last executing test programs: 3m36.636126603s ago: executing program 4 (id=5757): socket(0x8, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x1, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000003000b9a854b7cd141c3d1befcd4cc9e2596756ee38c6dd72f8898f5c37ac0682cf89228c38d17d181ec6e45e252a5663b05922515bb647b4a6ed92c928250143cdc75dd4f64ab653bd19039e1442422e78b6895ee08e9c7fa88d62bc0de7d5166da6e05ac4a102f8bffaa72811076b38b60397e71e116102358423011e451902784504fe68b33f43848062d753d333d2bf963b1eddd16cf83e", @ANYRES32=0x0, @ANYBLOB="b483ee4a9a081dc46a1151090100"/28, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000008, 0x80010, 0xffffffffffffffff, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000001080)={0x1}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) 3m6.061833633s ago: executing program 4 (id=5772): syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002d3cbef201e040500e0010200a06011e600"/36], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000840000000650500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffd, @remote}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[], 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000100)) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3fc, 0x10c, 0x10c, 0x210, 0x31c, 0x31c, 0x31c, 0x4, &(0x7f0000000000), {[{{@arp={@multicast1, @remote, 0xffffff00, 0xffffffff, 0x10, 0xb, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x10, 0x8, 0x4, 0x95, 0x0, 0xa001, 'wlan1\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @remote, @multicast1, 0x1, 0x1}}}, {{@uncond, 0xbc, 0x104}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x4, 'syz1\x00', {0x7}}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffff00, 0xa, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x91c03bc221795334, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x1ff, 'syz_tun\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @broadcast, 0x4}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x448) 3m2.961053161s ago: executing program 4 (id=5887): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 3m2.756102373s ago: executing program 4 (id=5888): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0xfffffffffffffdb6) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0xfffffffffffffdb6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4e) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) (async) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@struct={0x6, 0x7, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x1, 0x3}, {0xf, 0x3, 0x4}, {0xa, 0x5, 0x9}, {0x5, 0x1, 0x20000}, {0x6, 0x3, 0x76da}, {0x10, 0x3, 0x6}, {0x5, 0x0, 0x3}]}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @fwd={0x9}]}, {0x0, [0x0, 0x5f, 0x30]}}, &(0x7f00000001c0)=""/14, 0xad, 0xe, 0x0, 0x7, 0x10000, @value}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@struct={0x6, 0x7, 0x0, 0x4, 0x0, 0x6, [{0xa, 0x1, 0x3}, {0xf, 0x3, 0x4}, {0xa, 0x5, 0x9}, {0x5, 0x1, 0x20000}, {0x6, 0x3, 0x76da}, {0x10, 0x3, 0x6}, {0x5, 0x0, 0x3}]}, @float={0x8, 0x0, 0x0, 0x10, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @ptr={0x7, 0x0, 0x0, 0x2, 0x4}, @fwd={0x9}]}, {0x0, [0x0, 0x5f, 0x30]}}, &(0x7f00000001c0)=""/14, 0xad, 0xe, 0x0, 0x7, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3m2.391780292s ago: executing program 4 (id=5890): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) io_uring_setup(0x765b, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x500, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m1.039118915s ago: executing program 4 (id=5894): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) io_setup(0x5, 0x0) eventfd2(0x0, 0x80800) (async) r1 = eventfd2(0x0, 0x80800) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/129) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xea) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xea) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x9, 0x40000009, 0x400000000001, 0x6}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[]) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES64], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES64], 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x282001, 0x0, 0x2}, 0x18) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x41004812, 0x5, 0xfffd, 0x0, 0xfffffffa, 0x0, 0x0, 0xb5bde87f9ff44b97}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x41004812, 0x5, 0xfffd, 0x0, 0xfffffffa, 0x0, 0x0, 0xb5bde87f9ff44b97}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) 3m0.629678308s ago: executing program 32 (id=5894): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008880)={0x2020}, 0x2020) io_setup(0x5, 0x0) eventfd2(0x0, 0x80800) (async) r1 = eventfd2(0x0, 0x80800) io_submit(0x0, 0x0, &(0x7f0000004540)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000080)=""/129) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xea) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xea) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(r4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, r1, 0x9, 0x40000009, 0x400000000001, 0x6}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[]) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES64], 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES64], 0x0) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x282001, 0x0, 0x2}, 0x18) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x41004812, 0x5, 0xfffd, 0x0, 0xfffffffa, 0x0, 0x0, 0xb5bde87f9ff44b97}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x41004812, 0x5, 0xfffd, 0x0, 0xfffffffa, 0x0, 0x0, 0xb5bde87f9ff44b97}}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) 10.128066212s ago: executing program 3 (id=6634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000380)=0x5cd, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003280)=ANY=[@ANYBLOB="301300001500200027bd7000fddbdf250ba489000100c8afa4a5022f96e7ec6ba5a284abc62cc71ae6ead2969005943bdf70531047c843039e728551323bbc16daa1d3554177185269f345d27d2967212e637fefb0e07dc5258fd016a6dc13c2b4e62369666c8cdd12e5d79eede318c317eb14de28e9c3aca23dae2fe3249fd56925918eb75f4974a37ca0d66ed3283fa77a9e2f27a2b0b9ce9b9e000000c80001007e75e61b77db6e2b6fc368be14f46b9e421ccc78b731ae0a9f376de7c7764ede1bda29a910a5d8521e85287755bdda192629171eb1823c61063b70ba16f32c9bc4b13e56bbdedf2efecd17194664f65ae231c75273d8bc84c7efbc69437e3dd25b8b41f54479906f66ceb0112cc35fe5c0bb6f7baa9652fa6ca22bfb614ff940f9e52af4759bb12a77c16c09dbcf805d99ec700ce2dcd753241b39e28fa3f985deb212b9614c969b33c302f325ded0f4cb4bfc6ba207088a8ab5895e2968e50f4af77c5e041001008de6b9d25d13ce4cdc09d90e151413cffe1700a0787bdd67e8709c89ae9fd4ea532839ba8e5eca42f0d1dd72a2cbf692a1cfa45ab10266458704372200627bd2078f76f0b99308827fff9714b930598c9bc50f5b9948bf1e64f68db7d1174883def93dd0ab367377ee1b5067636fd2512fc43a604cc58369662ed94f079f75a77590d55e6e7c88d712ad981cc7a8faea04ee3c46203870c877d94a8df3ff854540b30a0124b3fec89af06747992153a29a131ccab736f06a0c4f3dda5e36d0c9db0f6ae5aca4ce3c0e6148874a348a2e61b33f8bd04f3ecde07ca13f00a1528949414da8fdf9390979875c0f2f521bf657f692657412161398f3a2089471b50a8edef3b8e1bbe49c4602277e52576c43e774d22578ff987a1209d0f4f4ffe6a95f03ab3c7fe8cfeeaeb1b3a0282124251c8fe450942f321f8367ea30db9510c90fcb36c689158156f66882fc488f329178e3a339a4a0b672e8ec8c75279f08f8797eddd273855c9d464db93a5a0ec5786702981239d1c8022f4d65c50ae00fa9bf03ed7a08c764b29109df921ea23db1ae23c7da22edf16ff28a880748376b63a818e3a7e563543d412f0bf8989337f32c082958df408d2771aa954099b7a77c19f0d0f7e4de5f0788bed17a3c65724083f103978070550d93ca4027b64802a248a71835e6b281051f54545ec3c7900ff28dc08b7a58847affbe01ec7e9521cb0884b9f24a35ce858f4389f5030113e005ef2decf9dba00e90bc9dd8a8ca18d94cc244538211ec0886f4e5a847191b1f8cefa7a5c25e9be1a710fd493b5ce42719426db444607a2f8b266ff2ba664a9a2739341bd6d30cfeb5c41634665ce0bf7831b6004d73ec937bc1faa1893b6f060f7a1e554d51ec450ee3d668d92ef818a0a0bd26710413b8d30cc007900173b178635e9e7d6e0decb7c82cdff4997444412514806d2a70716e8a9f4238a1c30628b7747df0a482b834cee6dc0fe01615ed6ad9d48f53b77c43c212f9af6c08d74154501dbd6748c635620dd819b10ce7d1594f7213094768ba2be608cfb032069184ee386d577bf9df69e1485e490dd1c2fd8ee43f79211f6a67059a0ed238bbdf244f70283a9fdad5cd1ee82bd3caeef06fd5da91c817af70d943e70d33f87a8c8b4d14a2c0dfcc842834e6499aa26461da98a49ffb671469041f2d9c56523c1daba7e2c65a7413222e2e03637070d9781bf215d6ba6f5300dc43688bd29fc7344a562effe5edff9c4cb6eea070e4ce0abbb69e3e1c3f9bf6c183ff89fe5415a784f05256a3249720bd3c9b9da1cb837dae2ae7b3fec4035439c4746f272bec28e45eb920239d585dfaffc7e1409a3d85058ae8024c42c905ed0841ebd5597e18867d12a55755e6caa9871dd9bf15c8da2ecf59e52219d9cf15f42c7a5763bb0b9833735f05783af343332f3f3b13db1f752cd39cc294bc28ea627adc963d3ad9eb566e24cca193ca00a79f52b54f52acb01c334f87412898a6475a4d9e134ee0f307564ae6d6ab79b101f9300fd54122a4c133c724c6ff20d987f8aedaa995f2216513fd247667d36af09ec3bd225ac0d69df21894e00356ab233104765076c9a608ecf077c9000f9eb4eb32a4abec89789ed940eced74f482f4fd08bc8f71beb26179fcdafee6abf40bbf5c6e256e58153835b2d0d2afbd8fb0f702e73bf2bcb1ca00bac0fd79c86a6d2ad04fe7a31edfe5ac2c0db7181a579c89025147aab8a35bd839ef9250acdc56e26fe4edf91ed5acee17b90f28f38ab1171f4c718e2c38cd4cc7f20ed1a1fbf4e9c6ef9ca4e01f19a19ccf76e7c492856bd103423c9394f31c781e7bc98b0fc7725af2ac2aa4b2c0e5c1dc49e455dcf9570c5b8d90a6fcceda9a974d778aa67f610c5985e5a82f651b5f924f91d760bad1aa621666c510dd2f8a421da5680222e541bbab6b938006a48c1e43e0cfd804ff70fc79017f0f47c62cb76fb5d074934e04cf6540e69e8099b408273ad95385c11f2b1e3878d78d419a20b8729c28683e98ab20f14b5656007464ef68eacb22a816aeab431afff7ff8f27e3f5ddec93136773c1b40eafc7a1bb2a14fe560bd2f9fd70161bee750ee4911a0c5365d0463df9e71f52656f4299f5788a891230dce0e0c4fa957d0f2803923b5030e62f264eb8ead0ee3c561f804b8cf5620a666f6410f1dcc4893fd939c53928d3e1c45a67ac6b40c7421d7cf669bae781b69450b247b370c4b021c5663d16c3138edcfad216212367bf7555b3fcb4701d8c7fd3f9b86f14907ddba1c520d8cd42d40a90fa0cbe3e35dcf2e479f21fff458fcb7cfe7b7ff68457e9ee2b712db10ee0767757b5c04e25b29c43964d6ee0075c17cfe1ed181e4634edf4cb808bb3a1ebdb4cb5d1f46c41dd3a0a5465601fd94c2320171841401313b1695325eaccc2d2db69e66638096c19b8f10f94702a39a0001e978ab8e98a5b169bb818842a239c0af6059ea95ca0948c4e4ed07e8e00d65ace4ef98959de04c7e83e73f45f367e1ef0384f063352aab644dbd365ea0ebf97272836f4dc8da00757da414805bdcc789140b4f794faa46eeb06477c52432b7e4e5cb8f415f86b9df6b6e5fb0b945d0d76c09735ad8f9a5d10dc1f4c3fb69e3ff4191f87af4f9f8cc11da50a851219816899e95414f4b0967c3e9597bf92d55a7661fd4efad1cacf0e5c986de88a55573ed7f127aa9a3718cfb007bb1206ebdacd83b24251f5228076dd2d9be56aaedb79db3a72fdc6769a08545ed01c8a02a5acf718e75b3251bb699597820588db6e0862d3c3add3931956f67269cb9b9ad7dadae2df3a897c617e1ec70325fbae344f2267f0f8d028dcb050c13fbf047721cc1630bde2d57721cde86f89f12a293f9867f91a7ba4345bc85ca3625c4a01a0c606e7fa494d52a1b6d402b65ac7fa52ab8e9bf7a9eb3c68a8120455465cc99f728eb0cb13836fb2537c2053cfb71471bb4844d8467b68ad37eb2f70841dc53aed578591ca2a9ec260a217707d26e6c48dad03f076eca5bf0d0ca99a6c907889e5798ac5199e3489d04177bd6aa1572fc122cc3e163def47c577167fee9f1ea509858b62ec5bbcfc7e0cc6cbcea0e3e5ade4a5d5a9106a783372919eb872e981d4314b4f037ba2175f292c2b13f195929fb8b5571d372435345bb596c89554576d84e2c94805bd8244c8242377ac11122e909a3105ec25bff7cb8ca70b81127d163c3b85372dbd1da831db74e1aadfc4d79d0a9dfebf0f827632498e623d4e4a56b1a83a2d8e569eaeed476f252e256b872c3ff066630544b14a442cf0fac818ea364684810402d720c0972e79e366c0a411380c6ba80fbe0124fbaf54a512e3c0b4d29db64a4350ecabe08ea6023bb5723c5db8e474e1e39d3407027e3dbd0decc3a1e07d17f4fc994f55af58380909c99a711fbfbd0c1f8f17beca01961fa58c7a16e23781dae5fdaa7221144cad9466a1bb38f187b9ccd99e5906826ce0d7fecd6c5524499d2c96d87c17b1d1f4521abe866044b4111f56f4c0ebbee84b0cf39d07b028e7063392cdc99e201eec922e5eac8c64801e8c324c83362a6286df96e0d2eb26286d9b9c25667212ba5c8c5950af394cadc7c6720601f8ffe3508bbbf08466d0507a79180db54e173dac57ac2975560ec0a8ac942156130abf0600466a0c7a79e3c48362794e69279f2f173b51273f54aae0b228e1005632f00433d6d5ce1ae2e3c9dda770adecd97de4ab4abace4d41eba50bac8f0e3cd8a8a302bc5937a705361697b79feb61ca7890689c87bb4acbb97f9c0f9da49c0b21d87c98796584a22f6f609bb06b8d821608daedd0525d5e9f2e11d12d1af73fd9869aeceb3385639049196ff10ed62c68316d8401bde342ca08aa393f73e9a7295bdacba483a0fe783ee261cdb22b8c15170c2ec0db1d08002ecbaaa84cb73e3ec3f617bac199e7207d9d99f91852d70e4834c43cb57cfc90a0a00e2ec31fe4fc3b31bda4a0b2b4eec527f09f3214e99575f0447147a29df486afd5cda37ee46b9519dc8ff2be5ccb42ec74b845cebf1cd23490e19b12679fa2bc4fef215aeb3a1d455477d75e6c12c888e40356e10112b4dcd0e073cddaf2654010f0ff102928c83b5cf3f4fbdb988954f9f4ff336bfe142a2ffc4a9e0b0b7bc7e2fbccdc5c92917a9fe20c3c4fcd91a05da6cc1e7f72e17c8dd086d02cb2ed7084975fc03394f9c88fbf6d09a8a1ef1bbcb1bbc1f97b8ff9d74aa317fa4474e74e76f38c13ea761d3126e23afa36c6a2f98fefcb22b13324743cc4425d0b97cefa1f98b4c1acbaa48745a2129ec8fd2c761dca6003ebd32a98d3f2b320a0ed563bf2ff9abfb8e546013092dac599bd36798b4574f1d94f56ef4405e466c60d1b1cb08bf0fd34a1688d4c227089a427187c9e6cc39cd1fdc478881b573e7a577539f8ef6f3146fc681562ccc13ad43a3fe1b661331448c6769603b0230b34d93b8fe5fb56c4519d70cd5546431d546c7d4dc53f164ed67f7464d24a02bc83441d764f0709f271fe5a943c76c481cf8fdd403165f37b8caacdccc62261e72f80b9825efdff0f84a5b7515beb68b3f68f95e03283393d183f44825d0daff44ead9caacbee94699c7e4b520ef2a94e10dc2b8739d8bd05a35312a4ec71adf37ad3d6409e2bfaedfa2dcc9dd9c16672cd6b337e65ac1acac986a874d9a301b1cddacf5990140a3a8a86c015cb5855446aba5c4749c92c03f0266a48be13d4a4ce44f776ec74ed9e4cb31afb73e4035da4a86ee9cedc17051541d02869690f87b86fd2c1c955aa0260c7157e39220377bb17f06e524ac77d797ac0a5cbdec952db74496da5d64630507a841b37b56512d15bc9dac1fae5eb3a42e1e114f7e437a404414bf0442481e4ef5b035790a6ceff70b9d5bb1ec726c5a68f3b2f4edd63248bdecc618b502e98d2fe44a4248f73afb865bcd840fe11c3617598c429c55b19369f86e043ad6105539c377759e8477ea2a690aafe59937dc6ad489dacfdb5c9d8bf2753153450971ef2f5b029c07b841a307c0cbdab6dcf76ba9c24a9ee19603defcade25e0afc4921668e1e34ba2a1e8978115510e85c9835d0ab9e2529ab85108d33bd6dd167a0d57902bf80e0b6b703e8665b8969ed2712757bfb5420ef473a38d81839ec4c0b9c816cb7c08d885e4e5f08b2a5996d68b5fe871ec42a4651253e36dec0a7f63c07bf137a5a4630f12edd4b31ac71f7fa66ac9201c1c2b1fec777a65b1f8198da2d02e038581885fbc81e0b7b4e1f57fa867e41faece212574aab1c52a4f0e222dbbf208f089b29e636d952e95a099f40f6801f5c730c34dea474bb82f0550ae342ecbdf07461ac7968365c5f69183e17ab86e817a156c8c9b18f698b4f1ca91d75beabe612dcd44a619f18c4691c0fa64ebb8181210f0fc3d9c8e790bcc2f1287c816888d5de4a8f51e224d1763f9ee0815737591d899503d93626faabbaa0415d66bfc63306377e3d842abf9dc80698db24402d8ec88de41b0ddb260a591cb9e0e001826270f7928f1083a9c4d684b682da2b9cc2dd6b2543e76059664e31c96a02a41c630ad5fc15a9dac99f0fba5cd093a050b4a72a70789da49a0b814d29aa1ddad2479c1d48ed646577db70d5b5dca3997130c39f8317d4a3562b742bd9427a00723268a3916e2fcfc8ca8c889e3d286d1d1426526e7d0126b74c6f013792aa0b75ad9011f17c408459d1b3f92901543c2c43fea1e09e174a9ea7875733d7e10fe284814dd4571d4145fdab67021138a389cc451580400010004000100fe00010075ce781d9090881f8d3f4de8761b477bfe65fb79694d8b3f8dcd5ed9563cf6cd3d60c83d3871b15d7318f918f93c370a2c57e049739f5c83636dc25470a40ebebd9a5dcd7407863b32aa073f874c69f2cf2e1b4b11fa61d10f85046ecebe49d653c8131b2d6779a15a0d9461e8fe6895957389b06a09fd5e34321317b5e3e68def92e03e8a85f9f16093ef326e34771c57c9f54177c6237496b6a0eb921ede2209748ff88dcd1c7c988d49c78c9d8cfa50e9060c0c8904d4092c7534527714bc832c339445967d424bbcd485f9ed969229ba3db7a8e163be19c8434c9ea79fe999298bdff71eda229ebfcd496e8988f736fe636efde42b131b7b0000bb000100a1111d766939fbfb9e560d6ad3aaefacb3a4d3c8cbc4bf53ff958667af0d9fac41f5f67f5be405f9c107e2cb65f155ed66f15192cf10cd9b1cd446c75ca056289773e8a144d88a159b757eb250ae3f9d38c9678de0fbd09cc3bf08ece87d6b8c40e792143a1a0fd446a15d9ebe0c52ab45fd83be20433de59dbd3df7d9ccd7aa418e4f0a1af7bb41600d1e9cf5f794c3404f3871092894fa0a87bbfeac96268056f3175d8cdff4c52d62e3769de75c54279fd87314246d0000001206ac9d562cd57c45d025ea1ffbe0cd9c8c457b29c1e65883856c84f3c3a72cf7e1b7b2e5edbe27754986d82316d70d8ae3649bb3"], 0x1330}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="08003f000003"], 0x2c}}, 0x0) 9.895884328s ago: executing program 3 (id=6638): getpgid(0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_procfs$pagemap(r0, &(0x7f0000000040)) r2 = open(&(0x7f0000000400)='.\x00', 0x1, 0x112) open_by_handle_at(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000fe"], 0x191300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)) openat$ttyprintk(0xffffff9c, &(0x7f0000000080), 0x20000, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000003c0)={0x28, 0x4, r4, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000580)="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"}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000180001803000000000000008000f000000000008001000ff070000000000005e752c8cfc7ef24f279200000000"], 0x3c}}, 0x4010) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}) r8 = getpgrp(0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]}, 0x50}, 0x1, 0x0, 0x0, 0x34000840}, 0x1800) ioprio_get$pid(0x2, r8) 8.930045038s ago: executing program 3 (id=6643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x3) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000001c0)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x101201, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x10b200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1000) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) 7.272109564s ago: executing program 2 (id=6648): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40100) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d075500010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00010d000000000000000007000000", @ANYBLOB="01a044daf0e128f9f682a7c304"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_io_uring_setup(0x466c, 0x0, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1335f0a6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 6.710605379s ago: executing program 1 (id=6650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x21, 0x6, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) socket$inet(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="ed"], 0x20) 5.884127732s ago: executing program 1 (id=6651): socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) keyctl$revoke(0x3, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044565d, &(0x7f0000000280)=@mmap={0x8, 0x1, 0x4, 0x1, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) r6 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.677351949s ago: executing program 3 (id=6652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600207c014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dc", 0xbd}], 0x1}, 0x0) 5.419641374s ago: executing program 5 (id=6653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)='k', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001000000800000001e89fbdcdc1ea55b2c06d58eacf919ade3f0450897555525fdcbb9c9b662190008f3392b31eb76c61698cc7b3c86ef6d9b295751c5a672af6b6d8690ac9d6a1a41cafe4b1e2ca284be0e37396a4902be489d07ee935cfc3c0768f1134304616b3101c596f3dae0553407485284a85a1dd19abedcee07a3ebcca1c53211b0f43b08fddfd75b6972364b5ba19ccf35378219386b6c23e28104", @ANYRES32=0x0, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000008000000000000000000000b7080000000000007baaf0ff00000000b508ffffff1f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.307102792s ago: executing program 3 (id=6654): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r0, 0x0, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r3, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x80000000, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback={0xffffffffffffff80}, 0x4d2, 0x32}, @in=@local, {}, {0x5, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 5.148120377s ago: executing program 5 (id=6655): syz_usb_connect(0x6, 0x2d, &(0x7f0000000cc0)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x8000000010, 0x2, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000500), 0x842, 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e03, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) 4.746039887s ago: executing program 0 (id=6656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="05003300af"], 0x24}}, 0x0) 4.631922792s ago: executing program 0 (id=6657): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0x6300) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) flock(r1, 0x1) unshare(0x8000480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004c40)=""/4098, 0x1002}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000700)=""/216, 0xd8}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000000640)=""/113, 0x71}, {&(0x7f00000018c0)=""/145, 0x91}], 0x6}}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4.42810847s ago: executing program 5 (id=6658): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2dc, 0x1b4, 0x0, 0x148, 0x1b4, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x338) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000002a40)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) syz_open_dev$vim2m(&(0x7f0000000340), 0x5, 0x2) 4.308108287s ago: executing program 1 (id=6659): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2b00, 0x0) ppoll(&(0x7f0000000600)=[{r2, 0x1400}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) r5 = socket$alg(0x26, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x5040}, {r5, 0x2}, {r4, 0x2}, {r1, 0x6}, {r2, 0x2456}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x3, 0x5]}, 0x8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB='MIC \'Synth Capture\' 00000000000000000000\nSPEAKER \''], 0x4e) r7 = socket(0x1e, 0x5, 0x0) write$binfmt_misc(r7, &(0x7f0000000080), 0x2000011a) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4) getsockopt$inet_udp_int(r7, 0x11, 0x65, &(0x7f0000000280), &(0x7f0000000300)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c0001800840154c61ab6f00b1f984dda09501c3bae9c3205dbd5b584329e73bbe2d4635608aed3f37f00b89e1d09d574cd1d970920a0afea00ab9fbda9bde5dab4e6f6268f6b2ee6092297c836319533f81d2bde5b743ece9dc9ac5789dba01c85d2fba79304ab359e0d74e136d36913c09f31f4c87cd76740fd79f2a"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) 3.77885989s ago: executing program 2 (id=6660): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x2004001d) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) poll(&(0x7f0000000040)=[{r0, 0x15}, {r0, 0x400}], 0x2, 0x483a4) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x244902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x4) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040043000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000380)="a38d82938a963464c279a13e8b37db261b2d2a9bcc521af4c1f2b1250f8ca23451bea61b9da509f4a1e09bf5c46fcda6e93971dcadd24636327c11cdc143cf0a17949f7ce36758ed5236db1563b37fb3663037d2748f88e51699417605745df19b5e7f33377575257b1c37d0", 0x6c}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) unshare(0x2050000) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.667370683s ago: executing program 5 (id=6661): syz_open_dev$vbi(&(0x7f00000072c0), 0x2, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r1, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000500)={r5, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x9, 0xb, 0x1, 0x5, 0x9, 0x800, 0x7, 0xb00}, 0x0, 0x0, 0x0, 0x0) 3.630677016s ago: executing program 0 (id=6662): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe64, 0x0}, 0xc14c) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) openat$cgroup_root(0xffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000680)="4d5a22cf2871f0d1e18f56f71fa9b76f788d1fb355400ba5a9244fd4ce4778576015f1205c873d505d18c2addd3233c7f9b79b06307d3ca3e1314c89d37c73d7275581b1d1ef92994b0c4e08b04377e6f98759993bc53105b2755704a0efe69236e867b29bdedae7290d31c7f225ade7499fdb491c5a7d62a422e3d2e89fae52f39bf21fb64d3e76000000000000000000000000294fb8af781d23dca2ca88a1e7d92b65f19e9d0fd1db589c346555edebdd45fb97235bf3673811b0b775019dfba3939ec38801913af71b7bb961", 0xce, 0x0) (async, rerun: 64) r3 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000480)={r4, r2, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={'blake2b-256-generic\x00'}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000004) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf250f000000050030000100000008003100", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4c800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='source', &(0x7f0000000140)='%.,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd\xfb\xdee\x81\x80\xff2vw \xb4^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x91\x82j.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+\xack. \xf9\x06\xcf\xb8\xe5$\xee\xb3\x01\r\xee\x8e\xc2y\x80\xb2l{!w\x17-!\x19\xd2;[\x91T\x96\xe8/\xad\xf3Y\x18\xbf\xcb\xbb\x8b\x847}\xc2P\x02e\x9e\x99\xdeU', 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0xffffffffffffffbe) (async, rerun: 32) mmap(&(0x7f00003bb000/0x4000)=nil, 0x4000, 0x6, 0x132, r5, 0x39e26000) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 3.415028366s ago: executing program 5 (id=6663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0xfff5, 0x1, &(0x7f0000000880)="d4"}], 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x80000001, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$int_in(r5, 0x73, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x42865d66, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket(0x2, 0x800, 0x0) write(r6, &(0x7f00000001c0)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r6, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x5f, &(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x0) pipe2(0x0, 0x0) syz_open_dev$evdev(0x0, 0x20000, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000000580)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES8=r0, @ANYRES64=r7, @ANYRES8=r7], 0x199481) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 3.318414468s ago: executing program 2 (id=6664): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x545440, 0x82) syz_emit_ethernet(0x22, &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)={0x0, 0x4, [0xaa6, 0x325, 0xb47, 0x5fa]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r3) listen(0xffffffffffffffff, 0x400005) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0100000000000000280012800b0001006d616373656300001800028005000f00020000000c0001008fffffffffffffff08000500", @ANYRES32=r5, @ANYBLOB="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"], 0x50}}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000340)) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r7) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000200)={0x2, 0xa, 0x2, "3205c546e8b51e04f4bf40070700", 0x31364d4e}) 3.316068771s ago: executing program 1 (id=6665): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x60, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r8, r1) flock(r1, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1.804261453s ago: executing program 0 (id=6666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="05003300af"], 0x24}}, 0x0) 1.80342961s ago: executing program 1 (id=6667): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0xb, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x5, 0x3, "3fb5bc75ff36be8e3d36440bb8f2700d2daf465d8746c981b6b3d9120c864a9a47817e3ed7f316746ac6417147631141feeeb39b734b9eef04d9c8ea486ef2", 0x400000c}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="c34037a642b5a52e6aabe7371bdcb42054693ef4b433a5609fff0ef54e944c21def9d985d0a922acc4a1573dfad062ee9c66a1c767683f92a5c821a759afa012c1f60d802695fef235aa86201702c85bd990b3ec", 0xffffff85}, {&(0x7f0000000680)="e90162ed04b4e8f556e99d0c37a1a2cc8918b74592c602233f527a99ce94ebf07ee231df955ced8b841702d0b88ab2136125ac2cda7b648ea456c3c1ce56fdbb2195214f26e999d042", 0x3a}, {&(0x7f00000003c0)="fd172ba2f05ac5f4f1cf", 0xa}, {&(0x7f0000000400)="7cfab11d71c57a", 0x7}, {&(0x7f0000000440)="4e1cebc633e6e2eb0da1babb896b29ffd939e27c3d57839baa2f2bc48ead65df0e7f374af80415c0314d0584eb15d4b6cdedae9ebb67c55ba1193906b3d1312cc7bc65370b7dec092b79d071d4c61ae07724ce45c309a59b3c9c7efd2257c1ce7b2fd363363040baf9ae974bc6db5ad5b4ca90a6f4c7aa9d", 0x78}, {&(0x7f00000004c0)="f02d23c12fa046d3c73d5c91d5cda4a4ec254e", 0x13}, {&(0x7f0000000980)="9434fb3d87306f9df147671c2aa93c5078a08ed0f2ec36f45b8a944d1f30c209da7f760d21bd9871a67bf857fa12daef1f4abe0d089573da57a0b5164ef43f0599bc91fdcdddb597be1280b47d0faf548e7d286c4e0fcfe05fdb8f8baf17a7b2332b56b4dafa525fbedab230a4d223cd3169c32d195204509d7ba043193646b82ee113bd765dff5a05e58e2ce312654fb7c6a23463d0c9a2f0495bd2220a24dafed2c8c58b7d0763d6dc058ceb435264498d1af18bc465f15caf722bb8589222cf9e5ca86f47b6265939f0368c9aa1b46b1f5ff9c558840e7192c9131ac75c1615ecb736373af41614f22e4e5b02c0d81d257b0fc4f6291d5887eaf8fb6df1b1b20d8b3ca5fcd688f604e5fb0dcbbfff9554586b24c3be617a10605c44c0f4607c946203fc34470b0309bf090bf90b339ea2def67f099e2aa3daacdea6aa564bcfa36cf04978b2", 0xae}, {&(0x7f00000005c0)="9382ca21fc29e440dc37abadcfec02de42c0d2a2e2d0a0b59fb91252b95f2423e673085a1fce76e8db34ba9757f88d0a6c09a741e9322b06dc47912363a19f3580448007d430e8888f956f6bfbb44515b19908afa3f5e60ea2939fc1c10bd39e990d", 0x62}], 0x8, &(0x7f0000000800)=[{0x10c, 0xdb, 0x7, "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"}], 0x10c}, 0x0, 0x48080, 0x1}) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d3c473"], 0x0) 1.54695549s ago: executing program 2 (id=6668): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x43c, 0x2a8, 0x2a8, 0x43c, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @dev, 0x0, 0x0, '\x00', 'veth1_to_team\x00'}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x28, 0x0, [{0x2, 0x3, 0x3, 0x6}, {0x7fff, 0xf, 0xe, 0x9}, {0x5, 0xc, 0x9, 0xef19}, {0x800, 0x5, 0xe, 0x40}, {0x2, 0x1, 0x1, 0x2}, {0x0, 0x0, 0x3, 0x3}, {0x7, 0xd3, 0x8, 0x4}, {0x4, 0x4, 0xf, 0x1}, {0x6, 0x9, 0xb, 0x5}, {0x7, 0xc, 0x5}, {0x1, 0x9, 0xe, 0x6}, {0x6, 0xb, 0x76}, {0x7, 0x1, 0x8, 0x2}, {0x1, 0xa3, 0x1, 0x2}, {0x3ff, 0x7, 0x2, 0x48}, {0xf049, 0x3, 0x1, 0x7fffffff}, {0x0, 0x6, 0xf, 0x4}, {0x9, 0x6, 0xac, 0x6}, {0x7fff, 0x9, 0xe0, 0xe8ad}, {0x7, 0x1, 0x6, 0x6efa7444}, {0x100, 0x7, 0x4, 0xfffffffa}, {0x7f, 0x9, 0x4, 0x4}, {0x2, 0x2, 0x80, 0x7}, {0x7, 0x4, 0x9, 0x1711}, {0xfc94, 0x6, 0x4}, {0x42, 0x1, 0x3}, {0x8, 0x4, 0x2, 0x5}, {0x9, 0x4, 0x1, 0x3}, {0x9, 0x10, 0x0, 0x1}, {0xe6b5, 0x6f, 0x7f, 0x4}, {0x3, 0x35, 0x9, 0x200}, {0x4000, 0x8, 0x40, 0xe70a}, {0x3, 0x4, 0x8, 0x2}, {0x1, 0x0, 0x65, 0x7}, {0xffff, 0x7f, 0x35, 0x4}, {0x6, 0x5b, 0x0, 0x3}, {0x6, 0xfe, 0x6b, 0x80000001}, {0x5, 0x6b, 0x0, 0xba}, {0x8001, 0x9, 0x5, 0x4}, {0x2df9, 0x1, 0x2, 0x3}, {0x7, 0x9, 0x81, 0x1}, {0x9, 0xa, 0x5, 0x9}, {0x0, 0x3, 0x7, 0x80000001}, {0xa309, 0x81, 0xfa, 0x3}, {0x5, 0x5, 0x3, 0x3}, {0x4, 0xc, 0x45, 0x40}, {0x3, 0x9, 0x9, 0x8}, {0x9, 0x4, 0x5, 0x2}, {0x56, 0x1, 0x7, 0x9}, {0xfcb1, 0x7, 0x7, 0x2f}, {0x80, 0x3, 0x0, 0xff}, {0x4, 0x81, 0x6, 0x8}, {0x5, 0x8, 0x0, 0x4}, {0x5, 0x2, 0x0, 0xfffffff7}, {0x7, 0x9, 0xfd, 0x3a3}, {0x6, 0xfd, 0x1, 0x7}, {0x2, 0x3, 0x58, 0x3}, {0x4, 0x7, 0xfc, 0x3}, {0x1, 0x8, 0x3}, {0xfffd, 0x4, 0xa, 0x7}, {0x1000, 0x4, 0xe6, 0x1}, {0xfbff, 0x9, 0x2, 0xfffff998}, {0x80, 0x80, 0x9b, 0xa}, {0xb4, 0xb, 0xf2, 0x4957}], {0x8}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xcc, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x52c) 1.529154451s ago: executing program 0 (id=6669): socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, r2}, 0x38) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) keyctl$revoke(0x3, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044565d, &(0x7f0000000280)=@mmap={0x8, 0x1, 0x4, 0x1, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) r6 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r6, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.376253096s ago: executing program 2 (id=6670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e40)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2}}}]}]}, 0x58}, 0x1, 0x0, 0x84ffffff}, 0x0) 1.269111218s ago: executing program 2 (id=6671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180), 0x4) sched_setscheduler(r0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket(0xb, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_clone3(&(0x7f0000000380)={0x80, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 244.011943ms ago: executing program 5 (id=6672): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x5, 0x9b, &(0x7f0000000080)="7319ecb5a0df32e0048cde61722769a2e94f477c79357d410af6eb9427de1a593037edb0497afa1983c4f479b95766527dbca616f1fb358154c7922f4fecc2e583ec9ba9e1b2bbd15583d0f4f8cc3681a9f6e101c4ef9b66baf1dbedcccf8e10cbe89f0c34f6ed808aa864e71c54d101bc6d7824a9dcb6f7c17c19c58d63e1c4766d3c02a2c7b6fbe10dca7f76fa93ea3805b466fcae873161191e") syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_ep_write(r0, 0x9, 0xd0, &(0x7f0000000680)="c6b16cf8cdd31bcfdfd9ece8e9eef39bd803f552a79a2e8988cee7650fbb2706cdc1ce84fd6e1bec182b53041282385b8d6c5be16824e8304a9a8c6da04881cba3a37b25890a39e26bbf5e26f333d5a2062eccd87aa8766eb1144a1f1b68a5fafe8f67a6b632dbaa2fd189b127fdafdc2b46a72a1dbdc216365c54042b2b403a41fbfb5587d3f381e77ab83a310e4131f42fdc0260a70a2761238223aff5768d36cf1801c029ba378a0443dbbf6a60ab85bc24d52f0237963410ea4b6bb8d0c83896be2846baee6bb654309083e39154") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8e, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000140)={0x40, 0x5, 0x54, {0xb6, 0x22, "935cad60322612e1e9fef8ce4ad5c3beed3347a1b3bd80f18129ed6c3fb100ded7e0a928a57fa129ef1b5807a01918dd4339a1f28b16b3dc34b0a576202871124fc186416d13577af9f809ca8442431bd293"}}, &(0x7f0000000340)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "7adff92d53e6ff102829d67b37934e646fd18d922fbc9b0a44faeb02903303652664844fc6ef1c0d5654b4fbd2375fd4a2b4de62040377cd646d975c32dde4493afba54cfd301398a0"}}, &(0x7f0000000540)={0x0, 0x22, 0x1d, {[@local=@item_4={0x3, 0x2, 0x7}, @global=@item_4={0x3, 0x1, 0x0, "d0727f42"}, @global=@item_4={0x3, 0x1, 0x6, "c2008319"}, @local=@item_012={0x1, 0x2, 0x5, "01"}, @main=@item_012={0x0, 0x0, 0x15}, @local=@item_4={0x3, 0x2, 0xa, "350df706"}, @global=@item_4={0x3, 0x1, 0x6, "21b9444b"}, @local=@item_012={0x0, 0x2, 0x5, "18"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa2aa, 0x1f, 0x1, {0x22, 0x4fd}}}}, &(0x7f0000000500)={0x18, &(0x7f0000000400)={0x0, 0x17, 0x5, "db742ab332"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0x20, 0x3, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x45) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x30}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x33, 0x1, 0x7ff, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r7, 0xffffffffffffffff, 0x2c, 0x201c, 0x0, @value, @void, @void, @void, r8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 197.740568ms ago: executing program 0 (id=6673): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 103.523787ms ago: executing program 3 (id=6674): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x40000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0xe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) mq_open(&(0x7f0000003d00)='..\x00', 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000100)={0x2, 0xe, "6c04beca57b6f04f9a0e10292f11"}) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x3) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r7) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(r6, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f00000000c0)="95", 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x400d0) 0s ago: executing program 1 (id=6675): r0 = openat$vcsu(0xffffff9c, &(0x7f00000003c0), 0x8000, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) preadv(r1, &(0x7f0000001a40)=[{&(0x7f00000002c0)=""/254, 0xfe}], 0x1, 0x5, 0x9) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r9, &(0x7f00000000c0)=""/108, 0x6c) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r9, &(0x7f0000000200)=""/168, 0xa8) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x8) close(r7) socket(0x1d, 0x2, 0x6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES8=r4, @ANYRES32=r5], 0xffdd) r10 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x88801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): eric failed with error -22 [ 1434.693106][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1434.896584][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.947413][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.006348][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1435.037765][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.068113][ T9] usb 2-1: config 0 descriptor?? [ 1435.153625][T18564] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1435.188004][T26561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1435.219567][T26561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1435.249094][T26561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1435.284875][T26561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1435.293009][T18564] usb 6-1: device descriptor read/64, error -71 [ 1435.353294][T15256] Bluetooth: hci5: command tx timeout [ 1435.451772][T26561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.496602][T26561] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.519452][ T9] pyra 0003:1E7D:2CF6.0058: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1435.545359][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.552599][ T7152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.563191][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.563397][T18564] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1435.570352][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.721706][ T9] pyra 0003:1E7D:2CF6.0058: couldn't init struct pyra_device [ 1435.732343][ T9] pyra 0003:1E7D:2CF6.0058: couldn't install mouse [ 1435.753332][T18564] usb 6-1: device descriptor read/64, error -71 [ 1435.767602][ T9] pyra 0003:1E7D:2CF6.0058: probe with driver pyra failed with error -71 [ 1435.813828][ T9] usb 2-1: USB disconnect, device number 17 [ 1435.863781][T18564] usb usb6-port1: attempt power cycle [ 1435.876874][T26561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.998659][T26561] veth0_vlan: entered promiscuous mode [ 1436.037429][T26561] veth1_vlan: entered promiscuous mode [ 1436.128132][T26561] veth0_macvtap: entered promiscuous mode [ 1436.175936][T26561] veth1_macvtap: entered promiscuous mode [ 1436.239368][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.244137][T18564] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1436.256842][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.273515][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.293029][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.322951][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.349789][T18564] usb 6-1: device descriptor read/8, error -71 [ 1436.349837][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.401950][T26710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6075'. [ 1436.426630][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.457325][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.517437][T26561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.613056][T18564] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1436.616067][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.641027][T18564] usb 6-1: device descriptor read/8, error -71 [ 1436.655453][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.675495][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.690498][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.701000][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.725311][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.742110][T26561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.753570][T18564] usb usb6-port1: unable to enumerate USB device [ 1436.761501][T26561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.785508][T26561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.830292][T26561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.853096][T26561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.873079][T26561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.881829][T26561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.040709][ T7152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.058143][ T7152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.102381][T16381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.132973][T16381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.778855][T26735] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6080'. [ 1438.039336][T26743] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1438.296561][T26749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1438.487670][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1438.498081][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1439.297494][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1439.306873][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1439.838238][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1439.847953][T26755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6082'. [ 1440.567536][T26749] team0 (unregistering): Port device team_slave_0 removed [ 1440.835944][T26749] team0 (unregistering): Port device team_slave_1 removed [ 1441.113436][T18753] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1441.289861][T26787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.341393][T26787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.395231][T18753] usb 3-1: Using ep0 maxpacket: 16 [ 1441.412769][T18753] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1441.427239][T18753] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.444746][T18753] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1441.666987][T18753] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1441.682974][T18753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.752728][T18753] usb 3-1: Product: syz [ 1441.762964][ T5887] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1441.779036][T18753] usb 3-1: Manufacturer: syz [ 1441.802139][T18753] usb 3-1: SerialNumber: syz [ 1441.959275][ T5887] usb 2-1: config 0 has no interfaces? [ 1441.982759][ T5887] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1442.000109][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.034118][ T5887] usb 2-1: Product: syz [ 1442.039029][ T5887] usb 2-1: Manufacturer: syz [ 1442.073444][ T5887] usb 2-1: SerialNumber: syz [ 1442.086667][T26799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6093'. [ 1442.097526][ T5887] usb 2-1: config 0 descriptor?? [ 1442.568557][T26813] veth1_to_team: entered promiscuous mode [ 1442.695926][T26813] team0: Port device team_slave_1 removed [ 1442.905622][T26818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'. [ 1443.820290][T18753] usbhid 3-1:1.0: can't add hid device: -71 [ 1443.839107][T18753] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1443.944996][T18753] usb 3-1: USB disconnect, device number 20 [ 1444.103060][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1444.439469][T16393] usb 2-1: USB disconnect, device number 18 [ 1444.484651][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 1444.523961][ T24] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1444.543771][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.563164][ T5907] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1444.583935][T18753] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1444.646521][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.677353][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.705176][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.736095][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.766135][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.786973][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.797257][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 1444.804870][T18753] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1444.833080][T18753] usb 3-1: config 0 has no interface number 0 [ 1444.840763][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.894395][T18753] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1444.929477][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1444.950223][T18753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.960123][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1444.980584][T18753] usb 3-1: Product: syz [ 1444.988746][ T24] usb 4-1: SerialNumber: syz [ 1445.000304][T18753] usb 3-1: Manufacturer: syz [ 1445.018875][T18753] usb 3-1: SerialNumber: syz [ 1445.024952][ T24] usb 4-1: config 0 descriptor?? [ 1445.036493][T18753] usb 3-1: config 0 descriptor?? [ 1445.052164][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input139 [ 1445.079270][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1445.087077][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1445.109569][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1445.142493][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1445.197192][T26847] netlink: 'syz.1.6103': attribute type 6 has an invalid length. [ 1445.210040][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1445.224738][T26847] netlink: 'syz.1.6103': attribute type 7 has an invalid length. [ 1445.265666][T26847] netlink: 'syz.1.6103': attribute type 8 has an invalid length. [ 1445.275481][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1445.283293][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1445.298645][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1445.345820][T26850] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1445.363118][T26836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.374013][T26836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.400381][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1445.422071][ T5933] usb 3-1: USB disconnect, device number 21 [ 1445.461852][ T5196] bcm5974 4-1:0.0: could not read from device [ 1445.472428][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1445.505386][ T5196] bcm5974 4-1:0.0: could not read from device [ 1445.516829][ T5907] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1445.526494][ T24] usb 4-1: USB disconnect, device number 31 [ 1445.537504][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1445.557916][ T5907] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1445.610444][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1445.642127][ T5196] bcm5974 4-1:0.0: could not read from device [ 1445.925262][T26856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.946210][T26856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.986724][T26854] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1446.063189][ T5907] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1446.140376][ T5907] usb 6-1: string descriptor 0 read error: -22 [ 1446.146958][ T5907] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1446.158692][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.232499][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.271167][ T5907] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1446.285172][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.362980][T18753] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1446.403649][T26864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1446.423189][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.483145][ T1208] usb 6-1: USB disconnect, device number 17 [ 1446.487923][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.542984][T18753] usb 2-1: device descriptor read/64, error -71 [ 1446.549807][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.735481][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1446.834254][T18753] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1446.954106][T26873] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1446.971434][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1446.983867][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.008038][T26860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.057276][T26860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.213176][T18753] usb 2-1: device descriptor read/64, error -71 [ 1447.335357][T18753] usb usb2-port1: attempt power cycle [ 1447.713298][T18753] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1447.748265][T18753] usb 2-1: device descriptor read/8, error -71 [ 1448.112960][T18753] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1448.157049][T18753] usb 2-1: device descriptor read/8, error -71 [ 1448.284053][T18753] usb usb2-port1: unable to enumerate USB device [ 1448.350411][T26889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6110'. [ 1448.772399][T26906] netlink: 'syz.3.6113': attribute type 16 has an invalid length. [ 1449.225070][T26926] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1449.405607][T26925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1449.685698][ T1208] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1449.888654][ T30] audit: type=1326 audit(1745074475.830:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26938 comm="syz.1.6121" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1449.914702][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 1449.967062][T26940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.976956][ T1208] usb 6-1: config 0 has an invalid interface number: 181 but max is 1 [ 1450.104243][T26911] ALSA: mixer_oss: invalid OSS volume './file0' [ 1450.110891][ T1208] usb 6-1: config 0 has no interface number 1 [ 1450.145610][ T1208] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=a7.38 [ 1450.156408][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.165371][ T1208] usb 6-1: Product: syz [ 1450.169689][ T1208] usb 6-1: Manufacturer: syz [ 1450.174745][ T1208] usb 6-1: SerialNumber: syz [ 1450.198863][ T1208] usb 6-1: config 0 descriptor?? [ 1450.217568][ T1208] usb 6-1: selecting invalid altsetting 1 [ 1450.234467][ T1208] snd-usb-audio 6-1:0.181: probe with driver snd-usb-audio failed with error -22 [ 1450.279500][ T1208] usb 6-1: selecting invalid altsetting 1 [ 1450.329984][ T1208] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1450.433206][T16393] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1450.449238][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1450.467519][T26932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.486278][T26932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.583166][T16393] usb 3-1: Using ep0 maxpacket: 16 [ 1450.593671][ T5907] usb 6-1: USB disconnect, device number 18 [ 1450.595014][T16393] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1450.673612][T16393] usb 3-1: config 0 has no interface number 0 [ 1450.703814][T16393] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1450.741493][T16393] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1450.762478][T16393] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1450.776203][T16393] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1450.793296][T16393] usb 3-1: Product: syz [ 1450.820539][T16393] usb 3-1: SerialNumber: syz [ 1450.839944][T16393] usb 3-1: config 0 descriptor?? [ 1450.852060][T26948] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1450.899928][T26954] netlink: 'syz.3.6126': attribute type 10 has an invalid length. [ 1450.984754][T26954] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.992489][T26954] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.052637][T26966] netlink: 'syz.3.6126': attribute type 10 has an invalid length. [ 1451.143984][ T5907] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1451.167884][T26954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.175175][T26954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.182697][T26954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.189950][T26954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.247411][T26954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1451.313155][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 1451.360676][T26960] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1451.791473][T26981] program syz.3.6130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1452.119972][T26985] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1452.136812][T26985] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1452.194352][T26985] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1452.219505][T26985] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1452.521721][T26992] netlink: 'syz.3.6132': attribute type 5 has an invalid length. [ 1452.774734][ T30] audit: type=1326 audit(1745074478.750:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.6135" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1452.793693][T27003] netlink: 136 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1453.078149][T16393] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1453.108336][T27009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1453.116023][T16393] usb 3-1: invalid MIDI in EP 0 [ 1453.281908][T16393] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1453.327655][T16393] usb 3-1: USB disconnect, device number 22 [ 1453.475537][ T30] audit: type=1800 audit(1745074479.450:1985): pid=27018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6140" name="bus" dev="ramfs" ino=132652 res=0 errno=0 [ 1453.500294][ T30] audit: type=1800 audit(1745074479.450:1986): pid=27019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6140" name="bus" dev="ramfs" ino=132652 res=0 errno=0 [ 1453.567292][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1453.872433][T27032] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1453.888844][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1453.914277][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1453.931555][T27032] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1453.961709][ T5907] usb 2-1: can't read configurations, error -71 [ 1454.053049][T27032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1454.127396][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1454.130186][T27032] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1454.323591][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1454.333966][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.347956][ T24] usb 6-1: config 0 has no interfaces? [ 1454.411945][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1454.433435][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.482159][ T24] usb 6-1: config 0 descriptor?? [ 1454.712153][ T5907] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1454.904082][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1454.937604][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.966683][ T5907] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1455.011129][ T5907] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1455.072842][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.095987][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1455.106913][ T24] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1455.177938][T27066] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1455.224625][ T5907] usb 2-1: config 0 descriptor?? [ 1455.229755][ T24] usb 3-1: config 0 has no interface number 0 [ 1455.246937][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1455.247156][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 1455.252640][ T24] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1455.252664][ T24] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1455.256572][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1455.256620][ T24] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1455.256642][ T24] usb 3-1: Product: syz [ 1455.256659][ T24] usb 3-1: SerialNumber: syz [ 1455.259838][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1455.261400][ T24] usb 3-1: config 0 descriptor?? [ 1455.262175][T27056] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1455.264895][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1455.264944][ T5907] usb 2-1: media controller created [ 1455.267625][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1455.276762][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 1455.277043][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1455.280227][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input140 [ 1455.285916][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 1455.285940][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1455.453942][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1455.453975][ T5907] dvb-usb: error while querying for an remote control event. [ 1455.613017][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1455.613096][ T5907] dvb-usb: error while querying for an remote control event. [ 1456.057853][ T5907] dvb-usb: bulk message failed: -22 (1/0) [ 1456.057888][ T5907] dvb-usb: error while querying for an remote control event. [ 1456.215340][T18753] dvb-usb: bulk message failed: -22 (1/0) [ 1456.215377][T18753] dvb-usb: error while querying for an remote control event. [ 1456.216944][ T9] usb 2-1: USB disconnect, device number 24 [ 1456.229801][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1456.846199][ T9] usb 6-1: USB disconnect, device number 19 [ 1456.863028][T18753] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1457.077041][T18753] usb 4-1: config 0 has no interfaces? [ 1457.091969][T18753] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1457.106245][T18753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.141370][T18753] usb 4-1: Product: syz [ 1457.171212][T18753] usb 4-1: Manufacturer: syz [ 1457.190089][ T30] audit: type=1326 audit(1745074483.160:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27086 comm="syz.1.6154" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1457.213004][T18753] usb 4-1: SerialNumber: syz [ 1457.306580][T18753] usb 4-1: config 0 descriptor?? [ 1457.308183][T27088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.476571][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1457.495300][ T24] usb 3-1: invalid MIDI in EP 0 [ 1457.648469][ T24] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1457.754463][ T24] usb 3-1: USB disconnect, device number 23 [ 1458.563986][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1458.706570][T27103] input: syz1 as /devices/virtual/input/input141 [ 1458.719846][T27104] netlink: 'syz.0.6160': attribute type 10 has an invalid length. [ 1458.736826][T27104] veth0_vlan: entered allmulticast mode [ 1458.832358][T27104] veth0_vlan: left promiscuous mode [ 1458.900346][T27104] veth0_vlan: entered promiscuous mode [ 1458.922709][T27104] team0: Device veth0_vlan failed to register rx_handler [ 1459.067333][ T5887] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1459.264594][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 1459.274796][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1459.289491][ T5887] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1459.302514][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.318424][ T5887] usb 3-1: Product: syz [ 1459.325799][ T5887] usb 3-1: Manufacturer: syz [ 1459.332761][ T5887] usb 3-1: SerialNumber: syz [ 1459.349689][ T5887] usb 3-1: config 0 descriptor?? [ 1459.369328][ T5887] hub 3-1:0.0: bad descriptor, ignoring hub [ 1459.377495][ T5887] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1459.432743][ T5887] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input142 [ 1459.582634][T18753] usb 4-1: USB disconnect, device number 32 [ 1459.793747][ T5887] usb 3-1: USB disconnect, device number 24 [ 1460.089020][T27120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.348865][ T30] audit: type=1326 audit(1745074486.310:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27127 comm="syz.0.6168" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x0 [ 1460.862999][T18753] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1461.024269][T18753] usb 3-1: Using ep0 maxpacket: 32 [ 1461.031313][T18753] usb 3-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1461.049626][T18753] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1461.057462][T18753] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1461.070090][T18753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.081115][T18753] usb 3-1: config 0 descriptor?? [ 1461.083171][T16393] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1461.097508][T18753] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1461.243228][T16393] usb 4-1: Using ep0 maxpacket: 32 [ 1461.250861][T16393] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1461.258767][T16393] usb 4-1: can't read configurations, error -61 [ 1461.302582][T27138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.314292][T27138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.330340][ T5887] usb 3-1: USB disconnect, device number 25 [ 1461.394338][T16393] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1461.552978][T16393] usb 4-1: Using ep0 maxpacket: 32 [ 1461.567236][T16393] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1461.586994][T16393] usb 4-1: can't read configurations, error -61 [ 1461.600455][T16393] usb usb4-port1: attempt power cycle [ 1461.664583][T27158] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1461.679158][T27158] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1461.831907][T27162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.994305][T27162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.023422][T16393] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1462.131297][T16393] usb 4-1: Using ep0 maxpacket: 32 [ 1462.157238][T16393] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1462.168540][T16393] usb 4-1: can't read configurations, error -61 [ 1462.365769][T27172] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1462.462972][T16393] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1462.493724][T16393] usb 4-1: Using ep0 maxpacket: 32 [ 1462.502282][T16393] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1462.513329][T16393] usb 4-1: can't read configurations, error -61 [ 1462.528413][T16393] usb usb4-port1: unable to enumerate USB device [ 1462.599064][T27176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.983031][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1464.153041][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1464.164659][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.207497][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1464.263059][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1464.287139][ T1208] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1464.291284][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1464.336932][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1464.388286][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1464.405149][T27207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1464.421808][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1464.450488][ T24] usb 2-1: Manufacturer: syz [ 1464.458890][ T24] usb 2-1: config 0 descriptor?? [ 1464.463004][ T1208] usb 3-1: Using ep0 maxpacket: 16 [ 1464.488868][ T1208] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1464.507309][ T1208] usb 3-1: config 0 has no interface number 0 [ 1464.526319][ T1208] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1464.547247][ T1208] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1464.580986][ T1208] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1464.591756][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1464.599950][ T1208] usb 3-1: Product: syz [ 1464.604452][ T1208] usb 3-1: SerialNumber: syz [ 1464.616030][ T1208] usb 3-1: config 0 descriptor?? [ 1464.621728][T27199] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1464.685652][T27214] netlink: 'syz.1.6191': attribute type 32 has an invalid length. [ 1464.721492][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1464.733219][T27214] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 1464.773262][ T24] rc_core: IR keymap rc-hauppauge not found [ 1464.786665][ T24] Registered IR keymap rc-empty [ 1464.825381][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1464.873349][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1464.906565][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1464.917345][T27223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.928835][T27223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.992169][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input143 [ 1465.018168][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.043498][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.063161][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.084360][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.103194][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.143033][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.173168][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.200781][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.223174][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.253193][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1465.291526][ T24] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1465.303223][T16393] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1465.307372][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1465.352255][ T24] usb 2-1: USB disconnect, device number 25 [ 1465.379432][T27223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6202'. [ 1465.493114][T16393] usb 6-1: Using ep0 maxpacket: 32 [ 1465.540532][T16393] usb 6-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1465.559068][T16393] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1465.569389][T16393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.581890][T16393] usb 6-1: Product: syz [ 1465.586951][T16393] usb 6-1: Manufacturer: syz [ 1465.591583][T16393] usb 6-1: SerialNumber: syz [ 1465.607839][T16393] usb 6-1: config 0 descriptor?? [ 1465.621103][T16393] cdc_ether 6-1:0.0: probe with driver cdc_ether failed with error -22 [ 1465.632615][T16393] usb 6-1: unsupported MDLM descriptors [ 1465.841660][T16393] usb 6-1: USB disconnect, device number 20 [ 1465.965797][T27239] program syz.1.6207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.283026][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1466.427373][ T24] usb 2-1: device descriptor read/64, error -71 [ 1466.553132][ T5933] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1466.648622][T27254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.675726][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1466.743431][ T5933] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1466.752370][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1466.770042][ T5933] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.789022][ T5933] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1466.807456][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1466.815684][ T5933] usb 4-1: Product: syz [ 1466.819882][ T5933] usb 4-1: Manufacturer: syz [ 1466.824870][ T24] usb 2-1: device descriptor read/64, error -71 [ 1466.836438][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 1466.842658][ T5933] cdc_wdm 4-1:1.0: skipping garbage [ 1466.848377][ T5933] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1466.956743][ T24] usb usb2-port1: attempt power cycle [ 1466.997116][ T1208] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1467.009538][ T1208] usb 3-1: invalid MIDI in EP 0 [ 1467.044069][T27264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.063466][T27264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.116978][ T1208] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1467.143223][ T1208] usb 3-1: USB disconnect, device number 26 [ 1467.296421][ T9] usb 4-1: USB disconnect, device number 37 [ 1467.333465][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1467.374277][ T24] usb 2-1: device descriptor read/8, error -71 [ 1467.562990][ T1208] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1467.573103][T16393] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1467.612974][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1467.643644][ T24] usb 2-1: device descriptor read/8, error -71 [ 1467.692991][ T1208] usb 3-1: device descriptor read/64, error -71 [ 1467.725002][T16393] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1467.734239][T16393] usb 6-1: config 6 has an invalid interface number: 200 but max is 0 [ 1467.742454][T16393] usb 6-1: config 6 has no interface number 0 [ 1467.748738][T16393] usb 6-1: config 6 interface 200 has no altsetting 0 [ 1467.759564][T16393] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1467.768931][ T24] usb usb2-port1: unable to enumerate USB device [ 1467.776993][T16393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.785111][T16393] usb 6-1: Product: syz [ 1467.789337][T16393] usb 6-1: Manufacturer: syz [ 1467.794780][T16393] usb 6-1: SerialNumber: syz [ 1467.932990][ T1208] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1468.020729][T27273] bridge_slave_0: invalid flags given to default FDB implementation [ 1468.083131][ T1208] usb 3-1: device descriptor read/64, error -71 [ 1468.193778][ T1208] usb usb3-port1: attempt power cycle [ 1468.232708][T16393] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1468.450600][T16393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1468.463832][T16393] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1468.471993][T16393] usb 6-1: media controller created [ 1468.560663][T16393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1468.602941][ T1208] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 1468.624188][ T1208] usb 3-1: device descriptor read/8, error -71 [ 1468.646146][T16393] dvb-usb: bulk message failed: -71 (6/0) [ 1468.657973][T16393] dvb-usb: bulk message failed: -71 (6/0) [ 1468.664255][T16393] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1468.677437][T16393] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input144 [ 1468.705455][T16393] dvb-usb: schedule remote query interval to 150 msecs. [ 1468.712812][T16393] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1468.733941][T16393] usb 6-1: USB disconnect, device number 21 [ 1468.872996][ T1208] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1468.933764][ T1208] usb 3-1: device descriptor read/8, error -71 [ 1469.028176][T16393] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1469.065457][ T1208] usb usb3-port1: unable to enumerate USB device [ 1469.101370][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1469.723025][T16393] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1469.876122][T16393] usb 4-1: Using ep0 maxpacket: 16 [ 1469.882992][T16393] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1469.978724][T16393] usb 4-1: config 0 has no interface number 0 [ 1469.986833][T16393] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1470.020561][T16393] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1470.060872][T16393] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1470.078518][T16393] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1470.091275][T16393] usb 4-1: Product: syz [ 1470.100108][T16393] usb 4-1: SerialNumber: syz [ 1470.116108][T16393] usb 4-1: config 0 descriptor?? [ 1470.126731][T27294] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1470.470073][T27298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.537585][T27303] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1472.054783][T27343] netlink: 'syz.0.6244': attribute type 10 has an invalid length. [ 1472.240480][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1472.270285][T27352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1472.322583][T27351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1472.466272][T16393] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1472.567301][T16393] usb 4-1: invalid MIDI in EP 0 [ 1472.618410][T27361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(37) [ 1472.625064][T27361] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1472.659506][T16393] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1472.660647][T27361] vhci_hcd vhci_hcd.0: Device attached [ 1472.681949][T16393] usb 4-1: USB disconnect, device number 38 [ 1472.701483][T27365] vhci_hcd: connection closed [ 1472.701924][ T7155] vhci_hcd: stop threads [ 1472.713972][ T7155] vhci_hcd: release socket [ 1472.719400][ T7155] vhci_hcd: disconnect device [ 1472.794740][ T1208] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1472.934589][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1472.964076][ T1208] usb 3-1: Using ep0 maxpacket: 8 [ 1472.971154][ T1208] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 1472.980590][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.001364][ T1208] usb 3-1: config 0 descriptor?? [ 1473.068003][T27347] ALSA: mixer_oss: invalid OSS volume './file0' [ 1473.221144][T27357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.253962][T27357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.309591][T27357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.343401][T27357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.376383][T27357] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1473.418738][ T1208] (null): keene_cmd_main failed (-71) [ 1473.448528][ T1208] video4linux radio48: keene_cmd_main failed (-71) [ 1473.460986][ T1208] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1473.504697][ T1208] usb 3-1: USB disconnect, device number 31 [ 1473.815891][ T5888] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1474.013019][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 1474.045086][ T5888] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1474.063198][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1474.089125][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1474.134771][T27402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.140289][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1474.153286][T27402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.179046][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1474.193531][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1474.202681][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.253853][ T30] audit: type=1326 audit(1745074500.230:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27403 comm="syz.2.6264" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1474.314377][T27405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.373039][ T1208] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1474.448586][ T5888] usb 2-1: usb_control_msg returned -32 [ 1474.454489][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 1474.522973][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 1474.530487][ T1208] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.538682][ T1208] usb 6-1: config 0 has no interface number 0 [ 1474.545067][ T1208] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1474.556556][ T1208] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1474.570411][ T1208] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1474.579748][ T1208] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1474.588320][ T1208] usb 6-1: Product: syz [ 1474.592702][ T1208] usb 6-1: SerialNumber: syz [ 1474.601978][ T1208] usb 6-1: config 0 descriptor?? [ 1474.612073][T27400] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1474.835692][ T1208] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.850456][ T1208] usb 6-1: invalid MIDI in EP 0 [ 1474.918113][ T1208] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1474.940147][ T1208] usb 6-1: USB disconnect, device number 22 [ 1475.170253][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1475.266321][T27419] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 1475.786592][T18753] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1475.969748][T18753] usb 4-1: Using ep0 maxpacket: 16 [ 1476.072032][T18753] usb 4-1: too many endpoints for config 1 interface 0 altsetting 220: 57, using maximum allowed: 30 [ 1476.092705][T18753] usb 4-1: config 1 interface 0 altsetting 220 has 2 endpoint descriptors, different from the interface descriptor's value: 57 [ 1476.229985][T18753] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1476.439485][T27426] ALSA: mixer_oss: invalid OSS volume './file0' [ 1476.503634][T27441] fuse: Bad value for 'source' [ 1476.541892][T18753] usb 4-1: string descriptor 0 read error: -22 [ 1476.548339][T18753] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 1476.557993][T18753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.641680][ T24] usb 2-1: USB disconnect, device number 30 [ 1477.003229][T27446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.076545][ T30] audit: type=1326 audit(1745074503.030:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27448 comm="syz.1.6279" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1478.463083][T18753] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1478.743048][T18753] usb 3-1: Using ep0 maxpacket: 16 [ 1478.766853][T18753] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1478.813355][T18753] usb 3-1: config 0 has no interface number 0 [ 1478.863073][T18753] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1478.963142][T18753] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1478.977153][T18753] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1478.998030][T18753] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1479.212999][ T5933] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1479.259471][T18753] usb 3-1: Product: syz [ 1479.274483][T16393] usb 4-1: USB disconnect, device number 39 [ 1479.290149][T18753] usb 3-1: SerialNumber: syz [ 1479.298650][T27481] tipc: Started in network mode [ 1479.315606][T27481] tipc: Node identity 7, cluster identity 4711 [ 1479.325534][T27481] tipc: Node number set to 7 [ 1479.334808][T18753] usb 3-1: config 0 descriptor?? [ 1479.443910][T27464] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1479.525925][ T5933] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1479.535483][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.546274][ T5933] usb 6-1: Product: syz [ 1479.562969][ T5933] usb 6-1: Manufacturer: syz [ 1479.578210][ T5933] usb 6-1: SerialNumber: syz [ 1479.605093][ T5933] usb 6-1: config 0 descriptor?? [ 1479.678520][T18753] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1479.737261][T18753] usb 3-1: invalid MIDI in EP 0 [ 1479.842966][ T5933] usb 6-1: USB disconnect, device number 23 [ 1479.907664][T18753] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1479.998534][T18753] usb 3-1: USB disconnect, device number 32 [ 1480.371083][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1480.690748][ T30] audit: type=1326 audit(1745074506.660:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27492 comm="syz.3.6294" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1481.961394][T27519] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6298'. [ 1482.408004][T18753] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1482.574756][T18753] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1482.602049][T18753] usb 6-1: config 0 has no interface number 0 [ 1482.625146][T18753] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1482.657189][T18753] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1482.675054][T18753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.691903][T18753] usb 6-1: Product: syz [ 1482.702213][T18753] usb 6-1: Manufacturer: syz [ 1482.713674][T18753] usb 6-1: SerialNumber: syz [ 1482.776764][T18753] usb 6-1: config 0 descriptor?? [ 1482.805517][T18753] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1483.091603][ C1] yurex 6-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1483.183856][T27537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.192748][T27537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.466196][T27541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6305'. [ 1483.619788][T16393] usb 6-1: USB disconnect, device number 24 [ 1483.640137][T16393] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1484.196480][T27548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6309'. [ 1484.214436][ T30] audit: type=1326 audit(1745074510.190:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27547 comm="syz.2.6308" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1484.239165][T27548] netlink: 640 bytes leftover after parsing attributes in process `syz.1.6309'. [ 1484.412342][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.418859][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.163382][ T5907] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1485.329058][ T5907] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1485.340573][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.356239][ T5907] usb 4-1: Product: syz [ 1485.360686][ T5907] usb 4-1: Manufacturer: syz [ 1485.470486][ T5907] usb 4-1: SerialNumber: syz [ 1485.479307][ T5907] usb 4-1: config 0 descriptor?? [ 1485.492973][ T5907] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1486.233331][ T5907] gspca_sunplus: reg_r err -110 [ 1486.238320][ T5907] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 1486.529396][ T7155] tipc: Subscription rejected, illegal request [ 1487.018312][T27594] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6326'. [ 1487.060080][ T30] audit: type=1326 audit(1745074513.030:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27597 comm="syz.1.6327" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1487.637249][T27615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.659035][T27615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.209024][T27603] ALSA: mixer_oss: invalid OSS volume './file0' [ 1488.533312][T18753] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1488.703829][T18753] usb 6-1: Using ep0 maxpacket: 16 [ 1488.833756][T16393] usb 4-1: USB disconnect, device number 40 [ 1488.834840][T18753] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1488.922885][T18753] usb 6-1: config 0 has no interface number 0 [ 1488.929652][T18753] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1488.983003][T18753] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1489.062938][T18753] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1489.080942][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6338'. [ 1489.100378][T18753] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1489.129054][T18753] usb 6-1: Product: syz [ 1489.139037][T18753] usb 6-1: SerialNumber: syz [ 1489.156695][T18753] usb 6-1: config 0 descriptor?? [ 1489.175320][T27619] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1489.283035][T16393] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1489.396817][T18753] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1489.407968][T18753] usb 6-1: invalid MIDI in EP 0 [ 1489.443155][T16393] usb 4-1: Using ep0 maxpacket: 8 [ 1489.452657][T18753] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1489.474339][T18753] usb 6-1: USB disconnect, device number 25 [ 1489.477333][T16393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1489.525058][T16393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1489.552284][T16393] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1489.562258][T16393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.580675][T16393] usb 4-1: config 0 descriptor?? [ 1489.590557][T16393] hso 4-1:0.0: Can't find BULK IN endpoint [ 1489.595090][T27642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.624275][T27642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.666530][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1489.737819][ T30] audit: type=1326 audit(1745074515.710:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.2.6344" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1489.793888][T18753] usb 4-1: USB disconnect, device number 41 [ 1490.682934][T18753] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1490.882947][T18753] usb 2-1: Using ep0 maxpacket: 8 [ 1490.882999][T16393] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1490.899054][T18753] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1490.913772][T18753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1490.937603][T18753] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1490.952046][T18753] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1490.974602][T18753] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1490.987040][T18753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.083485][T16393] usb 6-1: Using ep0 maxpacket: 32 [ 1491.104815][T16393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.221220][T16393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1491.229970][T18753] usb 2-1: usb_control_msg returned -71 [ 1491.248333][T16393] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1491.249182][T18753] usbtmc 2-1:16.0: can't read capabilities [ 1491.271457][T16393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.348470][T16393] usb 6-1: config 0 descriptor?? [ 1491.365739][T18753] usb 2-1: USB disconnect, device number 31 [ 1491.583452][T27665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.592393][T27665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.742226][T27681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1491.752248][T27681] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 1491.760092][T16393] ft260 0003:0403:6030.0059: failed to retrieve chip version [ 1491.772196][T16393] ft260 0003:0403:6030.0059: probe with driver ft260 failed with error -71 [ 1491.830892][T16393] usb 6-1: USB disconnect, device number 26 [ 1492.886463][T27702] FAULT_INJECTION: forcing a failure. [ 1492.886463][T27702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.899856][T27702] CPU: 1 UID: 0 PID: 27702 Comm: syz.5.6364 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1492.899886][T27702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1492.899900][T27702] Call Trace: [ 1492.899910][T27702] [ 1492.899920][T27702] dump_stack_lvl+0x241/0x360 [ 1492.899961][T27702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.899992][T27702] ? __pfx__printk+0x10/0x10 [ 1492.900034][T27702] should_fail_ex+0x424/0x570 [ 1492.900073][T27702] _copy_to_user+0x31/0xb0 [ 1492.900105][T27702] simple_read_from_buffer+0xc4/0x170 [ 1492.900142][T27702] proc_fail_nth_read+0x1ef/0x260 [ 1492.900167][T27702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.900191][T27702] ? rw_verify_area+0x246/0x630 [ 1492.900237][T27702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.900257][T27702] vfs_read+0x21f/0xb90 [ 1492.900287][T27702] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 1492.900307][T27702] ? __pfx_vfs_read+0x10/0x10 [ 1492.900339][T27702] ? do_compat_pselect+0x1a0/0x3c0 [ 1492.900357][T27702] ? __pfx_handle_mm_fault+0x10/0x10 [ 1492.900388][T27702] ksys_read+0x19d/0x2d0 [ 1492.900416][T27702] ? __pfx_ksys_read+0x10/0x10 [ 1492.900444][T27702] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1492.900464][T27702] ? lockdep_hardirqs_on+0x9d/0x150 [ 1492.900487][T27702] __do_fast_syscall_32+0xb4/0x110 [ 1492.900507][T27702] ? exc_page_fault+0x5f8/0x920 [ 1492.900530][T27702] do_fast_syscall_32+0x34/0x80 [ 1492.900551][T27702] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1492.900574][T27702] RIP: 0023:0xf703d539 [ 1492.900591][T27702] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1492.900607][T27702] RSP: 002b:00000000f502d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1492.900628][T27702] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f502d620 [ 1492.900642][T27702] RDX: 000000000000000f RSI: 00000000f73a2ff4 RDI: 0000000000000000 [ 1492.900655][T27702] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1492.900666][T27702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1492.900678][T27702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.900706][T27702] [ 1493.204018][T27704] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6366'. [ 1493.308344][T27704] 0·: renamed from hsr_slave_1 (while UP) [ 1493.369121][T27707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6366'. [ 1493.380409][T27704] 0·: entered allmulticast mode [ 1493.392677][T27707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6366'. [ 1493.413986][T27704] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1493.588493][T27707] netlink: 'syz.2.6366': attribute type 12 has an invalid length. [ 1493.614398][T27719] sctp: [Deprecated]: syz.0.6369 (pid 27719) Use of int in max_burst socket option. [ 1493.614398][T27719] Use struct sctp_assoc_value instead [ 1493.644215][T27707] netlink: 'syz.2.6366': attribute type 11 has an invalid length. [ 1493.671365][T27719] netlink: 'syz.0.6369': attribute type 2 has an invalid length. [ 1493.706359][T27719] þ: entered promiscuous mode [ 1493.823013][T16393] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1494.021030][T16393] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.031956][T16393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.108249][T27733] netlink: 'syz.0.6372': attribute type 30 has an invalid length. [ 1494.124980][T16393] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1494.138822][T16393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1494.150977][T16393] usb 3-1: SerialNumber: syz [ 1494.189436][T16393] usb 3-1: 0:2 : does not exist [ 1494.309877][T16393] usb 3-1: unit 18 not found! [ 1495.308361][T27765] netlink: 'syz.0.6385': attribute type 21 has an invalid length. [ 1495.317212][T27765] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6385'. [ 1495.463122][T18753] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1495.672921][T18753] usb 6-1: Using ep0 maxpacket: 32 [ 1495.687206][T18753] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 1495.745251][T18753] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1495.779459][T18753] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.861959][T18753] usb 6-1: Product: syz [ 1495.877441][T18753] usb 6-1: Manufacturer: syz [ 1495.891306][T18753] usb 6-1: SerialNumber: syz [ 1495.934552][T18753] usb 6-1: config 0 descriptor?? [ 1495.984338][T27763] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1496.021514][T27782] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1496.061121][T18753] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1496.237065][T16393] usb 3-1: USB disconnect, device number 33 [ 1496.370330][T18753] usb 6-1: USB disconnect, device number 27 [ 1496.664139][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1497.347387][ T5907] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1497.686836][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 1497.698502][ T5907] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1497.805103][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.911930][ T5907] usb 2-1: Product: syz [ 1497.922057][ T5907] usb 2-1: Manufacturer: syz [ 1497.944938][ T5907] usb 2-1: SerialNumber: syz [ 1498.042048][ T5907] usb 2-1: config 0 descriptor?? [ 1498.059585][ T5907] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1498.309228][T27816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.622541][ T30] audit: type=1326 audit(1745074524.590:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27823 comm="syz.3.6406" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1498.732955][ T5888] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1498.880164][ T5907] gspca_sonixj: reg_r err -71 [ 1498.889433][ T5907] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1498.903507][ T5888] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.915130][ T5907] usb 2-1: USB disconnect, device number 32 [ 1498.920786][ T5888] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1498.931297][ T5888] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1498.951425][ T5888] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1498.971861][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.980378][ T5888] usb 6-1: Product: syz [ 1498.992701][ T5888] usb 6-1: Manufacturer: syz [ 1499.007870][ T5888] usb 6-1: SerialNumber: syz [ 1499.954143][T27834] netlink: zone id is out of range [ 1499.954158][T27834] netlink: zone id is out of range [ 1499.954180][T27834] netlink: zone id is out of range [ 1499.954187][T27834] netlink: zone id is out of range [ 1499.954194][T27834] netlink: zone id is out of range [ 1499.954200][T27834] netlink: zone id is out of range [ 1499.954207][T27834] netlink: zone id is out of range [ 1499.954213][T27834] netlink: zone id is out of range [ 1499.954220][T27834] netlink: zone id is out of range [ 1499.954226][T27834] netlink: zone id is out of range [ 1500.493092][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1500.665275][ T24] usb 2-1: config 0 has no interfaces? [ 1500.673336][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1501.053044][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.087250][ T24] usb 2-1: Product: syz [ 1501.096151][ T24] usb 2-1: Manufacturer: syz [ 1501.100875][ T24] usb 2-1: SerialNumber: syz [ 1501.133944][ T24] usb 2-1: config 0 descriptor?? [ 1501.139164][ T5888] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1501.173211][ T5888] usb 6-1: No valid video chain found. [ 1501.216331][ T5888] usb 6-1: USB disconnect, device number 28 [ 1501.643185][ T5888] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1501.803211][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1501.816199][ T5888] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1501.833195][ T5888] usb 3-1: config 0 has no interface number 0 [ 1501.855828][ T5888] usb 3-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=a3.a3 [ 1501.870960][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.886999][ T5888] usb 3-1: Product: syz [ 1501.891212][ T5888] usb 3-1: Manufacturer: syz [ 1501.899767][ T5888] usb 3-1: SerialNumber: syz [ 1501.921641][ T5888] usb 3-1: config 0 descriptor?? [ 1501.923837][T27856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.958468][T27857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.966696][ T5888] snd-usb-caiaq 3-1:0.16: can't set alt interface. [ 1501.969636][T27856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.990157][ T5888] usb 3-1: unable to init card! (ret=-5) [ 1502.001954][ T5888] snd-usb-caiaq 3-1:0.16: probe with driver snd-usb-caiaq failed with error -5 [ 1502.005052][T27856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1502.075546][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1502.141214][ T5888] usb 3-1: USB disconnect, device number 34 [ 1502.836946][ T30] audit: type=1326 audit(1745074528.810:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27861 comm="syz.2.6418" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1503.093461][ T24] usb 2-1: USB disconnect, device number 33 [ 1503.113454][T18753] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1503.133412][T27876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.156735][T27876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.301628][T18753] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1503.333961][T18753] usb 4-1: config 0 has no interface number 0 [ 1503.340297][T18753] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1503.351370][T18753] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1503.369253][T18753] usb 4-1: New USB device found, idVendor=1199, idProduct=9053, bcdDevice=b4.56 [ 1503.380368][T18753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.392153][ T5907] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1503.407024][T18753] usb 4-1: Product: syz [ 1503.411490][T18753] usb 4-1: Manufacturer: syz [ 1503.417492][T18753] usb 4-1: SerialNumber: syz [ 1503.429836][T18753] usb 4-1: config 0 descriptor?? [ 1503.458788][T27885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.463141][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1503.479977][T27885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.562999][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1503.570641][ T5907] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1503.581039][ T5907] usb 6-1: config 0 has no interface number 0 [ 1503.587450][ T5907] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1503.598622][ T5907] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1503.612489][ T5907] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1503.628335][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1503.642690][T27888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1503.661453][T18753] usb 4-1: USB disconnect, device number 42 [ 1503.668703][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1503.682202][T27888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1503.716984][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.731382][ T5907] usb 6-1: Product: syz [ 1503.737786][ T5907] usb 6-1: SerialNumber: syz [ 1503.742428][ T24] usb 2-1: Product: syz [ 1503.748020][ T24] usb 2-1: Manufacturer: syz [ 1503.756392][ T5907] usb 6-1: config 0 descriptor?? [ 1503.761384][ T24] usb 2-1: SerialNumber: syz [ 1503.768014][T27872] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1503.782212][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1503.824126][ T5933] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1504.010800][ T5907] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1504.032059][ T5907] usb 6-1: invalid MIDI in EP 0 [ 1504.092068][ T5907] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1504.116821][ T5907] usb 6-1: USB disconnect, device number 29 [ 1504.177441][T27894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.256111][ T1208] usb 2-1: USB disconnect, device number 34 [ 1504.354116][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1504.877687][ T5933] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1504.885119][ T5933] ath9k_htc: Failed to initialize the device [ 1504.932119][ T1208] usb 2-1: ath9k_htc: USB layer deinitialized [ 1505.858336][ T30] audit: type=1326 audit(1745074531.830:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27923 comm="syz.2.6437" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1505.884247][ T1208] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1506.042924][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 1506.058905][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.063781][T27932] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6440'. [ 1506.079544][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1506.106605][ T1208] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 1506.412367][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.430794][ T1208] usb 2-1: config 0 descriptor?? [ 1506.660454][ T1208] usbhid 2-1:0.0: can't add hid device: -71 [ 1506.678021][ T1208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1506.730230][ T1208] usb 2-1: USB disconnect, device number 35 [ 1506.943077][T27940] net_ratelimit: 376 callbacks suppressed [ 1506.943101][T27940] netlink: zone id is out of range [ 1506.943114][T27940] netlink: zone id is out of range [ 1506.943124][T27940] netlink: zone id is out of range [ 1506.943134][T27940] netlink: zone id is out of range [ 1506.943144][T27940] netlink: zone id is out of range [ 1506.943165][T27940] netlink: zone id is out of range [ 1506.943174][T27940] netlink: zone id is out of range [ 1506.943183][T27940] netlink: zone id is out of range [ 1506.943204][T27940] netlink: zone id is out of range [ 1506.943213][T27940] netlink: zone id is out of range [ 1506.957257][T25374] Bluetooth: hci3: command 0x0406 tx timeout [ 1507.203326][ T1208] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1507.382981][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 1507.395109][ T1208] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1507.407841][ T1208] usb 2-1: config 0 has no interface number 0 [ 1507.501427][ T1208] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1507.518807][ T1208] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1507.533029][ T5933] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1507.554250][ T1208] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1507.577420][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1507.606985][ T1208] usb 2-1: Product: syz [ 1507.611412][ T1208] usb 2-1: SerialNumber: syz [ 1507.630063][ T1208] usb 2-1: config 0 descriptor?? [ 1507.638333][T27943] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1507.707752][ T5933] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1507.737299][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.752270][ T5933] usb 6-1: Product: syz [ 1507.757053][ T5933] usb 6-1: Manufacturer: syz [ 1507.762013][ T5933] usb 6-1: SerialNumber: syz [ 1507.777795][ T5933] usb 6-1: config 0 descriptor?? [ 1507.954120][ T1208] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.962104][ T1208] usb 2-1: invalid MIDI in EP 0 [ 1508.126430][ T1208] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1508.146215][ T1208] usb 2-1: USB disconnect, device number 36 [ 1508.361871][ T5933] usb 1-1: USB disconnect, device number 108 [ 1508.436601][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1509.123624][ T1208] usb 6-1: USB disconnect, device number 30 [ 1509.471598][T25374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1509.482273][T25374] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1509.490996][T25374] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1509.499199][T25374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1509.507180][T25374] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1509.642952][ T1208] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1509.883047][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 1510.025972][ T1208] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 1510.051873][ T1208] usb 6-1: config 4 has no interface number 0 [ 1510.073369][ T1208] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1510.093040][ T1208] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1510.103170][ T1208] usb 6-1: config 4 interface 9 has no altsetting 0 [ 1510.119393][ T1208] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 1510.128669][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.136859][ T1208] usb 6-1: Product: syz [ 1510.142141][ T1208] usb 6-1: Manufacturer: syz [ 1510.146869][ T1208] usb 6-1: SerialNumber: syz [ 1510.170538][T27975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1510.213216][T27975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1510.293410][ T1208] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1510.453828][T27975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.483313][T27975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.512273][ T30] audit: type=1326 audit(1745074536.460:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27984 comm="syz.1.6453" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 1510.577189][ T53] usb 6-1: Failed to submit usb control message: -71 [ 1510.619107][ T1208] usb 6-1: USB disconnect, device number 31 [ 1510.641751][ T53] usb 6-1: unable to send the bmi data to the device: -71 [ 1510.680674][ T53] usb 6-1: unable to get target info from device [ 1510.741769][ T53] usb 6-1: could not get target info (-71) [ 1510.838423][ T53] usb 6-1: could not probe fw (-71) [ 1511.029672][T22814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.206762][T22814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.348320][ T1208] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1511.473325][T22814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.543937][ T1208] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.552808][T27994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1511.593881][T25374] Bluetooth: hci0: command tx timeout [ 1511.638389][ T1208] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1511.662991][ T1208] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1511.677404][ T1208] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1511.687189][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.697271][ T1208] usb 3-1: Product: syz [ 1511.702403][ T1208] usb 3-1: Manufacturer: syz [ 1511.719103][ T1208] usb 3-1: SerialNumber: syz [ 1512.077478][T25374] Bluetooth: hci4: command 0x0406 tx timeout [ 1512.572322][T22814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.649305][T27998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1512.852347][T28001] syzkaller1: entered promiscuous mode [ 1512.887803][T28001] syzkaller1: entered allmulticast mode [ 1513.185998][T27979] chnl_net:caif_netlink_parms(): no params data found [ 1513.220951][ T1208] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1513.247669][ T1208] usb 3-1: No valid video chain found. [ 1513.263744][ T1208] usb 3-1: USB disconnect, device number 35 [ 1513.675487][T15256] Bluetooth: hci0: command tx timeout [ 1513.823169][ T5907] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1514.011454][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 1514.026484][ T5907] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1514.035330][ T5907] usb 4-1: config 0 has no interface number 0 [ 1514.041463][ T5907] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1514.053343][ T5907] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1514.066901][ T5907] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1514.136089][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 1514.157009][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 1514.173303][T22814] dvmrp1 (unregistering): left allmulticast mode [ 1514.179733][ T5907] usb 4-1: Product: syz [ 1514.207477][ T5907] usb 4-1: config 0 descriptor?? [ 1514.239385][T28008] ALSA: mixer_oss: invalid OSS volume './file0' [ 1514.307230][ T5907] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 1514.324455][ T5907] gspca_stv06xx: st6422 sensor detected [ 1514.330945][T22814] geneve0 (unregistering): left promiscuous mode [ 1514.404746][T22814] team0: Port device geneve0 removed [ 1514.574102][T28021] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6461'. [ 1514.716440][T22814] bond0 (unregistering): (slave team0): Releasing backup interface [ 1514.726094][T22814] team0: left promiscuous mode [ 1514.739790][T22814] bond0 (unregistering): Released all slaves [ 1514.756617][T22814] bond1 (unregistering): Released all slaves [ 1515.231416][T27979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.267585][T27979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.290906][T27979] bridge_slave_0: entered allmulticast mode [ 1515.314521][T27979] bridge_slave_0: entered promiscuous mode [ 1515.340390][T27979] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.387287][T27979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.397226][T27979] bridge_slave_1: entered allmulticast mode [ 1515.405679][T27979] bridge_slave_1: entered promiscuous mode [ 1515.549270][T27979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.568410][T27979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.613466][T18753] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1515.642999][ T5888] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1515.672175][T27979] team0: Port device team_slave_0 added [ 1515.688000][T27979] team0: Port device team_slave_1 added [ 1515.754949][T15256] Bluetooth: hci0: command tx timeout [ 1515.781276][T27979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.789313][T18753] usb 3-1: Using ep0 maxpacket: 16 [ 1515.792962][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 1515.802507][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.804458][ T5888] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1515.829265][T27979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.852993][T27979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.860256][T27979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.897067][T18753] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1515.906787][T18753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.915244][T18753] usb 3-1: Product: syz [ 1515.919734][T18753] usb 3-1: Manufacturer: syz [ 1515.927282][T18753] usb 3-1: SerialNumber: syz [ 1515.933178][T27979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.950547][ T5888] usb 6-1: config 0 has no interface number 0 [ 1515.954316][T18753] usb 3-1: config 0 descriptor?? [ 1515.959374][ T5888] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1515.970396][T18753] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1515.982250][ T5888] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1516.007789][ T5888] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1516.033035][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1516.050417][ T5888] usb 6-1: Product: syz [ 1516.058066][ T5888] usb 6-1: SerialNumber: syz [ 1516.070265][ T5888] usb 6-1: config 0 descriptor?? [ 1516.140476][T28028] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1516.170342][T18753] gp8psk: usb in 128 operation failed. [ 1516.200051][T18753] gp8psk: usb in 137 operation failed. [ 1516.215289][T27979] hsr_slave_0: entered promiscuous mode [ 1516.225124][T18753] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1516.243400][T27979] hsr_slave_1: entered promiscuous mode [ 1516.254828][T18753] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1516.265852][T27979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.276935][T27979] Cannot create hsr debugfs directory [ 1516.288186][T18753] usb 3-1: media controller created [ 1516.333228][T22814] þ: left promiscuous mode [ 1516.395326][ T5888] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1516.413168][T18753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1516.439740][ T5907] STV06xx 4-1:0.255: probe with driver STV06xx failed with error -71 [ 1516.452774][ T5888] usb 6-1: invalid MIDI in EP 0 [ 1516.499289][ T5907] usbhid 4-1:0.255: couldn't find an input interrupt endpoint [ 1516.544225][T18753] gp8psk_fe: Frontend revision 1 attached [ 1516.551598][ T5907] usb 4-1: USB disconnect, device number 43 [ 1516.568107][T18753] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1516.590336][T18753] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1516.699610][ T5888] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1516.738112][ T5888] usb 6-1: USB disconnect, device number 32 [ 1516.964048][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1516.964154][T18753] gp8psk: usb in 137 operation failed. [ 1517.000303][T18753] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1517.059240][T18753] gp8psk: found Genpix USB device pID = 201 (hex) [ 1517.279517][T18753] usb 3-1: USB disconnect, device number 36 [ 1517.521250][T18753] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1517.537475][T22814] hsr_slave_0: left promiscuous mode [ 1517.642160][T22814] veth1_vlan: left promiscuous mode [ 1517.872926][T15256] Bluetooth: hci0: command tx timeout [ 1518.183258][T18753] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1518.433514][T18753] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.452954][T18753] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1518.521204][ T30] audit: type=1326 audit(1745074544.490:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28071 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1518.543429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.582415][T18753] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1518.595225][ T30] audit: type=1326 audit(1745074544.570:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28071 comm="syz.2.6471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x7ffc0000 [ 1518.615496][T18753] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1518.715120][T18753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.745742][T18753] usb 2-1: Product: syz [ 1518.760343][T18753] usb 2-1: Manufacturer: syz [ 1518.817089][T18753] usb 2-1: SerialNumber: syz [ 1519.710122][T28086] ALSA: mixer_oss: invalid OSS volume './file0' [ 1520.345676][T18753] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1520.353133][T18753] usb 2-1: No valid video chain found. [ 1520.387779][T18753] usb 2-1: USB disconnect, device number 37 [ 1521.833283][ T5888] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1521.888551][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'. [ 1521.958514][T28114] x_tables: duplicate underflow at hook 1 [ 1522.020399][ T5888] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1522.043293][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.072966][ T5888] usb 4-1: Product: syz [ 1522.082188][ T5888] usb 4-1: Manufacturer: syz [ 1522.118412][ T5888] usb 4-1: SerialNumber: syz [ 1522.158457][ T5888] usb 4-1: config 0 descriptor?? [ 1522.216956][ T5888] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1522.246132][ T5888] pctv452e: pctv452e_power_ctrl: 1 [ 1522.246132][ T5888] [ 1522.298493][ T5888] usb 4-1: selecting invalid altsetting 3 [ 1522.331711][ T5888] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1522.331711][ T5888] [ 1522.377488][ T5888] dvb-usb: bulk message failed: -22 (5/0) [ 1522.444381][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1522.746400][ T5888] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1522.884935][T22814] IPVS: stop unused estimator thread 0... [ 1522.933746][T16393] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1522.945592][T27979] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1522.997239][T27979] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1523.115401][T16393] usb 3-1: Using ep0 maxpacket: 16 [ 1523.148706][T16393] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1523.167381][T27979] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1523.179714][T16393] usb 3-1: config 0 has no interface number 0 [ 1523.197723][T16393] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1523.200092][T27979] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1523.238841][T16393] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1523.304315][T16393] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1523.332975][T16393] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1523.343353][ T1208] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1523.367747][T16393] usb 3-1: Product: syz [ 1523.390630][T16393] usb 3-1: SerialNumber: syz [ 1523.411624][T16393] usb 3-1: config 0 descriptor?? [ 1523.455486][T28125] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1523.517651][ T1208] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.548547][ T1208] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1523.578129][ T1208] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1523.607612][ T1208] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1523.618786][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.638783][ T1208] usb 2-1: Product: syz [ 1523.666979][ T1208] usb 2-1: Manufacturer: syz [ 1523.695229][T27979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.702636][ T1208] usb 2-1: SerialNumber: syz [ 1523.781989][T27979] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.793428][T16393] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1523.807274][T16393] usb 3-1: invalid MIDI in EP 0 [ 1523.824649][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1523.831851][T16381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1523.875285][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.882464][T16381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.949194][T16393] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1524.000568][T16393] usb 3-1: USB disconnect, device number 37 [ 1524.190889][T27979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.214209][ T8196] udevd[8196]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1524.650426][T27979] veth0_vlan: entered promiscuous mode [ 1524.751252][T27979] veth1_vlan: entered promiscuous mode [ 1524.861046][T27979] veth0_macvtap: entered promiscuous mode [ 1524.896167][T27979] veth1_macvtap: entered promiscuous mode [ 1524.955663][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.004246][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.028004][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.054485][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.082984][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.110851][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.142951][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.168035][ T1208] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1525.181985][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.202239][ T1208] usb 2-1: No valid video chain found. [ 1525.220818][ T1208] usb 2-1: USB disconnect, device number 38 [ 1525.236637][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1525.243259][T18753] usb 4-1: USB disconnect, device number 44 [ 1525.440081][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.495906][T27979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1525.696971][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.747573][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.814113][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.881672][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.972794][T28157] ALSA: mixer_oss: invalid OSS volume './file0' [ 1525.992973][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.022922][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.053210][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.066408][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.169019][T27979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.212943][T27979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.244503][T27979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.265866][T27979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.312976][T27979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.321764][T27979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.360626][T27979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.593216][T16393] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1526.740037][T21609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.750146][T16393] usb 2-1: Using ep0 maxpacket: 16 [ 1526.780867][T21609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.854680][T28179] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6490'. [ 1527.109359][ T7157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.121778][ T7157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.259440][T16393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1529.287422][T28231] ALSA: mixer_oss: invalid OSS volume '' [ 1529.350714][T16393] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1529.400955][T16393] usb 2-1: can't read configurations, error -71 [ 1529.573075][ T1208] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1529.791879][T28243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1529.801097][T28243] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1529.810397][T28243] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1529.821675][T28243] net_ratelimit: 376 callbacks suppressed [ 1529.821698][T28243] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1530.004288][ T1208] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.033510][ T1208] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1530.085404][ T1208] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1530.104772][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.109790][T28281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6512'. [ 1532.588665][T28284] ALSA: mixer_oss: invalid OSS volume '' [ 1532.734741][T16393] usb 4-1: USB disconnect, device number 45 [ 1533.052927][ T5887] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1533.073184][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1533.123527][ T1208] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1533.193088][T16393] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1533.212979][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1533.220149][ T5887] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1533.234430][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.235747][ T24] usb 2-1: config 0 has no interfaces? [ 1533.258614][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1533.271194][ T5887] usb 1-1: config 0 has no interface number 0 [ 1533.276094][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.286882][ T24] usb 2-1: Product: syz [ 1533.291204][ T24] usb 2-1: Manufacturer: syz [ 1533.291443][ T5887] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1533.307369][ T24] usb 2-1: SerialNumber: syz [ 1533.314951][ T1208] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1533.328516][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.335955][ T24] usb 2-1: config 0 descriptor?? [ 1533.341601][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.349823][ T1208] usb 3-1: Product: syz [ 1533.370134][T16393] usb 4-1: Using ep0 maxpacket: 32 [ 1533.378049][ T1208] usb 3-1: Manufacturer: syz [ 1533.387002][ T5887] usb 1-1: config 0 descriptor?? [ 1533.401771][T16393] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1533.411215][ T1208] usb 3-1: SerialNumber: syz [ 1533.418225][T16393] usb 4-1: config 0 has no interface number 0 [ 1533.425129][ T5887] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 1533.433708][T16393] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1533.441809][ T5887] usb 1-1: No valid video chain found. [ 1533.448927][ T1208] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1533.456333][ T1208] r8152-cfgselector 3-1: config 0 descriptor?? [ 1533.472730][T16393] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1533.482758][T16393] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.491033][T16393] usb 4-1: Product: syz [ 1533.495604][T16393] usb 4-1: Manufacturer: syz [ 1533.500499][T16393] usb 4-1: SerialNumber: syz [ 1533.511114][T16393] usb 4-1: config 0 descriptor?? [ 1533.884679][T28298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.902623][T28298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.936328][ T1208] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1533.958290][ T1208] r8152-cfgselector 3-1: bad CDC descriptors [ 1533.983279][ T1208] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 1534.642191][T28305] netlink: 'syz.2.6521': attribute type 1 has an invalid length. [ 1535.468068][T16393] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1535.477268][T16393] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1535.498322][T16393] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1535.553800][T16393] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1535.606523][T16393] usb 4-1: USB disconnect, device number 46 [ 1535.724189][ T1208] usb 1-1: USB disconnect, device number 109 [ 1535.753183][ T24] usb 2-1: USB disconnect, device number 41 [ 1536.887659][T28342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1536.896837][T28342] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1536.906002][T28342] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1536.916975][T28342] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1537.200717][T28350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1537.210139][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1537.723121][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1537.905197][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.925149][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.939905][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1537.950390][ T5933] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1537.968366][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.993767][ T24] usb 4-1: config 0 descriptor?? [ 1538.098047][T28361] netlink: 'syz.1.6543': attribute type 2 has an invalid length. [ 1538.107266][T28361] netlink: 5356 bytes leftover after parsing attributes in process `syz.1.6543'. [ 1538.118283][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1538.128026][ T5933] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1538.142688][ T5933] usb 1-1: config 0 has no interface number 0 [ 1538.157366][ T5933] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1538.178658][ T5933] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1538.191791][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.200463][ T5933] usb 1-1: Product: syz [ 1538.250596][ T5933] usb 1-1: Manufacturer: syz [ 1538.264044][ T5933] usb 1-1: SerialNumber: syz [ 1538.293667][ T5933] usb 1-1: config 0 descriptor?? [ 1538.348603][T28367] netlink: 'syz.2.6546': attribute type 29 has an invalid length. [ 1538.364351][T28367] netlink: 'syz.2.6546': attribute type 29 has an invalid length. [ 1538.373573][T28367] netlink: 'syz.2.6546': attribute type 29 has an invalid length. [ 1539.738572][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 1539.753167][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1539.806677][ T24] usb 4-1: USB disconnect, device number 47 [ 1539.873002][T28186] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1540.023324][T28186] usb 3-1: Using ep0 maxpacket: 32 [ 1540.033134][T28385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.035052][T28186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.087382][T28186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.097764][T28186] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1540.107186][T28186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.136308][T28186] usb 3-1: config 0 descriptor?? [ 1541.194659][ T5933] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1541.222276][ T5933] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1541.252994][ T5933] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1541.318519][ T5933] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 1541.387104][ T5933] usb 1-1: USB disconnect, device number 110 [ 1542.452548][T28186] usbhid 3-1:0.0: can't add hid device: -71 [ 1542.459131][T28186] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1542.493844][T28186] usb 3-1: USB disconnect, device number 39 [ 1542.574092][ T30] audit: type=1326 audit(1745074568.540:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28422 comm="syz.2.6561" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1543.266164][T28413] ALSA: mixer_oss: invalid OSS volume './file0' [ 1543.744393][T28439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.802963][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1543.962508][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1543.997397][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1544.006834][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.026787][ T24] usb 3-1: Product: syz [ 1544.031082][ T24] usb 3-1: Manufacturer: syz [ 1544.066422][ T24] usb 3-1: SerialNumber: syz [ 1544.096029][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1544.102363][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 1544.322776][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1544.330412][ T24] r8152-cfgselector 3-1: bad CDC descriptors [ 1544.534028][ T24] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 1544.843306][ T30] audit: type=1326 audit(1745074570.810:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28464 comm="syz.0.6575" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x0 [ 1545.513537][T28449] ALSA: mixer_oss: invalid OSS volume './file0' [ 1545.728908][T28472] : renamed from bond0 (while UP) [ 1545.839424][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.846055][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.132968][T18753] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1546.231141][T28484] pim6reg1: entered allmulticast mode [ 1546.323008][T18753] usb 3-1: Using ep0 maxpacket: 16 [ 1546.335361][T18753] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1546.345958][T18753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.390759][T18753] usb 3-1: config 0 has no interface number 0 [ 1546.435587][T18753] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1546.469797][T18753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.510674][T18753] usb 3-1: config 0 descriptor?? [ 1546.546413][T18753] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 1546.616281][T18753] usb 3-1: No valid video chain found. [ 1546.659923][T28492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1547.596057][T28504] fuse: Unknown parameter 'Ȧ©“ÄŽ}Þ’ÀH'±½”'G€õŽ“i£a¢Í¦ÊGÔ»²ÇCäðdNUV÷M' [ 1548.646928][ T30] audit: type=1326 audit(1745074574.620:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28509 comm="syz.3.6588" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1548.721691][T18753] usb 3-1: USB disconnect, device number 41 [ 1548.748060][ T5933] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1548.993160][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 1549.001379][ T5933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1549.014798][ T5933] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 1549.033227][ T5933] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 1549.041407][ T5933] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.072095][ T5933] usb 1-1: config 1 has no interface number 0 [ 1549.088578][ T5933] usb 1-1: config 1 has no interface number 1 [ 1549.128674][ T5933] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1549.201706][ T5933] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1549.262269][ T5933] usb 1-1: config 1 interface 26 has no altsetting 0 [ 1549.278549][ T5933] usb 1-1: config 1 interface 89 has no altsetting 0 [ 1549.305030][ T5933] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1549.314569][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.330242][ T5933] usb 1-1: Product: syz [ 1549.339300][ T5933] usb 1-1: Manufacturer: syz [ 1549.350872][ T5933] usb 1-1: SerialNumber: syz [ 1549.584433][ T5933] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 1549.607360][ T5933] usb 1-1: 26:2 : does not exist [ 1549.637907][ T5933] usb 1-1: unknown interface protocol 0x13, assuming v1 [ 1549.671565][T28521] input: syz0 as /devices/virtual/input/input146 [ 1549.726255][ T5933] usb 1-1: 89:0 : does not exist [ 1549.805864][ T5933] usb 1-1: USB disconnect, device number 111 [ 1550.058575][ T8052] udevd[8052]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.232963][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1550.301192][T28546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6595'. [ 1550.396043][T28548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1550.466313][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1550.475813][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.516997][ T5933] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1550.528318][ T24] usb 4-1: Product: syz [ 1550.532611][ T24] usb 4-1: Manufacturer: syz [ 1550.539599][ T24] usb 4-1: SerialNumber: syz [ 1550.561411][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1550.605039][T18753] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1550.685907][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1550.700524][ T5933] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1550.710834][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.719301][ T5933] usb 1-1: Product: syz [ 1550.724424][ T5933] usb 1-1: Manufacturer: syz [ 1550.729330][ T5933] usb 1-1: SerialNumber: syz [ 1550.738352][ T5933] usb 1-1: config 0 descriptor?? [ 1550.873463][ T1208] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1550.978740][ T24] usb 1-1: USB disconnect, device number 112 [ 1551.036988][ T1208] usb 6-1: Using ep0 maxpacket: 16 [ 1551.048739][ T1208] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1551.065964][ T1208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.081793][ T1208] usb 6-1: Product: syz [ 1551.100262][ T1208] usb 6-1: Manufacturer: syz [ 1551.154705][T28536] ALSA: mixer_oss: invalid OSS volume './file0' [ 1551.169924][ T1208] usb 6-1: SerialNumber: syz [ 1551.190574][ T1208] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1551.209614][ T1208] r8152-cfgselector 6-1: config 0 descriptor?? [ 1551.314600][ T5933] usb 4-1: USB disconnect, device number 48 [ 1551.425581][T28564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6597'. [ 1551.441491][T28590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6597'. [ 1551.689066][T28590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6597'. [ 1551.706705][T28589] r8152-cfgselector 6-1: USB disconnect, device number 33 [ 1551.714197][ T5907] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1551.747013][ T30] audit: type=1326 audit(1745074577.720:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28600 comm="syz.2.6601" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd7539 code=0x0 [ 1551.895308][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1551.916604][ T5907] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1551.938202][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.952590][ T5907] usb 2-1: config 0 descriptor?? [ 1551.966446][T28592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1552.072924][T18753] usb 4-1: Service connection timeout for: 257 [ 1552.079391][T18753] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1552.101245][T18753] ath9k_htc: Failed to initialize the device [ 1552.124404][ T5933] usb 4-1: ath9k_htc: USB layer deinitialized [ 1552.459480][T28632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.657504][ T5907] usbhid 2-1:0.0: can't add hid device: -71 [ 1552.672685][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1552.687332][ T1208] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1552.692966][ T5907] usb 2-1: USB disconnect, device number 42 [ 1552.879366][ T1208] usb 4-1: config 0 has no interfaces? [ 1552.889586][ T1208] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1552.901553][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.918063][ T1208] usb 4-1: Product: syz [ 1552.925748][ T1208] usb 4-1: Manufacturer: syz [ 1552.936614][ T1208] usb 4-1: SerialNumber: syz [ 1552.949218][ T1208] usb 4-1: config 0 descriptor?? [ 1553.033289][T25374] Bluetooth: hci5: command 0x0406 tx timeout [ 1553.230305][T28659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.442561][T28659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.742982][ T1208] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1553.913134][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 1553.922647][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.959923][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.999927][T28672] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6610'. [ 1554.002982][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1554.047634][ T1208] usb 2-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 1554.067724][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.082437][ T1208] usb 2-1: config 0 descriptor?? [ 1554.325285][ T1208] usbhid 2-1:0.0: can't add hid device: -71 [ 1554.341819][ T1208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1554.388678][ T1208] usb 2-1: USB disconnect, device number 43 [ 1554.983614][T16393] hid-generic 0000:0003:0000.005A: item fetching failed at offset 0/2 [ 1555.017763][T16393] hid-generic 0000:0003:0000.005A: probe with driver hid-generic failed with error -22 [ 1555.250586][T28679] ALSA: mixer_oss: invalid OSS volume './file0' [ 1555.382208][ T1208] usb 4-1: USB disconnect, device number 49 [ 1555.403994][ T5907] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1555.604838][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.619796][ T5907] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1555.638231][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.658660][ T5907] usb 1-1: Product: syz [ 1555.667503][ T5907] usb 1-1: Manufacturer: syz [ 1555.684571][ T5907] usb 1-1: SerialNumber: syz [ 1555.893371][ T30] audit: type=1326 audit(1745074581.860:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28724 comm="syz.3.6619" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1555.957313][T28726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.602951][T16393] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1556.676618][T28748] xt_CT: No such helper "netbios-ns" [ 1556.785216][T16393] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1556.795055][T16393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.813369][ T5907] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1556.817613][T16393] usb 6-1: Product: syz [ 1556.819853][ T5907] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 1556.837625][T16393] usb 6-1: Manufacturer: syz [ 1556.846818][T16393] usb 6-1: SerialNumber: syz [ 1556.863486][T16393] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1556.893936][ T5887] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1557.018820][ T5907] cdc_ncm 1-1:1.0: setting tx_max = 16384 [ 1557.130675][ T5907] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1557.736285][T28752] ALSA: mixer_oss: invalid OSS volume './file0' [ 1557.945526][T28779] openvswitch: netlink: Actions may not be safe on all matching packets [ 1557.995038][ T5887] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1558.038283][ T5887] ath9k_htc: Failed to initialize the device [ 1558.082179][ T5887] usb 6-1: ath9k_htc: USB layer deinitialized [ 1558.254717][ T5907] usb 6-1: USB disconnect, device number 34 [ 1558.820494][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6634'. [ 1558.879485][ T5907] usb 1-1: USB disconnect, device number 113 [ 1558.907475][ T5907] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1559.092966][T28823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1559.127573][ T30] audit: type=1326 audit(1745074585.090:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28828 comm="syz.3.6638" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf711d539 code=0x0 [ 1559.293011][ T1208] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1559.503120][ T1208] usb 2-1: Using ep0 maxpacket: 8 [ 1559.535941][ T1208] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1559.558674][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.581619][ T1208] usb 2-1: config 0 descriptor?? [ 1560.212910][ T5887] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1560.374530][ T5887] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.419452][ T5887] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1560.512785][ T5887] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1560.531451][ T5887] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1560.542393][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.550903][ T5887] usb 6-1: Product: syz [ 1560.558468][ T5887] usb 6-1: Manufacturer: syz [ 1560.563544][ T5887] usb 6-1: SerialNumber: syz [ 1560.582933][ T1208] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1560.733163][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 1560.746806][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.766842][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.777986][ T1208] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1560.791456][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.812148][ T1208] usb 4-1: config 0 descriptor?? [ 1561.161127][T28908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6647'. [ 1561.216428][ T5887] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1561.223196][ T5887] usb 6-1: No valid video chain found. [ 1561.257119][ T5887] usb 6-1: USB disconnect, device number 35 [ 1561.472975][T28186] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1561.613826][T28186] usb 1-1: device descriptor read/64, error -71 [ 1561.944105][T28186] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1562.073100][ T5933] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1562.082907][T28186] usb 1-1: device descriptor read/64, error -71 [ 1562.142400][ T5887] usb 2-1: USB disconnect, device number 44 [ 1562.206083][T28186] usb usb1-port1: attempt power cycle [ 1562.262946][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 1562.342416][T28940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.565733][T28186] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1562.596197][T28186] usb 1-1: device descriptor read/8, error -71 [ 1562.892954][T28186] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1562.966055][T28186] usb 1-1: device descriptor read/8, error -71 [ 1563.135364][ T1208] usbhid 4-1:0.0: can't add hid device: -71 [ 1563.142967][ T1208] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1563.151808][T28186] usb usb1-port1: unable to enumerate USB device [ 1563.188253][ T1208] usb 4-1: USB disconnect, device number 50 [ 1565.103594][ T5933] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1565.132634][ T5933] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1565.152972][ T5933] usb 3-1: can't read configurations, error -71 [ 1565.162542][T28976] syz.0.6657 (28976): drop_caches: 2 [ 1566.046568][T28628] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1566.292929][T28628] usb 6-1: device descriptor read/64, error -71 [ 1566.643029][T28628] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1566.793132][T28628] usb 6-1: device descriptor read/64, error -71 [ 1566.911602][T28628] usb usb6-port1: attempt power cycle [ 1567.304524][T28628] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1567.375858][T28628] usb 6-1: device descriptor read/8, error -71 [ 1567.552923][ T1208] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1567.663018][T28628] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1567.729901][T28628] usb 6-1: device descriptor read/8, error -71 [ 1567.777010][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1567.797656][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 1567.849251][ T1208] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1567.921003][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.937984][T28628] usb usb6-port1: unable to enumerate USB device [ 1567.956346][ T1208] usb 2-1: config 0 descriptor?? [ 1568.796030][T29086] ptrace attach of "./syz-executor exec"[25773] was attempted by "./syz-executor exec"[29086] [ 1568.853927][ T1208] ath6kl: Failed to submit usb control message: -71 [ 1568.877670][ T1208] ath6kl: unable to send the bmi data to the device: -71 [ 1568.915892][ T1208] ath6kl: Unable to send get target info: -71 [ 1568.943980][ T1208] ath6kl: Failed to init ath6kl core: -71 [ 1568.947842][T29094] ================================================================== [ 1568.957841][T29094] BUG: KASAN: slab-use-after-free in string+0x227/0x2b0 [ 1568.964516][ T1208] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1568.964789][T29094] Read of size 1 at addr ffff888030f91220 by task syz.1.6675/29094 [ 1568.981108][T29094] [ 1568.983450][T29094] CPU: 1 UID: 0 PID: 29094 Comm: syz.1.6675 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1568.983477][T29094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1568.983491][T29094] Call Trace: [ 1568.983499][T29094] [ 1568.983508][T29094] dump_stack_lvl+0x241/0x360 [ 1568.983564][T29094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1568.983591][T29094] ? rcu_is_watching+0x15/0xb0 [ 1568.983610][T29094] ? __virt_addr_valid+0x183/0x530 [ 1568.983635][T29094] ? lock_release+0x4e/0x3e0 [ 1568.983665][T29094] ? __virt_addr_valid+0x183/0x530 [ 1568.983688][T29094] ? __virt_addr_valid+0x183/0x530 [ 1568.983713][T29094] print_report+0x16e/0x5b0 [ 1568.983732][T29094] ? __virt_addr_valid+0x183/0x530 [ 1568.983756][T29094] ? __virt_addr_valid+0x183/0x530 [ 1568.983779][T29094] ? __virt_addr_valid+0x45f/0x530 [ 1568.983803][T29094] ? __phys_addr+0xba/0x170 [ 1568.983826][T29094] ? string+0x227/0x2b0 [ 1568.983851][T29094] kasan_report+0x143/0x180 [ 1568.983869][T29094] ? string+0x227/0x2b0 [ 1568.983896][T29094] string+0x227/0x2b0 [ 1568.983922][T29094] vsnprintf+0x8b6/0x1230 [ 1568.983953][T29094] ? __pfx_vsnprintf+0x10/0x10 [ 1568.983980][T29094] seq_printf+0x174/0x270 [ 1568.984008][T29094] ? seq_printf+0x1c2/0x270 [ 1568.984032][T29094] ? __pfx_seq_printf+0x10/0x10 [ 1568.984057][T29094] ? __asan_memcpy+0x40/0x70 [ 1568.984086][T29094] input_devices_seq_show+0x153/0x650 [ 1568.984109][T29094] seq_read_iter+0x461/0xda0 [ 1568.984142][T29094] seq_read+0x3ab/0x4f0 [ 1568.984169][T29094] ? __pfx_seq_read+0x10/0x10 [ 1568.984192][T29094] ? __pfx___futex_wait+0x10/0x10 [ 1568.984220][T29094] ? __pfx_futex_wake_mark+0x10/0x10 [ 1568.984252][T29094] ? __pfx_seq_read+0x10/0x10 [ 1568.984274][T29094] proc_reg_read+0x201/0x2f0 [ 1568.984297][T29094] vfs_readv+0x6be/0xa80 [ 1568.984322][T29094] ? __pfx_proc_reg_read+0x10/0x10 [ 1568.984343][T29094] ? __pfx_vfs_readv+0x10/0x10 [ 1568.984370][T29094] ? __fget_files+0x2a/0x420 [ 1568.984388][T29094] ? __fget_files+0x39d/0x420 [ 1568.984405][T29094] ? __fget_files+0x2a/0x420 [ 1568.984427][T29094] __ia32_compat_sys_preadv+0x1d1/0x2d0 [ 1568.984458][T29094] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 1568.984491][T29094] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1568.984512][T29094] ? lockdep_hardirqs_on+0x9d/0x150 [ 1568.984532][T29094] __do_fast_syscall_32+0xb4/0x110 [ 1568.984563][T29094] ? ret_from_fork_asm+0x1a/0x30 [ 1568.984581][T29094] ? lockdep_hardirqs_on+0x9d/0x150 [ 1568.984601][T29094] do_fast_syscall_32+0x34/0x80 [ 1568.984641][T29094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1568.984667][T29094] RIP: 0023:0xf70fd539 [ 1568.984686][T29094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1568.984705][T29094] RSP: 002b:00000000f50ed55c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 1568.984728][T29094] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000740 [ 1568.984744][T29094] RDX: 0000000000000001 RSI: 0000000000000401 RDI: 0000000000000000 [ 1568.984757][T29094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1568.984771][T29094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1568.984784][T29094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1568.984806][T29094] [ 1568.984814][T29094] [ 1569.003258][ T1208] usb 2-1: USB disconnect, device number 45 [ 1569.006927][T29094] Allocated by task 23: [ 1569.006952][T29094] kasan_save_track+0x3f/0x80 [ 1569.006983][T29094] __kasan_kmalloc+0x9d/0xb0 [ 1569.328146][T29094] __kmalloc_noprof+0x28e/0x4d0 [ 1569.333021][T29094] ieee802_11_parse_elems_full+0x16d/0x2f10 [ 1569.338924][T29094] ieee80211_inform_bss+0x166/0x10e0 [ 1569.344240][T29094] cfg80211_inform_single_bss_data+0xf5f/0x1ed0 [ 1569.350497][T29094] cfg80211_inform_bss_data+0x3c5/0x5860 [ 1569.356137][T29094] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 1569.362203][T29094] ieee80211_bss_info_update+0x8ac/0xbc0 [ 1569.367846][T29094] ieee80211_scan_rx+0x526/0x9c0 [ 1569.372807][T29094] ieee80211_rx_list+0x28cd/0x3490 [ 1569.377953][T29094] ieee80211_rx_napi+0x187/0x3c0 [ 1569.382891][T29094] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1569.388873][T29094] tasklet_action_common+0x428/0x620 [ 1569.394157][T29094] handle_softirqs+0x2d6/0x9b0 [ 1569.398923][T29094] run_ksoftirqd+0xcf/0x130 [ 1569.403435][T29094] smpboot_thread_fn+0x576/0xaa0 [ 1569.408380][T29094] kthread+0x7b7/0x940 [ 1569.412454][T29094] ret_from_fork+0x4b/0x80 [ 1569.416878][T29094] ret_from_fork_asm+0x1a/0x30 [ 1569.421645][T29094] [ 1569.423965][T29094] Freed by task 23: [ 1569.427767][T29094] kasan_save_track+0x3f/0x80 [ 1569.432457][T29094] kasan_save_free_info+0x40/0x50 [ 1569.437490][T29094] __kasan_slab_free+0x59/0x70 [ 1569.442265][T29094] kfree+0x198/0x430 [ 1569.446163][T29094] ieee80211_inform_bss+0xbfe/0x10e0 [ 1569.451448][T29094] cfg80211_inform_single_bss_data+0xf5f/0x1ed0 [ 1569.457701][T29094] cfg80211_inform_bss_data+0x3c5/0x5860 [ 1569.463373][T29094] cfg80211_inform_bss_frame_data+0x3c5/0x720 [ 1569.469475][T29094] ieee80211_bss_info_update+0x8ac/0xbc0 [ 1569.475138][T29094] ieee80211_scan_rx+0x526/0x9c0 [ 1569.480081][T29094] ieee80211_rx_list+0x28cd/0x3490 [ 1569.485219][T29094] ieee80211_rx_napi+0x187/0x3c0 [ 1569.490171][T29094] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1569.496186][T29094] tasklet_action_common+0x428/0x620 [ 1569.501471][T29094] handle_softirqs+0x2d6/0x9b0 [ 1569.506235][T29094] run_ksoftirqd+0xcf/0x130 [ 1569.510732][T29094] smpboot_thread_fn+0x576/0xaa0 [ 1569.515668][T29094] kthread+0x7b7/0x940 [ 1569.519735][T29094] ret_from_fork+0x4b/0x80 [ 1569.524155][T29094] ret_from_fork_asm+0x1a/0x30 [ 1569.528909][T29094] [ 1569.531223][T29094] The buggy address belongs to the object at ffff888030f91000 [ 1569.531223][T29094] which belongs to the cache kmalloc-1k of size 1024 [ 1569.545268][T29094] The buggy address is located 544 bytes inside of [ 1569.545268][T29094] freed 1024-byte region [ffff888030f91000, ffff888030f91400) [ 1569.559149][T29094] [ 1569.561480][T29094] The buggy address belongs to the physical page: [ 1569.567885][T29094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30f90 [ 1569.576648][T29094] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1569.585147][T29094] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1569.593123][T29094] page_type: f5(slab) [ 1569.597101][T29094] raw: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 1569.605716][T29094] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1569.614300][T29094] head: 00fff00000000040 ffff88801b041dc0 0000000000000000 dead000000000001 [ 1569.622970][T29094] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1569.631632][T29094] head: 00fff00000000003 ffffea0000c3e401 00000000ffffffff 00000000ffffffff [ 1569.640301][T29094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1569.648996][T29094] page dumped because: kasan: bad access detected [ 1569.655439][T29094] page_owner tracks the page as allocated [ 1569.661143][T29094] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 23804159757, free_ts 0 [ 1569.680845][T29094] post_alloc_hook+0x1f4/0x240 [ 1569.685631][T29094] get_page_from_freelist+0x360a/0x37a0 [ 1569.691174][T29094] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 1569.696983][T29094] alloc_pages_mpol+0x339/0x690 [ 1569.701829][T29094] allocate_slab+0x8f/0x3b0 [ 1569.706335][T29094] ___slab_alloc+0xc3b/0x1500 [ 1569.711011][T29094] __slab_alloc+0x58/0xa0 [ 1569.715354][T29094] __kmalloc_cache_noprof+0x26a/0x370 [ 1569.720717][T29094] fqdir_init+0x59/0x170 [ 1569.724966][T29094] nf_ct_net_init+0x3b/0x2e0 [ 1569.729562][T29094] ops_init+0x349/0x5b0 [ 1569.733722][T29094] register_pernet_operations+0x31f/0x660 [ 1569.739470][T29094] register_pernet_subsys+0x28/0x40 [ 1569.744675][T29094] nf_ct_frag6_init+0x87/0xc0 [ 1569.749356][T29094] nf_defrag_init+0xf/0xb0 [ 1569.753769][T29094] do_one_initcall+0x24a/0x940 [ 1569.758535][T29094] page_owner free stack trace missing [ 1569.763910][T29094] [ 1569.766227][T29094] Memory state around the buggy address: [ 1569.771849][T29094] ffff888030f91100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1569.779919][T29094] ffff888030f91180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1569.787980][T29094] >ffff888030f91200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1569.796057][T29094] ^ [ 1569.801185][T29094] ffff888030f91280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1569.809262][T29094] ffff888030f91300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1569.817340][T29094] ================================================================== [ 1569.825608][ C1] vkms_vblank_simulate: vblank timer overrun [ 1569.848861][T29094] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1569.856117][T29094] CPU: 0 UID: 0 PID: 29094 Comm: syz.1.6675 Not tainted 6.15.0-rc2-syzkaller-00400-g3088d26962e8 #0 PREEMPT(full) [ 1569.868202][T29094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1569.878281][T29094] Call Trace: [ 1569.881559][T29094] [ 1569.884489][T29094] dump_stack_lvl+0x241/0x360 [ 1569.889190][T29094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1569.894397][T29094] ? __pfx__printk+0x10/0x10 [ 1569.899031][T29094] ? vscnprintf+0x5d/0x90 [ 1569.903387][T29094] panic+0x349/0x880 [ 1569.907293][T29094] ? check_panic_on_warn+0x21/0xb0 [ 1569.912404][T29094] ? __pfx_panic+0x10/0x10 [ 1569.916828][T29094] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 1569.922818][T29094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1569.929149][T29094] ? print_report+0x519/0x5b0 [ 1569.933839][T29094] check_panic_on_warn+0x86/0xb0 [ 1569.938779][T29094] ? string+0x227/0x2b0 [ 1569.942935][T29094] end_report+0x77/0x160 [ 1569.947174][T29094] kasan_report+0x154/0x180 [ 1569.951673][T29094] ? string+0x227/0x2b0 [ 1569.955843][T29094] string+0x227/0x2b0 [ 1569.959834][T29094] vsnprintf+0x8b6/0x1230 [ 1569.964204][T29094] ? __pfx_vsnprintf+0x10/0x10 [ 1569.969001][T29094] seq_printf+0x174/0x270 [ 1569.973357][T29094] ? seq_printf+0x1c2/0x270 [ 1569.977860][T29094] ? __pfx_seq_printf+0x10/0x10 [ 1569.982714][T29094] ? __asan_memcpy+0x40/0x70 [ 1569.987306][T29094] input_devices_seq_show+0x153/0x650 [ 1569.992678][T29094] seq_read_iter+0x461/0xda0 [ 1569.997283][T29094] seq_read+0x3ab/0x4f0 [ 1570.001446][T29094] ? __pfx_seq_read+0x10/0x10 [ 1570.006144][T29094] ? __pfx___futex_wait+0x10/0x10 [ 1570.011172][T29094] ? __pfx_futex_wake_mark+0x10/0x10 [ 1570.016470][T29094] ? __pfx_seq_read+0x10/0x10 [ 1570.021163][T29094] proc_reg_read+0x201/0x2f0 [ 1570.025797][T29094] vfs_readv+0x6be/0xa80 [ 1570.030048][T29094] ? __pfx_proc_reg_read+0x10/0x10 [ 1570.035164][T29094] ? __pfx_vfs_readv+0x10/0x10 [ 1570.039931][T29094] ? __fget_files+0x2a/0x420 [ 1570.044522][T29094] ? __fget_files+0x39d/0x420 [ 1570.049195][T29094] ? __fget_files+0x2a/0x420 [ 1570.053787][T29094] __ia32_compat_sys_preadv+0x1d1/0x2d0 [ 1570.059347][T29094] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 1570.065456][T29094] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1570.072058][T29094] ? lockdep_hardirqs_on+0x9d/0x150 [ 1570.077266][T29094] __do_fast_syscall_32+0xb4/0x110 [ 1570.082378][T29094] ? ret_from_fork_asm+0x1a/0x30 [ 1570.087308][T29094] ? lockdep_hardirqs_on+0x9d/0x150 [ 1570.092522][T29094] do_fast_syscall_32+0x34/0x80 [ 1570.097375][T29094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1570.103711][T29094] RIP: 0023:0xf70fd539 [ 1570.107774][T29094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1570.127374][T29094] RSP: 002b:00000000f50ed55c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 1570.135796][T29094] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000740 [ 1570.143760][T29094] RDX: 0000000000000001 RSI: 0000000000000401 RDI: 0000000000000000 [ 1570.151721][T29094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1570.159694][T29094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1570.167683][T29094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1570.175662][T29094] [ 1570.178996][T29094] Kernel Offset: disabled [ 1570.183320][T29094] Rebooting in 86400 seconds..