last executing test programs: 18m48.749250597s ago: executing program 0 (id=610): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05"], 0x8) 18m48.584838534s ago: executing program 0 (id=612): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000400), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32, @ANYBLOB="0000800000000000000004000000", @ANYRES32]) 18m48.429952358s ago: executing program 0 (id=615): syz_usb_connect(0x5, 0x6a, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x7, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x3, 0x96, 0x7}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) 18m46.837562764s ago: executing program 0 (id=617): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="204701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mmap(&(0x7f0000020000/0x4000)=nil, 0x4000, 0x3800009, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x124}, 0x1, 0x0, 0x0, 0x20040844}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 18m45.979466547s ago: executing program 2 (id=627): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m42.86510123s ago: executing program 0 (id=637): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff3) ioctl$TUNGETVNETLE(r1, 0x80047456, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000380)=r4) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000ec0)={r8, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x800}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01ffffff7f000000000067"], 0x30}}, 0x0) syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB="1a0110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200026df780052501", @ANYRES32=r12], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100025bd7000fddbdf250600000008000600f619300d"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, 0x0) 18m42.784860783s ago: executing program 2 (id=639): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r0]) 18m41.616926261s ago: executing program 2 (id=641): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r4, 0x1, 0x0, 0x1000000000000}) 18m41.45416738s ago: executing program 2 (id=643): io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 18m41.453436796s ago: executing program 1 (id=644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 18m41.292151281s ago: executing program 2 (id=645): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x50) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m40.789515104s ago: executing program 1 (id=648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 18m39.61383449s ago: executing program 1 (id=649): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfd', @ANYRESHEX=r0]) 18m39.253179118s ago: executing program 1 (id=650): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x1000000, 0x0}) 18m39.15317645s ago: executing program 1 (id=651): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x5, r3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r4, 0x1, 0x0, 0x1000000000000}) 18m39.066056121s ago: executing program 1 (id=652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fstat(r2, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) 18m38.983760237s ago: executing program 2 (id=653): r0 = memfd_create(&(0x7f0000000000)='\x80{\x06\xf4Px\x8d`\x0f\xb8\x10\xc8', 0x5) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000001180)=[{0x3, 0x200, 0x18, &(0x7f0000000180)="befd1f0bbc4a3b9619e4838d5282ccccc2b9001fa3e8f376"}], 0x1}) 18m28.570723054s ago: executing program 0 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x7fffffff, 0x1f8, 0x4, 0x8, 0xffff, 0x4, 0x1, 0x400]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x240040, 0x0) 18m13.7580232s ago: executing program 32 (id=652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fstat(r2, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) 18m11.619278623s ago: executing program 33 (id=653): r0 = memfd_create(&(0x7f0000000000)='\x80{\x06\xf4Px\x8d`\x0f\xb8\x10\xc8', 0x5) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000001180)=[{0x3, 0x200, 0x18, &(0x7f0000000180)="befd1f0bbc4a3b9619e4838d5282ccccc2b9001fa3e8f376"}], 0x1}) 18m11.161702808s ago: executing program 34 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x7fffffff, 0x1f8, 0x4, 0x8, 0xffff, 0x4, 0x1, 0x400]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x240040, 0x0) 8m47.523128759s ago: executing program 3 (id=4554): ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f0000000300)={0x8c9c, 0x1, 0x1, 0x1}) pipe2(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003450000004503db9d6a22c43553aaccec4c83f56bb30384f331c7b6723201a922a6381d98763cff410a51ed191462a4685426d7b8fdb951597b6628a22a43fea2754c97ff5436992beb3ce488b13decc5ebeaf4e95a3eeda0287bd1f5ec4e033afe46aa805c662699fde4aed368d48869b52be124e1840905479257d890bc34c0e3c79da644b7d9300a5fc92bde0be48a3a891bcba847b48a995d22a84e8a84016214c3853aace15f00000000000000"]}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = syz_usb_connect(0x6, 0x6a, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0xbd, 0x5d, 0x54, 0x40, 0x19d2, 0x1065, 0x1765, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0xa, 0x3, 0x40, 0x1, "", [{{0x9, 0x4, 0x39, 0x6, 0x4, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x6, 0x20, 0xe, [@generic={0x14, 0x1, "41808fb548c493f5712d221babba330aa76d"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x7, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5f}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x9, 0x9, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0x2, 0x9}}]}}]}}]}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x6e6bbc}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000), 0x4) r7 = socket(0x10, 0x803, 0x0) syz_usb_control_io(r1, &(0x7f0000001980)={0x2c, &(0x7f0000000140)={0x20, 0x8, 0x53, {0x53, 0xd, "fef473d8bc44f050f95728f89f58d40e64f928e00d7c6be9e8d1e4f72901ce0778deba7d0572e2e5b2322f94569a4aac933fc46cbac68526085356b195746890344e50cc059c38ca6b7749b6103b4c245c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000740)={0x0, 0xf, 0x17d, {0x5, 0xf, 0x17d, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x9, 0x0, 0x5, 0x3}, @generic={0x7c, 0x10, 0x1, "e331df17cf91f5fc6e0be357d68b4ab09268ae708fabe786bb85679f885cf49090977323f0a985a42d9e902c74743eeb7fd189963236178a1f48568cbe1fac38ad21bf69092d322b1bd7275ddd424fcf7e50e519c966b50e4dd6d442b4c6b79bce8ed37eb497ac3ef0892c5402f18fbd7a90e41314f51d8fce"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x3, 0x7, 0xd06, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xc5, 0xf00, 0xcc7, [0x3fc0]}, @generic={0xb6, 0x10, 0xa, "d493761c17abe58d2a40da6dd44c8bff9a81818d642ba1727f09c9bdc20511be1ea3ae58fde0a44ae8507645e12ab8bd92016389e0af5d04583e8e6a6ae5b197f48519473a00b5bbbe4de6954a233b6a344dcfb1ac733498c3a84b528a7c30e0c179f1b11191d20175238ade2fafc4980560873a3a317dc20b7baf7d25bb035b0c16f547d2be58134ffd5c306225d5a7a80e0d1ad9ad2e52b4928dad73be2581c6ac99b708ef21c70999d0e0de9c09b266c91b"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7, 0xf, 0x9, [0xc000, 0x0, 0xff, 0xcf, 0x6a00e6ef6d23d43]}]}}, &(0x7f0000000900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x7f, 0xba, "890b5213", "6d90d767"}}, &(0x7f0000001940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x60, 0x40, 0x2, 0x3, 0x1, 0xf940}}}, &(0x7f0000001e80)={0x84, &(0x7f00000019c0)={0x40, 0xc, 0x83, "afe902b4b5edb3f6fa9f340164fa225112a578ff71ce8833b9a6b882d5e8c5d5bdb66ed8a56170b95565c129c6214c70229ca92bf825e7c38c2f2d1724d43211538ed6964ee301b239efb6e78deb2dc5d8c7bbc61f325532bcadd5670f567f9cc6c133ead81b321509674eb61839d08a608e934f6699c545551d878884ef5f4d9e2c01"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001b00)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000001b40)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001f80)=ANY=[@ANYBLOB="200004000000080020001e53ee12f97811034c65dd93373390584cc2642ef3927d43d9ef623bbadbd7e66e4ac511340894da1739fdf733a2404c3c5d8044a5520376762a005f29eee26e1e32be6624dfcc747a4951c6e7917c6f6bc8ed45ecc019875e13c0b1922ed5dc4d6b97"], &(0x7f0000001bc0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001c00)={0x40, 0x9, 0x1, 0xa7}, &(0x7f0000001c40)={0x40, 0xb, 0x2, "a070"}, &(0x7f0000001c80)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001cc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001d00)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001d40)={0x40, 0x19, 0x2, 'GE'}, &(0x7f0000001d80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001dc0)={0x40, 0x1c, 0x1, 0xdb}, &(0x7f0000001e00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001e40)={0x40, 0x21, 0x1, 0x8f}}) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') preadv(r8, &(0x7f0000001ac0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, 0x8, 0x5) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000002080)=""/244) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r9, 0x4, 0xfc, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x8, 0x1}}) 8m45.835338156s ago: executing program 3 (id=4565): mkdirat(0xffffffffffffff9c, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x83, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x80, 0xfffffffe, {}, {0x4, 0x1, 0xc2, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8m44.527405542s ago: executing program 3 (id=4572): r0 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e01020301090261000100000000090400"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0xb, 0xc5, {0xc5, 0x11, "a98140d0e71f239daa2a354d32f25f46b841c3b06f87e382ab47c60eb9f1f33d65094b2bbb2a314421f6edd61ac112e2452a000e1540e728dec1afef927d40452ef7c46e7eedaeda9afe2276d4524c02a27d0c731608ee52d54a72980726a5550cf271d6037e11f71a800fa59a0db727b4211e2753bf7e8008efeed18f668185f44557318b38dc25915fcd74800ac0e588fa606718d223640845776da245cddf22ef1ef8e13a5a8113a3b458514f9ac0e7a813e926d966809b04b63d2b10b14543dc0e"}}, &(0x7f0000000100)={0x0, 0x3, 0x15, @string={0x15, 0x3, "2ee4d4662ec720c7f214ff40d518d4cfb7c9b6"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x40, 0xf, 0xd0, "65cc34aaa1e9e590f76787ab1775953c1418d61dbcaca892988002caf69b3c362f061c80beec21f8cb9925a51eba5fa70e6d4785f3132e23e3e465e825ad35260bf9da227dd788bfd6a39a09f6c780eee6da3512898bfa2e69eff504d0ae8b01f00336650a37bc23e0dd41f5b47ad5204bd3eb557f3340f8d424281f59750bfedf034050211f5cbb1de84f3b8ae74c5d26d624e6ac117a4ea448e4f2bc74d12af3854cda9e254bd0de89371825cdf73f7f27999e588c00f4a35824154d11e1cfa61d0308336499199796bc95ca9f0ff3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x10001}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "a6dd4bec20dbc7ff5b55b6fe9f79d14d602b140b1421b586cd861572e7e6e1ce3a7a85a068759431029b9367291061"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 8m41.428178903s ago: executing program 3 (id=4585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x12081, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000380)={0x1, r0, 0x1}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2a05004, 0x0) write$vga_arbiter(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="746172676574205043493a363a31303a31622e3500b07ef84ada65b78f61df440773bd73790f206f917c701de4eb002551d2cc1900206fb8cf1ec45365b97fb64e45f2f235fcbb924d3e75e8fae95dcd42b0833263b75059abad20dc8c8bac5a45527befe6aeace88c2464ee"], 0x15) r6 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00xffffffffffffffff}, 0x80) sendmsg$TIPC_NL_NODE_GET(r8, &(0x7f0000000700)={&(0x7f0000000200), 0xc, &(0x7f0000000680)={&(0x7f0000000d40)=ANY=[@ANYBLOB="55cc0100e6f7ec96f8011bdfd95082a07714a5a91b1d3967db60c2868b89af0269f98644055339c1935e4874023dbe0562c75f1bbcab7cd7772677bcf438b056b33d6798ed56dc0b1624004d09cb65bff463c908159da24a95d1a0e684fa9d7187277d1b5a8039d518696850e4e7baf91e42a518000000", @ANYRES16=0x0, @ANYBLOB="080003000000fedbdf250d0000001c000380080003000900000008000100330a00000800010000000000500004802c000780080003000100000008000200050000000800030006000000080004000500000008000200b30000000900010073797a31000000001300010062726f6164636173742d6c696e6b00007c0004800900010073797a30000000002c000780080002000500000008000100030000000800040001000000080002000000000008000300020000000900010073797a310000000014000780080001000f0000000800030001000000140007800800030006000000080001001d0000000900010073797a31000000005c000280340003800800020003000000080001000600000008000100000100000800010001000080080002000b000000080001000100000008000100a40700001c00038008000100ff0100000800010002000000080001000e000000740004804c0007800800020006000000080004000000000008000100150000000800040009000000080003000f000000080001000500000008000300050000000800040027b30000080001001100000024000780080002000100000008000200040000000800040006000000080004000a000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x4004010) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0}, &(0x7f00000000c0)=0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000740)=""/226, &(0x7f0000000840)=0xe2) 8m41.135199024s ago: executing program 3 (id=4586): r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000edff0000000300000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) timer_getoverrun(r1) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xff}, 0x1c) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) 8m39.862945995s ago: executing program 3 (id=4590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0x2}, 0x6) close(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x101, 0x1, {0x8000, 0x1000, 0x404, 0x4}}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) 8m39.694590487s ago: executing program 35 (id=4590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0x2}, 0x6) close(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r2) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x101, 0x1, {0x8000, 0x1000, 0x404, 0x4}}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000000) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4048aec9, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) 7m4.107554583s ago: executing program 4 (id=4911): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="09000000e700140000007e7bfbf788a83baa9900d6f18035950088a8000088a8", 0x51, 0x4040, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) 7m4.074806058s ago: executing program 4 (id=4912): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 7m4.029341996s ago: executing program 4 (id=4913): syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x5, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001700)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x8}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/67, 0x43}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4006050000002505315ab4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x9, 0x40800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0xcb) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6) 7m1.122145762s ago: executing program 4 (id=4924): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) accept(r1, 0x0, 0x0) 6m59.93330557s ago: executing program 4 (id=4927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x40000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000080)={"68e2d56c9d39352a8bf6302c93220661cb4027a51eb3590800", 0xfffffffe, 0x0, 0x401, 0xfffff001, 0x2, 0x6507, 0x0, 0x0, [0x20000004, 0x405, 0x85b, 0xfff, 0x0, 0x8, 0x9, 0xff, 0xff, 0x2, 0x2, 0x1000, 0x7ff, 0x9, 0xd, 0x9, 0x10, 0x2, 0x81]}) 6m59.834834009s ago: executing program 4 (id=4928): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002e0001002dbd7000ffdbdf2508004300", @ANYRES32, @ANYBLOB="0c00458008e0ae", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x80}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x5d, 0xa, 0x1, "b75c89e785a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x55595659}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 6m44.611714312s ago: executing program 36 (id=4928): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002e0001002dbd7000ffdbdf2508004300", @ANYRES32, @ANYBLOB="0c00458008e0ae", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x80}, 0xc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x5d, 0xa, 0x1, "b75c89e785a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x55595659}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@initdev, @empty, @remote}, &(0x7f0000000040)=0x6) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 2.267369432s ago: executing program 5 (id=6440): io_setup(0x9, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r0, 0x0, &(0x7f00000013c0)) 2.176650191s ago: executing program 7 (id=6442): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) 2.120956262s ago: executing program 5 (id=6443): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="5100030000f4", 0x6) 2.071354356s ago: executing program 7 (id=6444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x3a5, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000000, 0x7, 0x6, 0x6, 0x7, 0x7, 0x9}]}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, @multicast1, 0x1e, 0xe}}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) futex_waitv(&(0x7f0000000940)=[{0x10000, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000000c00), 0x1) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000005700)=@svm={0x109, 0x1, 0x1080, {0x30000}, {"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"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000000)='veth0_macvtap\x00') accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r9 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x101000) ioctl$NBD_DO_IT(r9, 0xab03) r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) utimensat(r10, 0x0, &(0x7f0000000240)={{}, {0x0, 0x3ffffffe}}, 0x0) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000180)={0x9, 0x7, 0x8}) 2.03620228s ago: executing program 5 (id=6445): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 1.967248245s ago: executing program 8 (id=6446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.895823195s ago: executing program 5 (id=6447): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.857858391s ago: executing program 5 (id=6448): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d930746", 0xe8}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.752784127s ago: executing program 8 (id=6449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) 1.674490692s ago: executing program 8 (id=6450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000005bc0)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)="b9ed902c74461324c62c0868182d6e944fd68083abff15", 0x17}, {0x0}, {0x0}], 0x3, &(0x7f0000001d40)=[@sndrcv={0x30, 0x84, 0x1, {0xbe7f, 0x26b, 0xd, 0x9, 0x4, 0xfffffffe, 0x5, 0x200005}}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x4, 0x8000, 0x6, 0x10000, 0xa107, 0x7, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x80, 0x804}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, {&(0x7f0000004540)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008001}], 0x3, 0x4890) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.555323404s ago: executing program 6 (id=6451): io_setup(0x9, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[0x0]) 1.548319151s ago: executing program 7 (id=6452): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) 1.498698878s ago: executing program 7 (id=6453): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={0x0, 0x10, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000240)={r3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040b01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000002000000, 0x0}}, 0xfdbc) 1.464462444s ago: executing program 6 (id=6454): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r3, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="09000000e700140000007e7bfbf788a83baa9900d6f18035950088a8000088a8", 0x51, 0x4040, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) 1.379359556s ago: executing program 7 (id=6455): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 1.35272317s ago: executing program 7 (id=6456): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = fanotify_init(0x40, 0x80000) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000400), 0x46a05502b, 0x2) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r1]) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x1, @meta={0x58583444, 0x14941234, 0xcfa9, 0xcaee, 0x2791e982}}) syz_usb_control_io(r0, 0x0, 0x0) 1.197695161s ago: executing program 6 (id=6457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.036358865s ago: executing program 6 (id=6458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880) 948.64347ms ago: executing program 6 (id=6459): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 799.953838ms ago: executing program 5 (id=6460): mkdirat(0xffffffffffffff9c, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x240) ioctl$FE_READ_STATUS(r1, 0x80046f45, &(0x7f00000000c0)) syz_usb_connect$uac1(0x5, 0xbd, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0x1, 0x60, 0x71, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1c}, [@mixer_unit={0xa, 0x24, 0x4, 0x3, 0x3, "3c9616189a"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x6, 'P'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x2, 0x4, "c43d5eceefa1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x1, 0x2, {0x7, 0x25, 0x1, 0xc, 0x6c, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8001, 0x2, 0x19}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x1, "d2c7c2"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf766, 0x6, 0xf, 0x5}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x2, 0xb8, "4451802f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc, 0xb, 0x6, {0x7, 0x25, 0x1, 0xc, 0x6, 0x8}}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x3, 0xd2, 0x8, 0xff, 0x1}, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="00bf7d0000"], 0x7, [{0x0, 0x0}, {0x43, &(0x7f0000000480)=@string={0x43, 0x3, "fd7c1b1ca2b2914b67672ab77503a8b7f56e926175d0fce0239a2b9b4b84d572a82ade162c44dfc92b9db676e0569286f87a499767286a2744d87c79670cac354f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xbfd97fce3b8b3f5f}}, {0xcc, &(0x7f00000005c0)=@string={0xcc, 0x3, "b800dfe5180d8620c70b2e0574c19dfd88701d731fd13b3eec347e395fa7c323228defdcec70c5b9754681b03563cd7cbb777358a6ffaf3a960b7dcfe2fd34fb0fe772a8ff1402271fa9cb11a7b117ce6d4f5abb8be9cdeace13e41173f41b1763c1a7a6452e2eeec11986b60822277a11c920e4477b5654b687d1464237b68bd3dabbef2761800181ae2dc78fda1b708f13134050d8bd06d8b39b6d419ffe61a62d6601aa311a63dbee07e041fc508826c5d946c37757463159efd1ea941e949a7ab1981b661b8a45ba"}}, {0x102, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4}}]}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x23) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40dc2) read(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @const={0x6, {0xfffe, 0x8, 0xffff, 0xf}}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000340), 0x83, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x80, 0xfffffffe, {}, {0x4, 0x1, 0xc2, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000000)=0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000001840)={{r6, &(0x7f0000000040)='/dev/video#\x00', 0x28c000, &(0x7f0000000080)={@_ha_fsid={[0xece, 0x5]}, {0x3, 0x4, 0x8001, 0x3}}, 0x80000001, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8}, 0x2, &(0x7f0000001800)=[{0x1, 0x8, &(0x7f0000000140)='/dev/video#\x00', &(0x7f0000000180)="24c9e507b1897a278b34dee26defc2cd3cb1235db1b2c0818b75f1", 0x1b, 0x12}, {0x2, 0x6, &(0x7f00000001c0)='%&v\x00', &(0x7f0000000800)="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", 0x1000, 0x11}]}) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000001ac0)={0x13, 0x10, 0xfa00, {&(0x7f00000018c0)}}, 0x18) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) socket$kcm(0x10, 0x2, 0x0) 557.950101ms ago: executing program 8 (id=6461): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, 0x0) 535.76123ms ago: executing program 8 (id=6462): io_setup(0x9, &(0x7f00000000c0)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x20001, 0x0) io_submit(r0, 0x1, &(0x7f00000013c0)=[0x0]) 374.995338ms ago: executing program 8 (id=6463): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0c000000010000000f00e1ffffffffff03000000"], &(0x7f00000001c0), 0x600) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0xc000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10402, 0x0) r5 = fspick(r4, &(0x7f0000000280)='./file0\x00', 0x1) fsmount(r5, 0x1, 0x70) close_range(r1, r4, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0/file0\x00'}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000080)) 0s ago: executing program 6 (id=6464): socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6b9f, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x8000}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) kernel console output (not intermixed with test programs): mini II DVB-T USB2.0' in warm state. [ 1005.000750][ T5602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1005.006045][ T5602] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1007.060614][T20287] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5144'. [ 1007.062431][T20288] ALSA: seq: too many ports for client 15 [ 1007.062543][T20288] ALSA: seq_oss: can't create port [ 1007.324359][ T5720] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1007.491098][ T5720] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1007.491715][ T5720] usb 9-1: not running at top speed; connect to a high speed hub [ 1007.492998][ T5720] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 1007.493026][ T5720] usb 9-1: config 0 has no interface number 0 [ 1007.493075][ T5720] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1007.493107][ T5720] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1007.493132][ T5720] usb 9-1: config 0 interface 88 has no altsetting 0 [ 1007.493757][ T5720] usb 9-1: language id specifier not provided by device, defaulting to English [ 1007.570155][ T5720] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1007.570191][ T5720] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1007.570239][ T5720] usb 9-1: Product: syz [ 1007.570256][ T5720] usb 9-1: SerialNumber: syz [ 1007.619099][ T5720] usb 9-1: config 0 descriptor?? [ 1007.709126][ T9] usb 6-1: USB disconnect, device number 30 [ 1007.980378][ T5720] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input40 [ 1008.184764][ T5720] usb 9-1: USB disconnect, device number 9 [ 1008.298896][T12969] udevd[12969]: Error opening device "/dev/input/event4": No such file or directory [ 1008.299032][T12969] udevd[12969]: Unable to EVIOCGABS device "/dev/input/event4" [ 1008.299147][T12969] udevd[12969]: Unable to EVIOCGABS device "/dev/input/event4" [ 1008.767906][T20309] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5152'. [ 1009.349596][T20325] ALSA: seq: too many ports for client 15 [ 1009.349636][T20325] ALSA: seq_oss: can't create port [ 1009.380224][T20327] ALSA: seq: too many ports for client 15 [ 1009.380237][T20327] ALSA: seq_oss: can't create port [ 1009.839039][ T1009] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1009.995781][ T1009] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.995844][ T1009] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1009.995876][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.028417][ T1009] usb 9-1: config 0 descriptor?? [ 1010.047093][ T1009] pwc: Askey VC010 type 2 USB webcam detected. [ 1010.440865][ T1009] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1010.441605][ T1009] pwc: recv_control_msg error -32 req 02 val 2700 [ 1010.442375][ T1009] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1010.443130][ T1009] pwc: recv_control_msg error -32 req 04 val 1000 [ 1010.443902][ T1009] pwc: recv_control_msg error -32 req 04 val 1300 [ 1010.444660][ T1009] pwc: recv_control_msg error -32 req 04 val 1400 [ 1010.445499][ T1009] pwc: recv_control_msg error -32 req 02 val 2000 [ 1010.447680][ T1009] pwc: recv_control_msg error -32 req 02 val 2100 [ 1010.454851][ T1009] pwc: recv_control_msg error -71 req 04 val 1500 [ 1010.467698][ T1009] pwc: recv_control_msg error -71 req 02 val 2500 [ 1010.511884][ T1009] pwc: recv_control_msg error -71 req 02 val 2400 [ 1010.522943][ T1009] pwc: recv_control_msg error -71 req 02 val 2600 [ 1010.531641][ T1009] pwc: recv_control_msg error -71 req 02 val 2900 [ 1010.542448][ T1009] pwc: recv_control_msg error -71 req 02 val 2800 [ 1010.552156][ T1009] pwc: recv_control_msg error -71 req 04 val 1100 [ 1010.559946][ T1009] pwc: recv_control_msg error -71 req 04 val 1200 [ 1010.571639][ T1009] pwc: Registered as video103. [ 1010.580617][ T1009] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input41 [ 1010.603836][ T1009] usb 9-1: USB disconnect, device number 10 [ 1010.879461][ T5720] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1011.035635][ T5720] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.035666][ T5720] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.037621][ T5720] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1011.037654][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1011.037677][ T5720] usb 6-1: SerialNumber: syz [ 1011.305951][ T5720] usb 6-1: 0:2 : does not exist [ 1011.400316][ T5720] usb 6-1: USB disconnect, device number 31 [ 1011.500821][T13015] udevd[13015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.810283][ T5762] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1011.910607][T20362] ALSA: seq: too many ports for client 15 [ 1011.910622][T20362] ALSA: seq_oss: can't create port [ 1011.957185][ T5762] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.957248][ T5762] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1011.957277][ T5762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.996807][ T5762] usb 9-1: config 0 descriptor?? [ 1012.033674][ T5762] pwc: Askey VC010 type 2 USB webcam detected. [ 1012.469141][ T5762] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1012.515980][ T5762] pwc: recv_control_msg error -32 req 02 val 2700 [ 1012.552263][ T5762] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1012.565642][ T5762] pwc: recv_control_msg error -32 req 04 val 1000 [ 1012.587529][ T5762] pwc: recv_control_msg error -32 req 04 val 1300 [ 1013.029548][ T5762] pwc: recv_control_msg error -32 req 02 val 2000 [ 1013.154346][ T5762] pwc: recv_control_msg error -32 req 02 val 2100 [ 1013.155458][ T5762] pwc: recv_control_msg error -32 req 04 val 1500 [ 1013.157154][ T5762] pwc: recv_control_msg error -32 req 02 val 2500 [ 1013.159526][ T5762] pwc: recv_control_msg error -32 req 02 val 2400 [ 1013.160465][ T5762] pwc: recv_control_msg error -32 req 02 val 2600 [ 1013.161801][ T5762] pwc: recv_control_msg error -32 req 02 val 2900 [ 1013.164895][ T5762] pwc: recv_control_msg error -32 req 02 val 2800 [ 1013.174838][ T5762] pwc: recv_control_msg error -32 req 04 val 1100 [ 1013.382342][ T5762] pwc: Registered as video103. [ 1013.400044][ T5762] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input42 [ 1013.451505][ T5762] usb 9-1: USB disconnect, device number 11 [ 1014.719394][ T5762] IPVS: starting estimator thread 0... [ 1015.211559][T20388] IPVS: using max 6 ests per chain, 14400 per kthread [ 1017.235299][T20411] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5189'. [ 1017.469539][T20415] loop4: detected capacity change from 0 to 7 [ 1017.610206][T12969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1017.614854][T12969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1017.629812][T12969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1017.630711][T12969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1017.635109][T12969] Buffer I/O error on dev loop4, logical block 0, async page read [ 1018.871661][T20442] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1020.713592][T20465] ALSA: seq: too many ports for client 15 [ 1020.713611][T20465] ALSA: seq_oss: can't create port [ 1021.596027][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5213'. [ 1021.627385][ T5626] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1021.791460][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1021.791500][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1021.791534][ T5626] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1021.791553][ T5626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.820955][ T5626] usb 9-1: config 0 descriptor?? [ 1022.234226][ T5626] ath6kl: Failed to submit usb control message: -71 [ 1022.234281][ T5626] ath6kl: unable to send the bmi data to the device: -71 [ 1022.234299][ T5626] ath6kl: Unable to send get target info: -71 [ 1022.242277][ T5626] ath6kl: Failed to init ath6kl core: -71 [ 1022.244335][ T5626] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1022.408829][T20487] loop2: detected capacity change from 0 to 7 [ 1022.467098][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.471426][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.473348][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.474264][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.475235][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.476137][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.476922][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.477385][T20487] ldm_validate_partition_table(): Disk read failed. [ 1022.477723][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.478307][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.479121][T20487] Buffer I/O error on dev loop2, logical block 0, async page read [ 1022.480441][T20487] Dev loop2: unable to read RDB block 0 [ 1022.484012][T20487] loop2: unable to read partition table [ 1022.492069][T20487] loop2: partition table beyond EOD, truncated [ 1022.492146][T20487] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1023.161057][ T5626] usb 9-1: USB disconnect, device number 12 [ 1023.825554][T20506] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5222'. [ 1024.848807][T20512] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5223'. [ 1024.848836][T20512] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5223'. [ 1026.038655][ T38] audit: type=1326 audit(1780869647.727:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20517 comm="syz.8.5226" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x0 [ 1026.230321][T19905] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1026.381498][T19905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1026.386653][T19905] usb 6-1: not running at top speed; connect to a high speed hub [ 1026.399143][T19905] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.399202][T19905] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1026.408261][T19905] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1026.408296][T19905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1026.408335][T19905] usb 6-1: SerialNumber: syz [ 1026.462527][T19905] cdc_ether 6-1:1.0: missing cdc ether descriptor [ 1026.670133][ T5626] usb 6-1: USB disconnect, device number 32 [ 1028.209987][T20562] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1028.210021][T20562] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5242'. [ 1029.097383][T19905] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1029.269353][T19905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1029.281152][T19905] usb 6-1: config index 0 descriptor too short (expected 40961, got 257) [ 1029.281247][T19905] usb 6-1: config 216 has too many interfaces: 155, using maximum allowed: 32 [ 1029.281323][T19905] usb 6-1: config 216 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.281822][T19905] usb 6-1: config 216 has 1 interface, different from the descriptor's value: 155 [ 1029.347336][T19905] usb 6-1: string descriptor 0 read error: -22 [ 1029.347476][T19905] usb 6-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1029.347501][T19905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.916477][T19905] snd-usb-audio 6-1:216.0: probe with driver snd-usb-audio failed with error -71 [ 1029.921568][T19905] usb 6-1: USB disconnect, device number 33 [ 1030.756732][T20597] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1032.872522][T20612] ALSA: seq: too many ports for client 15 [ 1032.872536][T20612] ALSA: seq_oss: can't create port [ 1034.358482][T20628] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1034.574214][ T5601] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1034.719503][ T5601] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1034.719559][ T5601] usb 6-1: config 0 has no interface number 0 [ 1034.719637][ T5601] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 9223, setting to 1024 [ 1034.719668][ T5601] usb 6-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1034.723492][ T5601] usb 6-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1034.723528][ T5601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.723551][ T5601] usb 6-1: Product: syz [ 1034.723568][ T5601] usb 6-1: Manufacturer: syz [ 1034.723585][ T5601] usb 6-1: SerialNumber: syz [ 1034.807075][ T5601] usb 6-1: config 0 descriptor?? [ 1034.808122][T20631] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1034.847624][ T5601] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1035.010309][ T5762] usb 6-1: USB disconnect, device number 34 [ 1037.097936][ T5762] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1037.240921][ T5762] usb 6-1: Using ep0 maxpacket: 8 [ 1037.264186][ T5762] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1037.264222][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.264245][ T5762] usb 6-1: Product: syz [ 1037.264262][ T5762] usb 6-1: Manufacturer: syz [ 1037.264277][ T5762] usb 6-1: SerialNumber: syz [ 1037.291993][ T5762] usb 6-1: config 0 descriptor?? [ 1037.319301][ T5762] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1037.319360][ T5762] pctv452e: pctv452e_power_ctrl: 1 [ 1037.319360][ T5762] [ 1037.319418][ T5762] usb 6-1: selecting invalid altsetting 3 [ 1037.319452][ T5762] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1037.319452][ T5762] [ 1037.319845][ T5762] dvb-usb: bulk message failed: -22 (5/0) [ 1037.417129][ T5762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1037.445998][ T5762] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-23) [ 1037.511700][ T5762] usb 6-1: USB disconnect, device number 35 [ 1041.309268][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1041.309387][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1041.695383][ T4928] Bluetooth: hci2: link tx timeout [ 1041.695661][ T4928] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1043.755119][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 1053.347062][ T4928] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.047818][T20816] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1054.118786][ T1009] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1054.282638][ T1009] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1054.282673][ T1009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.282696][ T1009] usb 6-1: Product: syz [ 1054.282713][ T1009] usb 6-1: Manufacturer: syz [ 1054.282730][ T1009] usb 6-1: SerialNumber: syz [ 1054.315545][ T1009] usb 6-1: config 0 descriptor?? [ 1054.432102][T14561] Bluetooth: hci4: urb ffff88801f774600 submission failed (2) [ 1054.486584][ T5626] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1054.637564][ T1009] usb 6-1: USB disconnect, device number 36 [ 1054.639680][ T5626] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1054.830147][T20827] fido_id[20827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1055.443143][T20837] ALSA: seq: too many ports for client 15 [ 1055.443157][T20837] ALSA: seq_oss: can't create port [ 1055.750391][ T5626] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1055.841013][T20843] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1055.841042][T20843] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1055.877306][T20843] vhci_hcd vhci_hcd.0: Device attached [ 1055.878697][T20845] vhci_hcd: connection closed [ 1055.884203][ T8612] vhci_hcd vhci_hcd.6: stop threads [ 1055.884235][ T8612] vhci_hcd vhci_hcd.6: release socket [ 1055.884277][ T8612] vhci_hcd vhci_hcd.6: disconnect device [ 1055.908837][ T5626] usb 6-1: Using ep0 maxpacket: 16 [ 1055.929021][ T5626] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1055.931387][T20841] ALSA: seq: too many ports for client 15 [ 1055.931399][T20841] ALSA: seq_oss: can't create port [ 1055.967633][ T5626] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1055.967667][ T5626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.967692][ T5626] usb 6-1: Product: syz [ 1055.967709][ T5626] usb 6-1: Manufacturer: syz [ 1055.967725][ T5626] usb 6-1: SerialNumber: syz [ 1056.053611][ T5626] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1056.053634][ T5626] r8152-cfgselector 6-1: config 0 descriptor?? [ 1056.164780][T20849] ALSA: seq: too many ports for client 15 [ 1056.164794][T20849] ALSA: seq_oss: can't create port [ 1056.407582][T20850] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 1056.407582][T20850] program syz.7.5326 not setting count and/or reply_len properly [ 1058.290789][ T822] r8152-cfgselector 6-1: USB disconnect, device number 37 [ 1059.553504][T20898] syzkaller0: entered promiscuous mode [ 1059.553524][T20898] syzkaller0: entered allmulticast mode [ 1059.569182][T20898] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1065.472012][T20989] ALSA: seq: too many ports for client 15 [ 1065.472026][T20989] ALSA: seq_oss: can't create port [ 1065.729143][T20989] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5366'. [ 1065.855501][T20992] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.5368'. [ 1066.084351][T20998] ALSA: seq: too many ports for client 15 [ 1066.084366][T20998] ALSA: seq_oss: can't create port [ 1069.411763][T21024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1072.776816][ T1009] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1072.930540][ T1009] usb 9-1: config 0 has an invalid interface number: 4 but max is 0 [ 1072.930580][ T1009] usb 9-1: config 0 has no interface number 0 [ 1072.930616][ T1009] usb 9-1: config 0 interface 4 has no altsetting 0 [ 1072.972981][ T1009] usb 9-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=7d.f5 [ 1072.973019][ T1009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.973043][ T1009] usb 9-1: Product: syz [ 1072.973060][ T1009] usb 9-1: Manufacturer: syz [ 1072.973086][ T1009] usb 9-1: SerialNumber: syz [ 1073.036322][ T1009] usb 9-1: config 0 descriptor?? [ 1073.105306][T21075] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5390'. [ 1074.380344][ T1009] uvcvideo 9-1:0.4: probe with driver uvcvideo failed with error -22 [ 1074.413049][ T1009] usb 9-1: USB disconnect, device number 13 [ 1074.977542][T21093] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 21093 comm: syz.7.5394) [ 1076.306930][T21099] ALSA: seq: too many ports for client 15 [ 1076.306944][T21099] ALSA: seq_oss: can't create port [ 1076.603471][T21102] ALSA: seq: too many ports for client 15 [ 1076.603486][T21102] ALSA: seq_oss: can't create port [ 1080.539407][T13639] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1080.691763][T13639] usb 6-1: Using ep0 maxpacket: 16 [ 1080.715719][T13639] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1080.715756][T13639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.715779][T13639] usb 6-1: Product: syz [ 1080.715796][T13639] usb 6-1: Manufacturer: syz [ 1080.715812][T13639] usb 6-1: SerialNumber: syz [ 1080.783751][T21144] ALSA: seq: too many ports for client 15 [ 1080.783765][T21144] ALSA: seq_oss: can't create port [ 1081.205717][T13639] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1081.240567][T13639] usb 6-1: USB disconnect, device number 38 [ 1081.335102][T21146] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5414'. [ 1081.335139][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5414'. [ 1081.459325][T21148] ALSA: seq: too many ports for client 15 [ 1081.459345][T21148] ALSA: seq_oss: can't create port [ 1081.692545][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5416'. [ 1081.927203][T21152] ALSA: seq: too many ports for client 15 [ 1081.927223][T21152] ALSA: seq_oss: can't create port [ 1087.061352][T21193] kernel read not supported for file /file0 (pid: 21193 comm: syz.6.5428) [ 1087.062737][ T38] audit: type=1800 audit(1780869711.803:83): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5428" name="file0" dev="mqueue" ino=82825 res=0 errno=0 [ 1087.177112][T21191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1089.986214][T21220] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5434'. [ 1092.257277][T21234] ALSA: seq: too many ports for client 15 [ 1092.257292][T21234] ALSA: seq_oss: can't create port [ 1092.833559][T21242] comedi comedi3: aio_aio12_8: I/O base address or length out of range [ 1092.932353][T21242] kernel profiling enabled (shift: 63) [ 1092.932377][T21242] profiling shift: 63 too large [ 1097.176799][T21273] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5452'. [ 1099.687942][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1099.688057][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1099.767570][T21308] tmpfs: Too small a size for current use [ 1099.830992][T21314] ALSA: seq: too many ports for client 15 [ 1099.831005][T21314] ALSA: seq_oss: can't create port [ 1100.477531][ T9] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1100.620232][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.623407][ T9] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1100.623454][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.623478][ T9] usb 9-1: Product: syz [ 1100.623495][ T9] usb 9-1: Manufacturer: syz [ 1100.623511][ T9] usb 9-1: SerialNumber: syz [ 1100.971820][ T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1100.982728][ T9] usb 9-1: unit 2 not found! [ 1100.983598][T19905] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1101.099472][ T9] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -16 [ 1101.120082][ T9] usb 9-1: USB disconnect, device number 14 [ 1101.140890][T19905] usb 6-1: Using ep0 maxpacket: 8 [ 1101.159308][T19905] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1101.159361][T19905] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.159384][T19905] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.159408][T19905] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1101.159431][T19905] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.159469][T19905] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1101.159491][T19905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.578057][T19905] usb 6-1: GET_CAPABILITIES returned 0 [ 1101.578099][T19905] usbtmc 6-1:16.0: can't read capabilities [ 1101.780114][ T9] usb 6-1: USB disconnect, device number 39 [ 1103.374213][T21352] could not allocate digest TFM handle sha1-avx [ 1104.043368][T21361] overlayfs: failed to resolve './file1/file0': -2 [ 1107.495989][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1107.684277][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1107.691515][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.691546][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.729298][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1107.729332][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.729355][ T9] usb 6-1: Product: syz [ 1107.729464][ T9] usb 6-1: Manufacturer: syz [ 1107.729482][ T9] usb 6-1: SerialNumber: syz [ 1107.841827][ T9] usb 6-1: selecting invalid altsetting 1 [ 1107.929616][ T9] usb 6-1: unit 6 not found! [ 1107.929647][ T9] usb 6-1: unit 0 not found! [ 1108.475701][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1108.486686][ T9] usb 6-1: USB disconnect, device number 40 [ 1108.597745][T20780] udevd[20780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.960812][ T1009] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1111.107538][ T1009] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1111.107583][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.107605][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.107622][ T1009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1111.107654][ T1009] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1111.107673][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.167427][ T1009] usb 9-1: config 0 descriptor?? [ 1111.289830][T21412] ALSA: seq: too many ports for client 15 [ 1111.289843][T21412] ALSA: seq_oss: can't create port [ 1111.591665][ T1009] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 1111.987787][T21418] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.5499'. [ 1111.987842][T21418] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1112.109171][ T1009] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1112.145277][ T1009] usb 9-1: USB disconnect, device number 15 [ 1112.390007][T21423] fido_id[21423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1113.951888][ T5602] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1114.038019][T21443] ALSA: seq: too many ports for client 15 [ 1114.038033][T21443] ALSA: seq_oss: can't create port [ 1114.096685][ T5602] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 1114.096719][ T5602] usb 9-1: config 0 has an invalid interface number: 255 but max is 1 [ 1114.096742][ T5602] usb 9-1: config 0 has no interface number 0 [ 1114.096760][ T5602] usb 9-1: config 0 has no interface number 1 [ 1114.096802][ T5602] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1114.096838][ T5602] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1114.096860][ T5602] usb 9-1: config 0 interface 255 has no altsetting 0 [ 1114.100020][ T5602] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1114.100051][ T5602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.100074][ T5602] usb 9-1: Product: syz [ 1114.100093][ T5602] usb 9-1: Manufacturer: syz [ 1114.100104][ T5602] usb 9-1: SerialNumber: syz [ 1114.219075][ T5602] usb 9-1: config 0 descriptor?? [ 1114.251794][ T5602] usb 9-1: selecting invalid altsetting 0 [ 1114.251820][ T5602] usb 9-1: Could not set interface, error -22 [ 1114.438638][ T5601] usb 9-1: USB disconnect, device number 16 [ 1116.466560][T14561] Bluetooth: hci2: link tx timeout [ 1116.466583][T14561] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1117.675496][ T9] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1118.173434][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1118.173469][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.173493][ T9] usb 6-1: Product: syz [ 1118.173510][ T9] usb 6-1: Manufacturer: syz [ 1118.173534][ T9] usb 6-1: SerialNumber: syz [ 1118.220763][ T9] usb 6-1: config 0 descriptor?? [ 1118.309667][T14561] Bluetooth: hci2: link tx timeout [ 1118.309685][T14561] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1118.430687][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1118.606934][T14561] Bluetooth: hci2: command 0x0406 tx timeout [ 1120.090281][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1120.116619][ T9] usb 6-1: USB disconnect, device number 41 [ 1120.238648][T21482] comedi comedi0: pcm3724: I/O base address or length out of range [ 1120.416314][T21486] tmpfs: Unsupported parameter 'huge' [ 1120.999768][ T5602] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1121.150523][ T5602] usb 6-1: config 255 has an invalid interface number: 133 but max is 0 [ 1121.150556][ T5602] usb 6-1: config 255 has no interface number 0 [ 1121.150610][ T5602] usb 6-1: config 255 interface 133 has no altsetting 0 [ 1121.177039][ T5602] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d7.fb [ 1121.177076][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.177099][ T5602] usb 6-1: Product: syz [ 1121.177117][ T5602] usb 6-1: Manufacturer: syz [ 1121.177134][ T5602] usb 6-1: SerialNumber: syz [ 1121.372239][ T822] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1121.524867][ T822] usb 9-1: Using ep0 maxpacket: 32 [ 1121.527779][ T822] usb 9-1: config 0 has an invalid interface number: 202 but max is 1 [ 1121.527810][ T822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.527833][ T822] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1121.527858][ T822] usb 9-1: config 0 has no interface number 0 [ 1121.527894][ T822] usb 9-1: config 0 interface 202 has no altsetting 0 [ 1121.531695][ T822] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 1121.531728][ T822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.531753][ T822] usb 9-1: Product: syz [ 1121.531770][ T822] usb 9-1: Manufacturer: syz [ 1121.531787][ T822] usb 9-1: SerialNumber: syz [ 1121.558611][ T822] usb 9-1: config 0 descriptor?? [ 1121.689866][ T822] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1121.794680][ T1494] usb 9-1: Failed to submit usb control message: -71 [ 1121.794778][ T1494] usb 9-1: unable to send the bmi data to the device: -71 [ 1121.794798][ T1494] usb 9-1: unable to get target info from device [ 1121.794816][ T1494] usb 9-1: could not get target info (-71) [ 1121.794838][ T1494] usb 9-1: could not probe fw (-71) [ 1121.826151][ T822] usb 9-1: USB disconnect, device number 17 [ 1121.859721][ T5602] s2255 6-1:255.133: Could not find bulk-in endpoint [ 1121.859869][ T5602] Sensoray 2255 driver load failed: 0xfffffff4 [ 1121.859904][ T5602] s2255 6-1:255.133: probe with driver s2255 failed with error -12 [ 1121.860940][ T5602] usbhid 6-1:255.133: couldn't find an input interrupt endpoint [ 1121.894082][ T5602] usb 6-1: USB disconnect, device number 42 [ 1122.192297][T21515] ALSA: seq: too many ports for client 15 [ 1122.192317][T21515] ALSA: seq_oss: can't create port [ 1128.546372][T21611] ALSA: seq: too many ports for client 15 [ 1128.546402][T21611] ALSA: seq_oss: can't create port [ 1130.141754][T21640] sctp: [Deprecated]: syz.6.5555 (pid 21640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1130.141754][T21640] Use struct sctp_sack_info instead [ 1131.286330][ T5762] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1131.448483][ T5762] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1131.448520][ T5762] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.501872][ T5762] usb 9-1: config 0 descriptor?? [ 1131.522989][ T5762] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1131.930811][ T5762] gp8psk: usb in 128 operation failed. [ 1131.931242][ T5762] gp8psk: usb in 137 operation failed. [ 1131.931259][ T5762] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1131.931296][ T5762] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1131.974520][ T5762] usb 9-1: USB disconnect, device number 18 [ 1132.525542][ T4928] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1132.999711][T21681] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.104297][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1133.599483][T21712] ALSA: seq: too many ports for client 15 [ 1133.599497][T21712] ALSA: seq_oss: can't create port [ 1133.711287][T21716] 9p: Bad value for 'port' [ 1134.042534][T21681] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.143749][T19905] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1134.198005][T21725] ALSA: seq: too many ports for client 15 [ 1134.198019][T21725] ALSA: seq_oss: can't create port [ 1134.289120][T19905] usb 6-1: Using ep0 maxpacket: 8 [ 1134.312580][T19905] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1134.312616][T19905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.312638][T19905] usb 6-1: Product: syz [ 1134.312655][T19905] usb 6-1: Manufacturer: syz [ 1134.312671][T19905] usb 6-1: SerialNumber: syz [ 1134.653153][T19905] usb 6-1: unit 0 not found! [ 1134.927492][T19905] usb 6-1: USB disconnect, device number 43 [ 1135.425565][T20812] udevd[20812]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.459832][T21741] 9pnet_virtio: no channels available for device syz [ 1135.478626][T21741] ALSA: seq: too many ports for client 15 [ 1135.478645][T21741] ALSA: seq_oss: can't create port [ 1135.757307][T21681] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.268061][T21681] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.591036][T21780] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5586'. [ 1141.151487][T21799] ALSA: seq: too many ports for client 15 [ 1141.151502][T21799] ALSA: seq_oss: can't create port [ 1141.311977][T21805] ALSA: seq: too many ports for client 15 [ 1141.311991][T21805] ALSA: seq_oss: can't create port [ 1141.582454][ T5626] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1141.747078][ T5626] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1141.749081][ T5626] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.749109][ T5626] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1141.751713][ T5626] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1141.751743][ T5626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.751772][ T5626] usb 6-1: Product: syz [ 1141.751784][ T5626] usb 6-1: Manufacturer: syz [ 1141.751795][ T5626] usb 6-1: SerialNumber: syz [ 1142.095540][ T5626] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1142.236035][ T5626] usb 6-1: USB disconnect, device number 44 [ 1142.420685][T13071] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1142.601349][T13071] usb 9-1: Using ep0 maxpacket: 32 [ 1142.604488][T13071] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.604524][T13071] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.604566][T13071] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 1.40 [ 1142.604585][T13071] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.609414][T13071] usb 9-1: config 0 descriptor?? [ 1142.682408][T13071] hub 9-1:0.0: USB hub found [ 1142.852291][T13071] hub 9-1:0.0: 1 port detected [ 1142.984393][T21831] misc userio: The device must be registered before sending interrupts [ 1142.984717][T21831] misc userio: The device must be registered before sending interrupts [ 1143.367797][ T5626] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1143.439163][T13071] hub 9-1:0.0: activate --> -90 [ 1143.542860][ T5626] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1143.542896][ T5626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.542912][ T5626] usb 6-1: Product: syz [ 1143.542943][ T5626] usb 6-1: Manufacturer: syz [ 1143.542961][ T5626] usb 6-1: SerialNumber: syz [ 1143.596344][ T5626] usb 6-1: config 0 descriptor?? [ 1143.799046][ T5626] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1143.858209][ T9] usb 9-1: USB disconnect, device number 19 [ 1144.735001][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1144.890898][ T9] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1144.890936][ T9] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1144.894662][ T9] usb 9-1: New USB device found, idVendor=ffad, idProduct=a001, bcdDevice= 0.40 [ 1144.894685][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.894701][ T9] usb 9-1: Product: syz [ 1144.894712][ T9] usb 9-1: Manufacturer: syz [ 1144.894723][ T9] usb 9-1: SerialNumber: syz [ 1145.194733][ T9] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1145.196062][ T9] usb 9-1: cannot request logical cluster ID: 3 (err: -71) [ 1145.196091][ T9] usb 9-1: unit 80 not found! [ 1145.261431][ T5626] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1145.264288][ T5626] usb 6-1: USB disconnect, device number 45 [ 1145.337786][ T9] usb 9-1: USB disconnect, device number 20 [ 1145.396528][T20780] udevd[20780]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1147.170209][T21870] netlink: 'syz.5.5619': attribute type 10 has an invalid length. [ 1147.181538][T21871] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5618'. [ 1147.267282][T21868] ALSA: seq: too many ports for client 15 [ 1147.267308][T21868] ALSA: seq_oss: can't create port [ 1147.304274][T21874] ALSA: seq: too many ports for client 15 [ 1147.304299][T21874] ALSA: seq_oss: can't create port [ 1147.367734][T21870] team0: Port device vlan0 added [ 1147.769746][T21892] ALSA: seq: too many ports for client 15 [ 1147.769760][T21892] ALSA: seq_oss: can't create port [ 1148.919062][T21907] ALSA: seq: too many ports for client 15 [ 1148.919081][T21907] ALSA: seq_oss: can't create port [ 1151.783700][T19905] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1151.926112][T19905] usb 6-1: Using ep0 maxpacket: 16 [ 1151.928833][T19905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1151.930242][T19905] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1151.933330][T19905] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1151.933352][T19905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.933368][T19905] usb 6-1: Product: syz [ 1151.933379][T19905] usb 6-1: Manufacturer: syz [ 1151.933390][T19905] usb 6-1: SerialNumber: syz [ 1152.626095][T19905] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1152.837056][T19905] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1152.875559][T19905] usb 6-1: USB disconnect, device number 46 [ 1152.948548][T20780] udevd[20780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.213275][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1158.213392][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1158.285499][T22002] kernel read not supported for file /file0 (pid: 22002 comm: syz.8.5668) [ 1158.285769][ T38] audit: type=1800 audit(1780869786.578:84): pid=22002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5668" name="file0" dev="mqueue" ino=88110 res=0 errno=0 [ 1159.172866][T22015] ALSA: seq: too many ports for client 15 [ 1159.172886][T22015] ALSA: seq_oss: can't create port [ 1161.852773][T19905] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1161.920745][T22032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1162.045823][T19905] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 1162.045856][T19905] usb 6-1: config 0 has no interface number 0 [ 1162.045922][T19905] usb 6-1: config 0 interface 4 has no altsetting 0 [ 1162.051991][T19905] usb 6-1: New USB device found, idVendor=05a9, idProduct=7670, bcdDevice=7d.f5 [ 1162.052069][T19905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.052107][T19905] usb 6-1: Product: syz [ 1162.052155][T19905] usb 6-1: Manufacturer: syz [ 1162.052217][T19905] usb 6-1: SerialNumber: syz [ 1162.134545][T19905] usb 6-1: config 0 descriptor?? [ 1162.808187][T19905] uvcvideo 6-1:0.4: Found UVC 0.00 device syz (05a9:7670) [ 1162.808216][T19905] uvcvideo 6-1:0.4: No valid video chain found. [ 1162.944436][T19905] usb 6-1: USB disconnect, device number 47 [ 1162.988905][ T38] audit: type=1326 audit(1780869791.523:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.989077][ T38] audit: type=1326 audit(1780869791.523:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.989893][ T38] audit: type=1326 audit(1780869791.523:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.990085][ T38] audit: type=1326 audit(1780869791.523:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.990817][ T38] audit: type=1326 audit(1780869791.523:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.990983][ T38] audit: type=1326 audit(1780869791.523:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1162.991162][ T38] audit: type=1326 audit(1780869791.523:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1163.002101][ T38] audit: type=1326 audit(1780869791.523:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1163.002303][ T38] audit: type=1326 audit(1780869791.523:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a998ece59 code=0x7ffc0000 [ 1163.063941][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1163.063962][ T38] audit: type=1326 audit(1780869791.597:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.079284][ T38] audit: type=1326 audit(1780869791.607:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.079502][ T38] audit: type=1326 audit(1780869791.607:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.079643][ T38] audit: type=1326 audit(1780869791.607:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.085738][ T38] audit: type=1326 audit(1780869791.618:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.093419][ T38] audit: type=1326 audit(1780869791.618:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.102004][ T38] audit: type=1326 audit(1780869791.628:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.309203][ T38] audit: type=1326 audit(1780869791.660:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.309372][ T38] audit: type=1326 audit(1780869791.660:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1163.309456][ T38] audit: type=1326 audit(1780869791.670:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22043 comm="syz.8.5680" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a998ad68e code=0x7ffc0000 [ 1164.918479][ T5602] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1165.083092][ T5602] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.083125][ T5602] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.089831][ T5602] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.089946][ T5602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.090012][ T5602] usb 9-1: Product: syz [ 1165.090057][ T5602] usb 9-1: Manufacturer: syz [ 1165.090074][ T5602] usb 9-1: SerialNumber: syz [ 1165.287033][ T5602] usb 9-1: cannot find UAC_HEADER [ 1165.465543][T22062] syz.5.5687 (22062): drop_caches: 2 [ 1165.551677][ T5602] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1165.602348][T20780] udevd[20780]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1166.207231][ T5762] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1167.079545][ T5762] usb 6-1: Using ep0 maxpacket: 32 [ 1167.082219][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.082258][ T5762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.082302][ T5762] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 1.40 [ 1167.082330][ T5762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.094602][ T5762] usb 6-1: config 0 descriptor?? [ 1167.134946][ T5762] hub 6-1:0.0: USB hub found [ 1167.339595][ T5762] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1167.584528][ T9] usb 9-1: USB disconnect, device number 21 [ 1168.948155][ T5762] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 1169.433421][ T5762] usb 6-1: USB disconnect, device number 48 [ 1170.500075][T22111] fido_id[22111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1175.444938][T22167] ALSA: seq: too many ports for client 15 [ 1175.444960][T22167] ALSA: seq_oss: can't create port [ 1178.589463][T22195] autofs: Unknown parameter 'f' [ 1178.901227][ T5626] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1179.109258][ T5626] usb 9-1: Using ep0 maxpacket: 16 [ 1179.111615][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.111652][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.140147][ T5626] usb 9-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1179.140182][ T5626] usb 9-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1179.140206][ T5626] usb 9-1: Manufacturer: syz [ 1179.170695][ T5626] usb 9-1: config 0 descriptor?? [ 1179.629973][ T5626] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:041E:3100.000F/input/input47 [ 1179.812921][ T5626] creative-sb0540 0003:041E:3100.000F: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 1179.854897][ T5626] usb 9-1: USB disconnect, device number 22 [ 1180.199814][T22216] fido_id[22216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1181.922220][T22233] netlink: 'syz.7.5746': attribute type 1 has an invalid length. [ 1181.922246][T22233] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5746'. [ 1183.374691][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5751'. [ 1185.858865][T22257] kAFS: unable to lookup cell '' [ 1186.416071][T22271] fuse: Bad value for 'fd' [ 1187.357265][T22280] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5761'. [ 1187.496929][T22284] ALSA: seq: too many ports for client 15 [ 1187.496952][T22284] ALSA: seq_oss: can't create port [ 1188.716620][T22302] fuse: fd is not a fuse device [ 1192.375555][T22346] input: syz0 as /devices/virtual/input/input48 [ 1192.658009][T14561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1192.723226][T14561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1192.729407][T14561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1193.736517][T14561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1193.748466][T14561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1196.496826][ T4928] Bluetooth: hci4: command tx timeout [ 1199.188486][ T4928] Bluetooth: hci4: command tx timeout [ 1200.535855][T22398] input: syz0 as /devices/virtual/input/input49 [ 1201.158528][ T4928] Bluetooth: hci4: command tx timeout [ 1202.435102][T22420] vivid-002: disconnect [ 1202.451564][T22420] vivid-002: reconnect [ 1203.347453][ T4928] Bluetooth: hci4: command tx timeout [ 1205.945850][ T1494] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.217305][T22347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.220700][T22347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.220981][T22347] bridge_slave_0: entered allmulticast mode [ 1206.225292][T22347] bridge_slave_0: entered promiscuous mode [ 1207.000270][T19905] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1208.067468][T19905] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.067501][T19905] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1208.067558][T19905] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1208.067586][T19905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.116996][T19905] usb 9-1: config 0 descriptor?? [ 1208.150640][T19905] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1208.150734][T19905] dvb-usb: bulk message failed: -22 (3/0) [ 1208.197815][ T1494] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.274611][T19905] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1208.318340][T19905] dvb-usb: Artec T1 USB2.0 error while loading driver (-23) [ 1208.318418][T19905] dvb_usb_dibusb_mb 9-1:0.0: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 1208.319031][T19905] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in warm state. [ 1208.319084][T19905] dvb-usb: bulk message failed: -22 (3/0) [ 1208.431895][T19905] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1208.549470][T19905] dvb-usb: Artec T1 USB2.0 TVBOX (please check the warm ID) error while loading driver (-23) [ 1208.549563][T19905] dvb_usb_dibusb_mc 9-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -23 [ 1208.613288][T19905] usb 9-1: USB disconnect, device number 23 [ 1208.928115][T22347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.928512][T22347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.928885][T22347] bridge_slave_1: entered allmulticast mode [ 1209.031274][T22347] bridge_slave_1: entered promiscuous mode [ 1211.623628][ T1494] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.959137][T22347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.050493][T22347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.524242][ T1494] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.912844][T22347] team0: Port device team_slave_0 added [ 1213.977349][T22347] team0: Port device team_slave_1 added [ 1216.251435][T22347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.251458][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.251493][T22347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.068861][T22347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.068880][T22347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.068913][T22347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.166355][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.166441][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.514318][T19905] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1217.642784][T22347] hsr_slave_0: entered promiscuous mode [ 1217.654480][T22347] hsr_slave_1: entered promiscuous mode [ 1217.678224][T19905] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1217.678851][T22347] debugfs: 'hsr0' already exists in 'hsr' [ 1217.678880][T22347] Cannot create hsr debugfs directory [ 1217.709464][T19905] usb 9-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 1217.709511][T19905] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 1217.709530][T19905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 24395, setting to 1024 [ 1217.709551][T19905] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 1217.795545][T19905] usb 9-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 1217.795592][T19905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.795616][T19905] usb 9-1: Product: syz [ 1217.795632][T19905] usb 9-1: Manufacturer: syz [ 1217.795647][T19905] usb 9-1: SerialNumber: syz [ 1217.880252][T19905] usb 9-1: config 0 descriptor?? [ 1217.883847][T22519] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1217.884215][T22519] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1217.957997][ C1] usb 9-1: NFC: Urb failure (status -71) [ 1217.978979][ C1] usb 9-1: NFC: Urb failure (status -71) [ 1217.982613][T19905] usb 9-1: NFC: Unable to get FW version [ 1218.074222][T19905] pn533_usb 9-1:0.0: probe with driver pn533_usb failed with error -71 [ 1218.267985][T19905] usb 9-1: USB disconnect, device number 24 [ 1220.611222][T22542] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5843'. [ 1220.611250][T22542] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5843'. [ 1221.902243][ T1494] bridge_slave_1: left allmulticast mode [ 1221.902282][ T1494] bridge_slave_1: left promiscuous mode [ 1221.902617][ T1494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.045336][ T1494] bridge_slave_0: left allmulticast mode [ 1222.045376][ T1494] bridge_slave_0: left promiscuous mode [ 1222.045707][ T1494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.751568][T22580] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5853'. [ 1223.751672][T22580] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5853'. [ 1225.920325][ T1494] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.975991][ T1494] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.995849][ T1494] .` (unregistering): Released all slaves [ 1226.046228][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5852'. [ 1226.164854][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1226.433374][ T1494] tipc: Disabling bearer [ 1226.433589][ T1494] tipc: Left network mode [ 1226.687673][ T9] usb 9-1: new low-speed USB device number 25 using dummy_hcd [ 1226.842270][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1226.843791][ T9] usb 9-1: config 0 has no interfaces? [ 1226.847079][ T9] usb 9-1: string descriptor 0 read error: -22 [ 1226.847227][ T9] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 1226.847251][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.891451][ T9] usb 9-1: config 0 descriptor?? [ 1227.217348][T22607] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5861'. [ 1227.276208][ T5601] usb 9-1: USB disconnect, device number 25 [ 1227.785188][ T5274] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1228.552384][T22640] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5869'. [ 1228.696227][T22647] ALSA: seq: too many ports for client 15 [ 1228.696248][T22647] ALSA: seq_oss: can't create port [ 1231.525226][ T5602] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1231.629378][T22675] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5880'. [ 1231.676606][ T5602] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.676669][ T5602] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1231.676698][ T5602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.712183][ T5602] usb 9-1: config 0 descriptor?? [ 1231.745592][ T5602] pwc: Askey VC010 type 2 USB webcam detected. [ 1232.207237][ T5602] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1232.208419][ T5602] pwc: recv_control_msg error -32 req 02 val 2700 [ 1232.211595][ T5602] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1232.212302][ T5602] pwc: recv_control_msg error -32 req 04 val 1000 [ 1232.212999][ T5602] pwc: recv_control_msg error -32 req 04 val 1300 [ 1232.214516][ T5602] pwc: recv_control_msg error -32 req 04 val 1400 [ 1232.452638][ T1494] hsr_slave_0: left promiscuous mode [ 1232.471717][ T1494] hsr_slave_1: left promiscuous mode [ 1232.472960][ T1494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.472990][ T1494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.520310][ T1494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.520343][ T1494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.601726][ T5602] pwc: recv_control_msg error -71 req 04 val 1500 [ 1232.602281][ T5602] pwc: recv_control_msg error -71 req 02 val 2500 [ 1232.603017][ T5602] pwc: recv_control_msg error -71 req 02 val 2400 [ 1232.603524][ T5602] pwc: recv_control_msg error -71 req 02 val 2600 [ 1232.604032][ T5602] pwc: recv_control_msg error -71 req 02 val 2900 [ 1232.640357][ T5602] pwc: recv_control_msg error -71 req 02 val 2800 [ 1232.640987][ T5602] pwc: recv_control_msg error -71 req 04 val 1100 [ 1232.641394][ T5602] pwc: recv_control_msg error -71 req 04 val 1200 [ 1232.665082][ T5602] pwc: Registered as video103. [ 1232.676237][ T5602] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input50 [ 1232.704732][ T5602] usb 9-1: USB disconnect, device number 26 [ 1232.976039][ T1494] veth1_macvtap: left promiscuous mode [ 1232.976152][ T1494] veth0_macvtap: left promiscuous mode [ 1232.981108][ T1494] veth1_vlan: left promiscuous mode [ 1232.981358][ T1494] veth0_vlan: left promiscuous mode [ 1233.022455][T22684] fuse: Bad value for 'fd' [ 1233.630706][ T9] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1233.785246][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1233.785281][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1233.813792][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1233.813828][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.813850][ T9] usb 9-1: Product: syz [ 1233.813866][ T9] usb 9-1: Manufacturer: syz [ 1233.813883][ T9] usb 9-1: SerialNumber: syz [ 1233.859249][ T9] usb 9-1: config 0 descriptor?? [ 1236.931484][ T9] usb 9-1: USB disconnect, device number 27 [ 1237.055580][T22695] udevd[22695]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.127886][ T1494] team0 (unregistering): Port device vlan0 removed [ 1237.497322][ T9] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1237.521250][ T1494] team0 (unregistering): Port device team_slave_1 removed [ 1237.668083][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1238.424416][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1238.424457][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.424483][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1238.424532][ T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1238.424559][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.497248][ T9] usb 9-1: config 0 descriptor?? [ 1238.533943][ T1494] team0 (unregistering): Port device team_slave_0 removed [ 1238.935676][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.935716][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936086][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936115][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936144][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936171][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936200][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936227][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936256][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1238.936284][ T9] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 1239.200001][ T9] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1239.200041][ T9] microsoft 0003:045E:07DA.0010: no inputs found [ 1239.200057][ T9] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 1239.247099][ T9] usb 9-1: USB disconnect, device number 28 [ 1239.565259][T22732] fido_id[22732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1245.713986][T22796] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.5911'. [ 1245.714017][T22796] ksmbd: Unknown IPC event: 4, ignore. [ 1245.737331][T22792] ALSA: seq: too many ports for client 15 [ 1245.737344][T22792] ALSA: seq_oss: can't create port [ 1245.775936][T22792] program syz.8.5910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1247.682172][T22347] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1247.683323][ T1494] IPVS: stop unused estimator thread 0... [ 1247.757960][T22347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.805895][T22347] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1247.944228][T22347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1247.952578][T22347] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1248.017343][T22347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1248.018753][T22347] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1248.097240][T22347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1248.498251][T22851] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5920'. [ 1249.582264][ T5601] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1249.812284][ T5601] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 1249.812316][ T5601] usb 9-1: config 0 has no interface number 0 [ 1249.812368][ T5601] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 9223, setting to 1024 [ 1249.812398][ T5601] usb 9-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1249.815339][ T5601] usb 9-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 1249.815370][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.815408][ T5601] usb 9-1: Product: syz [ 1249.815429][ T5601] usb 9-1: Manufacturer: syz [ 1249.815455][ T5601] usb 9-1: SerialNumber: syz [ 1249.907580][ T5601] usb 9-1: config 0 descriptor?? [ 1249.925571][T22842] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1250.065712][T14561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.148899][T14561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1250.152052][T14561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1250.167412][T14561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1250.168319][T14561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1250.523571][ T5601] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 1250.590101][ T5601] usb 9-1: USB disconnect, device number 29 [ 1252.347239][T22894] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5929'. [ 1253.389138][ T4928] Bluetooth: hci3: command tx timeout [ 1253.866577][T22907] ALSA: seq: too many ports for client 15 [ 1253.866591][T22907] ALSA: seq_oss: can't create port [ 1254.607893][T22915] vivid-002: disconnect [ 1254.615406][T22915] vivid-002: reconnect [ 1255.331740][ T4928] Bluetooth: hci3: command tx timeout [ 1257.308417][ T4928] Bluetooth: hci3: command tx timeout [ 1257.672747][T22858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.673178][T22858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.673473][T22858] bridge_slave_0: entered allmulticast mode [ 1257.676849][T22858] bridge_slave_0: entered promiscuous mode [ 1257.725476][T22858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.725885][T22858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.726268][T22858] bridge_slave_1: entered allmulticast mode [ 1257.730971][T22858] bridge_slave_1: entered promiscuous mode [ 1257.834783][T22858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.852030][T22858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.921077][T22858] team0: Port device team_slave_0 added [ 1257.933902][T22858] team0: Port device team_slave_1 added [ 1257.992952][T22858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.992971][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.992999][T22858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.996699][T22858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.996718][T22858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1257.996750][T22858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.178568][T22858] hsr_slave_0: entered promiscuous mode [ 1258.180668][T22858] hsr_slave_1: entered promiscuous mode [ 1258.195355][T22858] debugfs: 'hsr0' already exists in 'hsr' [ 1258.195385][T22858] Cannot create hsr debugfs directory [ 1259.039623][T13408] bridge_slave_1: left allmulticast mode [ 1259.039656][T13408] bridge_slave_1: left promiscuous mode [ 1259.039952][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.135215][T13408] bridge_slave_0: left allmulticast mode [ 1259.135245][T13408] bridge_slave_0: left promiscuous mode [ 1259.138725][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.286072][ T4928] Bluetooth: hci3: command tx timeout [ 1259.618754][T13408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.695290][T13408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.752847][T13408] bond0 (unregistering): Released all slaves [ 1260.587494][T13408] hsr_slave_0: left promiscuous mode [ 1260.625536][T13408] hsr_slave_1: left promiscuous mode [ 1260.627154][T13408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.664443][T13408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1261.112353][T13408] team0 (unregistering): Port device team_slave_1 removed [ 1261.158270][T13408] team0 (unregistering): Port device team_slave_0 removed [ 1261.364569][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1263.768772][T22858] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1263.803246][T22858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1263.804942][T22858] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1263.834680][T22858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1263.836337][T22858] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1263.872298][T22858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1263.874003][T22858] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1263.949055][T22858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1264.167538][T22858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.202289][T22858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1264.219432][T13406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1264.219677][T13406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.258249][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.258410][T13408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.795536][T22858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.119264][T22858] veth0_vlan: entered promiscuous mode [ 1265.138309][T22858] veth1_vlan: entered promiscuous mode [ 1265.194689][T22858] veth0_macvtap: entered promiscuous mode [ 1265.208459][T22858] veth1_macvtap: entered promiscuous mode [ 1265.245888][T22858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.265758][T22858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.287368][ T1245] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.288283][ T1245] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.288344][ T1245] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.329982][ T1245] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.607325][ T1494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.607345][ T1494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.799964][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.800002][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.441132][T23059] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5941'. [ 1268.767925][T23070] No control pipe specified [ 1269.745131][T23089] vivid-001: disconnect [ 1269.747847][T23089] vivid-001: reconnect [ 1270.819363][T23097] netlink: 236 bytes leftover after parsing attributes in process `syz.6.5956'. [ 1272.806096][T23110] syzkaller0: entered promiscuous mode [ 1272.806124][T23110] syzkaller0: entered allmulticast mode [ 1272.907088][T23112] tipc: Started in network mode [ 1272.907508][T23112] tipc: Node identity aeb989ce9a08, cluster identity 4711 [ 1272.907971][T23112] tipc: Enabled bearer , priority 0 [ 1272.967934][T23110] tipc: Resetting bearer [ 1273.325259][T23110] tipc: Disabling bearer [ 1274.058352][T23125] vxfs: WRONG superblock magic 00000000 at 1 [ 1274.071952][T23125] vxfs: WRONG superblock magic 00000000 at 8 [ 1274.072007][T23125] vxfs: can't find superblock. [ 1274.544476][T23121] Bluetooth: MGMT ver 1.23 [ 1275.026214][T23100] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 1275.045197][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1275.045315][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.163318][T23139] netlink: 236 bytes leftover after parsing attributes in process `syz.5.5969'. [ 1276.183174][T23100] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1276.183198][T23100] usb 9-1: config 0 has no interface number 0 [ 1276.183232][T23100] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1276.183253][T23100] usb 9-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.183271][T23100] usb 9-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.183292][T23100] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1276.183318][T23100] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1276.183336][T23100] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.287114][T23141] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5971'. [ 1276.441087][T23100] usb 9-1: config 0 descriptor?? [ 1277.221757][ T1009] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1277.399867][ T1009] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1277.399903][ T1009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.399926][ T1009] usb 6-1: Product: syz [ 1277.399943][ T1009] usb 6-1: Manufacturer: syz [ 1277.399960][ T1009] usb 6-1: SerialNumber: syz [ 1277.452440][ T1009] usb 6-1: config 0 descriptor?? [ 1277.481141][ T1009] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 049 [ 1277.913056][ T1009] (null): failure reading functionality [ 1277.991406][ T1009] i2c i2c-16: connected i2c-tiny-usb device [ 1278.186777][ T9] usb 6-1: USB disconnect, device number 49 [ 1279.458884][T23100] usbhid 9-1:0.1: can't add hid device: -71 [ 1279.459028][T23100] usbhid 9-1:0.1: probe with driver usbhid failed with error -71 [ 1279.528934][T23100] usb 9-1: USB disconnect, device number 30 [ 1279.805631][T23171] netlink: 236 bytes leftover after parsing attributes in process `syz.8.5979'. [ 1281.668505][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 1281.668538][ T38] audit: type=1800 audit(1780869916.345:118): pid=23186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5985" name="nullb0" dev="tmpfs" ino=1803 res=0 errno=0 [ 1284.232166][T23207] netlink: 236 bytes leftover after parsing attributes in process `syz.7.5990'. [ 1285.987940][T18817] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1286.163485][T18817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.163524][T18817] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.163571][T18817] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1286.163608][T18817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.108296][T18817] usb 9-1: config 0 descriptor?? [ 1287.584289][T18817] hid_parser_main: 5 callbacks suppressed [ 1287.584316][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.584356][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.584385][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.584415][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.584442][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.632773][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.632818][T18817] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 1287.726924][T18817] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 1288.351587][T23253] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6002'. [ 1289.666836][T18817] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 1289.666894][T18817] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 1289.736585][T18817] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 1289.824216][T18817] usb 9-1: USB disconnect, device number 31 [ 1291.747079][T23272] fuse: Unknown parameter 'grou00000000000000000000' [ 1292.933240][T23279] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6011'. [ 1293.651081][ T4928] Bluetooth: hci3: link tx timeout [ 1293.651603][ T4928] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1295.467748][T23312] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6021'. [ 1295.467786][T23312] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6021'. [ 1295.612271][ T1009] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1295.680650][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 1296.497787][ T1009] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.497833][ T1009] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1296.500817][ T1009] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1296.500852][ T1009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.500876][ T1009] usb 6-1: Product: syz [ 1296.500893][ T1009] usb 6-1: Manufacturer: syz [ 1296.500910][ T1009] usb 6-1: SerialNumber: syz [ 1296.675151][ T1009] usb 6-1: config 0 descriptor?? [ 1296.710699][T23314] sctp: [Deprecated]: syz.7.6024 (pid 23314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1296.710699][T23314] Use struct sctp_sack_info instead [ 1296.751323][ T1009] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1296.776298][ T1009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1296.841203][ T1009] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1297.199367][ T5602] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1297.344229][ T5602] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1297.344868][ T5602] usb 9-1: not running at top speed; connect to a high speed hub [ 1297.346175][ T5602] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 4 [ 1297.346222][ T5602] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 4 [ 1297.349427][ T5602] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1297.349458][ T5602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.349481][ T5602] usb 9-1: Product: syz [ 1297.349498][ T5602] usb 9-1: Manufacturer: syz [ 1297.349514][ T5602] usb 9-1: SerialNumber: syz [ 1297.607039][T23329] overlayfs: failed to clone upperpath [ 1297.950256][T23339] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6031'. [ 1297.950364][T23339] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6031'. [ 1298.984027][T13639] usb 6-1: USB disconnect, device number 50 [ 1299.135855][T23343] sctp: [Deprecated]: syz.5.6033 (pid 23343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1299.135855][T23343] Use struct sctp_sack_info instead [ 1299.727403][ T5602] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1299.729034][ T5602] usb 9-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1299.729164][ T5602] usb 9-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1299.828199][T23363] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1299.828222][T23363] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6040'. [ 1299.896715][ T5602] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1299.938866][ T5602] usb 9-1: USB disconnect, device number 32 [ 1300.082719][T22588] udevd[22588]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.188014][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6043'. [ 1300.188041][T23371] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6043'. [ 1300.188192][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6043'. [ 1300.301270][T23375] sctp: [Deprecated]: syz.6.6044 (pid 23375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1300.301270][T23375] Use struct sctp_sack_info instead [ 1300.592397][ T38] audit: type=1800 audit(1780869936.253:119): pid=23382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6047" name="file0" dev="overlay" ino=138 res=0 errno=0 [ 1301.157754][T23401] FAULT_INJECTION: forcing a failure. [ 1301.157754][T23401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.157800][T23401] CPU: 1 UID: 0 PID: 23401 Comm: syz.6.6054 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1301.157833][T23401] Tainted: [L]=SOFTLOCKUP [ 1301.157843][T23401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.157860][T23401] Call Trace: [ 1301.157883][T23401] [ 1301.157892][T23401] dump_stack_lvl+0xe8/0x150 [ 1301.157926][T23401] should_fail_ex+0x46b/0x600 [ 1301.157960][T23401] _copy_to_user+0x31/0xb0 [ 1301.157984][T23401] simple_read_from_buffer+0xe1/0x170 [ 1301.158012][T23401] proc_fail_nth_read+0x1be/0x230 [ 1301.158037][T23401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1301.158063][T23401] ? rw_verify_area+0x2ac/0x4e0 [ 1301.158088][T23401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1301.158112][T23401] vfs_read+0x212/0xa80 [ 1301.158144][T23401] ? __pfx_vfs_read+0x10/0x10 [ 1301.158179][T23401] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1301.158208][T23401] ? lockdep_hardirqs_on+0x7a/0x110 [ 1301.158237][T23401] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1301.158265][T23401] ? mutex_lock_nested+0x152/0x1d0 [ 1301.158286][T23401] ? fdget_pos+0x252/0x320 [ 1301.158315][T23401] ksys_read+0x156/0x270 [ 1301.158343][T23401] ? __pfx_ksys_read+0x10/0x10 [ 1301.158368][T23401] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1301.158400][T23401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.158420][T23401] do_syscall_64+0x174/0x580 [ 1301.158448][T23401] ? trace_irq_disable+0x3b/0x140 [ 1301.158470][T23401] ? clear_bhb_loop+0x40/0x90 [ 1301.158493][T23401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.158512][T23401] RIP: 0033:0x7f422a91d68e [ 1301.158530][T23401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1301.158546][T23401] RSP: 002b:00007f4228bb5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1301.158566][T23401] RAX: ffffffffffffffda RBX: 00007f4228bb66c0 RCX: 00007f422a91d68e [ 1301.158580][T23401] RDX: 000000000000000f RSI: 00007f4228bb60a0 RDI: 0000000000000004 [ 1301.158592][T23401] RBP: 00007f4228bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.158604][T23401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.158616][T23401] R13: 00007f422abd6038 R14: 00007f422abd5fa0 R15: 00007fffe59c2158 [ 1301.158644][T23401] [ 1301.358460][ T5601] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1301.530585][ T5601] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.530633][ T5601] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1301.531377][T23405] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6055'. [ 1301.534194][ T5601] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1301.534225][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.534254][ T5601] usb 9-1: Product: syz [ 1301.534266][ T5601] usb 9-1: Manufacturer: syz [ 1301.534277][ T5601] usb 9-1: SerialNumber: syz [ 1301.592847][ T5601] usb 9-1: config 0 descriptor?? [ 1301.660640][ T5601] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1301.716845][T13639] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1301.786250][ T5601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1301.791797][ T5601] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1301.858860][T13639] usb 6-1: Using ep0 maxpacket: 16 [ 1301.864215][T13639] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1301.864250][T13639] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1301.864274][T13639] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1301.864299][T13639] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1301.864322][T13639] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1301.864351][T13639] usb 6-1: config 0 has no interface number 0 [ 1301.864402][T13639] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1301.864434][T13639] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1301.864461][T13639] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1301.864501][T13639] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1301.864532][T13639] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 72, using maximum allowed: 30 [ 1301.864574][T13639] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 1301.864606][T13639] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1301.864628][T13639] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1301.956327][T13639] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1301.956363][T13639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.956387][T13639] usb 6-1: Product: syz [ 1301.956404][T13639] usb 6-1: Manufacturer: syz [ 1301.956422][T13639] usb 6-1: SerialNumber: syz [ 1302.045238][T13639] usb 6-1: config 0 descriptor?? [ 1302.057091][T13639] usb 6-1: selecting invalid altsetting 2 [ 1302.331766][ C1] usb 6-1: async_complete: urb error -71 [ 1302.332287][ C1] usb 6-1: async_complete: urb error -71 [ 1302.332378][ C1] usb 6-1: async_complete: urb error -71 [ 1302.332460][ C1] usb 6-1: async_complete: urb error -71 [ 1302.342879][T13639] get_1284_register: usb error -71 [ 1302.380002][T13639] usb 6-1: USB disconnect, device number 51 [ 1302.690375][T23413] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6057'. [ 1302.690406][T23413] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6057'. [ 1302.875219][T23419] sctp: [Deprecated]: syz.5.6059 (pid 23419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1302.875219][T23419] Use struct sctp_sack_info instead [ 1303.953112][T23437] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1304.038684][T23441] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6066'. [ 1304.038706][T23441] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6066'. [ 1304.332516][T13639] usb 9-1: USB disconnect, device number 33 [ 1304.414211][T23449] sctp: [Deprecated]: syz.7.6068 (pid 23449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.414211][T23449] Use struct sctp_sack_info instead [ 1304.778744][T13639] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1304.925511][T13639] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1304.926168][T13639] usb 9-1: not running at top speed; connect to a high speed hub [ 1304.928908][T13639] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 4 [ 1304.928959][T13639] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 4 [ 1304.974973][T13639] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1304.975011][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.975035][T13639] usb 9-1: Product: syz [ 1304.975052][T13639] usb 9-1: Manufacturer: syz [ 1304.975069][T13639] usb 9-1: SerialNumber: syz [ 1305.079331][T23466] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6075'. [ 1305.079362][T23466] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6075'. [ 1306.174859][T23488] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1306.174891][T23488] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1307.312109][T13639] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1307.317469][T13639] usb 9-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1307.317544][T13639] usb 9-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1307.549250][T23516] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6094'. [ 1307.549283][T23516] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6094'. [ 1307.565901][T13639] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1307.639009][T13639] usb 9-1: USB disconnect, device number 34 [ 1307.768830][T22588] udevd[22588]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.802088][T23543] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 23543 comm: syz.6.6102) [ 1309.932283][T23548] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6105'. [ 1309.932310][T23548] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6105'. [ 1310.199578][T23553] netlink: 'syz.5.6107': attribute type 11 has an invalid length. [ 1310.199597][T23553] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6107'. [ 1310.447208][ T5602] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1310.594030][ T5602] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1310.594072][ T5602] usb 6-1: config 0 has no interface number 0 [ 1310.594121][ T5602] usb 6-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1310.594155][ T5602] usb 6-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1310.594186][ T5602] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1310.594225][ T5602] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1310.594252][ T5602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.599473][ T5602] usb 6-1: config 0 descriptor?? [ 1310.614198][T23553] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1311.222465][ T38] audit: type=1804 audit(1780869947.419:120): pid=23558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.6108" name="/newroot/257/file1" dev="fuse" ino=1 res=1 errno=0 [ 1311.255924][ T38] audit: type=1800 audit(1780869947.429:121): pid=23558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6108" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1311.257404][ T5601] usb 6-1: USB disconnect, device number 52 [ 1311.583202][T23567] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6114'. [ 1311.583232][T23567] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6114'. [ 1312.159248][ T5601] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1312.324056][ T5601] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1312.324863][ T5601] usb 6-1: not running at top speed; connect to a high speed hub [ 1312.326360][ T5601] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 4 [ 1312.326410][ T5601] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 4 [ 1312.328989][ T5601] usb 6-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 1312.329019][ T5601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.329043][ T5601] usb 6-1: Product: syz [ 1312.329078][ T5601] usb 6-1: Manufacturer: syz [ 1312.329097][ T5601] usb 6-1: SerialNumber: syz [ 1313.215112][T13639] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1313.372861][T13639] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.372996][T13639] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1313.394721][T13639] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1313.394757][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.394780][T13639] usb 9-1: Product: syz [ 1313.394798][T13639] usb 9-1: Manufacturer: syz [ 1313.394815][T13639] usb 9-1: SerialNumber: syz [ 1313.428586][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6123'. [ 1313.459646][T13639] usb 9-1: config 0 descriptor?? [ 1313.508789][T13639] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1313.537012][T13639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1313.570507][T13639] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1313.630607][T23600] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6124'. [ 1314.763468][ T5601] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1314.764033][ T5601] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1314.764112][ T5601] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1314.863473][ T5601] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1314.881843][ T5601] usb 6-1: USB disconnect, device number 53 [ 1314.927785][T22588] udevd[22588]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1316.040241][ T1009] usb 9-1: USB disconnect, device number 35 [ 1316.430190][ T1009] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1316.577603][ T1009] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.577656][ T1009] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1316.580319][ T1009] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1316.580356][ T1009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.580373][ T1009] usb 9-1: Product: syz [ 1316.580384][ T1009] usb 9-1: Manufacturer: syz [ 1316.580398][ T1009] usb 9-1: SerialNumber: syz [ 1316.635422][ T1009] usb 9-1: config 0 descriptor?? [ 1316.647913][ T1009] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1316.683923][ T1009] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1316.708062][ T1009] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1317.141364][T23627] dvmrp0: entered allmulticast mode [ 1317.151682][T23627] fuse: Unknown parameter '0xffffffffffffffff0x00000000000000000000000000000000001300000000000000000007' [ 1317.299577][T23630] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6134'. [ 1317.918567][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6135'. [ 1317.941867][T23638] ALSA: seq: too many ports for client 15 [ 1317.941881][T23638] ALSA: seq_oss: can't create port [ 1319.278238][ T5626] usb 9-1: USB disconnect, device number 36 [ 1319.448601][T23664] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6149'. [ 1320.149475][T13639] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1320.287875][T23681] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1320.287875][T23681] program syz.5.6156 not setting count and/or reply_len properly [ 1320.315055][T13639] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.315106][T13639] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1320.338789][T13639] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1320.338823][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.338844][T13639] usb 9-1: Product: syz [ 1320.338861][T13639] usb 9-1: Manufacturer: syz [ 1320.338877][T13639] usb 9-1: SerialNumber: syz [ 1320.387381][T13639] usb 9-1: config 0 descriptor?? [ 1320.410205][T13639] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1320.425598][T13639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1320.450924][T13639] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1321.121560][ T5601] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1321.454735][ T5601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.454798][ T5601] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1321.454826][ T5601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.474107][ T5601] usb 6-1: config 0 descriptor?? [ 1321.518369][ T5601] pwc: Askey VC010 type 2 USB webcam detected. [ 1321.698509][ T5601] pwc: send_video_command error -71 [ 1321.698531][ T5601] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1321.698652][ T5601] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1321.725062][ T5601] usb 6-1: USB disconnect, device number 54 [ 1322.204303][ T5601] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1322.349030][ T5601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.349102][ T5601] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1322.349130][ T5601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.354195][ T5601] usb 6-1: config 0 descriptor?? [ 1322.393762][ T5601] pwc: Askey VC010 type 2 USB webcam detected. [ 1322.741789][ T5601] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1322.742537][ T5601] pwc: recv_control_msg error -32 req 02 val 2700 [ 1322.743332][ T5601] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1322.744084][ T5601] pwc: recv_control_msg error -32 req 04 val 1000 [ 1322.744892][ T5601] pwc: recv_control_msg error -32 req 04 val 1300 [ 1322.745682][ T5601] pwc: recv_control_msg error -32 req 04 val 1400 [ 1322.765309][ T5601] pwc: recv_control_msg error -32 req 02 val 2000 [ 1322.787263][ T5601] pwc: recv_control_msg error -32 req 02 val 2100 [ 1323.051760][ T1009] usb 9-1: USB disconnect, device number 37 [ 1323.184016][ T5601] pwc: recv_control_msg error -71 req 02 val 2400 [ 1323.192714][ T5601] pwc: recv_control_msg error -71 req 02 val 2600 [ 1323.200316][ T5601] pwc: recv_control_msg error -71 req 02 val 2900 [ 1323.200833][ T5601] pwc: recv_control_msg error -71 req 02 val 2800 [ 1323.212387][ T5601] pwc: recv_control_msg error -71 req 04 val 1100 [ 1323.218140][T23716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.219503][ T5601] pwc: recv_control_msg error -71 req 04 val 1200 [ 1323.284864][T23716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.286793][ T5601] pwc: Registered as video103. [ 1323.305611][ T5601] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input51 [ 1323.326743][ T5601] usb 6-1: USB disconnect, device number 55 [ 1324.614494][T23735] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6174'. [ 1324.794586][T23733] vivid-002: disconnect [ 1324.795054][T23733] vivid-002: reconnect [ 1325.042272][T23740] Invalid source name [ 1325.042293][T23740] UBIFS error (pid: 23740): cannot open "./file0", error -22 [ 1325.485931][ T1009] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1325.637000][ T1009] usb 6-1: Using ep0 maxpacket: 8 [ 1325.651108][ T1009] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1325.651176][ T1009] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.651217][ T1009] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.651245][ T1009] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.651270][ T1009] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.651316][ T1009] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1325.651343][ T1009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.775557][T23761] sctp: [Deprecated]: syz.8.6190 (pid 23761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1325.775557][T23761] Use struct sctp_sack_info instead [ 1325.966930][ T1009] usb 6-1: usb_control_msg returned -32 [ 1325.966980][ T1009] usbtmc 6-1:16.0: can't read capabilities [ 1326.256771][ T5601] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1326.313522][T23778] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 1326.428009][ T5601] usb 9-1: Using ep0 maxpacket: 16 [ 1326.432987][ T5601] usb 9-1: config index 0 descriptor too short (expected 52, got 36) [ 1326.433022][ T5601] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 1326.433047][ T5601] usb 9-1: config 0 has no interface number 0 [ 1326.433098][ T5601] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1326.433128][ T5601] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1326.460649][ T5601] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1326.460685][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.460710][ T5601] usb 9-1: Product: syz [ 1326.460727][ T5601] usb 9-1: Manufacturer: syz [ 1326.460746][ T5601] usb 9-1: SerialNumber: syz [ 1326.521485][T23749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6179'. [ 1326.521508][T23749] netlink: 'syz.5.6179': attribute type 3 has an invalid length. [ 1326.543270][ T5601] usb 9-1: config 0 descriptor?? [ 1326.548539][T23765] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.548681][T23765] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.753251][T23765] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.753627][T23765] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1326.897386][T13639] usb 6-1: USB disconnect, device number 56 [ 1327.232724][ T5601] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1327.232761][ T5601] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1327.233075][ T5601] asix 9-1:0.251: probe with driver asix failed with error -71 [ 1327.270859][ T5601] usb 9-1: USB disconnect, device number 38 [ 1327.451303][T23784] comedi comedi3: aio_aio12_8: I/O base address or length out of range [ 1327.453890][T23784] kernel profiling enabled (shift: 63) [ 1327.453909][T23784] profiling shift: 63 too large [ 1327.570852][T23788] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6192'. [ 1327.806762][T23793] vivid-002: disconnect [ 1327.807260][T23793] vivid-002: reconnect [ 1328.246866][ T5601] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1328.409150][ T5601] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.409229][ T5601] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1328.409247][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.454337][ T5601] usb 9-1: config 0 descriptor?? [ 1328.477427][ T5601] pwc: Askey VC010 type 2 USB webcam detected. [ 1328.843842][ T5601] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1328.844955][ T5601] pwc: recv_control_msg error -32 req 02 val 2700 [ 1328.846045][ T5601] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1328.846936][ T5601] pwc: recv_control_msg error -32 req 04 val 1000 [ 1328.847975][ T5601] pwc: recv_control_msg error -32 req 04 val 1300 [ 1328.848975][ T5601] pwc: recv_control_msg error -32 req 04 val 1400 [ 1329.043446][ T5601] pwc: recv_control_msg error -32 req 02 val 2100 [ 1329.052836][ T5601] pwc: recv_control_msg error -32 req 04 val 1500 [ 1329.056081][ T5601] pwc: recv_control_msg error -32 req 02 val 2500 [ 1329.313745][ T5601] pwc: recv_control_msg error -71 req 02 val 2600 [ 1329.314276][ T5601] pwc: recv_control_msg error -71 req 02 val 2900 [ 1329.314770][ T5601] pwc: recv_control_msg error -71 req 02 val 2800 [ 1329.315460][ T5601] pwc: recv_control_msg error -71 req 04 val 1100 [ 1329.315944][ T5601] pwc: recv_control_msg error -71 req 04 val 1200 [ 1329.411627][ T5601] pwc: Registered as video103. [ 1329.423947][ T5601] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input52 [ 1329.497051][ T5601] usb 9-1: USB disconnect, device number 39 [ 1330.098083][T23817] comedi comedi3: aio_aio12_8: I/O base address or length out of range [ 1330.127037][T23814] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6201'. [ 1330.311167][T23821] ALSA: seq: too many ports for client 15 [ 1330.311194][T23821] ALSA: seq_oss: can't create port [ 1330.436566][T23825] vivid-002: disconnect [ 1330.437030][T23825] vivid-002: reconnect [ 1331.349202][T23841] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6211'. [ 1331.455373][T23847] vivid-002: disconnect [ 1331.455753][T23847] vivid-002: reconnect [ 1333.479445][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 1333.479562][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.644506][T23874] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6220'. [ 1334.186273][T23887] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6223'. [ 1335.098229][T23901] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6229'. [ 1336.324967][T23922] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6238'. [ 1336.692980][T13639] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1336.830588][T23936] fuse: Bad value for 'fd' [ 1336.843010][T13639] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.843055][T13639] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1336.864669][T13639] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1336.864693][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.864709][T13639] usb 9-1: Product: syz [ 1336.864720][T13639] usb 9-1: Manufacturer: syz [ 1336.864731][T13639] usb 9-1: SerialNumber: syz [ 1336.871225][T13639] usb 9-1: config 0 descriptor?? [ 1336.916351][T13639] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1336.932974][T13639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1336.937568][T13639] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1337.488142][T23949] vivid-001: disconnect [ 1337.500928][T23949] vivid-001: reconnect [ 1337.507798][T23950] sctp: [Deprecated]: syz.6.6249 (pid 23950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1337.507798][T23950] Use struct sctp_sack_info instead [ 1339.081279][T23972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6258'. [ 1339.160870][T23977] sctp: [Deprecated]: syz.7.6260 (pid 23977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1339.160870][T23977] Use struct sctp_sack_info instead [ 1339.454545][T23100] usb 9-1: USB disconnect, device number 40 [ 1341.618876][T24002] sctp: [Deprecated]: syz.7.6269 (pid 24002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1341.618876][T24002] Use struct sctp_sack_info instead [ 1342.296899][ T1009] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1342.443527][ T1009] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1342.444193][ T1009] usb 6-1: not running at top speed; connect to a high speed hub [ 1342.445403][ T1009] usb 6-1: config 128 has an invalid interface number: 160 but max is 0 [ 1342.445431][ T1009] usb 6-1: config 128 has no interface number 0 [ 1342.445465][ T1009] usb 6-1: config 128 interface 160 has no altsetting 0 [ 1342.467603][ T1009] usb 6-1: New USB device found, idVendor=0830, idProduct=0020, bcdDevice=53.75 [ 1342.467628][ T1009] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.467644][ T1009] usb 6-1: Product:   [ 1342.467655][ T1009] usb 6-1: Manufacturer: ဉ [ 1342.467666][ T1009] usb 6-1: SerialNumber: 㑙飆᮶꘹馻컵뫮ꞻ狎並WᏞ瘼梀࢛㭄莹䒃 [ 1342.792038][ T1009] usb 6-1: active config #128 != 1 ?? [ 1342.808691][ T1009] usb 6-1: USB disconnect, device number 57 [ 1344.328805][T24023] sctp: [Deprecated]: syz.7.6278 (pid 24023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1344.328805][T24023] Use struct sctp_sack_info instead [ 1344.704247][T13639] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1344.855563][T13639] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1344.855599][T13639] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.855614][T13639] usb 9-1: Product: syz [ 1344.855626][T13639] usb 9-1: Manufacturer: syz [ 1344.855637][T13639] usb 9-1: SerialNumber: syz [ 1344.918831][T13639] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1345.173946][ T5762] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1345.425755][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.426679][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.949403][T18817] usb 9-1: USB disconnect, device number 41 [ 1346.322551][ T5762] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1346.374687][ T5762] ath9k_htc: Failed to initialize the device [ 1346.403294][T18817] usb 9-1: ath9k_htc: USB layer deinitialized [ 1346.522013][T13639] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1346.668019][T13639] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.668067][T13639] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1346.671733][T13639] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1346.671767][T13639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.671799][T13639] usb 6-1: Product: syz [ 1346.671816][T13639] usb 6-1: Manufacturer: syz [ 1346.671833][T13639] usb 6-1: SerialNumber: syz [ 1346.712526][T13639] usb 6-1: config 0 descriptor?? [ 1346.739801][T13639] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1346.762629][T13639] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1346.780089][T13639] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 1346.903857][T18817] usb 9-1: new low-speed USB device number 42 using dummy_hcd [ 1347.057586][T18817] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1347.057626][T18817] usb 9-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1347.057648][T18817] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1347.057676][T18817] usb 9-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1347.057694][T18817] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.061967][T18817] usb 9-1: config 0 descriptor?? [ 1347.065847][T24061] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1347.459686][T18817] lg-g15 0003:046D:C227.0013: unknown main item tag 0x2 [ 1347.459730][T18817] lg-g15 0003:046D:C227.0013: unknown main item tag 0x7 [ 1347.479733][T18817] lg-g15 0003:046D:C227.0013: hidraw0: USB HID v0.0c Device [HID 046d:c227] on usb-dummy_hcd.8-1/input0 [ 1347.732466][T24078] fuse: Bad value for 'fd' [ 1347.972665][ T5762] usb 9-1: USB disconnect, device number 42 [ 1349.000412][ T5626] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1349.151679][ T5626] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1349.160954][ T5626] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.160985][ T5626] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1349.176163][ T5626] usb 9-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1349.176198][ T5626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.176222][ T5626] usb 9-1: Product: syz [ 1349.176239][ T5626] usb 9-1: Manufacturer: syz [ 1349.176256][ T5626] usb 9-1: SerialNumber: syz [ 1349.403389][T24104] FAULT_INJECTION: forcing a failure. [ 1349.403389][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.403450][T24104] CPU: 1 UID: 0 PID: 24104 Comm: syz.6.6309 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1349.403484][T24104] Tainted: [L]=SOFTLOCKUP [ 1349.403493][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.403509][T24104] Call Trace: [ 1349.403519][T24104] [ 1349.403528][T24104] dump_stack_lvl+0xe8/0x150 [ 1349.403561][T24104] should_fail_ex+0x46b/0x600 [ 1349.403624][T24104] should_failslab+0xa8/0x100 [ 1349.403659][T24104] __kmalloc_noprof+0xdf/0x7b0 [ 1349.403685][T24104] ? kfree+0x4d/0x6c0 [ 1349.403713][T24104] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1349.403739][T24104] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1349.403830][T24104] ? tomoyo_domain+0xd7/0x130 [ 1349.403863][T24104] ? tomoyo_path_number_perm+0x219/0x630 [ 1349.403902][T24104] tomoyo_path_number_perm+0x246/0x630 [ 1349.403946][T24104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1349.403983][T24104] ? __lock_acquire+0x6b5/0x2d10 [ 1349.404014][T24104] ? do_raw_spin_lock+0x12b/0x2f0 [ 1349.404075][T24104] ? __fget_files+0x2a/0x420 [ 1349.404102][T24104] ? __fget_files+0x2a/0x420 [ 1349.404181][T24104] ? __fget_files+0x3a6/0x420 [ 1349.404214][T24104] ? __fget_files+0x2a/0x420 [ 1349.404246][T24104] security_file_ioctl+0xc3/0x2a0 [ 1349.404282][T24104] __se_sys_ioctl+0x47/0x170 [ 1349.404316][T24104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.404343][T24104] do_syscall_64+0x174/0x580 [ 1349.404383][T24104] ? trace_irq_disable+0x3b/0x140 [ 1349.404408][T24104] ? clear_bhb_loop+0x40/0x90 [ 1349.404437][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.404459][T24104] RIP: 0033:0x7f422a95ce59 [ 1349.404483][T24104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.404505][T24104] RSP: 002b:00007f4228bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.404535][T24104] RAX: ffffffffffffffda RBX: 00007f422abd5fa0 RCX: 00007f422a95ce59 [ 1349.404552][T24104] RDX: 0000200000000140 RSI: 000000004400ae8f RDI: 0000000000000005 [ 1349.404568][T24104] RBP: 00007f4228bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.404583][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.404597][T24104] R13: 00007f422abd6038 R14: 00007f422abd5fa0 R15: 00007fffe59c2158 [ 1349.404632][T24104] [ 1349.417539][T24104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1349.598103][ T5762] usb 6-1: USB disconnect, device number 58 [ 1349.695615][ T5626] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 1349.771552][ T1009] usb 9-1: USB disconnect, device number 43 [ 1350.175551][ T5762] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1350.318292][ T5762] usb 6-1: Using ep0 maxpacket: 16 [ 1350.325936][ T5762] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1350.328285][ T5762] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1350.356679][ T5762] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 1350.356712][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.356735][ T5762] usb 6-1: Product: syz [ 1350.356751][ T5762] usb 6-1: Manufacturer: syz [ 1350.356769][ T5762] usb 6-1: SerialNumber: syz [ 1350.746589][ T5626] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1350.898446][ T5626] usb 9-1: Using ep0 maxpacket: 8 [ 1350.906685][ T5626] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1350.906722][ T5626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.906746][ T5626] usb 9-1: Product: syz [ 1350.906763][ T5626] usb 9-1: Manufacturer: syz [ 1350.906781][ T5626] usb 9-1: SerialNumber: syz [ 1351.005603][ T5762] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1351.007533][ T5762] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1351.208244][ T5626] usb 9-1: unit 0 not found! [ 1351.229606][ T5762] usb 6-1: USB disconnect, device number 59 [ 1351.338604][ T5626] usb 9-1: USB disconnect, device number 44 [ 1351.377132][T24124] 9pnet_virtio: no channels available for device syz [ 1351.498668][T22588] udevd[22588]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1351.760616][T22587] udevd[22587]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1351.915574][T24138] vivid-001: disconnect [ 1351.916040][T24138] vivid-001: reconnect [ 1353.139423][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6330'. [ 1353.446731][T24164] vivid-002: disconnect [ 1353.447158][T24164] vivid-002: reconnect [ 1354.324130][ T5626] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1354.476361][ T5626] usb 6-1: Using ep0 maxpacket: 32 [ 1354.481958][ T5626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.482000][ T5626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.482049][ T5626] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 1.40 [ 1354.482080][ T5626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.535068][ T5626] usb 6-1: config 0 descriptor?? [ 1354.541803][ T5626] hub 6-1:0.0: USB hub found [ 1354.751073][ T5626] hub 6-1:0.0: 1 port detected [ 1354.996914][T24188] vivid-002: disconnect [ 1354.998336][T24188] vivid-002: reconnect [ 1355.335851][ T5626] hub 6-1:0.0: activate --> -90 [ 1355.490470][T24201] overlayfs: failed to clone lowerpath [ 1355.776232][T23100] usb 6-1: USB disconnect, device number 60 [ 1356.320129][T24212] vivid-001: disconnect [ 1356.320914][T24212] vivid-001: reconnect [ 1356.702913][T13639] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1356.845691][T13639] usb 6-1: Using ep0 maxpacket: 8 [ 1356.862783][T13639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1356.862826][T13639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.862853][T13639] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1356.862878][T13639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1356.862901][T13639] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1356.862945][T13639] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1356.862972][T13639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.960162][T13639] usb 6-1: config 0 descriptor?? [ 1357.182882][T24225] tipc: Enabling of bearer rejected, failed to enable media [ 1357.311087][T14561] Bluetooth: hci4: urb ffff888033629000 submission failed (90) [ 1357.322073][T13639] usb 6-1: USB disconnect, device number 61 [ 1357.680011][T24238] vivid-002: disconnect [ 1357.680473][T24238] vivid-002: reconnect [ 1358.158886][T23100] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1358.311294][T23100] usb 9-1: Using ep0 maxpacket: 16 [ 1358.318178][T23100] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1358.319862][T23100] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1358.348246][T23100] usb 9-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1358.348281][T23100] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.348304][T23100] usb 9-1: Product: syz [ 1358.348320][T23100] usb 9-1: Manufacturer: syz [ 1358.348337][T23100] usb 9-1: SerialNumber: syz [ 1358.907115][T24259] vivid-003: disconnect [ 1358.907402][T24259] vivid-003: reconnect [ 1358.975073][T23100] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1359.214110][T23100] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1359.236156][T23100] usb 9-1: USB disconnect, device number 45 [ 1359.322759][T22588] udevd[22588]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.623766][T24276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6382'. [ 1361.695923][T24307] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1363.186292][T24345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6411'. [ 1363.252815][T24345] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6411'. [ 1364.249527][T24366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6421'. [ 1364.349637][T24366] netlink: 236 bytes leftover after parsing attributes in process `syz.5.6421'. [ 1365.484327][T24391] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6433'. [ 1365.627927][T24395] netlink: 236 bytes leftover after parsing attributes in process `syz.7.6435'. [ 1366.080546][T14561] Bluetooth: hci3: link tx timeout [ 1366.080569][T14561] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1366.293022][T24422] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6446'. [ 1367.017221][T24450] netlink: 236 bytes leftover after parsing attributes in process `syz.6.6457'. [ 1367.566899][T18817] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1367.717083][T18817] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1367.734489][T18817] usb 6-1: string descriptor 0 read error: -22 [ 1367.734642][T18817] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1367.734669][T18817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.118157][ T4928] Bluetooth: hci3: command 0x0406 tx timeout [ 1368.593057][T24466] ================================================================== [ 1368.593153][T24466] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 1368.593208][T24466] Read of size 8 at addr ffff88802ba141c8 by task syz.8.6463/24466 [ 1368.593230][T24466] [ 1368.593254][T24466] CPU: 1 UID: 0 PID: 24466 Comm: syz.8.6463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1368.593300][T24466] Tainted: [L]=SOFTLOCKUP [ 1368.593310][T24466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.593326][T24466] Call Trace: [ 1368.593337][T24466] [ 1368.593348][T24466] dump_stack_lvl+0xe8/0x150 [ 1368.593380][T24466] print_address_description+0x55/0x1e0 [ 1368.593413][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.593447][T24466] print_report+0x58/0x70 [ 1368.593475][T24466] kasan_report+0x117/0x150 [ 1368.593506][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.593547][T24466] clear_tfile_check_list+0x114/0x380 [ 1368.593585][T24466] ? clear_tfile_check_list+0x22/0x380 [ 1368.593621][T24466] do_epoll_ctl_file+0x8fd/0xed0 [ 1368.593652][T24466] ? do_epoll_ctl_file+0xac3/0xed0 [ 1368.593686][T24466] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1368.593721][T24466] ? __fget_files+0x3a6/0x420 [ 1368.593748][T24466] ? __fget_files+0x2a/0x420 [ 1368.593778][T24466] __se_sys_epoll_ctl+0x14e/0x210 [ 1368.593822][T24466] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1368.593860][T24466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.593886][T24466] do_syscall_64+0x174/0x580 [ 1368.593922][T24466] ? trace_irq_disable+0x3b/0x140 [ 1368.593948][T24466] ? clear_bhb_loop+0x40/0x90 [ 1368.593975][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.593997][T24466] RIP: 0033:0x7f7a998ece59 [ 1368.594019][T24466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.594065][T24466] RSP: 002b:00007f7a97b25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1368.594093][T24466] RAX: ffffffffffffffda RBX: 00007f7a99b66090 RCX: 00007f7a998ece59 [ 1368.594112][T24466] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 1368.594127][T24466] RBP: 00007f7a99982d6f R08: 0000000000000000 R09: 0000000000000000 [ 1368.594143][T24466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.594160][T24466] R13: 00007f7a99b66128 R14: 00007f7a99b66090 R15: 00007ffd1eab6638 [ 1368.594189][T24466] [ 1368.594199][T24466] [ 1368.594205][T24466] Allocated by task 24465: [ 1368.594228][T24466] kasan_save_track+0x3e/0x80 [ 1368.594255][T24466] __kasan_slab_alloc+0x6c/0x80 [ 1368.594279][T24466] kmem_cache_alloc_noprof+0x33b/0x680 [ 1368.594305][T24466] ep_insert+0x512/0x1820 [ 1368.594332][T24466] do_epoll_ctl_file+0x8bb/0xed0 [ 1368.594362][T24466] __se_sys_epoll_ctl+0x14e/0x210 [ 1368.594393][T24466] do_syscall_64+0x174/0x580 [ 1368.594425][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.594446][T24466] [ 1368.594452][T24466] Freed by task 24467: [ 1368.594465][T24466] kasan_save_track+0x3e/0x80 [ 1368.594488][T24466] kasan_save_free_info+0x46/0x50 [ 1368.594522][T24466] __kasan_slab_free+0x5c/0x80 [ 1368.594547][T24466] kmem_cache_free+0x187/0x6c0 [ 1368.594573][T24466] eventpoll_release_file+0xc2/0x240 [ 1368.594607][T24466] __fput+0x83c/0xa70 [ 1368.594630][T24466] task_work_run+0x1d9/0x270 [ 1368.594656][T24466] exit_to_user_mode_loop+0x193/0x680 [ 1368.594681][T24466] do_syscall_64+0x353/0x580 [ 1368.594714][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.594735][T24466] [ 1368.594741][T24466] The buggy address belongs to the object at ffff88802ba141c0 [ 1368.594741][T24466] which belongs to the cache ep_head of size 16 [ 1368.594760][T24466] The buggy address is located 8 bytes inside of [ 1368.594760][T24466] freed 16-byte region [ffff88802ba141c0, ffff88802ba141d0) [ 1368.594954][T24466] [ 1368.594964][T24466] The buggy address belongs to the physical page: [ 1368.595041][T24466] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ba14860 pfn:0x2ba14 [ 1368.595065][T24466] memcg:ffff88805e27a001 [ 1368.595075][T24466] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1368.595094][T24466] page_type: f5(slab) [ 1368.595118][T24466] raw: 0080000000000200 ffff888140418dc0 ffffea0000ff59d0 ffffea0000fdb990 [ 1368.595142][T24466] raw: ffff88802ba14860 000000080080002a 00000000f5000000 ffff88805e27a001 [ 1368.595156][T24466] page dumped because: kasan: bad access detected [ 1368.595176][T24466] page_owner tracks the page as allocated [ 1368.595186][T24466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4979, tgid 4979 (udevd), ts 33379612922, free_ts 28573522601 [ 1368.595224][T24466] post_alloc_hook+0x1f9/0x250 [ 1368.595260][T24466] get_page_from_freelist+0x265c/0x26e0 [ 1368.595292][T24466] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1368.595324][T24466] allocate_slab+0x74/0x5e0 [ 1368.595359][T24466] refill_objects+0x33c/0x3d0 [ 1368.595391][T24466] __pcs_replace_empty_main+0x373/0x720 [ 1368.595422][T24466] kmem_cache_alloc_noprof+0x433/0x680 [ 1368.595444][T24466] ep_insert+0x512/0x1820 [ 1368.595471][T24466] do_epoll_ctl_file+0x8bb/0xed0 [ 1368.595501][T24466] __se_sys_epoll_ctl+0x14e/0x210 [ 1368.595529][T24466] do_syscall_64+0x174/0x580 [ 1368.595558][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.595582][T24466] page last free pid 822 tgid 822 stack trace: [ 1368.595596][T24466] __free_frozen_pages+0x10af/0x1190 [ 1368.595624][T24466] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1368.595648][T24466] __apply_to_page_range+0xbdc/0x1420 [ 1368.595671][T24466] __kasan_release_vmalloc+0xa2/0xd0 [ 1368.595689][T24466] purge_vmap_node+0x220/0x960 [ 1368.595715][T24466] __purge_vmap_area_lazy+0x779/0xb40 [ 1368.595741][T24466] drain_vmap_area_work+0x27/0x40 [ 1368.595767][T24466] process_one_work+0x98b/0x1630 [ 1368.595799][T24466] worker_thread+0xb49/0x1140 [ 1368.595833][T24466] kthread+0x388/0x470 [ 1368.595865][T24466] ret_from_fork+0x514/0xb70 [ 1368.595889][T24466] ret_from_fork_asm+0x1a/0x30 [ 1368.595916][T24466] [ 1368.595923][T24466] Memory state around the buggy address: [ 1368.595938][T24466] ffff88802ba14080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1368.595957][T24466] ffff88802ba14100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1368.595976][T24466] >ffff88802ba14180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1368.595991][T24466] ^ [ 1368.596003][T24466] ffff88802ba14200: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1368.596018][T24466] ffff88802ba14280: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 1368.596030][T24466] ================================================================== [ 1368.596290][T24466] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1368.596316][T24466] CPU: 1 UID: 0 PID: 24466 Comm: syz.8.6463 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1368.596352][T24466] Tainted: [L]=SOFTLOCKUP [ 1368.596363][T24466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1368.596379][T24466] Call Trace: [ 1368.596390][T24466] [ 1368.596401][T24466] vpanic+0x56c/0xa60 [ 1368.596442][T24466] ? __pfx_vpanic+0x10/0x10 [ 1368.596480][T24466] ? __pfx___schedule+0x10/0x10 [ 1368.596517][T24466] panic+0xc5/0xd0 [ 1368.596548][T24466] ? __pfx_panic+0x10/0x10 [ 1368.596579][T24466] ? preempt_schedule_thunk+0x16/0x40 [ 1368.596623][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.596657][T24466] check_panic_on_warn+0x89/0xb0 [ 1368.596684][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.596716][T24466] end_report+0x73/0x170 [ 1368.596745][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.596780][T24466] kasan_report+0x128/0x150 [ 1368.596813][T24466] ? clear_tfile_check_list+0x114/0x380 [ 1368.596865][T24466] clear_tfile_check_list+0x114/0x380 [ 1368.596902][T24466] ? clear_tfile_check_list+0x22/0x380 [ 1368.596940][T24466] do_epoll_ctl_file+0x8fd/0xed0 [ 1368.596990][T24466] ? do_epoll_ctl_file+0xac3/0xed0 [ 1368.597024][T24466] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 1368.597057][T24466] ? __fget_files+0x3a6/0x420 [ 1368.597082][T24466] ? __fget_files+0x2a/0x420 [ 1368.597113][T24466] __se_sys_epoll_ctl+0x14e/0x210 [ 1368.597149][T24466] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 1368.597185][T24466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.597210][T24466] do_syscall_64+0x174/0x580 [ 1368.597245][T24466] ? trace_irq_disable+0x3b/0x140 [ 1368.597273][T24466] ? clear_bhb_loop+0x40/0x90 [ 1368.597301][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.597327][T24466] RIP: 0033:0x7f7a998ece59 [ 1368.597349][T24466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.597372][T24466] RSP: 002b:00007f7a97b25028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1368.597400][T24466] RAX: ffffffffffffffda RBX: 00007f7a99b66090 RCX: 00007f7a998ece59 [ 1368.597419][T24466] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000007 [ 1368.597435][T24466] RBP: 00007f7a99982d6f R08: 0000000000000000 R09: 0000000000000000 [ 1368.597451][T24466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.597469][T24466] R13: 00007f7a99b66128 R14: 00007f7a99b66090 R15: 00007ffd1eab6638 [ 1368.597497][T24466] [ 1368.598215][T24466] Kernel Offset: disabled