last executing test programs: 31m34.101521744s ago: executing program 4 (id=958): add_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) socket(0x1d, 0x4743fa3f3126ad43, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc1205531, &(0x7f00000010c0)=""/4101) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x26) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0xffffffffffffffff}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r5 = getpid() sched_getattr(r5, &(0x7f0000000300)={0x38}, 0x38, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x2, 0x2, 0xffffffff}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) 31m33.12229429s ago: executing program 4 (id=961): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) fanotify_init(0xa00, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r4, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0x7, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000}) write$sysctl(0xffffffffffffffff, &(0x7f0000000300)='0\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x4001) ioprio_set$pid(0x2, 0x0, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r6, r6, 0x0, 0x4800000009) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = socket(0xa, 0x80000, 0x1) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="180000005200050000000a00000004000180"], 0x18}}, 0x0) 31m30.188460747s ago: executing program 4 (id=966): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500030000000c00"], 0x38}}, 0x10) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02"], 0x33fe0}}, 0x40010) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f636b206e6f6e916500"], 0xa) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 31m26.727702112s ago: executing program 4 (id=970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff020000bfa3000000000000070300c0f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc328000051000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) dup2(r5, r3) 31m21.407959239s ago: executing program 4 (id=977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) r5 = syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) preadv2(r3, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/186, 0xba}], 0x2, 0xffffffff, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8000194) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000001c0)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r6, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socket$inet6_sctp(0xa, 0x5, 0x84) 31m21.087448379s ago: executing program 4 (id=978): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x301000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0xab42) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x0, 0x28, 0x0}) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042740c00018006000600800a000010000280070014bebd30725979f32d531762376780080017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31m20.331340406s ago: executing program 32 (id=978): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x301000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0xab42) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000280)={0x0, 0x28, 0x0}) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042740c00018006000600800a000010000280070014bebd30725979f32d531762376780080017"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m3.042046155s ago: executing program 1 (id=4249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r3, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r3}}, 0x18) 2m2.745505652s ago: executing program 1 (id=4250): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 2m2.481127262s ago: executing program 1 (id=4252): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 2m2.019612089s ago: executing program 1 (id=4255): syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m1.632798912s ago: executing program 1 (id=4257): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2m0.563636218s ago: executing program 1 (id=4259): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r10, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 1m59.765138127s ago: executing program 33 (id=4259): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x20, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1}], "b9365394fc379af00659ab39e65121dd3e8c7219b1f783b2"}}}}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=0x0], 0x2c2) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r8 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r8, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x44080}, 0x20044084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r10, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x36}, './file0\x00'}) 10.820421569s ago: executing program 2 (id=4589): ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000bc0)=0x80000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 10.660348402s ago: executing program 5 (id=4591): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 10.467577796s ago: executing program 2 (id=4592): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 10.183223247s ago: executing program 3 (id=4595): pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310009000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$inet6(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0x3, 0x200, 0xe042c7f9, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) write$UHID_INPUT(r7, &(0x7f0000002f80)={0xc, {"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", 0x1000}}, 0x1006) 8.076468731s ago: executing program 3 (id=4597): syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0x4004480d, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) socket$nl_generic(0x10, 0x3, 0x10) 7.360364001s ago: executing program 2 (id=4599): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40200, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x800, 0x5, 0x255}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.911869775s ago: executing program 5 (id=4600): bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = dup(r2) fanotify_mark(r1, 0x1, 0x48001059, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.635695155s ago: executing program 3 (id=4602): userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 6.629445679s ago: executing program 0 (id=4603): socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.231580779s ago: executing program 6 (id=4605): socket(0x40000000015, 0x5, 0x0) socket(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0xbe, 0x0, 0x5748}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=r3, @ANYBLOB], 0x58}}, 0x0) 5.924967101s ago: executing program 6 (id=4606): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000880)={0x2c2, 0x7d, 0x0, {{0x500, 0xfa, 0x0, 0x6a, {0x40}, 0x10000000, 0x2000000, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00'/31, 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xfb\xe1a\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x5e, '\xf8\xf6~\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf1\x99V\x88\xda\xcel\xde{\xa4\xa4\x00\xb4\xb0\xb4\xdb\xe6Od\xb1\xd6?&ym\xcb\xecI\x86#\xd6\xa88\xc6\x9ai\xdf\xcc\x9c\xddY\x06\xf1t\xa6f\xa8R\x9aEw4\a\xdb\xda\xb2\x88[\xaf\x05\x00\x00\x00\x00\x00'}, 0x1b3, 'odev-n\xb1{#\x00\xf9\xda\xa1\xee#&n\xcf\x85\xfe\xa6^\xb2\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\xbd\x7f=\x7f)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x01\x00\x00\x00\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\xcf>\xe3\x88@\x02\xa9\x1cTR\x8b\x80z\x89\xca\x18M\x16d_\x06\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f)\x9f\x06\x1fu\xb7y|\xe1\xe4\x11\xea\x91\x8e\xbd\x88\x8c\x1e\x15k\x84V\x93\x1d.\xa7&\xba\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9G\x8f}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00\x00\x00\x00\x00\x00\x00ta\xb0\xcc\xaa\xa1\x93:\x0e\x8a\x82k\x14\xd4\xfc\xb2\x98\x9f\xfa\xaa\x1a\xcf\xfa\x80T\xe9U\x9d\xfa\xe4iz\xa0\v\x03\xb3\xd8\x0eU$\xf8I_\xee~\x8d\x88\xcbZ\x04\x03\x02\xac\xb0\xd1&\x0f%\x84\xdbH\xe8\xd9\x06N\x8c\xe1x\xce9n\x85\xb9~H\x86D@I\x81\x0f%\xf1\xce\xca\x97]\xebI\x1a\x12[\xf0\xd7/\x87\xcc\x10\xb0\x15N\b\x93m\xaa\xdd\x8b\x1e\x97'}}, 0x2c2) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004028}, 0x0) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) syz_clone(0x5014100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.851784038s ago: executing program 5 (id=4607): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) nanosleep(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.439629758s ago: executing program 2 (id=4608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x7, 0xfffffffffffffffc, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4.96955014s ago: executing program 3 (id=4609): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 4.914441587s ago: executing program 5 (id=4610): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.327508075s ago: executing program 0 (id=4611): r0 = syz_open_dev$sg(0x0, 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0x10001}}, 0xe8) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) 4.11555175s ago: executing program 2 (id=4612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 3.078428853s ago: executing program 5 (id=4613): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x38) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.753819916s ago: executing program 0 (id=4614): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffffd, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x468f, 0xc4bc, 0x2c, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x110003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000001080)=0xe0000000, 0xfffffffffffffcf4) 2.494654022s ago: executing program 6 (id=4615): unshare(0x24020400) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x1, 0x0, &(0x7f0000000000)=0xfffffffffffffed2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) syz_open_dev$usbfs(0x0, 0x60, 0x101400) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.287545701s ago: executing program 5 (id=4616): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.59620877s ago: executing program 6 (id=4617): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000400)={0x64, 0x3c, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x3f, 0x18, 0x0, 0x1, [@typed={0x8, 0x10a7, 0x0, 0x0, @u32}, @generic="7f95ef8e7b21620430343227c49290dc0a3ce7c8b8caecd18d384720b21db28301acbdb487dd5e03f9d8b6406a6de911d97c42"]}]}, 0x64}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.565627562s ago: executing program 3 (id=4618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000980)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r4}) 1.467559852s ago: executing program 0 (id=4619): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.207564156s ago: executing program 6 (id=4620): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0x1, 0xfffffffd, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffc, 0xd) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) timer_create(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r5, 0x80885659, 0x0) 508.909309ms ago: executing program 0 (id=4621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) unshare(0x4000400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 207.064136ms ago: executing program 2 (id=4622): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) r4 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r5) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 176.106501ms ago: executing program 6 (id=4623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000096f000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, 0xffffffffffffffff, 0x6a855000) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x8ec) syz_usb_disconnect(r2) readv(r3, &(0x7f00000003c0), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42c202, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 50.590284ms ago: executing program 0 (id=4624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x4f, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=4625): pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310009000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a000001"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$inet6(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000000c0)={0x3, 0x200, 0xe042c7f9, 0x54, 0x7, "0a571920a0055b6b960422e2b2d2771891fda2", 0x0, 0x6}) write$UHID_INPUT(r7, &(0x7f0000002f80)={0xc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): ng dummy_hcd [ 2307.515126][ T1219] usb 2-1: USB disconnect, device number 87 [ 2307.746226][ T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2307.767042][T18923] usb 3-1: USB disconnect, device number 68 [ 2307.812177][T25303] netlink: 'syz.0.3566': attribute type 10 has an invalid length. [ 2307.824928][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.879169][ T43] usb 6-1: config 0 descriptor?? [ 2307.891369][ T43] cp210x 6-1:0.0: cp210x converter detected [ 2308.582370][ T43] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 2308.592608][ T43] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2308.622801][ T43] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2308.669974][ T43] usb 6-1: USB disconnect, device number 56 [ 2308.734609][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2308.760032][T18923] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2308.769396][ T43] cp210x 6-1:0.0: device disconnected [ 2308.961637][T18923] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2308.973698][T18923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2309.175806][T18923] usb 3-1: config 0 descriptor?? [ 2309.196951][T18923] cp210x 3-1:0.0: cp210x converter detected [ 2309.860211][T18923] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2309.867977][T18923] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 2309.940070][T18923] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2310.465905][T18923] usb 3-1: USB disconnect, device number 69 [ 2310.487030][T18923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2310.496831][T18923] cp210x 3-1:0.0: device disconnected [ 2311.196090][T16711] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2311.959610][T16711] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 2312.123654][T25348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2312.210390][T16711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.267512][T16711] usb 3-1: Product: syz [ 2312.308635][T16711] usb 3-1: Manufacturer: syz [ 2312.328768][T16711] usb 3-1: SerialNumber: syz [ 2312.352737][T16711] usb 3-1: config 0 descriptor?? [ 2312.358313][T25351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3578'. [ 2312.387293][T16711] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 2312.797319][T16711] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50 [ 2313.018685][ T983] usb 3-1: USB disconnect, device number 70 [ 2313.446211][T25368] netlink: 'syz.0.3582': attribute type 10 has an invalid length. [ 2314.260307][ T983] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2314.440106][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 2314.457280][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.478339][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.529055][ T983] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 2314.570490][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.653676][ T983] usb 3-1: config 0 descriptor?? [ 2314.918335][ T983] usbhid 3-1:0.0: can't add hid device: -71 [ 2314.958368][ T983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2315.060595][ T983] usb 3-1: USB disconnect, device number 71 [ 2315.330338][T18923] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2315.430426][T25133] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2315.546302][T18923] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2315.595146][T18923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.606105][T18923] usb 6-1: Product: syz [ 2315.609998][ T983] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2315.615474][T18923] usb 6-1: Manufacturer: syz [ 2315.624571][T18923] usb 6-1: SerialNumber: syz [ 2315.631813][T18923] usb 6-1: config 0 descriptor?? [ 2315.668889][T25133] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2315.703774][T25133] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2315.732730][T25133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2315.780646][T25133] usb 4-1: SerialNumber: syz [ 2315.850846][ T43] usb 6-1: USB disconnect, device number 57 [ 2315.875547][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 2315.892804][ T983] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 2315.924924][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 256, setting to 64 [ 2315.979628][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2316.019057][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2316.049200][ T983] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2316.059392][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2316.083261][ T983] usb 3-1: SerialNumber: syz [ 2316.111118][ T983] usb 3-1: config 0 descriptor?? [ 2316.299801][ T983] hso 3-1:0.0: Can't find BULK IN endpoint [ 2316.555051][T25133] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 2316.570938][T25133] usb 4-1: USB disconnect, device number 88 [ 2316.677967][ T983] usb 3-1: USB disconnect, device number 72 [ 2317.741943][T25417] netlink: 'syz.1.3600': attribute type 10 has an invalid length. [ 2317.768357][ T43] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2317.787303][ T983] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2317.963408][ T43] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2318.007967][ T983] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2318.112563][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.127612][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.144928][ T43] usb 3-1: Product: syz [ 2318.158600][ T983] usb 4-1: Product: syz [ 2318.163375][ T43] usb 3-1: Manufacturer: syz [ 2318.174741][ T983] usb 4-1: Manufacturer: syz [ 2318.181773][ T43] usb 3-1: SerialNumber: syz [ 2318.190924][ T983] usb 4-1: SerialNumber: syz [ 2318.247106][ T43] usb 3-1: config 0 descriptor?? [ 2318.269105][ T983] usb 4-1: config 0 descriptor?? [ 2318.295270][ T43] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2318.574554][ T983] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2318.595657][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2318.611992][ T43] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2318.623757][ T43] usb 3-1: media controller created [ 2318.673313][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2318.703896][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2318.742115][ T983] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2318.781392][ T983] usb 4-1: media controller created [ 2318.842391][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2318.868220][ T43] DVB: Unable to find symbol mt352_attach() [ 2318.954495][ T43] DVB: Unable to find symbol nxt6000_attach() [ 2318.970639][ T983] DVB: Unable to find symbol mt352_attach() [ 2318.977955][ T43] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2319.063250][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51 [ 2319.153731][ T43] dvb-usb: schedule remote query interval to 1000 msecs. [ 2319.200158][ T43] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2319.220135][ T983] DVB: Unable to find symbol nxt6000_attach() [ 2319.277519][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 2319.290504][ T983] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2319.319087][ T43] dvb-usb: bulk message failed: -22 (7/0) [ 2319.343283][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 2319.390503][ T43] usb 3-1: USB disconnect, device number 73 [ 2319.460788][ T983] dvb-usb: schedule remote query interval to 1000 msecs. [ 2319.476858][ T983] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2319.875896][ T983] dvb-usb: bulk message failed: -22 (7/0) [ 2319.885890][ T983] dvb-usb: bulk message failed: -22 (7/0) [ 2319.970195][ T43] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2319.990590][ T983] usb 4-1: USB disconnect, device number 89 [ 2320.503622][ T983] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2320.979998][ T983] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2321.643970][ T983] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2321.653228][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.661642][ T983] usb 4-1: Product: syz [ 2321.665961][ T983] usb 4-1: Manufacturer: syz [ 2321.671185][ T983] usb 4-1: SerialNumber: syz [ 2321.731078][ T983] usb 4-1: config 0 descriptor?? [ 2322.075394][T25133] usb 4-1: USB disconnect, device number 90 [ 2322.989437][T25479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3620'. [ 2323.013186][T25479] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3620'. [ 2323.302197][T25485] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 2324.095956][T25133] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2324.266814][T25133] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2324.358266][T25133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.379988][T25133] usb 6-1: Product: syz [ 2324.390086][T25133] usb 6-1: Manufacturer: syz [ 2324.407097][T25133] usb 6-1: SerialNumber: syz [ 2324.434762][T25133] usb 6-1: config 0 descriptor?? [ 2324.661411][ T983] usb 6-1: USB disconnect, device number 58 [ 2324.683776][T24989] udevd[24989]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2324.709951][ T5958] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2324.887471][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2325.078020][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2325.122903][ T5958] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2325.292109][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.337881][ T5958] usb 3-1: config 0 descriptor?? [ 2328.925411][ T5941] usb 3-1: USB disconnect, device number 74 [ 2329.422352][ T983] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 2329.642247][ T983] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.730084][ T983] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2329.893062][ T983] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2329.928185][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.974035][ T983] usb 2-1: config 0 descriptor?? [ 2330.012466][ T983] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2330.025652][ T983] dvb-usb: bulk message failed: -22 (3/0) [ 2330.044959][ T983] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2330.056851][ T983] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2330.067666][ T983] usb 2-1: media controller created [ 2330.078562][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2330.113152][ T983] dvb-usb: bulk message failed: -22 (6/0) [ 2330.144250][ T983] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2330.198041][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 2330.272968][ T983] dvb-usb: schedule remote query interval to 150 msecs. [ 2330.307984][ T983] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2330.355377][ T983] usb 2-1: USB disconnect, device number 88 [ 2330.563411][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2331.016566][T25565] xt_bpf: check failed: parse error [ 2331.120378][T18923] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2331.398346][T18923] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2331.420043][T18923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.442482][T18923] usb 2-1: Product: syz [ 2331.520274][T18923] usb 2-1: Manufacturer: syz [ 2331.524937][T18923] usb 2-1: SerialNumber: syz [ 2331.693637][T18923] usb 2-1: config 0 descriptor?? [ 2332.584576][ T983] usb 2-1: USB disconnect, device number 89 [ 2338.420137][ T5941] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2338.585877][ T5941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2338.616352][ T5941] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2338.636668][ T5941] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 2338.670284][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2338.721416][ T5941] usb 6-1: config 0 descriptor?? [ 2339.001509][ T30] audit: type=1326 audit(1758799377.484:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25646 comm="syz.1.3670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe339b8eec9 code=0x0 [ 2339.161818][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.177059][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.192479][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.210217][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.225923][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.245945][ T5941] sunplus 0003:04FC:05D8.0024: unknown main item tag 0x0 [ 2339.361993][ T5941] sunplus 0003:04FC:05D8.0024: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.5-1/input0 [ 2339.434133][ T5941] usb 6-1: USB disconnect, device number 59 [ 2344.451267][T25717] usb usb8: usbfs: process 25717 (syz.3.3692) did not claim interface 0 before use [ 2347.710236][ T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2347.949916][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 2347.957953][ T43] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2347.967736][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.983071][ T43] usb 2-1: config 0 descriptor?? [ 2348.226367][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2348.240899][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2348.259761][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2348.267204][ T43] usb 2-1: media controller created [ 2348.447723][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2348.533890][ T43] az6027: usb out operation failed. (-71) [ 2348.572011][T18923] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2348.715590][ T43] az6027: usb out operation failed. (-71) [ 2348.730917][ T43] stb0899_attach: Driver disabled by Kconfig [ 2348.737112][ T43] az6027: no front-end attached [ 2348.737112][ T43] [ 2348.745513][ T43] az6027: usb out operation failed. (-71) [ 2348.759017][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2348.786952][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 2348.845739][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 2348.861278][T18923] usb 6-1: Using ep0 maxpacket: 16 [ 2348.867367][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2348.900115][T18923] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2348.920006][T18923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2348.930286][ T43] usb 2-1: USB disconnect, device number 90 [ 2348.950339][T18923] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2348.967395][T18923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.019151][T18923] usb 6-1: config 0 descriptor?? [ 2349.261215][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2349.480708][T18923] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 2349.875026][T18923] usb 6-1: USB disconnect, device number 60 [ 2349.934553][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2349.942967][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.995377][T25782] fido_id[25782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2350.820913][ T983] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2351.260558][ T983] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2351.276304][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.309944][ T983] usb 4-1: Product: syz [ 2351.328477][ T983] usb 4-1: Manufacturer: syz [ 2351.337336][ T983] usb 4-1: SerialNumber: syz [ 2351.369196][ T983] usb 4-1: config 0 descriptor?? [ 2351.637989][ T983] usb 4-1: USB disconnect, device number 91 [ 2352.744247][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 2353.610653][T25838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2354.556399][T25840] ip6gretap0: entered promiscuous mode [ 2354.573155][T25840] ip6gretap0: left promiscuous mode [ 2354.770129][ T5941] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 2354.922268][ T5941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2354.963457][ T5941] usb 6-1: config 0 has no interface number 0 [ 2354.969619][ T5941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2355.046254][ T5941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2355.089947][ T5941] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2355.109327][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.150593][ T5941] usb 6-1: config 0 descriptor?? [ 2355.161335][T25842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2355.175554][ T5941] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2355.416964][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'. [ 2355.460335][T18923] usb 6-1: USB disconnect, device number 61 [ 2356.596957][ T1219] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2356.763470][ T1219] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2356.839884][ T1219] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2356.897594][ T1219] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2356.959922][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2356.975214][ T1219] usb 3-1: Product: syz [ 2356.986344][ T1219] usb 3-1: Manufacturer: syz [ 2356.996349][ T1219] usb 3-1: SerialNumber: syz [ 2357.025182][ T1219] usb 3-1: config 0 descriptor?? [ 2357.077275][ T1219] usb 3-1: selecting invalid altsetting 0 [ 2357.355419][ T5958] usb 3-1: USB disconnect, device number 75 [ 2357.500671][T25776] udevd[25776]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2357.891201][T25893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3738'. [ 2358.497456][T25905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3741'. [ 2358.854387][T25909] macvlan0: entered allmulticast mode [ 2358.863859][T25909] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2358.900851][T25909] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2360.547648][T25946] bond0: entered promiscuous mode [ 2360.555403][T25946] dummy0: entered promiscuous mode [ 2360.584426][T25946] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 2360.621817][T25946] hsr2: entered promiscuous mode [ 2360.631899][T25946] hsr2: entered allmulticast mode [ 2360.669460][T25946] bond0: entered allmulticast mode [ 2360.676133][T25946] dummy0: entered allmulticast mode [ 2360.866009][T25957] usb usb8: usbfs: process 25957 (syz.0.3758) did not claim interface 6 before use [ 2361.366079][T25943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2361.629961][ T1219] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2361.640345][T16711] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2361.790004][ T1219] usb 6-1: Using ep0 maxpacket: 8 [ 2361.799725][ T1219] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2361.809740][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.844853][ T1219] usb 6-1: Product: syz [ 2361.849278][ T1219] usb 6-1: Manufacturer: syz [ 2361.881841][T16711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2361.889874][ T1219] usb 6-1: SerialNumber: syz [ 2361.896304][T16711] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2361.940442][T16711] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2361.947464][ T1219] usb 6-1: config 0 descriptor?? [ 2361.963009][T16711] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2361.975614][T16711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.980656][ T1219] gspca_main: se401-2.14.0 probing 047d:5003 [ 2361.995223][T16711] usb 4-1: Product: syz [ 2362.027543][T16711] usb 4-1: Manufacturer: syz [ 2362.042481][T16711] usb 4-1: SerialNumber: syz [ 2362.068011][T16711] hub 4-1:1.0: bad descriptor, ignoring hub [ 2362.084832][T16711] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2362.294030][T16711] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2362.406160][ T1219] gspca_se401: Frame size: 0x0 1/16th janggu [ 2362.426306][ T1219] gspca_se401: Frame size: 0x0 1/16th janggu [ 2362.449166][ T1219] gspca_se401: Frame size: 0x0 1/16th janggu [ 2362.624451][ T1219] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55 [ 2362.685245][ T1219] usb 6-1: USB disconnect, device number 62 [ 2363.419935][T16711] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2363.600792][T16711] usb 3-1: Using ep0 maxpacket: 16 [ 2363.672620][T16711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2363.690468][ T5941] usb 4-1: USB disconnect, device number 92 [ 2363.706750][ T5941] usblp0: removed [ 2363.766741][T16711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2363.839116][T16711] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2363.863754][T16711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2363.891324][T16711] usb 3-1: config 0 descriptor?? [ 2364.346049][T16711] corsair 0003:1B1C:1B02.0026: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 2364.712805][T16711] corsair 0003:1B1C:1B02.0026: Failed to get K90 initial state (error -71). [ 2364.767989][T16711] usb 3-1: USB disconnect, device number 76 [ 2365.771006][T26031] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3782'. [ 2365.829996][ T5941] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2366.007493][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 2366.019100][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2366.051233][ T5941] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2366.113606][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.169379][ T5941] usb 2-1: config 0 descriptor?? [ 2366.683148][ T5941] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2367.068714][ T5941] usb 2-1: USB disconnect, device number 91 [ 2367.080953][ T5958] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2367.101504][ T1219] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2367.234743][ T5958] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 2367.243246][ T5958] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.256088][ T5958] usb 4-1: config 0 has no interface number 0 [ 2367.262664][ T5958] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2367.272278][ T1219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2367.285608][ T5958] usb 4-1: config 0 interface 113 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2367.299501][ T5958] usb 4-1: config 0 interface 113 has no altsetting 0 [ 2367.316489][ T5958] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2367.326119][ T1219] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2367.326675][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.345315][ T5958] usb 4-1: Product: syz [ 2367.345365][ T1219] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2367.349646][ T5958] usb 4-1: Manufacturer: syz [ 2367.364671][ T5958] usb 4-1: SerialNumber: syz [ 2367.371439][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.388662][ T1219] usb 6-1: config 0 descriptor?? [ 2367.390536][ T5958] usb 4-1: config 0 descriptor?? [ 2367.423250][ T5958] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 2367.706508][ T5958] usb 4-1: USB disconnect, device number 93 [ 2367.940124][ T5941] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2368.116343][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.146742][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2368.158091][ T5941] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2368.167998][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.181559][ T5941] usb 2-1: config 0 descriptor?? [ 2368.739967][ T5941] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 2368.761501][ T5941] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 2368.778363][ T5941] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 2368.795366][ T5941] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 2368.834996][ T5941] playstation 0003:054C:0DF2.0029: unknown main item tag 0x0 [ 2368.868496][ T5941] playstation 0003:054C:0DF2.0029: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 2369.207750][ T5941] playstation 0003:054C:0DF2.0029: Failed to retrieve feature with reportID 32: -71 [ 2369.271295][ T5941] playstation 0003:054C:0DF2.0029: Failed to retrieve DualSense firmware info: -71 [ 2369.281488][ T5941] playstation 0003:054C:0DF2.0029: Failed to get firmware info from DualSense [ 2369.288551][T26077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3801'. [ 2369.307385][ T5941] playstation 0003:054C:0DF2.0029: Failed to create dualsense. [ 2369.337303][ T5941] playstation 0003:054C:0DF2.0029: probe with driver playstation failed with error -71 [ 2369.387309][ T5941] usb 2-1: USB disconnect, device number 92 [ 2369.815306][T16711] usb 6-1: USB disconnect, device number 63 [ 2369.920143][T25133] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2370.219946][T25133] usb 3-1: Using ep0 maxpacket: 32 [ 2370.576182][T25133] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2370.584410][T25133] usb 3-1: config 0 has no interface number 0 [ 2370.597159][T25133] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2370.608115][T25133] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2370.627586][T25133] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2370.740006][T25133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.791528][T25133] usb 3-1: config 0 descriptor?? [ 2371.422810][T25133] uclogic 0003:28BD:0094.002A: pen parameters not found [ 2371.434022][T25133] uclogic 0003:28BD:0094.002A: interface is invalid, ignoring [ 2371.492299][T25133] usb 3-1: USB disconnect, device number 77 [ 2371.701508][T26106] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3811'. [ 2372.292202][T26117] vlan0: entered promiscuous mode [ 2372.299578][T26117] vlan0: entered allmulticast mode [ 2372.890436][ T5958] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2372.950731][T26116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2373.052612][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 2373.081242][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2373.093759][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2373.119924][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2373.160015][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2373.190153][ T5958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2373.232740][ T5958] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2373.242536][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2373.250301][T25133] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2373.272772][ T5958] usb 3-1: Product: syz [ 2373.277085][ T5958] usb 3-1: Manufacturer: syz [ 2373.299647][ T5958] usb 3-1: SerialNumber: syz [ 2373.341740][ T5958] usb 3-1: config 0 descriptor?? [ 2373.413707][T25133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2373.440276][T25133] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2373.548977][T25133] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2373.578238][ T5958] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2373.588408][T25133] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2373.595968][ T5958] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2373.630412][T25133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.638462][T25133] usb 4-1: Product: syz [ 2373.660949][T25133] usb 4-1: Manufacturer: syz [ 2373.669952][T25133] usb 4-1: SerialNumber: syz [ 2373.727786][T25133] hub 4-1:1.0: bad descriptor, ignoring hub [ 2373.746731][T25133] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2373.780505][ T5958] radio-si470x 3-1:0.0: software version 253, hardware version 55 [ 2373.788598][ T5958] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2373.930839][T25133] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 94 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2373.983489][ T5958] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2374.018589][ T5958] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 2374.044546][ T5958] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 2374.064241][ T5958] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 2374.078980][ T5958] usb 3-1: USB disconnect, device number 78 [ 2375.108139][T26156] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3827'. [ 2375.144824][T26156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 2375.750363][T16711] usb 4-1: USB disconnect, device number 94 [ 2375.790682][T16711] usblp0: removed [ 2376.117994][T26164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3828'. [ 2377.129955][ T1219] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2377.334896][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.356578][ T1219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2377.411327][ T1219] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2377.470876][ T1219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2377.498228][ T1219] usb 4-1: config 0 descriptor?? [ 2378.683331][ T1219] usb 4-1: USB disconnect, device number 95 [ 2380.230707][T26221] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3847'. [ 2380.310119][ T1219] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2380.460303][ T1219] usb 2-1: Using ep0 maxpacket: 16 [ 2380.468930][ T1219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.551316][ T1219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2380.605298][ T1219] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2380.625086][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.655576][ T1219] usb 2-1: config 0 descriptor?? [ 2380.960085][ T5958] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2381.110309][ T1219] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002C/input/input56 [ 2381.156205][ T5958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2381.200078][ T5958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2381.238251][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2381.283877][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2381.319941][ T1219] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2381.343623][T26230] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2381.403663][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2381.619416][T16711] usb 2-1: USB disconnect, device number 93 [ 2381.654439][ T5958] usb 4-1: USB disconnect, device number 96 [ 2381.710331][T26239] fido_id[26239]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2382.295158][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 2382.777607][T26241] syz.0.3856: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2382.799941][ T1219] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2382.828395][T26241] CPU: 0 UID: 0 PID: 26241 Comm: syz.0.3856 Not tainted syzkaller #0 PREEMPT(full) [ 2382.828427][T26241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2382.828446][T26241] Call Trace: [ 2382.828456][T26241] [ 2382.828466][T26241] dump_stack_lvl+0x189/0x250 [ 2382.828503][T26241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2382.828529][T26241] ? __pfx__printk+0x10/0x10 [ 2382.828560][T26241] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2382.828587][T26241] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2382.828614][T26241] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2382.828643][T26241] warn_alloc+0x214/0x310 [ 2382.828683][T26241] ? __pfx_warn_alloc+0x10/0x10 [ 2382.828727][T26241] ? __get_vm_area_node+0x28f/0x300 [ 2382.828758][T26241] ? hash_netport4_resize+0x235/0x1b60 [ 2382.828791][T26241] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2382.828861][T26241] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2382.828900][T26241] ? rcu_is_watching+0x15/0xb0 [ 2382.828924][T26241] ? hash_netport4_resize+0x235/0x1b60 [ 2382.828949][T26241] ? hash_netport4_resize+0x235/0x1b60 [ 2382.828974][T26241] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 2382.829005][T26241] ? hash_netport4_resize+0x235/0x1b60 [ 2382.829040][T26241] hash_netport4_resize+0x235/0x1b60 [ 2382.829067][T26241] ? hash_netport4_uadt+0xc97/0xf30 [ 2382.829100][T26241] ? __pfx_hash_netport4_add+0x10/0x10 [ 2382.829126][T26241] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 2382.829163][T26241] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2382.829198][T26241] call_ad+0x44e/0xb00 [ 2382.829241][T26241] ? __pfx_call_ad+0x10/0x10 [ 2382.829290][T26241] ? __nla_parse+0x40/0x60 [ 2382.829317][T26241] ip_set_ad+0x791/0x930 [ 2382.829361][T26241] ? __pfx_ip_set_ad+0x10/0x10 [ 2382.829435][T26241] nfnetlink_rcv_msg+0xb4a/0x1130 [ 2382.829470][T26241] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 2382.829523][T26241] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2382.829555][T26241] ? kasan_save_free_info+0x46/0x50 [ 2382.829641][T26241] netlink_rcv_skb+0x205/0x470 [ 2382.829666][T26241] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2382.829699][T26241] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2382.829734][T26241] ? bpf_lsm_capable+0x9/0x20 [ 2382.829762][T26241] ? security_capable+0x7e/0x2e0 [ 2382.829810][T26241] nfnetlink_rcv+0x26a/0x2520 [ 2382.829843][T26241] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2382.829882][T26241] ? __dev_queue_xmit+0x27b/0x3b50 [ 2382.829923][T26241] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2382.829952][T26241] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2382.829995][T26241] ? ref_tracker_free+0x63a/0x7d0 [ 2382.830016][T26241] ? __asan_memcpy+0x40/0x70 [ 2382.830039][T26241] ? __pfx_ref_tracker_free+0x10/0x10 [ 2382.830075][T26241] ? skb_clone+0x246/0x3a0 [ 2382.830106][T26241] ? __netlink_deliver_tap+0x807/0x850 [ 2382.830127][T26241] ? netlink_deliver_tap+0x2e/0x1b0 [ 2382.830155][T26241] ? netlink_deliver_tap+0x2e/0x1b0 [ 2382.830184][T26241] netlink_unicast+0x82c/0x9e0 [ 2382.830225][T26241] ? __pfx_netlink_unicast+0x10/0x10 [ 2382.830259][T26241] ? netlink_sendmsg+0x642/0xb30 [ 2382.830280][T26241] ? skb_put+0x11b/0x210 [ 2382.830307][T26241] netlink_sendmsg+0x805/0xb30 [ 2382.830341][T26241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2382.830385][T26241] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2382.830409][T26241] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2382.830432][T26241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2382.830455][T26241] __sock_sendmsg+0x21c/0x270 [ 2382.830485][T26241] ____sys_sendmsg+0x505/0x830 [ 2382.830513][T26241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2382.830544][T26241] ? import_iovec+0x74/0xa0 [ 2382.830572][T26241] ___sys_sendmsg+0x21f/0x2a0 [ 2382.830596][T26241] ? __pfx____sys_sendmsg+0x10/0x10 [ 2382.830649][T26241] ? __fget_files+0x2a/0x420 [ 2382.830664][T26241] ? __fget_files+0x3a0/0x420 [ 2382.830688][T26241] __x64_sys_sendmsg+0x19b/0x260 [ 2382.830713][T26241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2382.830745][T26241] ? rcu_is_watching+0x15/0xb0 [ 2382.830766][T26241] ? do_syscall_64+0xbe/0x3b0 [ 2382.830790][T26241] do_syscall_64+0xfa/0x3b0 [ 2382.830814][T26241] ? lockdep_hardirqs_on+0x9c/0x150 [ 2382.830832][T26241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.830849][T26241] ? clear_bhb_loop+0x60/0xb0 [ 2382.830870][T26241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2382.830893][T26241] RIP: 0033:0x7f2368f8eec9 [ 2382.830918][T26241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2382.830933][T26241] RSP: 002b:00007f2369ed6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2382.830952][T26241] RAX: ffffffffffffffda RBX: 00007f23691e5fa0 RCX: 00007f2368f8eec9 [ 2382.830965][T26241] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 2382.830976][T26241] RBP: 00007f2369011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2382.830987][T26241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2382.831010][T26241] R13: 00007f23691e6038 R14: 00007f23691e5fa0 R15: 00007f236930fa28 [ 2382.831036][T26241] [ 2383.406983][T26241] Mem-Info: [ 2383.410320][T26241] active_anon:11374 inactive_anon:0 isolated_anon:0 [ 2383.410320][T26241] active_file:13257 inactive_file:40843 isolated_file:0 [ 2383.410320][T26241] unevictable:768 dirty:289 writeback:0 [ 2383.410320][T26241] slab_reclaimable:7393 slab_unreclaimable:162440 [ 2383.410320][T26241] mapped:31209 shmem:6496 pagetables:1460 [ 2383.410320][T26241] sec_pagetables:0 bounce:0 [ 2383.410320][T26241] kernel_misc_reclaimable:0 [ 2383.410320][T26241] free:1246378 free_pcp:11033 free_cma:0 [ 2383.475110][T26241] Node 0 active_anon:46096kB inactive_anon:0kB active_file:52824kB inactive_file:163168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124784kB dirty:1156kB writeback:0kB shmem:24448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13792kB pagetables:5588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2383.532306][T26241] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2383.571082][T26241] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2383.600165][T26241] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 2383.606127][T26241] Node 0 DMA32 free:1066324kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46844kB inactive_anon:0kB active_file:52824kB inactive_file:161604kB unevictable:2636kB writepending:1156kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:36108kB local_pcp:19024kB free_cma:0kB [ 2383.639035][ T1219] usb 2-1: Using ep0 maxpacket: 8 [ 2383.644429][T26241] lowmem_reserve[]: 0 0 1 1 1 [ 2383.649238][T26241] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2383.678356][T26241] lowmem_reserve[]: 0 0 0 0 0 [ 2383.683222][T26241] Node 1 Normal free:3903816kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5440kB local_pcp:5440kB free_cma:0kB [ 2383.714662][T26241] lowmem_reserve[]: 0 0 0 0 0 [ 2383.719416][T26241] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2383.732207][T26241] Node 0 DMA32: 1815*4kB (UME) 1135*8kB (UME) 326*16kB (UME) 341*32kB (UME) 164*64kB (UME) 75*128kB (UME) 60*256kB (UME) 32*512kB (UME) 19*1024kB (UME) 2*2048kB (UM) 234*4096kB (UM) = 1066324kB [ 2383.751564][T26241] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 2383.763954][T26241] Node 1 Normal: 222*4kB (UE) 56*8kB (UE) 61*16kB (UME) 266*32kB (UME) 106*64kB (UME) 25*128kB (UME) 12*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 5*2048kB (UME) 943*4096kB (UM) = 3903816kB [ 2383.782890][T26241] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2383.792675][T26241] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2383.807887][T26241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2383.817896][T26241] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2383.827425][T26241] 60887 total pagecache pages [ 2383.832456][T26241] 0 pages in swap cache [ 2383.836750][T26241] Free swap = 124996kB [ 2383.841333][ T1219] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2383.849555][ T1219] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2383.893045][T26241] Total swap = 124996kB [ 2384.010756][T26241] 2097051 pages RAM [ 2384.014634][T26241] 0 pages HighMem/MovableOnly [ 2384.030313][ T1219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2384.095776][T26241] 425671 pages reserved [ 2384.121208][ T5958] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2384.203213][T26273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3866'. [ 2384.339719][T26241] 0 pages cma reserved [ 2384.349989][ T1219] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2384.541261][ T1219] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2384.560811][ T1219] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2384.574130][ T1219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.605042][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2384.620743][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2384.786440][ T5958] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2384.792369][ T1219] usb 2-1: GET_CAPABILITIES returned 0 [ 2384.802621][ T1219] usbtmc 2-1:16.0: can't read capabilities [ 2384.820028][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.882757][ T5958] usb 3-1: config 0 descriptor?? [ 2384.998840][ T1219] usb 2-1: USB disconnect, device number 94 [ 2385.927836][T26270] sctp: [Deprecated]: syz.2.3864 (pid 26270) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2385.927836][T26270] Use struct sctp_sack_info instead [ 2386.069936][ T5958] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2386.230290][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 2386.232994][ T5958] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2386.246068][ T5958] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 2386.264914][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2386.291317][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2386.353415][ T5958] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 2386.385820][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2386.484853][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2386.528530][ T5958] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2386.561050][ T5958] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 2386.575427][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.601973][ T5958] usb 2-1: Product: syz [ 2386.615395][ T5958] usb 2-1: Manufacturer: syz [ 2386.630499][ T5958] usb 2-1: SerialNumber: syz [ 2386.660566][ T5958] usb 2-1: config 0 descriptor?? [ 2386.671901][T26294] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2386.687946][ T5958] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2386.988661][ T5941] usb 3-1: USB disconnect, device number 79 [ 2386.994396][ T5958] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 2387.041944][ T5958] usb 2-1: USB disconnect, device number 95 [ 2387.166366][T26246] udevd[26246]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2388.145520][T26311] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3877'. [ 2388.395953][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3880'. [ 2388.405129][T26317] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3880'. [ 2388.841548][T26326] veth0_to_team: entered promiscuous mode [ 2388.900018][ T5958] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2389.190057][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 2389.201945][ T5958] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2389.213709][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.243002][ T5958] usb 4-1: config 0 descriptor?? [ 2389.664327][ T5958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2389.713821][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2390.080148][T26323] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 2390.097519][ T5958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2390.150465][ T5958] usb 4-1: media controller created [ 2390.580697][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2390.693625][ T5958] az6027: usb out operation failed. (-71) [ 2390.727487][ T5958] az6027: usb out operation failed. (-71) [ 2390.746972][ T5958] stb0899_attach: Driver disabled by Kconfig [ 2390.767259][ T5958] az6027: no front-end attached [ 2390.767259][ T5958] [ 2390.800114][ T5958] az6027: usb out operation failed. (-71) [ 2390.818122][ T5958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2390.876763][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 2391.003326][ T5958] dvb-usb: schedule remote query interval to 400 msecs. [ 2391.072999][ T5958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2391.211003][ T5958] usb 4-1: USB disconnect, device number 97 [ 2391.677758][ T5958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2392.180435][ T5958] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2392.332776][ T5958] usb 4-1: config 0 has no interfaces? [ 2392.341289][ T5958] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 2392.360331][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 2392.368503][ T5958] usb 4-1: Product: syz [ 2392.378671][ T5958] usb 4-1: Manufacturer: syz [ 2392.388798][ T5958] usb 4-1: SerialNumber: syz [ 2392.404437][ T5958] usb 4-1: config 0 descriptor?? [ 2393.384098][T25133] usb 4-1: USB disconnect, device number 98 [ 2395.443561][T25133] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2395.660057][ T5941] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2395.667815][T25133] usb 4-1: Using ep0 maxpacket: 8 [ 2395.736806][T25133] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2395.769445][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2395.806378][T25133] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2395.840063][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2395.853651][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2395.870473][T25133] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2395.878190][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2395.894192][T25133] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2395.937006][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2395.964834][ T5941] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2395.981840][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.995794][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2396.019020][ T5941] usb 3-1: Product: syz [ 2396.035589][ T5941] usb 3-1: Manufacturer: syz [ 2396.043086][T25133] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2396.050950][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2396.069110][ T5941] usb 3-1: SerialNumber: syz [ 2396.078360][T25133] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2396.111692][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2396.139219][ T5941] usb 3-1: config 0 descriptor?? [ 2396.184079][T25133] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2396.395843][ T5941] usb 3-1: USB disconnect, device number 80 [ 2396.418512][T25133] usb 4-1: string descriptor 0 read error: -22 [ 2396.425622][T25133] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2396.459512][T25133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2396.601669][T25133] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2397.026629][ T983] usb 4-1: USB disconnect, device number 99 [ 2398.021803][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 2400.302029][T26475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2404.107339][T26536] syzkaller1: entered promiscuous mode [ 2404.119604][T26536] syzkaller1: entered allmulticast mode [ 2404.401267][T26537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3950'. [ 2404.718395][T26545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2405.244880][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3955'. [ 2411.380500][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.387058][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2411.610043][ T5941] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2411.762997][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2411.774963][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2412.025144][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2412.068690][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2412.087870][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2412.103801][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.119130][ T5941] usb 4-1: config 0 descriptor?? [ 2412.657410][ T5941] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2412.862024][ T5941] usb 4-1: USB disconnect, device number 100 [ 2413.127533][T26634] fido_id[26634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2415.056058][ T5941] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 2415.467772][ T5941] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2415.477166][ T5941] usb 6-1: config 0 has no interface number 0 [ 2415.507753][ T5941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2415.544921][ T5941] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2415.625851][ T5941] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2415.645923][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.687343][ T5941] usb 6-1: config 0 descriptor?? [ 2415.700606][T26655] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2415.724585][ T5941] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2415.799979][ T983] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2415.951698][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.963165][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2415.977526][ T983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2416.039539][ T983] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2416.092653][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.125094][ T983] usb 4-1: config 0 descriptor?? [ 2416.611898][ T983] plantronics 0003:047F:FFFF.002F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2416.658397][T16711] usb 6-1: USB disconnect, device number 64 [ 2416.806796][ T983] usb 4-1: USB disconnect, device number 101 [ 2417.150837][T26685] fido_id[26685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2419.741932][ T983] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2419.921819][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2419.963385][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.013121][ T983] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2420.050090][ T983] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2420.070067][ T43] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2420.113013][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.172012][ T983] usb 2-1: config 0 descriptor?? [ 2420.224236][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.239995][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.277433][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2420.414223][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2420.475744][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2420.551385][ T43] usb 6-1: config 0 descriptor?? [ 2420.623755][ T983] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2420.790178][ T5941] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2420.882115][ T5958] usb 2-1: USB disconnect, device number 96 [ 2420.953108][ T5941] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 2420.977942][ T5941] usb 3-1: config 0 has no interface number 0 [ 2420.996878][ T5941] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2421.012566][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.031641][ T43] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2421.040094][ T5941] usb 3-1: Product: syz [ 2421.061455][ T5941] usb 3-1: Manufacturer: syz [ 2421.066156][ T5941] usb 3-1: SerialNumber: syz [ 2421.093184][ T5941] usb 3-1: config 0 descriptor?? [ 2421.112830][ T5941] hub 3-1:0.217: bad descriptor, ignoring hub [ 2421.118980][ T5941] hub 3-1:0.217: probe with driver hub failed with error -5 [ 2421.282321][ T5958] usb 6-1: USB disconnect, device number 65 [ 2421.307813][ T5941] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2421.335202][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2421.351323][ T5941] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2421.378236][ T5941] usb 3-1: media controller created [ 2421.470669][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2421.625082][ T5941] DVB: Unable to find symbol dib7000p_attach() [ 2421.647012][ T5941] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2421.790371][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found [ 2421.796604][ T5941] Registered IR keymap rc-empty [ 2421.812761][ T5941] dvb-usb: could not initialize remote control. [ 2421.861420][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2421.907790][ T5941] usb 3-1: USB disconnect, device number 81 [ 2421.960555][T18923] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2422.051118][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2422.160163][T18923] usb 2-1: Using ep0 maxpacket: 8 [ 2422.172882][T18923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2422.220317][T18923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2422.258406][T18923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2422.289423][T18923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2422.311155][T18923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2422.334162][T18923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2422.604837][T18923] usb 2-1: GET_CAPABILITIES returned 0 [ 2422.670677][T18923] usbtmc 2-1:16.0: can't read capabilities [ 2422.819452][T18923] usb 2-1: USB disconnect, device number 97 [ 2423.933339][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 2424.250160][ T43] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 2424.436063][ T43] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2424.448912][ T43] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 2424.469891][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2424.477939][ T43] usb 2-1: Product: syz [ 2424.543004][ T43] usb 2-1: Manufacturer: syz [ 2424.557962][ T43] usb 2-1: SerialNumber: syz [ 2424.622728][ T43] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 2424.930154][ T1219] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2425.107271][ T1219] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2425.117364][ T1219] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.125753][ T1219] usb 6-1: Product: syz [ 2425.133428][ T43] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 2425.271002][ T1219] usb 6-1: Manufacturer: syz [ 2425.297607][ T1219] usb 6-1: SerialNumber: syz [ 2425.336136][ T1219] usb 6-1: config 0 descriptor?? [ 2425.582953][ T1219] usb 6-1: USB disconnect, device number 66 [ 2425.679521][T26621] udevd[26621]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2427.086737][T18923] usb 2-1: USB disconnect, device number 98 [ 2427.629989][ T983] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2427.841597][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2427.875420][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2427.916238][ T983] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2427.939906][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2428.275972][ T983] usb 2-1: config 0 descriptor?? [ 2428.789323][T26833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4042'. [ 2430.305186][T26815] sctp: [Deprecated]: syz.1.4038 (pid 26815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2430.305186][T26815] Use struct sctp_sack_info instead [ 2430.685923][T26851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2431.257605][T26865] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2431.354440][T26869] syzkaller1: entered promiscuous mode [ 2431.361186][T26869] syzkaller1: entered allmulticast mode [ 2431.470544][ T5941] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2432.003882][ T5941] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2432.013861][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.023567][ T5941] usb 4-1: Product: syz [ 2432.030434][ T5941] usb 4-1: Manufacturer: syz [ 2432.038467][ T5941] usb 4-1: SerialNumber: syz [ 2432.084261][ T5941] usb 4-1: config 0 descriptor?? [ 2432.105389][ T983] usb 2-1: USB disconnect, device number 99 [ 2432.356342][ T43] usb 4-1: USB disconnect, device number 102 [ 2432.479220][T26621] udevd[26621]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2432.680410][T26887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4058'. [ 2435.531687][T26930] netlink: 742 bytes leftover after parsing attributes in process `syz.1.4073'. [ 2436.480211][ T983] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2436.644553][ T983] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2436.654290][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.821020][ T983] usb 2-1: Product: syz [ 2436.841935][ T983] usb 2-1: Manufacturer: syz [ 2436.871673][ T983] usb 2-1: SerialNumber: syz [ 2436.950217][ T983] usb 2-1: config 0 descriptor?? [ 2437.200666][ T5941] usb 2-1: USB disconnect, device number 100 [ 2437.678626][T26963] usb usb8: usbfs: process 26963 (syz.3.4082) did not claim interface 0 before use [ 2439.130259][ T983] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2439.313515][ T983] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2439.327468][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.366364][ T983] usb 3-1: Product: syz [ 2439.381969][ T983] usb 3-1: Manufacturer: syz [ 2439.386608][ T983] usb 3-1: SerialNumber: syz [ 2439.441008][ T983] usb 3-1: config 0 descriptor?? [ 2439.465758][ T983] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2439.489644][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2439.533429][ T983] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2439.574231][ T983] usb 3-1: media controller created [ 2439.659197][T26976] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 2439.671199][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2439.709958][T26976] dvb-usb: bulk message failed: -22 (7/0) [ 2440.175430][ T983] DVB: Unable to find symbol mt352_attach() [ 2440.374297][ T983] DVB: Unable to find symbol nxt6000_attach() [ 2440.386374][ T983] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2440.424841][ T983] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 2440.525855][ T983] dvb-usb: schedule remote query interval to 1000 msecs. [ 2440.539584][ T983] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2440.563879][ T983] dvb-usb: bulk message failed: -22 (7/0) [ 2440.575899][ T983] dvb-usb: bulk message failed: -22 (7/0) [ 2440.723279][ T983] usb 3-1: USB disconnect, device number 82 [ 2440.843168][T26999] macvtap1: entered promiscuous mode [ 2440.856395][T26999] vlan0: entered promiscuous mode [ 2440.872173][T26999] macvtap1: entered allmulticast mode [ 2440.887886][T26999] vlan0: entered allmulticast mode [ 2440.902029][T26999] veth0_vlan: entered allmulticast mode [ 2440.991300][ T983] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2441.088524][T27000] macvtap2: entered promiscuous mode [ 2441.095759][T27000] macvtap2: entered allmulticast mode [ 2441.461090][ T983] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2441.522124][T27013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4098'. [ 2441.743687][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2441.781154][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2441.906298][ T983] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2441.951703][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.006764][ T983] usb 4-1: config 0 descriptor?? [ 2444.199345][ T5941] usb 4-1: USB disconnect, device number 103 [ 2445.138203][ T5941] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2445.225159][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4123'. [ 2445.381474][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 2445.412033][ T5941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2445.442117][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2445.469534][ T5941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2445.518237][ T5941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2445.567507][ T5941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2445.618489][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.857555][ T5941] usb 3-1: GET_CAPABILITIES returned 0 [ 2445.871210][ T5941] usbtmc 3-1:16.0: can't read capabilities [ 2446.060538][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.069679][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.078757][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.087853][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.096913][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.105982][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.200168][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.209300][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.218993][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.228084][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.237198][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.246318][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.255450][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.264637][ C1] vkms_vblank_simulate: vblank timer overrun [ 2446.350165][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.359340][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.368459][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.393947][T18923] usb 3-1: USB disconnect, device number 83 [ 2446.509923][ T5941] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2446.661930][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.687170][ T5941] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2446.706871][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.726165][ T5941] usb 6-1: config 0 descriptor?? [ 2446.871521][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 2447.304808][ T5941] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2447.403293][T18923] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2447.469974][ T5941] pwc: recv_control_msg error -32 req 02 val 2700 [ 2447.502207][ T5941] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2447.718964][T18923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2447.912495][ T5941] pwc: recv_control_msg error -71 req 04 val 1300 [ 2447.973241][T18923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.983327][ T5941] pwc: recv_control_msg error -71 req 04 val 1400 [ 2447.990939][ T5941] pwc: recv_control_msg error -71 req 02 val 2000 [ 2448.043680][T18923] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2448.053381][ T5941] pwc: recv_control_msg error -71 req 02 val 2100 [ 2448.063003][ T5941] pwc: recv_control_msg error -71 req 04 val 1500 [ 2448.071111][T18923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2448.086418][ T5941] pwc: recv_control_msg error -71 req 02 val 2500 [ 2448.249207][ T5941] pwc: recv_control_msg error -71 req 02 val 2400 [ 2448.470357][T18923] usb 3-1: config 0 descriptor?? [ 2448.477010][ T5941] pwc: recv_control_msg error -71 req 02 val 2600 [ 2448.501021][ T5941] pwc: recv_control_msg error -71 req 02 val 2900 [ 2448.508709][ T5941] pwc: recv_control_msg error -71 req 02 val 2800 [ 2448.571800][ T5941] pwc: recv_control_msg error -71 req 04 val 1100 [ 2448.588780][ T5941] pwc: recv_control_msg error -71 req 04 val 1200 [ 2448.752966][ T5941] pwc: Registered as video103. [ 2448.783906][ T5941] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61 [ 2448.866450][ T5941] usb 6-1: USB disconnect, device number 67 [ 2450.579313][ T983] usb 3-1: USB disconnect, device number 84 [ 2450.688545][T27136] ipip0: entered promiscuous mode [ 2450.712938][T27139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4138'. [ 2451.249913][ T983] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2451.324515][T27148] netlink: 'syz.5.4141': attribute type 10 has an invalid length. [ 2451.334925][T27148] team0: Device veth1_vlan failed to register rx_handler [ 2451.454756][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2451.592320][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2451.653697][ T983] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2451.675827][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.000940][ T983] usb 3-1: config 0 descriptor?? [ 2452.613393][T27162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2452.909998][T18923] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2453.055109][T27138] sctp: [Deprecated]: syz.2.4140 (pid 27138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2453.055109][T27138] Use struct sctp_sack_info instead [ 2453.089472][ T43] usb 3-1: USB disconnect, device number 85 [ 2453.140934][T18923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2453.152349][T18923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2453.179964][T18923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2453.265593][T18923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2453.280163][T18923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2453.299951][T18923] usb 4-1: Product: syz [ 2453.308674][T18923] usb 4-1: Manufacturer: syz [ 2453.447553][T18923] usb 4-1: SerialNumber: syz [ 2453.461942][T27174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4151'. [ 2453.486683][T18923] hub 4-1:1.0: bad descriptor, ignoring hub [ 2453.493334][T18923] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2453.719369][T18923] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 104 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2454.635977][T27196] vlan0: entered promiscuous mode [ 2454.720129][T27196] vlan0: entered allmulticast mode [ 2454.822557][T27198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 2455.909067][T27212] netlink: 'syz.5.4159': attribute type 10 has an invalid length. [ 2455.922436][T27212] team0: Device veth1_vlan failed to register rx_handler [ 2456.400559][ T43] usb 4-1: USB disconnect, device number 104 [ 2456.409741][ T43] usblp0: removed [ 2456.582905][T27215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2458.143176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055f9cc00: rx timeout, send abort [ 2458.154311][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055f9cc00: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 2458.594929][T27245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2459.267653][T27254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 2462.290418][T18923] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2462.491555][T18923] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 2462.520855][T18923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.590632][T18923] usb 2-1: config 0 descriptor?? [ 2462.613296][T18923] pwc: Philips SPC 900NC USB webcam detected. [ 2462.777543][T27305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2463.024586][T18923] pwc: send_video_command error -71 [ 2463.032597][T18923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2463.196330][T18923] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2463.308915][T18923] usb 2-1: USB disconnect, device number 101 [ 2463.754603][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4197'. [ 2463.764394][T27322] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 2464.409340][T27337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4201'. [ 2467.496466][T27375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2468.284713][T27395] syz.3.4219 (27395): drop_caches: 2 [ 2469.597751][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 2470.219953][T16711] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2470.385372][T16711] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2470.409520][T16711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.438276][T16711] usb 4-1: Product: syz [ 2470.448559][T16711] usb 4-1: Manufacturer: syz [ 2470.461700][T16711] usb 4-1: SerialNumber: syz [ 2470.539278][T16711] usb 4-1: config 0 descriptor?? [ 2470.771210][ T5941] usb 4-1: USB disconnect, device number 105 [ 2471.069964][ T983] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2471.170233][ T30] audit: type=1326 audit(1758799509.654:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.217511][ T30] audit: type=1326 audit(1758799509.654:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.538476][ T983] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2471.560356][ T983] usb 3-1: config 0 has no interface number 0 [ 2471.560548][T27439] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4235'. [ 2471.577316][ T30] audit: type=1326 audit(1758799509.654:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.676067][ T983] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2471.688488][ T30] audit: type=1326 audit(1758799509.654:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.712287][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.743318][ T983] usb 3-1: Product: syz [ 2471.754520][ T983] usb 3-1: Manufacturer: syz [ 2471.766031][ T983] usb 3-1: SerialNumber: syz [ 2471.788986][ T30] audit: type=1326 audit(1758799509.704:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.861312][ T983] usb 3-1: config 0 descriptor?? [ 2471.969877][ T30] audit: type=1326 audit(1758799509.734:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2471.992826][ C0] vkms_vblank_simulate: vblank timer overrun [ 2472.135860][ T983] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2472.166864][ T983] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2472.216010][ T983] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2472.243900][ T983] usb 3-1: media controller created [ 2472.305630][ T30] audit: type=1326 audit(1758799509.734:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2472.316120][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2472.328363][ C0] vkms_vblank_simulate: vblank timer overrun [ 2472.474603][T27452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2472.482087][ T983] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 2472.551248][ T30] audit: type=1326 audit(1758799509.774:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2472.645208][ T983] usb 3-1: USB disconnect, device number 86 [ 2472.657967][T26618] udevd[26618]: setting mode of /dev/bus/usb/003/086 to 020664 failed: No such file or directory [ 2472.680377][ T30] audit: type=1326 audit(1758799509.774:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2472.705772][ T30] audit: type=1326 audit(1758799509.774:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27433 comm="syz.0.4233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2368f8eec9 code=0x7ffc0000 [ 2472.816980][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.824914][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.867134][T26618] udevd[26618]: setting owner of /dev/bus/usb/003/086 to uid=0, gid=0 failed: No such file or directory [ 2473.739934][ T983] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2473.979925][ T983] usb 6-1: Using ep0 maxpacket: 8 [ 2473.986567][ T983] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2473.995140][ T983] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2474.025368][ T983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2474.096803][ T983] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2474.145982][ T983] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2474.204843][ T983] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2474.259650][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2474.545394][ T983] usb 6-1: usb_control_msg returned -32 [ 2474.583470][ T983] usbtmc 6-1:16.0: can't read capabilities [ 2475.807830][T27489] vivid-001: disconnect [ 2476.545082][T16711] usb 6-1: USB disconnect, device number 68 [ 2477.068042][T27488] vivid-001: reconnect [ 2479.046969][T10962] syz_tun (unregistering): left promiscuous mode [ 2480.423402][T27526] syzkaller0: entered promiscuous mode [ 2480.510019][T27526] syzkaller0: entered allmulticast mode [ 2481.227471][T27537] geneve2: entered promiscuous mode [ 2481.299594][T11790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2481.331933][T11790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2481.350797][T11790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2481.362277][T11790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2481.370968][T11790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2481.405568][T19990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2481.416285][T19990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2481.432974][T19990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2481.441998][T19990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2481.450253][T19990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2482.169021][T27557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2482.178910][T27557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2482.209088][T27557] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2482.493330][ T5941] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2482.542400][T27550] chnl_net:caif_netlink_parms(): no params data found [ 2482.654825][ T5941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2482.680712][ T5941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2482.702664][ T5941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2482.781499][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.945571][T27571] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2482.981476][ T5941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2483.119386][T27550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2483.188121][T27550] bridge0: port 1(bridge_slave_0) entered disabled state [ 2483.216439][T27550] bridge_slave_0: entered allmulticast mode [ 2483.268182][T27571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2483.285689][T27550] bridge_slave_0: entered promiscuous mode [ 2483.319138][T27550] bridge0: port 2(bridge_slave_1) entered blocking state [ 2483.330400][T27550] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.343504][T27550] bridge_slave_1: entered allmulticast mode [ 2483.359167][T27550] bridge_slave_1: entered promiscuous mode [ 2483.366107][T27571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2483.516060][ T5941] usb 4-1: USB disconnect, device number 106 [ 2483.563106][T27550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2483.713338][T27550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2483.834759][T27550] team0: Port device team_slave_0 added [ 2483.856251][T27550] team0: Port device team_slave_1 added [ 2484.030101][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2484.072039][T27550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2484.079174][T27550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.106296][T27550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2484.125665][T27550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2484.133220][T27550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2484.159595][T27550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2484.769294][T27592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2484.805553][T27550] hsr_slave_0: entered promiscuous mode [ 2484.832696][T27550] hsr_slave_1: entered promiscuous mode [ 2484.839739][T27550] debugfs: 'hsr0' already exists in 'hsr' [ 2484.846035][T27550] Cannot create hsr debugfs directory [ 2486.011307][T27616] kvm: user requested TSC rate below hardware speed [ 2486.037523][T27550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2486.119602][T27550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2486.165196][T27550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2486.228746][T27550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2486.820006][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2486.891085][T27550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2486.920499][T27550] 8021q: adding VLAN 0 to HW filter on device team0 [ 2486.942574][T15460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2486.949865][T15460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2487.053054][T15460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2487.060379][T15460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2487.154050][T27633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4289'. [ 2487.534439][T27550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2487.957926][T27550] veth0_vlan: entered promiscuous mode [ 2488.038316][T27631] netlink: 'syz.0.4288': attribute type 4 has an invalid length. [ 2488.110138][T27550] veth1_vlan: entered promiscuous mode [ 2488.220523][T27550] veth0_macvtap: entered promiscuous mode [ 2488.250629][T27550] veth1_macvtap: entered promiscuous mode [ 2488.503144][T27550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2488.571419][T27654] netlink: 'syz.3.4292': attribute type 4 has an invalid length. [ 2488.659287][T27550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2488.670334][T27653] netlink: 'syz.3.4292': attribute type 4 has an invalid length. [ 2488.768235][T15477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.802078][T15477] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.852555][T15477] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2488.890398][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2488.940049][T15477] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2489.103653][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2489.135929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2489.236837][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2489.248049][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2489.501140][T27676] netlink: 'syz.6.4260': attribute type 11 has an invalid length. [ 2489.540753][T27676] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4260'. [ 2489.921666][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4304'. [ 2490.470078][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2490.753948][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2490.799741][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2490.899911][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2490.978977][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2490.997175][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.037343][ T9] usb 3-1: Product: syz [ 2491.056565][ T9] usb 3-1: Manufacturer: syz [ 2491.074657][ T9] usb 3-1: SerialNumber: syz [ 2491.301920][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 2491.347464][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 2491.486490][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2492.463169][T27696] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2492.490285][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2493.023643][T27716] pim6reg1: entered promiscuous mode [ 2493.029107][T27716] pim6reg1: entered allmulticast mode [ 2493.260231][ T9] usb 3-1: USB disconnect, device number 87 [ 2493.268528][ T9] usblp0: removed [ 2494.588229][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2494.919951][ T1219] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2495.077422][ T1219] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.150765][ T1219] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2495.223222][ T1219] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2495.243206][ T1219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.297271][ T1219] usb 7-1: config 0 descriptor?? [ 2495.430335][ T5941] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2495.498977][T27747] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2495.973334][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2495.985536][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2496.019883][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2496.021593][T27740] sctp: [Deprecated]: syz.6.4313 (pid 27740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2496.021593][T27740] Use struct sctp_sack_info instead [ 2496.049975][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2496.083524][ T5941] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2496.093522][ T1219] usbhid 7-1:0.0: can't add hid device: -71 [ 2496.102340][ T1219] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2496.122669][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.134411][ T1219] usb 7-1: USB disconnect, device number 2 [ 2496.156448][ T5941] usb 3-1: config 0 descriptor?? [ 2496.434874][T27757] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4318'. [ 2496.650308][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2496.763668][ T5941] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2497.510640][ T5941] usb 3-1: USB disconnect, device number 88 [ 2500.090576][T27770] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2500.147934][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2502.387627][T27813] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4331'. [ 2504.926033][T27851] input: syz0 as /devices/virtual/input/input63 [ 2505.549197][T27863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2507.479167][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2508.554731][T27902] kvm: user requested TSC rate below hardware speed [ 2510.699855][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2510.892501][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2510.952426][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2511.012632][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2511.047934][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2511.112733][ T9] usb 3-1: config 0 descriptor?? [ 2512.274421][ T5941] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2512.318365][T27931] sctp: [Deprecated]: syz.2.4363 (pid 27931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2512.318365][T27931] Use struct sctp_sack_info instead [ 2512.443093][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2512.469938][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2512.547445][ T5941] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2512.598478][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.670300][ T5941] usb 6-1: config 0 descriptor?? [ 2513.112229][T27956] sctp: [Deprecated]: syz.5.4371 (pid 27956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2513.112229][T27956] Use struct sctp_sack_info instead [ 2513.147576][ T5941] usbhid 6-1:0.0: can't add hid device: -71 [ 2513.176580][ T5941] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2513.231703][ T5941] usb 6-1: USB disconnect, device number 69 [ 2513.366232][ T983] usb 3-1: USB disconnect, device number 89 [ 2513.501791][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2513.501813][ T30] audit: type=1326 audit(1758799551.994:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27970 comm="syz.2.4376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f765298eec9 code=0x0 [ 2514.167958][T27979] netlink: 'syz.5.4379': attribute type 12 has an invalid length. [ 2516.222565][T28011] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 2517.540760][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2517.765174][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2517.792822][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.840436][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2517.849677][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.881186][ T9] usb 3-1: config 0 descriptor?? [ 2518.155170][T28037] sg_write: data in/out 28/10 bytes for SCSI command 0x5d-- guessing data in; [ 2518.155170][T28037] program syz.6.4385 not setting count and/or reply_len properly [ 2518.321558][T28025] sctp: [Deprecated]: syz.2.4387 (pid 28025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2518.321558][T28025] Use struct sctp_sack_info instead [ 2518.380815][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 2518.391899][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2518.427619][ T9] usb 3-1: USB disconnect, device number 90 [ 2518.454607][T28034] vlan0 (unregistering): left allmulticast mode [ 2518.465974][T28034] veth0_vlan: left allmulticast mode [ 2518.472585][T28034] vlan0 (unregistering): left promiscuous mode [ 2521.259892][ T5941] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2521.463906][ T5941] usb 6-1: Using ep0 maxpacket: 32 [ 2521.611789][ T5941] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 2521.620551][ T5941] usb 6-1: config 0 has no interface number 0 [ 2521.654002][ T5941] usb 6-1: config 0 interface 12 has no altsetting 0 [ 2521.711736][ T5941] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2521.750448][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.758489][ T5941] usb 6-1: Product: syz [ 2521.922505][ T5941] usb 6-1: Manufacturer: syz [ 2521.927164][ T5941] usb 6-1: SerialNumber: syz [ 2521.971577][ T5941] usb 6-1: config 0 descriptor?? [ 2522.001735][ T5941] f81534 6-1:0.12: required endpoints missing [ 2522.459867][ T5941] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2522.759004][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2522.908726][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2522.941343][ T5941] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2522.976833][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.032714][ T5941] usb 7-1: config 0 descriptor?? [ 2523.443209][T28081] sctp: [Deprecated]: syz.6.4403 (pid 28081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2523.443209][T28081] Use struct sctp_sack_info instead [ 2523.484671][ T5941] usbhid 7-1:0.0: can't add hid device: -71 [ 2523.511458][ T5941] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2523.560452][ T5941] usb 7-1: USB disconnect, device number 3 [ 2525.812157][T28065] Set syz1 is full, maxelem 65536 reached [ 2525.884258][ T983] usb 6-1: USB disconnect, device number 70 [ 2527.700253][T28119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2527.854930][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2528.210007][T16711] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2528.361271][T28150] af_packet: tpacket_rcv: packet too big, clamped from 88 to 4294967272. macoff=96 [ 2528.389167][T16711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.410950][T16711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.421527][T16711] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2528.689634][T16711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.712729][T16711] usb 3-1: config 0 descriptor?? [ 2528.755984][T19990] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 2529.175268][T28141] sctp: [Deprecated]: syz.2.4418 (pid 28141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2529.175268][T28141] Use struct sctp_sack_info instead [ 2529.260392][T16711] usbhid 3-1:0.0: can't add hid device: -71 [ 2529.266641][T16711] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2529.464194][T16711] usb 3-1: USB disconnect, device number 91 [ 2531.409607][T28189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4430'. [ 2532.982244][T28205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2534.340368][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.346729][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2535.001375][T28220] syz_tun: entered allmulticast mode [ 2535.007877][T28219] syz_tun: left allmulticast mode [ 2535.067702][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2535.200118][T28223] binder: BINDER_SET_CONTEXT_MGR already set [ 2535.206475][T28223] binder: 28222:28223 ioctl 4018620d 200000000040 returned -16 [ 2535.233828][T28223] binder: 28222:28223 ioctl c0306201 2000000003c0 returned -14 [ 2535.479629][T28230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4442'. [ 2535.495458][T28228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2538.280057][ T5941] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2538.429855][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 2538.436955][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2538.455766][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2538.479958][ T5941] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2538.525045][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.581780][ T5941] usb 7-1: config 0 descriptor?? [ 2539.018763][ T5941] ft260 0003:0403:6030.0038: unknown main item tag 0x7 [ 2539.215267][ T5941] ft260 0003:0403:6030.0038: chip code: 6424 8183 [ 2539.416887][ T5941] ft260 0003:0403:6030.0038: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 2539.691006][ T5941] ft260 0003:0403:6030.0038: failed to retrieve status: -32, no wakeup [ 2539.716651][ T5941] ft260 0003:0403:6030.0038: failed to retrieve status: -32 [ 2539.951844][T28268] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0003, size 0, read) [ 2540.128987][ T5941] usb 7-1: USB disconnect, device number 4 [ 2541.220134][ T1219] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2541.421677][ T1219] usb 7-1: Using ep0 maxpacket: 8 [ 2541.460178][ T1219] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2541.499093][ T1219] usb 7-1: config 5 has an invalid interface number: 184 but max is 3 [ 2541.550009][ T1219] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2541.584649][T28303] veth1_to_bond: entered allmulticast mode [ 2541.598728][ T1219] usb 7-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 2541.609003][T28303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4465'. [ 2541.629570][ T1219] usb 7-1: config 5 has no interface number 0 [ 2541.648946][ T1219] usb 7-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 2541.669274][ T1219] usb 7-1: config 5 interface 184 has no altsetting 0 [ 2541.723876][ T1219] usb 7-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 2541.737886][ T1219] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2541.756222][ T1219] usb 7-1: Product: syz [ 2541.765912][ T1219] usb 7-1: Manufacturer: syz [ 2541.778295][ T1219] usb 7-1: SerialNumber: syz [ 2541.840303][T25133] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2541.877469][T28303] veth1_to_bond (unregistering): left allmulticast mode [ 2542.047417][T25133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2542.109526][T25133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.134796][T25133] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 2542.164357][T25133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.184919][T28292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2542.197628][T25133] usb 6-1: config 0 descriptor?? [ 2542.367892][ T30] audit: type=1326 audit(1758799580.854:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28306 comm="syz.0.4466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2368f8eec9 code=0x0 [ 2542.421807][ T1219] ftdi_sio 7-1:5.184: FTDI USB Serial Device converter detected [ 2542.432795][ T1219] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 2542.472943][ T1219] usb 7-1: USB disconnect, device number 5 [ 2542.532254][ T1219] ftdi_sio 7-1:5.184: device disconnected [ 2542.637120][T28301] sctp: [Deprecated]: syz.5.4464 (pid 28301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2542.637120][T28301] Use struct sctp_sack_info instead [ 2542.666355][T25133] usbhid 6-1:0.0: can't add hid device: -71 [ 2542.686516][T25133] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2542.722947][T25133] usb 6-1: USB disconnect, device number 71 [ 2546.396135][T28367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2546.659889][ T983] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2546.810460][ T983] usb 3-1: device descriptor read/64, error -71 [ 2547.059854][ T983] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2547.242995][ T983] usb 3-1: device descriptor read/64, error -71 [ 2547.361602][ T983] usb usb3-port1: attempt power cycle [ 2547.730097][ T983] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2547.771870][ T983] usb 3-1: device descriptor read/8, error -71 [ 2548.007054][ T983] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2548.037935][ T983] usb 3-1: device descriptor read/8, error -71 [ 2548.159090][ T983] usb usb3-port1: unable to enumerate USB device [ 2549.137733][T19990] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 2550.658037][T28396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2552.434568][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2552.730074][ T983] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2552.892713][ T983] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2552.901838][ T983] usb 7-1: not running at top speed; connect to a high speed hub [ 2552.921777][ T983] usb 7-1: config 9 has an invalid interface number: 198 but max is 0 [ 2552.937478][ T983] usb 7-1: config 9 has no interface number 0 [ 2552.963536][ T983] usb 7-1: config 9 interface 198 has no altsetting 0 [ 2553.122336][ T983] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 2553.174059][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2553.214119][ T983] usb 7-1: Product: syz [ 2553.225598][ T983] usb 7-1: Manufacturer: syz [ 2553.235668][ T983] usb 7-1: SerialNumber: syz [ 2553.522853][T28422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.532277][T28422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2553.713134][ T983] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 2553.738792][ T983] dvb-usb: bulk message failed: -22 (3/0) [ 2553.762686][ T983] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2553.782130][ T983] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 2553.807256][ T983] dvb_usb_umt_010 7-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 2553.830506][ T983] usb 7-1: USB disconnect, device number 6 [ 2557.069112][T28478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2557.377883][T18923] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2557.569846][T18923] usb 7-1: Using ep0 maxpacket: 16 [ 2557.667769][T18923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2557.679947][T16711] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2557.737831][T18923] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2557.782055][T18923] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2557.807785][T18923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.845774][T16711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.849896][T18923] usb 7-1: Product: syz [ 2557.859817][T16711] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2557.881901][T18923] usb 7-1: Manufacturer: syz [ 2557.886680][T18923] usb 7-1: SerialNumber: syz [ 2557.992535][T16711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.061319][T16711] usb 3-1: config 0 descriptor?? [ 2558.157591][T18923] usb 7-1: 0:2 : does not exist [ 2558.168612][T18923] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2558.278594][T18923] usb 7-1: USB disconnect, device number 7 [ 2558.468776][T28423] udevd[28423]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2558.493928][T16711] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 2558.536245][T16711] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0039/input/input64 [ 2558.980793][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2559.112014][T16711] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2559.164008][ T983] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2559.332159][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2559.344912][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2559.620011][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2559.753368][ T983] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2559.782287][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.836513][ T983] usb 7-1: config 0 descriptor?? [ 2560.293249][ T983] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2560.844104][ T983] usb 3-1: USB disconnect, device number 96 [ 2562.561662][ T43] usb 7-1: USB disconnect, device number 8 [ 2562.836494][T28528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2563.100423][ T43] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2563.239859][ T43] usb 6-1: device descriptor read/64, error -71 [ 2563.593375][ T43] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2563.750160][ T43] usb 6-1: device descriptor read/64, error -71 [ 2563.918765][ T43] usb usb6-port1: attempt power cycle [ 2564.323262][ T43] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2564.361519][ T43] usb 6-1: device descriptor read/8, error -71 [ 2564.600481][ T43] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2564.670916][ T43] usb 6-1: device descriptor read/8, error -71 [ 2564.803396][ T43] usb usb6-port1: unable to enumerate USB device [ 2567.289937][T16711] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2567.452032][T16711] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2567.461490][T16711] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2567.516208][T16711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2567.565879][T16711] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2567.611489][T16711] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2567.991452][T16711] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2568.001614][T16711] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2568.040771][T16711] usb 6-1: Product: syz [ 2568.044991][T16711] usb 6-1: Manufacturer: syz [ 2568.201990][T16711] cdc_wdm 6-1:1.0: skipping garbage [ 2568.208220][T16711] cdc_wdm 6-1:1.0: skipping garbage [ 2568.228173][T16711] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2568.243826][T16711] cdc_wdm 6-1:1.0: Unknown control protocol [ 2568.400139][ T983] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2568.763981][ T983] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2568.791690][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2568.820075][ T983] usb 4-1: Product: syz [ 2568.824445][ T983] usb 4-1: Manufacturer: syz [ 2568.830276][ T983] usb 4-1: SerialNumber: syz [ 2568.892406][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 2568.893702][T16711] usb 6-1: USB disconnect, device number 76 [ 2568.899338][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 2568.911041][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2570.404530][ T983] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2570.426951][ T983] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2571.183930][ T983] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 2571.212489][ T983] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2571.232993][ T983] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2571.254566][ T983] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2571.304581][ T983] usb 4-1: USB disconnect, device number 107 [ 2575.230994][ T1219] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 2575.416302][ T1219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2575.434622][ T1219] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2575.491903][ T1219] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2575.514985][ T1219] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2575.554726][ T1219] usb 6-1: Manufacturer: syz [ 2575.572089][ T1219] usb 6-1: config 0 descriptor?? [ 2575.872493][ T1219] usb 6-1: USB disconnect, device number 77 [ 2576.111732][T28669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4552'. [ 2577.331546][T28689] binder_alloc: 28685: binder_alloc_buf, no vma [ 2579.763220][ T1219] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2580.040638][ T1219] usb 3-1: Using ep0 maxpacket: 32 [ 2580.080439][ T1219] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2580.088692][ T1219] usb 3-1: config 0 has no interface number 0 [ 2580.111154][ T1219] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2580.120809][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2580.150185][ T1219] usb 3-1: Product: syz [ 2580.154447][ T1219] usb 3-1: Manufacturer: syz [ 2580.159228][ T1219] usb 3-1: SerialNumber: syz [ 2580.201218][ T1219] usb 3-1: config 0 descriptor?? [ 2580.232520][ T1219] smsc95xx v2.0.0 [ 2580.640690][ T1219] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2580.703064][ T1219] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2581.123357][ T30] audit: type=1800 audit(1758799619.614:2829): pid=28715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4566" name="/" dev="fuse" ino=0 res=0 errno=0 [ 2581.982387][ T983] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2582.209910][ T983] usb 7-1: Using ep0 maxpacket: 32 [ 2582.229485][ T983] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2582.242260][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.295754][ T983] usb 7-1: config 0 descriptor?? [ 2582.764222][ T983] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2582.806045][ T983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2582.858859][ T983] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2582.878749][ T983] usb 7-1: media controller created [ 2582.981568][ T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2583.016611][ T1219] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 2583.061447][ T1219] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 2583.119447][ T1219] usb 3-1: USB disconnect, device number 97 [ 2583.136354][ T983] DVB: Unable to find symbol dib7000p_attach() [ 2583.142842][ T983] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2583.313163][ T983] rc_core: IR keymap rc-dib0700-rc5 not found [ 2583.319362][ T983] Registered IR keymap rc-empty [ 2583.350862][ T983] dvb-usb: could not initialize remote control. [ 2583.397834][ T983] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2583.457292][ T983] usb 7-1: USB disconnect, device number 9 [ 2583.586193][ T983] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2583.811436][T28739] netlink: 'syz.2.4571': attribute type 1 has an invalid length. [ 2583.852520][T28739] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2583.952606][T28739] veth6: entered promiscuous mode [ 2583.972470][T28739] bond4: (slave veth6): Enslaving as an active interface with a down link [ 2584.085392][T28747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2584.096308][T28745] bond4: entered allmulticast mode [ 2584.145701][T28752] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4576'. [ 2584.210054][ T43] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2584.310234][ T983] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2584.360273][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 2584.595935][ T983] usb 7-1: device descriptor read/64, error -71 [ 2584.832023][ T43] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2584.868094][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2584.892189][ T43] usb 6-1: Product: syz [ 2584.902448][ T43] usb 6-1: Manufacturer: syz [ 2584.918889][ T43] usb 6-1: SerialNumber: syz [ 2584.929879][ T983] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2585.070967][ T43] usb 6-1: config 0 descriptor?? [ 2585.077084][ T983] usb 7-1: device descriptor read/64, error -71 [ 2585.292067][ T983] usb usb7-port1: attempt power cycle [ 2585.303775][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2585.661226][ T983] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2585.680918][ T983] usb 7-1: device descriptor read/8, error -71 [ 2585.920071][ T983] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2585.940765][ T983] usb 7-1: device descriptor read/8, error -71 [ 2586.050276][ T983] usb usb7-port1: unable to enumerate USB device [ 2586.286084][ T43] gspca_ov534_9: reg_w failed -71 [ 2586.809968][ T43] gspca_ov534_9: Unknown sensor 0000 [ 2586.810071][ T43] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 2586.858715][ T43] usb 6-1: USB disconnect, device number 78 [ 2588.211469][T28787] kvm: pic: non byte write [ 2588.851751][T28792] binder_alloc: 28789: pid 28789 spamming oneway? 1 buffers allocated for a total size of 4096 [ 2588.893113][T28792] binder_alloc: 28789: pid 28789 spamming oneway? 2 buffers allocated for a total size of 5120 [ 2589.188726][T28799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 2589.520512][T25133] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2589.704385][T25133] usb 6-1: Using ep0 maxpacket: 32 [ 2589.721886][T25133] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2589.739818][T25133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.777412][T25133] usb 6-1: config 0 descriptor?? [ 2589.801935][T28813] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2589.808531][T25133] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2591.691957][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2591.692008][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.010537][ T5941] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 2592.035411][ T5941] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2592.153264][T25133] gspca_vc032x: reg_w err -71 [ 2592.158383][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.164658][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.191174][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.203478][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.218255][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.231974][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.243906][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.250322][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.255825][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.261854][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.267355][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.337403][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.362094][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.387807][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.421505][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.464426][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.490490][T25133] gspca_vc032x: I2c Bus Busy Wait 00 [ 2592.495839][T25133] gspca_vc032x: Unknown sensor... [ 2592.536941][T25133] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 2592.577226][T25133] usb 6-1: USB disconnect, device number 79 [ 2592.586512][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4598'. [ 2593.579916][ T1219] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2593.776396][ T1219] usb 4-1: config 0 has no interfaces? [ 2593.827883][ T1219] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 2593.854245][ T1219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2593.885375][ T1219] usb 4-1: Product: syz [ 2593.894307][ T1219] usb 4-1: Manufacturer: syz [ 2593.909810][ T1219] usb 4-1: SerialNumber: syz [ 2593.940606][ T1219] usb 4-1: config 0 descriptor?? [ 2594.741767][ T5941] usb 4-1: USB disconnect, device number 108 [ 2595.695206][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2595.701975][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 2597.210088][T28879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2598.501907][T28909] kvm: pic: non byte write [ 2598.540098][ T983] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2598.559512][T28910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.704728][ T983] usb 6-1: Using ep0 maxpacket: 32 [ 2598.724004][ T983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2598.765105][ T983] usb 6-1: config 0 has no interfaces? [ 2598.813978][ T983] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2598.829835][ T983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.846119][ T983] usb 6-1: Product: syz [ 2598.851054][ T983] usb 6-1: Manufacturer: syz [ 2598.855921][ T983] usb 6-1: SerialNumber: syz [ 2598.863754][ T983] usb 6-1: config 0 descriptor?? [ 2599.267495][T28917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2599.290435][T19990] Bluetooth: hci1: command 0x041b tx timeout [ 2599.930620][T28923] [ 2599.933005][T28923] ===================================================== [ 2599.939936][T28923] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2599.947426][T28923] syzkaller #0 Not tainted [ 2599.951853][T28923] ----------------------------------------------------- [ 2599.958778][T28923] syz.2.4622/28923 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2599.966496][T28923] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 2599.975216][T28923] [ 2599.975216][T28923] and this task is already holding: [ 2599.982632][T28923] ffff88802eb0f620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2599.991258][T28923] which would create a new lock dependency: [ 2599.997156][T28923] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 2600.004743][T28923] [ 2600.004743][T28923] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2600.014193][T28923] (&client->buffer_lock){..-.}-{3:3} [ 2600.014221][T28923] [ 2600.014221][T28923] ... which became SOFTIRQ-irq-safe at: [ 2600.027307][T28923] lock_acquire+0x120/0x360 [ 2600.031916][T28923] _raw_spin_lock+0x2e/0x40 [ 2600.036543][T28923] evdev_pass_values+0xb9/0xbd0 [ 2600.041485][T28923] evdev_events+0x1e6/0x340 [ 2600.046076][T28923] input_pass_values+0x288/0x890 [ 2600.051118][T28923] input_event_dispose+0x3e5/0x6b0 [ 2600.056334][T28923] input_event+0x89/0xe0 [ 2600.060675][T28923] hidinput_hid_event+0x1362/0x1ca0 [ 2600.065966][T28923] hid_process_event+0x4be/0x620 [ 2600.071017][T28923] hid_report_raw_event+0xe91/0x16d0 [ 2600.076411][T28923] hid_input_report+0x43e/0x520 [ 2600.081355][T28923] hid_irq_in+0x47e/0x6d0 [ 2600.085816][T28923] __usb_hcd_giveback_urb+0x376/0x540 [ 2600.091394][T28923] dummy_timer+0x862/0x4550 [ 2600.095989][T28923] __hrtimer_run_queues+0x529/0xc60 [ 2600.101293][T28923] hrtimer_run_softirq+0x187/0x2b0 [ 2600.106495][T28923] handle_softirqs+0x283/0x870 [ 2600.111349][T28923] __irq_exit_rcu+0xca/0x1f0 [ 2600.116027][T28923] irq_exit_rcu+0x9/0x30 [ 2600.120383][T28923] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2600.126116][T28923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2600.132284][T28923] rcu_is_watching+0x5a/0xb0 [ 2600.136970][T28923] unwind_next_frame+0xd4/0x2390 [ 2600.141999][T28923] arch_stack_walk+0x11c/0x150 [ 2600.146851][T28923] stack_trace_save+0x9c/0xe0 [ 2600.151626][T28923] kasan_save_track+0x3e/0x80 [ 2600.156408][T28923] kasan_save_free_info+0x46/0x50 [ 2600.161517][T28923] __kasan_slab_free+0x5b/0x80 [ 2600.166371][T28923] kfree+0x18e/0x440 [ 2600.170357][T28923] kobject_uevent_env+0x36b/0x8c0 [ 2600.175473][T28923] really_probe+0x745/0x9e0 [ 2600.180071][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.185445][T28923] driver_probe_device+0x4f/0x430 [ 2600.190560][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.196131][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.201098][T28923] __device_attach+0x2b8/0x400 [ 2600.205954][T28923] bus_probe_device+0x185/0x260 [ 2600.210921][T28923] device_add+0x7b6/0xb50 [ 2600.215347][T28923] hid_add_device+0x398/0x540 [ 2600.220115][T28923] usbhid_probe+0xe13/0x12a0 [ 2600.224799][T28923] usb_probe_interface+0x668/0xc30 [ 2600.230002][T28923] really_probe+0x26a/0x9e0 [ 2600.234618][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.239997][T28923] driver_probe_device+0x4f/0x430 [ 2600.245134][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.250636][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.255585][T28923] __device_attach+0x2b8/0x400 [ 2600.260457][T28923] bus_probe_device+0x185/0x260 [ 2600.265389][T28923] device_add+0x7b6/0xb50 [ 2600.269812][T28923] usb_set_configuration+0x1a87/0x20e0 [ 2600.275388][T28923] usb_generic_driver_probe+0x8d/0x150 [ 2600.280967][T28923] usb_probe_device+0x1c4/0x390 [ 2600.285912][T28923] really_probe+0x26a/0x9e0 [ 2600.290507][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.295878][T28923] driver_probe_device+0x4f/0x430 [ 2600.300994][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.306470][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.311412][T28923] __device_attach+0x2b8/0x400 [ 2600.316352][T28923] bus_probe_device+0x185/0x260 [ 2600.321905][T28923] device_add+0x7b6/0xb50 [ 2600.326343][T28923] usb_new_device+0xa39/0x16f0 [ 2600.331199][T28923] hub_event+0x2958/0x4a20 [ 2600.335716][T28923] process_scheduled_works+0xae1/0x17b0 [ 2600.341348][T28923] worker_thread+0x8a0/0xda0 [ 2600.346054][T28923] kthread+0x70e/0x8a0 [ 2600.350218][T28923] ret_from_fork+0x439/0x7d0 [ 2600.354915][T28923] ret_from_fork_asm+0x1a/0x30 [ 2600.359768][T28923] [ 2600.359768][T28923] to a SOFTIRQ-irq-unsafe lock: [ 2600.366791][T28923] (tasklist_lock){.+.+}-{3:3} [ 2600.366817][T28923] [ 2600.366817][T28923] ... which became SOFTIRQ-irq-unsafe at: [ 2600.379453][T28923] ... [ 2600.379462][T28923] lock_acquire+0x120/0x360 [ 2600.386651][T28923] _raw_read_lock+0x36/0x50 [ 2600.391243][T28923] __do_wait+0xde/0x740 [ 2600.395504][T28923] do_wait+0x1f8/0x520 [ 2600.399656][T28923] kernel_wait+0xab/0x170 [ 2600.404103][T28923] call_usermodehelper_exec_work+0xbe/0x230 [ 2600.410112][T28923] process_scheduled_works+0xae1/0x17b0 [ 2600.415749][T28923] worker_thread+0x8a0/0xda0 [ 2600.420438][T28923] kthread+0x70e/0x8a0 [ 2600.424591][T28923] ret_from_fork+0x439/0x7d0 [ 2600.429291][T28923] ret_from_fork_asm+0x1a/0x30 [ 2600.434149][T28923] [ 2600.434149][T28923] other info that might help us debug this: [ 2600.434149][T28923] [ 2600.444379][T28923] Chain exists of: [ 2600.444379][T28923] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 2600.444379][T28923] [ 2600.457685][T28923] Possible interrupt unsafe locking scenario: [ 2600.457685][T28923] [ 2600.466007][T28923] CPU0 CPU1 [ 2600.471370][T28923] ---- ---- [ 2600.476728][T28923] lock(tasklist_lock); [ 2600.480976][T28923] local_irq_disable(); [ 2600.487740][T28923] lock(&client->buffer_lock); [ 2600.495139][T28923] lock(&f_owner->lock); [ 2600.502007][T28923] [ 2600.505454][T28923] lock(&client->buffer_lock); [ 2600.510583][T28923] [ 2600.510583][T28923] *** DEADLOCK *** [ 2600.510583][T28923] [ 2600.518722][T28923] 6 locks held by syz.2.4622/28923: [ 2600.523927][T28923] #0: ffff88807aa5c428 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 2600.533109][T28923] #1: ffffffff8e2aa0b0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x37f/0x1620 [ 2600.542266][T28923] #2: ffff88807729a598 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x387/0x1620 [ 2600.551746][T28923] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2600.560883][T28923] #4: ffff88802fff64b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2600.570199][T28923] #5: ffff88802eb0f620 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 2600.579303][T28923] [ 2600.579303][T28923] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2600.589713][T28923] -> (&client->buffer_lock){..-.}-{3:3} { [ 2600.595653][T28923] IN-SOFTIRQ-W at: [ 2600.599815][T28923] lock_acquire+0x120/0x360 [ 2600.606353][T28923] _raw_spin_lock+0x2e/0x40 [ 2600.612861][T28923] evdev_pass_values+0xb9/0xbd0 [ 2600.619718][T28923] evdev_events+0x1e6/0x340 [ 2600.626236][T28923] input_pass_values+0x288/0x890 [ 2600.633190][T28923] input_event_dispose+0x3e5/0x6b0 [ 2600.640303][T28923] input_event+0x89/0xe0 [ 2600.646583][T28923] hidinput_hid_event+0x1362/0x1ca0 [ 2600.653784][T28923] hid_process_event+0x4be/0x620 [ 2600.660726][T28923] hid_report_raw_event+0xe91/0x16d0 [ 2600.668010][T28923] hid_input_report+0x43e/0x520 [ 2600.674858][T28923] hid_irq_in+0x47e/0x6d0 [ 2600.681205][T28923] __usb_hcd_giveback_urb+0x376/0x540 [ 2600.688572][T28923] dummy_timer+0x862/0x4550 [ 2600.695159][T28923] __hrtimer_run_queues+0x529/0xc60 [ 2600.702447][T28923] hrtimer_run_softirq+0x187/0x2b0 [ 2600.709570][T28923] handle_softirqs+0x283/0x870 [ 2600.716332][T28923] __irq_exit_rcu+0xca/0x1f0 [ 2600.722943][T28923] irq_exit_rcu+0x9/0x30 [ 2600.729198][T28923] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2600.736857][T28923] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2600.744894][T28923] rcu_is_watching+0x5a/0xb0 [ 2600.751498][T28923] unwind_next_frame+0xd4/0x2390 [ 2600.758438][T28923] arch_stack_walk+0x11c/0x150 [ 2600.765203][T28923] stack_trace_save+0x9c/0xe0 [ 2600.771889][T28923] kasan_save_track+0x3e/0x80 [ 2600.778602][T28923] kasan_save_free_info+0x46/0x50 [ 2600.785654][T28923] __kasan_slab_free+0x5b/0x80 [ 2600.792460][T28923] kfree+0x18e/0x440 [ 2600.798481][T28923] kobject_uevent_env+0x36b/0x8c0 [ 2600.805588][T28923] really_probe+0x745/0x9e0 [ 2600.812115][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.819420][T28923] driver_probe_device+0x4f/0x430 [ 2600.826459][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.833847][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.840717][T28923] __device_attach+0x2b8/0x400 [ 2600.847550][T28923] bus_probe_device+0x185/0x260 [ 2600.854492][T28923] device_add+0x7b6/0xb50 [ 2600.860828][T28923] hid_add_device+0x398/0x540 [ 2600.867605][T28923] usbhid_probe+0xe13/0x12a0 [ 2600.874225][T28923] usb_probe_interface+0x668/0xc30 [ 2600.881349][T28923] really_probe+0x26a/0x9e0 [ 2600.887867][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.895163][T28923] driver_probe_device+0x4f/0x430 [ 2600.902194][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.909566][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.916413][T28923] __device_attach+0x2b8/0x400 [ 2600.923183][T28923] bus_probe_device+0x185/0x260 [ 2600.930027][T28923] device_add+0x7b6/0xb50 [ 2600.936356][T28923] usb_set_configuration+0x1a87/0x20e0 [ 2600.943823][T28923] usb_generic_driver_probe+0x8d/0x150 [ 2600.951289][T28923] usb_probe_device+0x1c4/0x390 [ 2600.958147][T28923] really_probe+0x26a/0x9e0 [ 2600.964668][T28923] __driver_probe_device+0x18c/0x2f0 [ 2600.971962][T28923] driver_probe_device+0x4f/0x430 [ 2600.978991][T28923] __device_attach_driver+0x2ce/0x530 [ 2600.986369][T28923] bus_for_each_drv+0x251/0x2e0 [ 2600.993407][T28923] __device_attach+0x2b8/0x400 [ 2601.000277][T28923] bus_probe_device+0x185/0x260 [ 2601.007153][T28923] device_add+0x7b6/0xb50 [ 2601.013525][T28923] usb_new_device+0xa39/0x16f0 [ 2601.020289][T28923] hub_event+0x2958/0x4a20 [ 2601.026708][T28923] process_scheduled_works+0xae1/0x17b0 [ 2601.034267][T28923] worker_thread+0x8a0/0xda0 [ 2601.040856][T28923] kthread+0x70e/0x8a0 [ 2601.046930][T28923] ret_from_fork+0x439/0x7d0 [ 2601.053514][T28923] ret_from_fork_asm+0x1a/0x30 [ 2601.060281][T28923] INITIAL USE at: [ 2601.064348][T28923] lock_acquire+0x120/0x360 [ 2601.070767][T28923] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2601.077882][T28923] evdev_ioctl_handler+0x1969/0x1f10 [ 2601.085082][T28923] __se_sys_ioctl+0xf9/0x170 [ 2601.091588][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.098266][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.106069][T28923] } [ 2601.108745][T28923] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2601.117081][T28923] -> (&new->fa_lock){....}-{3:3} { [ 2601.122390][T28923] INITIAL USE at: [ 2601.126372][T28923] lock_acquire+0x120/0x360 [ 2601.132624][T28923] _raw_write_lock_irq+0xa2/0xf0 [ 2601.139308][T28923] fasync_remove_entry+0xf1/0x1c0 [ 2601.146071][T28923] tty_fasync+0x13c/0x350 [ 2601.152181][T28923] __fput+0x89f/0xa70 [ 2601.157903][T28923] task_work_run+0x1d1/0x260 [ 2601.164254][T28923] exit_to_user_mode_loop+0xec/0x110 [ 2601.171283][T28923] do_syscall_64+0x2bd/0x3b0 [ 2601.177616][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.185263][T28923] INITIAL READ USE at: [ 2601.189679][T28923] lock_acquire+0x120/0x360 [ 2601.196377][T28923] _raw_read_lock_irqsave+0xaf/0x100 [ 2601.203836][T28923] kill_fasync+0x199/0x4d0 [ 2601.210975][T28923] sock_wake_async+0x137/0x160 [ 2601.217917][T28923] sk_wake_async+0x184/0x280 [ 2601.224681][T28923] mptcp_destroy_common+0x152/0x320 [ 2601.232056][T28923] mptcp_disconnect+0x23d/0x700 [ 2601.239084][T28923] inet_shutdown+0x1c1/0x390 [ 2601.245858][T28923] __x64_sys_shutdown+0x13c/0x1a0 [ 2601.253065][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.259747][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.267815][T28923] } [ 2601.270399][T28923] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2601.279213][T28923] ... acquired at: [ 2601.283099][T28923] lock_acquire+0x120/0x360 [ 2601.287819][T28923] _raw_read_lock_irqsave+0xaf/0x100 [ 2601.293280][T28923] kill_fasync+0x199/0x4d0 [ 2601.297886][T28923] evdev_pass_values+0x627/0xbd0 [ 2601.303003][T28923] evdev_events+0x1e6/0x340 [ 2601.307681][T28923] input_pass_values+0x288/0x890 [ 2601.312797][T28923] input_event_dispose+0x330/0x6b0 [ 2601.318089][T28923] input_inject_event+0x1dd/0x340 [ 2601.323299][T28923] evdev_write+0x2fc/0x480 [ 2601.327897][T28923] vfs_write+0x27e/0xb30 [ 2601.332321][T28923] ksys_write+0x145/0x250 [ 2601.336835][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.341559][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.347627][T28923] [ 2601.349968][T28923] -> (&f_owner->lock){....}-{3:3} { [ 2601.355198][T28923] INITIAL USE at: [ 2601.359092][T28923] lock_acquire+0x120/0x360 [ 2601.365181][T28923] _raw_write_lock_irq+0xa2/0xf0 [ 2601.371682][T28923] __f_setown+0x67/0x370 [ 2601.377485][T28923] tty_fasync+0x2dc/0x350 [ 2601.383391][T28923] do_fcntl+0x1096/0x1910 [ 2601.389373][T28923] __se_sys_fcntl+0xc8/0x150 [ 2601.395540][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.401611][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.409062][T28923] INITIAL READ USE at: [ 2601.413392][T28923] lock_acquire+0x120/0x360 [ 2601.419994][T28923] _raw_read_lock_irqsave+0xaf/0x100 [ 2601.427279][T28923] send_sigio+0x38/0x370 [ 2601.433523][T28923] dnotify_handle_event+0x169/0x440 [ 2601.440738][T28923] fsnotify+0x1814/0x1a80 [ 2601.447071][T28923] fsnotify_access+0x22b/0x2a0 [ 2601.453855][T28923] iterate_dir+0x3ea/0x570 [ 2601.460294][T28923] __se_sys_getdents64+0xe4/0x260 [ 2601.467324][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.473832][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.481734][T28923] } [ 2601.484233][T28923] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2601.493085][T28923] ... acquired at: [ 2601.496883][T28923] lock_acquire+0x120/0x360 [ 2601.501685][T28923] _raw_read_lock_irqsave+0xaf/0x100 [ 2601.507145][T28923] send_sigio+0x38/0x370 [ 2601.511567][T28923] kill_fasync+0x24d/0x4d0 [ 2601.516163][T28923] lease_break_callback+0x26/0x30 [ 2601.521378][T28923] __break_lease+0x6a5/0x1620 [ 2601.526243][T28923] vfs_truncate+0x428/0x520 [ 2601.530932][T28923] do_sys_truncate+0xdb/0x190 [ 2601.535794][T28923] __x64_sys_truncate+0x5b/0x70 [ 2601.540838][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.545531][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.551594][T28923] [ 2601.553912][T28923] [ 2601.553912][T28923] the dependencies between the lock to be acquired [ 2601.553921][T28923] and SOFTIRQ-irq-unsafe lock: [ 2601.567428][T28923] -> (tasklist_lock){.+.+}-{3:3} { [ 2601.572651][T28923] HARDIRQ-ON-R at: [ 2601.576638][T28923] lock_acquire+0x120/0x360 [ 2601.582826][T28923] _raw_read_lock+0x36/0x50 [ 2601.588986][T28923] __do_wait+0xde/0x740 [ 2601.594799][T28923] do_wait+0x1f8/0x520 [ 2601.600526][T28923] kernel_wait+0xab/0x170 [ 2601.606546][T28923] call_usermodehelper_exec_work+0xbe/0x230 [ 2601.614102][T28923] process_scheduled_works+0xae1/0x17b0 [ 2601.621302][T28923] worker_thread+0x8a0/0xda0 [ 2601.627544][T28923] kthread+0x70e/0x8a0 [ 2601.633268][T28923] ret_from_fork+0x439/0x7d0 [ 2601.639510][T28923] ret_from_fork_asm+0x1a/0x30 [ 2601.645931][T28923] SOFTIRQ-ON-R at: [ 2601.649918][T28923] lock_acquire+0x120/0x360 [ 2601.656091][T28923] _raw_read_lock+0x36/0x50 [ 2601.662250][T28923] __do_wait+0xde/0x740 [ 2601.668087][T28923] do_wait+0x1f8/0x520 [ 2601.674071][T28923] kernel_wait+0xab/0x170 [ 2601.680058][T28923] call_usermodehelper_exec_work+0xbe/0x230 [ 2601.687623][T28923] process_scheduled_works+0xae1/0x17b0 [ 2601.694842][T28923] worker_thread+0x8a0/0xda0 [ 2601.701086][T28923] kthread+0x70e/0x8a0 [ 2601.706809][T28923] ret_from_fork+0x439/0x7d0 [ 2601.713078][T28923] ret_from_fork_asm+0x1a/0x30 [ 2601.719496][T28923] INITIAL USE at: [ 2601.723385][T28923] lock_acquire+0x120/0x360 [ 2601.729581][T28923] _raw_write_lock_irq+0xa2/0xf0 [ 2601.736088][T28923] copy_process+0x224f/0x3c00 [ 2601.742334][T28923] kernel_clone+0x21e/0x840 [ 2601.748402][T28923] user_mode_thread+0xdd/0x140 [ 2601.754732][T28923] rest_init+0x23/0x300 [ 2601.760455][T28923] start_kernel+0x3a9/0x410 [ 2601.766555][T28923] x86_64_start_reservations+0x24/0x30 [ 2601.773665][T28923] x86_64_start_kernel+0x143/0x1c0 [ 2601.780373][T28923] common_startup_64+0x13e/0x147 [ 2601.786882][T28923] INITIAL READ USE at: [ 2601.791209][T28923] lock_acquire+0x120/0x360 [ 2601.797734][T28923] _raw_read_lock+0x36/0x50 [ 2601.804230][T28923] __do_wait+0xde/0x740 [ 2601.810388][T28923] do_wait+0x1f8/0x520 [ 2601.816461][T28923] kernel_wait+0xab/0x170 [ 2601.822798][T28923] call_usermodehelper_exec_work+0xbe/0x230 [ 2601.830711][T28923] process_scheduled_works+0xae1/0x17b0 [ 2601.838253][T28923] worker_thread+0x8a0/0xda0 [ 2601.844847][T28923] kthread+0x70e/0x8a0 [ 2601.850920][T28923] ret_from_fork+0x439/0x7d0 [ 2601.857530][T28923] ret_from_fork_asm+0x1a/0x30 [ 2601.864306][T28923] } [ 2601.866822][T28923] ... key at: [] tasklist_lock+0x18/0x40 [ 2601.874559][T28923] ... acquired at: [ 2601.878369][T28923] lock_acquire+0x120/0x360 [ 2601.883066][T28923] _raw_read_lock+0x36/0x50 [ 2601.887741][T28923] send_sigio+0x101/0x370 [ 2601.892424][T28923] kill_fasync+0x24d/0x4d0 [ 2601.897011][T28923] lease_break_callback+0x26/0x30 [ 2601.902212][T28923] __break_lease+0x6a5/0x1620 [ 2601.907066][T28923] vfs_truncate+0x428/0x520 [ 2601.911754][T28923] do_sys_truncate+0xdb/0x190 [ 2601.916612][T28923] __x64_sys_truncate+0x5b/0x70 [ 2601.921646][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.926330][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.932395][T28923] [ 2601.934736][T28923] [ 2601.934736][T28923] stack backtrace: [ 2601.940625][T28923] CPU: 0 UID: 0 PID: 28923 Comm: syz.2.4622 Not tainted syzkaller #0 PREEMPT(full) [ 2601.940645][T28923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2601.940656][T28923] Call Trace: [ 2601.940663][T28923] [ 2601.940671][T28923] dump_stack_lvl+0x189/0x250 [ 2601.940693][T28923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2601.940712][T28923] ? __pfx__printk+0x10/0x10 [ 2601.940740][T28923] validate_chain+0x1f05/0x2140 [ 2601.940767][T28923] __lock_acquire+0xab9/0xd20 [ 2601.940794][T28923] ? send_sigio+0x101/0x370 [ 2601.940816][T28923] lock_acquire+0x120/0x360 [ 2601.940840][T28923] ? send_sigio+0x101/0x370 [ 2601.940858][T28923] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2601.940874][T28923] ? _raw_read_lock_irqsave+0xbb/0x100 [ 2601.940890][T28923] _raw_read_lock+0x36/0x50 [ 2601.940904][T28923] ? send_sigio+0x101/0x370 [ 2601.940921][T28923] send_sigio+0x101/0x370 [ 2601.940940][T28923] kill_fasync+0x24d/0x4d0 [ 2601.940958][T28923] ? kill_fasync+0x53/0x4d0 [ 2601.940977][T28923] lease_break_callback+0x26/0x30 [ 2601.941000][T28923] __break_lease+0x6a5/0x1620 [ 2601.941025][T28923] ? __pfx___break_lease+0x10/0x10 [ 2601.941044][T28923] ? mnt_get_write_access+0x68/0x2a0 [ 2601.941065][T28923] ? mnt_get_write_access+0x223/0x2a0 [ 2601.941089][T28923] vfs_truncate+0x428/0x520 [ 2601.941111][T28923] ? lockdep_hardirqs_on+0x9c/0x150 [ 2601.941130][T28923] ? __pfx_vfs_truncate+0x10/0x10 [ 2601.941151][T28923] ? user_path_at+0x44/0x60 [ 2601.941172][T28923] do_sys_truncate+0xdb/0x190 [ 2601.941194][T28923] ? __pfx_do_sys_truncate+0x10/0x10 [ 2601.941217][T28923] ? rcu_is_watching+0x15/0xb0 [ 2601.941237][T28923] __x64_sys_truncate+0x5b/0x70 [ 2601.941259][T28923] do_syscall_64+0xfa/0x3b0 [ 2601.941278][T28923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.941294][T28923] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2601.941311][T28923] ? clear_bhb_loop+0x60/0xb0 [ 2601.941329][T28923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2601.941345][T28923] RIP: 0033:0x7f765298eec9 [ 2601.941361][T28923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2601.941376][T28923] RSP: 002b:00007f765375e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 2601.941392][T28923] RAX: ffffffffffffffda RBX: 00007f7652be5fa0 RCX: 00007f765298eec9 [ 2601.941405][T28923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 2601.941416][T28923] RBP: 00007f7652a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2601.941426][T28923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2601.941436][T28923] R13: 00007f7652be6038 R14: 00007f7652be5fa0 R15: 00007f7652d0fa28 [ 2601.941454][T28923] [ 2601.941550][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.211137][ C0] vkms_vblank_simulate: vblank timer overrun [ 2602.510520][T25133] usb 6-1: USB disconnect, device number 80 [ 2602.707117][T28938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4625'.