last executing test programs: 4m39.36147131s ago: executing program 1 (id=379): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000140)=0x1) (async) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000000000000007000000890f04"], 0x20, 0x5}, 0x80) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100000000000000030000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31", @ANYRES32=0x0, @ANYBLOB="e8001a80"], 0x15c}}, 0x0) (async, rerun: 32) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000000100)) (async, rerun: 32) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000ffffff807baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000080ffffb70200001700000018230000", @ANYRES32=r5, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m38.145837842s ago: executing program 1 (id=383): syz_open_dev$video4linux(0x0, 0x279, 0x80000) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) lsm_get_self_attr(0x65, 0x0, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) mq_getsetattr(r2, &(0x7f0000000340)={0x0, 0x5, 0x9e13, 0x200}, &(0x7f00000003c0)) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1a, 0x1, @tid=r3}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400d8000206"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0000040000000b0f3d5e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xaa, "be2de4fde1b0d3331db1485fb92a1c8ffee10a011b7963625632c9c8b51427d104765c673d9ddaf031996ccdff15f74997e27b584755c5592f35214b21863ef572ae316a849d8c61bfe17101fe3988a94f504578ffc9dd654f4e97de17011161d6d590898796996ad496d361d8461fb84fc74cb5c8af9d6aee62b317c9ecc115416a6c3c9dfaa282f76169dd1dec39a720e1754dc828acbc077e632afccd0009fa78fcad3ad71d797f64"}, &(0x7f0000000000)=0xb2) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r5, 0x7}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@host, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@any, 0x4}, @hyper, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x81}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x1, 0x0, 0x5e, 0xfffffffffffffff9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) setsockopt$CAIFSO_REQ_PARAM(r7, 0x116, 0x80, &(0x7f00000000c0)="f8a29191f0b8a7bded58139f2b4a26d2cb3a8b6507a038b4e6ef628e75687031f4143ceb", 0x73) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x100000a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 4m35.90738498s ago: executing program 1 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000c58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001405000300000000000900010073797a30000000000900020073797a320000000014000000110001000000000000800000"], 0x80}}, 0x24004800) 4m35.253379631s ago: executing program 1 (id=399): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006812fa000000000000dbdf25020004000000000004000b000800010001000000"], 0x24}}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x51) r5 = socket(0x400000000010, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000000c0)={0x51, 0x8009, 0xd, {0x2, 0x2}, {0x6, 0x8}, @cond=[{0xeeb, 0x405, 0x4, 0x3, 0x8, 0x2}, {0x2, 0x5, 0x5, 0x6, 0x6, 0x3b7e}]}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r9, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) write$P9_RVERSION(r9, 0x0, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000240)=""/85, 0x37, 0x55, 0x1, 0xc361, 0x0, @void, @value}, 0x28) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 4m35.048542549s ago: executing program 1 (id=401): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0xfffb, r3, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r3, 0x6700000000000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4m34.741294927s ago: executing program 1 (id=402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x8, 0x6, 0x4, 0xfffffffffffffffa}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000001}, @sadb_lifetime={0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x7, 0x7}]}, 0x60}}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x40}, {r8, 0x1}, {}], 0x200000000000004c, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x5, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3], &(0x7f00000004c0), 0x10, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c002a0db69fa5fe3bad5865000004000000b49ba1e642c583e926f40fb4362675c8eb09fe6b9c63ac2c66250170a854a4b2c78555f6550e105a0d540c69a701d05af803412631325474949333c384283963c45ba80496937409031be74f15f046ec0e3c8e7c1c2eaea5be73f31422621beac7ddc3f239d0ea3160b9adf597d27ba28730ea5932b6ca9404fe34110d9646f66713b444202055eb4bf09caae67a90e537481e8458a7", @ANYRES32, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES64=0x0], 0x20) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x285}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000080)={0x0, 0xffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000100), 0xc06620, 0x4) 4m34.212120121s ago: executing program 32 (id=402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000640)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x2, 0x8, 0x6, 0x4, 0xfffffffffffffffa}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000001}, @sadb_lifetime={0x4, 0x2, 0x0, 0xfffffffffffffffd, 0x7, 0x7}]}, 0x60}}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) ppoll(&(0x7f0000000040)=[{r7, 0x40}, {r8, 0x1}, {}], 0x200000000000004c, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x1000000, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x251, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x5, 0x0, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r3], &(0x7f00000004c0), 0x10, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2c002a0db69fa5fe3bad5865000004000000b49ba1e642c583e926f40fb4362675c8eb09fe6b9c63ac2c66250170a854a4b2c78555f6550e105a0d540c69a701d05af803412631325474949333c384283963c45ba80496937409031be74f15f046ec0e3c8e7c1c2eaea5be73f31422621beac7ddc3f239d0ea3160b9adf597d27ba28730ea5932b6ca9404fe34110d9646f66713b444202055eb4bf09caae67a90e537481e8458a7", @ANYRES32, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES64=0x0], 0x20) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r11 = userfaultfd(0x801) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x285}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f0000000080)={0x0, 0xffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000100), 0xc06620, 0x4) 5.312775813s ago: executing program 0 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0xfffffffffffffff1) 5.095811779s ago: executing program 4 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001b400)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400"], 0x1c}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) r4 = getpid() r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0x20000006}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x4}) r8 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r8, 0x7, r7, &(0x7f0000000280)={r5, r6}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}, 0x1, 0xc00}, 0x4090) 5.081520595s ago: executing program 0 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000700000000000000000000400000000000402d00000000200002000a00000000000000fc010000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) 4.795639792s ago: executing program 0 (id=1343): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='target PCI:\n\x00'], 0x15) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[], 0x190) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000"], 0x190) (async) close(0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x11298}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb6}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 4.721121175s ago: executing program 3 (id=1344): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x182, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f00000000c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000440)=""/164, 0xa4}], 0x5, 0x7, 0x9) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x1733, 0x6323, 0x20, 0x0, 0x0) 4.515287789s ago: executing program 0 (id=1345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x13, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x78}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) 4.496901948s ago: executing program 3 (id=1346): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[], 0x1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc8) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYRESDEC=r8, @ANYRES16=0x0, @ANYRESDEC=r5, @ANYRESHEX=r8, @ANYRES32=r1, @ANYRES16=r7, @ANYBLOB="6600a4050fff229b0f94f505a911e064c311f9a2"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r11, 0x80089203, 0x200000000000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r12 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0xeeef0000, 0x2000, &(0x7f00004a9000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 4.377637229s ago: executing program 2 (id=1347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x24000004) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x3, 0xa, 0x7, 0x100000000, 0xc}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.295599334s ago: executing program 3 (id=1348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) accept(r4, 0x0, &(0x7f00000000c0)) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r5, 0x0, 0x0, 0x200000000004}]) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x381000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000008000000000020001062c0000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) sendmmsg(r3, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x5, 0x3, 0x54) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000010000"]) syz_usb_connect(0x6, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) 4.137892882s ago: executing program 4 (id=1349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x300000000000000) 3.625776448s ago: executing program 5 (id=1350): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x5, 0x20, 0x80000009}, 0x2f) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40021, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x300, 0x1, 0x0, 0x0, r4}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x8000) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000002c0)={{0x0, 0x0, 0x80}}) 3.443272416s ago: executing program 4 (id=1351): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00198018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 3.271141055s ago: executing program 5 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, 0x0, 0x20040814) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000003e70000000800a000c215000008009f0005000000080026000816"], 0x40}}, 0x200040b4) 3.069602187s ago: executing program 4 (id=1353): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2084) writev(r6, &(0x7f0000002280)=[{&(0x7f0000002100)='T01\n', 0x4}, {&(0x7f0000002140)="fc2c7c9ac57daa6ab295911e8a3fe24ca2cfee656f92e66a7e0d30276ca7c6864fb930a03608f0b865196f36cda8a3f5", 0x30}], 0x2) r8 = accept4(r1, &(0x7f0000002080)=@ethernet={0x0, @local}, &(0x7f0000002180)=0x80, 0x800) sendmsg$nl_route(r8, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)=@ipv4_delrule={0x58, 0x21, 0x8, 0x70bd26, 0x25dfdbff, {0x2, 0x90, 0x14, 0x7, 0x3, 0x0, 0x0, 0x6, 0x10}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_FLOW={0x8, 0xb, 0x33a2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffa}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r7, r7}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x2}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x90) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f00000001c0)={0xa, 0x8, {0x52, 0x7, 0xa7c, {0x4000, 0x4}, {0x0, 0x9}, @const={0x8c13, {0x7, 0x6, 0x3, 0x6}}}, {0x57, 0x4, 0x7, {0x7e6, 0x6}, {0x1ff, 0x6}, @period={0x59, 0x5, 0xe, 0xff, 0x8, {0x81, 0x7, 0x2, 0x7}, 0x7, &(0x7f0000000180)=[0x4, 0x5, 0x40, 0x9, 0x36f9, 0x0, 0x400]}}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 3.059051933s ago: executing program 5 (id=1354): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = eventfd2(0x3, 0x80000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3, r1}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/19, &(0x7f0000000100)=0x13) r2 = dup(r0) listen(r2, 0x3) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x7) unshare(0x100) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x100}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x37}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x40}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7ff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) bind$alg(r2, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000440)=[{{0x77359400}, 0x11, 0x6, 0xffff2977}, {{0x77359400}, 0x1, 0x5a6c, 0x9}, {{0x0, 0xea60}, 0x17, 0x7, 0x2}, {{r5, r6/1000+60000}, 0x2, 0x8, 0x5}, {{0x0, 0x2710}, 0xf3d62588258cce91, 0xf3, 0x8}, {{}, 0x15, 0x0, 0x5}, {{r7, r8/1000+60000}, 0x5, 0x0, 0x9}, {{}, 0x15, 0x7fff, 0x8001}, {{}, 0x2, 0x3, 0x1000}, {{0x0, 0xea60}, 0x4, 0x2, 0x6}], 0xf0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r4}, 0x8) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2081000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa8, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000840}, 0x840) openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x802, 0x0) r10 = socket(0x5, 0x4, 0x9) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000740)) sendto$packet(r10, &(0x7f0000000780)="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", 0x1000, 0x800, &(0x7f0000001780)={0x11, 0x11, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000017c0)={0x9, 0x5}) dup(r11) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001800)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000001840)=0x4) unshare(0x200) socket$netlink(0x10, 0x3, 0x7) 2.892667144s ago: executing program 4 (id=1355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e24, 0xffffffff, @remote, 0x9}}}, &(0x7f0000000200)=0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f00000001c0)={0x0, 0x0, "7b8e33a1350c2209e3444b5f3cd06892d96a66c3529dfae7", {0x0, 0x6}, 0x6}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000001400078008000640000000000800134000000000050001"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000100)={{0x9, 0xfffffffa}, {0x9, 0x1003ff}, 0xffffffff, 0x7}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0xf00) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r8, &(0x7f0000000000)=""/39, 0x27) 2.557795839s ago: executing program 5 (id=1356): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c00080007000000a8f6ffff030000005b3900005b9ad26000cd6e76e73a8104575c6e1d9ccbdfd7d8664d7899321b502f441dfcd54054dc8eca48f83d2e621c914f96707749959a26657c6e32e7d6076c0fb46985889fa206703b966eb314f59b760053c951a194174ce55d323777e5ebe0f27db6c8bc0d96053674414fbdab791d87e6131de9b6dc00cf669bebfd08000000000000005ff043f77d1aadd65b9818f431cfb09a0b26b6c5303332f2b038ab5322aecc251976bd56187920bd4846ef3e41d6c941c6135774b105780280e01e0ba3b209cab37d5826b8ab1653d6a5fc2909ec8d4bcfc69076d6b49113f33df463f9c0a69da83c0c3a867852a04b1bda4e"], 0x194) 2.38523099s ago: executing program 4 (id=1357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff010000000000000000000000000001fffffffe33000000000000000a010101000000000000000000000000043500000003010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c000000000000000300000000000000000000000000000000000000fc00"], 0x23c}}, 0x0) r1 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062b8420f12085da6cefa93eea50b40450e1010fce60102030109023800010003000000043200019740a40005240600af04d3f2c2d08956ff0131090000000000004e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="c94727aa19388406bd7000f3dbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0x980915, 0xffffff7c}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) 2.091906139s ago: executing program 5 (id=1358): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000019080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000535000/0x4000)=nil) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYRESDEC]}]}) 1.577840481s ago: executing program 2 (id=1359): syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0], 0x44}}, 0x500) 1.318759757s ago: executing program 2 (id=1360): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 1.237676103s ago: executing program 0 (id=1361): mmap$xdp(&(0x7f0000ab7000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x180000000) socket$inet6(0xa, 0x1, 0x200) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xfe00]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xb}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) mremap(&(0x7f0000bc7000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000c69000/0x2000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 965.156022ms ago: executing program 2 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4050008c580307f62503db9c6ee4e109d6b0000000071109b00000000000622fa3ef688a0e6ea6a0de14afbef682f64837b54e6de0e2b3813e446e6362d4d15c8edaa7520bf4bde03a680d5c6e0cf71d5a097eab1d18d4a9a4cb8424df369666ffb6826f2c4a79608a7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x143201) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x0}) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000040)={0x1, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x6, 0x2, 0xf7, 0x4}, {0x3, 0xf, 0x0, 0x6}, {0x8001, 0x2, 0xfe, 0x5}]}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001940)={0x0, 0x3}, 0x8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000012c0)={0xa, @raw_data="dd8e601493911973ed84274e3d246193cd9f9b376c99d745a3834738b95d0fc79d18acdfc89e32b95f9cc923982d537d087a4b9cee834b86a9bd90fd9f8c62dfef1f01b66d2a3a9c34d345cd38b81d2875f1f91c3f769183779691d51530396e8cb220ab704e94e12942407f45283c6f4e19bc9111dcaaef673b223e9ca550926046be9b6f314dc6c74d3f6c708c969a88678dac3baa09196cd777b08f76823a96181b085de76015ebfeeeb870d3a55f5cbf4680da46be31495538130b02ee0c85712da26c48d193"}) 877.596022ms ago: executing program 3 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010000100f4ffffffffffffff0000000a20000000000a05000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000810001180090001006c61737400000000400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014000380100000800800034000000003"], 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 733.620398ms ago: executing program 2 (id=1364): ioprio_set$pid(0x1, 0x0, 0x6000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000300)="30800205e792080000", 0x9, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000100)=""/184) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2c, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x3f000000}, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x101, 0x7}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000ffdba106000000000c0007800800020007000000"], 0x20}}, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r4, r5, 0x0, 0x10ffff) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100000, 0xf36, 0x7, "f694b8000000000000cc29e1f5eba328020016"}) 590.71943ms ago: executing program 3 (id=1365): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [0xff, 0xffffffff], [0xffffff00, 0xffffff00], 'batadv0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x4c, 0x0, 0x5, 0x10}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042) writev(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x8, 0xfa, {{0x33, 0x4, 0x1, 0x8, 0xcc, 0x68, 0x7, 0xc, 0x29, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x2, 0x7, "72fcdf3cdf"}, {0x7, 0x10, "296b577f09c0a43f63a7b8534ca3"}, {0x6, 0xf, "58dfe911238d540fbc2162da53"}]}, @cipso={0x86, 0x42, 0xffffffffffffffff, [{0x2, 0x10, "05583913fb00652184ced04f8281"}, {0x5, 0x7, "190046c655"}, {0x0, 0xb, "1df679e4570894e137"}, {0x1, 0x6, "8fcaec24"}, {0x5, 0x10, "225b542da297bfeb9246ebe2cce5"}, {0x1, 0x4, "819e"}]}, @noop, @generic={0x89, 0x10, "09331bdbc4bbc3727dae74019d53"}, @timestamp={0x44, 0x2c, 0xe7, 0x0, 0x4, [0x6, 0xffffffff, 0x8, 0x3, 0xfffffffa, 0xfffffff8, 0x7, 0x6, 0x2, 0x8]}, @end, @rr={0x7, 0xb, 0x16, [@loopback, @dev={0xac, 0x14, 0x14, 0x3b}]}]}}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x6, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f0000000740)=""/123, 0x7b, 0x0, &(0x7f00000007c0)=""/135, 0x87}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000140)='./mnt\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x17, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfa5, 0x0, 0x0, 0x0, 0x2}, [@generic={0x4, 0x4, 0x0, 0x3ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c68}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xd, 0xa, 0x5, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000004c0)='GPL\x00', 0x7, 0x5b, &(0x7f0000000500)=""/91, 0x0, 0x20, '\x00', r2, @cgroup_sysctl=0x12, r4, 0x8, &(0x7f00000006c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xe, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000000c80)=[0xffffffffffffffff, r6, r7, r8], &(0x7f0000000cc0)=[{0x4, 0x2, 0x8, 0x2}, {0x1, 0x1, 0x9, 0xe}, {0x0, 0x2, 0x7, 0xb}, {0x1, 0x4215, 0xc, 0x8}, {0x4, 0x3, 0x0, 0xabdf506a8e0b325d}, {0x1, 0x3, 0x4, 0x1}], 0x10, 0x4, @void, @value}, 0x94) 509.500101ms ago: executing program 0 (id=1366): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653230303030303030303030300630303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1818061, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x88}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r4, 0x0, 0x1c7, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40081, 0x2000) 489.604016ms ago: executing program 2 (id=1367): syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653230303030303030303030300630303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1818061, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x88}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r4, 0x0, 0x1c7, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40081, 0x0) (fail_nth: 8) 311.448312ms ago: executing program 5 (id=1368): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) r0 = eventfd2(0x3ff, 0x80000) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x1b) (async) read$eventfd(r0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109e000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (rerun: 32) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd02337761"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="0f3067440f07f2440fd08558ee0000c4c1435109b8010000000f01d966400f5ed10f001066b835010f00d0420f0866bad104b00fee", 0x35}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x490267a0}, 0x1c) (async, rerun: 32) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) (async, rerun: 32) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) (async) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r8) (rerun: 64) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) (async, rerun: 32) ptrace$pokeuser(0x6, r10, 0x0, 0x10001) (async, rerun: 32) socket$packet(0x11, 0x0, 0x300) (async) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r8, 0x0) (rerun: 64) 0s ago: executing program 3 (id=1369): openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000100)=ANY=[], 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x600) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x0, 0x86b1b18158a7cb82) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) r6 = semget(0x1, 0x3, 0x42) semctl$SEM_INFO(r6, 0x2, 0x13, &(0x7f00000003c0)=""/131) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000002c0)='wg1\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120104003f7a7e40720c12009622010203010902120001000000000904", @ANYRES16], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000240)={0x96}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "000001fffbffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) kernel console output (not intermixed with test programs): ] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 332.084102][ T9139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.254773][ T7601] usb 6-1: device descriptor read/64, error -71 [ 332.268582][ T7603] usb 3-1: Using ep0 maxpacket: 16 [ 332.300299][ T9143] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 332.313097][ T7603] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 332.352329][ T9143] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 332.388172][ T7603] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.469095][ T7603] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.534222][ T7601] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 333.172692][ T7603] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.181874][ T7603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.189948][ T7603] usb 3-1: Product: syz [ 333.194684][ T7601] usb 6-1: device descriptor read/64, error -71 [ 333.211309][ T7603] usb 3-1: Manufacturer: syz [ 333.231797][ T7603] usb 3-1: SerialNumber: syz [ 333.516490][ T7601] usb usb6-port1: attempt power cycle [ 333.818360][ T7603] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 333.964691][ T7601] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 333.995542][ T7601] usb 6-1: device descriptor read/8, error -71 [ 334.254748][ T7601] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 334.266707][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'. [ 334.275948][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 334.286168][ T7601] usb 6-1: device descriptor read/8, error -71 [ 334.395343][ T7601] usb usb6-port1: unable to enumerate USB device [ 335.035038][ T9135] nvme_fabrics: missing parameter 'transport=%s' [ 335.041671][ T9135] nvme_fabrics: missing parameter 'nqn=%s' [ 336.354840][ T7603] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 336.713889][ T7603] usb 3-1: USB disconnect, device number 42 [ 336.946814][ T6722] udevd[6722]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.391010][ T9187] bond0: (slave bond_slave_0): Releasing backup interface [ 338.503236][ T9187] bond0: (slave bond_slave_1): Releasing backup interface [ 338.665426][ T9187] team0: Port device team_slave_0 removed [ 338.701765][ T9187] team0: Failed to send options change via netlink (err -105) [ 338.769156][ T9187] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 338.852740][ T9187] team0: Port device team_slave_1 removed [ 338.862598][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.873874][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.942042][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.010251][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.217698][ T9187] team0: Failed to send options change via netlink (err -105) [ 339.261254][ T9187] team0: Failed to send port change of device vlan0 via netlink (err -105) [ 339.407158][ T9187] team0: Port device vlan0 removed [ 339.553814][ T9208] dummy0: entered promiscuous mode [ 339.626356][ T9208] macsec1: entered promiscuous mode [ 339.662146][ T9208] dummy0: left promiscuous mode [ 340.446675][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.827'. [ 340.505570][ T9227] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 341.437181][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 341.669100][ T9] usb 5-1: config 0 has no interfaces? [ 341.680034][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 341.697069][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.715501][ T9] usb 5-1: Product: syz [ 341.719909][ T9] usb 5-1: Manufacturer: syz [ 341.728601][ T9] usb 5-1: SerialNumber: syz [ 341.774712][ T7589] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 341.839831][ T9] usb 5-1: config 0 descriptor?? [ 341.904816][ T7589] usb 3-1: device descriptor read/64, error -71 [ 342.142999][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 342.176131][ T7589] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 342.318771][ T7589] usb 3-1: device descriptor read/64, error -71 [ 342.474950][ T7589] usb usb3-port1: attempt power cycle [ 342.926841][ T7589] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 343.029611][ T7589] usb 3-1: device descriptor read/8, error -71 [ 343.324768][ T7589] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 343.383730][ T7589] usb 3-1: device descriptor read/8, error -71 [ 343.505023][ T7589] usb usb3-port1: unable to enumerate USB device [ 344.321009][ T7605] usb 5-1: USB disconnect, device number 58 [ 344.379893][ T9262] bridge0: entered promiscuous mode [ 344.407715][ T9262] bridge0: left promiscuous mode [ 344.487305][ T9268] trusted_key: encrypted_key: insufficient parameters specified [ 345.915985][ T9287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.705910][ T9296] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.375279][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 348.583026][ T9] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 348.691141][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.710839][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.725616][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.752926][ T9] usb 3-1: SerialNumber: syz [ 348.986533][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.029377][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.994740][ T7589] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 350.206456][ T7589] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 350.219723][ T7589] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.234494][ T7589] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 350.264794][ T7589] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 350.289005][ T7589] usb 5-1: Product: syz [ 350.304249][ T7589] usb 5-1: Manufacturer: syz [ 350.336225][ T7589] hub 5-1:4.0: USB hub found [ 350.384746][ T7588] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 350.561671][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.695006][ T7588] usb 4-1: Using ep0 maxpacket: 16 [ 350.701121][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.741037][ T7588] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 350.761542][ T7588] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.772787][ T7588] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 350.782183][ T7589] hub 5-1:4.0: 6 ports detected [ 350.788374][ T7589] hub 5-1:4.0: insufficient power available to use all downstream ports [ 350.805639][ T7588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.845179][ T7588] usb 4-1: config 0 descriptor?? [ 350.898318][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.859'. [ 350.983060][ T7589] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 350.993626][ T7589] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 351.036642][ T7589] usb 5-1: USB disconnect, device number 59 [ 352.250482][ T9352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 352.684939][ T5892] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 352.845973][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 352.876640][ T5892] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 352.907170][ T7588] usb 4-1: string descriptor 0 read error: -71 [ 352.917503][ T5892] usb 5-1: config 0 has no interface number 0 [ 352.936335][ T7588] usb 4-1: USB disconnect, device number 42 [ 352.983702][ T5892] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 353.001739][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.027427][ T5892] usb 5-1: Product: syz [ 353.038627][ T5892] usb 5-1: Manufacturer: syz [ 353.063744][ T5892] usb 5-1: SerialNumber: syz [ 353.125809][ T5892] usb 5-1: config 0 descriptor?? [ 353.409164][ T5892] kaweth 5-1:0.235: Firmware present in device. [ 353.540602][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.5.866'. [ 353.564696][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.866'. [ 353.581642][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.5.866'. [ 353.583535][ T5892] kaweth 5-1:0.235: Statistics collection: 0 [ 353.611661][ T5892] kaweth 5-1:0.235: Multicast filter limit: 0 [ 353.618480][ T5892] kaweth 5-1:0.235: MTU: 0 [ 353.623057][ T5892] kaweth 5-1:0.235: Read MAC address 00:00:00:00:00:00 [ 353.690587][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.5.866'. [ 353.862982][ T9] usb 3-1: invalid UAC_HEADER (v1) [ 353.962256][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 354.113735][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.176561][ T9375] fuse: Unknown parameter 'audit' [ 354.236092][ T5892] kaweth 5-1:0.235: kaweth interface created at eth5 [ 354.284016][ T9379] dummy0: entered promiscuous mode [ 354.322192][ T9379] macsec1: entered promiscuous mode [ 354.348341][ T9381] netlink: 'syz.5.869': attribute type 10 has an invalid length. [ 354.356260][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.5.869'. [ 354.399134][ T9] usb 5-1: USB disconnect, device number 60 [ 354.466562][ T9379] dummy0: left promiscuous mode [ 354.559257][ T9381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.584960][ T9381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.629749][ T9381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.684687][ T9381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.753717][ T9381] team0: Port device geneve0 added [ 355.249799][ T9390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.441658][ T9392] macsec1: entered allmulticast mode [ 355.499226][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 357.241297][ T9] usb 3-1: USB disconnect, device number 47 [ 357.444456][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.885'. [ 357.453770][ T9436] netem: change failed [ 358.234777][ T9405] x_tables: duplicate entry at hook 2 [ 358.415041][ T7601] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 358.569075][ T9451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 358.602889][ T7601] usb 6-1: config 0 has no interfaces? [ 358.619165][ T7601] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.647143][ T7601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.678119][ T7601] usb 6-1: Product: syz [ 358.690829][ T7601] usb 6-1: Manufacturer: syz [ 358.702641][ T7601] usb 6-1: SerialNumber: syz [ 358.729787][ T7601] usb 6-1: config 0 descriptor?? [ 359.416815][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 359.619011][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 359.637639][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 359.679997][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 359.689611][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 359.721299][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 359.752013][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 359.768193][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 359.797450][ T9] usb 4-1: Product: syz [ 359.801732][ T9] usb 4-1: Manufacturer: syz [ 359.843252][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 359.853215][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 359.867614][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 359.877363][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 361.325601][ T9] usb 6-1: USB disconnect, device number 21 [ 362.051609][ T9] usb 4-1: USB disconnect, device number 43 [ 362.706305][ T9500] loop6: detected capacity change from 0 to 63 [ 362.751838][ T9500] Buffer I/O error on dev loop6, logical block 0, async page read [ 362.770663][ T9500] Buffer I/O error on dev loop6, logical block 1, async page read [ 362.851847][ T9500] Buffer I/O error on dev loop6, logical block 2, async page read [ 362.877857][ T9500] Buffer I/O error on dev loop6, logical block 3, async page read [ 362.896163][ T5998] Buffer I/O error on dev loop6, logical block 0, async page read [ 362.914827][ T5998] Buffer I/O error on dev loop6, logical block 1, async page read [ 362.924192][ T5998] Buffer I/O error on dev loop6, logical block 2, async page read [ 362.965006][ T5998] Buffer I/O error on dev loop6, logical block 3, async page read [ 362.974365][ T9502] Buffer I/O error on dev loop6, logical block 0, async page read [ 363.018626][ T9502] Buffer I/O error on dev loop6, logical block 1, async page read [ 363.354270][ T9509] syzkaller1: entered promiscuous mode [ 363.359854][ T9509] syzkaller1: entered allmulticast mode [ 364.187141][ T9514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 365.661096][ T7605] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 366.555768][ T7605] usb 4-1: config 0 has no interfaces? [ 366.591805][ T9550] can: request_module (can-proto-5) failed. [ 366.654665][ T7605] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.663969][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.696925][ T7605] usb 4-1: Product: syz [ 366.722502][ T7605] usb 4-1: Manufacturer: syz [ 366.743662][ T7605] usb 4-1: SerialNumber: syz [ 366.823417][ T7605] usb 4-1: config 0 descriptor?? [ 367.787428][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 368.339594][ T7588] usb 4-1: USB disconnect, device number 44 [ 368.400707][ T9573] Cannot find add_set index 0 as target [ 368.588939][ T9578] binder: 9577:9578 ioctl c0306201 2000000003c0 returned -14 [ 368.724339][ T9576] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 368.742286][ T9576] netlink: 2 bytes leftover after parsing attributes in process `syz.2.920'. [ 368.830271][ T9576] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.840579][ T9576] bond0: (slave team0): Enslaving as an active interface with an up link [ 369.092273][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 369.138503][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 369.234783][ T9593] netlink: 'syz.2.925': attribute type 7 has an invalid length. [ 369.434683][ T5891] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 369.611967][ T9597] loop8: detected capacity change from 0 to 1 [ 369.638285][ T9597] Dev loop8: unable to read RDB block 1 [ 369.701530][ T5891] usb 6-1: config index 0 descriptor too short (expected 63524, got 36) [ 369.728453][ T9597] loop8: unable to read partition table [ 369.841481][ T5891] usb 6-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 369.864823][ T9597] loop8: partition table beyond EOD, truncated [ 369.880921][ T9597] loop_reread_partitions: partition scan of loop8 (þ被>à– ) failed (rc=-5) [ 370.764789][ T5891] usb 6-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 370.933879][ T5892] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 370.949762][ T5891] usb 6-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 371.245894][ T9615] netlink: 'syz.4.930': attribute type 5 has an invalid length. [ 371.253912][ T5891] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.272019][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 371.288456][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.371290][ T5892] usb 3-1: config 0 has no interfaces? [ 371.390346][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.400380][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.418239][ T5892] usb 3-1: Product: syz [ 371.422751][ T5892] usb 3-1: Manufacturer: syz [ 371.432386][ T5892] usb 3-1: SerialNumber: syz [ 371.467397][ T5892] usb 3-1: config 0 descriptor?? [ 372.580485][ T5891] usb 6-1: string descriptor 0 read error: -71 [ 372.616030][ T5891] usb 6-1: USB disconnect, device number 22 [ 372.882473][ T9627] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 373.313976][ T7601] usb 3-1: USB disconnect, device number 48 [ 373.451052][ T9624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.644664][ T7605] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 374.416977][ T7605] usb 4-1: Using ep0 maxpacket: 16 [ 374.495818][ T7605] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 374.518106][ T7605] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.614716][ T7605] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 374.623908][ T7605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.684710][ T7605] usb 4-1: config 0 descriptor?? [ 375.276632][ T7588] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 375.304043][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 375.464940][ T7588] usb 3-1: Using ep0 maxpacket: 16 [ 375.513061][ T7588] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 375.531012][ T7588] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.541387][ T7588] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 375.567610][ T7588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.603749][ T7588] usb 3-1: config 0 descriptor?? [ 376.850130][ T5891] usb 4-1: USB disconnect, device number 45 [ 378.183447][ T9] usb 3-1: USB disconnect, device number 49 [ 378.314761][ T5891] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 378.515352][ T5891] usb 4-1: config 0 has no interfaces? [ 378.532889][ T5891] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.542732][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.560638][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.567079][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.569180][ T5891] usb 4-1: Product: syz [ 378.603806][ T5891] usb 4-1: Manufacturer: syz [ 378.649997][ T5891] usb 4-1: SerialNumber: syz [ 378.685436][ T5891] usb 4-1: config 0 descriptor?? [ 378.939384][ T9737] syz_tun: entered allmulticast mode [ 378.984707][ T5891] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 379.072726][ T9736] syz_tun: left allmulticast mode [ 379.196730][ T5891] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.242198][ T5891] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.332669][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.380700][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.431291][ T5891] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.454810][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 379.494203][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 379.550545][ T5891] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.569768][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.595250][ T5891] usb 5-1: Product: syz [ 379.603170][ T5891] usb 5-1: Manufacturer: syz [ 379.624929][ T9745] syz_tun: entered promiscuous mode [ 379.651388][ T5891] cdc_wdm 5-1:1.0: skipping garbage [ 379.681483][ T5891] cdc_wdm 5-1:1.0: skipping garbage [ 379.689045][ T9745] syz_tun: left promiscuous mode [ 379.722119][ T5891] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 379.746521][ T5891] cdc_wdm 5-1:1.0: Unknown control protocol [ 380.575728][ T5891] usb 4-1: USB disconnect, device number 46 [ 381.224655][ T5891] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 381.401992][ T5891] usb 3-1: not running at top speed; connect to a high speed hub [ 381.461807][ T5891] usb 3-1: config 8 has an invalid interface number: 185 but max is 3 [ 381.520162][ T5891] usb 3-1: config 8 has an invalid descriptor of length 204, skipping remainder of the config [ 381.577170][ T5891] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 4 [ 381.800687][ T5891] usb 3-1: config 8 has no interface number 0 [ 382.116039][ T7601] usb 5-1: USB disconnect, device number 61 [ 382.166530][ T5891] usb 3-1: config 8 interface 185 altsetting 6 endpoint 0x3 has invalid maxpacket 4983, setting to 64 [ 382.204585][ T5891] usb 3-1: config 8 interface 185 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.333691][ T5891] usb 3-1: config 8 interface 185 has no altsetting 0 [ 382.374648][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 382.412545][ T5891] usb 3-1: New USB device found, idVendor=19d2, idProduct=0033, bcdDevice=36.5f [ 382.416554][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.963'. [ 382.453735][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.506732][ T5891] usb 3-1: Product: ï¯ë˜† [ 382.511210][ T5891] usb 3-1: Manufacturer: П [ 382.515992][ T9796] netlink: 56 bytes leftover after parsing attributes in process `syz.4.963'. [ 382.559900][ T5891] usb 3-1: SerialNumber: ϯâ’ᣇ攸☊⺼喲ï­äš¬åšª [ 382.594616][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 382.616711][ T9] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 382.646484][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.677174][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 382.688740][ T9778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 382.712157][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.778752][ T9] usb 6-1: config 0 descriptor?? [ 382.986401][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.018036][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.045591][ T7588] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 383.121040][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.168028][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.244847][ T7588] usb 5-1: Using ep0 maxpacket: 32 [ 383.258572][ T7588] usb 5-1: config 1 has an invalid descriptor of length 43, skipping remainder of the config [ 383.292041][ T7588] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.323859][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.364181][ T7588] usb 5-1: config 1 interface 0 has no altsetting 0 [ 383.387683][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.438444][ T7588] usb 5-1: New USB device found, idVendor=045e, idProduct=0730, bcdDevice=20.40 [ 383.535242][ T7588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.552031][ T9809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.966'. [ 383.707027][ T7588] usb 5-1: Product: â [ 383.733956][ T7588] usb 5-1: Manufacturer: ш [ 383.749896][ T7588] usb 5-1: SerialNumber: 倊 [ 384.916371][ T5891] option 3-1:8.185: GSM modem (1-port) converter detected [ 385.035078][ T5891] usb 3-1: USB disconnect, device number 50 [ 385.143726][ T5891] option 3-1:8.185: device disconnected [ 385.373370][ T9] usb 6-1: string descriptor 0 read error: -71 [ 385.418992][ T9] usb 6-1: USB disconnect, device number 23 [ 385.752241][ T7588] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 385.767329][ T7588] usb 5-1: USB disconnect, device number 62 [ 385.932027][ T9838] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 386.474660][ T7601] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 386.614797][ T7601] usb 3-1: device descriptor read/64, error -71 [ 386.874762][ T7601] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 387.052452][ T7601] usb 3-1: device descriptor read/64, error -71 [ 387.167557][ T7601] usb usb3-port1: attempt power cycle [ 387.644944][ T7601] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 387.665544][ T7601] usb 3-1: device descriptor read/8, error -71 [ 387.894959][ T7605] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 387.946326][ T7601] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 387.988223][ T7601] usb 3-1: device descriptor read/8, error -71 [ 388.055451][ T7605] usb 6-1: Using ep0 maxpacket: 16 [ 388.074463][ T7605] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 388.090234][ T7605] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.106684][ T7601] usb usb3-port1: unable to enumerate USB device [ 388.119463][ T7605] usb 6-1: Product: syz [ 388.137283][ T7605] usb 6-1: Manufacturer: syz [ 388.159653][ T7605] usb 6-1: SerialNumber: syz [ 388.236021][ T7605] usb 6-1: config 0 descriptor?? [ 388.251563][ T7605] as10x_usb: device has been detected [ 388.264296][ T7605] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 388.317759][ T7605] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 388.373706][ T7605] as10x_usb: error during firmware upload part1 [ 388.382692][ T7605] Registered device Sky IT Digital Key (green led) [ 388.449467][ T9870] fuse: Unknown parameter 'rootmode20000000000000000040000' [ 388.520885][ T9872] FAULT_INJECTION: forcing a failure. [ 388.520885][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 388.533730][ T9872] CPU: 0 UID: 0 PID: 9872 Comm: syz.5.978 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 388.533763][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 388.533778][ T9872] Call Trace: [ 388.533789][ T9872] [ 388.533797][ T9872] dump_stack_lvl+0x189/0x250 [ 388.533833][ T9872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.533859][ T9872] ? __pfx__printk+0x10/0x10 [ 388.533883][ T9872] ? __pfx___might_resched+0x10/0x10 [ 388.533899][ T9872] ? fs_reclaim_acquire+0x7d/0x100 [ 388.533950][ T9872] should_fail_ex+0x414/0x560 [ 388.533974][ T9872] should_failslab+0xa8/0x100 [ 388.534001][ T9872] kmem_cache_alloc_noprof+0x73/0x3c0 [ 388.534025][ T9872] ? getname_flags+0xb8/0x540 [ 388.534048][ T9872] ? __pfx_vfs_write+0x10/0x10 [ 388.534073][ T9872] getname_flags+0xb8/0x540 [ 388.534103][ T9872] do_sys_openat2+0xbc/0x1c0 [ 388.534135][ T9872] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.534168][ T9872] ? ksys_write+0x1f0/0x250 [ 388.534188][ T9872] ? rcu_is_watching+0x15/0xb0 [ 388.534224][ T9872] __x64_sys_openat+0x138/0x170 [ 388.534259][ T9872] do_syscall_64+0xf6/0x210 [ 388.534285][ T9872] ? clear_bhb_loop+0x45/0xa0 [ 388.534309][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.534328][ T9872] RIP: 0033:0x7f19ce98e969 [ 388.534346][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.534362][ T9872] RSP: 002b:00007f19cf8a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.534383][ T9872] RAX: ffffffffffffffda RBX: 00007f19cebb6080 RCX: 00007f19ce98e969 [ 388.534397][ T9872] RDX: 0000000000040081 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 388.534411][ T9872] RBP: 00007f19cf8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 388.534423][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.534434][ T9872] R13: 0000000000000000 R14: 00007f19cebb6080 R15: 00007f19cecdfa28 [ 388.534464][ T9872] [ 389.034638][ T7601] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 389.194793][ T7601] usb 5-1: Using ep0 maxpacket: 16 [ 389.359086][ T7601] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 389.387613][ T7588] usb 6-1: USB disconnect, device number 24 [ 389.399161][ T7601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.443475][ T7588] Unregistered device Sky IT Digital Key (green led) [ 389.468092][ T7588] as10x_usb: device has been disconnected [ 389.477969][ T9880] macsec1: entered promiscuous mode [ 389.485974][ T7601] usb 5-1: Product: syz [ 389.505571][ T7601] usb 5-1: Manufacturer: syz [ 389.506036][ T9880] bond0: entered promiscuous mode [ 389.510208][ T7601] usb 5-1: SerialNumber: syz [ 389.531424][ T7601] usb 5-1: config 0 descriptor?? [ 389.561108][ T9880] team0: entered promiscuous mode [ 389.585014][ T7601] as10x_usb: device has been detected [ 389.587704][ T9880] bond0: left promiscuous mode [ 389.598109][ T9880] team0: left promiscuous mode [ 389.609001][ T7601] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 389.674054][ T7601] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 389.691917][ T7601] as10x_usb: error during firmware upload part1 [ 389.699251][ T7601] Registered device Sky IT Digital Key (green led) [ 389.771313][ T9878] fuse: Unknown parameter 'rootmode20000000000000000040000' [ 389.880803][ T9886] random: crng reseeded on system resumption [ 390.915212][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 390.943814][ T7602] usb 5-1: USB disconnect, device number 63 [ 390.970027][ T7602] Unregistered device Sky IT Digital Key (green led) [ 390.973130][ T7602] as10x_usb: device has been disconnected [ 391.084782][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 391.094130][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 391.102785][ T9] usb 6-1: config 0 has no interface number 0 [ 391.120797][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 391.132093][ T5891] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 391.140715][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.149089][ T9] usb 6-1: Product: syz [ 391.153584][ T9] usb 6-1: Manufacturer: syz [ 391.163857][ T9] usb 6-1: SerialNumber: syz [ 391.171924][ T9] usb 6-1: config 0 descriptor?? [ 391.252137][ T9900] binder: 9899:9900 ioctl c0306201 2000000003c0 returned -14 [ 391.306092][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 391.313281][ T5891] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 391.322255][ T5891] usb 4-1: config 0 has no interface number 0 [ 391.332152][ T5891] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 391.343485][ T5891] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 391.357383][ T5891] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 391.366719][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.375108][ T5891] usb 4-1: Product: syz [ 391.383267][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.395727][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.404284][ T5891] usb 4-1: Manufacturer: syz [ 391.409028][ T5891] usb 4-1: SerialNumber: syz [ 391.431350][ T5891] usb 4-1: config 0 descriptor?? [ 391.448099][ T9896] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 391.455847][ T9896] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 391.625113][ T9] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 391.635576][ T9] usb 6-1: No valid video chain found. [ 391.680780][ T9896] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 391.698047][ T9896] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 391.834776][ T7602] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 391.865502][ T7605] usb 6-1: USB disconnect, device number 25 [ 392.020809][ T7602] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.038164][ T7602] usb 5-1: config 1 has no interface number 0 [ 392.050536][ T7602] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.073282][ T7602] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 392.092208][ T7602] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 392.120459][ T7602] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.137140][ T7602] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.154510][ T7602] usb 5-1: Product: syz [ 392.166464][ T7602] usb 5-1: Manufacturer: syz [ 392.197215][ T7602] usb 5-1: SerialNumber: syz [ 392.352319][ T9896] loop4: detected capacity change from 0 to 7 [ 392.374922][ T9896] Dev loop4: unable to read RDB block 7 [ 392.425061][ T9896] loop4: AHDI p1 p2 [ 392.429198][ T9896] loop4: partition table partially beyond EOD, truncated [ 392.437204][ T9896] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 392.663831][ T7602] cdc_ncm 5-1:1.1: bind() failure [ 392.783385][ T9896] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.946972][ T7601] usb 5-1: USB disconnect, device number 64 [ 393.100465][ T5891] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 393.156884][ T5891] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 393.185809][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 393.262685][ T5891] asix 4-1:0.251: probe with driver asix failed with error -71 [ 393.338789][ T5891] usb 4-1: USB disconnect, device number 47 [ 393.545391][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 393.545437][ T30] audit: type=1326 audit(1746792198.923:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 393.631919][ T9926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 393.720403][ T30] audit: type=1326 audit(1746792198.923:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 393.811896][ T30] audit: type=1326 audit(1746792198.923:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 393.834297][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.915494][ T5891] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 394.049590][ T30] audit: type=1326 audit(1746792198.923:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.071605][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.168589][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 394.264751][ T5891] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 394.283728][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.297427][ T30] audit: type=1326 audit(1746792198.923:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.319528][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.436214][ T5891] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.506052][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.570475][ T5891] usb 5-1: Product: syz [ 394.574816][ T30] audit: type=1326 audit(1746792198.923:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.605026][ T5891] usb 5-1: Manufacturer: syz [ 394.620004][ T5891] usb 5-1: SerialNumber: syz [ 394.659732][ T30] audit: type=1326 audit(1746792198.923:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.742621][ T30] audit: type=1326 audit(1746792198.923:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.825629][ T30] audit: type=1326 audit(1746792198.923:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 394.880048][ T5891] usb 5-1: 0:2 : does not exist [ 394.934948][ T5891] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 394.945686][ T7602] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 394.975055][ T30] audit: type=1326 audit(1746792198.923:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.2.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f49d1f8e969 code=0x7ffc0000 [ 395.141259][ T7602] usb 4-1: config 0 has no interfaces? [ 395.169319][ T7602] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 395.187785][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.212168][ T7602] usb 4-1: Product: syz [ 395.232803][ T7602] usb 4-1: Manufacturer: syz [ 395.270107][ T7602] usb 4-1: SerialNumber: syz [ 395.285100][ T5891] usb 5-1: USB disconnect, device number 65 [ 395.458859][ T7602] usb 4-1: config 0 descriptor?? [ 396.020876][ T9937] team0: Device gtp0 is of different type [ 396.082454][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.998'. [ 396.231536][ T9944] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.253435][ T9944] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.284146][ T9944] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.330404][ T9944] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 396.361425][ T9944] geneve2: entered promiscuous mode [ 396.409679][ T9944] geneve2: entered allmulticast mode [ 396.446820][ T9950] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 396.842936][ T9958] tipc: Enabling of bearer rejected, failed to enable media [ 397.013820][ T9941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1000'. [ 397.031225][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1000'. [ 397.050231][ T9957] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 397.296716][ T9970] vlan0: entered promiscuous mode [ 397.594770][ T7602] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 397.747661][ T7602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.774720][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 397.820703][ T7602] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.826719][ T5891] usb 4-1: USB disconnect, device number 48 [ 397.862662][ T7602] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 397.880272][ T7602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.902038][ T7602] usb 6-1: config 0 descriptor?? [ 397.940939][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 397.956799][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 397.964925][ T7605] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 397.972605][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 397.972634][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.972654][ T9] usb 5-1: Product: syz [ 397.972669][ T9] usb 5-1: Manufacturer: syz [ 397.972684][ T9] usb 5-1: SerialNumber: syz [ 397.978068][ T9] usb 5-1: config 0 descriptor?? [ 398.036073][ T9984] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 398.159696][ T7605] usb 3-1: config 0 has no interfaces? [ 398.221122][ T7605] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 398.230666][ T7605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.240317][ T7605] usb 3-1: Product: syz [ 398.244699][ T7605] usb 3-1: Manufacturer: syz [ 398.249375][ T7605] usb 3-1: SerialNumber: syz [ 398.261748][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 398.284683][ T7605] usb 3-1: config 0 descriptor?? [ 398.294663][ T7601] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 398.325562][ T9988] geneve2: entered promiscuous mode [ 398.331286][ T9988] geneve2: entered allmulticast mode [ 398.345198][ T7602] usbhid 6-1:0.0: can't add hid device: -71 [ 398.352194][ T7602] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 398.378910][ T7602] usb 6-1: USB disconnect, device number 27 [ 398.435968][ T9] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 398.443382][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 398.456885][ T7601] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 398.486636][ T7601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 398.499586][ T7601] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 398.509607][ T9] usb 3-1: USB disconnect, device number 55 [ 398.512742][ T7601] usb 4-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 398.551291][ T7601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.574099][ T7601] usb 4-1: config 0 descriptor?? [ 398.991086][ T9991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.004242][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.015116][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.022832][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.030347][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.044089][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.051497][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.058703][ T7601] a4tech 0003:09DA:001A.0005: unknown main item tag 0x0 [ 399.072845][ T7601] a4tech 0003:09DA:001A.0005: hidraw0: USB HID v80.04 Device [HID 09da:001a] on usb-dummy_hcd.3-1/input0 [ 399.189965][ T9991] loop4: detected capacity change from 0 to 524287999 [ 399.212378][ T7601] usb 4-1: USB disconnect, device number 49 [ 399.437161][ T9994] fido_id[9994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 399.864844][ T7601] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 400.181012][ T7601] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 400.194412][ T7601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.207108][ T7601] usb 6-1: Product: syz [ 400.211836][ T7601] usb 6-1: Manufacturer: syz [ 400.218100][ T7601] usb 6-1: SerialNumber: syz [ 400.228164][ T7601] usb 6-1: config 0 descriptor?? [ 400.243181][ T7601] go7007 6-1:0.0: Sensoray 2250 found [ 400.252411][ T7601] go7007 6-1:0.0: probe with driver go7007 failed with error -12 [ 400.485133][T10001] vlan2: entered promiscuous mode [ 400.490492][T10001] vlan2: entered allmulticast mode [ 400.496567][T10001] hsr_slave_1: entered allmulticast mode [ 400.512316][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.523439][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.548755][T10014] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 400.688082][ T7601] usb 5-1: USB disconnect, device number 66 [ 400.708928][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1018'. [ 402.414810][ T7601] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 402.677655][ T7601] usb 5-1: config 0 has no interfaces? [ 402.687596][ T7601] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 402.696867][ T7601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.747878][ T7601] usb 5-1: Product: syz [ 402.755238][ T7601] usb 5-1: Manufacturer: syz [ 402.760201][ T7601] usb 5-1: SerialNumber: syz [ 402.791532][ T7601] usb 5-1: config 0 descriptor?? [ 403.005983][ T7601] usb 5-1: USB disconnect, device number 67 [ 403.728419][T10040] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1029'. [ 403.768029][ T7602] usb 6-1: USB disconnect, device number 28 [ 403.799050][T10037] cgroup: fork rejected by pids controller in /syz4 [ 406.703523][ T6654] bond1 (unregistering): (slave ip6erspan0): Releasing backup interface [ 406.922470][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.950860][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.972727][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.981967][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.989983][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 407.005342][ T7601] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 407.210799][ T7601] usb 6-1: Using ep0 maxpacket: 16 [ 407.265880][ T7601] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 407.276071][ T7601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.284217][ T7601] usb 6-1: Product: syz [ 407.289055][ T7601] usb 6-1: Manufacturer: syz [ 407.293786][ T7601] usb 6-1: SerialNumber: syz [ 407.310042][ T7601] usb 6-1: config 0 descriptor?? [ 407.334926][ T7605] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 407.342856][ T7601] as10x_usb: device has been detected [ 407.352656][ T7601] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 407.412452][ T7601] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 407.471521][ T7601] as10x_usb: error during firmware upload part1 [ 407.481144][ T7601] Registered device Sky IT Digital Key (green led) [ 407.505274][ T7605] usb 4-1: config 0 has no interfaces? [ 407.544838][ T7605] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 407.578391][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.591256][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.609107][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.622224][ T7605] usb 4-1: Product: syz [ 407.636263][ T7605] usb 4-1: Manufacturer: syz [ 407.643743][T10070] fuse: Unknown parameter 'rootmode20000000000000000040000' [ 407.664910][ T7605] usb 4-1: SerialNumber: syz [ 407.687832][ T7605] usb 4-1: config 0 descriptor?? [ 407.703730][T10076] random: crng reseeded on system resumption [ 407.907884][ T7605] usb 4-1: USB disconnect, device number 50 [ 408.151630][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.163595][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.177018][ T6654] bond0 (unregistering): Released all slaves [ 408.291451][ T6654] bond1 (unregistering): Released all slaves [ 408.713458][ T7605] usb 6-1: USB disconnect, device number 29 [ 408.782728][ T7605] Unregistered device Sky IT Digital Key (green led) [ 408.804468][ T7605] as10x_usb: device has been disconnected [ 409.034718][ T5140] Bluetooth: hci1: command tx timeout [ 409.663102][ T7605] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 409.824657][ T7605] usb 4-1: device descriptor read/64, error -71 [ 410.117982][ T7605] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 410.275384][ T6654] hsr_slave_0: left promiscuous mode [ 410.305573][ T6654] hsr_slave_1: left promiscuous mode [ 410.345188][ T7605] usb 4-1: device descriptor read/64, error -71 [ 410.459051][ T7605] usb usb4-port1: attempt power cycle [ 410.825503][ T7605] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 410.845456][ T7605] usb 4-1: device descriptor read/8, error -71 [ 411.095898][ T7605] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 411.115474][ T5140] Bluetooth: hci1: command tx timeout [ 411.115602][ T7605] usb 4-1: device descriptor read/8, error -71 [ 411.250454][ T7605] usb usb4-port1: unable to enumerate USB device [ 411.449350][ T7601] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 411.616806][ T7601] usb 6-1: Using ep0 maxpacket: 16 [ 411.625047][ T7601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.637315][ T7601] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.693281][ T7601] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 411.707137][ T7601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.721678][ T7601] usb 6-1: config 0 descriptor?? [ 411.776489][ T7605] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 411.809634][T10073] chnl_net:caif_netlink_parms(): no params data found [ 411.977094][ T7605] usb 3-1: config 0 has no interfaces? [ 411.991377][ T7605] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 412.004721][ T7605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.012989][ T7605] usb 3-1: Product: syz [ 412.037067][ T7605] usb 3-1: Manufacturer: syz [ 412.052974][ T7605] usb 3-1: SerialNumber: syz [ 412.068314][ T7605] usb 3-1: config 0 descriptor?? [ 412.158356][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.170568][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.262291][T10073] bridge_slave_0: entered allmulticast mode [ 412.385743][T10073] bridge_slave_0: entered promiscuous mode [ 412.402181][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.424477][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.458902][T10073] bridge_slave_1: entered allmulticast mode [ 412.515026][T10073] bridge_slave_1: entered promiscuous mode [ 412.647951][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.707333][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.892049][T10144] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1054'. [ 413.024810][T10073] team0: Port device team_slave_0 added [ 413.080735][T10073] team0: Port device team_slave_1 added [ 413.204721][ T5140] Bluetooth: hci1: command tx timeout [ 413.619853][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.637955][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.817142][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.871422][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.884151][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.931023][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.096200][ T7588] usb 6-1: USB disconnect, device number 30 [ 414.660610][T10073] hsr_slave_0: entered promiscuous mode [ 414.700743][T10073] hsr_slave_1: entered promiscuous mode [ 414.872976][ T7588] usb 3-1: USB disconnect, device number 56 [ 415.154639][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 415.275063][ T5140] Bluetooth: hci1: command tx timeout [ 415.416914][ T9] usb 6-1: config index 0 descriptor too short (expected 63524, got 36) [ 415.535005][ T9] usb 6-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 415.556656][ T9] usb 6-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 415.574286][ T9] usb 6-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 415.594666][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 415.603896][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.724442][ T9] usb 6-1: string descriptor 0 read error: -71 [ 416.790473][ T9] usb 6-1: USB disconnect, device number 31 [ 417.344753][ T7601] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 417.549341][ T7601] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.580825][ T7601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.615071][ T7601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 417.642767][ T7601] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.666287][ T7601] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.683474][ T7601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.723138][ T7601] usb 4-1: config 0 descriptor?? [ 417.962205][T10073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 417.993982][T10073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.053282][T10073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.174307][ T7601] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 418.198199][T10073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.220090][ T7601] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 418.288182][ T7601] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 418.379554][ T7601] usb 4-1: USB disconnect, device number 55 [ 418.473946][T10228] fido_id[10228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 418.671271][T10073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.704893][T10073] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.744639][ T7601] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 418.754752][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.761910][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.813660][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.820924][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.828592][ T7605] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 418.904696][ T7601] usb 4-1: device descriptor read/64, error -71 [ 419.005271][ T7605] usb 6-1: device descriptor read/64, error -71 [ 419.018169][T10241] kvm: Disabled LAPIC found during irq injection [ 419.096881][T10073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.144703][ T7601] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 419.200642][T10073] veth0_vlan: entered promiscuous mode [ 419.224416][T10073] veth1_vlan: entered promiscuous mode [ 419.262642][ T7605] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 419.325236][ T7601] usb 4-1: device descriptor read/64, error -71 [ 419.425117][ T7605] usb 6-1: device descriptor read/64, error -71 [ 419.431914][T10073] veth0_macvtap: entered promiscuous mode [ 419.438552][ T7601] usb usb4-port1: attempt power cycle [ 419.482165][T10073] veth1_macvtap: entered promiscuous mode [ 419.576217][ T7605] usb usb6-port1: attempt power cycle [ 419.662845][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.688040][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.736282][T10073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.765979][T10073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.824636][ T7601] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 419.835051][T10073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.856344][T10073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.885023][ T7601] usb 4-1: device descriptor read/8, error -71 [ 419.891888][T10073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.902464][T10073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.926032][T10073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.964855][T10073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.014679][ T7605] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 420.066291][ T7605] usb 6-1: device descriptor read/8, error -71 [ 420.134654][ T7601] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 420.222266][ T7601] usb 4-1: device descriptor read/8, error -71 [ 420.325046][ T7605] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 420.334071][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.365800][ T7601] usb usb4-port1: unable to enumerate USB device [ 420.367955][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.396140][ T7605] usb 6-1: device descriptor read/8, error -71 [ 420.488109][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.505813][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.506433][ T7605] usb usb6-port1: unable to enumerate USB device [ 420.542236][ T7588] IPVS: starting estimator thread 0... [ 420.639417][T10265] IPVS: using max 30 ests per chain, 72000 per kthread [ 421.115006][ T7588] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 421.335774][ T7588] usb 5-1: config index 0 descriptor too short (expected 63524, got 36) [ 421.362837][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1083'. [ 421.369796][ T7588] usb 5-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 421.382489][ T7588] usb 5-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 421.410955][ T7588] usb 5-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 421.463254][ T7588] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.528435][ T7588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.994883][ T7589] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 422.155881][ T7589] usb 6-1: Using ep0 maxpacket: 16 [ 422.169543][ T7589] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 422.181046][ T7589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.207459][ T7589] usb 6-1: Product: syz [ 422.237098][ T7589] usb 6-1: Manufacturer: syz [ 422.268915][ T7589] usb 6-1: SerialNumber: syz [ 422.299734][ T7589] usb 6-1: config 0 descriptor?? [ 422.321858][ T7589] as10x_usb: device has been detected [ 422.332223][ T7589] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 422.384441][ T7589] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 422.426599][ T7589] as10x_usb: error during firmware upload part1 [ 422.433823][ T7589] Registered device Sky IT Digital Key (green led) [ 422.527089][T10290] fuse: Unknown parameter 'rootmode20000000000000000040000' [ 422.621751][T10299] macsec1: entered promiscuous mode [ 422.733572][T10300] FAULT_INJECTION: forcing a failure. [ 422.733572][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 422.746761][T10300] CPU: 1 UID: 0 PID: 10300 Comm: syz.5.1085 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 422.746789][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 422.746802][T10300] Call Trace: [ 422.746810][T10300] [ 422.746819][T10300] dump_stack_lvl+0x189/0x250 [ 422.746869][T10300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.746898][T10300] ? __pfx__printk+0x10/0x10 [ 422.746924][T10300] ? __pfx___might_resched+0x10/0x10 [ 422.746941][T10300] ? fs_reclaim_acquire+0x7d/0x100 [ 422.746976][T10300] should_fail_ex+0x414/0x560 [ 422.747002][T10300] should_failslab+0xa8/0x100 [ 422.747030][T10300] kmem_cache_alloc_noprof+0x73/0x3c0 [ 422.747054][T10300] ? alloc_empty_file+0x55/0x1d0 [ 422.747088][T10300] alloc_empty_file+0x55/0x1d0 [ 422.747130][T10300] path_openat+0x107/0x3830 [ 422.747148][T10300] ? arch_stack_walk+0xfc/0x150 [ 422.747186][T10300] ? stack_trace_save+0x9c/0xe0 [ 422.747208][T10300] ? stack_depot_save_flags+0x40/0x910 [ 422.747236][T10300] ? kasan_save_track+0x4f/0x80 [ 422.747257][T10300] ? __kasan_slab_alloc+0x6c/0x80 [ 422.747295][T10300] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 422.747318][T10300] ? getname_flags+0xb8/0x540 [ 422.747345][T10300] ? __pfx_path_openat+0x10/0x10 [ 422.747362][T10300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.747403][T10300] do_filp_open+0x1fa/0x410 [ 422.747426][T10300] ? __pfx_do_filp_open+0x10/0x10 [ 422.747468][T10300] ? _raw_spin_unlock+0x28/0x50 [ 422.747489][T10300] ? alloc_fd+0x64c/0x6c0 [ 422.747525][T10300] do_sys_openat2+0x121/0x1c0 [ 422.747559][T10300] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.747593][T10300] ? ksys_write+0x1f0/0x250 [ 422.747614][T10300] ? rcu_is_watching+0x15/0xb0 [ 422.747651][T10300] __x64_sys_openat+0x138/0x170 [ 422.747687][T10300] do_syscall_64+0xf6/0x210 [ 422.747714][T10300] ? clear_bhb_loop+0x45/0xa0 [ 422.747738][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.747758][T10300] RIP: 0033:0x7f19ce98e969 [ 422.747776][T10300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.747793][T10300] RSP: 002b:00007f19cf8a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.747815][T10300] RAX: ffffffffffffffda RBX: 00007f19cebb6080 RCX: 00007f19ce98e969 [ 422.747830][T10300] RDX: 0000000000040081 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 422.747844][T10300] RBP: 00007f19cf8a6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.747865][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.747876][T10300] R13: 0000000000000000 R14: 00007f19cebb6080 R15: 00007f19cecdfa28 [ 422.747907][T10300] [ 423.278879][ T7588] usb 5-1: string descriptor 0 read error: -71 [ 423.376345][ T7588] usb 5-1: USB disconnect, device number 68 [ 423.588264][T10303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 423.890966][ T7601] usb 6-1: USB disconnect, device number 36 [ 424.009314][ T7601] Unregistered device Sky IT Digital Key (green led) [ 424.035695][ T7601] as10x_usb: device has been disconnected [ 424.286737][T10309] input: syz1 as /devices/virtual/input/input19 [ 424.987351][ T7588] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 425.284655][ T7589] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 425.317318][ T7588] usb 3-1: Using ep0 maxpacket: 16 [ 425.349038][ T7588] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 425.365790][ T7588] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.421751][ T7588] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 425.454737][ T7589] usb 6-1: Using ep0 maxpacket: 16 [ 425.464633][ T7588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.098949][ T7588] usb 3-1: config 0 descriptor?? [ 426.116273][ T7589] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 426.138300][ T7589] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.165645][ T7589] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 426.194668][ T7589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.208121][ T7589] usb 6-1: Product: syz [ 426.212332][ T7589] usb 6-1: Manufacturer: syz [ 426.227639][ T7589] usb 6-1: SerialNumber: syz [ 426.245938][ T7589] usb 6-1: config 0 descriptor?? [ 426.273633][ T7589] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 426.337169][ T7589] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 426.456455][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.495308][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.538519][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.555217][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.587435][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.620349][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.668459][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.703829][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.762848][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.805317][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.840225][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.038040][T10356] kernel profiling enabled (shift: 7) [ 427.688297][ T7589] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 427.700284][ T7589] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 427.721663][ T7589] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 427.752829][ T7589] em28xx 6-1:0.0: No AC97 audio processor [ 427.779770][ T7589] usb 6-1: USB disconnect, device number 37 [ 427.812525][ T7589] em28xx 6-1:0.0: Disconnecting em28xx [ 427.830651][T10365] binder: 10363:10365 ioctl 4018620d 0 returned -22 [ 427.861442][ T7589] em28xx 6-1:0.0: Freeing device [ 427.995196][ T7588] usb 3-1: USB disconnect, device number 57 [ 428.526844][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 428.784736][ T7605] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 428.951279][ T7605] usb 3-1: config 0 has no interfaces? [ 428.984838][ T7605] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 429.041181][ T7605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.061800][ T7605] usb 3-1: Product: syz [ 429.072794][ T7605] usb 3-1: Manufacturer: syz [ 429.084248][ T7605] usb 3-1: SerialNumber: syz [ 429.101218][ T7605] usb 3-1: config 0 descriptor?? [ 429.419593][T10381] team0: Device gtp1 is up. Set it down before adding it as a team port [ 429.466007][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 430.315161][ T7589] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 430.514635][ T7589] usb 4-1: Using ep0 maxpacket: 16 [ 430.548676][ T7589] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 430.594621][ T7589] usb 4-1: config 0 has no interface number 0 [ 430.637440][ T7589] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 430.694312][ T7589] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 430.795024][ T7589] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 430.852658][ T7589] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 430.941352][ T7589] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 430.993000][ T7589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.058953][ T7589] usb 4-1: Product: syz [ 431.090792][ T7589] usb 4-1: Manufacturer: syz [ 431.134687][ T7589] usb 4-1: SerialNumber: syz [ 431.163789][ T7589] usb 4-1: config 0 descriptor?? [ 431.202205][T10406] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 431.582856][ T7588] usb 3-1: USB disconnect, device number 58 [ 431.695714][ T7589] qcserial 4-1:0.49: Qualcomm USB modem converter detected [ 431.758971][ T7589] usb 4-1: USB disconnect, device number 60 [ 431.776980][ T7589] qcserial 4-1:0.49: device disconnected [ 432.022535][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 432.624710][ T7589] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 432.984170][ T7589] usb 6-1: config index 0 descriptor too short (expected 63524, got 36) [ 433.124111][ T7589] usb 6-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 433.129805][T10456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.295967][ T7589] usb 6-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 433.403756][T10465] tipc: Started in network mode [ 433.411192][T10465] tipc: Node identity 0000030000000000400000000000402d, cluster identity 4711 [ 433.421435][T10465] tipc: Enabling of bearer rejected, failed to enable media [ 433.492357][ T7589] usb 6-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 433.709900][ T7605] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 433.864629][ T7605] usb 5-1: device descriptor read/64, error -71 [ 433.923335][ T7589] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 434.021118][ T7589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.070220][T10470] can: request_module (can-proto-5) failed. [ 434.137527][ T7605] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 434.287140][ T7605] usb 5-1: device descriptor read/64, error -71 [ 434.416862][ T7605] usb usb5-port1: attempt power cycle [ 434.443503][T10472] program syz.3.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.764973][ T7605] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 434.795587][ T7605] usb 5-1: device descriptor read/8, error -71 [ 435.195668][ T7605] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 435.229228][ T7605] usb 5-1: device descriptor read/8, error -71 [ 435.365464][ T7605] usb usb5-port1: unable to enumerate USB device [ 435.817399][T10494] netlink: 'syz.3.1133': attribute type 10 has an invalid length. [ 435.840189][T10494] syz_tun: entered promiscuous mode [ 435.894141][T10494] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 436.165322][ T7588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.179381][ T5891] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 436.267482][ T7589] usb 6-1: string descriptor 0 read error: -71 [ 436.315551][ T7589] usb 6-1: USB disconnect, device number 38 [ 436.422537][T10501] gretap0: entered promiscuous mode [ 436.456240][T10501] macsec1: entered promiscuous mode [ 436.532023][T10501] gretap0: left promiscuous mode [ 437.097889][T10516] binder: BINDER_SET_CONTEXT_MGR already set [ 437.103977][T10516] binder: 10515:10516 ioctl 4018620d 2000000001c0 returned -16 [ 439.124669][T10520] vivid-007: ================= START STATUS ================= [ 439.147191][T10520] vivid-007: Enable Output Cropping: true [ 439.163980][T10520] vivid-007: Enable Output Composing: true [ 439.190572][T10520] vivid-007: Enable Output Scaler: true [ 439.208002][T10520] vivid-007: Tx RGB Quantization Range: Automatic [ 439.227376][T10520] vivid-007: Transmit Mode: HDMI [ 439.253404][T10520] vivid-007: Hotplug Present: 0x00000000 [ 439.271837][T10520] vivid-007: RxSense Present: 0x00000000 [ 439.301482][T10520] vivid-007: EDID Present: 0x00000000 [ 439.319638][T10520] vivid-007: ================== END STATUS ================== [ 439.704931][ T7589] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 439.977821][ T7589] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 439.986439][ T7589] usb 4-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 439.995881][ T7589] usb 4-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 439.999431][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.012786][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.039652][ T7589] usb 4-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 440.103529][ T7589] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.241724][ T7589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.480264][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1157'. [ 441.494901][T10582] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1157'. [ 441.679383][T10583] i2c i2c-0: Invalid block write size 37 [ 442.198377][T10582] vlan2: entered allmulticast mode [ 442.298048][T10582] macvtap0: entered allmulticast mode [ 443.056577][ T7589] usb 4-1: string descriptor 0 read error: -71 [ 443.080500][ T7589] usb 4-1: USB disconnect, device number 61 [ 443.200825][T10590] macsec0: entered promiscuous mode [ 443.252133][T10590] macsec0: entered allmulticast mode [ 443.263957][T10590] veth1_macvtap: entered allmulticast mode [ 443.632880][ T7589] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 443.676504][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 443.814144][ T7589] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 443.842963][ T7589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.902683][ T7589] usb 4-1: Product: syz [ 443.915902][ T7589] usb 4-1: Manufacturer: syz [ 443.934706][ T7589] usb 4-1: SerialNumber: syz [ 443.958557][ T7589] usb 4-1: config 0 descriptor?? [ 444.054151][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 444.650980][ T7589] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 444.685146][ T7589] f81604 4-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 444.700748][ T7589] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 445.279087][T10624] can: request_module (can-proto-5) failed. [ 446.304737][ T7589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 446.628065][ T9] usb 4-1: USB disconnect, device number 62 [ 447.095354][T10643] netlink: 'syz.4.1174': attribute type 9 has an invalid length. [ 447.114743][T10643] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.1174'. [ 447.224642][ T7605] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 447.402119][T10647] dummy0: entered promiscuous mode [ 447.446104][ T7605] usb 4-1: config 247 has too many interfaces: 66, using maximum allowed: 32 [ 447.455184][ T7605] usb 4-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 447.547446][T10647] macsec1: entered promiscuous mode [ 447.555757][ T7605] usb 4-1: config 247 has 0 interfaces, different from the descriptor's value: 66 [ 447.614007][ T7605] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.621269][T10657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.625161][ T7605] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.656899][T10657] loop4: detected capacity change from 0 to 524287999 [ 447.664400][T10647] dummy0: left promiscuous mode [ 447.705219][ T7605] usb 4-1: Product: syz [ 447.709441][ T7605] usb 4-1: Manufacturer: syz [ 448.407360][ T7605] usb 4-1: USB disconnect, device number 63 [ 448.642647][T10661] syz_tun: entered allmulticast mode [ 448.695449][T10659] syz_tun: left allmulticast mode [ 448.909217][T10668] binder: 10667:10668 ioctl 4018620d 0 returned -22 [ 449.769005][ T5890] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 449.952183][ T5890] usb 4-1: config index 0 descriptor too short (expected 63524, got 36) [ 449.970317][ T5890] usb 4-1: config 227 has too many interfaces: 94, using maximum allowed: 32 [ 450.002686][ T5890] usb 4-1: config 227 has an invalid descriptor of length 37, skipping remainder of the config [ 450.131643][ T5890] usb 4-1: config 227 has 0 interfaces, different from the descriptor's value: 94 [ 450.213194][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 450.239445][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.264770][ T7601] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 451.392170][ T5890] usb 4-1: string descriptor 0 read error: -71 [ 451.402559][ T5890] usb 4-1: USB disconnect, device number 64 [ 451.425175][ T7601] usb 5-1: Using ep0 maxpacket: 32 [ 451.438434][ T7601] usb 5-1: config index 0 descriptor too short (expected 27168, got 36) [ 451.449005][ T7601] usb 5-1: config 44 has too many interfaces: 88, using maximum allowed: 32 [ 451.481299][ T7601] usb 5-1: config 44 has an invalid descriptor of length 1, skipping remainder of the config [ 451.496584][ T7601] usb 5-1: config 44 has 0 interfaces, different from the descriptor's value: 88 [ 451.508517][ T7601] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 451.530383][ T7601] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.534099][T10695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.771545][T10693] loop2: detected capacity change from 0 to 7 [ 451.790532][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.799756][ C0] buffer_io_error: 1738 callbacks suppressed [ 451.799772][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.814052][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.823270][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.832774][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.842033][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.854674][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.863912][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.874130][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.883377][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.897813][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.907064][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.915911][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.925095][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.934152][T10693] ldm_validate_partition_table(): Disk read failed. [ 451.944822][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.954040][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.962948][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.972191][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 451.982923][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 451.992164][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 452.000420][T10693] Dev loop2: unable to read RDB block 0 [ 452.030157][T10693] loop2: unable to read partition table [ 452.036942][T10693] loop2: partition table beyond EOD, truncated [ 452.074211][T10693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 452.122571][ T5200] ldm_validate_partition_table(): Disk read failed. [ 452.134476][ T5200] Dev loop2: unable to read RDB block 0 [ 452.141905][ T5200] loop2: unable to read partition table [ 452.150705][ T5200] loop2: partition table beyond EOD, truncated [ 452.180893][ T7601] usb 5-1: string descriptor 0 read error: -71 [ 452.196328][ T7601] usb 5-1: USB disconnect, device number 73 [ 452.511697][T10707] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 452.528516][T10707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.170472][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.183326][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.192279][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.200415][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.208350][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.578187][T10720] vivid-007: ================= START STATUS ================= [ 453.629409][T10720] vivid-007: Enable Output Cropping: true [ 453.635514][T10720] vivid-007: Enable Output Composing: true [ 453.641539][T10720] vivid-007: Enable Output Scaler: true [ 453.647345][T10720] vivid-007: Tx RGB Quantization Range: Automatic [ 453.653948][T10720] vivid-007: Transmit Mode: HDMI [ 453.659222][T10720] vivid-007: Hotplug Present: 0x00000000 [ 453.665913][T10720] vivid-007: RxSense Present: 0x00000000 [ 453.671729][T10720] vivid-007: EDID Present: 0x00000000 [ 453.677377][T10720] vivid-007: ================== END STATUS ================== [ 454.150019][T10729] chnl_net:caif_netlink_parms(): no params data found [ 454.437703][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 454.567901][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.575334][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.594277][T10729] bridge_slave_0: entered allmulticast mode [ 454.624028][T10729] bridge_slave_0: entered promiscuous mode [ 454.638402][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.646235][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.657432][T10729] bridge_slave_1: entered allmulticast mode [ 454.686894][T10729] bridge_slave_1: entered promiscuous mode [ 455.281229][T10729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.295301][ T5140] Bluetooth: hci3: command tx timeout [ 455.312987][T10729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.391789][ T7582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.419344][T10729] team0: Port device team_slave_0 added [ 455.430066][T10729] team0: Port device team_slave_1 added [ 455.456372][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.645705][T10729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.672754][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.698755][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.806229][T10729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.870618][T10729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.898517][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.995785][T10729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.354658][ T7582] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 456.420811][T10729] hsr_slave_0: entered promiscuous mode [ 456.466898][T10729] hsr_slave_1: entered promiscuous mode [ 456.478574][T10729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.496135][T10729] Cannot create hsr debugfs directory [ 456.526291][ T7582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.541892][ T7582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.594639][ T7582] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 456.604421][ T7582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.649350][ T7582] usb 5-1: config 0 descriptor?? [ 456.881081][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 457.024873][ T7603] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 457.186809][ T7603] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 457.191055][T10729] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.207891][ T7603] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 457.239031][ T7603] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 457.258475][ T7603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 457.284274][ T7603] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 457.350556][ T7603] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 457.364748][ T5140] Bluetooth: hci3: command tx timeout [ 457.369729][ T7603] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 457.379006][ T7603] usb 6-1: Product: syz [ 457.383303][ T7603] usb 6-1: Manufacturer: syz [ 457.423196][ T7603] cdc_wdm 6-1:1.0: skipping garbage [ 457.430588][ T7603] cdc_wdm 6-1:1.0: skipping garbage [ 457.523017][ T7603] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 457.540390][T10729] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.551268][ T7603] cdc_wdm 6-1:1.0: Unknown control protocol [ 457.566444][T10789] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1220'. [ 457.698691][T10729] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.812050][T10729] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.939067][ T7582] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0007/input/input22 [ 458.188173][ T7589] usb 6-1: USB disconnect, device number 39 [ 458.299649][ T7582] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 458.427352][ T7582] usb 5-1: USB disconnect, device number 74 [ 458.541063][T10800] fido_id[10800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 458.660938][T10729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.681544][T10729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.719738][T10729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.825372][T10729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.194941][ T7603] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 459.346599][ T7603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.400735][ T7603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.420950][T10729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.435100][ T5140] Bluetooth: hci3: command tx timeout [ 459.447704][T10729] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.460359][ T7603] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 459.486639][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.494038][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.505193][ T7582] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 459.645077][ T7603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.657094][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.664240][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.673582][ T7603] usb 5-1: config 0 descriptor?? [ 459.698147][ T7582] usb 6-1: Using ep0 maxpacket: 32 [ 459.712603][ T7582] usb 6-1: config 0 has an invalid interface number: 202 but max is 1 [ 459.797365][ T7582] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.869625][ T7582] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 459.924692][ T7582] usb 6-1: config 0 has no interface number 0 [ 459.933011][ T7582] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 459.974709][ T7589] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 460.008321][ T7582] usb 6-1: config 0 interface 202 altsetting 87 bulk endpoint 0x2 has invalid maxpacket 52 [ 460.026828][T10729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.066502][ T7582] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 460.117637][ T7603] hid-led 0003:04D8:F372.0008: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 460.211917][ T7582] usb 6-1: config 0 interface 202 has no altsetting 0 [ 460.230296][ T7582] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 460.240141][ T7582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.248712][ T7582] usb 6-1: Product: syz [ 460.253100][ T7582] usb 6-1: Manufacturer: syz [ 460.266858][ T7582] usb 6-1: SerialNumber: syz [ 460.274874][ T7589] usb 4-1: Using ep0 maxpacket: 16 [ 460.292384][ T7589] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 460.306518][ T7589] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 460.327663][ T7589] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 460.340038][ T7589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.375365][T10804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1224'. [ 460.377494][ T7582] usb 6-1: config 0 descriptor?? [ 460.422029][T10729] veth0_vlan: entered promiscuous mode [ 460.429819][T10809] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 460.442890][ T7589] usb 4-1: config 0 descriptor?? [ 460.495287][ T7582] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 460.499651][ T7603] hid-led 0003:04D8:F372.0008: Greynut Luxafor initialized [ 460.632760][T10729] veth1_vlan: entered promiscuous mode [ 460.690240][ T6645] usb 6-1: Failed to submit usb control message: -71 [ 460.700099][ T7582] usb 6-1: USB disconnect, device number 40 [ 460.722380][ T7602] usb 5-1: USB disconnect, device number 75 [ 460.732107][ T6645] usb 6-1: unable to send the bmi data to the device: -71 [ 460.745162][ T6645] usb 6-1: unable to get target info from device [ 460.757910][ T6645] usb 6-1: could not get target info (-71) [ 460.806175][ T6649] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 460.817116][T10729] veth0_macvtap: entered promiscuous mode [ 460.830431][ T6645] usb 6-1: could not probe fw (-71) [ 460.896292][ T6662] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 460.937537][ T6645] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 460.957388][T10729] veth1_macvtap: entered promiscuous mode [ 461.123492][ T1148] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 461.140782][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.160469][ T53] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 461.192299][ T53] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 461.194343][ T53] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 461.194438][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.195854][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.195876][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.199323][ T6649] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 461.200641][T10729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.213968][ T6645] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 461.218170][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.218193][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.218238][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.218253][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.218503][ T6649] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 461.220244][T10729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.231555][T10729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.231642][T10729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.231672][T10729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.231701][T10729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.237325][ T6649] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 461.238865][ T6645] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 461.275324][ T1148] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 461.319683][ T6647] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 461.387409][ T53] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 461.400646][ T1148] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 461.404149][ T6645] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 461.405894][ T6645] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 461.515274][ T5140] Bluetooth: hci3: command tx timeout [ 461.537173][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.537200][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.767143][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.767173][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.087377][T10837] hsr0: entered promiscuous mode [ 462.098782][ T7582] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 462.240377][ T7582] usb 6-1: device descriptor read/64, error -71 [ 462.416756][ T7589] usb 4-1: string descriptor 0 read error: -71 [ 462.426434][ T7589] usb 4-1: USB disconnect, device number 65 [ 462.484900][ T7582] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 462.615023][ T7582] usb 6-1: device descriptor read/64, error -71 [ 462.654366][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'. [ 462.704708][ T7588] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 462.712645][T10845] gretap0: entered promiscuous mode [ 462.725422][ T7582] usb usb6-port1: attempt power cycle [ 462.741797][T10845] macsec1: entered promiscuous mode [ 462.770590][T10845] gretap0: left promiscuous mode [ 462.866891][ T7588] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 462.920924][ T7588] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 462.984649][ T7588] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 462.995567][ T7588] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 463.007269][ T7588] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 463.024266][ T7588] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.034484][ T7588] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.091898][ T7582] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 463.112803][ T7588] usb 3-1: Product: syz [ 463.126252][ T7582] usb 6-1: device descriptor read/8, error -71 [ 463.136680][ T7588] usb 3-1: Manufacturer: syz [ 463.165146][ T7588] cdc_wdm 3-1:1.0: skipping garbage [ 463.179425][ T7588] cdc_wdm 3-1:1.0: skipping garbage [ 463.203577][ T7588] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 463.216648][ T7588] cdc_wdm 3-1:1.0: Unknown control protocol [ 463.444812][ T7582] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 463.476294][ T7582] usb 6-1: device descriptor read/8, error -71 [ 463.619186][ T7582] usb usb6-port1: unable to enumerate USB device [ 463.921475][ T7582] usb 3-1: USB disconnect, device number 59 [ 464.249043][T10856] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1241'. [ 464.263076][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1241'. [ 464.855143][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 464.925144][T10871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1245'. [ 464.957857][ T7582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 464.961920][T10873] macsec1: entered promiscuous mode [ 465.015284][T10873] bond0: entered promiscuous mode [ 465.044173][T10873] bond_slave_0: entered promiscuous mode [ 465.085413][T10873] bond_slave_1: entered promiscuous mode [ 465.115965][T10873] bond0: left promiscuous mode [ 465.120834][T10873] bond_slave_0: left promiscuous mode [ 465.132756][T10873] bond_slave_1: left promiscuous mode [ 465.167962][T10871] vlan2: entered allmulticast mode [ 465.173394][T10871] macvtap0: entered allmulticast mode [ 465.180426][T10871] veth0_macvtap: entered allmulticast mode [ 465.355071][ T7589] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 465.521401][ T7589] usb 4-1: Using ep0 maxpacket: 16 [ 465.548483][ T7589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.570329][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.583363][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.653363][ T7589] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 465.681588][ T7589] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.786393][ T7589] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 466.804557][ T7589] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 466.812726][ T7589] usb 4-1: Manufacturer: syz [ 466.859514][ T7589] usb 4-1: config 0 descriptor?? [ 467.334669][ T7589] rc_core: IR keymap rc-hauppauge not found [ 467.353140][ T7589] Registered IR keymap rc-empty [ 467.379952][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.435274][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.477166][ T7589] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 467.538524][ T7589] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 467.627774][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.664828][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.707517][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.734923][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.821189][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.845266][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.875001][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.915064][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.926977][ T7582] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 467.934890][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.964856][ T7589] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 467.987340][ T7589] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 467.999079][ T7589] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 468.043487][ T7589] usb 4-1: USB disconnect, device number 66 [ 468.107866][ T7582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.122181][ T7582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.171349][ T7582] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 468.223170][ T7582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.257545][ T7582] usb 5-1: config 0 descriptor?? [ 468.675928][ T7582] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 468.823908][ T7582] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 469.014213][ T7582] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 469.138636][ C0] hid-thrustmaster 0003:044F:B65D.0009: Unknown packet type 0x0, unable to proceed further with wheel init [ 469.355812][ T7602] usb 5-1: USB disconnect, device number 76 [ 469.653410][T10931] fido_id[10931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 470.071871][T10936] bridge0: entered promiscuous mode [ 470.084465][T10936] bridge0: left promiscuous mode [ 470.319940][T10933] vivid-007: ================= START STATUS ================= [ 470.327941][T10933] vivid-007: Enable Output Cropping: true [ 470.350514][T10933] vivid-007: Enable Output Composing: true [ 470.357118][T10933] vivid-007: Enable Output Scaler: true [ 470.362823][T10933] vivid-007: Tx RGB Quantization Range: Automatic [ 470.370386][T10933] vivid-007: Transmit Mode: HDMI [ 470.414650][ T7602] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 470.477966][T10933] vivid-007: Hotplug Present: 0x00000000 [ 470.502881][T10933] vivid-007: RxSense Present: 0x00000000 [ 470.548458][T10933] vivid-007: EDID Present: 0x00000000 [ 470.554101][T10933] vivid-007: ================== END STATUS ================== [ 470.715317][ T7601] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 470.873094][ T7602] usb 3-1: config 0 has no interfaces? [ 471.090015][ T7601] usb 4-1: Using ep0 maxpacket: 16 [ 471.247097][ T7601] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 471.557398][ T7601] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 471.566927][ T7601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.579210][ T7601] usb 4-1: config 0 descriptor?? [ 471.606597][ T7601] gspca_main: etoms-2.14.0 probing 102c:6151 [ 471.615672][ T7602] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 471.633478][ T7602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.641760][ T7602] usb 3-1: Product: syz [ 471.657370][ T7602] usb 3-1: Manufacturer: syz [ 471.669928][ T7602] usb 3-1: SerialNumber: syz [ 471.680037][ T7602] usb 3-1: config 0 descriptor?? [ 471.924655][ T7601] usb 4-1: USB disconnect, device number 67 [ 472.296653][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.305611][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.536990][ T7601] usb 3-1: USB disconnect, device number 60 [ 472.630650][T10962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.755628][T10962] loop4: detected capacity change from 0 to 524287999 [ 474.286236][T10981] netlink: 'syz.0.1273': attribute type 10 has an invalid length. [ 474.359679][T10989] fuse: Bad value for 'fd' [ 474.523681][T10991] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 474.564093][ T7588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.575403][ T7589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.583977][T10991] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 474.837016][T10998] xt_cgroup: xt_cgroup: no path or classid specified [ 475.624958][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1281'. [ 475.674612][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1281'. [ 475.718674][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1281'. [ 475.734060][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1281'. [ 476.214238][T11017] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1286'. [ 476.238161][T11019] fuse: Unknown parameter '0x0000000000000003' [ 476.244343][T11017] gretap0: entered promiscuous mode [ 476.255327][T11018] tipc: Started in network mode [ 476.256410][T11017] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1286'. [ 476.300861][T11018] tipc: Node identity , cluster identity 4711 [ 476.314182][T11018] tipc: Failed to set node id, please configure manually [ 476.337804][T11018] tipc: Enabling of bearer rejected, failed to enable media [ 476.347172][T11017] 0ªX¹¦D: renamed from gretap0 [ 476.364688][ T7588] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 476.384437][T11017] 0ªX¹¦D: left promiscuous mode [ 476.415348][T11017] 0ªX¹¦D: entered allmulticast mode [ 476.444349][T11017] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 476.523631][T11025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.551324][T11025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.569245][ T7588] usb 4-1: config index 0 descriptor too short (expected 7204, got 90) [ 476.597556][ T7588] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.614070][ T7588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.631073][ T7588] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.641548][ T7588] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 476.665224][ T7588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.691647][ T7588] usb 4-1: config 0 descriptor?? [ 476.744747][T11033] binder: 11031:11033 ioctl c0306201 2000000003c0 returned -14 [ 476.774998][ T5887] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 476.905173][ T7582] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 476.916560][T11013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.927055][ T5887] usb 3-1: No LPM exit latency info found, disabling LPM. [ 476.933537][T11013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.942491][ T5887] usb 3-1: string descriptor 0 read error: -22 [ 476.952686][ T5887] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 476.974148][T11039] fuse: Unknown parameter 'ÜUf­êôU(¢ìÀœ±é*>&˜ol' [ 477.009008][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.029264][ T5887] usb 3-1: config 0 descriptor?? [ 477.095250][ T7582] usb 6-1: Using ep0 maxpacket: 32 [ 477.108403][ T7582] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.132956][ T7582] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.143280][ T7582] usb 6-1: config 0 interface 0 has no altsetting 0 [ 477.170624][ T7582] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 477.187403][ T7582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.203204][ T7582] usb 6-1: config 0 descriptor?? [ 477.243104][ T5887] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 477.288722][ T5887] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 477.309585][ T5887] dib0700: firmware download failed at 7 with -22 [ 477.332894][ T5887] usb 3-1: USB disconnect, device number 61 [ 477.935485][ T7588] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 478.001956][ T7588] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 478.098199][ T7588] usb 4-1: USB disconnect, device number 68 [ 478.239489][T11047] fido_id[11047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 478.281993][ T7582] usbhid 6-1:0.0: can't add hid device: -71 [ 478.308880][ T7582] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 478.313241][T11052] fuse: Unknown parameter '0x0000000000000003' [ 478.348624][ T7582] usb 6-1: USB disconnect, device number 45 [ 479.635145][ T7588] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 479.854687][ T7588] usb 3-1: Using ep0 maxpacket: 32 [ 479.881911][ T7588] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 479.932672][ T7588] usb 3-1: config 0 has no interface number 0 [ 479.952799][ T7588] usb 3-1: config 0 interface 184 has no altsetting 0 [ 479.975882][ T7588] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 480.009493][ T7588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.023751][ T7588] usb 3-1: Product: syz [ 480.029143][ T7588] usb 3-1: Manufacturer: syz [ 480.062523][ T7588] usb 3-1: SerialNumber: syz [ 480.107934][ T7588] usb 3-1: config 0 descriptor?? [ 480.145562][ T7588] smsc75xx v1.0.0 [ 480.434709][T11078] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 480.447709][T11078] team0: Port device team_slave_1 removed [ 480.767353][ T7588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 480.815320][ T7588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 480.978076][T11090] fuse: Unknown parameter '0x0000000000000003' [ 481.060284][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 481.077618][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1311'. [ 481.139216][T11092] vlan2: entered allmulticast mode [ 481.159198][T11092] macvtap0: entered allmulticast mode [ 481.184733][T11092] veth0_macvtap: entered allmulticast mode [ 481.336884][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'. [ 481.639112][ T7588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 481.650335][ T7582] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 481.667687][ T7588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 481.682498][ T7588] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 481.694902][ T7588] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 481.731003][ T7588] usb 3-1: USB disconnect, device number 62 [ 481.816860][ T7582] usb 6-1: config 0 has no interfaces? [ 481.826811][ T7582] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 481.843702][ T7582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.860592][ T7582] usb 6-1: Product: syz [ 481.866417][ T7582] usb 6-1: Manufacturer: syz [ 482.260635][ T7582] usb 6-1: SerialNumber: syz [ 482.289323][ T7582] usb 6-1: config 0 descriptor?? [ 482.494616][ T7589] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 482.563718][T11098] team0: Device gtp0 is of different type [ 482.629646][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'. [ 482.693856][T11119] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 482.782398][T11119] bond1: entered promiscuous mode [ 482.797725][T11119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.829166][ T7589] usb 5-1: Using ep0 maxpacket: 8 [ 482.841013][ T7589] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.849135][ T7589] usb 5-1: config 0 has no interface number 0 [ 482.855305][ T7589] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.866556][ T7589] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 482.877195][ T7589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.893546][ T7589] usb 5-1: config 0 descriptor?? [ 482.966814][ T7589] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 483.001050][T11123] bond1: (slave bridge5): making interface the new active one [ 483.025419][T11123] bridge5: entered promiscuous mode [ 483.032761][T11123] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 483.113909][ T7603] usb 5-1: USB disconnect, device number 77 [ 484.157148][ T7582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.353965][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 484.353985][ T30] audit: type=1400 audit(1746792289.783:91): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=956BAD20D136C881F10D0F4D86F01EBCD32F1A169FE474EA436C481C6F302ACE078960CD595AC8CB33738F455003F9A25A4AFBE4F33FE735 pid=11151 comm="syz.2.1328" [ 484.593782][ T7603] usb 6-1: USB disconnect, device number 46 [ 484.681210][T11157] netlink: 'syz.5.1332': attribute type 11 has an invalid length. [ 484.873543][T11160] gretap0: entered promiscuous mode [ 484.892579][T11160] macsec2: entered promiscuous mode [ 484.933640][T11160] gretap0: left promiscuous mode [ 485.498386][T11185] tipc: Started in network mode [ 485.521731][T11185] tipc: Node identity , cluster identity 4711 [ 485.534186][T11185] tipc: Failed to set node id, please configure manually [ 485.549775][T11185] tipc: Enabling of bearer rejected, failed to enable media [ 485.622009][T11189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 485.782356][T11191] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 485.799045][T11191] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 486.358709][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1347'. [ 487.243921][T11220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.980812][ T7603] hid (null): invalid report_size 15079 [ 488.168037][ T7603] hid-generic 0008:0007:FFFFF6A8.000B: invalid report_size 15079 [ 488.245407][ T7603] hid-generic 0008:0007:FFFFF6A8.000B: item 0 2 1 7 parsing failed [ 488.298549][ T7603] hid-generic 0008:0007:FFFFF6A8.000B: probe with driver hid-generic failed with error -22 [ 488.404593][ T7589] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 488.526939][T11239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.534902][ T7589] usb 5-1: device descriptor read/64, error -71 [ 488.774601][ T7589] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 488.824802][ T9] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 488.934977][ T7589] usb 5-1: device descriptor read/64, error -71 [ 489.014572][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 489.024882][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 489.044609][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 489.060084][ T7589] usb usb5-port1: attempt power cycle [ 489.068723][ T9] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 489.082063][ T9] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 489.109038][ T9] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 489.139785][ T9] usb 6-1: config 128 has no interface number 0 [ 489.267707][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 489.288235][ T9] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.298745][ T9] usb 6-1: config 128 interface 127 has no altsetting 0 [ 489.311701][ T9] usb 6-1: language id specifier not provided by device, defaulting to English [ 489.324187][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 489.341624][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.351197][ T9] usb 6-1: Product: syz [ 489.355918][ T9] usb 6-1: Manufacturer: syz [ 489.360655][ T9] usb 6-1: SerialNumber: syz [ 489.390585][T11246] xt_hashlimit: size too large, truncated to 1048576 [ 489.491703][ T7589] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 489.538372][ T7589] usb 5-1: device descriptor read/8, error -71 [ 489.660397][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 489.682778][ T9] usb 6-1: USB disconnect, device number 47 [ 489.690125][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 489.737470][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.814898][ T7589] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 489.844169][T11254] PKCS8: Unsupported PKCS#8 version [ 489.855624][ T7589] usb 5-1: device descriptor read/8, error -71 [ 489.968250][ T7589] usb usb5-port1: unable to enumerate USB device [ 490.254784][ T5887] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 490.415217][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 490.428657][ T5887] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 490.440015][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.448814][ T5887] usb 3-1: Product: syz [ 490.453139][ T5887] usb 3-1: Manufacturer: syz [ 490.460417][ T5887] usb 3-1: SerialNumber: syz [ 490.483269][ T5887] usb 3-1: config 0 descriptor?? [ 490.503374][ T5887] as10x_usb: device has been detected [ 490.514897][ T7602] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 490.523554][ T5887] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 490.560731][ T5887] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 490.593460][ T5887] as10x_usb: error during firmware upload part1 [ 490.611941][ T5887] Registered device Sky IT Digital Key (green led) [ 490.686486][ T7602] usb 6-1: config 0 has an invalid interface number: 11 but max is 0 [ 490.701526][ T7602] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.712366][ T7602] usb 6-1: config 0 has no interface number 0 [ 490.719541][ T7602] usb 6-1: config 0 interface 11 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 490.733692][ T7602] usb 6-1: config 0 interface 11 has no altsetting 0 [ 490.741747][ T7602] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 490.754324][T11262] fuse: Unknown parameter 'rootmode20000000000000000040000' [ 490.761972][ T7602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.773329][ T7602] usb 6-1: config 0 descriptor?? [ 490.793054][ T7602] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected [ 490.801288][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 87 [ 490.818991][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 7 [ 490.829142][T11269] random: crng reseeded on system resumption [ 490.837915][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81 [ 490.844087][T11269] FAULT_INJECTION: forcing a failure. [ 490.844087][T11269] name failslab, interval 1, probability 0, space 0, times 0 [ 490.861367][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.2.1367 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 490.861393][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 490.861423][T11269] Call Trace: [ 490.861431][T11269] [ 490.861440][T11269] dump_stack_lvl+0x189/0x250 [ 490.861480][T11269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.861509][T11269] ? __pfx__printk+0x10/0x10 [ 490.861541][T11269] should_fail_ex+0x414/0x560 [ 490.861582][T11269] should_failslab+0xa8/0x100 [ 490.861612][T11269] __kmalloc_cache_noprof+0x70/0x3d0 [ 490.861639][T11269] ? async_schedule_node_domain+0x5b/0x120 [ 490.861678][T11269] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 490.861713][T11269] async_schedule_node_domain+0x5b/0x120 [ 490.861762][T11269] dev_cache_fw_image+0x364/0x3e0 [ 490.861801][T11269] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 490.861838][T11269] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 490.861871][T11269] dpm_for_each_dev+0x53/0xb0 [ 490.861910][T11269] fw_pm_notify+0x200/0x2a0 [ 490.861939][T11269] ? __pfx_fw_pm_notify+0x10/0x10 [ 490.861986][T11269] ? __pfx_autoremove_wake_function+0x10/0x10 [ 490.862012][T11269] ? blocking_notifier_call_chain_robust+0x65/0x100 [ 490.862045][T11269] notifier_call_chain+0x1b3/0x3e0 [ 490.862072][T11269] blocking_notifier_call_chain_robust+0x85/0x100 [ 490.862100][T11269] pm_notifier_call_chain_robust+0x2c/0x60 [ 490.862129][T11269] snapshot_open+0x133/0x280 [ 490.862158][T11269] ? __pfx_snapshot_open+0x10/0x10 [ 490.862182][T11269] misc_open+0x2b9/0x330 [ 490.862214][T11269] chrdev_open+0x4c9/0x5e0 [ 490.862244][T11269] ? __pfx_chrdev_open+0x10/0x10 [ 490.862288][T11269] ? __pfx_chrdev_open+0x10/0x10 [ 490.862322][T11269] do_dentry_open+0xdf0/0x1970 [ 490.862371][T11269] vfs_open+0x3b/0x340 [ 490.862398][T11269] ? path_openat+0x2ecd/0x3830 [ 490.862421][T11269] path_openat+0x2ee5/0x3830 [ 490.862439][T11269] ? arch_stack_walk+0xfc/0x150 [ 490.862511][T11269] ? __pfx_path_openat+0x10/0x10 [ 490.862529][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.862574][T11269] do_filp_open+0x1fa/0x410 [ 490.862597][T11269] ? __pfx_do_filp_open+0x10/0x10 [ 490.862644][T11269] ? _raw_spin_unlock+0x28/0x50 [ 490.862664][T11269] ? alloc_fd+0x64c/0x6c0 [ 490.862703][T11269] do_sys_openat2+0x121/0x1c0 [ 490.862737][T11269] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.862773][T11269] ? ksys_write+0x1f0/0x250 [ 490.862794][T11269] ? rcu_is_watching+0x15/0xb0 [ 490.862833][T11269] __x64_sys_openat+0x138/0x170 [ 490.862870][T11269] do_syscall_64+0xf6/0x210 [ 490.862897][T11269] ? clear_bhb_loop+0x45/0xa0 [ 490.862922][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.862942][T11269] RIP: 0033:0x7fa634d8e969 [ 490.862969][T11269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.862986][T11269] RSP: 002b:00007fa635bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 490.863007][T11269] RAX: ffffffffffffffda RBX: 00007fa634fb6080 RCX: 00007fa634d8e969 [ 490.863022][T11269] RDX: 0000000000040081 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 490.863036][T11269] RBP: 00007fa635bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 490.863048][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.863060][T11269] R13: 0000000000000000 R14: 00007fa634fb6080 R15: 00007fa6350dfa28 [ 490.863101][T11269] [ 490.864897][ T5887] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 490.948983][T11269] [ 491.207313][T11269] ============================================ [ 491.213996][T11269] WARNING: possible recursive locking detected [ 491.220160][T11269] 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 Not tainted [ 491.227283][T11269] -------------------------------------------- [ 491.233432][T11269] syz.2.1367/11269 is trying to acquire lock: [ 491.239522][T11269] ffffffff8e8ff068 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x52/0x890 [ 491.247462][T11269] [ 491.247462][T11269] but task is already holding lock: [ 491.254824][T11269] ffffffff8e8ff068 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 491.263107][T11269] [ 491.263107][T11269] other info that might help us debug this: [ 491.271170][T11269] Possible unsafe locking scenario: [ 491.271170][T11269] [ 491.278644][T11269] CPU0 [ 491.281941][T11269] ---- [ 491.285229][T11269] lock(fw_lock); [ 491.288963][T11269] lock(fw_lock); [ 491.292696][T11269] [ 491.292696][T11269] *** DEADLOCK *** [ 491.292696][T11269] [ 491.300846][T11269] May be due to missing lock nesting notation [ 491.300846][T11269] [ 491.309165][T11269] 5 locks held by syz.2.1367/11269: [ 491.314884][T11269] #0: ffffffff8e7ad4e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 491.323350][T11269] #1: ffffffff8ddeb7e8 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x4a/0x70 [ 491.333714][T11269] #2: ffffffff8de0f230 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0x65/0x100 [ 491.345551][T11269] #3: ffffffff8e8ff068 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x1e8/0x2a0 [ 491.354279][T11269] #4: ffffffff8e8fa348 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x29/0xb0 [ 491.363605][T11269] [ 491.363605][T11269] stack backtrace: [ 491.369518][T11269] CPU: 0 UID: 0 PID: 11269 Comm: syz.2.1367 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 491.369540][T11269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 491.369550][T11269] Call Trace: [ 491.369558][T11269] [ 491.369565][T11269] dump_stack_lvl+0x189/0x250 [ 491.369592][T11269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.369614][T11269] ? __pfx__printk+0x10/0x10 [ 491.369630][T11269] ? print_lock_name+0xde/0x100 [ 491.369655][T11269] print_deadlock_bug+0x28b/0x2a0 [ 491.369677][T11269] validate_chain+0x1a3f/0x2140 [ 491.369693][T11269] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 491.369711][T11269] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.369733][T11269] __lock_acquire+0xaac/0xd20 [ 491.369756][T11269] ? assign_fw+0x52/0x890 [ 491.369776][T11269] lock_acquire+0x120/0x360 [ 491.369796][T11269] ? assign_fw+0x52/0x890 [ 491.369817][T11269] ? kasan_save_free_info+0x46/0x50 [ 491.369841][T11269] ? kmem_cache_free+0x192/0x3f0 [ 491.369860][T11269] ? __async_dev_cache_fw_image+0x7f/0x280 [ 491.369886][T11269] __mutex_lock+0x182/0xe80 [ 491.369904][T11269] ? assign_fw+0x52/0x890 [ 491.369924][T11269] ? path_openat+0x2ee5/0x3830 [ 491.369938][T11269] ? do_filp_open+0x1fa/0x410 [ 491.369952][T11269] ? __x64_sys_openat+0x138/0x170 [ 491.369974][T11269] ? do_syscall_64+0xf6/0x210 [ 491.369992][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.370010][T11269] ? assign_fw+0x52/0x890 [ 491.370030][T11269] ? __pfx___mutex_lock+0x10/0x10 [ 491.370053][T11269] ? kasan_quarantine_put+0xdd/0x220 [ 491.370070][T11269] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.370088][T11269] assign_fw+0x52/0x890 [ 491.370108][T11269] ? _request_firmware+0xe57/0x15b0 [ 491.370129][T11269] ? kmem_cache_free+0x192/0x3f0 [ 491.370149][T11269] _request_firmware+0xeea/0x15b0 [ 491.370179][T11269] ? __pfx__request_firmware+0x10/0x10 [ 491.370199][T11269] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 491.370215][T11269] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.370232][T11269] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 491.370248][T11269] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 491.370263][T11269] ? async_schedule_node_domain+0xa5/0x120 [ 491.370287][T11269] __async_dev_cache_fw_image+0x7f/0x280 [ 491.370312][T11269] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 491.370337][T11269] async_schedule_node_domain+0xde/0x120 [ 491.370361][T11269] dev_cache_fw_image+0x364/0x3e0 [ 491.370386][T11269] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 491.370411][T11269] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 491.370434][T11269] dpm_for_each_dev+0x53/0xb0 [ 491.370458][T11269] fw_pm_notify+0x200/0x2a0 [ 491.370480][T11269] ? __pfx_fw_pm_notify+0x10/0x10 [ 491.370502][T11269] ? __pfx_autoremove_wake_function+0x10/0x10 [ 491.370534][T11269] ? blocking_notifier_call_chain_robust+0x65/0x100 [ 491.370553][T11269] notifier_call_chain+0x1b3/0x3e0 [ 491.370571][T11269] blocking_notifier_call_chain_robust+0x85/0x100 [ 491.370589][T11269] pm_notifier_call_chain_robust+0x2c/0x60 [ 491.370611][T11269] snapshot_open+0x133/0x280 [ 491.370633][T11269] ? __pfx_snapshot_open+0x10/0x10 [ 491.370654][T11269] misc_open+0x2b9/0x330 [ 491.370683][T11269] chrdev_open+0x4c9/0x5e0 [ 491.370703][T11269] ? __pfx_chrdev_open+0x10/0x10 [ 491.370725][T11269] ? __pfx_chrdev_open+0x10/0x10 [ 491.370743][T11269] do_dentry_open+0xdf0/0x1970 [ 491.370771][T11269] vfs_open+0x3b/0x340 [ 491.370791][T11269] ? path_openat+0x2ecd/0x3830 [ 491.370807][T11269] path_openat+0x2ee5/0x3830 [ 491.370820][T11269] ? arch_stack_walk+0xfc/0x150 [ 491.370852][T11269] ? __pfx_path_openat+0x10/0x10 [ 491.370865][T11269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.370887][T11269] do_filp_open+0x1fa/0x410 [ 491.370902][T11269] ? __pfx_do_filp_open+0x10/0x10 [ 491.370926][T11269] ? _raw_spin_unlock+0x28/0x50 [ 491.370940][T11269] ? alloc_fd+0x64c/0x6c0 [ 491.370962][T11269] do_sys_openat2+0x121/0x1c0 [ 491.370987][T11269] ? __pfx_do_sys_openat2+0x10/0x10 [ 491.371011][T11269] ? ksys_write+0x1f0/0x250 [ 491.371027][T11269] ? rcu_is_watching+0x15/0xb0 [ 491.371053][T11269] __x64_sys_openat+0x138/0x170 [ 491.371078][T11269] do_syscall_64+0xf6/0x210 [ 491.371097][T11269] ? clear_bhb_loop+0x45/0xa0 [ 491.371115][T11269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.371130][T11269] RIP: 0033:0x7fa634d8e969 [ 491.371144][T11269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.371159][T11269] RSP: 002b:00007fa635bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 491.371175][T11269] RAX: ffffffffffffffda RBX: 00007fa634fb6080 RCX: 00007fa634d8e969 [ 491.371186][T11269] RDX: 0000000000040081 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 491.371198][T11269] RBP: 00007fa635bd9090 R08: 0000000000000000 R09: 0000000000000000 [ 491.371208][T11269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.371218][T11269] R13: 0000000000000000 R14: 00007fa634fb6080 R15: 00007fa6350dfa28 [ 491.371234][T11269] [ 491.371258][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.860192][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.866300][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82 [ 491.875639][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1 [ 491.883359][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2 [ 491.891166][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85 [ 491.899029][ T7602] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5 [ 492.034622][ T5887] usb 4-1: device descriptor read/64, error -71 [ 492.284668][ T5887] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 492.414686][ T5887] usb 4-1: device descriptor read/64, error -71 [ 492.525944][ T5887] usb usb4-port1: attempt power cycle [ 492.864594][ T5887] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 492.885040][ T5887] usb 4-1: device descriptor read/8, error -71 [ 493.125950][ T5887] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 493.145484][ T5887] usb 4-1: device descriptor read/8, error -71 [ 493.254813][ T5887] usb usb4-port1: unable to enumerate USB device [ 493.764923][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.776779][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration