+0x10/0x10 [ 212.769027][ T7439] ? __x64_sys_openat+0x138/0x170 [ 212.769051][ T7439] ? do_syscall_64+0x14d/0xf80 [ 212.769074][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.769101][ T7439] ? __lock_acquire+0x6b5/0x2cf0 [ 212.769130][ T7439] do_file_open+0x23e/0x4a0 [ 212.769155][ T7439] ? __pfx_do_file_open+0x10/0x10 [ 212.769196][ T7439] ? _raw_spin_unlock+0x28/0x50 [ 212.769214][ T7439] ? alloc_fd+0x64b/0x6c0 [ 212.769250][ T7439] do_sys_openat2+0x113/0x200 [ 212.769278][ T7439] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.769305][ T7439] ? ksys_write+0x242/0x270 [ 212.769327][ T7439] ? __pfx_ksys_write+0x10/0x10 [ 212.769350][ T7439] __x64_sys_openat+0x138/0x170 [ 212.769381][ T7439] do_syscall_64+0x14d/0xf80 [ 212.769402][ T7439] ? trace_irq_disable+0x3b/0x150 [ 212.769418][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.769435][ T7439] ? clear_bhb_loop+0x40/0x90 [ 212.769457][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.769475][ T7439] RIP: 0033:0x7f069899c819 [ 212.769494][ T7439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.769510][ T7439] RSP: 002b:00007f0699944028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.769531][ T7439] RAX: ffffffffffffffda RBX: 00007f0698c15fa0 RCX: 00007f069899c819 [ 212.769544][ T7439] RDX: 0000000000000140 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 212.769557][ T7439] RBP: 00007f0699944090 R08: 0000000000000000 R09: 0000000000000000 [ 212.769568][ T7439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.769579][ T7439] R13: 00007f0698c16038 R14: 00007f0698c15fa0 R15: 00007f0698d3fa48 [ 212.769608][ T7439] [ 212.769827][ T5907] usb 5-1: Manufacturer: syz [ 212.782739][ T24] usb 4-1: USB disconnect, device number 37 [ 213.088675][ T5910] gspca_stk1135: Sensor read failed [ 213.094054][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 213.100727][ T5910] gspca_stk1135: Sensor read failed [ 213.106238][ T5910] gspca_stk1135: Detected sensor type unknown (0x0) [ 213.113892][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 213.121115][ T5910] gspca_stk1135: Sensor read failed [ 213.126573][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 213.133233][ T5910] gspca_stk1135: Sensor read failed [ 213.138571][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 213.145228][ T5910] gspca_stk1135: Sensor write failed [ 213.150930][ T5910] gspca_stk1135: serial bus timeout: status=0x00 [ 213.157305][ T5910] gspca_stk1135: Sensor write failed [ 213.162969][ T5910] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 213.178824][ T5907] usb 5-1: SerialNumber: syz [ 213.374141][ T5907] usb 5-1: config 0 descriptor?? [ 213.557836][ T5910] usb 2-1: USB disconnect, device number 36 [ 213.600165][ T5907] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 213.939893][ T7456] fuse: Bad value for 'fd' [ 213.976651][ T7456] ipip0: entered promiscuous mode [ 213.982177][ T7456] ipip0: entered allmulticast mode [ 214.178399][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 214.288549][ T5910] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 214.330539][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 214.349883][ T24] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 214.371585][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 214.393844][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 214.408020][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.434957][ T24] usb 2-1: Product: syz [ 214.444235][ T24] usb 2-1: Manufacturer: syz [ 214.453569][ T24] usb 2-1: SerialNumber: syz [ 214.486141][ T5910] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 214.497089][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.557444][ T7462] fuse: Bad value for 'fd' [ 214.574133][ T7462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.416'. [ 214.607654][ T5910] usb 4-1: Product: syz [ 214.615404][ T5910] usb 4-1: Manufacturer: syz [ 214.624955][ T5910] usb 4-1: SerialNumber: syz [ 214.636787][ T5910] usb 4-1: config 0 descriptor?? [ 214.656683][ T5910] hub 4-1:0.0: bad descriptor, ignoring hub [ 214.672418][ T5910] hub 4-1:0.0: probe with driver hub failed with error -5 [ 214.865715][ T5910] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 214.882358][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.896173][ T5910] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 214.910312][ T5910] usb 4-1: media controller created [ 215.037376][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.083734][ T5907] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 215.198996][ T5907] usb 5-1: USB disconnect, device number 25 [ 215.355444][ T5914] usb 1-1: USB disconnect, device number 26 [ 215.575999][ T5910] DVB: Unable to find symbol dib7000p_attach() [ 215.582672][ T5910] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 215.703089][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 215.717785][ T5910] rc_core: IR keymap rc-dib0700-rc5 not found [ 215.769273][ T5910] Registered IR keymap rc-empty [ 215.821377][ T5910] dvb-usb: could not initialize remote control. [ 215.845933][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 216.999291][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 217.053073][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 217.090311][ T24] usb 2-1: USB disconnect, device number 37 [ 217.318762][ T5910] usb 4-1: USB disconnect, device number 38 [ 217.386038][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 217.431354][ T7490] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 217.698396][ T5910] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 217.718461][ T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 217.858845][ T5914] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 217.880112][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.891640][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.906205][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 217.915140][ T5910] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.925028][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 217.934761][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.943275][ T5910] usb 4-1: SerialNumber: syz [ 217.948290][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.960615][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 217.972110][ T24] usb 1-1: config 1 has no interface number 0 [ 217.979051][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 217.989359][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.018880][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 218.020527][ T5914] usb 2-1: Using ep0 maxpacket: 32 [ 218.033105][ T5914] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 218.042810][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.053538][ T5914] usb 2-1: config 0 has no interface number 0 [ 218.060202][ T5914] usb 2-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.082911][ T5914] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 218.088372][ T5898] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 218.093079][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.118673][ T5914] usb 2-1: Product: syz [ 218.124512][ T5914] usb 2-1: Manufacturer: syz [ 218.154266][ T5914] usb 2-1: SerialNumber: syz [ 218.168995][ T5914] usb 2-1: config 0 descriptor?? [ 218.182836][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input19 [ 218.226633][ T24] snd_usb_pod 1-1:1.1: set_interface failed [ 218.243290][ T5910] usb 4-1: 0:2 : does not exist [ 218.256602][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 218.279321][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 218.302100][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.321319][ T24] usb 1-1: USB disconnect, device number 27 [ 218.338331][ T5898] usb 3-1: not running at top speed; connect to a high speed hub [ 218.368562][ T5898] usb 3-1: config 12 has an invalid interface number: 173 but max is 1 [ 218.377234][ T5898] usb 3-1: config 12 has an invalid interface number: 173 but max is 1 [ 218.409269][ T7494] FAULT_INJECTION: forcing a failure. [ 218.409269][ T7494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.423293][ T5898] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 218.435738][ T5910] usb 4-1: USB disconnect, device number 39 [ 218.438932][ T7494] CPU: 0 UID: 0 PID: 7494 Comm: syz.1.424 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.438964][ T7494] Tainted: [L]=SOFTLOCKUP [ 218.438970][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.438981][ T7494] Call Trace: [ 218.438988][ T7494] [ 218.438996][ T7494] dump_stack_lvl+0xe8/0x150 [ 218.439027][ T7494] should_fail_ex+0x412/0x560 [ 218.439060][ T7494] _copy_to_user+0x31/0xb0 [ 218.439084][ T7494] simple_read_from_buffer+0xe1/0x170 [ 218.439116][ T7494] proc_fail_nth_read+0x1bb/0x230 [ 218.439146][ T7494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.439175][ T7494] ? rw_verify_area+0x2a6/0x4d0 [ 218.439194][ T7494] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.439260][ T7494] vfs_read+0x20c/0xa70 [ 218.439278][ T7494] ? fdget_pos+0x246/0x320 [ 218.439300][ T7494] ? __pfx___mutex_lock+0x10/0x10 [ 218.439325][ T7494] ? __pfx_vfs_read+0x10/0x10 [ 218.439346][ T7494] ? __fget_files+0x2a/0x420 [ 218.439366][ T7494] ? __fget_files+0x3a0/0x420 [ 218.439381][ T7494] ? __fget_files+0x2a/0x420 [ 218.439406][ T7494] ksys_read+0x150/0x270 [ 218.439428][ T7494] ? __pfx_ksys_read+0x10/0x10 [ 218.439459][ T7494] do_syscall_64+0x14d/0xf80 [ 218.439482][ T7494] ? trace_irq_disable+0x3b/0x150 [ 218.439498][ T7494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.439517][ T7494] ? clear_bhb_loop+0x40/0x90 [ 218.439540][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.439558][ T7494] RIP: 0033:0x7f343355d04e [ 218.439575][ T7494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.439591][ T7494] RSP: 002b:00007f34343a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.439611][ T7494] RAX: ffffffffffffffda RBX: 00007f34343a86c0 RCX: 00007f343355d04e [ 218.439625][ T7494] RDX: 000000000000000f RSI: 00007f34343a80a0 RDI: 0000000000000004 [ 218.439636][ T7494] RBP: 00007f34343a8090 R08: 0000000000000000 R09: 0000000000000000 [ 218.439647][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.439658][ T7494] R13: 00007f3433816038 R14: 00007f3433815fa0 R15: 00007f343393fa48 [ 218.439688][ T7494] [ 218.665697][ T5898] usb 3-1: config 12 has no interface number 0 [ 218.672156][ T5898] usb 3-1: config 12 interface 173 has no altsetting 1 [ 218.687265][ T5907] usb 2-1: USB disconnect, device number 38 [ 218.695550][ T5898] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 218.706207][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.718807][ T5898] usb 3-1: Product: syz [ 218.723662][ T5898] usb 3-1: Manufacturer: syz [ 218.735160][ T5898] usb 3-1: SerialNumber: syz [ 219.105127][ T7506] program syz.3.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.118362][ T5907] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 219.308201][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 219.316670][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.338234][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.359615][ T5907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 219.379189][ T5910] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 219.415029][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.442234][ T5907] usb 2-1: config 0 descriptor?? [ 219.557424][ T5910] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.582496][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.631797][ T5910] usb 4-1: Product: syz [ 219.644570][ T5910] usb 4-1: Manufacturer: syz [ 219.669656][ T5910] usb 4-1: SerialNumber: syz [ 219.713940][ T5910] usb 4-1: config 0 descriptor?? [ 219.762213][ T7520] autofs4:pid:7520:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.100), cmd(0xc018937e) [ 219.885609][ T7520] autofs4:pid:7520:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 219.905923][ T5907] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 219.937242][ T5910] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.991201][ T7520] syzkaller1: entered promiscuous mode [ 219.997548][ T7520] syzkaller1: entered allmulticast mode [ 220.213049][ T5889] usb 2-1: USB disconnect, device number 39 [ 220.240006][ T7524] fido_id[7524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:2D5A.0004/report_descriptor': No such file or directory [ 220.472173][ T7532] fuse: Bad value for 'fd' [ 220.486371][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.0.435'. [ 220.823080][ T7535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.559757][ T5910] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 221.726851][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 221.726872][ T29] audit: type=1326 audit(1774999963.292:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7545 comm="syz.1.439" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f343359c819 code=0x0 [ 221.760520][ T5910] usb 4-1: USB disconnect, device number 40 [ 222.093562][ T7554] loop4: detected capacity change from 0 to 7 [ 222.229070][ T7554] Dev loop4: unable to read RDB block 7 [ 222.236004][ T7554] loop4: unable to read partition table [ 222.468695][ T7554] loop4: partition table beyond EOD, truncated [ 222.475578][ T7554] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 222.718802][ T7562] tmpfs: Unknown parameter '00000000000000000004' [ 222.865119][ T5898] usb 3-1: USB disconnect, device number 22 [ 223.168394][ T796] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 223.328547][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 223.363554][ T796] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 223.373051][ T796] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 223.390655][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.445322][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 223.496713][ T796] usb 4-1: config 1 has no interface number 0 [ 223.508898][ T796] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 223.523792][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.537002][ T5898] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.551879][ T5898] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.590470][ T5898] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 223.613643][ T5898] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 223.624103][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.639610][ T796] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 223.670659][ T7569] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 223.754963][ T7584] program syz.1.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.850332][ T796] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 223.863742][ T796] snd_usb_pod 4-1:1.1: invalid control EP [ 223.876228][ T796] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 223.889089][ T796] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 223.907966][ T796] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 224.123360][ T7588] fuse: Bad value for 'fd' [ 224.133033][ T7588] netlink: 32 bytes leftover after parsing attributes in process `syz.4.453'. [ 224.289382][ T24] usb 4-1: USB disconnect, device number 41 [ 224.316669][ T5882] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 224.575770][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.585548][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.595661][ T5882] usb 2-1: Product: syz [ 224.601372][ T5882] usb 2-1: Manufacturer: syz [ 224.607411][ T5882] usb 2-1: SerialNumber: syz [ 224.783558][ T5882] usb 2-1: config 0 descriptor?? [ 224.993555][ T5882] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 225.010833][ T7592] loop4: detected capacity change from 0 to 7 [ 225.032811][ T7592] Dev loop4: unable to read RDB block 7 [ 225.048966][ T7592] loop4: unable to read partition table [ 225.063999][ T7592] loop4: partition table beyond EOD, truncated [ 225.116989][ T7592] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 226.305158][ T7612] syzkaller0: entered promiscuous mode [ 226.551175][ T7612] syzkaller0: entered allmulticast mode [ 226.685352][ T5882] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 226.740403][ T5882] usb 2-1: USB disconnect, device number 40 [ 227.146123][ T5898] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 227.155004][ T5898] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input20 [ 227.217384][ T5898] usb 3-1: USB disconnect, device number 23 [ 227.223953][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 227.368557][ T5882] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 227.383750][ T7629] loop4: detected capacity change from 0 to 7 [ 227.392826][ T7629] Dev loop4: unable to read RDB block 7 [ 227.399468][ T7629] loop4: unable to read partition table [ 227.405629][ T7629] loop4: partition table beyond EOD, truncated [ 227.412084][ T7629] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 227.544672][ T7633] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.467'. [ 227.558929][ T5882] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 227.589123][ T5882] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 227.698326][ T5882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.729664][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 227.758252][ T5882] usb 5-1: config 1 has no interface number 0 [ 227.764985][ T5882] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 227.775734][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.813650][ T5882] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 227.848465][ T796] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 227.999716][ T796] usb 2-1: device descriptor read/64, error -71 [ 228.021779][ T5882] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 228.033222][ T5882] snd_usb_pod 5-1:1.1: invalid control EP [ 228.039986][ T5882] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 228.050659][ T5882] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 228.066749][ T5882] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 228.224691][ T5882] usb 5-1: USB disconnect, device number 26 [ 228.258263][ T796] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 228.398727][ T796] usb 2-1: device descriptor read/64, error -71 [ 228.528660][ T796] usb usb2-port1: attempt power cycle [ 228.898414][ T796] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 228.932376][ T796] usb 2-1: device descriptor read/8, error -71 [ 229.044401][ T7659] loop7: detected capacity change from 0 to 7 [ 229.118826][ T5882] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 229.179914][ T796] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 229.219455][ T796] usb 2-1: device descriptor read/8, error -71 [ 229.224268][ T5836] Dev loop7: unable to read RDB block 7 [ 229.246938][ T5836] loop7: unable to read partition table [ 229.257082][ T5836] loop7: partition table beyond EOD, truncated [ 229.275285][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.285366][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.294025][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.303713][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.312281][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.322163][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.334199][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 229.339503][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.339543][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.348677][ T796] usb usb2-port1: unable to enumerate USB device [ 229.350403][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.374753][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.385151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.394777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.406615][ T5882] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 229.407488][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.415656][ T5882] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 229.425437][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.428362][ T7659] ldm_validate_partition_table(): Disk read failed. [ 229.437375][ T5882] usb 5-1: config 2 has no interface number 0 [ 229.463506][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.473370][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.485306][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.495395][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.503716][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 229.513483][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 229.522558][ T7659] Dev loop7: unable to read RDB block 0 [ 229.528029][ T5882] usb 5-1: config 2 interface 31 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.553908][ T7659] loop7: unable to read partition table [ 229.563581][ T5882] usb 5-1: config 2 interface 31 has no altsetting 0 [ 229.566212][ T7659] loop7: partition table beyond EOD, truncated [ 229.578423][ T7659] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 229.580093][ T5882] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 229.636614][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.648728][ T5882] usb 5-1: Product: syz [ 229.654957][ T5882] usb 5-1: Manufacturer: syz [ 229.703274][ T5882] usb 5-1: SerialNumber: syz [ 229.705267][ T7665] program syz.3.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.797867][ T5882] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 229.918054][ T7671] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 229.998409][ T796] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 230.024562][ T7654] xfrm0: entered promiscuous mode [ 230.033259][ T7654] xfrm0: entered allmulticast mode [ 230.047675][ T5882] usb 5-1: USB disconnect, device number 27 [ 230.173620][ T796] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.187736][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.218290][ T796] usb 4-1: Product: syz [ 230.222541][ T796] usb 4-1: Manufacturer: syz [ 230.227257][ T796] usb 4-1: SerialNumber: syz [ 230.234634][ T796] usb 4-1: config 0 descriptor?? [ 230.474620][ T796] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.108271][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 231.362019][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 231.378495][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.395447][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.416845][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 231.426648][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.448565][ T24] usb 2-1: Product: syz [ 231.463809][ T24] usb 2-1: Manufacturer: syz [ 231.474367][ T24] usb 2-1: SerialNumber: syz [ 231.496828][ T24] usb 2-1: config 0 descriptor?? [ 231.766251][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 232.108461][ T24] rc_core: IR keymap rc-imon-pad not found [ 232.114963][ T24] Registered IR keymap rc-empty [ 232.121575][ T24] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 232.137437][ T24] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 232.299929][ T796] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 232.326495][ T796] usb 4-1: USB disconnect, device number 42 [ 232.400974][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 232.408649][ T24] imon:send_packet: packet tx failed (-71) [ 232.438332][ T24] imon 2-1:0.0: remote input dev register failed [ 232.453776][ T24] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 232.515296][ T24] imon 2-1:0.0: unable to initialize intf0, err 0 [ 232.539820][ T24] imon:imon_probe: failed to initialize context! [ 232.556826][ T24] imon 2-1:0.0: unable to register, err -19 [ 232.586949][ T24] usb 2-1: USB disconnect, device number 45 [ 233.083063][ T29] audit: type=1326 audit(1774999974.692:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.4.488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f155779c819 code=0x0 [ 234.752327][ T7736] program syz.1.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.048570][ T24] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 235.263569][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.278297][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.290548][ T24] usb 2-1: Product: syz [ 235.333505][ T24] usb 2-1: Manufacturer: syz [ 235.343298][ T24] usb 2-1: SerialNumber: syz [ 235.379821][ T24] usb 2-1: config 0 descriptor?? [ 235.649617][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.150468][ T7751] netlink: 40 bytes leftover after parsing attributes in process `syz.2.501'. [ 236.465934][ T5882] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 236.653434][ T7758] bridge0: port 3(erspan0) entered blocking state [ 236.684511][ T7758] bridge0: port 3(erspan0) entered disabled state [ 236.713216][ T7758] erspan0: entered allmulticast mode [ 236.738345][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 236.747827][ T5882] usb 5-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 236.759431][ T5882] usb 5-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.805291][ T7758] erspan0: entered promiscuous mode [ 236.817217][ T5882] usb 5-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.832434][ T7758] bridge0: port 3(erspan0) entered blocking state [ 236.839066][ T7758] bridge0: port 3(erspan0) entered forwarding state [ 236.925337][ T7759] erspan0: left allmulticast mode [ 236.945707][ T7759] erspan0: left promiscuous mode [ 236.962148][ T5882] usb 5-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 236.982806][ T7759] bridge0: port 3(erspan0) entered disabled state [ 237.192658][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.228321][ T7761] syz_tun: entered allmulticast mode [ 237.234300][ T5882] usb 5-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 237.263506][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.285725][ T7757] syz_tun: left allmulticast mode [ 237.375010][ T5882] usb 5-1: config 0 descriptor?? [ 237.398409][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 237.415681][ T24] usb 2-1: USB disconnect, device number 46 [ 237.614935][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.624106][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.970629][ T5882] wacom 0003:056A:010E.0005: unbalanced collection at end of report description [ 238.001823][ T5882] wacom 0003:056A:010E.0005: parse failed [ 238.029050][ T5882] wacom 0003:056A:010E.0005: probe with driver wacom failed with error -22 [ 238.167715][ T5882] usb 5-1: USB disconnect, device number 28 [ 238.489262][ T796] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 238.649274][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 238.656440][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.669936][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.682699][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.693371][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.706625][ T796] usb 4-1: config 0 descriptor?? [ 238.719868][ T796] hub 4-1:0.0: USB hub found [ 238.917955][ T796] hub 4-1:0.0: 1 port detected [ 238.974977][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 239.073161][ T7790] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.088564][ T5914] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 239.269036][ T5914] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 239.290483][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.300454][ T5914] usb 5-1: Product: syz [ 239.304783][ T5914] usb 5-1: Manufacturer: syz [ 239.323375][ T5914] usb 5-1: SerialNumber: syz [ 239.535684][ T796] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 239.549884][ T796] usb 4-1: USB disconnect, device number 43 [ 239.557454][ T105] usb 4-1: Failed to suspend device, error -19 [ 239.695732][ T7798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.809220][ T7803] program syz.0.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.096137][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 240.118305][ T5889] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 240.179158][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 240.240908][ T5914] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 240.249811][ T7807] loop4: detected capacity change from 0 to 7 [ 240.273263][ T5836] Dev loop4: unable to read RDB block 7 [ 240.368617][ T5836] loop4: unable to read partition table [ 240.375313][ T5836] loop4: partition table beyond EOD, truncated [ 240.385878][ T7807] Dev loop4: unable to read RDB block 7 [ 240.387299][ T5889] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.394304][ T7807] loop4: unable to read partition table [ 240.401878][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.443026][ T7807] loop4: partition table beyond EOD, truncated [ 240.462345][ T5889] usb 1-1: Product: syz [ 240.466800][ T5889] usb 1-1: Manufacturer: syz [ 240.468354][ T7807] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 240.507558][ T5889] usb 1-1: SerialNumber: syz [ 240.542812][ T5914] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 240.597774][ T5914] usb 5-1: USB disconnect, device number 29 [ 240.607793][ T5889] usb 1-1: config 0 descriptor?? [ 240.855234][ T5889] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 241.199610][ T796] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 241.374243][ T796] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 241.390720][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.409313][ T796] usb 4-1: Product: syz [ 241.414870][ T796] usb 4-1: Manufacturer: syz [ 241.420082][ T796] usb 4-1: SerialNumber: syz [ 241.643964][ T796] usb 4-1: config 0 descriptor?? [ 241.691023][ T796] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 242.357855][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 242.489366][ T5889] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 242.513444][ T5889] usb 1-1: USB disconnect, device number 28 [ 243.309581][ T5889] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 243.458342][ T5889] usb 5-1: device descriptor read/64, error -71 [ 243.708252][ T5889] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 243.838643][ T5889] usb 5-1: device descriptor read/64, error -71 [ 243.949208][ T5889] usb usb5-port1: attempt power cycle [ 244.278261][ T5882] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 244.298330][ T5889] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 244.319901][ T5889] usb 5-1: device descriptor read/8, error -71 [ 244.445375][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 244.461162][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 244.473504][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 244.484024][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.495151][ T7845] loop4: detected capacity change from 0 to 7 [ 244.496783][ T5882] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 244.511179][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.523410][ T5882] usb 1-1: Product: syz [ 244.523575][ T7845] Dev loop4: unable to read RDB block 7 [ 244.527812][ T5882] usb 1-1: Manufacturer: syz [ 244.527832][ T5882] usb 1-1: SerialNumber: syz [ 244.540529][ T5882] usb 1-1: config 0 descriptor?? [ 244.549212][ T7845] loop4: unable to read partition table [ 244.555373][ T7845] loop4: partition table beyond EOD, truncated [ 244.558868][ T5882] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 244.568271][ T5889] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 244.580197][ T7845] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 244.599034][ T5889] usb 5-1: device descriptor read/8, error -71 [ 244.708437][ T5889] usb usb5-port1: unable to enumerate USB device [ 244.754423][ T5882] usb 1-1: USB disconnect, device number 29 [ 244.919850][ T796] gspca_stk1135: reg_w 0x353 err -71 [ 244.927034][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 244.945734][ T796] gspca_stk1135: Sensor write failed [ 244.956378][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.015964][ T796] gspca_stk1135: Sensor write failed [ 245.023711][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.031698][ T796] gspca_stk1135: Sensor read failed [ 245.051494][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.058058][ T796] gspca_stk1135: Sensor read failed [ 245.069929][ T796] gspca_stk1135: Detected sensor type unknown (0x0) [ 245.077998][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.086030][ T796] gspca_stk1135: Sensor read failed [ 245.092420][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.100798][ T796] gspca_stk1135: Sensor read failed [ 245.106254][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.114753][ T796] gspca_stk1135: Sensor write failed [ 245.120836][ T796] gspca_stk1135: serial bus timeout: status=0x00 [ 245.128453][ T796] gspca_stk1135: Sensor write failed [ 245.134510][ T796] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 245.152135][ T796] usb 4-1: USB disconnect, device number 44 [ 245.399919][ T7854] pim6reg: entered allmulticast mode [ 245.582848][ T7858] fuse: Bad value for 'fd' [ 245.595750][ T7858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.534'. [ 246.278423][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 246.493350][ T7869] program syz.4.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.518405][ T24] usb 1-1: device descriptor read/64, error -71 [ 246.758236][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 246.788363][ T5882] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 246.942072][ T24] usb 1-1: device descriptor read/64, error -71 [ 246.983016][ T5882] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 247.002564][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.020435][ T5882] usb 5-1: Product: syz [ 247.034976][ T5882] usb 5-1: Manufacturer: syz [ 247.040128][ T5882] usb 5-1: SerialNumber: syz [ 247.058851][ T5882] usb 5-1: config 0 descriptor?? [ 247.078761][ T24] usb usb1-port1: attempt power cycle [ 247.272649][ T5882] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 247.428369][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 247.448057][ T7887] loop4: detected capacity change from 0 to 7 [ 247.455697][ T7887] Dev loop4: unable to read RDB block 7 [ 247.461704][ T7887] loop4: unable to read partition table [ 247.461864][ T24] usb 1-1: device descriptor read/8, error -71 [ 247.475647][ T7887] loop4: partition table beyond EOD, truncated [ 247.483429][ T7887] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 247.708272][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 247.748228][ T24] usb 1-1: device descriptor read/8, error -71 [ 247.837561][ T7893] xt_hashlimit: size too large, truncated to 1048576 [ 247.879532][ T24] usb usb1-port1: unable to enumerate USB device [ 247.938788][ T7901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 248.492946][ T5889] hid_parser_main: 148 callbacks suppressed [ 248.492973][ T5889] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 248.517547][ T5889] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.924545][ T5882] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 249.007880][ T5882] usb 5-1: USB disconnect, device number 34 [ 249.316863][ T7932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.355691][ T7932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.548415][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 249.750122][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 249.767019][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.789148][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.829583][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 249.880279][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 249.893402][ T24] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 249.908354][ T24] usb 4-1: Manufacturer: syz [ 249.928657][ T24] usb 4-1: config 0 descriptor?? [ 250.136324][ T7932] loop5: detected capacity change from 0 to 7 [ 250.198958][ T7932] Dev loop5: unable to read RDB block 7 [ 250.237430][ T7932] loop5: AHDI p1 [ 250.270740][ T7932] loop5: partition table partially beyond EOD, truncated [ 250.330968][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 250.337181][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 250.352291][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 250.388688][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 250.397980][ T7947] netlink: 'syz.4.559': attribute type 13 has an invalid length. [ 250.398011][ T7948] netlink: 52 bytes leftover after parsing attributes in process `syz.1.560'. [ 250.468411][ T24] usb 4-1: USB disconnect, device number 45 [ 250.544039][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 250.948919][ T5882] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 251.120158][ T5882] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 251.149591][ T5882] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 251.170027][ T5882] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 251.195964][ T5882] usb 1-1: config 220 has no interface number 2 [ 251.212088][ T5882] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 251.228243][ T5882] usb 1-1: config 220 interface 0 has no altsetting 0 [ 251.235464][ T5882] usb 1-1: config 220 interface 76 has no altsetting 0 [ 251.243671][ T5882] usb 1-1: config 220 interface 1 has no altsetting 0 [ 251.253281][ T5882] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 251.262867][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.271454][ T5882] usb 1-1: Product: syz [ 251.275656][ T5882] usb 1-1: Manufacturer: syz [ 251.282010][ T5882] usb 1-1: SerialNumber: syz [ 251.418235][ T5939] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 251.504529][ T7954] tipc: Enabling of bearer rejected, failed to enable media [ 251.523335][ T5882] usb 1-1: selecting invalid altsetting 0 [ 251.532870][ T5882] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 251.546750][ T5882] uvcvideo 1-1:220.0: No valid video chain found. [ 251.561585][ T5882] usb 1-1: selecting invalid altsetting 0 [ 251.567539][ T5882] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 251.580258][ T5882] usb 1-1: USB disconnect, device number 34 [ 251.594157][ T5939] usb 3-1: not running at top speed; connect to a high speed hub [ 251.606020][ T5939] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 251.618868][ T5939] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 4 [ 251.636163][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.645729][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.654072][ T5939] usb 3-1: Product: 뚼刜蝊ॉ툜ꓺ桶盧ꯁ콇᠄᝝䰘ﺊ嚧쀿ު䏰Η♌弅ꔲ洺潷삙躖Մ䄌〖Ặめꍓ㉑ޥ庥停೉草쌷᪅攕틦䤌턱資燒翓憌杇䁨佡멣躃瓺ᴉ鎆娲迸ﾾ迀Ꮇ諫 [ 251.676444][ T5939] usb 3-1: Manufacturer: 餱枻ء [ 251.682105][ T5939] usb 3-1: SerialNumber: 㰊 [ 252.038254][ T24] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 252.116060][ T5939] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 252.127922][ T5939] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 252.136239][ T5939] usb 3-1: unit 4 not found! [ 252.181826][ T5939] usb 3-1: USB disconnect, device number 24 [ 252.216777][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.245149][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.263181][ T7983] binder: 7979:7983 ioctl 4018620d 0 returned -22 [ 252.460600][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 252.476353][ T24] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 252.601946][ T24] usb 2-1: config 12 has an invalid interface number: 173 but max is 1 [ 252.615848][ T24] usb 2-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 252.632890][ T24] usb 2-1: config 12 has no interface number 0 [ 252.643993][ T24] usb 2-1: config 12 interface 173 has no altsetting 1 [ 252.661583][ T24] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 252.674186][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.691607][ T24] usb 2-1: Product: syz [ 252.701971][ T24] usb 2-1: Manufacturer: syz [ 252.711330][ T24] usb 2-1: SerialNumber: syz [ 252.944988][ T7986] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 253.025767][ T7986] ALSA: mixer_oss: invalid index 1374389 [ 253.327100][ T7990] fuse: Bad value for 'fd' [ 253.446574][ T796] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 253.750304][ T796] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 253.813436][ T796] usb 3-1: config 0 has no interface number 0 [ 253.879567][ T796] usb 3-1: config 0 interface 235 has no altsetting 0 [ 253.913626][ T796] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 253.928446][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.936973][ T796] usb 3-1: Product: syz [ 253.944745][ T796] usb 3-1: Manufacturer: syz [ 253.959205][ T796] usb 3-1: SerialNumber: syz [ 253.966995][ T796] usb 3-1: config 0 descriptor?? [ 253.981896][ T796] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 253.991282][ T796] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 254.059436][ T796] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 254.075832][ T796] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 254.094384][ T796] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 254.110849][ T796] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 254.126889][ T796] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 254.282184][ T5907] usb 3-1: USB disconnect, device number 25 [ 254.313158][ T5907] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 254.344252][ T5907] keyspan 3-1:0.235: device disconnected [ 254.753876][ T8008] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 254.923286][ T24] usb 2-1: USB disconnect, device number 47 [ 255.374870][ T5907] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 255.539276][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 255.550640][ T5907] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 255.686000][ T5907] usb 3-1: config 2 has no interface number 0 [ 255.693404][ T5907] usb 3-1: config 2 interface 88 has no altsetting 0 [ 255.739660][ T5889] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 255.754817][ T5907] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 255.768983][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.802958][ T5907] usb 3-1: Product: syz [ 255.814734][ T5907] usb 3-1: Manufacturer: syz [ 255.826480][ T5907] usb 3-1: SerialNumber: syz [ 255.928476][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 255.955003][ T5889] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 255.984048][ T5889] usb 1-1: config 0 has no interface number 0 [ 255.995354][ T5889] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 256.015563][ T5889] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.027907][ T5889] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 256.037127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038375][ T5889] usb 1-1: config 0 interface 196 has no altsetting 0 [ 256.045345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.054021][ T5889] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 256.067733][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.094510][ T5889] usb 1-1: Product: syz [ 256.103467][ T5889] usb 1-1: Manufacturer: syz [ 256.113336][ T5889] usb 1-1: SerialNumber: syz [ 256.138676][ T5889] usb 1-1: config 0 descriptor?? [ 256.145927][ T8033] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 256.153654][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 256.213031][ T29] audit: type=1326 audit(1774999997.822:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.1.591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f343359c819 code=0x0 [ 256.288263][ T24] usb 4-1: device descriptor read/64, error -71 [ 256.528277][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 256.668322][ T24] usb 4-1: device descriptor read/64, error -71 [ 256.783712][ T5889] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 256.794464][ T24] usb usb4-port1: attempt power cycle [ 256.844281][ T5889] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 256.866244][ T5889] usb 1-1: USB disconnect, device number 35 [ 257.005024][ T5889] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 257.117130][ T5907] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 257.139778][ T5907] asix 3-1:2.88: probe with driver asix failed with error -71 [ 257.168803][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 257.169178][ T5907] usb 3-1: USB disconnect, device number 26 [ 257.239832][ T24] usb 4-1: device descriptor read/8, error -71 [ 257.428304][ T5882] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 257.488341][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 257.514182][ T24] usb 4-1: device descriptor read/8, error -71 [ 257.578218][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 257.587413][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 257.628523][ T24] usb usb4-port1: unable to enumerate USB device [ 257.797510][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.827493][ T5882] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.922710][ T8059] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 257.958564][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.968280][ T5882] usb 2-1: Product: syz [ 257.972757][ T5882] usb 2-1: Manufacturer: syz [ 257.977505][ T5882] usb 2-1: SerialNumber: syz [ 258.004480][ T5882] usb 2-1: config 0 descriptor?? [ 258.098625][ T5882] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 258.128231][ T5882] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 258.618365][ T5882] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 258.626506][ T5882] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 258.648223][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 258.659155][ T8066] netlink: 64 bytes leftover after parsing attributes in process `syz.4.596'. [ 258.670169][ T8066] ip6t_srh: unknown srh invflags 4000 [ 258.764523][ T8068] fuse: Bad value for 'user_id' [ 258.770177][ T8068] fuse: Bad value for 'user_id' [ 259.092397][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.600'. [ 259.241719][ T5882] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 259.328958][ T8085] hub 1-0:1.0: USB hub found [ 259.335298][ T8085] hub 1-0:1.0: 1 port detected [ 259.491309][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 259.502028][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 259.510847][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 259.554927][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 259.591301][ T5882] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 259.680931][ T5882] usb 2-1: USB disconnect, device number 48 [ 260.658267][ T5889] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 260.819727][ T5889] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 260.868280][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.918421][ T5889] usb 5-1: config 0 has no interface number 0 [ 260.968859][ T5889] usb 5-1: config 0 interface 25 has no altsetting 0 [ 260.976119][ T5889] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 261.010508][ T29] audit: type=1326 audit(1775000002.612:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.2.606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f794519c819 code=0x0 [ 261.048193][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.093942][ T5889] usb 5-1: config 0 descriptor?? [ 261.119803][ T8107] kAFS: unable to lookup cell '(,c' [ 262.114953][ T8119] team_slave_0: entered promiscuous mode [ 262.121432][ T8119] team_slave_1: entered promiscuous mode [ 262.155506][ T8119] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 262.166314][ T8125] loop4: detected capacity change from 0 to 7 [ 262.179873][ T8125] Dev loop4: unable to read RDB block 7 [ 262.190472][ T8124] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 262.199510][ T8125] loop4: unable to read partition table [ 262.230990][ T8125] loop4: partition table beyond EOD, truncated [ 262.292232][ T8125] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 262.638199][ T5907] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 262.671254][ T5914] usb 5-1: USB disconnect, device number 35 [ 262.910032][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.930160][ T5907] usb 3-1: not running at top speed; connect to a high speed hub [ 262.973844][ T5907] usb 3-1: config 12 has an invalid interface number: 173 but max is 1 [ 262.994388][ T5907] usb 3-1: config 12 has an invalid interface number: 173 but max is 1 [ 263.026474][ T5907] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 2 [ 263.063880][ T8143] netlink: 'syz.1.618': attribute type 62 has an invalid length. [ 263.072703][ T5907] usb 3-1: config 12 has no interface number 0 [ 263.088926][ T5907] usb 3-1: config 12 interface 173 has no altsetting 1 [ 263.127218][ T5907] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7 [ 263.152101][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.175401][ T5907] usb 3-1: Product: syz [ 263.191240][ T8147] netlink: 376 bytes leftover after parsing attributes in process `syz.3.620'. [ 263.209503][ T5907] usb 3-1: Manufacturer: syz [ 263.230935][ T5907] usb 3-1: SerialNumber: syz [ 263.241558][ T8148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.619'. [ 263.332385][ T8150] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.508479][ T8158] loop4: detected capacity change from 0 to 7 [ 263.619594][ T5823] Dev loop4: unable to read RDB block 7 [ 263.637230][ T5823] loop4: unable to read partition table [ 263.675037][ T5823] loop4: partition table beyond EOD, truncated [ 263.708054][ T8158] Dev loop4: unable to read RDB block 7 [ 263.714412][ T8158] loop4: unable to read partition table [ 263.721428][ T8158] loop4: partition table beyond EOD, truncated [ 263.737443][ T8158] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 263.990163][ T8165] fuse: Bad value for 'fd' [ 265.220878][ T5914] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 265.350919][ T8190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 265.400957][ T5914] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 265.515808][ T5914] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 265.553679][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.630'. [ 265.584561][ T5914] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 265.594142][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.610320][ T5914] usb 1-1: Product: syz [ 265.664833][ T5914] usb 1-1: Manufacturer: syz [ 265.691009][ T5914] usb 1-1: SerialNumber: syz [ 265.785636][ T5914] usb 1-1: config 0 descriptor?? [ 266.422959][ T8185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.432732][ T8185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.464101][ T5914] mos7840 1-1:0.0: required endpoints missing [ 266.484892][ T5914] usb 1-1: USB disconnect, device number 36 [ 266.882743][ T5907] usb 3-1: USB disconnect, device number 27 [ 267.359235][ T8216] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 268.370426][ T8223] fuse: Bad value for 'user_id' [ 268.375416][ T8223] fuse: Bad value for 'user_id' [ 268.410397][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.644'. [ 269.074146][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.651'. [ 269.538443][ T5914] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 269.619662][ T5882] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 269.708216][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 269.715944][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 269.896991][ T5882] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 269.911946][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.958240][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 269.996438][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.009902][ T5882] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 270.024630][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.034449][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.043488][ T5882] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 270.053079][ T5914] usb 5-1: Product: syz [ 270.070171][ T5882] usb 4-1: Manufacturer: syz [ 270.074821][ T5914] usb 5-1: Manufacturer: syz [ 270.082018][ T5914] usb 5-1: SerialNumber: syz [ 270.087384][ T5882] usb 4-1: config 0 descriptor?? [ 270.182096][ T5914] usb 5-1: config 0 descriptor?? [ 270.194987][ T10] usb 1-1: config 0 has no interfaces? [ 270.206258][ T5914] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 270.217048][ T10] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 270.226522][ T5914] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 270.233941][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 270.246703][ T8282] FAULT_INJECTION: forcing a failure. [ 270.246703][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.291478][ T8282] CPU: 1 UID: 0 PID: 8282 Comm: syz.2.662 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.291514][ T8282] Tainted: [L]=SOFTLOCKUP [ 270.291520][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.291531][ T8282] Call Trace: [ 270.291539][ T8282] [ 270.291547][ T8282] dump_stack_lvl+0xe8/0x150 [ 270.291581][ T8282] should_fail_ex+0x412/0x560 [ 270.291603][ T8282] _copy_from_iter+0x1d3/0x1670 [ 270.291628][ T8282] ? rcu_is_watching+0x15/0xb0 [ 270.291661][ T8282] ? __pfx__copy_from_iter+0x10/0x10 [ 270.291689][ T8282] ? netlink_sendmsg+0x650/0xb40 [ 270.291708][ T8282] ? skb_put+0x11b/0x210 [ 270.291729][ T8282] netlink_sendmsg+0x6c0/0xb40 [ 270.291755][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.291772][ T8282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.291803][ T8282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.291828][ T8282] ____sys_sendmsg+0x972/0x9f0 [ 270.291858][ T8282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.291883][ T8282] ? import_iovec+0x73/0xa0 [ 270.291899][ T8282] ___sys_sendmsg+0x2a5/0x360 [ 270.291917][ T8282] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.291968][ T8282] ? __fget_files+0x2a/0x420 [ 270.291985][ T8282] ? __fget_files+0x3a0/0x420 [ 270.292013][ T8282] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.292036][ T8282] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.292056][ T8282] ? __pfx_ksys_write+0x10/0x10 [ 270.292076][ T8282] do_syscall_64+0x14d/0xf80 [ 270.292094][ T8282] ? trace_irq_disable+0x3b/0x150 [ 270.292110][ T8282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.292129][ T8282] ? clear_bhb_loop+0x40/0x90 [ 270.292152][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.292170][ T8282] RIP: 0033:0x7f794519c819 [ 270.292188][ T8282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.292200][ T8282] RSP: 002b:00007f7946091028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.292215][ T8282] RAX: ffffffffffffffda RBX: 00007f7945415fa0 RCX: 00007f794519c819 [ 270.292224][ T8282] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 270.292231][ T8282] RBP: 00007f7946091090 R08: 0000000000000000 R09: 0000000000000000 [ 270.292239][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.292247][ T8282] R13: 00007f7945416038 R14: 00007f7945415fa0 R15: 00007f794553fa48 [ 270.292283][ T8282] [ 270.292705][ T10] usb 1-1: Manufacturer: syz [ 270.588469][ T5882] rc_core: IR keymap rc-hauppauge not found [ 270.594661][ T5882] Registered IR keymap rc-empty [ 270.632822][ T5882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 270.685645][ T5882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 270.711974][ T10] usb 1-1: config 0 descriptor?? [ 270.766011][ T5882] usb 4-1: USB disconnect, device number 50 [ 270.978528][ T5914] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 270.986119][ T5914] em28xx 5-1:0.0: Config register raw data: 0x41 [ 271.035098][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.086603][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.490477][ T5882] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 271.506227][ T8302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.521732][ T8302] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 271.718361][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 271.727392][ T5882] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.758448][ T5882] usb 4-1: config 0 has no interface number 0 [ 271.874696][ T5882] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.884414][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.892742][ T5882] usb 4-1: Product: syz [ 271.900426][ T5882] usb 4-1: Manufacturer: syz [ 271.906921][ T5882] usb 4-1: SerialNumber: syz [ 271.924413][ T5882] usb 4-1: config 0 descriptor?? [ 271.944894][ T5882] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 272.147255][ T5882] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 272.276246][ T5882] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.342180][ T24] usb 5-1: USB disconnect, device number 36 [ 272.382705][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 272.561026][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.569589][ T5882] usb 4-1: USB disconnect, device number 51 [ 272.588344][ T796] usb 1-1: USB disconnect, device number 37 [ 272.604175][ T5882] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.604485][ T24] em28xx 5-1:0.0: Freeing device [ 273.040174][ T5882] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 273.073451][ T5882] quatech2 4-1:0.51: device disconnected [ 273.343012][ T8327] fuse: Bad value for 'fd' [ 273.436461][ T8324] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 273.778177][ T5889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 273.883181][ T8334] loop5: detected capacity change from 0 to 7 [ 273.944805][ T5836] Dev loop5: unable to read RDB block 7 [ 273.948282][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 273.955149][ T5836] loop5: unable to read partition table [ 273.966845][ T5889] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 273.968920][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 273.978737][ T5889] usb 3-1: config 0 has no interface number 0 [ 273.992299][ T5836] loop5: partition table beyond EOD, truncated [ 274.002765][ T8334] Dev loop5: unable to read RDB block 7 [ 274.008936][ T8334] loop5: unable to read partition table [ 274.015959][ T8334] loop5: partition table beyond EOD, truncated [ 274.023304][ T8334] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 274.023545][ T5889] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 274.065301][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.107567][ T5889] usb 3-1: Product: syz [ 274.117243][ T5889] usb 3-1: Manufacturer: syz [ 274.136178][ T5889] usb 3-1: SerialNumber: syz [ 274.185275][ T5889] usb 3-1: config 0 descriptor?? [ 275.042282][ T8353] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 275.160656][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 275.381152][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.395596][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.425906][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 275.437713][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 275.449104][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.463165][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.479156][ T24] usb 2-1: SerialNumber: syz [ 275.722025][ T24] usb 2-1: 0:2 : does not exist [ 276.088853][ T24] usb 2-1: USB disconnect, device number 49 [ 276.204394][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.382189][ T8365] capability: warning: `syz.1.689' uses deprecated v2 capabilities in a way that may be insecure [ 276.543368][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.555197][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.567452][ T5889] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 276.619324][ T8368] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 276.619951][ T5889] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 276.657592][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.691'. [ 276.708050][ T5889] usb 3-1: USB disconnect, device number 28 [ 276.726762][ T8376] vivid-008: disconnect [ 276.996902][ T8390] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 277.091263][ T8391] fuse: Bad value for 'fd' [ 277.160115][ T29] audit: type=1326 audit(1775000018.752:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.1.693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f343359c819 code=0x0 [ 277.488220][ T5914] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 277.589870][ T8379] vivid-008: reconnect [ 277.661189][ T5914] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 277.681956][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.723135][ T5914] usb 4-1: Product: syz [ 277.745511][ T5914] usb 4-1: Manufacturer: syz [ 277.779447][ T5914] usb 4-1: SerialNumber: syz [ 277.786417][ T8403] loop7: detected capacity change from 0 to 7 [ 277.839716][ T5914] usb 4-1: config 0 descriptor?? [ 277.853648][ T5914] hub 4-1:0.0: bad descriptor, ignoring hub [ 277.867692][ T5914] hub 4-1:0.0: probe with driver hub failed with error -5 [ 277.972139][ T8403] Dev loop7: unable to read RDB block 7 [ 277.987272][ T8403] loop7: unable to read partition table [ 277.998668][ T8403] loop7: partition table beyond EOD, truncated [ 278.058382][ T8403] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 278.117876][ T5914] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 278.144844][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.193225][ T5914] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 278.276397][ T5194] Dev loop7: unable to read RDB block 7 [ 278.283108][ T5194] loop7: unable to read partition table [ 278.289229][ T5914] usb 4-1: media controller created [ 278.312438][ T5194] loop7: partition table beyond EOD, truncated [ 278.445473][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.704139][ T8411] fuse: Bad value for 'fd' [ 278.769063][ T5914] DVB: Unable to find symbol dib7000p_attach() [ 278.806422][ T5914] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 278.845711][ T8412] ipip0: entered promiscuous mode [ 278.851143][ T8412] ipip0: entered allmulticast mode [ 279.088885][ T5914] rc_core: IR keymap rc-dib0700-rc5 not found [ 279.096226][ T5914] Registered IR keymap rc-empty [ 279.109970][ T5914] dvb-usb: could not initialize remote control. [ 279.119315][ T5914] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 279.135395][ T8391] i2c i2c-1: Invalid block size returned: 58 [ 279.441982][ T8421] loop4: detected capacity change from 0 to 7 [ 279.506354][ T8421] Dev loop4: unable to read RDB block 7 [ 279.548033][ T8421] loop4: unable to read partition table [ 279.579373][ T8421] loop4: partition table beyond EOD, truncated [ 279.642975][ T8421] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 279.909251][ T5882] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 280.128566][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 280.181081][ T5882] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 280.216634][ T5882] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 280.228223][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.244573][ T5882] usb 2-1: Product: syz [ 280.361596][ T5882] usb 2-1: Manufacturer: syz [ 280.368170][ T5882] usb 2-1: SerialNumber: syz [ 280.386952][ T5882] usb 2-1: config 0 descriptor?? [ 280.402881][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 280.415530][ T5882] usb 2-1: setting power ON [ 280.423562][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 280.439734][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.450386][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 280.459710][ T5882] usb 2-1: media controller created [ 280.488616][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.525201][ T5882] usb 2-1: selecting invalid altsetting 6 [ 280.533359][ T5882] usb 2-1: digital interface selection failed (-22) [ 280.540346][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 280.556516][ T5882] usb 2-1: setting power OFF [ 280.565735][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 280.585921][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 280.607483][ T8423] ------------[ cut here ]------------ [ 280.613522][ T8423] usb 4-1: BOGUS control dir, pipe 80003480 doesn't match bRequestType c0 [ 280.622342][ T8423] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#1: syz.1.702/8423 [ 280.633007][ T8423] Modules linked in: [ 280.637100][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.1.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.648021][ T8423] Tainted: [L]=SOFTLOCKUP [ 280.652532][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.663004][ T8423] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 280.664539][ T5914] usb 4-1: USB disconnect, device number 52 [ 280.668847][ T8423] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 280.668891][ T8423] RSP: 0018:ffffc900037d7948 EFLAGS: 00010246 [ 280.701241][ T8423] RAX: 0000000000000000 RBX: ffff8880255f7100 RCX: 0000000080003480 [ 280.709535][ T8423] RDX: ffff88807bf6fc20 RSI: ffffffff8c7f2800 RDI: ffffffff901f0bc0 [ 280.717884][ T8423] RBP: 1ffff1100db7df70 R08: 00000000000000c0 R09: 0000000000000000 [ 280.726417][ T8423] R10: ffffc900037d7a40 R11: fffff520006faf54 R12: ffff8880314d8100 [ 280.734582][ T8423] R13: ffff88806dbefb80 R14: 0000000080003480 R15: ffff88807bf6fc20 [ 280.742758][ T8423] FS: 00007f34343a86c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 280.751791][ T8423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.758534][ T8423] CR2: 000000110c41a705 CR3: 0000000028f5a000 CR4: 00000000003526f0 [ 280.766871][ T8423] Call Trace: [ 280.770223][ T8423] [ 280.773189][ T8423] ? __init_swait_queue_head+0xa9/0x150 [ 280.778825][ T8423] usb_start_wait_urb+0x13f/0x5b0 [ 280.784050][ T8423] ? rcu_is_watching+0x15/0xb0 [ 280.789056][ T8423] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 280.794625][ T8423] ? trace_kmalloc+0x2a/0x110 [ 280.799513][ T8423] usb_control_msg+0x234/0x3e0 [ 280.804557][ T8423] dib0700_i2c_xfer+0xbb2/0xf80 [ 280.809510][ T8423] __i2c_transfer+0x79a/0x2020 [ 280.814660][ T8423] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 280.820633][ T8423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.826716][ T8423] ? i2c_transfer+0xc8/0x2d0 [ 280.831680][ T8423] i2c_transfer+0x1cc/0x2d0 [ 280.836418][ T8423] i2cdev_ioctl_rdwr+0x460/0x740 [ 280.843766][ T8423] i2cdev_ioctl+0x6a5/0x880 [ 280.849853][ T8423] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 280.855719][ T8423] ? __fget_files+0x3a0/0x420 [ 280.861099][ T8423] ? __fget_files+0x2a/0x420 [ 280.865833][ T8423] ? bpf_lsm_file_ioctl+0x9/0x20 [ 280.871275][ T8423] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 280.877012][ T8423] __se_sys_ioctl+0xfc/0x170 [ 280.881883][ T8423] do_syscall_64+0x14d/0xf80 [ 280.886688][ T8423] ? trace_irq_disable+0x3b/0x150 [ 280.891911][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.898370][ T8423] ? clear_bhb_loop+0x40/0x90 [ 280.903310][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.909495][ T8423] RIP: 0033:0x7f343359c819 [ 280.914211][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.935056][ T8423] RSP: 002b:00007f34343a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.937534][ T5882] (NULL device *): no alternate interface [ 280.944135][ T8423] RAX: ffffffffffffffda RBX: 00007f3433815fa0 RCX: 00007f343359c819 [ 280.958417][ T8423] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000006 [ 280.966772][ T8423] RBP: 00007f3433632c91 R08: 0000000000000000 R09: 0000000000000000 [ 280.974987][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.983224][ T8423] R13: 00007f3433816038 R14: 00007f3433815fa0 R15: 00007f343393fa48 [ 280.991464][ T8423] [ 280.994530][ T8423] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.002108][ T8423] CPU: 1 UID: 0 PID: 8423 Comm: syz.1.702 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.013610][ T8423] Tainted: [L]=SOFTLOCKUP [ 281.018148][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.028679][ T8423] Call Trace: [ 281.032214][ T8423] [ 281.035368][ T8423] vpanic+0x56c/0xa60 [ 281.039670][ T8423] ? __pfx__printk+0x10/0x10 [ 281.044391][ T8423] ? __pfx_vpanic+0x10/0x10 [ 281.048951][ T8423] ? is_bpf_text_address+0x292/0x2b0 [ 281.054691][ T8423] ? is_bpf_text_address+0x26/0x2b0 [ 281.060569][ T8423] panic+0xc5/0xd0 [ 281.064453][ T8423] ? __pfx_panic+0x10/0x10 [ 281.068976][ T8423] __warn+0x315/0x4f0 [ 281.073108][ T8423] ? usb_submit_urb+0x1053/0x18b0 [ 281.078622][ T8423] ? usb_submit_urb+0x1053/0x18b0 [ 281.083765][ T8423] __report_bug+0x29a/0x540 [ 281.088434][ T8423] ? usb_submit_urb+0x1053/0x18b0 [ 281.093503][ T8423] ? __pfx___report_bug+0x10/0x10 [ 281.098560][ T8423] ? lockdep_hardirqs_on+0x7a/0x110 [ 281.103780][ T8423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.109605][ T8423] report_bug_entry+0x19a/0x290 [ 281.114847][ T8423] ? usb_submit_urb+0x1115/0x18b0 [ 281.120000][ T8423] ? usb_submit_urb+0x111a/0x18b0 [ 281.125149][ T8423] handle_bug+0xce/0x200 [ 281.129431][ T8423] exc_invalid_op+0x1a/0x50 [ 281.133956][ T8423] asm_exc_invalid_op+0x1a/0x20 [ 281.138987][ T8423] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 281.144831][ T8423] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 281.164979][ T8423] RSP: 0018:ffffc900037d7948 EFLAGS: 00010246 [ 281.171148][ T8423] RAX: 0000000000000000 RBX: ffff8880255f7100 RCX: 0000000080003480 [ 281.179422][ T8423] RDX: ffff88807bf6fc20 RSI: ffffffff8c7f2800 RDI: ffffffff901f0bc0 [ 281.187622][ T8423] RBP: 1ffff1100db7df70 R08: 00000000000000c0 R09: 0000000000000000 [ 281.195887][ T8423] R10: ffffc900037d7a40 R11: fffff520006faf54 R12: ffff8880314d8100 [ 281.204239][ T8423] R13: ffff88806dbefb80 R14: 0000000080003480 R15: ffff88807bf6fc20 [ 281.212449][ T8423] ? usb_submit_urb+0x10a4/0x18b0 [ 281.217949][ T8423] ? __init_swait_queue_head+0xa9/0x150 [ 281.223783][ T8423] usb_start_wait_urb+0x13f/0x5b0 [ 281.229000][ T8423] ? rcu_is_watching+0x15/0xb0 [ 281.233866][ T8423] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 281.239679][ T8423] ? trace_kmalloc+0x2a/0x110 [ 281.244380][ T8423] usb_control_msg+0x234/0x3e0 [ 281.249246][ T8423] dib0700_i2c_xfer+0xbb2/0xf80 [ 281.254214][ T8423] __i2c_transfer+0x79a/0x2020 [ 281.259165][ T8423] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.265157][ T8423] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 281.271069][ T8423] ? i2c_transfer+0xc8/0x2d0 [ 281.275784][ T8423] i2c_transfer+0x1cc/0x2d0 [ 281.280590][ T8423] i2cdev_ioctl_rdwr+0x460/0x740 [ 281.285570][ T8423] i2cdev_ioctl+0x6a5/0x880 [ 281.290265][ T8423] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 281.295304][ T8423] ? __fget_files+0x3a0/0x420 [ 281.300079][ T8423] ? __fget_files+0x2a/0x420 [ 281.304852][ T8423] ? bpf_lsm_file_ioctl+0x9/0x20 [ 281.309978][ T8423] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 281.315129][ T8423] __se_sys_ioctl+0xfc/0x170 [ 281.319908][ T8423] do_syscall_64+0x14d/0xf80 [ 281.324507][ T8423] ? trace_irq_disable+0x3b/0x150 [ 281.329537][ T8423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.335609][ T8423] ? clear_bhb_loop+0x40/0x90 [ 281.340394][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.346342][ T8423] RIP: 0033:0x7f343359c819 [ 281.350788][ T8423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.371213][ T8423] RSP: 002b:00007f34343a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.379925][ T8423] RAX: ffffffffffffffda RBX: 00007f3433815fa0 RCX: 00007f343359c819 [ 281.387908][ T8423] RDX: 0000200000000340 RSI: 0000000000000707 RDI: 0000000000000006 [ 281.396061][ T8423] RBP: 00007f3433632c91 R08: 0000000000000000 R09: 0000000000000000 [ 281.404396][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.412470][ T8423] R13: 00007f3433816038 R14: 00007f3433815fa0 R15: 00007f343393fa48 [ 281.420727][ T8423] [ 281.424502][ T8423] Kernel Offset: disabled [ 281.428929][ T8423] Rebooting in 86400 seconds..