last executing test programs: 13m1.222108988s ago: executing program 0 (id=1516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80080) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000d40)={'\x00', 0x9, 0x0, 0x0, 0x67bf, 0x9, r3}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000e00)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=@newqdisc={0x54, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xffffff40, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x2}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0xf7, 0x1}}]}, 0x54}}, 0x800) r6 = socket$inet6(0xa, 0x805, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f", 0xe}], 0x1, 0x0, 0x0, 0x20000000}, 0x408e0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xfc, 0x0, 0x2, @mcast1, @loopback={0x300, 0xffff888101827518}, 0x8, 0x10}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$vbi(0x0, 0x0, 0x2) r8 = syz_open_dev$media(0x0, 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 12m58.193163936s ago: executing program 0 (id=1526): r0 = fsopen(&(0x7f0000000000)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000040)) fsmount(r0, 0x0, 0x83) 12m57.748789471s ago: executing program 0 (id=1528): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=""/17, 0x11}, 0x8000001}], 0x1, 0x58a, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x80901, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20180) ioctl$EVIOCGABS20(r5, 0x80184560, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x78f) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[], 0x28000) 12m55.994776678s ago: executing program 0 (id=1532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) r2 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000200)={@id={0x2, 0x0, @a}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r8, &(0x7f0000000080)="0d32818e", 0x4}]) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) r10 = openat$dsp(0xffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r10, 0xc0044dff, &(0x7f0000000100)=0x9) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r13, 0x0, r12, 0x0, 0x1, 0x0) fcntl$setpipe(r12, 0x407, 0xfffffffffffffef0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c0014"], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000200010001009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 12m55.041675605s ago: executing program 0 (id=1534): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000016c0)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000002b0012800e0001004b"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) (async) ioctl$KIOCSOUND(r2, 0x4b2f, 0x3) (async) getdents(r2, &(0x7f0000000000)=""/43, 0x3b) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0xf73}], 0x1, 0x0, 0x0) 12m54.224752176s ago: executing program 0 (id=1538): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x478680, 0x40) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000100)=0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffff, 0x0, 0xb82, 0xb2, 0x18, "90dec26013424f1459bcd062455255a7fc194c"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ptrace(0x10, r5) r8 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8, @ANYRESOCT=r5, @ANYRES64=r5, @ANYRES64=r8, @ANYRES16=r8, @ANYRES8=r5], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r3, &(0x7f0000000180)={r2, r4, 0x8}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000100000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 12m53.480692104s ago: executing program 32 (id=1538): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x478680, 0x40) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000100)=0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffff, 0x0, 0xb82, 0xb2, 0x18, "90dec26013424f1459bcd062455255a7fc194c"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) ptrace(0x10, r5) r8 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8, @ANYRESOCT=r5, @ANYRES64=r5, @ANYRES64=r8, @ANYRES16=r8, @ANYRES8=r5], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r5, 0x0, 0x0, 'syz0\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, r3, &(0x7f0000000180)={r2, r4, 0x8}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000100000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 5m52.431919565s ago: executing program 5 (id=2438): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) syz_usb_connect(0x3, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070009050102100000fa000905820240"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x9}}, 0x20) 5m50.895529236s ago: executing program 5 (id=2441): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="5e13b181d82734ea22", 0x9}, {&(0x7f00000002c0)="7bc113454f98314eb808937e59c7582ea1b2d758f4b44554fba14b4bad344d88e11b4442f8155d48dea1b2420568c16fda2b2fac6519c5cf6f52b4757c54beed20faed146c607fd87440ab77ce17c1dd14bdc0f6e15c7376383b25bb13deee448caddc09049bc35bbe5c16fd0956218ec5bea49077e731de410cf1b23400c3328a742214941c0558859abf40", 0x8c}, {&(0x7f0000000380)="f4635411297cb0bf39f53c501131af5ff1d1e3e9ede0d8f61e8e1da68855fa98c2f42be9077dea4ccf7bfc00af6b89c14fd7ed355de60e9caee7fdf57de632ebce7ad96ccaea04edaaba117bcac54c35c464826e8e6ce14cb35113694aa56a9c3414aab2ad4405465977245d687b70a0ffafe1ca7b7c81ffd5d916dc0152ff202bf3a5bc08a681826d566b4429f9ab039374326893b974be1e6713c238899599c719ac8023b41daa816712b360f9fe64305836004cae335862bc2b16638e022a474af25ddd0ae2603e02a4786910d2f155901ceb775e84ba478fd599b9", 0xdd}], 0x3, &(0x7f0000000540)=[@dstopts={{0x28, 0x29, 0x37, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x3}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x6}}}], 0x68}}], 0x1, 0x20004855) syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x11e}, &(0x7f0000000100), &(0x7f00000001c0)) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async) clock_gettime(0x0, &(0x7f0000000500)) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) (async, rerun: 64) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) read$FUSE(r8, &(0x7f0000001740)={0x2020}, 0x2020) (async, rerun: 64) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x0) (async) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000280)={0x0, 0x3ff, 0xad}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 5m50.325190744s ago: executing program 5 (id=2443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x7fffff}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty, 0x7fffff}, 0x1c) (async) 5m49.148855251s ago: executing program 5 (id=2446): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_clone(0x4000080, &(0x7f0000000240)="4caa6fb1e7ab8432467666f510322edef02e5ec7bef0eeb8cacba4572f631e8b787a6950f4aac81d30dc50341f044a5371ad6e5ff85aa63c6bfc5fb2", 0x3c, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000005c0)="93fc7835e89113ee3bcccafe39915a47160d6f3965907b34d44b82d18131914b9f131b446ae4dd61a9a3e7c6247786d7687203e99f680cadf9c6e36ce14317930222b7fefc2f3c89c5a172e64f704bcfebb570ed0e8a485c59aec70e1bcf118382f6ad6568080d14a418f4db4bfd1878f3eb") ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x4, 0x1, 0x7, 0x31, 0x0, [{0x8, 0x7, 0x8, '\x00', 0x2}, {0xaf, 0xe0, 0x97, '\x00', 0x5}, {0x7, 0xff, 0xfa, '\x00', 0x4}, {0x67, 0x7, 0x1, '\x00', 0x2}, {0x7, 0x5, 0x9, '\x00', 0x3}, {0x1, 0x4, 0x8, '\x00', 0xe}, {0x8, 0x9, 0xf, '\x00', 0xa0}, {0x12, 0x9, 0xd5, '\x00', 0x9}, {0x2, 0xe, 0x80, '\x00', 0x81}, {0x9, 0xfb, 0x4, '\x00', 0x6}, {0x2, 0x9, 0x10, '\x00', 0x3}, {0xd2, 0x1f, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x7, '\x00', 0x1}, {0x8, 0x5, 0x36, '\x00', 0x6}, {0xaa, 0x2, 0xb5, '\x00', 0x5}, {0x7, 0x5, 0x9, '\x00', 0x80}, {0x1, 0x4, 0x5}, {0x4, 0xfc, 0x6, '\x00', 0x7}, {0x4, 0x9a, 0x2}, {0x5, 0x7, 0xb0, '\x00', 0x8}, {0x5, 0x2, 0xc, '\x00', 0x3}, {0x8, 0xed, 0x2}, {0x0, 0x3, 0x6, '\x00', 0xe}, {0xb8, 0x0, 0x7, '\x00', 0xa}]}}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) ioctl$I2C_PEC(r2, 0x708, 0x45f5) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) read$sequencer(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat(r2, &(0x7f0000000980)='./file0\x00', 0x20, 0x2) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000100c0"]) syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x78bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x7, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x24041080) r11 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r11, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 5m48.172862579s ago: executing program 5 (id=2452): r0 = socket(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x20}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000007080)=[{{&(0x7f0000000a80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x2, 0x20000000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x80000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a005fc8960119909bb18f5d2487a2550000a44ee7feab0f7af350697f598dcb7b8706b8138503a342a70a3451e86474f5bcc9faebfda54544f509b0aa5d69ef7d8ac4898e1ca0dfe15e06799397e8a982e2168519", @ANYRES32=0x0, @ANYBLOB="14000200fc000000000000000000000000000001"], 0x2c}}, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x0) pipe2(&(0x7f0000000000), 0x800) 5m45.577199244s ago: executing program 5 (id=2457): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) fadvise64(r1, 0x2, 0x8000000000000001, 0x4) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]}) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x201, @tick=0x8f, 0x0, {0xea, 0xfc}, 0x1, 0x2, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x3516, 0xf00, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x2a, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002f638d411f01002204ddc0102030109021b00010b06800809045f40010a0000400905820040008a0204"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="7703f6478fa93819951bc9a3686372deeeba28c584d1fb7282c0e51c164562679dfdc769ed5a7e8ec8e9ad1e56f8d4063eb6fc15875939922663819710f37919dcefe60792b174b9e29263ad900d8c3d0db31fe42d5f3633b977770710e2bc0d410c87b3ec1f35f94a309ba4587f0beb5cd94954e0a0686629016253b3e4a436a7"]}, {0x0, 0x0}]}) 5m42.930868172s ago: executing program 33 (id=2457): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x2, 0x2) fadvise64(r1, 0x2, 0x8000000000000001, 0x4) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0445624, &(0x7f0000000240)={0x180f0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x800000000, 0x2, 0x20000088, 0x8, 0x0, 0x800, 0x0, 0x0, [0x2000000, 0x7fff, 0x2]}) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000140)={0x201, @tick=0x8f, 0x0, {0xea, 0xfc}, 0x1, 0x2, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r3, 0x3516, 0xf00, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x2a, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12010002f638d411f01002204ddc0102030109021b00010b06800809045f40010a0000400905820040008a0204"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="7703f6478fa93819951bc9a3686372deeeba28c584d1fb7282c0e51c164562679dfdc769ed5a7e8ec8e9ad1e56f8d4063eb6fc15875939922663819710f37919dcefe60792b174b9e29263ad900d8c3d0db31fe42d5f3633b977770710e2bc0d410c87b3ec1f35f94a309ba4587f0beb5cd94954e0a0686629016253b3e4a436a7"]}, {0x0, 0x0}]}) 14.310523941s ago: executing program 1 (id=3427): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x10, 0x91, 0xff, 0x7}]}) (async) r1 = socket$kcm(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x840) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) (async) sendmsg(r4, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) (async) bind$tipc(r2, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001e80)={0x0, 0x3, 0x0, &(0x7f0000001b80)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) socket$inet6(0xa, 0x80001, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x44}}, 0x0) (async, rerun: 32) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/wireless\x00') (rerun: 32) socket(0x80000000000000a, 0x2, 0x0) (async) preadv(r8, &(0x7f0000001ac0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f0000001740)=""/233, 0xe9}, {&(0x7f0000001940)=""/34, 0x22}, {0x0}, {&(0x7f0000001a80)=""/13, 0xd}], 0x7, 0x5f, 0xfffffffc) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a00100000000290000012", 0x2d}], 0x1}, 0x40) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4000, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 11.962287511s ago: executing program 1 (id=3434): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r9, &(0x7f0000000600)=""/4091, 0xffb, 0x12c) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) clock_getres(0x4, &(0x7f00000003c0)) 10.264975905s ago: executing program 6 (id=3442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) ptrace(0x10, 0x1) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) (async, rerun: 32) r5 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) semget(0x2, 0x4, 0x60e) r8 = socket$kcm(0xa, 0x4, 0x3a) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x2}, 0x6b, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async) recvmsg$kcm(r8, &(0x7f0000001640)={0x0, 0x0, 0x0, 0xfd83}, 0x40000000) (async) r9 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x88600) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000040)) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 8.972232078s ago: executing program 1 (id=3446): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e0800450211d748980000002f9078ac1414bbfe000001248086dd0000000010000000000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000000000000000ffffffffffff1dfc000000"], 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x10001, 0x60, 0x3e}, 0x18) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x404c081}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r4, &(0x7f0000000040)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2) mmap(&(0x7f00004bf000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0xed522000) 8.368961815s ago: executing program 6 (id=3447): r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}], 0x30, 0x200400c1}}], 0x2, 0x4000000) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) 7.971717777s ago: executing program 3 (id=3449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xb}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1]}) socket(0x400000000010, 0x3, 0x0) (async) poll(0x0, 0x0, 0x20008) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) read$FUSE(r5, &(0x7f0000000e40)={0x2020}, 0x2020) (async) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x200}], 0x1, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r4, 0x0, 0x4cd) (async) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat2(r5, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x1a, 0x1}, 0x18) (async) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="01e38020000008000300060100"/24], 0x54}}, 0x20000080) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1) (async) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 6.58104972s ago: executing program 3 (id=3450): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000340)=""/194, 0xc2, 0x0, &(0x7f0000000600)=""/228, 0xe4}}, 0x10) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r3, &(0x7f0000000240)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c565a5fc2251eda45a465e645e685865063ff5f7769df2a36c9485cd471e46af9d586ddd3dda5defa42c86b8c26de340e02c25f5801ca2e4fe456d3c9dc8599f9a3fc2b5152b9d2f123697defb2c35eabb941e0e028171780f2b53d3e760ecc6f4787496e12ae8c66f86646d073beef54ddb709037c6ee04f21e7635600", 0xa8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0xc, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) 6.504038023s ago: executing program 3 (id=3451): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r5 = syz_io_uring_setup(0x107, &(0x7f0000000140)={0x0, 0x747f, 0x0, 0x4, 0xae}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x29c780}) symlink(&(0x7f0000000000)='./file0/../file0\x00', 0x0) io_uring_enter(r5, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x3, 0x5, 0xfffffffc) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r11 = semget$private(0x0, 0x6, 0x0) semtimedop(r11, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) 6.37409106s ago: executing program 4 (id=3453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000100c0"]) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xb8}}, 0x40880) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3, 0x6}}, './file0\x00'}) ioctl$SNDCTL_TMR_STOP(r6, 0x5403) 6.308926678s ago: executing program 6 (id=3454): r0 = syz_clone3(&(0x7f0000000640)={0x2000080, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000440)=""/230, 0xe6, &(0x7f0000000540)=""/119, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r1 = syz_open_procfs(r0, &(0x7f00000006c0)='net/arp\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4f, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0xffffffe8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1000002, 0x29}, @fda={0x66646185, 0x200005, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x1, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 5.799734961s ago: executing program 4 (id=3456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x908b, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x908b, 0x4e310}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x2000, 0x2000, &(0x7f000000f000/0x2000)=nil}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x25, 0x0, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x25, 0x0, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x2, 0x1, 0x2, 0x1}}, 0x26) (async) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x2, 0x1, 0x2, 0x1}}, 0x26) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) close(r2) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000407d1e502d00000000000109022400010000000009040003010300000009210000080122050009058103000081007f"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000080)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' %,'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.725085319s ago: executing program 1 (id=3457): r0 = socket$xdp(0x2c, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x47, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x0, 0x4}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0x101, 0xfffffffb}, 0x10) openat$ttynull(0xffffff9c, &(0x7f0000000980), 0x200, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r8], 0x50}, 0x1, 0xba01}, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r9, 0x0, 0x800, 0x8, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x78}, 0x94) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ftruncate(0xffffffffffffffff, 0xffff) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x191c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000050800000000000000000000000000000000000000050b504b838e94000000f001fa6f8e970ce07938045222c11794cf0a915a6c39bd4c8f0d19d813b4b39ccd4f870a9b03a0f332afc8168b96859ca12af82ac3906a751955aafd202ea3e84dadc0aa1f6bd3af63933a28d8945b5306000000852cfd22f3475b4296f50e795ad0c60bc231e8cea034fc9144ce88c78d177891be6a47714e6abc125270a4f5d15125213114f79ca45aae66b0fc842ae1da2557b0000000f9533b898dffb36800000000000000"], 0x10) 5.087868567s ago: executing program 2 (id=3458): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103180, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = eventfd2(0x5, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) r1 = syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200000}, &(0x7f0000000200)=0x0, &(0x7f0000000340)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x0, @fd, 0x6, 0x8, 0xffffff2b, 0x2, 0x1, {0x3}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x103180, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) eventfd2(0x5, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r0}) (async) syz_io_uring_setup(0x4bf9, &(0x7f0000000280)={0x0, 0x10000000, 0x10100, 0x0, 0x200000}, &(0x7f0000000200), &(0x7f0000000340)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x0, @fd, 0x6, 0x8, 0xffffff2b, 0x2, 0x1, {0x3}}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) (async) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) 4.318039001s ago: executing program 4 (id=3459): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.244775336s ago: executing program 2 (id=3460): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000100deffffffffffffff0000000a04000000120001"], 0x64}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.706186299s ago: executing program 4 (id=3461): getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x448083) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x59cb) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfffffff9}}, '\x00'}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000001c0)=0x3) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000200)={0x214, 0x20, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) sendmsg$SOCK_DESTROY(r3, &(0x7f0000003580)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003540)={&(0x7f0000003440)={0xe4, 0x15, 0x300, 0x70bd27, 0x25dfdbff, {0xb, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "1c6046492b60d21e4a59845e6936874600d9080a30292d44e4963f3a1f7fdacc7af299561f9a5b28c05fccf09ea49e345e81ebfa774d53e645732bbf28beabf588ce3db916b84e40a40f94099e442097262ae665078948a62ea6676e42a89901f9154e38fe4445a6e519efb2dc60b189277685ab2345be"}, @INET_DIAG_REQ_BYTECODE={0x52, 0x1, "94fc4295db9e66f85c0c3c405df97fd87cfcbe854bf12259687966fec07748de728848979ae6fc48d31130b36bb0006f4331ebb50543fc0e69f8ab4ee845e63323ff84e08649cc2b38ff2f2c0030"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendfile(r1, r3, &(0x7f00000035c0)=0x101, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000003640)={&(0x7f0000003600)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000003780)={&(0x7f0000003680)=[0x0, 0x0, 0x0], &(0x7f00000036c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003700)=[0x0], &(0x7f0000003740)=[0x0], 0x3, 0x8, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000003800)={&(0x7f00000037c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000038c0)={r4, r6, r7, 0x0, 0x0, 0x3, &(0x7f0000003880)=[0x0, 0x0, 0x0]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000003900)={[0x9, 0xb2c, 0x7, 0x5, 0x80000001, 0x81, 0x4, 0xf6, 0x80, 0x3, 0x9, 0xe, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1], 0xd000, 0x2000}) clock_gettime(0x0, &(0x7f0000003a00)={0x0, 0x0}) ppoll(&(0x7f00000039c0)=[{r1, 0x400}, {r3, 0x4000}], 0x2, &(0x7f0000003a40)={r9, r10+10000000}, &(0x7f0000003a80)={[0x7]}, 0x8) shutdown(r3, 0x1) r11 = openat$urandom(0xffffffffffffff9c, &(0x7f0000003ac0), 0x80000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000003b00), 0x8040, 0x0) fallocate(r11, 0x0, 0xbfb3, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000003b40)={r8, r5, 0x8, 0x1, 0x5}) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000003b80)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003bc0)='./cgroup/syz1\x00', 0x1ff) r12 = syz_open_dev$hidraw(&(0x7f0000003c00), 0x1, 0x600c0) ioctl$HIDIOCGRAWINFO(r12, 0x80084803, &(0x7f0000003c40)=""/104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000003dc0)={&(0x7f0000003cc0)=[0x0, 0x0], &(0x7f0000003d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003d80)=[0x0, 0x0], 0x2, 0xa, 0x4, 0x2}) 3.584164138s ago: executing program 2 (id=3462): kexec_load(0x5, 0xa, &(0x7f0000001780)=[{&(0x7f0000000000)="0664b5a026acd15e1a2b027de6155602d3b576ed5249486cd091b5c936a3457cff0fd53054669829c11eb1e4f2ab187e6323d71df2bfc33b35fe3e3dd4b5fed21c062e30ad39a373e99eb5f32096f67a68d06e239a69c849760e624cd1238a6dd81d7bba1c565259e83bbecfa9f83700785434f1bd671b899773335c1bc31bfafd1321224600dfd2fde19aa9ae85c1e9e43781c29ba13d1f7e5f43b66209a79ae0a150d57d18a4a78e80b5dca39d756203d8463574fe7bf73110368d42ec34334cdcf865c984b6f1eaf20661b0193f94c448226bd9c800e980e1703b7fe444e6d72031e7", 0xe4, 0xa}, {&(0x7f0000000100)="7689983c8fa6e396139c0148bd7014ac3a88e0eb9df7c834164c778d542ad15b3aa6845ce54c55207136170b4293ac222884b48d91ce1c4b216b4571fa140d53b4e10cd60443606bb97fab5a57386cb2662f51e5a5968f862807fd81f9e17c3d62faa883ca7b04ca541ab0edbbd9", 0x6e, 0xe, 0x81}, {&(0x7f0000000180)="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", 0x1000, 0x8, 0x1}, {&(0x7f0000001180)="8e29a8a923cf9d04f60c6bab7e26a7385bd42143d5556a3f6d30f7b57af3b1970b87f7f1c1981bd6b5fc40db07cb00a61088fb46ceed8f60bc687adf82c42afdc9d9395ee1ccfd0227f843564699b5f06e28e06648483c4e97dfeb0f5cfadf11aa2aaf0596be5446421f47da97a2e46aa7acd459c89d1c59fe4f682e534f753e5b4d477474fb6079c29b3cfa55cd7a0703c8881a40e71e402240397b94e4cdd9d2aa68d94b746070309680595f2162c620013419781acdca3e242316bc030f44015dae", 0xc3, 0x475, 0xc}, {&(0x7f0000001280)="1ff287e3c3ead60662a0a04495b5702bbfb843ba8023e2ee3fa604f20ff410e6a5216e4718c5f7c8c982985461690ee2366f8bd1f8235c2a474aaf4b22050d4c36911ed140057b8d278b63aec5f27f1000da093c08bde927f3886cf415c5d76223f0a57c2efdc4c454558109adf0d2ebc71a05118253f94a2a4ef1add1fd84ca962336f16500058a12a667fb64ce6ee10f4681056f051735c3fdd01a1876bd3195748b60d85baa5716919924c255d8b2dd0638", 0xb3, 0x8, 0xfffffffffffffffd}, {&(0x7f0000001340)="37c60d857a85066ba92ef2d5e4a2d0c997429f2a0f03108fa76e137d2528e350e4f0557dc67caee31081158fb8489c01c893081b488e4fbfbebda35d3fa9a592c11f217b3282f8f707e31e0f6b60cba85dd71d703f267e2a35391210e67705287d4103f9dbd14ca248fa84449df38059ac47cece73ed3dd0875f851c7d36da9f8133f71679a7c87902bf56062a55f9d0696bc3a1d5ac8481996064acdce823961164ec0349db7572a02924bb646952a24c1fcb4b0c44351c4a2a48f4132dbc1d5de62b92c5c9b2598a22b43cfba52ded66c03ae8716bb009384d9f5738f0b2b765b0c0739f", 0xe5, 0x40}, {&(0x7f0000001440)="6115d49c865fe29140344b501e80ca969954b30fa39a61cf66a8c155be26b134c9347ebedb4d045f1e61fec5091811d490360afb136d898680bea8d52e790f3937989c0e564685f5ecbd3c8da2659ee5ec076ab1bca30f33fcffaa861d198d2198e4166e7c4ec482ea22d7f37b0c907b173fb178a1120e0312e4ba4f50509ddeb134905b2aacc4abc0a546d10df873", 0x8f, 0xca8, 0xff}, {&(0x7f0000001500)="3cf1b03c9fc191c43d5ee4a3de75ec584c2fae77db0e2421def6191c08a7dbdacce40fe5371b1b77923918cc4b0e731193379043d40eb8b49e8cb203f6632ba92edf4eeef011fd08d645ba4a48dcbf0c37013f63ff933c6de71392d749f08dc0a1b97d5cc7ef551caac52dfe02919e98a9bd5eda98f1dbe1ec3f300737183986dc18ed4dfe39f18b0fa0632c8bece25ca399ca3a09d181b400c3edd0dfd44f99", 0xa0, 0x0, 0xe}, {&(0x7f00000015c0)="6aa2046f119242f425e8e0aab84196ef6aa99e373181cb824f610bee1a175fef6c55e09ba6136a1cd9267cb757cfc5a8bc134e2fa62743c10748812181380c9da03541f35b77b03e3f3b2eda3a79eee3d3d58c7b945a9b4356c2b777f3e23020be8953c2b723323496c974e34cc9456e86d2c475bc6ed5f605445d34eedd912231251dddc5c0e132da6316fbd7d60c4da4babbdf61ab7e80a495173abb09e8de95e45fa04559f6b76914bc5fdc700f4319452bd0d8d7ebe7802d9cd193f07afadf02f1aca40259d1398f7f41662a9750a5ddbd63f5c9a310b5", 0xd9, 0x2, 0x7}, {&(0x7f00000016c0)="6edeb60057c414404b9c095a7953a2978b0b36ea120acf5457fcdd829739005a8ae2911bf074c1a6cb3f6429cc98326585e62fc853077920df0491b470353f378be4906e1db0307296dc6d1e151d8aaad024d14669de859a185594cec0cee7de66b022572e91ce01df290d3a16af6e788bf7850785c5311b977706904872bb7883ff0c57e666f5b3779e694e3a4cabeba6cd91ae835b4b5f0524bdc07b174edbb56de6760913477018a82de173ce03ce1255", 0xb2, 0x3, 0xfffffffffffffbff}], 0x320000) kexec_load(0x9, 0x7, &(0x7f0000002c40)=[{&(0x7f00000018c0)="3520505081f9b8482e511a43804f84307191", 0x12, 0x1, 0x9}, {&(0x7f0000001900)="f822d6b9ced6bc8a3a75edb022b8593275a5c4b671f5f3389eb1c86ada91dbe448c1effda400005ccec8fd609a59fa95e4e619868ba4d7ef0ac9277ff1e3e72e46cd0f57dbb9d8e7a981710d1f86d4c941f6c86441f0c4607f20a434f3b951e63baaeef6125825d9e3ca5fa8c0d1d5c3675a0072c124740a2ea3c81ede4987e835691e5ae52b73b4f0e1686c356df75a0277dd1b1f800bceebaaef656fe95c2d66713ae6a9ecfa4e825bb8f25410cbd6", 0xb0, 0x38, 0x3}, {&(0x7f00000019c0)="a32fcbcc7ad3c946f402f92fedbf8a35c8a8", 0x12, 0x80, 0x8}, {&(0x7f0000001a00)="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", 0x1000, 0x3, 0x10000}, {&(0x7f0000002a00)="953f029b370be8d8ad696057d3857a591a1afb7f47a3283c18d913011d2a1b02aa21b7784c5a949f3c678ff667b1c8cea105e99c51974c75140037eac49a6ccc543f15b0fdefef5bf7e5839e5bb6a23f844c425b36957610f6df31a1bfdcf1d35173164efe4a9a6ed09e9b69939ebe6245035e75f58a4c51f571652aa8be08bf8f08e697a360f07554e8377bfa3a52588b7937abdcb2ee80ad92d78eefee26668bf0ad66dae58eded24ae710e8535f14542829a2ea9d956ddfea59358de41bb1c058c70dfb22ba6e18b3d58527055ce8d9028d9742de28717091764688724eb0bad4169aa694f53e7eb0fc7408ac7e8c97d7d84a1334de79", 0xf8, 0x1, 0x4}, {&(0x7f0000002b00)="c4deb86334633706954e53e5d357a9b63c96fb8e3234b7fa0b5b3e00087a99a029a6c8c95b4bc4f403ad57b9e9586fc1f19db060503732d0b57299e7b50537e1cb5aa96ccd069beee39b3f50e036d948d5af04c9f07599f86d4786b775cd195393d50fbd1c68d324286b68bc59ee3690acdbfbc0b58b6d495f7f284ef75cc001329be92536a4b2ea585e6480f709bbb497d6ed28a7e910e0d619a506594de3629fa4a973d54b9f72a01463fca2b48777b6c2015495acd4db8fcb19f723c1adb62e96e852b4bd2db1ac1c1a05e956ff662c067f01c38d", 0xd6, 0x80000000, 0xffffffffffffffff}, {&(0x7f0000002c00)="2d32da33a74d0939b83cebcc6319eb48b79dc9ae1ee624c56c4345cc46c4140243f69db435044348c89688091837", 0x2e, 0x1, 0x2}], 0x2a0000) kexec_load(0x0, 0x2, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9346fcddb21c79ec69360d903fe96e97e41a72364f4c7e6620996267c823812569cbcbcdeb2eafa55716e784c15d5b38e520397480e198dc7759d5f1ccf3c2dfd28fc8999a37fe4bd6f57bd44252866b667ba5aedd066f9afd1d1b64b11147f7effd455d52c9e85e3a36dc9caef3ca30d5361e6cb187c549208c6dae3c8cbbe58aa68f3f99341ab969b47c41327d05374d15cad576005d6f2533473d6e2d897c3c262022acb9e23a48262357596a24d994f13d960a8df6f456abc47dffb3839a7753b8afb4cfadfe19c005c1ca21cdb4952965a3c6b2f2f8bd929eadb2027efb78ed96e6306adc31", 0xe8, 0x6, 0x9e}, {&(0x7f0000002e40)="2bd3a6647aa5442018b0db1e1a95e1cb5df71075ef9c6708969c39a2675c97834611b86b19328298eb67fa2fbcf3bc49842af82a20d2d9ea0940920514a28faba491e4088f1c7dd215422e8f8fd6750a7b70ca112e53e14c0af3ca5a6c2ff23f630159979be97f82990b6fc4d63c974b8d67bfd22fedd0d64af8fdfd27de11b8fc36b5", 0x83, 0xffffffffffffffff}], 0x280000) r0 = add_key$keyring(&(0x7f0000003080), &(0x7f00000030c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000002f40), &(0x7f0000002f80)={'syz', 0x2}, &(0x7f0000002fc0)="a4f92314a8f237213dd9a5ac9a395f2683a677b171c013fb927ca7bd977c81d8fd2752be95de18defa107cb5bdeb1ce250a6d56df7b69ede668c9b96a5badde75bb557535d438249b833a6d52e1d70681da11b66c70687a5916e2e79ccf9a2bc25a4c47d19bd91ef219e4847449e390c0407bcaa032d9634677f1f7562058a5d23f2b2a04ac9263ea8cacf0e569fd5f1de5329fb9d325a6f08e3e1a17e0f2c677202c0030e982c3b20bd870eee4d895a9b9d", 0xb2, r0) r2 = request_key(&(0x7f0000003100)='asymmetric\x00', &(0x7f0000003140)={'syz', 0x2}, &(0x7f0000003180)='\x00', r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000031c0)={r0, 0x1000, 0x81}, &(0x7f0000003200)={'enc=', 'pkcs1', ' hash=', {'sha512-avx\x00'}}, &(0x7f0000003280)="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", &(0x7f0000004280)=""/129) lsm_get_self_attr(0x64, &(0x7f0000004340)={0x0, 0x0, 0xe6, 0xc6, ""/198}, &(0x7f0000004440)=0xe6, 0x0) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000004480)='cifs.spnego\x00', 0x0) keyctl$link(0x8, r1, r0) r3 = socket$inet6(0xa, 0x6, 0x80000000) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000044c0)={r2, 0x0, 0x79}, &(0x7f0000004500)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000004580), &(0x7f00000045c0)=""/121) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000004640)={r2, 0x53, 0x54}, &(0x7f0000004680)={'enc=', 'raw', ' hash=', {'sha1-ni\x00'}}, &(0x7f0000004700)="0f21c6b6ef8b76056f5ddd39d60d63abb729050975b2ede9cd54f66a98c5cbb180ed20d23918aa4f0484938dc63d5dafe0732dbd7381f8e6c828cdedd0fa99463cfb596f07b42f4d082b4f53ef19658ad867e8", &(0x7f0000004780)="3100beb1cdf06a3324af99308d5c515b4cd02a6d638b69a6455195a77802a52295b128df5bb31270e0a55ac3bce477ebaded815b0780082d400eead1d9d51fad235dcb66d30d81484d945effa52ab2794ce8fba3") kexec_load(0xf24, 0x6, &(0x7f0000004bc0)=[{&(0x7f0000004800)="4b79446de4d9c40c7f217bd7e8d621c1603dab9491f06fcdf5d9ab31827218ea88b4f01e5e7d5e050b5da8433bbf9c45c0b6d5ad529236452e61bf9e8b1b180b00349e5b8545c82d5ff71a8c9f9267d73038e93a9d900aecc0ed68c6ff30b2b3", 0x60, 0x4, 0x7ff}, {&(0x7f0000004880)="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", 0xfa, 0x4}, {&(0x7f0000004980)="40766a3e0e9572ce94a2f09360bca571540126d3ac797e367dfef196122233e14c7a5a632c79985cd856dc8f2098b7ffde629b1f57f2", 0x36, 0x8000, 0xffffffffffffffff}, {&(0x7f00000049c0)="943b5c8b2f6947e5c6c19ffaeb7007b2589906c1ca790c766bb787878fb81ccdcae10111de4362d0fa6508490cf402800adba713b951524eaad491708ee87b8bfbe7d754d7f72e22c3e0f6af0a591672fc136faded1a01a8fec1edcb3c2a3a2553b54ef61fbbd4c8b0ac92e691e8bdec056f13562e985631045982ad58b3d5ce7380b2528a4348faed8a05552b30a14414383d95b95dd1172288a35fdcc7ad507429ad4792c4b1b4b6f9489f6296140b33d1b22777c79d457d9ddbba1afae7764d95b61304327d99159fb03c4cd4128149540f145558", 0xd6, 0x2, 0xb}, {&(0x7f0000004ac0)="417d3390f19768fc0eac7174f0cb0b0034088fc6c9bd28c1ec9f5004e65622e9dff7afed10dd9cc1185fd2e313d1b40a94ab853a12df0797ae09fe90738f1baeb9dcbdaac74dd25d4eb2ee9021aa39f9b6ffddfa297bcaa6ddb3745ac2a7a4a987de19c62a181f4b44b7efcacafdb9c2493123f824103dde46e583990428b95a542c9d475c81a5dd792a957323409c6bc46b1ebba08a", 0x96, 0x1, 0x7}, {&(0x7f0000004b80)="568d29c5379d8082834f5b8ba509a5dc9042d304", 0x14, 0xa20, 0x7}], 0x30000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000004c80)={r1, 0x7e, 0xfb}, &(0x7f0000004cc0)={'enc=', 'pkcs1', ' hash=', {'sha1\x00'}}, &(0x7f0000004d40)="a142c77578d8b0d63009a442fea09fb6b94124b5bac9c144cbd5b9264f7dd6ba0a0ccc3bb3dd6ffed6e46a05db2805d67510ffc588e9320a771ddbe1afc305b0752a4b72a6e0bc6f8031228a26b97b7336aa4ee227e41b2684809e676c72670f6214dd37839de07985a049ac853fe5f6b8515b98d5dcaa09f1c598adab72", &(0x7f0000004dc0)="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") r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000004ec0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000004f00)=0xb0000) keyctl$search(0xa, r0, &(0x7f0000004f40)='rxrpc_s\x00', &(0x7f0000004f80)={'syz', 0x2}, r0) keyctl$get_keyring_id(0x0, r0, 0xe) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$invalidate(0x15, r2) sendfile(r3, r3, &(0x7f0000004fc0)=0xfffffffe00000000, 0x5) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r5, &(0x7f0000007080)={0x18, 0x0, r6, {0x5}}, 0x18) r7 = syz_open_dev$audion(&(0x7f00000070c0), 0x4, 0x80) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000007240)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000007200)={&(0x7f0000007180)={0x48, r8, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40800) openat$tun(0xffffffffffffff9c, &(0x7f0000007280), 0x4a0000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000072c0)) 3.273213637s ago: executing program 6 (id=3463): r0 = syz_open_procfs(0x0, &(0x7f0000002300)='net/raw6\x00') read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) 3.029999479s ago: executing program 6 (id=3464): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000013000500000000000003000007000000", @ANYRES32=r2, @ANYBLOB="01000000000000000c001a800800048004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000140)={0x2, {0xdfffc568, 0x80000000, 0x5, 0x7}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001540)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7ec}}, 0x1, 0x6211}, 0x90) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x134, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3f}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xac}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x9d, 0xbe, "2cad9799a649345d440063cb49cd8142ac5003e41ef2a7e01cad3c3624d2947a677998abd3a0b1ff1449dbfbd1b910bd0f262b8dba83c0af42658bac5ce9c94b20cd3ea71a810fca3b16f5614099bcf1ccbde7f4708c3e5864cffe686205245410b53d10d7fecf0ae53abb3dcb1623c51cdaf8b681f10c594a65f7b1b8f9c7784479e9f0c1ec33753e911f52ba4c48624b157a2e53c0e3e231"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5a4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xfffc, 0xe8d8, 0xc, 0x80]}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x689}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x134}, 0x1, 0x0, 0x0, 0x40}, 0x20008010) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x5, 0xff4a, 0x2, 0x4, 0x10}, 0x14) 3.009577093s ago: executing program 2 (id=3465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x5000) r2 = socket$inet_udp(0x2, 0x2, 0x0) shmctl$SHM_LOCK(r1, 0xb) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x1b8, 0x3}) fcntl$lock(r3, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) shmctl$SHM_UNLOCK(r1, 0xc) accept4(r0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000063, 0x0) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r8, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000000)="46a1a0995a02", 0x0, 0x0, 0x14, 0x0, 0x0}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x4220a1, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004"], 0x1c}}, 0x804) 2.667770342s ago: executing program 1 (id=3466): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x2e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0x80000001}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x1, [{0x8c, 0xf}, {0x4, 0x5}, {0x5, 0x5}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x1f}], 0x9, 0x2, 0x2, 0x2, 0x6}}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r13, {0x2}, {0xc, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x4, 0x1, 0x3}}]}}]}, 0x4c}}, 0x0) sendmsg$inet(r4, &(0x7f0000001ac0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000003c0)="c5", 0x1}, {0x0, 0xe0}], 0x2}, 0x4040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 2.617113729s ago: executing program 4 (id=3467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400e00000021400030076657468305f746f5f62726964676500165e9a9d16de0fcafee549d749d2216bbb11418d79b8a9ccc645810f99eddb5d9be1384dcfe89276d2db61ffa3c96a053b7c97e6e8b05aa3f7db3c6ea5fd0f6c9444f1d87989fa495af1e7b782808729c9065a4ba6dbf164e5f2b6c77624be0dc9e279724ffe07273507348b8605ba050916290b2c91d1e25a768fbb7c85d7224188ee9cc118fd8b30a1cd246e8a4051cf959a3ca261c5d6963b9980954d8baed120c22ee3aa1e511442c5fc9e929d0652dcbeac88af2310eae31a1978245dfa9919ccaec89d"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xf}, @TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x40}}, 0x0) (async) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) (async) unshare(0x26020480) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r7, 0x800001b, 0x0, 0x5) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) (async) utimes(&(0x7f0000000240)='./file0\x00', 0x0) 2.60934945s ago: executing program 2 (id=3468): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x478680, 0x40) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000100)=0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xffff, 0x0, 0xb82, 0xb2, 0x18, "90dec26013424f1459bcd062455255a7fc194c"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0xf0, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ptrace(0x10, r6) r9 = socket(0x2, 0x3, 0x6) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8, @ANYRESOCT=r6, @ANYRES64=r6, @ANYRES64=r9, @ANYRES16=r9, @ANYRES8=r6], 0x14}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0xfffffffc, 0x80000, 'syz1\x00'}, 0x5, 0x30, 0x1, r6, 0x0, 0x0, 'syz0\x00', 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, r3, &(0x7f0000000180)={r2, r4, 0x8}) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000100000000ffffffffffffffff0000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.307742234s ago: executing program 4 (id=3469): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0x101, 0x7, 0x6, 0x6be, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x8009, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) sendto$inet6(r6, &(0x7f0000000880)="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", 0x1000, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/92, 0x5c, 0x0, 0x0}, &(0x7f0000000240)=0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000800600000001000000a1000000", @ANYRES32=r2, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0400000000000000000000000b000000000000000000000000000046"], 0x50) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000), 0x0) 1.663159589s ago: executing program 2 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x2, 0x5, 0x60, @empty, @empty, 0x8000, 0x80, 0x5, 0x3ff}}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006d02"]) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 987.404534ms ago: executing program 3 (id=3471): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 621.843418ms ago: executing program 3 (id=3472): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_open_dev$vim2m(&(0x7f00000013c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x13, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x20493859}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 389.908718ms ago: executing program 3 (id=3473): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f00000000c0)="65f9f2f034e6a881ef3a7ee566936f63977b5993b9996cf3587fa907bb34d7a08a38efd0784ae1b24e25c6baa0e3c20d301126f9beb4a1cf7727f0428588b989e26134a914c765c71ae906d7d023f666e77107ce071f4d3555b3401c571594937e1600e803858756d235b81d8e89a645e09804715097f00e5c258632e3feab41dd2aeda3ef2adeecc25276aaf015d4f839437fea3d9a8e4825481874ecd05ab611d68499e521d7c4c6297332f0d767a7b4d555cbd239bca98232c24cb8e334d2", 0xc0, r0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) keyctl$read(0xb, r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_io_uring_setup(0x7414, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x200000, 0x0, 0x0, r2}, &(0x7f0000000000), &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000300)={0x0, 0x2, 0x2, '\x00', 0x0}) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff7625c4a67c2ce177313091a4b00b3e712e", 0x13}], 0x3f) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r3) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 93.176599ms ago: executing program 6 (id=3474): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b40)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000080)={0x141, 0xfffffffd, 0x6, 0x6106, 0xc, "dba2983e4eb9d51b5bbf4dcce3c9b929b41680", 0x1012, 0xf}) write(r6, &(0x7f00000002c0)="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", 0x143) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @any, 0x1d, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7}) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='N.::/', 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x71745}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x5}]}}}]}, 0x3c}}, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 1 (id=3475): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001, {[@noop, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x8, [{@multicast1, 0x2}, {@rand_addr=0x64010101, 0x9}]}]}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0014000000", 0x28}, {&(0x7f0000001740)="ba79a0df5961", 0x6}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xfffffffe000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 1194.909698][ T5945] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1194.927829][ T5945] usb 5-1: USB disconnect, device number 73 [ 1194.929442][T18171] usb 4-1: Using ep0 maxpacket: 16 [ 1194.966070][T18171] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.984860][T18485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.990586][T18171] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.002727][T18485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.018372][T18485] bridge_slave_0: entered allmulticast mode [ 1195.032214][T18485] bridge_slave_0: entered promiscuous mode [ 1195.043341][T18171] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1195.073965][T18171] usb 4-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1195.099329][T18171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.192196][T18171] usb 4-1: config 0 descriptor?? [ 1195.892177][T15760] dvmrp0 (unregistering): left allmulticast mode [ 1195.949581][T18171] usb 3-1: USB disconnect, device number 74 [ 1196.074656][T18533] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3062'. [ 1196.169193][T17534] Bluetooth: hci1: command tx timeout [ 1197.733350][T15760] bond0 (unregistering): Released all slaves [ 1198.144070][T15760] bond1 (unregistering): Released all slaves [ 1198.181212][T18485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.190336][T18485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.200344][T18485] bridge_slave_1: entered allmulticast mode [ 1198.208932][T18485] bridge_slave_1: entered promiscuous mode [ 1198.254372][T17534] Bluetooth: hci1: command tx timeout [ 1198.451164][ T958] usb 4-1: USB disconnect, device number 81 [ 1198.517228][T18548] ip6tnl1: entered promiscuous mode [ 1198.550643][T18548] ip6tnl1: entered allmulticast mode [ 1198.602729][T15760] : left promiscuous mode [ 1198.889375][T18485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.517648][T15760] tipc: Left network mode [ 1199.576880][T18485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.736714][T18569] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20003 [ 1199.813487][T18569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1200.107954][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3069'. [ 1200.208523][T18485] team0: Port device team_slave_0 added [ 1200.283188][T18485] team0: Port device team_slave_1 added [ 1200.331947][T17534] Bluetooth: hci1: command tx timeout [ 1200.950755][T18596] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1200.976317][T18596] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1201.123809][T18485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.205528][T18485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1201.318094][T18485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.850553][T18485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.882672][T18485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.076204][T18485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.137840][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3075'. [ 1202.480060][T15760] hsr_slave_0: left promiscuous mode [ 1202.519113][ T8778] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1202.749105][ T8778] usb 7-1: Using ep0 maxpacket: 32 [ 1202.891569][ T8778] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 1202.903390][ T8778] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1202.959354][T15760] veth1_vlan: left promiscuous mode [ 1202.976856][T15760] veth0_vlan: left promiscuous mode [ 1202.986089][ T8778] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1203.025927][ T8778] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1203.137956][ T8778] usb 7-1: Product: syz [ 1203.230597][ T8778] usb 7-1: Manufacturer: syz [ 1203.235243][ T8778] usb 7-1: SerialNumber: syz [ 1203.273893][T18622] dns_resolver: Unsupported server list version (0) [ 1203.320100][ T8778] usb 7-1: config 0 descriptor?? [ 1203.590881][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.612933][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.642787][T18608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.672769][ T8778] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1203.709388][T18608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.689823][T17203] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1204.745501][ T1160] usb 7-1: Failed to submit usb control message: -110 [ 1204.756247][ T1160] usb 7-1: unable to send the bmi data to the device: -110 [ 1204.775761][ T1160] usb 7-1: unable to get target info from device [ 1204.782332][ T1160] usb 7-1: could not get target info (-110) [ 1204.789134][ T1160] usb 7-1: could not probe fw (-110) [ 1204.858275][T17203] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1204.871067][T17203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.896946][T17203] usb 5-1: config 0 descriptor?? [ 1204.914150][T17203] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1205.735153][T18485] hsr_slave_0: entered promiscuous mode [ 1205.753844][T18485] hsr_slave_1: entered promiscuous mode [ 1205.770447][T18485] debugfs: 'hsr0' already exists in 'hsr' [ 1205.808386][T18485] Cannot create hsr debugfs directory [ 1205.951763][T18171] usb 7-1: USB disconnect, device number 51 [ 1206.087096][T18648] loop2: detected capacity change from 0 to 7 [ 1206.152852][T18648] loop2: [POWERTEC] p1 p2 [ 1206.175073][T18648] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1206.200796][T18648] loop2: p2 start 2490368 is beyond EOD, truncated [ 1206.460883][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1206.705207][T18664] fuse: Bad value for 'rootmode' [ 1206.730133][T18658] fuse: Bad value for 'rootmode' [ 1206.768772][T18664] input: syz1 as /devices/virtual/input/input79 [ 1207.225189][T15760] IPVS: stop unused estimator thread 0... [ 1207.626495][T17203] gspca_stv06xx: I2C: Read error writing address: -71 [ 1207.672554][T17203] usb 5-1: USB disconnect, device number 74 [ 1207.957825][T18676] geneve2: entered promiscuous mode [ 1208.019168][T18676] geneve2: entered allmulticast mode [ 1209.033223][T18485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1209.151961][T18485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1209.251570][T18485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1209.322575][T18485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1209.377865][T18692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1209.384535][T18692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1209.408974][T18692] vhci_hcd vhci_hcd.0: Device attached [ 1209.679465][ T958] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1209.689302][T17203] usb 42-1: SetAddress Request (2) to port 0 [ 1209.696252][T17203] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1209.791095][T18485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.837081][T18485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.879040][T18141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.886276][T18141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.941865][ T958] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1209.957408][ T958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.002491][ T958] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1210.034248][ T958] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1210.046050][T18141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.053281][T18141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.069527][ T8774] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1210.082398][ T958] usb 5-1: Manufacturer: syz [ 1210.092367][ T958] usb 5-1: config 0 descriptor?? [ 1210.248008][T18720] loop2: detected capacity change from 0 to 7 [ 1210.265449][T18689] IPv6: sit1: Disabled Multicast RS [ 1210.272036][T18689] sit1: entered allmulticast mode [ 1210.289840][T18720] loop2: [POWERTEC] p1 p2 [ 1210.311625][T18720] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1210.343951][T18696] vhci_hcd: connection reset by peer [ 1210.351003][ T958] rc_core: IR keymap rc-hauppauge not found [ 1210.357039][ T958] Registered IR keymap rc-empty [ 1210.369307][T18141] vhci_hcd: stop threads [ 1210.370761][ T958] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1210.373656][T18141] vhci_hcd: release socket [ 1210.393168][T18720] loop2: p2 start 2490368 is beyond EOD, truncated [ 1210.400137][T18141] vhci_hcd: disconnect device [ 1210.417067][ T5235] loop2: [POWERTEC] p1 p2 [ 1210.422886][ T5235] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1210.432576][ T958] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input80 [ 1210.444173][ T5235] loop2: p2 start 2490368 is beyond EOD, truncated [ 1210.505971][T18485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.561312][ T958] usb 5-1: USB disconnect, device number 75 [ 1210.575650][ T8774] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1210.603156][T15131] udevd[15131]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1210.706707][ T8774] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1210.736486][ T8774] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1210.795583][ T8774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.808129][T18715] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1210.874743][T18485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.883830][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1210.911985][ T8774] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1211.138556][ T8774] usb 3-1: USB disconnect, device number 75 [ 1211.374268][T18485] veth0_vlan: entered promiscuous mode [ 1211.469237][T18171] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1211.570311][T18485] veth1_vlan: entered promiscuous mode [ 1211.700712][T18171] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.723263][T18171] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.750714][T18171] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1211.824977][T18171] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1211.835761][T18485] veth0_macvtap: entered promiscuous mode [ 1211.877754][T18485] veth1_macvtap: entered promiscuous mode [ 1211.923309][T18171] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.996101][T18171] usb 7-1: config 0 descriptor?? [ 1212.043612][T18485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1212.177456][T18485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.249332][T15278] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1212.409175][T15278] usb 4-1: Using ep0 maxpacket: 16 [ 1212.417107][T15278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.428883][T15278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.478242][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.499126][T15278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1212.513306][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.548655][T18171] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1212.567288][T15278] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1212.596965][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.617752][T15278] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1212.661724][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.747565][T15278] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.775178][T15278] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.800824][T15278] usb 4-1: Manufacturer: syz [ 1212.847285][T15278] usb 4-1: config 0 descriptor?? [ 1213.239260][T10001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.247287][T10001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.362872][T15278] rc_core: IR keymap rc-hauppauge not found [ 1213.385145][T15278] Registered IR keymap rc-empty [ 1213.433566][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.479688][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.520348][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.546963][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.611030][T15278] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1213.708414][T15278] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input81 [ 1213.880461][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.921629][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.969271][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.019356][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.070351][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.149243][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.179264][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.212195][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.249787][ T8774] usb 7-1: reset high-speed USB device number 52 using dummy_hcd [ 1214.263889][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.361215][T15278] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.401044][T15278] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1214.439415][ T8776] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1214.467710][ T8774] usb 7-1: device descriptor read/64, error -32 [ 1214.510347][T15278] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1214.676962][ T8776] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1214.714478][ T8776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.764809][ T8776] usb 2-1: Product: syz [ 1214.802673][ T8776] usb 2-1: Manufacturer: syz [ 1214.838202][ T8776] usb 2-1: SerialNumber: syz [ 1214.859259][ T958] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1214.899703][T17203] usb 42-1: device descriptor read/8, error -110 [ 1215.025113][ T958] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1215.069984][ T958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.112607][ T958] usb 3-1: Product: syz [ 1215.132223][ T958] usb 3-1: Manufacturer: syz [ 1215.169357][ T958] usb 3-1: SerialNumber: syz [ 1215.232804][ T5989] usb 4-1: USB disconnect, device number 82 [ 1215.246095][ T958] usb 3-1: config 0 descriptor?? [ 1215.300496][T17203] usb usb42-port1: attempt power cycle [ 1215.401869][T18171] usb 7-1: USB disconnect, device number 52 [ 1215.499359][ T958] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1215.920599][T17203] usb usb42-port1: unable to enumerate USB device [ 1216.091696][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1216.356728][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1216.386563][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.405137][ T10] usb 4-1: Product: syz [ 1216.415275][ T10] usb 4-1: Manufacturer: syz [ 1216.436001][ T10] usb 4-1: SerialNumber: syz [ 1216.467750][ T8776] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1216.503622][ T10] usb 4-1: config 0 descriptor?? [ 1216.559638][ T8776] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1216.635629][ T8776] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1216.731280][ T10] usb 4-1: USB disconnect, device number 83 [ 1216.745689][ T958] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1216.779260][ T8776] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1216.796582][ T958] usb 3-1: USB disconnect, device number 76 [ 1216.868389][T15130] udevd[15130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1216.930404][ T8776] usb 2-1: USB disconnect, device number 81 [ 1217.274589][T18826] loop2: detected capacity change from 0 to 7 [ 1217.314680][T18826] loop2: [POWERTEC] p1 p2 [ 1217.340339][T18826] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1217.422298][T18826] loop2: p2 start 2490368 is beyond EOD, truncated [ 1217.489347][ T5235] loop2: [POWERTEC] p1 p2 [ 1217.494238][ T5235] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1217.504329][ T5235] loop2: p2 start 2490368 is beyond EOD, truncated [ 1217.693540][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1217.844276][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1218.059134][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 1218.704238][ T8776] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1218.860342][T18866] pim6reg: entered allmulticast mode [ 1218.909480][T18864] pim6reg: left allmulticast mode [ 1218.925311][ T8776] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 1218.937111][ T8776] usb 3-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 1218.980487][ T8776] usb 3-1: config 0 has no interface number 0 [ 1218.997597][ T8776] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.041911][ T8776] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1219.054512][ T8776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.065136][ T8776] usb 3-1: Product: syz [ 1219.087614][ T8776] usb 3-1: Manufacturer: syz [ 1219.104763][ T8776] usb 3-1: SerialNumber: syz [ 1219.147480][ T8776] usb 3-1: config 0 descriptor?? [ 1219.274856][T18171] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1219.429673][T18171] usb 2-1: device descriptor read/64, error -71 [ 1219.679658][T18171] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1219.808086][ T8776] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1219.821337][T18171] usb 2-1: device descriptor read/64, error -71 [ 1219.829149][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1219.877842][ T8776] usb 3-1: USB disconnect, device number 77 [ 1219.969686][T18171] usb usb2-port1: attempt power cycle [ 1220.049653][ T10] usb 7-1: config index 0 descriptor too short (expected 2093, got 45) [ 1220.080287][ T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 254, using maximum allowed: 30 [ 1220.137744][ T10] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.190340][ T10] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 201, changing to 11 [ 1220.222282][ T10] usb 7-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 1220.238380][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1220.248610][ T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1220.272476][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.307829][ T10] usb 7-1: config 0 descriptor?? [ 1220.329153][T18171] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1220.369810][T18171] usb 2-1: device descriptor read/8, error -71 [ 1220.609553][T18171] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1220.650013][T18171] usb 2-1: device descriptor read/8, error -71 [ 1220.706565][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 1220.762043][T18171] usb usb2-port1: unable to enumerate USB device [ 1220.794555][T18869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.810064][T18869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.061799][T18880] netlink: 'syz.2.3123': attribute type 10 has an invalid length. [ 1221.118087][T18880] veth0_vlan: left promiscuous mode [ 1221.155925][T18882] loop2: detected capacity change from 0 to 7 [ 1221.170891][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1221.178628][T18880] veth0_vlan: entered promiscuous mode [ 1221.189883][T18882] loop2: [POWERTEC] p1 p2 [ 1221.194563][T18882] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1221.204525][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1221.238969][ T10] usb 7-1: USB disconnect, device number 53 [ 1221.250466][T18880] team0: Device veth0_vlan failed to register rx_handler [ 1221.258159][T18882] loop2: p2 start 2490368 is beyond EOD, truncated [ 1221.358509][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1221.749212][T18171] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1221.937926][T18171] usb 5-1: device descriptor read/64, error -71 [ 1222.749936][T18171] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1222.949317][T18171] usb 5-1: device descriptor read/64, error -71 [ 1223.059724][T18171] usb usb5-port1: attempt power cycle [ 1223.410008][T18171] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1223.479146][T17203] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1223.538275][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3134'. [ 1223.673299][T17203] usb 3-1: Using ep0 maxpacket: 32 [ 1223.685724][T17203] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 1223.689414][T18171] usb 5-1: device not accepting address 78, error -71 [ 1223.702880][T17203] usb 3-1: config 0 has no interface number 1 [ 1223.711999][T17203] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1223.721571][T17203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.738041][T17203] usb 3-1: Product: syz [ 1223.746515][T17203] usb 3-1: Manufacturer: syz [ 1223.753358][T17203] usb 3-1: SerialNumber: syz [ 1223.759172][ T8776] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1223.775161][T17203] usb 3-1: config 0 descriptor?? [ 1223.808322][T17203] snd-usb-audio 3-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 1223.944221][ T8776] usb 2-1: Using ep0 maxpacket: 32 [ 1223.962349][ T8776] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1223.972053][ T8776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.984143][T15130] udevd[15130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1224.018074][ T958] usb 3-1: USB disconnect, device number 78 [ 1224.019848][ T8776] usb 2-1: config 0 descriptor?? [ 1224.324550][ T8776] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1224.342848][ T8776] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1224.361646][ T8776] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1224.381540][ T8776] usb 2-1: media controller created [ 1224.428851][ T8776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.508217][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1224.531449][T18925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1224.540601][T18171] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1224.540764][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1224.587945][T18171] usb 5-1: Using ep0 maxpacket: 32 [ 1224.612129][T18171] usb 5-1: config 0 has an invalid interface number: 83 but max is 0 [ 1224.622380][T18171] usb 5-1: config 0 has no interface number 0 [ 1224.658733][T18171] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=92.f7 [ 1224.668916][T18171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.703294][T18171] usb 5-1: Product: syz [ 1224.715684][T18171] usb 5-1: Manufacturer: syz [ 1224.738238][T18171] usb 5-1: SerialNumber: syz [ 1224.801591][T18171] usb 5-1: config 0 descriptor?? [ 1224.846655][ T8776] DVB: Unable to find symbol dib7000p_attach() [ 1224.862815][ T8776] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1225.061060][T18920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.070759][T18920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.170008][ T8776] rc_core: IR keymap rc-dib0700-rc5 not found [ 1225.178443][ T8776] Registered IR keymap rc-empty [ 1225.210171][ T8776] dvb-usb: could not initialize remote control. [ 1225.238979][ T8776] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1225.343485][ T8776] usb 2-1: USB disconnect, device number 86 [ 1225.440867][T18171] peak_usb 5-1:0.83 can0: unable to request usb[type=0 value=0] err=-71 [ 1225.479397][T18171] peak_usb 5-1:0.83: unable to read PCAN-USB Pro bootloader info (err -71) [ 1225.576913][ T8776] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1225.610807][T18171] peak_usb 5-1:0.83: probe with driver peak_usb failed with error -71 [ 1225.658369][T18171] usb 5-1: USB disconnect, device number 79 [ 1226.184982][T18941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1226.200165][T18942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1226.210299][T18941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1226.254625][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3140'. [ 1226.276487][T18945] netlink: 'syz.4.3141': attribute type 1 has an invalid length. [ 1226.284585][T18945] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1226.301359][T18945] tipc: Enabling of bearer rejected, failed to enable media [ 1226.498196][T18944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1226.563519][T18948] macvlan0: entered promiscuous mode [ 1226.583858][T18948] macvlan0: entered allmulticast mode [ 1226.593993][T18948] bond2: (slave macvlan0): Opening slave failed [ 1226.749536][ T8776] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1226.909390][ T8776] usb 5-1: Using ep0 maxpacket: 8 [ 1226.926759][ T8776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1226.936709][ T8776] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1226.954308][ T8776] usb 5-1: string descriptor 0 read error: -22 [ 1226.964516][ T8776] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1226.978171][ T8776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.002211][ T8776] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1227.040966][ T8776] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1227.058632][ T8776] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1227.066943][ T8776] usb 5-1: media controller created [ 1227.103354][ T8776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1227.419349][ T958] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1227.598879][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.615294][ T958] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1227.658777][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.695519][ T958] usb 2-1: config 0 descriptor?? [ 1227.943835][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1227.960104][T18961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.970346][T18961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.162993][T18977] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1228.217749][ T958] logitech-djreceiver 0003:046D:C71F.0051: item fetching failed at offset 5/7 [ 1228.232522][T18171] usb 5-1: USB disconnect, device number 80 [ 1228.270518][ T958] logitech-djreceiver 0003:046D:C71F.0051: logi_dj_probe: parse failed [ 1228.326555][ T958] logitech-djreceiver 0003:046D:C71F.0051: probe with driver logitech-djreceiver failed with error -22 [ 1228.423311][ T8776] usb 2-1: USB disconnect, device number 87 [ 1229.896693][T18999] pimreg: tun_chr_ioctl cmd 1074025677 [ 1229.908876][T18999] pimreg: linktype set to 773 [ 1230.151760][T18171] usb 2-1: new low-speed USB device number 88 using dummy_hcd [ 1230.179224][ T8776] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1230.304202][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.313173][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.322899][ T8774] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 1230.365120][ T8776] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=63.01 [ 1230.378888][ T8776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.407450][ T8776] usb 7-1: Product: syz [ 1230.419435][ T8776] usb 7-1: Manufacturer: syz [ 1230.424106][ T8776] usb 7-1: SerialNumber: syz [ 1230.449410][ T958] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1230.461078][ T8776] usb 7-1: config 0 descriptor?? [ 1230.486092][ T8774] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1230.494758][ T8774] usb 4-1: config 0 has no interface number 0 [ 1230.501645][ T8774] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1230.513262][ T8774] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1230.525461][ T8774] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1230.541901][ T8774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.570648][ T8774] usb 4-1: config 0 descriptor?? [ 1230.580516][T19010] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1230.604787][ T8774] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1230.619601][ T958] usb 5-1: Using ep0 maxpacket: 8 [ 1230.653491][ T958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1230.688869][ T958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 1230.716980][ T958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1230.777586][ T958] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1230.795235][ T958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.808070][ T958] usb 5-1: Product: syz [ 1230.819039][ T958] usb 5-1: Manufacturer: syz [ 1230.823894][ T958] usb 5-1: SerialNumber: syz [ 1230.824949][T19010] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3161'. [ 1230.837176][ T958] usb 5-1: config 0 descriptor?? [ 1230.867660][ T958] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 1230.891803][ T958] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 1230.999140][T18171] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 1231.014563][ T8776] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1231.055195][ T958] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1231.098072][T19012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.149976][ T8776] usb 7-1: USB disconnect, device number 54 [ 1231.170382][T18171] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1231.264862][T15130] udevd[15130]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1231.352508][T19012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.363294][T19029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1231.448401][T18171] usb 2-1: Using ep0 maxpacket: 32 [ 1231.569806][T18171] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.600193][T19029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1231.621856][T18171] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1231.690190][T18171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.750362][T18171] usb 2-1: Product: syz [ 1231.766158][T18171] usb 2-1: Manufacturer: syz [ 1231.834228][T18171] usb 2-1: SerialNumber: syz [ 1231.951013][T18171] usb 2-1: config 0 descriptor?? [ 1231.963447][T18171] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1232.180806][T18171] gspca_sunplus: reg_r err -32 [ 1233.329224][T18171] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1233.430155][ T958] usb 5-1: USB disconnect, device number 81 [ 1233.746168][T19046] trusted_key: encrypted_key: insufficient parameters specified [ 1233.926614][T18171] usb 4-1: USB disconnect, device number 84 [ 1233.999138][T17203] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1234.169880][T17203] usb 5-1: Using ep0 maxpacket: 8 [ 1234.269519][T19055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1234.278856][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3171'. [ 1234.331500][T19056] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1234.348077][ T1112] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.380515][T19055] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 1234.389542][T19055] PKCS7: Only support pkcs7_signedData type [ 1234.427087][T15760] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.512034][T17203] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1234.592775][T15760] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.689681][T15760] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1234.744815][T17203] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1234.769303][T17203] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1234.791071][T17203] usb 5-1: Product: syz [ 1234.803527][T17203] usb 5-1: Manufacturer: syz [ 1234.816066][T17203] usb 5-1: SerialNumber: syz [ 1234.833807][T17203] usb 5-1: config 0 descriptor?? [ 1235.308924][T17203] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1235.520166][T19045] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1235.542368][T17203] gspca_sunplus: reg_w_riv err -71 [ 1235.548136][T17203] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1235.629346][T17203] usb 5-1: USB disconnect, device number 82 [ 1236.035050][T18171] usb 2-1: USB disconnect, device number 89 [ 1236.349819][T19071] loop7: detected capacity change from 0 to 1 [ 1236.407185][T19076] syzkaller1: entered promiscuous mode [ 1236.428605][T19076] syzkaller1: entered allmulticast mode [ 1236.500903][T19071] loop7: detected capacity change from 1 to 0 [ 1236.836851][T19092] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 1237.065539][ T958] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1237.269157][ T958] usb 4-1: Using ep0 maxpacket: 8 [ 1237.317129][ T958] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1237.326486][ T958] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1237.338476][ T958] usb 4-1: config 0 has no interface number 0 [ 1237.354604][ T958] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1237.386311][ T958] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1237.409191][ T8776] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1237.448450][ T958] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1237.569338][ T958] usb 4-1: string descriptor 0 read error: -22 [ 1237.576253][ T958] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1237.589173][ T8776] usb 2-1: Using ep0 maxpacket: 16 [ 1237.597618][ T8776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.627907][ T8776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.638517][ T958] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1237.667215][ T8776] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1237.669794][ T958] usb 4-1: config 0 descriptor?? [ 1237.709172][ T8776] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1237.748826][ T8776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.781174][ T8776] usb 2-1: config 0 descriptor?? [ 1237.815104][ T958] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input84 [ 1238.004486][T15131] udevd[15131]: Unable to EVIOCGABS device "/dev/input/event4" [ 1238.012551][T15131] udevd[15131]: Unable to EVIOCGABS device "/dev/input/event4" [ 1238.281975][T19111] fuse: blksize only supported for fuseblk [ 1238.393966][T19105] random: crng reseeded on system resumption [ 1238.583109][ T8778] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1238.713514][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1238.722914][T19125] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1238.879897][ T8778] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1238.894673][ T8778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.953855][T18171] usb 4-1: USB disconnect, device number 85 [ 1238.991250][ T8778] usb 5-1: config 0 descriptor?? [ 1239.249487][ T8778] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1239.442957][ T8778] [drm:udl_init] *ERROR* Selecting channel failed [ 1239.578159][ T8778] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1239.586244][ T8778] [drm] Initialized udl on minor 2 [ 1239.604378][ T8778] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1239.617445][ T8778] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1239.663359][T18171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1239.678328][ T8778] usb 5-1: USB disconnect, device number 83 [ 1239.703518][T18171] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1240.329202][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1240.520214][ T10] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.534891][ T8776] usbhid 2-1:0.0: can't add hid device: -71 [ 1240.541493][ T8776] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1240.569249][ T8776] usb 2-1: USB disconnect, device number 90 [ 1240.572816][ T10] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1240.617248][T19157] loop6: detected capacity change from 0 to 7 [ 1240.628951][T19157] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 1240.639351][T19157] loop6: p1 start 1207959560 is beyond EOD, truncated [ 1240.646295][T19157] loop6: p2 start 3343437945 is beyond EOD, truncated [ 1240.670587][T19157] loop6: p3 start 3801280 is beyond EOD, truncated [ 1240.676245][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1240.684335][T19157] loop6: p4 start 26648 is beyond EOD, [ 1240.700273][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.703716][T19157] truncated [ 1240.727805][T19157] loop6: p5 start 1221622031 is beyond EOD, truncated [ 1240.733862][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1240.752836][T19157] loop6: p6 start 4294951111 is beyond EOD, truncated [ 1240.780133][T19159] binder: 19158:19159 ioctl ae80 0 returned -22 [ 1240.786587][T19157] loop6: p7 start 4720834 is beyond EOD, truncated [ 1240.801603][T19157] loop6: p8 start 3497594624 is beyond EOD, truncated [ 1240.808663][T19157] loop6: p9 start 4290824008 is beyond EOD, truncated [ 1240.825277][T19157] loop6: p10 start 1209189063 is beyond EOD, truncated [ 1240.835444][T19157] loop6: p11 start 2031026176 is beyond EOD, truncated [ 1240.837138][ T10] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1240.854988][T15130] udevd[15130]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.876189][T19146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.892574][T19157] loop6: p12 start 3234285568 is beyond EOD, truncated [ 1241.383920][T19171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1241.541033][ T10] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1241.729125][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1241.744037][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.768179][ T10] usb 2-1: config 0 has no interfaces? [ 1241.797568][ T10] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1241.811730][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.863110][ T10] usb 2-1: Product: syz [ 1241.876633][ T10] usb 2-1: Manufacturer: syz [ 1241.898881][ T10] usb 2-1: SerialNumber: syz [ 1241.935062][ T10] usb 2-1: config 0 descriptor?? [ 1242.948834][ T8776] usb 2-1: USB disconnect, device number 91 [ 1243.060624][T19183] block device autoloading is deprecated and will be removed. [ 1243.092411][ T10] usb 7-1: USB disconnect, device number 55 [ 1243.349993][T19188] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 1243.363740][T19188] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3203'. [ 1243.579392][ T8776] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1243.747462][ T8776] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.810042][ T8776] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1243.824363][ T8776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1243.832905][ T8776] usb 7-1: Product: syz [ 1243.837130][ T8776] usb 7-1: Manufacturer: syz [ 1243.856028][ T8776] usb 7-1: SerialNumber: syz [ 1244.109846][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.118755][ T8776] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1244.130485][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.249708][ T958] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1244.279616][T18171] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1244.421467][ T958] usb 2-1: config index 0 descriptor too short (expected 24868, got 36) [ 1244.430573][ T958] usb 2-1: config 127 has too many interfaces: 186, using maximum allowed: 32 [ 1244.456154][ T958] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.472354][T18171] usb 5-1: Using ep0 maxpacket: 8 [ 1244.478740][ T958] usb 2-1: config 127 has 1 interface, different from the descriptor's value: 186 [ 1244.485850][T18171] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1244.498938][ T958] usb 2-1: config 127 has no interface number 0 [ 1244.506980][T18171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.507005][ T958] usb 2-1: config 127 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 1244.519352][T18171] usb 5-1: Product: syz [ 1244.538183][ T958] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1244.540762][T18171] usb 5-1: Manufacturer: syz [ 1244.547816][ T958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.571035][ T958] usb 2-1: Product: syz [ 1244.575296][ T958] usb 2-1: Manufacturer: syz [ 1244.580674][ T958] usb 2-1: SerialNumber: syz [ 1244.589089][T18171] usb 5-1: SerialNumber: syz [ 1244.627234][T18171] usb 5-1: config 0 descriptor?? [ 1244.645838][T18171] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1244.677369][T19218] CUSE: unknown device info "€" [ 1244.683112][T19218] CUSE: unknown device info "Ö" [ 1244.693278][T19218] CUSE: unknown device info "" [ 1244.700830][T19218] CUSE: unknown device info "€" [ 1244.705913][T19218] CUSE: unknown device info "ðÿÿÿ" [ 1244.711770][T19218] CUSE: unknown device info "ƒ" [ 1244.716876][T19218] CUSE: unknown device info "" [ 1244.722241][T19218] CUSE: unknown device info "" [ 1244.727354][T19218] CUSE: zero length info key specified [ 1244.819236][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1244.819257][ T30] audit: type=1326 audit(1759022281.644:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1244.854078][T19207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.869860][T19207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.923874][ T30] audit: type=1326 audit(1759022281.644:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1244.957671][ T30] audit: type=1326 audit(1759022281.644:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1244.986408][ T30] audit: type=1326 audit(1759022281.644:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.016601][ T30] audit: type=1326 audit(1759022281.644:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.039453][ T30] audit: type=1326 audit(1759022281.644:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.062377][ T30] audit: type=1326 audit(1759022281.644:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.085097][ T30] audit: type=1326 audit(1759022281.644:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.118780][ T30] audit: type=1326 audit(1759022281.644:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.142775][ T30] audit: type=1326 audit(1759022281.644:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19206 comm="syz.1.3209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1245.177668][T19225] fuse: Bad value for 'fd' [ 1245.220646][ T958] hso 2-1:127.2: Failed to find INT IN ep [ 1245.248330][ T958] usb 2-1: USB disconnect, device number 92 [ 1245.260181][T18171] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1245.280796][T18171] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1245.305161][T18171] usb 5-1: USB disconnect, device number 84 [ 1245.853042][ C0] usblp0: nonzero write bulk status received: -71 [ 1245.862668][ T5945] usb 7-1: USB disconnect, device number 56 [ 1245.880727][T19187] usblp0: removed [ 1245.955327][T19234] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 1245.963656][T19234] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3216'. [ 1246.041647][T18171] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1246.199224][T18171] usb 2-1: Using ep0 maxpacket: 32 [ 1246.232799][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1246.253959][T18171] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1246.284800][T18171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.305871][T18171] usb 2-1: config 0 descriptor?? [ 1246.339775][T18171] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1246.559097][ T5945] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1246.742333][T18171] gspca_sunplus: reg_r err -32 [ 1246.743038][ T5945] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 1246.747351][T18171] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1246.781751][ T5945] usb 4-1: config 0 has no interface number 0 [ 1246.789807][ T5945] usb 4-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1246.804946][ T5945] usb 4-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 1246.819425][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.829890][ T5945] usb 4-1: Product: syz [ 1246.840821][ T5945] usb 4-1: Manufacturer: syz [ 1246.845544][ T5945] usb 4-1: SerialNumber: syz [ 1246.855320][ T5945] usb 4-1: config 0 descriptor?? [ 1246.868865][ T5945] cdc_ncm 4-1:0.47: CDC Union missing and no IAD found [ 1246.907754][ T5945] cdc_ncm 4-1:0.47: bind() failure [ 1247.072017][ T5945] usb 4-1: USB disconnect, device number 86 [ 1247.075731][T19251] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3221'. [ 1247.504298][T19263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1247.839489][T18171] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1247.840115][T19270] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 1247.885835][T19270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3228'. [ 1248.021573][T18171] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1248.076900][T18171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.106628][T18171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1248.118155][T18171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1248.131889][T18171] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1248.143020][T18171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.154853][T18171] usb 5-1: config 0 descriptor?? [ 1248.358011][T19277] tipc: Started in network mode [ 1248.363974][T19277] tipc: Node identity ac14140f, cluster identity 4711 [ 1248.374073][T19277] tipc: New replicast peer: 255.255.255.255 [ 1248.381477][T19277] tipc: Enabled bearer , priority 10 [ 1248.529271][ T8778] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1248.680676][ T8778] usb 4-1: device descriptor read/64, error -71 [ 1248.844450][ T5945] usb 2-1: USB disconnect, device number 93 [ 1248.941367][ T8778] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1249.016225][T18171] usbhid 5-1:0.0: can't add hid device: -71 [ 1249.034390][T18171] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1249.051857][T18171] usb 5-1: USB disconnect, device number 85 [ 1249.079770][ T8778] usb 4-1: device descriptor read/64, error -71 [ 1249.189580][ T8778] usb usb4-port1: attempt power cycle [ 1249.289370][ T5945] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1249.476472][ T5945] usb 2-1: config 0 has an invalid interface number: 195 but max is 0 [ 1249.499150][ T5945] usb 2-1: config 0 has no interface number 0 [ 1249.503010][T18171] tipc: Node number set to 2886997007 [ 1249.514281][ T5945] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08 [ 1249.527663][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.537093][ T5945] usb 2-1: Product: syz [ 1249.542830][ T5945] usb 2-1: Manufacturer: syz [ 1249.547692][ T5945] usb 2-1: SerialNumber: syz [ 1249.556758][ T5945] usb 2-1: config 0 descriptor?? [ 1249.569428][ T8778] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1249.616632][ T8778] usb 4-1: device descriptor read/8, error -71 [ 1249.779305][ T5945] asix 2-1:0.195 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1249.807744][ T5945] asix 2-1:0.195: probe with driver asix failed with error -71 [ 1249.869409][ T8778] usb 4-1: new low-speed USB device number 90 using dummy_hcd [ 1249.900140][ T8778] usb 4-1: device descriptor read/8, error -71 [ 1249.918951][ T5945] usb 2-1: USB disconnect, device number 94 [ 1250.031825][ T8778] usb usb4-port1: unable to enumerate USB device [ 1251.010454][T19312] kvm: pic: non byte write [ 1251.889157][ T8776] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1252.069423][ T8776] usb 2-1: Using ep0 maxpacket: 32 [ 1252.076822][ T8776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1252.098778][ T8776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1252.110978][ T8776] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.145206][ T8776] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1252.192250][ T8776] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1252.222186][ T8776] usb 2-1: Product: syz [ 1252.238897][ T8776] usb 2-1: Manufacturer: syz [ 1252.258849][ T8776] usb 2-1: SerialNumber: syz [ 1252.318870][ T8776] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input85 [ 1252.491067][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.529586][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.554664][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.578579][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.600710][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.639543][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.666247][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.702783][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.723579][T19326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.769113][ T8776] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1252.799060][T19326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.822776][ T958] usb 2-1: USB disconnect, device number 95 [ 1252.871865][ T958] appletouch 2-1:1.0: input: appletouch disconnected [ 1252.939270][ T8776] usb 7-1: Using ep0 maxpacket: 16 [ 1252.991957][ T8776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.005672][ T8776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.036342][ T8776] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1253.055800][ T8776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.080243][ T8776] usb 7-1: config 0 descriptor?? [ 1253.544370][T19349] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1254.155991][T19363] netlink: 'syz.1.3253': attribute type 15 has an invalid length. [ 1254.449506][ T5945] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1254.650128][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 1254.746445][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1254.800768][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1254.934746][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1255.016208][ T5945] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1255.036919][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.066326][ T5945] usb 5-1: Product: syz [ 1255.075832][ T5945] usb 5-1: Manufacturer: syz [ 1255.099357][ T5945] usb 5-1: SerialNumber: syz [ 1255.117582][ T5945] usb 5-1: config 0 descriptor?? [ 1255.156362][T19376] kvm: pic: non byte write [ 1255.170295][T19361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1255.236903][ T5945] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1255.254605][ T5945] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1255.273351][ T5945] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 1255.299279][ T5945] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 1255.322510][ T5945] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 1255.400739][T19361] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1255.616012][T19361] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3251'. [ 1256.179725][ T5945] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1256.409134][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 1256.420700][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.444106][ T5945] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1256.468413][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.492331][ T5945] usb 4-1: config 0 descriptor?? [ 1256.767440][ T8776] usbhid 7-1:0.0: can't add hid device: -71 [ 1256.799224][ T8776] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1256.891839][ T8776] usb 7-1: USB disconnect, device number 57 [ 1256.954678][T19399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.099086][ T5945] hid-alps 0003:044E:121E.0052: hidraw0: USB HID v0.03 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0 [ 1257.169579][ T5945] usb 4-1: USB disconnect, device number 91 [ 1257.319113][T18171] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1257.541811][T18171] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1257.558131][T19403] fido_id[19403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1257.593868][T18171] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1257.658512][T18171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1257.731772][T18171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1257.772587][T18171] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1257.918190][T18171] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1257.939588][T18171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.983865][T18171] usb 2-1: Product: syz [ 1258.029471][T18171] usb 2-1: Manufacturer: syz [ 1258.034137][T18171] usb 2-1: SerialNumber: syz [ 1258.087441][T18171] usb 2-1: config 0 descriptor?? [ 1258.147020][T18171] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1258.204056][T18171] imon 2-1:0.0: unable to initialize intf0, err -90 [ 1258.242173][ T5989] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1258.262673][T18171] imon:imon_probe: failed to initialize context! [ 1258.272057][ T5530] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 1258.311228][T18171] imon 2-1:0.0: unable to register, err -19 [ 1258.321433][ T8776] usb 5-1: USB disconnect, device number 86 [ 1258.387196][ T8776] mcba_usb 5-1:0.0 can0: device disconnected [ 1258.439435][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 1258.456501][ T5989] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1258.477370][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.536761][ T5989] usb 4-1: Product: syz [ 1258.548244][ T5989] usb 4-1: Manufacturer: syz [ 1258.556659][ T5989] usb 4-1: SerialNumber: syz [ 1258.584826][ T5989] usb 4-1: config 0 descriptor?? [ 1258.955775][ T5989] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1259.851661][ T8776] usb 2-1: USB disconnect, device number 96 [ 1260.296061][ T5989] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1260.346214][ T5989] usb 4-1: USB disconnect, device number 92 [ 1260.397097][T19452] i2c i2c-0: Invalid block read size 255 [ 1260.669585][ T958] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1260.853840][ T958] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1260.889236][ T958] usb 7-1: can't read configurations, error -22 [ 1261.029288][ T958] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1261.209462][ T958] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1261.217471][ T958] usb 7-1: can't read configurations, error -22 [ 1261.271688][ T958] usb usb7-port1: attempt power cycle [ 1261.660015][ T958] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1261.690297][ T958] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1261.698780][ T958] usb 7-1: can't read configurations, error -22 [ 1261.829151][ T958] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1261.844624][ T8776] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1261.862424][ T958] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 1261.879072][ T958] usb 7-1: can't read configurations, error -22 [ 1262.009898][ T8776] usb 5-1: device descriptor read/64, error -71 [ 1262.087166][ T958] usb usb7-port1: unable to enumerate USB device [ 1262.249338][ T8776] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1262.386030][ T958] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1262.399251][ T8776] usb 5-1: device descriptor read/64, error -71 [ 1262.480210][T19489] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3279'. [ 1262.491189][T19489] netlink: zone id is out of range [ 1262.496385][T19489] netlink: get zone limit has 8 unknown bytes [ 1262.519693][ T8776] usb usb5-port1: attempt power cycle [ 1262.572257][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1262.596780][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.607809][ T958] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 1262.617218][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.627697][ T958] usb 2-1: config 0 descriptor?? [ 1262.879265][ T8776] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1262.915567][ T8776] usb 5-1: device descriptor read/8, error -71 [ 1263.044757][ T958] kye 0003:0458:5005.0053: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1263.063086][ T958] kye 0003:0458:5005.0053: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 1263.074458][ T958] kye 0003:0458:5005.0053: tablet-enabling feature report not found [ 1263.082568][ T958] kye 0003:0458:5005.0053: tablet enabling failed [ 1263.159219][ T8776] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1263.189978][ T8776] usb 5-1: device descriptor read/8, error -71 [ 1263.295339][T18171] usb 2-1: USB disconnect, device number 97 [ 1263.304877][ T8776] usb usb5-port1: unable to enumerate USB device [ 1263.779171][ T958] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 1263.989446][ T958] usb 7-1: config 252 has an invalid interface number: 107 but max is 0 [ 1264.018280][ T958] usb 7-1: config 252 has no interface number 0 [ 1264.038390][ T958] usb 7-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1264.124257][ T958] usb 7-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1264.137629][ T958] usb 7-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 1264.150527][ T958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.178739][ T958] usb 7-1: Product: syz [ 1264.187761][ T958] usb 7-1: Manufacturer: syz [ 1264.192664][ T958] usb 7-1: SerialNumber: syz [ 1264.229160][ T5945] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1264.384387][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 1264.392852][ T5945] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1264.399343][T18171] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 1264.425315][ T5945] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1264.435565][ T958] usb 7-1: USB disconnect, device number 62 [ 1264.471021][ T5945] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1264.485522][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1264.496135][ T5945] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1264.509522][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1264.544251][ T5945] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1264.579954][T18171] usb 2-1: Invalid ep0 maxpacket: 64 [ 1264.597708][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.614344][ T5945] usb 4-1: config 0 descriptor?? [ 1264.729394][T18171] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 1264.899097][T18171] usb 2-1: Invalid ep0 maxpacket: 64 [ 1264.907233][ T5945] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1264.909525][T18171] usb usb2-port1: attempt power cycle [ 1265.289552][T18171] usb 2-1: new low-speed USB device number 100 using dummy_hcd [ 1265.325081][T18171] usb 2-1: Invalid ep0 maxpacket: 64 [ 1265.412080][ T5945] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1265.459981][T18171] usb 2-1: new low-speed USB device number 101 using dummy_hcd [ 1265.468185][T19522] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 1265.500012][T18171] usb 2-1: Invalid ep0 maxpacket: 64 [ 1265.506785][T18171] usb usb2-port1: unable to enumerate USB device [ 1265.580403][ T5945] usb 7-1: Using ep0 maxpacket: 8 [ 1265.598826][ T5945] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1265.702557][ T5945] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1265.791796][ T5945] usb 7-1: config 0 has no interface number 0 [ 1265.870313][ T5945] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1265.885581][ T5945] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1265.901761][ T5945] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1265.912501][ T5945] usb 7-1: language id specifier not provided by device, defaulting to English [ 1265.931631][ T5945] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1265.959213][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1265.967362][ T5945] usb 7-1: Product: syz [ 1265.980002][ T5945] usb 7-1: SerialNumber: syz [ 1266.026846][ T5945] usb 7-1: config 0 descriptor?? [ 1266.207907][T19525] mÐZ`Ô€@: entered promiscuous mode [ 1266.264545][ T5945] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input87 [ 1266.297616][ T5945] usb 7-1: USB disconnect, device number 63 [ 1266.656111][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 1267.193755][ T10] usb 4-1: USB disconnect, device number 93 [ 1267.296023][ T10] usblp0: removed [ 1267.509225][ T8776] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1267.716885][ T5945] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1267.883178][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1267.936350][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 1267.943955][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1267.952491][ T5945] usb 2-1: config 0 has no interface number 0 [ 1267.961024][ T5945] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1267.970538][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.980582][ T5945] usb 2-1: Product: syz [ 1267.984786][ T5945] usb 2-1: Manufacturer: syz [ 1267.989621][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1267.997518][ T5945] usb 2-1: SerialNumber: syz [ 1268.007406][ T8776] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 1268.049242][ T5945] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1268.067135][ T5945] usb 2-1: no configuration chosen from 1 choice [ 1268.069118][ T8776] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.115116][ T8776] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1268.156597][ T8776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1268.169224][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1268.180202][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1268.189497][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.203750][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1268.263901][ T8776] usb 7-1: SerialNumber: syz [ 1268.279193][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1268.352955][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1268.444665][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.571658][ T10] usb 4-1: Product: syz [ 1268.576094][ T10] usb 4-1: Manufacturer: syz [ 1268.583612][ T10] usb 4-1: SerialNumber: syz [ 1268.583951][ T8776] usb 7-1: 0:2 : does not exist [ 1268.617786][ T8776] usb 7-1: unit 5: unexpected type 0x0c [ 1268.644516][ T8776] usb 7-1: USB disconnect, device number 64 [ 1269.013735][ T10] usb 4-1: 0:2 : does not exist [ 1270.412578][T18171] usb 2-1: USB disconnect, device number 102 [ 1270.426814][T19549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.464769][T19549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.701563][T19571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3301'. [ 1270.796094][ T10] usb 4-1: USB disconnect, device number 94 [ 1270.894078][T15131] udevd[15131]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1271.643665][T19583] netlink: 'syz.3.3306': attribute type 46 has an invalid length. [ 1271.666021][T19585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1271.684054][T19583] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1271.744816][T19584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.859760][T19584] loop7: detected capacity change from 0 to 1 [ 1272.045413][T19584] Dev loop7: unable to read RDB block 1 [ 1272.064858][T19584] loop7: unable to read partition table [ 1272.111175][T19584] loop7: partition table beyond EOD, truncated [ 1272.117672][T19584] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 1274.449128][ T10] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1274.609202][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1274.634593][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.676063][ T10] usb 7-1: config 0 has no interfaces? [ 1274.692651][ T10] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1274.737430][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.788481][ T10] usb 7-1: config 0 descriptor?? [ 1275.042214][ T10] usb 7-1: USB disconnect, device number 65 [ 1275.538443][T19637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 1275.998656][T19651] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 1276.048691][T19651] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1276.609122][T17203] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1276.789994][T17203] usb 4-1: Using ep0 maxpacket: 32 [ 1276.801029][T17203] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 1276.820065][T17203] usb 4-1: config 0 has no interface number 0 [ 1276.847371][T17203] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1276.858680][T17203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.879236][T17203] usb 4-1: Product: syz [ 1276.888527][T17203] usb 4-1: Manufacturer: syz [ 1276.898677][T17203] usb 4-1: SerialNumber: syz [ 1276.908492][T17203] usb 4-1: config 0 descriptor?? [ 1276.919151][ T10] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1277.099136][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1277.106743][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1277.121191][ T10] usb 2-1: config 0 has no interface number 0 [ 1277.152765][T17203] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1277.163347][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1277.176650][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.199542][ T10] usb 2-1: Product: syz [ 1277.207647][ T10] usb 2-1: Manufacturer: syz [ 1277.230729][ T10] usb 2-1: SerialNumber: syz [ 1277.235580][T17203] usb 4-1: USB disconnect, device number 95 [ 1277.261658][ T10] usb 2-1: config 0 descriptor?? [ 1277.304247][ T10] smsc95xx v2.0.0 [ 1277.348556][T15190] udevd[15190]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.439256][ T8776] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1277.591196][ T8776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.603668][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1277.603686][ T30] audit: type=1326 audit(1759022314.434:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1277.603989][ T8776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.629137][ T30] audit: type=1326 audit(1759022314.434:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1277.649401][ T8778] IPVS: starting estimator thread 0... [ 1277.766724][ T8776] usb 7-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 1277.776726][ T958] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1277.790338][ T30] audit: type=1326 audit(1759022314.464:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa532b8d617 code=0x7ffc0000 [ 1277.813149][ T8776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.858078][ T30] audit: type=1326 audit(1759022314.464:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1277.882147][T19690] IPVS: using max 36 ests per chain, 86400 per kthread [ 1277.893559][ T30] audit: type=1326 audit(1759022314.464:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1277.947350][ T30] audit: type=1326 audit(1759022314.464:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1277.991375][ T8776] usb 7-1: config 0 descriptor?? [ 1278.009270][ T958] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.020416][ T958] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1278.088610][ T30] audit: type=1326 audit(1759022314.464:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1278.113740][T17203] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1278.122371][ T958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.235295][ T958] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1278.265237][ T30] audit: type=1326 audit(1759022314.464:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1278.309096][T17203] usb 4-1: Using ep0 maxpacket: 32 [ 1278.367563][T17203] usb 4-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 1278.397669][T17203] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1278.412270][ T30] audit: type=1326 audit(1759022314.464:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1278.447028][ T30] audit: type=1326 audit(1759022314.464:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19672 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1278.484097][T17203] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1278.513332][ T8776] saitek 0003:06A3:0CFA.0054: unknown main item tag 0x0 [ 1278.519747][T17203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.535580][T17203] usb 4-1: Product: syz [ 1278.543038][T17203] usb 4-1: Manufacturer: syz [ 1278.547756][T17203] usb 4-1: SerialNumber: syz [ 1278.561157][ T958] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1278.564171][ T8776] saitek 0003:06A3:0CFA.0054: hidraw0: USB HID v0.00 Device [HID 06a3:0cfa] on usb-dummy_hcd.6-1/input0 [ 1278.591510][T17203] usb 4-1: config 0 descriptor?? [ 1278.598810][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1278.673763][ T8776] usb 7-1: USB disconnect, device number 66 [ 1278.679061][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1278.740441][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1278.753152][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1278.782893][ T10] usb 2-1: USB disconnect, device number 103 [ 1278.855948][T19693] fido_id[19693]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1279.644038][T19713] autofs4:pid:19713:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1279.971120][T19714] kvm: pic: non byte write [ 1280.581658][T19728] autofs4:pid:19728:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1280.767990][T19732] netlink: 596 bytes leftover after parsing attributes in process `syz.6.3345'. [ 1280.928332][ T8776] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1281.036447][T18171] usb 5-1: USB disconnect, device number 91 [ 1281.047009][T19686] delete_channel: no stack [ 1281.145568][ T8776] usb 2-1: Using ep0 maxpacket: 32 [ 1281.166787][ T8776] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1281.181748][ T8776] usb 2-1: config 0 has no interface number 0 [ 1281.196215][ T8776] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1281.216376][ T8776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.236654][ T8776] usb 2-1: Product: syz [ 1281.241449][ T8776] usb 2-1: Manufacturer: syz [ 1281.288587][ T8776] usb 2-1: SerialNumber: syz [ 1281.314729][ T8776] usb 2-1: config 0 descriptor?? [ 1281.357949][ T8776] smsc95xx v2.0.0 [ 1281.429149][ T10] usb 4-1: USB disconnect, device number 96 [ 1282.137360][T17534] Bluetooth: hci5: command 0x0406 tx timeout [ 1282.154851][T19743] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1282.188876][ T10] IPVS: starting estimator thread 0... [ 1282.329337][T19745] IPVS: using max 35 ests per chain, 84000 per kthread [ 1282.621491][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1282.621507][ T30] audit: type=1326 audit(1759022319.444:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.1.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa532bc1785 code=0x7ffc0000 [ 1282.650085][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.947444][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1282.989978][ T30] audit: type=1326 audit(1759022319.644:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.1.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1283.012649][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.039239][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1283.087349][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1283.110843][ T8776] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1283.127392][ T30] audit: type=1326 audit(1759022319.654:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19729 comm="syz.1.3344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1283.150102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.181365][ T8776] usb 2-1: USB disconnect, device number 104 [ 1283.599296][T18171] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1283.646380][T19768] tipc: Enabling of bearer rejected, failed to enable media [ 1283.779098][T18171] usb 4-1: Using ep0 maxpacket: 32 [ 1283.805541][T18171] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1283.849180][T18171] usb 4-1: config 0 has no interface number 0 [ 1283.855440][T18171] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1283.963251][T18171] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1284.019399][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.143224][T18171] usb 4-1: Product: syz [ 1284.147568][T18171] usb 4-1: Manufacturer: syz [ 1284.167902][T18171] usb 4-1: SerialNumber: syz [ 1284.249975][T18171] usb 4-1: config 0 descriptor?? [ 1284.830358][T18171] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1284.859300][T18171] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1284.883416][T18171] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1284.959532][T18171] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1285.028759][T18171] usb 4-1: USB disconnect, device number 97 [ 1286.761258][T17203] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1286.929541][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 1287.009272][T17203] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.030794][T19808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3361'. [ 1287.093277][T17203] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1287.129092][T17203] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1287.295909][T17203] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.305825][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3364'. [ 1287.359532][T18171] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1287.367334][ T8776] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1287.423378][T17203] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.484305][T17203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.500165][ T8776] usb 5-1: device descriptor read/64, error -71 [ 1287.523481][T18171] usb 4-1: Using ep0 maxpacket: 32 [ 1287.551605][T18171] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1287.573781][T18171] usb 4-1: config 0 has no interface number 0 [ 1287.596529][T18171] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1287.629257][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.651000][T18171] usb 4-1: Product: syz [ 1287.655528][T18171] usb 4-1: Manufacturer: syz [ 1287.680379][T18171] usb 4-1: SerialNumber: syz [ 1287.717663][T18171] usb 4-1: config 0 descriptor?? [ 1287.730645][T18171] smsc95xx v2.0.0 [ 1287.752510][ T8776] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1287.849247][T17203] usb 7-1: GET_CAPABILITIES returned 0 [ 1287.868156][T17203] usbtmc 7-1:16.0: can't read capabilities [ 1287.901424][ T8776] usb 5-1: device descriptor read/64, error -71 [ 1288.009653][ T8776] usb usb5-port1: attempt power cycle [ 1288.024309][ T30] audit: type=1326 audit(1759022324.854:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.059267][ T958] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1288.061786][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.076644][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.085901][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.132599][T17203] IPVS: starting estimator thread 0... [ 1288.146247][ T30] audit: type=1326 audit(1759022324.854:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.173348][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.182503][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.189121][ T30] audit: type=1326 audit(1759022324.884:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4d92d8d617 code=0x7ffc0000 [ 1288.191725][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.232221][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.241646][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.251154][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.261386][T19819] IPVS: using max 26 ests per chain, 62400 per kthread [ 1288.269370][ T30] audit: type=1326 audit(1759022324.884:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.273251][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.301509][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.310847][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.322526][ T958] usb 2-1: device descriptor read/64, error -71 [ 1288.335602][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.344840][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.350539][ T30] audit: type=1326 audit(1759022324.894:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.354232][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1288.387665][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1288.412524][ T8776] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1288.424343][T17203] usb 7-1: USB disconnect, device number 67 [ 1288.436869][ T30] audit: type=1326 audit(1759022324.894:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.450053][ T8776] usb 5-1: device descriptor read/8, error -71 [ 1288.464508][ T30] audit: type=1326 audit(1759022324.934:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.488630][ T30] audit: type=1326 audit(1759022324.934:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.517190][ T30] audit: type=1326 audit(1759022324.934:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.580849][ T30] audit: type=1326 audit(1759022324.934:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19810 comm="syz.3.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d92d8eec9 code=0x7ffc0000 [ 1288.603824][ T958] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1288.704955][T18171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1288.723271][T18171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1288.751445][ T8776] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1288.768827][T18171] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1288.770750][ T958] usb 2-1: device descriptor read/64, error -71 [ 1288.780839][ T8776] usb 5-1: device descriptor read/8, error -71 [ 1288.798536][T18171] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1288.838348][T18171] usb 4-1: USB disconnect, device number 98 [ 1288.900733][ T958] usb usb2-port1: attempt power cycle [ 1288.910032][ T8776] usb usb5-port1: unable to enumerate USB device [ 1288.949317][T17203] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1289.129441][T17203] usb 7-1: Using ep0 maxpacket: 32 [ 1289.141827][T17203] usb 7-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 1289.162075][T17203] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1289.178495][T17203] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.196578][T17203] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1289.206975][T17203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.216024][T17203] usb 7-1: Product: syz [ 1289.220626][T17203] usb 7-1: Manufacturer: syz [ 1289.249268][ T958] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1289.260696][T17203] usb 7-1: SerialNumber: syz [ 1289.300341][ T958] usb 2-1: device descriptor read/8, error -71 [ 1289.306890][T17203] cdc_ncm 7-1:1.0: skipping garbage [ 1289.333320][T17203] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 1289.352060][T17203] cdc_ncm 7-1:1.0: bind() failure [ 1289.508102][T17203] usb 7-1: USB disconnect, device number 68 [ 1289.559115][ T958] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1289.623238][T19845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 1289.675215][ T958] usb 2-1: device descriptor read/8, error -71 [ 1289.803054][ T958] usb usb2-port1: unable to enumerate USB device [ 1291.069526][ T10] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1291.349115][ T10] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1983, setting to 1024 [ 1291.403685][ T10] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1291.509864][T19862] netlink: 'syz.1.3376': attribute type 10 has an invalid length. [ 1291.548636][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1291.599459][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1291.642860][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.666868][ T10] usb 7-1: Product: syz [ 1291.679113][ T10] usb 7-1: Manufacturer: syz [ 1291.690945][ T10] usb 7-1: SerialNumber: syz [ 1291.718065][T19857] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1291.725837][T19866] fuse: Unknown parameter '' [ 1291.975455][T19857] sctp: [Deprecated]: syz.6.3375 (pid 19857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1291.975455][T19857] Use struct sctp_sack_info instead [ 1292.177225][ T10] usb 7-1: USB disconnect, device number 69 [ 1293.069173][T18171] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1293.294506][T18171] usb 7-1: Using ep0 maxpacket: 16 [ 1293.301596][T18171] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.333052][T18171] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1293.373427][T18171] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1293.398123][T18171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.432931][T18171] usb 7-1: Product: syz [ 1293.437248][T18171] usb 7-1: Manufacturer: syz [ 1293.468431][T18171] usb 7-1: SerialNumber: syz [ 1293.509906][T18171] usb 7-1: config 0 descriptor?? [ 1293.538461][T18171] hub 7-1:0.0: bad descriptor, ignoring hub [ 1293.560982][T18171] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1293.587629][T18171] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1293.607982][T15760] usb 7-1: Failed to submit usb control message: -71 [ 1293.617704][T15760] usb 7-1: unable to send the bmi data to the device: -71 [ 1293.625354][T15760] usb 7-1: unable to get target info from device [ 1293.636150][T15760] usb 7-1: could not get target info (-71) [ 1293.642538][T15760] usb 7-1: could not probe fw (-71) [ 1293.687647][T19882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1293.707746][T19882] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1293.737711][ T8776] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1293.919198][ T8776] usb 2-1: Using ep0 maxpacket: 32 [ 1293.936111][ T8776] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1293.961380][T17203] usb 7-1: USB disconnect, device number 70 [ 1293.966853][ T8776] usb 2-1: config 0 has no interface number 0 [ 1294.017070][ T8776] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1294.039183][ T8776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.058767][ T8776] usb 2-1: Product: syz [ 1294.078848][ T8776] usb 2-1: Manufacturer: syz [ 1294.085421][ T8776] usb 2-1: SerialNumber: syz [ 1294.105069][ T8776] usb 2-1: config 0 descriptor?? [ 1294.122170][ T8776] smsc95xx v2.0.0 [ 1294.199190][T15200] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1294.350140][T15200] usb 5-1: Using ep0 maxpacket: 8 [ 1294.386654][T15200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1294.396410][T15200] usb 5-1: config 152 has an invalid interface association descriptor of length 5, skipping [ 1294.417224][T15200] usb 5-1: config 152 has 0 interfaces, different from the descriptor's value: 1 [ 1294.494809][T15200] usb 5-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 1294.549029][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1294.549050][ T30] audit: type=1326 audit(1759022331.364:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.594909][T15200] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.604478][T15200] usb 5-1: Product: syz [ 1294.608788][T15200] usb 5-1: Manufacturer: syz [ 1294.639497][T15200] usb 5-1: SerialNumber: syz [ 1294.640682][T19888] loop2: detected capacity change from 0 to 7 [ 1294.652540][ T30] audit: type=1326 audit(1759022331.364:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa532b8d617 code=0x7ffc0000 [ 1294.714183][T15131] loop2: [POWERTEC] p1 p2 [ 1294.717349][ T30] audit: type=1326 audit(1759022331.364:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.755151][ T30] audit: type=1326 audit(1759022331.364:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.764233][T15131] loop2: p1 size 1680801792 extends beyond EOD, [ 1294.798069][ T30] audit: type=1326 audit(1759022331.364:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.844613][ T30] audit: type=1326 audit(1759022331.364:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.880396][ T30] audit: type=1326 audit(1759022331.364:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1294.976194][ T30] audit: type=1326 audit(1759022331.364:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1295.000733][T15131] truncated [ 1295.013517][T15131] loop2: p2 start 2490368 is beyond EOD, truncated [ 1295.040036][T19888] loop2: [POWERTEC] p1 p2 [ 1295.045207][T19888] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1295.057919][T19888] loop2: p2 start 2490368 is beyond EOD, truncated [ 1295.082696][ T30] audit: type=1326 audit(1759022331.364:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1295.217490][T15131] udevd[15131]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1295.230597][ T30] audit: type=1326 audit(1759022331.364:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.1.3380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa532b8eec9 code=0x7ffc0000 [ 1295.424277][T15131] udevd[15131]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1296.024177][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1296.272910][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1296.329170][ T8774] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1296.337512][ T8776] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1296.489465][ T8776] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1296.519413][ T8774] usb 7-1: Using ep0 maxpacket: 16 [ 1296.527623][ T8776] usb 2-1: USB disconnect, device number 109 [ 1296.548884][ T8774] usb 7-1: config 0 has an invalid interface number: 123 but max is 0 [ 1296.558687][ T8774] usb 7-1: config 0 has no interface number 0 [ 1296.571301][ T8774] usb 7-1: config 0 interface 123 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1296.592635][ T8774] usb 7-1: config 0 interface 123 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1296.605746][ T8774] usb 7-1: config 0 interface 123 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1296.657638][ T8774] usb 7-1: New USB device found, idVendor=1c4f, idProduct=3000, bcdDevice=93.fc [ 1296.927377][ T8774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.993896][ T8774] usb 7-1: Product: syz [ 1297.029298][ T8774] usb 7-1: Manufacturer: syz [ 1297.034044][ T8774] usb 7-1: SerialNumber: syz [ 1297.087122][ T8774] usb 7-1: config 0 descriptor?? [ 1297.108394][T19896] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1297.162074][T15200] usb 5-1: USB disconnect, device number 96 [ 1297.377116][T17534] Bluetooth: hci3: command 0x0406 tx timeout [ 1297.532016][T19896] netlink: 'syz.6.3384': attribute type 5 has an invalid length. [ 1297.570537][ T8776] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1297.630283][T19896] ip6erspan0: entered promiscuous mode [ 1297.985710][ T8776] usb 2-1: Using ep0 maxpacket: 16 [ 1298.247569][ T8776] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.290064][ T8776] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 1298.604620][ T8776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.628377][ T8776] usb 2-1: config 0 descriptor?? [ 1298.859269][T19906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 1298.868510][T19906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3387'. [ 1298.938150][T19906] syz.1.3387 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1298.962319][ T8776] usbhid 2-1:0.0: can't add hid device: -71 [ 1298.968731][ T8776] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1299.029858][ T8776] usb 2-1: USB disconnect, device number 110 [ 1300.582505][ T8774] usb 7-1: Found UVC 0.00 device syz (1c4f:3000) [ 1300.639175][ T8774] usb 7-1: No valid video chain found. [ 1300.658514][ T8774] usb 7-1: USB disconnect, device number 71 [ 1300.716423][T19931] team_slave_0: entered promiscuous mode [ 1300.723115][T19931] team_slave_1: entered promiscuous mode [ 1300.822482][T19931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1300.965367][T19930] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1301.030930][T19937] loop2: detected capacity change from 0 to 7 [ 1301.070421][T15130] loop2: [POWERTEC] p1 p2 [ 1301.076990][T15130] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1301.157199][T15130] loop2: p2 start 2490368 is beyond EOD, truncated [ 1301.186596][T19939] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3395'. [ 1301.247564][T19937] loop2: [POWERTEC] p1 p2 [ 1301.298700][T19937] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 1301.355177][T19937] loop2: p2 start 2490368 is beyond EOD, truncated [ 1301.524436][T19942] bridge_slave_0: left allmulticast mode [ 1301.530611][T19942] bridge_slave_0: left promiscuous mode [ 1301.540026][T19942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.612425][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1301.667930][T19942] bridge_slave_1: left allmulticast mode [ 1301.674415][T19942] bridge_slave_1: left promiscuous mode [ 1301.684318][T19942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.857482][T15130] udevd[15130]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1301.885048][T19952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3396'. [ 1302.230672][T19942] bond0: (slave bond_slave_0): Releasing backup interface [ 1302.262322][T19942] bond_slave_0: left promiscuous mode [ 1302.320989][T19942] bond0: (slave bond_slave_1): Releasing backup interface [ 1302.887804][T19942] bond_slave_1: left promiscuous mode [ 1302.939231][T19942] team_slave_0: left promiscuous mode [ 1302.983887][T19942] team0: Port device team_slave_0 removed [ 1302.999352][T19942] team_slave_1: left promiscuous mode [ 1303.047373][T19942] team0: Port device team_slave_1 removed [ 1303.064567][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.074250][T19942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.092594][T19942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.103357][T19942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.175955][T19942] batadv1: left promiscuous mode [ 1303.238360][T19942] team0: Port device batadv1 removed [ 1303.458163][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1303.709070][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1303.879105][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1303.887778][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 1303.908131][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1303.941562][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.985551][ T10] usb 2-1: config 0 descriptor?? [ 1304.219884][T19983] bridge0: entered promiscuous mode [ 1304.225732][T19983] macsec1: entered promiscuous mode [ 1304.240300][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3402'. [ 1304.354442][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1304.563015][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input88 [ 1304.641897][ T5220] bcm5974 2-1:0.0: could not read from device [ 1304.662973][ T5220] bcm5974 2-1:0.0: could not read from device [ 1304.725290][ T10] usb 2-1: USB disconnect, device number 111 [ 1304.849862][ T5220] bcm5974 2-1:0.0: could not read from device [ 1305.276648][T19996] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3407'. [ 1305.558535][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.565834][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3408'. [ 1305.584081][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.630812][T19985] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1306.028637][T18141] bridge_slave_1: left allmulticast mode [ 1306.078700][T18141] bridge_slave_1: left promiscuous mode [ 1306.089562][T20007] [U]  [ 1306.097326][T18141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.168428][T18141] bridge_slave_0: left allmulticast mode [ 1306.247906][T18141] bridge_slave_0: left promiscuous mode [ 1306.275563][T18141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.371480][T20013] netlink: 'syz.2.3411': attribute type 3 has an invalid length. [ 1307.813229][T18141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.827323][T18141] bond_slave_0: left promiscuous mode [ 1307.843088][T18141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.859778][T18141] bond_slave_1: left promiscuous mode [ 1307.869649][T18141] bond0 (unregistering): Released all slaves [ 1307.917406][T18141] bond1 (unregistering): Released all slaves [ 1307.954658][T18141] bond2 (unregistering): Released all slaves [ 1307.985847][T18141] bond3 (unregistering): Released all slaves [ 1308.079787][ T8776] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1308.166416][T18141] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 1308.249807][ T8776] usb 5-1: Using ep0 maxpacket: 32 [ 1308.262390][ T8776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1308.349534][ T8776] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1308.394094][ T8776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.403072][T18141] tipc: Left network mode [ 1308.436075][ T8776] usb 5-1: config 0 descriptor?? [ 1308.477112][T18141] IPVS: stopping master sync thread 13654 ... [ 1308.559170][ T8774] usb 7-1: new full-speed USB device number 72 using dummy_hcd [ 1308.791003][ T8774] usb 7-1: device descriptor read/64, error -71 [ 1308.837699][ T8776] usbhid 5-1:0.0: can't add hid device: -71 [ 1308.873788][ T8776] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1309.012293][ T8776] usb 5-1: USB disconnect, device number 97 [ 1309.066254][ T8774] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1309.231940][ T8774] usb 7-1: device descriptor read/64, error -71 [ 1309.349532][ T8774] usb usb7-port1: attempt power cycle [ 1309.576106][T18141] hsr_slave_0: left promiscuous mode [ 1309.595878][T18141] hsr_slave_1: left promiscuous mode [ 1309.605323][T18141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.629625][T18141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1309.719117][ T8774] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 1309.799095][ T8774] usb 7-1: device descriptor read/8, error -71 [ 1309.839646][T18141] pim6reg (unregistering): left allmulticast mode [ 1309.935987][T18141] pimreg (unregistering): left allmulticast mode [ 1310.049878][ T8774] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1310.104894][ T8774] usb 7-1: device descriptor read/8, error -71 [ 1310.238561][ T8774] usb usb7-port1: unable to enumerate USB device [ 1310.282543][T18141] team0 (unregistering): Port device batadv1 removed [ 1310.533922][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'. [ 1312.220617][T18141] team0 (unregistering): Port device team_slave_1 removed [ 1312.299496][ T8774] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1312.299700][T18141] team0 (unregistering): Port device team_slave_0 removed [ 1312.482711][ T8774] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1312.499691][ T8774] usb 7-1: not running at top speed; connect to a high speed hub [ 1312.509620][ T8774] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.534047][ T8774] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1312.556233][ T8774] usb 7-1: string descriptor 0 read error: -22 [ 1312.564487][ T8774] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1312.574965][ T8774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.604450][ T8774] usb 7-1: 0:2 : does not exist [ 1312.871937][T18141] team0 (unregistering): Port device dummy0 removed [ 1313.182864][T20064] bridge1: port 1(veth0_to_bond) entered blocking state [ 1313.191510][T20064] bridge1: port 1(veth0_to_bond) entered disabled state [ 1313.198806][T20064] veth0_to_bond: entered allmulticast mode [ 1313.207465][T20064] veth0_to_bond: entered promiscuous mode [ 1313.246461][T20077] tap0: tun_chr_ioctl cmd 1074025677 [ 1313.257114][T20077] tap0: linktype set to 778 [ 1313.534804][T20095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.567528][T20095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.726493][T20108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.774234][ T8774] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1313.793410][T20108] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1313.900279][ T8774] usb 7-1: Warning! Unlikely big volume range (=7680), cval->res is probably wrong. [ 1313.937459][T18141] IPVS: stop unused estimator thread 0... [ 1313.961996][ T8774] usb 7-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/7680/1 [ 1313.971425][T20116] fuse: Unknown parameter 'rootmodâ' [ 1314.016049][ T8774] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1314.016164][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1314.016186][ T30] audit: type=1326 audit(1759022350.834:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1314.067112][ T8774] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1314.354884][ T30] audit: type=1326 audit(1759022350.864:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1314.379863][T18171] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1314.430462][ T8774] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1314.468180][T20124] binder: 20123:20124 unknown command 0 [ 1314.474257][ T30] audit: type=1326 audit(1759022350.864:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1314.578527][T20124] binder: 20123:20124 ioctl c0306201 200000000080 returned -22 [ 1314.597643][T18171] usb 4-1: Using ep0 maxpacket: 32 [ 1314.611406][ T8774] usb 7-1: USB disconnect, device number 76 [ 1314.866741][T18171] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1314.880751][ T30] audit: type=1326 audit(1759022350.864:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1314.895686][T18171] usb 4-1: config 0 has no interface number 0 [ 1314.909945][T20124] binder: 20123:20124 ioctl c05064a7 200000000540 returned -22 [ 1314.910157][T20124] binder: 20123:20124 ioctl c01464a6 200000000300 returned -22 [ 1314.977155][T18171] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.978902][ T30] audit: type=1326 audit(1759022350.864:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1315.059398][T18171] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1315.145609][T20127] fuse: blksize only supported for fuseblk [ 1315.216201][T18171] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1315.239162][ T30] audit: type=1326 audit(1759022350.864:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1315.314660][T18171] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1315.354733][ T30] audit: type=1326 audit(1759022350.864:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1315.425018][ T30] audit: type=1326 audit(1759022350.864:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1315.432931][T18171] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1315.642725][T18171] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1315.712642][T20142] tap0: tun_chr_ioctl cmd 1074025677 [ 1315.736638][T20142] tap0: linktype set to 778 [ 1315.791548][T18171] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1315.802784][T20134] ptrace attach of "./syz-executor exec"[15845] was attempted by "./syz-executor exec"[20134] [ 1315.813543][ T30] audit: type=1326 audit(1759022350.864:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1315.868492][T18171] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1315.947147][T18171] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1315.966635][ T30] audit: type=1326 audit(1759022350.864:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20118 comm="syz.6.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355118eec9 code=0x7ffc0000 [ 1316.007878][T18171] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1316.106526][T18171] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1316.131994][T18171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.183015][T18171] usb 4-1: Product: syz [ 1316.205088][T18171] usb 4-1: Manufacturer: syz [ 1316.219018][T18171] usb 4-1: SerialNumber: syz [ 1316.295393][T18171] usb 4-1: config 0 descriptor?? [ 1316.319949][T20116] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1316.356685][T20116] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1316.386074][T18171] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1316.439264][T18171] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1316.537790][T18171] scsi host1: microtekX6 [ 1316.665354][T18171] usb 4-1: USB disconnect, device number 99 [ 1316.679261][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1316.720032][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1317.049636][ T5989] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1317.239201][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 1317.252810][ T5989] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1317.262615][ T5989] usb 5-1: config 0 has no interface number 0 [ 1317.304224][ T5989] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1317.340240][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.413584][ T5989] usb 5-1: Product: syz [ 1317.426160][ T5989] usb 5-1: Manufacturer: syz [ 1317.438794][ T5989] usb 5-1: SerialNumber: syz [ 1317.473342][ T5989] usb 5-1: config 0 descriptor?? [ 1317.497114][ T5989] smsc95xx v2.0.0 [ 1317.509197][ T8776] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1317.679485][ T8776] usb 7-1: Using ep0 maxpacket: 16 [ 1317.711272][ T8776] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1317.812418][ T8776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.859645][T17534] Bluetooth: hci1: command 0x0406 tx timeout [ 1317.887533][ T8776] usb 7-1: Product: syz [ 1317.927350][ T8776] usb 7-1: Manufacturer: syz [ 1317.948693][ T8776] usb 7-1: SerialNumber: syz [ 1318.077346][ T8776] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1318.108751][ T8776] r8152-cfgselector 7-1: config 0 descriptor?? [ 1318.549551][ T5989] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1318.573887][ T5989] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1318.576872][ T10] r8152-cfgselector 7-1: USB disconnect, device number 77 [ 1318.607697][ T5989] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1318.664856][ T5989] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1318.692658][ T5989] usb 5-1: USB disconnect, device number 98 [ 1319.521338][T20180] binder: 20177:20180 unknown command 0 [ 1319.586247][T20180] binder: 20177:20180 ioctl c0306201 200000000080 returned -22 [ 1319.628130][T20182] tap0: tun_chr_ioctl cmd 1074025677 [ 1319.689481][T20182] tap0: linktype set to 778 [ 1319.903816][T17203] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 1320.107711][T20193] batman_adv: batadv0: Adding interface: macvtap1 [ 1320.125750][T17203] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1320.270875][T20193] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.394075][T20193] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1320.405027][T17203] usb 7-1: config 0 has no interface number 0 [ 1320.476908][T17203] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1320.519510][T17203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.624060][T17203] usb 7-1: Product: syz [ 1320.982831][T17203] usb 7-1: Manufacturer: syz [ 1320.992962][T17203] usb 7-1: SerialNumber: syz [ 1321.180439][T17203] usb 7-1: config 0 descriptor?? [ 1321.219142][ T8774] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1321.232267][T17203] usb-storage 7-1:0.20: USB Mass Storage device detected [ 1321.284159][T17203] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1321.429822][ T8774] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1321.439161][ T8774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.450327][ T8774] usb 4-1: config 0 descriptor?? [ 1321.546648][T20210] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 1321.797019][T20210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3460'. [ 1321.871405][T17203] usb 7-1: USB disconnect, device number 78 [ 1322.820802][ T8774] hackrf 4-1:0.0: usb_control_msg() failed -110 request 0f [ 1322.837062][ T8774] hackrf 4-1:0.0: Could not detect board [ 1322.917369][ T8774] hackrf 4-1:0.0: probe with driver hackrf failed with error -110 [ 1323.211762][ T958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.245065][T20234] tap0: tun_chr_ioctl cmd 1074025677 [ 1323.251359][T20234] tap0: linktype set to 778 [ 1323.259945][ T10] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1323.481368][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1323.490853][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1323.500391][ T10] usb 7-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1323.567784][ T10] usb 7-1: config 1 interface 0 has no altsetting 1 [ 1323.592182][T15278] usb 4-1: USB disconnect, device number 100 [ 1323.668732][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1323.705534][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.717482][ T10] usb 7-1: Product: syz [ 1323.723965][ T10] usb 7-1: Manufacturer: syz [ 1323.728774][ T10] usb 7-1: SerialNumber: syz [ 1323.735714][T20242] PKCS7: Unknown OID: [5] (bad) [ 1323.742390][T20242] PKCS7: Only support pkcs7_signedData type [ 1323.960437][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 1324.330032][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.579472][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 1324.809436][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.810289][ T10] usb 7-1: USB disconnect, device number 79 [ 1325.369693][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.578288][T15278] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1325.641725][T20266] [ 1325.644114][T20266] ===================================================== [ 1325.651131][T20266] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1325.658616][T20266] syzkaller #0 Not tainted [ 1325.663086][T20266] ----------------------------------------------------- [ 1325.670014][T20266] syz.6.3474/20266 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1325.677739][T20266] ffff8880578bed38 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1325.686457][T20266] [ 1325.686457][T20266] and this task is already holding: [ 1325.693830][T20266] ffff88807c30c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1325.703642][T20266] which would create a new lock dependency: [ 1325.709530][T20266] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 1325.717638][T20266] [ 1325.717638][T20266] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1325.727168][T20266] (&dev->event_lock#2){..-.}-{3:3} [ 1325.727207][T20266] [ 1325.727207][T20266] ... which became SOFTIRQ-irq-safe at: [ 1325.740170][T20266] lock_acquire+0x120/0x360 [ 1325.744783][T20266] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1325.750095][T20266] input_event+0x76/0xe0 [ 1325.754465][T20266] xpad360_process_packet+0xda/0xdd0 [ 1325.759871][T20266] xpad_irq_in+0x14e/0x2590 [ 1325.764483][T20266] __usb_hcd_giveback_urb+0x376/0x540 [ 1325.769965][T20266] dummy_timer+0x862/0x4550 [ 1325.774558][T20266] __hrtimer_run_queues+0x52c/0xc60 [ 1325.779968][T20266] hrtimer_run_softirq+0x187/0x2b0 [ 1325.785296][T20266] handle_softirqs+0x286/0x870 [ 1325.790165][T20266] __irq_exit_rcu+0xca/0x1f0 [ 1325.794854][T20266] irq_exit_rcu+0x9/0x30 [ 1325.799205][T20266] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1325.805101][T20266] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1325.811174][T20266] rcu_is_watching+0x2e/0xb0 [ 1325.815855][T20266] lock_acquire+0x5f/0x360 [ 1325.820378][T20266] batadv_nc_worker+0xef/0x610 [ 1325.825264][T20266] process_scheduled_works+0xade/0x17b0 [ 1325.830907][T20266] worker_thread+0x8a0/0xda0 [ 1325.835602][T20266] kthread+0x711/0x8a0 [ 1325.839771][T20266] ret_from_fork+0x439/0x7d0 [ 1325.844446][T20266] ret_from_fork_asm+0x1a/0x30 [ 1325.849563][T20266] [ 1325.849563][T20266] to a SOFTIRQ-irq-unsafe lock: [ 1325.856577][T20266] (tasklist_lock){.+.+}-{3:3} [ 1325.856604][T20266] [ 1325.856604][T20266] ... which became SOFTIRQ-irq-unsafe at: [ 1325.869229][T20266] ... [ 1325.869239][T20266] lock_acquire+0x120/0x360 [ 1325.876456][T20266] _raw_read_lock+0x36/0x50 [ 1325.881057][T20266] __do_wait+0xde/0x740 [ 1325.885354][T20266] do_wait+0x1f8/0x520 [ 1325.889546][T20266] kernel_wait+0xab/0x170 [ 1325.893976][T20266] call_usermodehelper_exec_work+0xbe/0x230 [ 1325.899972][T20266] process_scheduled_works+0xade/0x17b0 [ 1325.905616][T20266] worker_thread+0x8a0/0xda0 [ 1325.910301][T20266] kthread+0x711/0x8a0 [ 1325.914568][T20266] ret_from_fork+0x439/0x7d0 [ 1325.919257][T20266] ret_from_fork_asm+0x1a/0x30 [ 1325.924124][T20266] [ 1325.924124][T20266] other info that might help us debug this: [ 1325.924124][T20266] [ 1325.934459][T20266] Chain exists of: [ 1325.934459][T20266] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1325.934459][T20266] [ 1325.948056][T20266] Possible interrupt unsafe locking scenario: [ 1325.948056][T20266] [ 1325.956495][T20266] CPU0 CPU1 [ 1325.961883][T20266] ---- ---- [ 1325.967262][T20266] lock(tasklist_lock); [ 1325.971662][T20266] local_irq_disable(); [ 1325.978515][T20266] lock(&dev->event_lock#2); [ 1325.985742][T20266] lock(&client->buffer_lock); [ 1325.993120][T20266] [ 1325.996583][T20266] lock(&dev->event_lock#2); [ 1326.001447][T20266] [ 1326.001447][T20266] *** DEADLOCK *** [ 1326.001447][T20266] [ 1326.010031][T20266] 7 locks held by syz.6.3474/20266: [ 1326.015275][T20266] #0: ffff8880292d2118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1326.024534][T20266] #1: ffff888020f40230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1326.035704][T20266] #2: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1326.045390][T20266] #3: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1326.054976][T20266] #4: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1326.064125][T20266] #5: ffff88807c30c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1326.074319][T20266] #6: ffffffff8e13a120 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1326.083395][T20266] [ 1326.083395][T20266] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1326.093886][T20266] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1326.099548][T20266] IN-SOFTIRQ-W at: [ 1326.103635][T20266] lock_acquire+0x120/0x360 [ 1326.109981][T20266] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1326.117030][T20266] input_event+0x76/0xe0 [ 1326.123100][T20266] xpad360_process_packet+0xda/0xdd0 [ 1326.130479][T20266] xpad_irq_in+0x14e/0x2590 [ 1326.136811][T20266] __usb_hcd_giveback_urb+0x376/0x540 [ 1326.144020][T20266] dummy_timer+0x862/0x4550 [ 1326.150351][T20266] __hrtimer_run_queues+0x52c/0xc60 [ 1326.157736][T20266] hrtimer_run_softirq+0x187/0x2b0 [ 1326.164674][T20266] handle_softirqs+0x286/0x870 [ 1326.171285][T20266] __irq_exit_rcu+0xca/0x1f0 [ 1326.177704][T20266] irq_exit_rcu+0x9/0x30 [ 1326.183774][T20266] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1326.191256][T20266] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1326.199070][T20266] rcu_is_watching+0x2e/0xb0 [ 1326.205497][T20266] lock_acquire+0x5f/0x360 [ 1326.211773][T20266] batadv_nc_worker+0xef/0x610 [ 1326.218373][T20266] process_scheduled_works+0xade/0x17b0 [ 1326.225935][T20266] worker_thread+0x8a0/0xda0 [ 1326.232356][T20266] kthread+0x711/0x8a0 [ 1326.238439][T20266] ret_from_fork+0x439/0x7d0 [ 1326.244871][T20266] ret_from_fork_asm+0x1a/0x30 [ 1326.251671][T20266] INITIAL USE at: [ 1326.255661][T20266] lock_acquire+0x120/0x360 [ 1326.261926][T20266] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1326.268881][T20266] input_inject_event+0xa5/0x340 [ 1326.275576][T20266] kbd_led_trigger_activate+0xbc/0x100 [ 1326.282811][T20266] led_trigger_set+0x52a/0x950 [ 1326.289324][T20266] led_trigger_set_default+0x260/0x2a0 [ 1326.296551][T20266] led_classdev_register_ext+0x73d/0x930 [ 1326.304042][T20266] input_leds_connect+0x517/0x790 [ 1326.310824][T20266] input_register_device+0xcfd/0x1140 [ 1326.317973][T20266] atkbd_connect+0x72e/0xa00 [ 1326.324322][T20266] serio_driver_probe+0x82/0xd0 [ 1326.331266][T20266] really_probe+0x26d/0x9e0 [ 1326.337567][T20266] __driver_probe_device+0x18c/0x2f0 [ 1326.344957][T20266] driver_probe_device+0x4f/0x430 [ 1326.351819][T20266] __driver_attach+0x452/0x700 [ 1326.358420][T20266] bus_for_each_dev+0x233/0x2b0 [ 1326.365011][T20266] serio_handle_event+0x1f9/0x8d0 [ 1326.371936][T20266] process_scheduled_works+0xade/0x17b0 [ 1326.379238][T20266] worker_thread+0x8a0/0xda0 [ 1326.385954][T20266] kthread+0x711/0x8a0 [ 1326.391905][T20266] ret_from_fork+0x439/0x7d0 [ 1326.398243][T20266] ret_from_fork_asm+0x1a/0x30 [ 1326.404971][T20266] } [ 1326.407733][T20266] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1326.416854][T20266] -> (&client->buffer_lock){....}-{3:3} { [ 1326.422795][T20266] INITIAL USE at: [ 1326.426894][T20266] lock_acquire+0x120/0x360 [ 1326.432980][T20266] _raw_spin_lock+0x2e/0x40 [ 1326.439243][T20266] evdev_pass_values+0xb9/0xbd0 [ 1326.445727][T20266] evdev_events+0x1e6/0x340 [ 1326.451808][T20266] input_pass_values+0x288/0x890 [ 1326.458323][T20266] input_event_dispose+0x330/0x6b0 [ 1326.465034][T20266] input_inject_event+0x1dd/0x340 [ 1326.471641][T20266] evdev_write+0x2fc/0x480 [ 1326.477825][T20266] vfs_write+0x27b/0xb30 [ 1326.484051][T20266] ksys_write+0x145/0x250 [ 1326.489962][T20266] do_syscall_64+0xfa/0x3b0 [ 1326.496306][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.503774][T20266] } [ 1326.506288][T20266] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1326.514465][T20266] ... acquired at: [ 1326.518287][T20266] lock_acquire+0x120/0x360 [ 1326.523009][T20266] _raw_spin_lock+0x2e/0x40 [ 1326.527727][T20266] evdev_pass_values+0xb9/0xbd0 [ 1326.532775][T20266] evdev_events+0x1e6/0x340 [ 1326.537458][T20266] input_pass_values+0x288/0x890 [ 1326.542579][T20266] input_event_dispose+0x330/0x6b0 [ 1326.547874][T20266] input_inject_event+0x1dd/0x340 [ 1326.553081][T20266] evdev_write+0x2fc/0x480 [ 1326.557693][T20266] vfs_write+0x27b/0xb30 [ 1326.562259][T20266] ksys_write+0x145/0x250 [ 1326.566777][T20266] do_syscall_64+0xfa/0x3b0 [ 1326.571539][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.577813][T20266] [ 1326.580163][T20266] [ 1326.580163][T20266] the dependencies between the lock to be acquired [ 1326.580173][T20266] and SOFTIRQ-irq-unsafe lock: [ 1326.593722][T20266] -> (tasklist_lock){.+.+}-{3:3} { [ 1326.599038][T20266] HARDIRQ-ON-R at: [ 1326.603211][T20266] lock_acquire+0x120/0x360 [ 1326.609755][T20266] _raw_read_lock+0x36/0x50 [ 1326.616281][T20266] __do_wait+0xde/0x740 [ 1326.622545][T20266] do_wait+0x1f8/0x520 [ 1326.628657][T20266] kernel_wait+0xab/0x170 [ 1326.635025][T20266] call_usermodehelper_exec_work+0xbe/0x230 [ 1326.643197][T20266] process_scheduled_works+0xade/0x17b0 [ 1326.650777][T20266] worker_thread+0x8a0/0xda0 [ 1326.657403][T20266] kthread+0x711/0x8a0 [ 1326.663569][T20266] ret_from_fork+0x439/0x7d0 [ 1326.670207][T20266] ret_from_fork_asm+0x1a/0x30 [ 1326.677073][T20266] SOFTIRQ-ON-R at: [ 1326.681237][T20266] lock_acquire+0x120/0x360 [ 1326.687755][T20266] _raw_read_lock+0x36/0x50 [ 1326.694351][T20266] __do_wait+0xde/0x740 [ 1326.700529][T20266] do_wait+0x1f8/0x520 [ 1326.706607][T20266] kernel_wait+0xab/0x170 [ 1326.713235][T20266] call_usermodehelper_exec_work+0xbe/0x230 [ 1326.721155][T20266] process_scheduled_works+0xade/0x17b0 [ 1326.728801][T20266] worker_thread+0x8a0/0xda0 [ 1326.735399][T20266] kthread+0x711/0x8a0 [ 1326.741488][T20266] ret_from_fork+0x439/0x7d0 [ 1326.748125][T20266] ret_from_fork_asm+0x1a/0x30 [ 1326.754930][T20266] INITIAL USE at: [ 1326.759008][T20266] lock_acquire+0x120/0x360 [ 1326.765448][T20266] _raw_write_lock_irq+0xa2/0xf0 [ 1326.772317][T20266] copy_process+0x224f/0x3c00 [ 1326.778916][T20266] kernel_clone+0x21e/0x840 [ 1326.785368][T20266] user_mode_thread+0xdd/0x140 [ 1326.792058][T20266] rest_init+0x23/0x300 [ 1326.798160][T20266] start_kernel+0x3a9/0x410 [ 1326.804666][T20266] x86_64_start_reservations+0x24/0x30 [ 1326.812049][T20266] x86_64_start_kernel+0x143/0x1c0 [ 1326.819085][T20266] common_startup_64+0x13e/0x147 [ 1326.825947][T20266] INITIAL READ USE at: [ 1326.830477][T20266] lock_acquire+0x120/0x360 [ 1326.837352][T20266] _raw_read_lock+0x36/0x50 [ 1326.844211][T20266] __do_wait+0xde/0x740 [ 1326.850860][T20266] do_wait+0x1f8/0x520 [ 1326.857309][T20266] kernel_wait+0xab/0x170 [ 1326.864022][T20266] call_usermodehelper_exec_work+0xbe/0x230 [ 1326.872290][T20266] process_scheduled_works+0xade/0x17b0 [ 1326.880203][T20266] worker_thread+0x8a0/0xda0 [ 1326.887145][T20266] kthread+0x711/0x8a0 [ 1326.893568][T20266] ret_from_fork+0x439/0x7d0 [ 1326.900519][T20266] ret_from_fork_asm+0x1a/0x30 [ 1326.907642][T20266] } [ 1326.910314][T20266] ... key at: [] tasklist_lock+0x18/0x40 [ 1326.918219][T20266] ... acquired at: [ 1326.922214][T20266] lock_acquire+0x120/0x360 [ 1326.926904][T20266] _raw_read_lock+0x36/0x50 [ 1326.931588][T20266] send_sigurg+0x12b/0x420 [ 1326.936208][T20266] sk_send_sigurg+0x6c/0x2e0 [ 1326.941000][T20266] queue_oob+0x420/0x4f0 [ 1326.945433][T20266] unix_stream_sendmsg+0xc3f/0xdf0 [ 1326.950752][T20266] __sock_sendmsg+0x219/0x270 [ 1326.955632][T20266] ____sys_sendmsg+0x505/0x830 [ 1326.960601][T20266] ___sys_sendmsg+0x21f/0x2a0 [ 1326.965549][T20266] __x64_sys_sendmsg+0x19b/0x260 [ 1326.970682][T20266] do_syscall_64+0xfa/0x3b0 [ 1326.975398][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.981470][T20266] [ 1326.983808][T20266] -> (&f_owner->lock){....}-{3:3} { [ 1326.989119][T20266] INITIAL USE at: [ 1326.993122][T20266] lock_acquire+0x120/0x360 [ 1326.999552][T20266] _raw_write_lock_irq+0xa2/0xf0 [ 1327.006242][T20266] __f_setown+0x67/0x370 [ 1327.012242][T20266] do_fcntl+0x15ff/0x1910 [ 1327.018318][T20266] __se_sys_fcntl+0xc8/0x150 [ 1327.024655][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.030913][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.038568][T20266] INITIAL READ USE at: [ 1327.042987][T20266] lock_acquire+0x120/0x360 [ 1327.049676][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.057136][T20266] send_sigurg+0x55/0x420 [ 1327.063642][T20266] sk_send_sigurg+0x6c/0x2e0 [ 1327.070422][T20266] queue_oob+0x420/0x4f0 [ 1327.076947][T20266] unix_stream_sendmsg+0xc3f/0xdf0 [ 1327.084289][T20266] __sock_sendmsg+0x219/0x270 [ 1327.091202][T20266] ____sys_sendmsg+0x505/0x830 [ 1327.098167][T20266] ___sys_sendmsg+0x21f/0x2a0 [ 1327.105022][T20266] __x64_sys_sendmsg+0x19b/0x260 [ 1327.112179][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.118863][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.126934][T20266] } [ 1327.129545][T20266] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1327.138585][T20266] ... acquired at: [ 1327.142477][T20266] lock_acquire+0x120/0x360 [ 1327.147161][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.152629][T20266] send_sigio+0x38/0x370 [ 1327.157063][T20266] kill_fasync+0x24d/0x4d0 [ 1327.161653][T20266] lease_break_callback+0x26/0x30 [ 1327.166868][T20266] __break_lease+0x6a2/0x1620 [ 1327.171727][T20266] vfs_truncate+0x428/0x520 [ 1327.176408][T20266] do_sys_truncate+0xdb/0x190 [ 1327.181263][T20266] __x64_sys_truncate+0x5b/0x70 [ 1327.186295][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.190978][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.197043][T20266] [ 1327.199363][T20266] -> (&new->fa_lock){...-}-{3:3} { [ 1327.204495][T20266] IN-SOFTIRQ-R at: [ 1327.208474][T20266] lock_acquire+0x120/0x360 [ 1327.214639][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.221860][T20266] kill_fasync+0x199/0x4d0 [ 1327.227946][T20266] sock_wake_async+0x137/0x160 [ 1327.234361][T20266] sock_def_readable+0x3bb/0x550 [ 1327.241219][T20266] __sock_queue_rcv_skb+0x6a2/0x9c0 [ 1327.248162][T20266] sock_queue_rcv_skb_reason+0xc0/0x190 [ 1327.255450][T20266] raw_rcv+0x74b/0x9d0 [ 1327.261194][T20266] raw_local_deliver+0x9ee/0xe90 [ 1327.267873][T20266] ip_protocol_deliver_rcu+0x46/0x440 [ 1327.274910][T20266] ip_local_deliver_finish+0x3bb/0x6f0 [ 1327.282050][T20266] NF_HOOK+0x309/0x3a0 [ 1327.287787][T20266] NF_HOOK+0x309/0x3a0 [ 1327.293526][T20266] __netif_receive_skb+0x143/0x380 [ 1327.300302][T20266] process_backlog+0x60e/0x14f0 [ 1327.306814][T20266] __napi_poll+0xc7/0x360 [ 1327.312791][T20266] net_rx_action+0x707/0xe30 [ 1327.319039][T20266] handle_softirqs+0x286/0x870 [ 1327.325457][T20266] do_softirq+0xec/0x180 [ 1327.331356][T20266] __local_bh_enable_ip+0x17d/0x1c0 [ 1327.338307][T20266] __dev_queue_xmit+0x1d79/0x3b50 [ 1327.345009][T20266] ip_finish_output2+0xd03/0x1160 [ 1327.351710][T20266] ip_output+0x2a1/0x3c0 [ 1327.357613][T20266] ip_push_pending_frames+0xbe/0x150 [ 1327.364555][T20266] raw_sendmsg+0x1440/0x18b0 [ 1327.370803][T20266] __sock_sendmsg+0x19c/0x270 [ 1327.377173][T20266] __sys_sendto+0x3bd/0x520 [ 1327.383357][T20266] __x64_sys_sendto+0xde/0x100 [ 1327.389957][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.396145][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.403699][T20266] INITIAL USE at: [ 1327.407625][T20266] lock_acquire+0x120/0x360 [ 1327.413981][T20266] _raw_write_lock_irq+0xa2/0xf0 [ 1327.420510][T20266] fasync_remove_entry+0xf1/0x1c0 [ 1327.427106][T20266] lease_modify+0x1ca/0x3c0 [ 1327.433203][T20266] locks_remove_file+0x4bf/0xea0 [ 1327.439732][T20266] __fput+0x3ab/0xa70 [ 1327.445303][T20266] fput_close_sync+0x119/0x200 [ 1327.451636][T20266] __x64_sys_close+0x7f/0x110 [ 1327.457901][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.464059][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.471528][T20266] INITIAL READ USE at: [ 1327.475944][T20266] lock_acquire+0x120/0x360 [ 1327.482623][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.489920][T20266] kill_fasync+0x199/0x4d0 [ 1327.496347][T20266] lease_break_callback+0x26/0x30 [ 1327.503472][T20266] __break_lease+0x6a2/0x1620 [ 1327.510175][T20266] vfs_truncate+0x428/0x520 [ 1327.516789][T20266] do_sys_truncate+0xdb/0x190 [ 1327.523486][T20266] __x64_sys_truncate+0x5b/0x70 [ 1327.530362][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.536973][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.544884][T20266] } [ 1327.547415][T20266] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1327.556147][T20266] ... acquired at: [ 1327.559977][T20266] lock_acquire+0x120/0x360 [ 1327.564670][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.570139][T20266] kill_fasync+0x199/0x4d0 [ 1327.574755][T20266] evdev_pass_values+0x627/0xbd0 [ 1327.579957][T20266] evdev_events+0x1e6/0x340 [ 1327.584643][T20266] input_pass_values+0x288/0x890 [ 1327.589756][T20266] input_event_dispose+0x330/0x6b0 [ 1327.595096][T20266] input_inject_event+0x1dd/0x340 [ 1327.600309][T20266] evdev_write+0x2fc/0x480 [ 1327.605001][T20266] vfs_write+0x27b/0xb30 [ 1327.609435][T20266] ksys_write+0x145/0x250 [ 1327.613949][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.618719][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.624791][T20266] [ 1327.627129][T20266] [ 1327.627129][T20266] stack backtrace: [ 1327.633020][T20266] CPU: 1 UID: 0 PID: 20266 Comm: syz.6.3474 Not tainted syzkaller #0 PREEMPT(full) [ 1327.633040][T20266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1327.633051][T20266] Call Trace: [ 1327.633058][T20266] [ 1327.633065][T20266] dump_stack_lvl+0x189/0x250 [ 1327.633089][T20266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1327.633108][T20266] ? __pfx__printk+0x10/0x10 [ 1327.633134][T20266] validate_chain+0x1f05/0x2140 [ 1327.633160][T20266] __lock_acquire+0xab9/0xd20 [ 1327.633186][T20266] ? kill_fasync+0x199/0x4d0 [ 1327.633204][T20266] lock_acquire+0x120/0x360 [ 1327.633231][T20266] ? kill_fasync+0x199/0x4d0 [ 1327.633253][T20266] _raw_read_lock_irqsave+0xaf/0x100 [ 1327.633270][T20266] ? kill_fasync+0x199/0x4d0 [ 1327.633287][T20266] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1327.633301][T20266] ? do_raw_spin_lock+0x121/0x290 [ 1327.633324][T20266] kill_fasync+0x199/0x4d0 [ 1327.633342][T20266] ? kill_fasync+0x53/0x4d0 [ 1327.633360][T20266] evdev_pass_values+0x627/0xbd0 [ 1327.633380][T20266] ? evdev_pass_values+0x601/0xbd0 [ 1327.633399][T20266] evdev_events+0x1e6/0x340 [ 1327.633414][T20266] ? evdev_events+0x79/0x340 [ 1327.633430][T20266] ? input_pass_values+0x8d/0x890 [ 1327.633444][T20266] input_pass_values+0x288/0x890 [ 1327.633466][T20266] ? input_handle_event+0x70c/0xf30 [ 1327.633488][T20266] input_event_dispose+0x330/0x6b0 [ 1327.633512][T20266] input_inject_event+0x1dd/0x340 [ 1327.633535][T20266] ? input_inject_event+0xb6/0x340 [ 1327.633558][T20266] evdev_write+0x2fc/0x480 [ 1327.633574][T20266] ? futex_private_hash_put+0x245/0x280 [ 1327.633594][T20266] ? __pfx_evdev_write+0x10/0x10 [ 1327.633611][T20266] ? bpf_lsm_file_permission+0x9/0x20 [ 1327.633630][T20266] ? security_file_permission+0x75/0x290 [ 1327.633653][T20266] ? rw_verify_area+0x255/0x4d0 [ 1327.633673][T20266] ? __lock_acquire+0xab9/0xd20 [ 1327.633696][T20266] ? __pfx_evdev_write+0x10/0x10 [ 1327.633713][T20266] vfs_write+0x27b/0xb30 [ 1327.633736][T20266] ? __pfx_vfs_write+0x10/0x10 [ 1327.633758][T20266] ? __fget_files+0x2a/0x420 [ 1327.633772][T20266] ? __fget_files+0x2a/0x420 [ 1327.633785][T20266] ? __fget_files+0x3a0/0x420 [ 1327.633799][T20266] ? __fget_files+0x2a/0x420 [ 1327.633815][T20266] ksys_write+0x145/0x250 [ 1327.633837][T20266] ? __pfx_ksys_write+0x10/0x10 [ 1327.633856][T20266] ? rcu_is_watching+0x15/0xb0 [ 1327.633874][T20266] ? do_syscall_64+0xbe/0x3b0 [ 1327.633893][T20266] do_syscall_64+0xfa/0x3b0 [ 1327.633910][T20266] ? lockdep_hardirqs_on+0x9c/0x150 [ 1327.633927][T20266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.633943][T20266] ? clear_bhb_loop+0x60/0xb0 [ 1327.633961][T20266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.633976][T20266] RIP: 0033:0x7f355118eec9 [ 1327.633991][T20266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.634006][T20266] RSP: 002b:00007f35520de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1327.634022][T20266] RAX: ffffffffffffffda RBX: 00007f35513e6090 RCX: 00007f355118eec9 [ 1327.634035][T20266] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 000000000000000b [ 1327.634046][T20266] RBP: 00007f3551211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1327.634056][T20266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1327.634065][T20266] R13: 00007f35513e6128 R14: 00007f35513e6090 R15: 00007f355150fa28 [ 1327.634083][T20266] [ 1327.967630][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.975801][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.993751][T20265] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 1328.015877][T20265] batman_adv: batadv0: Adding interface: netdevsim0 [ 1328.022737][T20265] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.049613][T20265] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1328.080674][T15278] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 1328.089598][T15278] usb 4-1: config 0 has no interface number 0 [ 1328.095900][T15278] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1328.105494][T15278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.115071][T15278] usb 4-1: config 0 descriptor?? [ 1328.333891][ T958] usb 4-1: USB disconnect, device number 101 [ 1328.981878][ T958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1330.009476][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.049359][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.061476][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.140647][ T8776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.149309][T15278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.157499][T15278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.167748][ T8776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.089836][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.129550][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.169558][ T958] net_ratelimit: 3 callbacks suppressed [ 1334.169578][ T958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.184258][T15278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.209448][T17203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog