last executing test programs: 6.733027449s ago: executing program 4 (id=2070): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}}, 0x20050840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000000000000000000000000000000ffff", [0x8, 0xffffffff9673e35d]}}) 6.598563218s ago: executing program 4 (id=2072): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc42000000000000000000000000000000000000000000001d000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) 6.370713681s ago: executing program 4 (id=2074): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x80000001, 0xffffffffffffffff, 0x2}) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000040)=0xffffcdae) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xa0400, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x5, 0x4, [0x5, 0x2, 0x2, 0xd]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x3}}, 0x3, 0xfffc}, &(0x7f0000000200)=0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r4, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9af06e78a6a55bf4a9e1d35d2c31de6d561f3c7c0435aab09230da4b9e1c38dc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ac912a861bc913b62ea026a45c3901a6"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3e63e4067937262ecca3f3e0aeecac1792358983563b8330db2627419fc9421b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d79ff0ab8c2bc639439ccbd6397d9205ca40a6ba6e46491"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dc1beb606f40ad806604f6746867a107"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c0) r5 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001e00)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="997e6e7f004c5504351bb0f16b35847c18ab85f00c05291ab91b122e4b797e22a7ec12fdb0d916e51bd6b126d3f4249136d42454b6212c5a9d7e4d69c0d8e5938e0f5cbeafcfe51e392c547d7589a1c1af9462fe1141561e14eadca8c896b59ac2fd19b016124fba556d335facc8d0b717055e01f6c42877c8676298c243fcca69cca710dadd16b0e7181574271d193d6422c6169026593f87299690241037a970a71981c962e7baf283", 0xaa}, {&(0x7f00000004c0)="b8639d487e4b201b1a3a1e30e28e32924461ebfae1936369afbf3e6c68c350362db65206a5818c4e8f99b7ce94448e654b07d91e8a49c4c493d447e02c506c50a121c9676f0d7714c481085d8b47480b2dcd06461d3d7270abdba1a5e4587372f8b3564c54bd7a9a3d50ee573a3bd44290e0de0573a0700408cf20b2b8f63dfe439101a0fbc8d268b76afbb19d4db04feb192e", 0x93}], 0x2, &(0x7f00000005c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb0f}, @assoc={0x18, 0x117, 0x4, 0xfffffc00}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x4}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="ada58136c80302f893d15902d9dfe9926708b3c00828b8c24a390767e83d562c67987e5284bc0cdbc2f64785494b1cd278e5530d2b8fea38bcc76b70ae54e24c32aec95313f4aa682f2a4719d42cb1ffacec46c0767320d69fd1b19818da2eab2ebb6ed8e7fda2506e3c875d5b82f5fa863078faa62bec58179bcae87be2ff46cbe98d07aebbac9539911f855d8f43677ac639d12816422a48aadfe44d2aab5089e457d53dba5c6481646f11f88f7238b52cbb47bdb7f24eafa43be3973a442b44192da250842676210a96be6a983cabbc8f", 0xd2}], 0x1, &(0x7f0000000780)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x4000044}, {0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="8d7e133c88379ecf46032837dd04dd528446ac563c69cb2d5fd19892", 0x1c}, {&(0x7f0000000800)="8d1454e855e5cf5e7f971ce3d9b41f67c67e940fb30de71e29df1aa6a6052c0b11ecfb764cb2eb", 0x27}, {&(0x7f0000000840)="70bee961583780e946f9df7ed08a26a92b3f79c6e0845d200a7152fcfd49c0190d6862dec7dcf317d1eb310f00a2b16f373fdb826f6114ad6382a7d6bc08998589ce16b7c49659a19ac0a4bc101756d23a2d5583e83bac0292eb8a18c8954b75c1a03e45", 0x64}, {&(0x7f00000008c0)="8222a50d8f8795e073f059f8d05cdbee40cf480b3fb3f2931713a9221fb4b7912564fe35f4c403bb54ff8c4b37dd14ef42bcb5c48def08ac01e930b076e272acb888d1084923d15421", 0x49}], 0x4, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0xff}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x45b}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1e, "b83815e993ce8127646e52dfac8762f7a0b48d81a318b25984a9df8aaa15"}, @iv={0x50, 0x117, 0x2, 0x35, "db165b809dd05a7e59011594fd719fa606410620d8b454db76b79d89de4300a17e80891c1060f6b021deccf7ba7e9918b362ba98f0"}], 0x148, 0x24008085}, {0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000b40)=[@iv={0x38, 0x117, 0x2, 0x24, "82612566124b54ac5a567538bdc791e85e6a6c096d70fae61dafd3a4ba7bce5556e71030"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x101}, @iv={0xd0, 0x117, 0x2, 0xbb, "243dfe6180ece463d3a7fc6a25bbfc90767d105bbc96c6ea0802f70948cc3982105da37c373aa025c5546875d003886fce50a883f7cfc959529bf38c5f57031d25be1a99d727a91117ec2a046da7776411d9102481a6f972939360d5b752a0a0ad57272e3a66faf9213dc045a9590dc49202864d7439d121f5a1375d9ee69e668905211a84b77ad437d0dd48c2eb39db6ad465129fb399587b698b0c86dec4135e21169c6cf6c47f5d769f72dbaac765b741937d603ef52f31cd64"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x198, 0x9004}, {0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000d00)="4696a874b6cba871350687aaf6c7cc4bd0496312b809e1e3a55d2d3e8d96c2939ff9b6bbd78ac2d4b04294a853492b6dbe27b5ddafae4b1609d37b0f388fd670cd9f7fa98f56afd4c426c2f2d2fcfadc79b7518519af565bc017f0d193d5300afd00b49437bddb423c616267bc2c1aee7e10e4c0588a944bc720e1131926225f8625062fe6ba3235676dbddbfa55321ddce43f4ce8a7c09cc472017920a416806f7d48e3187e8f430697d83ff9b34c28fd0388701c2806dfa13865255676e62a2c1ba5034094e2e3e5493fd1e595f03c96fae688a10169fc7c4b740aa96aee1d29eeb0564cfa3ea2681a45c2", 0xec}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="10580edaa222a1753b321f6aac86755b11448b600e6bdc69e8cd2f28762fc7bd4e46fe950ea813b48611c60628c2fbf228300972877bfb59c0e8d67d98e84f16c2b3a69139d042ea9eb2eae9f3031ccb4358ca664068b76df7fd715df5e9bb214bdaff048f6c9b550e205c3f05684c749e6f35ed5310d78f6d47b8a405c7ac0b75bbb035b1153d5f2cdd7c7226ab4abb26d268b283506f041f4394060a85322e227154a2b6c3ace57d1998901b1c25dfdb4994b4e042ac21157eb05b453b46c3e5bdb31b07ff11563f5b37c87da57b98f714cf732c24055f", 0xd8}, {&(0x7f0000000f40)="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", 0xfc}, {&(0x7f0000001040)="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", 0xfb}, {&(0x7f0000001140)="e4ab4d59a8134eb1b508522ba59ba38e51396daffd00b7dc32c10123b52ef8642a077330a40ed540b99dce1a67ca5932cb32e4d5a2ce4b23590af843423c889229fdef8d96d6984a44fde27c8ffa63d969e361c42914fd2f2b5ba0c321da799511c86aec95432ae20cbb62fa314e3e8c78d64021c0ee82234df9ddff4083a9e01f8383f354185b45c7c7849d4d8b0ea60b37933c903c08b1996c7dd9d3ad45e1870280babd5a9c8a7e98c3a1edd629ddf4b98d3205274243287671f1d758bc441db384d7b80cf7", 0xc7}, {&(0x7f0000001240)="4404ecc5093f6b35baea3e7da3360a3e4bdb533966d66113094b10be4872bd4df9d9652dff7762a8d1ff06d4959072317f2c1de537d1fd775e19f2ae6a8fca5fb0b44568ecfec2c22584fe697616fefb7a5c8dfd6dab0e78e04e95d00050b2b275cab0d91a0dbbfe72ea08c9c0acf381a1469551383182e1c6516a7746af1951f508e49dd97b3b7dde55d0d2d0f067be8d41c0f06f20d5f23418c0e074567fcbc05fb766c1ec0237e74793b38b730e705f806ee600d9e0325be98d08fef866b0f96e66bc2ef67467de14c8ba9fa50d3c576dabe899ba4052bc2ca1c95393de316a52f315bf11ce549f82cb5abc", 0xed}, {&(0x7f0000001340)="821d201febac928516ac8acfb8fb2d84ac4ac744d5fbb8ab1f5fcc4fddc0390c389aa7f33e0962409169d7dea819bf6b084c799c6ab180354fa5a261e3d9bec551fa5174264c22d2df4d1100a23f250ae6d0b596df6c9909874a9fba894b1f945f43809796d9a33a38880bba", 0x6c}, {&(0x7f00000013c0)="dc7abea9daf3f29e79928b4a46e758b3ef74924aabf4039271c7c61b023a4c84a9d91359664ac86611fcc20b73eb2c49fc9df0ef1564be2689d786681e8486f8b9ea32dc647fc05a43a1321977bda61881ee758eb0caecf376678c5668f44410dd8ac74bc719cc0cc507feb8d82b57035ff33caaee4e58f463f474eb6004e3a3f0b8e6", 0x83}, {&(0x7f0000001480)="029da116e5409ff97fef7ef48c2d6caad1da394034c5f63cc9a16766b46c5fac6482d2a6d69b0cf206f40b83eccd7024f47e3c9e74782895a487beaa8626b69a4941f57c22a5df8f41863d44dbf9bf7ef2b401f00cff3fec617182663ed17b511b05af04e4745343cbb596fcbd2971dafc1f1de03f569715003863984c098ad7020f5e257606aef1f6cccfb7cdf70fb15405a7c5a24a93b8a5a6acc8dac04a2256ab6471cd9ab193ad7e03d6f6f89037473fc42aee707503b58cfab1e359dc142680", 0xc2}], 0xa, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x30, 0x117, 0x2, 0x19, "c86f598d4b9e4ea8bd86ea656070561615e7c6b2231f1983f8"}], 0x78, 0x1}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000016c0)="bb516ba2303178d7d72f97f4d2bad6c6b4f6784aafdeacf3ee59ad09c180d3e751694b3900e8d49a6c388d96debc34de990559b6ee79e9a9fc67985b5c50672e17cea2e0de2b55", 0x47}, {&(0x7f0000001740)="da9bfd221debf9736d72f08f37f0b9d04c475383bb66bc25f1cdf49f875ebd28e4a11c5c8eb42d4e704f62e1c302fe6d93a73f7dac8e34574f0d70fe3f4047933942a0c7fc55aec8b161d41c316a61c1318a544d67042d6d776af7a71a4ee69644298ab282cd3df0b8b865d48b8cd7fc", 0x70}, {&(0x7f00000017c0)="0fc9a9fac02249ec3e327bf0b6b761b8d41991dc6cb85efc31bf52233cae07ccc6dc7de9727c5fcd20964942ab50f8b12c7c72906399919fc67c85634c5fadaa9421e5612ad24247e957ee3e428f13ad5920e3cb4249258c630ddc569789db9604d34e835b0efa39256c5cbddb4d23704dd63cdb957a28c3c8339cb43944529edc740d0af108b8aa2b24d8f7545bfb50d13bc733fb719298c5936330c10e7cb1e362bde57862ec677cbca49b8baa85878749b1a385c75934a80be60a21abb748f2f79ba63343", 0xc6}, {&(0x7f00000018c0)="ae3426f3ebcf46b3f5d524d8df0db7f625f5da90d42ebec36ddce4f04eeea5b016f0e85475337a614ca7f18fdff9d1367896a0029bf42d6f26d61108a64fb423fefd67d41cee31056661bffbf886", 0x4e}, {&(0x7f0000001940)="bc52f2c516862fdbc882d2388816c928ce03784256cc6f1070358f182927a7e0e06c9957b4697fc72d063ee29d6795be0dbdab8b24d7980596e816b7cdf32a42330265c3db2184", 0x47}, {&(0x7f00000019c0)="4ec3bd3c049357ece4d1c46dcd06ec17f3b49c45d874151a", 0x18}], 0x6, &(0x7f0000001a80)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}], 0x48}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=' ', 0x1}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)="2eb41419f7199f9da2c3119c6a93c8b6e03688a917b35dc312ca146fabfd48946c065b6f9a1befbfc84109", 0x2b}, {&(0x7f0000001bc0)="97b889737cd190a000ea32f5bdf7ab9bbf4f4820aee20da3c6b9bd380d65e4", 0x1f}], 0x4, &(0x7f0000001c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000840}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="7c5b6bde949ab80e08698521788e4f8b3566dd8284899033340da547348a8f340396a433743eddadfa10d042f5c776b0c2e167ec4d041ebff64771f22296098efc5133a142ff570b60a30b25a532e9bac67bb03a15256cd1acc0effb56b6949beb9d8a4a4bf05f935382bcdc22b7c06a3d78df01533451eb54fbf2c8684403f4fc90ab8af5b39d6892e1eb777144ebd195d987d4f8e43a62c42a05d1eef2021da44de509d72d72c157fd3737702d874b6c04badd974b309518829074a5f7b163e95666e789db81a9b9955e1a96ef00f7ba9f1a5c76150814595283cc7196a67530ddb4b39a94dfb23ecabb3b813b5b6bbb235000e86c8e943c91", 0xfa}, {&(0x7f0000001d80)="9e576a3becaa4757ca8868fe2b57dfac4cf056cac30f60b3b872971cc060aa17531f24baf4294b5f6879de22dabdbb381ddf05677ef8f0db65cdbca6cb4649", 0x3f}], 0x2, 0x0, 0x0, 0x40}], 0x8, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001fc0)) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x30, r4, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d429b021ddca"}, @NL80211_ATTR_MCAST_RATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000002200)=[{}, {r0, 0x410}], 0x2, 0xfffffffe) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002240)={r3, 0x8, 0x101}, 0x8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0xfffffffffffffffc, 0x4000800) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x1164, &(0x7f0000002400)={[{0x1000, 0x4e00, "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"}, {0xf1, 0x4e00, "579b98b50800804bbed985771d75869f29158d91a08f09fb27d41e075f854c78633086398e25ddbc6ac7e86acf01c69ab5b6239af6ab26893f5052e5840a70153135c865fdbe00a3b6fe00582e12641075670d8ccb75c0ffcb2b8c78ba72a33921fd80ea9bc075e0f5cb06b12cea66a2da0d5f113c9c5112203b6db0e4cafc1ad3b98c52ad0a29a70274702142a9ac984349625f567913d87239c0875d07ac64532085a8c7631496057236ad33ffe4132ab2c37c8ba3819c5d385ea80628096df0d8dced958963bedc04bf7baf6dd9bb4049ff27b4fe357d0e76ce07fd6b6e2f426308afddda9cefc710b1dc629370939b"}, {0x64, 0x4e00, "ca4ab4c6b0d1ed65e5c9613dfd819feb68ac1cfc738c0407bd689f50347888b14f2133dbc41f97e478692576dd69b69ea6d3e7d27045e8d653e850ff00a414c545910b06f76abdfbbc9f0e16b9be662dd7eb267f1571c44935577f93690f5757aa169393"}]}) stat(&(0x7f0000003600)='./file0\x00', &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f00000036c0)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000003580)='./file0\x00', &(0x7f00000035c0), 0x100000, &(0x7f0000003700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x8000}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x200}}], [{@hash}, {@obj_role}, {@subj_type}, {@appraise}, {@flag='sync'}, {@dont_hash}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) io_setup(0x6, &(0x7f0000003880)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000003900)={0x0, @dev, @remote}, &(0x7f0000003940)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000003980)={@empty, @remote, 0x0}, &(0x7f00000039c0)=0xc) sendmsg$nl_route(r0, &(0x7f0000003bc0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003b80)={&(0x7f0000003a00)=@mpls_newroute={0x160, 0x18, 0x100, 0x70bd29, 0x25dfdbfc, {0x1c, 0x14, 0x20, 0x5, 0x0, 0x3, 0x0, 0xa, 0x2400}, [@RTA_DST={0x8, 0x1, {0x0, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0xb, "859b6e35c5ca046bd3eb8e7825fe"}}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0xfd14, 0x0, 0x1}, {0x8001}, {0xffff, 0x0, 0x1}, {0x7}, {0x7}, {0x8}, {0x3, 0x0, 0x1}, {0x2}, {0x1, 0x0, 0x1}, {0x5}, {0x81, 0x0, 0x1}, {}, {0x2, 0x0, 0x1}, {0xff}, {0x8}, {0x101, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x401}, {0xfff}, {0xff}, {0xa4, 0x0, 0x1}, {0x711, 0x0, 0x1}, {0x8001}, {0x0, 0x0, 0x1}, {0xf8d3}, {0x5}, {0x1, 0x0, 0x1}, {0x5}, {0x6244, 0x0, 0x1}, {0x5}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x12, 0x0, r12}}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff, 0x18, 0x17, r13}}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0x1}, {}, {0x1, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0x8}, {0x922, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x6}, {0x6}, {0x6, 0x0, 0x1}, {0x5}, {0x53a}, {0x4}, {0x6, 0x0, 0x1}, {0x1}, {0x5, 0x0, 0x1}, {0x9}, {0x8652, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0xfc4d}, {0xb8791, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8001}, {0x8001}, {0x9}, {0xe, 0x0, 0x1}, {0x5ab}, {0x5}]}]}, 0x160}}, 0x20000110) fsetxattr$security_capability(r6, &(0x7f0000003c00), &(0x7f0000003c40)=@v2={0x2000000, [{0x9, 0x7ff}, {0x5, 0x200}]}, 0x14, 0x3) getgroups(0x2, &(0x7f0000003c80)=[r9, r11]) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000003cc0)={r3, 0x3}, &(0x7f0000003d00)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000003d40)={0x2, 'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) 6.30505072s ago: executing program 2 (id=2075): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff02000000000000e9ffffff00000001e00000022f11717df824bfa9000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe800000000000000000000000000022e0000001000000000000000000ad0000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b4000000000000ffffffffffffffff010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) close(0x3) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x80) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, 0x0) 6.071081494s ago: executing program 3 (id=2076): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = fsopen(&(0x7f0000000100)='dax\x00', 0x0) r3 = fsmount(r2, 0x0, 0x90) set_mempolicy(0x1, &(0x7f0000001880)=0x8, 0xbee) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "8422eb8f6ce21c9b", "93a706e5a69ade8010e3c76ff96b4a34", 'p:.h', "2f2af80d32287662"}, 0x28) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x6, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000009, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]}) (async) syz_usb_connect(0x6, 0x24, 0x0, 0x0) (async) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 5.819144799s ago: executing program 3 (id=2077): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2, 0x3a, 'M', 0x3a, '\xcb\x94-\xa8|55a', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x32) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400e7e000000dc15a31316e1fccdd399ca14b7450405000b10b97ab6208364e2c700b2442e33051c4df89f0eebb740e58d698e72dcf30da1c9d3d76f27e1b0be6100000000005f5007c3fd182eb5e03f296c5b20fd9694c307d300c2cab12c5e54928bdee62396b4eec2f316ae67fdeeafff79e29b83f3523ead9c8bd326000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.20065465s ago: executing program 0 (id=2078): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x800, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x25, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80d, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x2], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) 5.072292484s ago: executing program 0 (id=2079): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=""/4088, 0xff8}], 0x1}}], 0x1, 0x122a2, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 4.653856935s ago: executing program 2 (id=2080): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f8b221697e7818049006ba7a7f", 0x13}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000000000000000004000", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 4.444816155s ago: executing program 2 (id=2081): socket(0x3e, 0x2, 0xfffffffc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{&(0x7f0000000240)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f0000000480)=""/50, 0x32}, {&(0x7f0000001580)=""/197, 0xc4}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000740)=""/247, 0xf7}, {&(0x7f0000000840)=""/34, 0x22}], 0x8, &(0x7f0000000900)=""/109, 0x6d}, 0x2}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @remote}}, 0xfffffffffffffc86, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/50, 0x32}, {&(0x7f0000000b00)=""/115, 0xfffffffffffffe45}], 0x3, &(0x7f0000000bc0)=""/57, 0x43}, 0xce}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000c40)=""/179, 0xb3}, {&(0x7f0000000d00)=""/121, 0x79}, {&(0x7f0000000d80)=""/141, 0x8d}, {&(0x7f00000014c0)=""/172, 0xab}, {&(0x7f0000000f00)=""/175, 0xaf}, {&(0x7f0000000fc0)=""/117, 0x75}, {&(0x7f0000001040)=""/237, 0xed}, {&(0x7f0000001140)=""/241, 0xf1}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000000000)=""/10, 0xa}], 0xa, &(0x7f0000001380)=""/88, 0x58}, 0xa7}], 0x3, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xe) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x642640, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x420000, 0x100) r4 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000) memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x06\x00\x00\x00\x00\x00\x00\x00\x85\bg\xe2\xb6\xd6\x8cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xe1\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\x03\xf9\x98\xbb}\xeb\x86P=\xe51\x9d\x9a\xa3\x1b\xf9\xe9\x1d#\xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$ tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0x1e, @inherit={0x0, 0x0}, @name="002986c14bf7599f8c296aca1f6d4312a2c8678ed9645f39a437ab51d171387b8c29544a331d62c4a60a5823c2b16ae85c6781f618c3b3519e5605f01b77888a9b5add44bc448345ed3f64c53abffdf61f49806788ea5e751973a1f4bc073ad272b9fb005528a84bcb385c9f3aa558e106bd524e8862013bf8a862a4a504c9de0529048be3aa3ba552b33235501a89f979f5f284b2e4bc595a0b252253665fb22e02e888c9f67add92f49a9d3de152a40e1ff0c025ab0044ee6055d9f991f98d04845519ce346362aad219d25df10888ff27419b2079b27ce38ef00b95077d3bb8baa9bd6165faf8fc29e336f70f506927ddddc64f991b24a8a32b6e697d102cbd31d28d6da35377d0edee1fdb69541ddf63e6b729df308639c546fe7de7a9d016c897b56b0bb14e1e4a4017231198f3122fe17f3e7923ec33fe6777460c50d2c02618263f611d28498986cc2e2b5166bfa9950fec28761f54c242a02efec870a12df6c21221a95a745c4e48defa0a39b4d73549de867b44ba3280427a83f49bad189d78fdca02ad5fd772dc34d4006281bdb9988e2ffa26f2041dd6e1a6c677fc50a670ce9cf5f14b8c13630e5663698823505a98458359bfa88d90ae391458a87ee72cbbe71bdc9360b0fc57f61713ae67833da5a4b6f7d09fe0f53d07995e99a69fa0f9a4383ad30c8306ea4bca31eab0957b6ea92ea02fc2259fa0937054908cb80406b50489a108e1b75ea14d47c24d73000000000000000483e280df3f84c1c42000631648a5b7c99e330a15586b361a1a502b7a2b503bec56a6690808bceb6a7216bf287ee916dcaf284bdb831de7bf7e89050683eb8463c2b16f165290456ae10745c80348be8d620e71116a3808bbcf27715a4e921fae1fb91775966208226966414b1f4e135643f4e46b51022f0eb63bb01ba00365c78d53bd5e9bbc5f0175dd1174e86656ca5795de9ce6c17cb72f5a2c120f64ec80d06b4828d5228324a58340914f911c48c736061a1b15fbcd6f8ebd231485f605560120d41d3cb3f267e8e14a09ab02d4300fc70113548b2a5185b6fe9245f92fd76c4afdf834d2385e72e886c195ca5f6280f3387f74814cdeb006faf2eaf6e2da48582f51cc1766410effed5e9ae5ff4974eb08df66c65ce59ab3dffad696c35fa6b045ce1314f37c804b2376553372e466f7d32fe69ab1b90c32e3d0221584462c387898b4f0742d21dd7dd670daa43f2c068cf6b576fd94c137cc01c88fbd0b49b8422833d0be27dbd8c07898d237d131510a87c5448761e2892d7e1eb58a9c5044b62b781b564d1759d9652a8a32f6b9a5231e44526fed9e5330c8aba9f7f8565d4e3e13b83dc9500486866bb2355fca7582ddad58cc022bfc854c81125ec24a2ba1c833b273ca3a906a82ebf7d23a2a028256daf54b8096e3073c0dc8d9b5d7d63ffd63fafcf9ee7ba7491f585d3d2dcfb3861c842cd1a4f541466a225b0d9b954be1fd5bad08c6cbe38d539bf33ad15f6bddb84f540ce6c5f7befd7ada3d510e4aa28506675689d2edb306599caeaa70e22f7ea9906125afeb53387ad31278d74b63bb9e9fb76f10bc85d903cde2e77a803ae628ca11b8d5a448035c5d87bf0c4511b87a97fef7d77f72b8922ef0155e11ad5e4eea0f53550410b48529de3a395ac77330b69e200a081794fb65b3e82bc8d4123899df531ddcc4ea8d4de365d0f7b364af33763366577987380b066a68c88747cf88673bab5219a619d2ee76400ce5e6cfc13343761cd45fd75553a7b67da4f84169af7b56316ee8b38525f7899d3eb6db6b28920acb6e93d8206e9473bc007a1a2a5625018a0b369f29c88656a5d6094029b0113644d362b2e99213b6b061dccacb3cc5e9e0688359f1f55aa67da790abb63ced30cea2c0d2abea0552219e2eb058ec0c876532ac353108f8a8691602b607024aac70801d98dd5406b156bfe5087c4fbe6903a67bbcde153a17cb4c514c6ad911a6333f2e03a6d272c8ebacd8155f31b1d7d155087cf1d4a15b2c24c252ca6b5a76cb5944276a8fd50e68406225e9c2d104db2b2c194191eb60c47cc58765bbbcd0f44d9f8ecd79e9f2c6ad2a6243f4ae00682008444455bfac90fb5705f7633ffc23ebebdeeb034081c8d2296e31a4bd70f43a8aea74a5975ee2f5bf4ef9800954bb5bf81aa93fcb1aa7e29125c9097cc3d376178bd176cce3b2d0b9bae47a5aac88f6be6bfff33e0933522ed64254ac9782c6e6c17434bdb57fe414509405cd302ccc6056931bf7ddfc579ddc2c4c1fcb03dc6a998882c0445084992aa94768b4d1848b09735ed8ac2e869b2f87acf88bf3dba379a579ea5292541a9211421ba1f657416ef6af75a6f5849ba659509e086431b90941f7e0bd6b70b3406be9049e8bd8afa52a9c45838babce52b3f01a46ca04d4183ae267207224df01dd59d28d89b52ef9fb290b6b9aaaa58f991e916119f8aafc158c852f047f28c1603bcc2d7221b2363559b4d05aef4a42154ab8440dd87014bc263c9b493b02df0c52afc6878935ef9d5cd15f32f52d592ee29ee618a6e946fe0f923bde946af99f41211f26adc52e0f905a75344aee1922f00985cbc86be29d3c141cea3a5977257d000f5bfe9e547fe67b8aa4951cb3330805bf57eb6300b48a081cf67d45ca9fc480cf48f2c00824b5d2fab57d8238c7c4df99e23c5f558d8c0bb92f9ab36f1ee6ced62cfb0a7ab032645155f24d862f52e247816daa250365f34649025b99210b2c787169d1370de0ae2244ae9a8d61d654fe9c8bc7e89cb16c4094bee0572d5c509bc2d63305720d0f3640d7b8ecf70f69aac4c5a147fc50cf885571dbdd9488f312139d837b9da40bd7b4e0f51c4114ad6fc1849d51ffdaa49134a5dcab60eca1de568bf1b4a2778089bc95dcf87c9214eab29333b734b6bfe702d670f96fd5b94afdd9f4459ff37851e86e90c1fe96a4611b4998b10dfa939af7fc1d17875394c6f6bf03f5cd12e2ac7acd3019c5b4fe0963175a976e292547a54c77add8fd1282822a617a8c8501d4ffa84dfe85833fdb7bd0e87e7423a91003e8d0b00e09198b306503451702c1c96fae7ec8bfb3eb9b0798c76bd0444e5b2e524aea635c9f023cee4915bf8ce7b48a9987f5c3cb53952c43ee5d41813f86cf733535bce9824c898f666a61422a56922612fae93e9e6c3cb92d757468bc84dc365b5492506008b229f65b503d48b045c0e28e1d0071f7b09f753320c740505b3f8cc36ef505c7b68b88726a39bd0cb2a6cabbac3d45746be0401fad9ea18cf5573f818715b0a64ccc8bdeb44a434516065598bad01186776ffaa77cd54c2c21425eda0314e15ca5292209c5c920d035413720f794a6448d7d4939e46b6eb30badc25d72f3979def7cbd43de6c3835097459097275fa8256be85109d1ec1df696aa1ed3fa7a3658841fff80ece99dd5bf201f2a1188fe5549c48a1822b1eac03c925a446c0c2479aa6ec47514ccef2f04a057ef3681bf6ed9feffd9fc8a8dd32d06426b9439a9b88ec4b1213137cf40451abfcfa9b836589e9e5f3f76cfb5af1469531e0b815cb674633dea8d8ba12772abc8ba67597e1755d4ffac0448492b2a159039a4a78e36182d68314ceea85fff5cdee99c3f3a1537d732424d77a51ca92fdf717fdd8084a9fe5b22dbdd4e263ad433691f1c0756bed13872f84d398b6f2e3e921aee22523fbeb984b87ac010d165f9fefb183a2e0437a21e36a5b557511ec980c9972fccf7e31ebb165f52b48e8a53ff087de4a302334f2fa9d543b0b7a6dc8df2bbff85b4b042403156faa4ef92ca084e308bfae20f20cf3a26891d9790a894635de85a5589116b364d7987933e2eb5944ca265ef53d5b707793743f68f7de7b05eb9d204f197c83a19da8857fcee9aaf81e156c716bbf35bc247fddd402b9061427b4cb8c2ffcf5b9356b09700e55e4cc541c632fb10422f633e864c1151fe74577d3d0be720f86a7f90f2b3a971cceeddfa5264fe018055355b9f8342b89d81c0f7d31b9e8e736b66915c17814591be941b118be01d587f1f9739f624864c577341958988000ea93a693c4992e0b5f8cd7074199dacd94f4783a2e69b6e55ba1760dfb40cd99d6520ddddd0f9edf8952f1ea82876a2d55a12e2b16bb01e93d3de36b4161132898f1b1376856f380fa504191edacd330b46540aee8d129b8d614739ed21199011dec796b03ee9276812217e3453b9155def1e1b9a21c381bc8a9ad9de898726a537687425ca55fb69a45810612266c0d904e5da7576c697a8dcf997f72dec7a3d195f97c51132db128136539342f155516a713eec350760350f1e92433693f0988033c6573c0bc12d72f842bdf90615060698967927161f32b8148590aa33026255b81986617addf4162a91f530e0d6ea04c81d15cf556bd31d5fcb8dcd44aa84a1fd26ed0ef5c091c2a09e7bab19c1b4a627607159b1d42da4a11d6fd0e8773908796ccb7a18ddabcd5f341a0f938e597af5a587dc3c2cb9c5e345598c6befb1e151699192a43306d10d59a5d254b34d67a17d53253ee3e07a6514ea74c4cc3e1380821f263f20d223169e8b0bfa9a69a8fe949ea34d943db774d5fccea7b81ddbd3b11ddd70e32b91de4b81755615295126ee38d61ca63cc0af0cf003ec6f0f1990e0cc749785d1cf66073f87c670ed9b01b9fd4e229e11500acde6d171a6e99e0cd72e400ace77be465298d2b47bb0e73a15db48c3c40b372d70aabad7a0b497e7ff5d8fd3197af4f00252e0d5d363a4c104c259613a39877cdb3906264f23af469e5000ef978b365be607af2f431eec2f2a32c43fee3b0a25a352151ce6b082a089d56f6b322963003090b28985f90a004c7859f76f429eae26b1e2de06e9b00c41bd0921cdeb5dd104d149a9c45ed1788b6fb628e09a8a2292d33de2635c77c0ddb6f615f4ecadeae92e8821ae0b75972368aa8484eaf993f64297d587ff9a86dc75988136396cd61d0e73617d0220be852cddfc04c6f9d88261a2b7efa44474ad63980e1c4b30d9bdd7cd46e7b563247f6ddf1024f718f943284927d85fb531c1e8d6658ab032ce4f11aff6df95f7b9a708e1c1c749028814dc200959b3196b5fe031443d685347be93117bb0a5aa726d6624277be6649cf7304f5b02fcc34c9616053483c00080000e2a5b77a994ee32c3577124a699d8af1cab9fb7c352a286663e956d61235cd39c583a22ed492919a0eb8eadfa3de8a0ead3c4fbebb11396bde337fb856d30935792b9b80bb1dd22011264f4eb3b196ed225e43e664c08659a5586b3753b18ae4dfcff970983e8423778da33998dbb5aba16ff6ab684d2529d818820423a2dadf5d6162f02e5300ea8a1b53b0c2cb22fa97a53236e639a5017c110f2e5d4537e64b656055755b1d7d2a27bfe86b055c432ac8974fb35e543a5ad0ff2581da7845f12e381815e49c075267aa3422518cb0dc96804bb79b8c77479d4fd69175e199a323532aaea079435fcd7710e175047b28f808ada368b3ed20da9f94b5c7bcc8ef6c0389e0e7d39d448a345d3d63dc1e1afd14505a66c1c72de25e8d2ecec6171c127409efd687dcf29f29094ce93f78e73f8eebad53886a9840509a2ea404b81c0a73890acc5e5e02f2d6182f24869997dd1ed6752402d22e0a9f0200"}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use'], 0x2a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}], 0x1, 0xc0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) 4.037501793s ago: executing program 0 (id=2083): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r2, 0x0, 0x0, 0x102, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x80) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x6, 0xf4, &(0x7f00000003c0)=ANY=[], 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') preadv(r9, &(0x7f0000000100)=[{&(0x7f0000000140)=""/195, 0xc3}], 0x1, 0x36, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x68, 0x4, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, r0, 0x8}, 0x20) 3.754181786s ago: executing program 1 (id=2085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc420000000000000000000000000000000000000000000020000000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff0000000000000000ffffffffffffffffc73b0000000000000000000000000000000000800000000000000000000000000000000000000000ffffffff2dbd700000000000020004004c000000000000001c001700000000002abd700000000000000000000000000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d001400686d61632873686132353629"], 0x1e4}}, 0x44840) 3.707193376s ago: executing program 1 (id=2086): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=""/4088, 0xff8}], 0x1}}], 0x1, 0x122a2, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc0003) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 3.621237441s ago: executing program 3 (id=2087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a310000000008000a400000000328000480080002400000001208000140000000011400030067726574617030"], 0xa4}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0xc, [@restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @datasec={0x8, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x3, 0xffffe000}, {0x5, 0x6bd0}, {0x5, 0xffffff01, 0xd899}, {0x5, 0xdef, 0xec2}, {0x3, 0x5324, 0xfffffff8}, {0x4, 0x100, 0x5}, {0x3, 0x7, 0x88e}], "9f0b9e"}, @restrict={0xf}, @fwd={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x7}}, @enum={0xb, 0x3, 0x0, 0x6, 0x4, [{0x4, 0x538}, {0xd, 0x9}, {0xf, 0x2}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x5f, 0x0, 0x0, 0x2e, 0x30, 0x61]}}, &(0x7f0000000680)=""/80, 0xf4, 0x50, 0x0, 0x76, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) unshare(0x20000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0), 0x8) fcntl$addseals(r4, 0x409, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x50) 3.60202575s ago: executing program 2 (id=2088): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x1, 0x81, 0xfffff034}, {0x5, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r4, 0x14e9}, {r0, 0x12c}, {r3}, {r3, 0xc}], 0x4, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)={[0xb3]}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4000009d, 0xbc9faef6, 0xc2}]}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r10, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000003c0)=0x3) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0xd01, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r12, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008104}, 0x20004004) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e29, @local}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) 3.412195319s ago: executing program 3 (id=2089): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x7, 0x2e, 0x0, &(0x7f0000000200)="24c2afc3a2e0527bea330054165096fe838bfab80e83d34f30beffcc4de894b90e9593746ac3b86e64f70cf614a7", 0x0, 0xffaf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="d31c9ab500f0000f013f660f542a6766c7442400000001006766c7442402c90000006766c744240600000000670f011c24f30f090f2364ba610066ed2e0f01c266b80500000066b929d580800f01d9", 0x4f}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) 3.22897744s ago: executing program 4 (id=2090): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@broadcast, @multicast1, 0xffffffff, 0xff, 0x10, 0xa, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x7fff, 0xbaab, 0x4, 0xa9, 0x378, 0xd808, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x200}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x1, 0x0, 0x1000000, 0x7}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x4, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x88be, 0x8}}}}}}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0x5, 0xa, 0x2, 0x0, 0x81}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000000)=0xe0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) dup(r4) shutdown(r4, 0x1) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000680)={0x20, 0x16, 0x1, 'A'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r5], 0x8e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write(r7, &(0x7f0000000240)="94", 0x1) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r6, r10, 0x8f5, 0x0) write(r8, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000600)="cc9f4d42ef21030fc9ae7ef1ffffffff00d0b5", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.169975729s ago: executing program 0 (id=2091): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x26b6900d}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xf6ba, 0x2, 0xffffffff, 0x0, 0x3, 0x3}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000240)={0x79, 0x0, 0x20c}) r10 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x55, 0x1, 0xc0}}]}}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x50, 0x9, 0x5, 0x2, 0xff, 0x10}, 0x54, &(0x7f0000000840)={0x5, 0xf, 0x54, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x7fffff8, 0xf, 0x794, [0xc000, 0x0, 0xff3ff0, 0xff00ff]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2ff2c10843b47fd0658a94bcf5f4d207"}, @wireless={0xb, 0x10, 0x1, 0xd0b90d7eeb053762, 0x81, 0xb1, 0x4, 0xff31, 0xb8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xd4, 0x4, 0x101}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1c01}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x400a}}, {0x101, &(0x7f0000000d40)=@string={0x101, 0x3, "34af28d602cbc399d3609afcc1efac9ab0645f49bb84f2ae31dfbbeac642ff29104275e76568f71f41cc2c175089f215b32f45c807b4af887496f145ea7c7cb145eaa3a5a35ef92bb5ffd5e717cc3d1c80b651b7028e2be4ca8674cfc2a5de7105b34778fe83fb03f04a5d9a2eb3bee17967fad4db48aa8a012b9c362c95d0673e8cceeefc12775207d15acf9cc34469c15f50683289b1495dd86187a3f02f912b368a3c7c0d8c9fc4304a88c61e0990b7995c1515649c9bc6519da74d5ce1798f624768906faa0c164c464d5cdeb5aab5ecb0f8ed036f04db1f214384f018d48897a3ae71b0b3ed71d1e92fd269c96bad61c30d2f2996aeb216095cb8f778"}}, {0xf, &(0x7f0000000e80)=@string={0xf, 0x3, "fdc5b350371cd033425d613a36"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4}}]}) syz_usb_control_io$printer(r10, &(0x7f0000001040)={0x14, &(0x7f0000000f80)={0x20, 0x23, 0x5b, {0x5b, 0xa, "5486a64570f70493c54cb29bebe23d56b2709f3390da7afac5a2fe26b3e06d1a2f6f835cb5a644fee32b02fdbe01c2063d1ad7e691a2812287159938b47e3270c41cf088d6c1abeb5fb1a0641ad9f335018bafa667e2f6e9c7"}}, &(0x7f0000001000)={0x0, 0x3, 0x37, @string={0x37, 0x3, "abfe4f76b8892c563ee11d59c8b0b3dfef215d5e9961c72bbcb50910d4cbba2f620b32e938e130391d44e8cff3f06d1ae3a593f670"}}}, &(0x7f00000013c0)={0x34, &(0x7f0000001080)={0x0, 0x9, 0xf4, "d116f8cad1825c532a54f303fa844a5590933339487204bbe9366f572ce0e51a5637ef302531326d92fe4cee6c3815bf07cacbd32c68edd4a798bc2cb5a4788cff8f21436f0bfd2fbfce2d1cd52e7dbb2d2250686e652d40bb5ead91fb04f507dce5ac8e290333e5bbb85617ff2c71ebbaba3835f32220f80bebc496ac09a341c44b36c2ab6628fe8d6acb8a2b2ac4fc50c8f7dafd28e502b9e760b12594038ecad6ed37808d6371cf22c5fd97fe3ab763734dd044c088eeeb89c1e2d9013e5b2c20cc7cd27e3280dbdcd50e98ec7a60aed8ea4f7a7141bb5dcf9fb25358824d1b88139837ae4388f326918a1c7231f03616b4bf"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0xe6}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x1e}, &(0x7f0000001200)={0x20, 0x0, 0xff, {0xfd, "cd538e89954a3611315b18236607aff123919380d2e8815dcde29a0494170fc70052f8cfa795126ecca095c792acd5239d23298379a8b4224ba78efb1eb52e0bde38505588cbbadd299a5672e016595a10395d8f633dbfec653a389caebbc20cf565149941f3f2f976e1c0ccaf6c8823fd8f41eebaae9d219ea72c0a1f23f589c276982659ba38cdd872fe4ccc081e20762a41c8c428f0784d88e4c80d3f86473cefeeacb026fed16e773acadca58001a636f3c4b8d29d8e3e09b9bdc749544d3b9d24adc41757f0cbcb545d564c78f822da0388ef0506aad032349ff5bf7025e75fcc5db3165fbf67f26ea43bb9d1ca9e8c5f45094fe2f60c279f8a80"}}, &(0x7f0000001340)={0x20, 0x1, 0x1, 0x10}, &(0x7f0000001380)={0x20, 0x0, 0x1}}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @msi={0x4, 0x5, 0x8001, 0x4}}]}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RSTAT(r11, &(0x7f0000001400)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x1, 0x800, {0x20, 0x0, 0x7}, 0x1000000, 0x2, 0x7000000, 0x1, 0x7, 'filter\x00', 0x8, 'NFQUEUE\x00', 0x0, '', 0xf, 'batadv_slave_0\x00'}}, 0x58) r12 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f00000003c0)={"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"}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 3.048512166s ago: executing program 3 (id=2092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x80002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) r5 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffffffffffffff, 0x8, 0x10000, 0x7, 0x4, 0xa, 0x11, 0x4, 0x8000000000000000, 0x1, 0x0, 0x3, 0x5, 0x3, 0xffffffffffffffff], 0x0, 0x110940}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x4040) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004", @ANYRESDEC=r0, @ANYRES16=r5], 0xa4}, 0x1, 0x0, 0x0, 0x4041}, 0x800) 2.602281697s ago: executing program 1 (id=2093): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=""/4088, 0xff8}], 0x1}}], 0x1, 0x122a2, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 2.104673626s ago: executing program 2 (id=2094): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x3a) syz_usb_connect(0x0, 0x56, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500000001000000ff00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000400100000004000000030000008b8c16e77e60ad9f3b963a6fed98184bc8b656e357d1eb25c256eb5cf56d3b9a12342f1d1488893ee4c7f7cb412fe74d06adf75e8be6b61b75ca8c26c1e949c2"], 0x80}}, 0x4004000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001a0001000000000000cc35b480"], 0x1c}}, 0x8010) sendto$packet(r0, 0x0, 0x6c20, 0x4004000, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.047877191s ago: executing program 0 (id=2095): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x9}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x1, 0x3, 0x6}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="400f01da641ea3dcf148b1f400c9c877c3b919957a4e95c47a41222f3f8ed3ca8751f7f79efaf4e5f1533124786646a9c0e7e32797e099300ae2119267187478a1e067456969dc9c4d464958317d5e92936b985c2baafe72f29cc5035501d1a83c81dcaf6255957b2f3feee0ecd8bed00547ef453209824425f69e82bfff62eb4a11536f97feff9fd9122d92a1df471e7e2d19ebc89ffca874f74d19f1e0e670d1880c26b90dd5fda6f208df0daa42b5f551de988c1d8db6ba1dd3b375c5951f71fe0d6552b91bf3d7496ad1aa2f7ff985371ef1df60494fbfab132ee670231812bf2a16ee2461e10d5c15a6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='veno', 0x4) sendto$inet6(r3, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r3, 0x1) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x20, 0x16}, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) 1.669276772s ago: executing program 1 (id=2096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4010000100001000000000000000000fc4200000000000000000000000000000000000000000000001d0000000000000000ecdf000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1e4}}, 0x44840) 1.593074988s ago: executing program 1 (id=2097): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) io_setup(0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000928000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}]}, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x72) socket(0x2, 0x80805, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r4, 0x8010550e, &(0x7f0000000140)={0x0, 0x0}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, 0x0, 0xfdef) 1.398844556s ago: executing program 0 (id=2098): r0 = msgget$private(0x0, 0x3a9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f0000002500)={0xa14000, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000002c0)=0x0, {0x1c}, &(0x7f0000002380)=""/117, 0x75, &(0x7f0000002400)=""/164, &(0x7f00000024c0)=[0x0], 0x1}, 0x58) r8 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002580)={{0x0, r6, r5, r6, 0xee01, 0x20, 0x6}, 0x7a6, 0x7, 0xb26, 0x9, r7, r8, 0x7}) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, r6, &(0x7f0000000000)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000440)={0xa0, 0x0, r3, {{0x4, 0x3, 0x4, 0x7fffffff, 0x0, 0x6, {0x1, 0x3, 0x5, 0x0, 0xebb, 0x4, 0xf0, 0xd183, 0x3, 0x1000, 0x1, r6, r9, 0xd, 0x5}}, {0x0, 0x5}}}, 0xa0) ppoll(&(0x7f0000000100)=[{r2, 0x8}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003440), 0x0, 0x12052, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xa539, 0x0, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x2, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0xa, 0xb0, 0x7e}, {0x9, 0x5, 0xc, 0x2, 0x0, 0x4, 0x5, 0x7}, {0x9, 0x5, 0x0, 0x3, 0x200, 0xa, 0x1, 0x8}}}}}}]}}, 0x0) 1.297680165s ago: executing program 3 (id=2099): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x2416, 0x0, 0x1, &(0x7f0000000040)="b6"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) msgget$private(0x0, 0x3ac) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60f7d8ff00403c0020010100000000000000000000000000ff0200000000000000000000000000010004000000000000c9"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f0000000180)={0x20, 0x21, 0x57, {0x57, 0x25, "3d5f601c9077e29f105d61308b1004445e3babad03494778baedcb30abe882203a06bc126a4f28ec917df525ba6b693491e2eb9de05e3a5a71029a67b777707d7b8b2ca413e813ee49729b829c4efcd0a398e7dbbe"}}, &(0x7f0000000280)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "2fa567601868a0907f6660442b4a8e135bed22e76c32e377ffd86fd3308d55e214649e5bab360fd7b2a29f991267ddb283e67f456831086b8f1b7c0978329ecac718e232ef3b245ac1477efa4eb6c8ddbc1afee31e1c201e186a19cc4aa1703e096841d2d5a7e9afb06ff4812218ab6d635277186f3654718d340ab03fcba5630e930ffd6a1153b5aa5add309223a6a4e774fa2f213f3e6048e38b9d7aa17b50cd736df33699"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x20, 0x15, 0x6f, "4606d39584b267526ba01fce2521c5bd766d2255df570064ed20a784b175c595ccaaa3f0431c1c60015e87e5c6bc728571a07b7cfa5af16322de621adbecb4a06b1bd67f4cf3d848228d401bb8fc8ba9851acd173b359ff6336d34b9cc315fdcf6ed82cf5844a50b129528aa226393"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000480)={0x20, 0x81, 0x2, "a2dc"}, &(0x7f00000004c0)={0x20, 0x82, 0x3, "4eb569"}, &(0x7f0000000500)={0x20, 0x83, 0x1, "99"}, &(0x7f0000000540)={0x20, 0x84, 0x3, "f7cb7f"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "f51c66"}}) 670.275205ms ago: executing program 1 (id=2100): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000580)=0x7, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x7, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x9, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 524.666748ms ago: executing program 2 (id=2101): socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000018030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64], 0x0) 176.684437ms ago: executing program 4 (id=2102): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x4, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bf, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x7fff, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) write$tun(r0, &(0x7f0000000880)={@val={0x0, 0x88a8}, @void, @llc={@snap={0xaa, 0x0, "b0", "0ccff0", 0x1c, "f2ff31e2e803eb"}}}, 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x38, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="2ae0d5b3974e"}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, {0xc, 0x4, @broadcast}]}]}}}]}, 0x68}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) 0s ago: executing program 4 (id=2103): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r3, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=""/4088, 0xff8}], 0x1}}], 0x1, 0x122a2, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc0003) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 8, error -71 [ 420.190409][ T5825] usb usb3-port1: unable to enumerate USB device [ 420.283039][T11971] loop2: detected capacity change from 0 to 7 [ 420.290855][T11971] Dev loop2: unable to read RDB block 7 [ 420.296505][T11971] loop2: unable to read partition table [ 420.303176][T11971] loop2: partition table beyond EOD, truncated [ 420.312321][T11971] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 420.333870][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.605825][T11978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1674'. [ 421.202389][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.531666][T11983] kvm: kvm [11982]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff9e00007008 [ 421.542327][T11983] kvm: kvm [11982]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 421.571105][T11983] kvm: kvm [11982]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xfff000007100 [ 421.584157][T11983] kvm: kvm [11982]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 421.919223][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 422.054549][T12002] loop2: detected capacity change from 0 to 7 [ 422.070825][T12002] Dev loop2: unable to read RDB block 7 [ 422.086753][T12002] loop2: unable to read partition table [ 422.099951][ T5825] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 422.100234][T12002] loop2: partition table beyond EOD, truncated [ 422.129933][T12002] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 422.255635][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.285684][ T5825] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 422.295239][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.313816][ T5825] usb 4-1: Product: syz [ 422.328367][ T5825] usb 4-1: Manufacturer: syz [ 422.338689][ T5825] usb 4-1: SerialNumber: syz [ 422.353304][ T5825] usb 4-1: config 0 descriptor?? [ 422.374866][ T5825] ch341 4-1:0.0: ch341-uart converter detected [ 422.427627][T12007] netlink: 133536 bytes leftover after parsing attributes in process `syz.4.1685'. [ 422.550825][ T93] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 422.560935][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.570997][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.723619][ T93] usb 3-1: device descriptor read/64, error -71 [ 422.816653][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.825326][T12008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.825672][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.861975][ T5190] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 422.911894][T12008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.969987][ T93] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 423.015696][ T5825] usb 4-1: failed to send control message: -71 [ 423.022078][ T5825] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 423.035952][ T5825] usb 4-1: USB disconnect, device number 95 [ 423.046776][ T5825] ch341 4-1:0.0: device disconnected [ 423.089961][ T5190] usb 5-1: Using ep0 maxpacket: 8 [ 423.097562][ T5190] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.108655][ T5190] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.116442][ T93] usb 3-1: device descriptor read/64, error -71 [ 423.139399][ T5190] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.160633][ T5190] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.194186][ T5190] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.214838][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.290531][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.300383][ T93] usb usb3-port1: attempt power cycle [ 423.436096][ T5190] usb 5-1: GET_CAPABILITIES returned 0 [ 423.444711][ T5190] usbtmc 5-1:16.0: can't read capabilities [ 423.451196][ T8942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.660059][ T93] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 423.694211][ T93] usb 3-1: device descriptor read/8, error -71 [ 423.724945][ C1] sd 0:0:1:0: [sda] tag#5184 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 423.735465][ C1] sd 0:0:1:0: [sda] tag#5184 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 423.949922][ T93] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 423.970676][ T93] usb 3-1: device descriptor read/8, error -71 [ 424.082863][ T93] usb usb3-port1: unable to enumerate USB device [ 424.332295][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.399081][T11975] Set syz1 is full, maxelem 65536 reached [ 424.777834][T12040] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 425.315845][ T5190] usb 5-1: USB disconnect, device number 106 [ 425.372726][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.381116][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.582311][ T5891] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 425.749904][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 425.757112][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 425.771546][ T5891] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 425.786429][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.792006][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'. [ 425.805593][ T5190] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 425.820781][ T5891] usb 3-1: Product: syz [ 425.825006][ T5891] usb 3-1: Manufacturer: syz [ 425.829794][ T5891] usb 3-1: SerialNumber: syz [ 425.840495][ T5891] usb 3-1: config 0 descriptor?? [ 425.852480][ T5891] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 425.867449][ T5891] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 425.949956][ T93] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 425.961720][ T5190] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 425.971084][ T5190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.011993][ T5190] usb 5-1: config 0 descriptor?? [ 426.099921][ T93] usb 4-1: Using ep0 maxpacket: 8 [ 426.109095][ T93] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 426.118831][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.129773][ T93] usb 4-1: Product: syz [ 426.139019][ T93] usb 4-1: Manufacturer: syz [ 426.147555][ T93] usb 4-1: SerialNumber: syz [ 426.364924][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.382744][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.404964][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.416455][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.425687][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.441308][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.453346][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.469994][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.484222][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.500019][ T5891] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 426.501871][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.520438][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.545354][ T5190] usb 5-1: Cannot read MAC address [ 426.590968][ T5190] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 426.627775][ T93] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 426.634608][ T5190] usb 5-1: USB disconnect, device number 107 [ 426.668645][ T93] usb 4-1: clock source 0 is not valid, cannot use [ 426.699235][ T93] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 426.727395][ T93] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 426.741300][ T93] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 426.753267][ T93] usb 4-1: clock source 0 is not valid, cannot use [ 426.762575][ T93] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 426.770173][ T93] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 426.811725][ T93] usb 4-1: USB disconnect, device number 96 [ 426.848142][T12067] binder: 12063:12067 ioctl 4018620d 0 returned -22 [ 426.894826][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.944006][ T5891] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 426.948913][ C1] sd 0:0:1:0: [sda] tag#5189 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 426.953154][ T5891] em28xx 3-1:0.0: board has no eeprom [ 426.962733][ C1] sd 0:0:1:0: [sda] tag#5189 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 427.040722][ T5190] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 427.200083][ T5190] usb 5-1: Using ep0 maxpacket: 32 [ 427.209224][ T5190] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.217964][ T5190] usb 5-1: config 0 has no interface number 0 [ 427.226546][ T5190] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.235777][ T5190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.243917][ T5190] usb 5-1: Product: syz [ 427.248885][ T5190] usb 5-1: Manufacturer: syz [ 427.253582][ T5190] usb 5-1: SerialNumber: syz [ 427.260553][ T5190] usb 5-1: config 0 descriptor?? [ 427.268093][ T5190] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 427.279934][ T93] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 427.319941][ T5891] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 427.327852][ T5891] em28xx 3-1:0.0: dvb set to bulk mode. [ 427.333930][ T5912] em28xx 3-1:0.0: Binding DVB extension [ 427.429916][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 427.439730][ T93] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 427.448972][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.457269][ T93] usb 4-1: Product: syz [ 427.460465][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.461605][ T93] usb 4-1: Manufacturer: syz [ 427.474649][ T93] usb 4-1: SerialNumber: syz [ 427.484456][ T5190] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 427.485717][ T93] usb 4-1: config 0 descriptor?? [ 427.503156][ T93] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 427.503922][ T5190] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 427.688915][T12062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.705578][T12062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.721290][T12062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 427.776576][T12077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 427.882039][T12082] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 428.110292][T12067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.120441][T12067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.302992][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.310972][ T29] usb 5-1: USB disconnect, device number 108 [ 428.322324][ T29] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.359517][ T29] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.381366][ T29] quatech2 5-1:0.51: device disconnected [ 428.490851][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.491106][T12044] em28xx 3-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 428.960022][ T93] gspca_ov534_9: reg_w failed -110 [ 428.960250][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.039721][ T5912] em28xx 3-1:0.0: Registering input extension [ 429.042916][ T29] usb 3-1: USB disconnect, device number 93 [ 429.055527][ T29] em28xx 3-1:0.0: Disconnecting em28xx [ 429.065376][ T29] em28xx 3-1:0.0: Closing input extension [ 429.119193][ T29] em28xx 3-1:0.0: Freeing device [ 429.250492][ T93] gspca_ov534_9: Unknown sensor 0000 [ 429.250553][ T93] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 429.380140][ T5912] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 429.530025][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 429.530665][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.539625][ T5912] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 429.555948][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 429.563113][ T5912] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 429.572461][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.582422][ T5912] usb 2-1: config 0 descriptor?? [ 429.609980][ T93] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 429.752670][ T10] usb 4-1: USB disconnect, device number 97 [ 429.761670][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 429.773932][ T93] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 429.784657][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 429.799927][ T93] usb 5-1: Product: syz [ 429.806960][ T93] usb 5-1: Manufacturer: syz [ 429.811838][ T93] usb 5-1: SerialNumber: syz [ 429.820519][ T93] usb 5-1: config 0 descriptor?? [ 429.829537][ T93] gspca_main: sq905-2.14.0 probing 2770:9120 [ 430.026027][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.053887][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.062454][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.071332][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.078435][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.085679][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.117852][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.128874][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.139725][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.157315][ T5912] lenovo 0003:17EF:60B5.002A: unknown main item tag 0x0 [ 430.173634][ T5912] lenovo 0003:17EF:60B5.002A: hidraw0: USB HID v10.00 Device [HID 17ef:60b5] on usb-dummy_hcd.1-1/input0 [ 430.226265][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.239590][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.248365][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.258307][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.275729][ T93] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 430.306792][ T93] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 430.316683][T12096] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 430.337433][ T93] usb 5-1: USB disconnect, device number 109 [ 430.353179][ C1] sd 0:0:1:0: [sda] tag#5190 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 430.363651][ C1] sd 0:0:1:0: [sda] tag#5190 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 430.388518][T12096] bond1 (unregistering): Released all slaves [ 430.411544][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.466562][ T5190] usb 2-1: USB disconnect, device number 103 [ 430.570382][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.445004][T12141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.470410][ T93] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 431.499923][ T29] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 431.620660][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.669930][ T93] usb 2-1: Using ep0 maxpacket: 16 [ 431.679691][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 431.689985][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 431.701826][ T29] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 431.712487][ T93] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.726387][ T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.728216][ T29] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 431.745364][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.757816][ T93] usb 2-1: Product: syz [ 431.758376][ T29] usb 5-1: Product: syz [ 431.767727][ T29] usb 5-1: Manufacturer: syz [ 431.767766][ T93] usb 2-1: Manufacturer: syz [ 431.787618][ T29] usb 5-1: SerialNumber: syz [ 431.797590][T12151] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 431.806156][ T93] usb 2-1: SerialNumber: syz [ 431.830639][ T93] usb 2-1: config 0 descriptor?? [ 431.831587][ T29] r8152-cfgselector 5-1: Unknown version 0x0000 [ 431.852254][ T29] r8152-cfgselector 5-1: config 0 descriptor?? [ 431.864839][ T93] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.877136][ T93] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 431.895788][T12151] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.955666][T12154] bond3: (slave geneve2): making interface the new active one [ 431.968474][T12154] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 432.101477][ T29] r8152-cfgselector 5-1: Unknown version 0x70a0 [ 432.111156][ T29] r8152-cfgselector 5-1: bad CDC descriptors [ 432.370467][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 432.370485][ T30] audit: type=1326 audit(1776156869.416:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.760270][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.760385][ T93] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 432.795006][ T30] audit: type=1326 audit(1776156869.446:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.840332][ T30] audit: type=1326 audit(1776156869.446:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.878180][ T30] audit: type=1326 audit(1776156869.446:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.920952][ T30] audit: type=1326 audit(1776156869.446:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.961885][ T30] audit: type=1326 audit(1776156869.446:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 432.988390][ T30] audit: type=1326 audit(1776156869.446:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 433.026135][ T93] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 433.034758][ T93] em28xx 2-1:0.0: board has no eeprom [ 433.044170][ T30] audit: type=1326 audit(1776156869.446:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 433.070479][ T30] audit: type=1326 audit(1776156869.446:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 433.140590][ T30] audit: type=1326 audit(1776156869.446:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.3.1727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c7cf9c819 code=0x7ffc0000 [ 433.409973][ T93] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 433.419887][ T93] em28xx 2-1:0.0: dvb set to bulk mode. [ 433.545405][ T10] em28xx 2-1:0.0: Binding DVB extension [ 433.770391][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.925505][ T93] r8152-cfgselector 5-1: USB disconnect, device number 110 [ 433.994872][ T5921] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 434.261946][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.269940][ T5921] usb 4-1: can't read configurations, error -61 [ 434.402458][ T5921] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 434.410880][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.460004][ T93] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 434.574327][T12130] em28xx 2-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 434.585052][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 434.596238][ T5921] usb 4-1: can't read configurations, error -61 [ 434.602324][ T5891] usb 2-1: USB disconnect, device number 104 [ 434.603371][ T5921] usb usb4-port1: attempt power cycle [ 434.609755][ T5891] em28xx 2-1:0.0: Disconnecting em28xx [ 434.635949][ T10] em28xx 2-1:0.0: Registering input extension [ 434.644076][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 434.657360][ T5891] em28xx 2-1:0.0: Closing input extension [ 434.666628][ T93] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 434.680920][ T93] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 434.692983][ T93] usb 5-1: config 0 has no interface number 0 [ 434.701871][ T93] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x17, changing to 0x7 [ 434.715678][ T5891] em28xx 2-1:0.0: Freeing device [ 434.721124][ T93] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 434.730088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.735825][ T93] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 434.740462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.751583][ T93] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 434.758210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.767348][ T93] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 434.785727][ T93] usb 5-1: Product: syz [ 434.807391][ T93] usb 5-1: Manufacturer: syz [ 434.814758][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.815495][ T93] usb 5-1: config 0 descriptor?? [ 434.949965][ T5921] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 434.966743][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 434.976028][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 435.015692][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 435.025737][ T5921] usb 4-1: can't read configurations, error -61 [ 435.049300][ T5891] usb 5-1: USB disconnect, device number 111 [ 435.160006][ T5921] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 435.187570][ T5921] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 435.198699][ T5921] usb 4-1: can't read configurations, error -61 [ 435.210688][ T5921] usb usb4-port1: unable to enumerate USB device [ 435.284248][ C1] sd 0:0:1:0: [sda] tag#5195 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 435.294776][ C1] sd 0:0:1:0: [sda] tag#5195 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00 [ 435.539054][T12194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1736'. [ 435.604366][T12196] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1737'. [ 435.616024][T12196] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1737'. [ 435.693436][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.956701][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.390032][ T5921] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 436.539946][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 436.553865][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.576691][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.587673][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 436.723513][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.742796][ T5921] usb 2-1: config 0 descriptor?? [ 436.953145][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 436.971174][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.148834][T12225] ipvlan3: entered promiscuous mode [ 437.170013][ T5891] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 437.191310][ T5921] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 437.339955][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 437.349611][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 437.372436][T12205] Option ' ' to dns_resolver key: bad/missing value [ 437.396071][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.407448][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.422031][ T5891] usb 4-1: Product: syz [ 437.428620][ T5891] usb 4-1: Manufacturer: syz [ 437.438469][ T5891] usb 4-1: SerialNumber: syz [ 437.448751][ T5891] usb 4-1: config 0 descriptor?? [ 437.463755][ T5891] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.483260][ T10] usb 2-1: USB disconnect, device number 105 [ 437.516654][ T5891] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 438.056705][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.066030][ T5891] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 438.576104][T12241] hub 9-0:1.0: USB hub found [ 438.582218][T12241] hub 9-0:1.0: 1 port detected [ 438.665449][ T5891] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 438.682552][ T5891] em28xx 4-1:0.0: board has no eeprom [ 439.051837][ T5891] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 439.089968][ T5891] em28xx 4-1:0.0: dvb set to bulk mode. [ 439.112116][ T10] em28xx 4-1:0.0: Binding DVB extension [ 439.135828][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.172751][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.181057][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.190399][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.197988][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.251250][T12221] em28xx 4-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 440.264322][ T93] usb 4-1: USB disconnect, device number 102 [ 440.286626][ T93] em28xx 4-1:0.0: Disconnecting em28xx [ 440.306547][ T10] em28xx 4-1:0.0: Registering input extension [ 440.323650][ T93] em28xx 4-1:0.0: Closing input extension [ 440.376699][ T93] em28xx 4-1:0.0: Freeing device [ 440.472226][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 440.640011][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 440.646892][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 440.657373][ T10] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 440.668976][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 440.679200][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.888732][ T10] usb 5-1: Product: syz [ 440.893538][ T10] usb 5-1: Manufacturer: syz [ 440.910874][T12274] veth3: entered promiscuous mode [ 440.920204][ T10] usb 5-1: SerialNumber: syz [ 441.187232][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.262120][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.310845][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.339065][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.430679][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.452520][ T8944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.481999][ T29] usb 5-1: USB disconnect, device number 112 [ 441.653155][T12291] fuse: Bad value for 'fd' [ 441.663467][T12291] fuse: Bad value for 'fd' [ 441.675662][T12291] fuse: Bad value for 'fd' [ 441.686701][T12291] fuse: Bad value for 'fd' [ 441.697579][T12291] fuse: Bad value for 'fd' [ 441.710202][T12291] fuse: Bad value for 'fd' [ 441.719070][T12291] fuse: Bad value for 'fd' [ 441.731169][T12291] fuse: Bad value for 'fd' [ 441.743979][T12291] fuse: Bad value for 'fd' [ 441.751657][T12291] fuse: Bad value for 'fd' [ 441.764332][T12291] fuse: Bad value for 'fd' [ 441.775722][T12291] fuse: Bad value for 'fd' [ 441.793789][T12291] fuse: Bad value for 'fd' [ 441.807980][T12291] fuse: Bad value for 'fd' [ 441.820362][T12291] fuse: Bad value for 'fd' [ 441.830232][T12291] fuse: Bad value for 'fd' [ 441.835147][T12291] fuse: Bad value for 'fd' [ 441.841285][T12291] fuse: Bad value for 'fd' [ 441.925578][T12291] fuse: Bad value for 'fd' [ 441.959788][T12291] fuse: Bad value for 'fd' [ 441.991071][T12291] fuse: Bad value for 'fd' [ 442.007253][T12291] fuse: Bad value for 'fd' [ 442.035381][T12291] fuse: Bad value for 'fd' [ 442.062155][T12291] fuse: Bad value for 'fd' [ 442.114884][T12291] fuse: Bad value for 'fd' [ 442.119688][T12291] fuse: Bad value for 'fd' [ 442.168754][T12291] fuse: Bad value for 'fd' [ 442.189355][T12291] fuse: Bad value for 'fd' [ 442.224325][T12291] fuse: Bad value for 'fd' [ 442.229143][T12291] fuse: Bad value for 'fd' [ 442.272302][T12291] fuse: Bad value for 'fd' [ 442.277001][T12291] fuse: Bad value for 'fd' [ 442.305507][T12291] fuse: Bad value for 'fd' [ 442.310463][T12291] fuse: Bad value for 'fd' [ 442.315433][T12291] fuse: Bad value for 'fd' [ 442.321079][T12291] fuse: Bad value for 'fd' [ 442.325885][T12291] fuse: Bad value for 'fd' [ 442.333305][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.349617][T12291] fuse: Bad value for 'fd' [ 442.354510][T12291] fuse: Bad value for 'fd' [ 442.359673][T12291] fuse: Bad value for 'fd' [ 442.364658][T12291] fuse: Bad value for 'fd' [ 442.369399][T12291] fuse: Bad value for 'fd' [ 442.375119][T12291] fuse: Bad value for 'fd' [ 442.380209][T12291] fuse: Bad value for 'fd' [ 442.385008][T12291] fuse: Bad value for 'fd' [ 442.389751][T12291] fuse: Bad value for 'fd' [ 442.401004][ T10] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 442.404279][T12291] fuse: Bad value for 'fd' [ 442.428214][T12291] fuse: Bad value for 'fd' [ 442.447656][T12291] fuse: Bad value for 'fd' [ 442.458233][T12291] fuse: Bad value for 'fd' [ 442.468974][T12291] fuse: Bad value for 'fd' [ 442.491968][T12291] fuse: Bad value for 'fd' [ 442.497247][T12291] fuse: Bad value for 'fd' [ 442.503307][T12291] fuse: Bad value for 'fd' [ 442.510392][T12291] fuse: Bad value for 'fd' [ 442.515988][T12291] fuse: Bad value for 'fd' [ 442.521053][T12291] fuse: Bad value for 'fd' [ 442.525706][T12291] fuse: Bad value for 'fd' [ 442.562654][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 442.578473][ T10] usb 5-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.591896][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 442.601517][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 442.721338][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.729561][ T10] usb 5-1: Product: 젭꽜颢钀芃ᗹ憡䝏ᴨ㜝輲흗뀽䃋朾醟쾅뙊魟啙޺梍錛咎鵐轱穎䀻缘鹦볱ᰥ覇ꅛ䃢ᘜ隳꺮⥙䀪猓喋莵蝫흳〃㼻㋤洱齡䇮暮䫘俢鵈ⅸө왠ߍ없 [ 442.749756][ T93] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 442.802240][ T10] usb 5-1: Manufacturer: 죘뮑愌崒歚ܬ傁鑈儳㈘얏踡汙蠟嘙₅ࡨ估ᘕ﬏復諅₤鑔폙姝撘띸뮫ꞷ찰饿庺빟吷鹝汗建ᬶ⮄ﱿ辈瑞欛鈚娮ꦒ䃋䰗鈃ۋ樏靘其兒לּ쵝♠憄茕莚婏楸邇桇㕻ꀥ፩◓煂郇줆꒗ჷⷞ㘔哞〲聭억吠䑅換巟弎仼좽䰏㜏㗢䮕㶷깒䶬榯ﯭ⒦㰜⦗ⷚ籇舨ऌ踡骖竦酊빣ᐝ硦婳 [ 442.940022][ T93] usb 3-1: Using ep0 maxpacket: 16 [ 442.946770][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 443.069224][ T93] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 443.079081][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.087460][ T93] usb 3-1: Product: syz [ 443.093358][ T93] usb 3-1: Manufacturer: syz [ 443.098327][ T93] usb 3-1: SerialNumber: syz [ 443.123757][ T93] usb 3-1: config 0 descriptor?? [ 443.157018][ T93] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 443.198732][ T93] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 443.262145][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.279696][ T10] usbhid 5-1:1.0: can't add hid device: -71 [ 443.286166][ T10] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 443.307534][ T10] usb 5-1: USB disconnect, device number 113 [ 443.401042][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.419105][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.491707][ T29] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 443.649890][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 443.656523][ T29] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 443.664817][ T29] usb 4-1: config 0 has no interface number 0 [ 443.673394][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 443.686006][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.703359][ T29] usb 4-1: Product: syz [ 443.748492][ T29] usb 4-1: Manufacturer: syz [ 443.758671][ T29] usb 4-1: SerialNumber: syz [ 443.817305][ T93] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 443.819036][ T29] usb 4-1: config 0 descriptor?? [ 443.975538][T12327] loop7: detected capacity change from 0 to 7 [ 444.084991][ T29] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 444.103728][ T29] uvcvideo 4-1:0.31: Failed to initialize entity for entity 32774 [ 444.116476][T12073] Dev loop7: unable to read RDB block 7 [ 444.124160][T12073] loop7: unable to read partition table [ 444.125314][T12332] syzkaller0: entered promiscuous mode [ 444.130800][T12073] loop7: partition table beyond EOD, truncated [ 444.139978][ T29] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 444.160772][T12332] syzkaller0: entered allmulticast mode [ 444.243631][ T93] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 444.273021][ T93] em28xx 3-1:0.0: board has no eeprom [ 444.286187][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.304834][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.339626][T12327] Dev loop7: unable to read RDB block 7 [ 444.349546][T12327] loop7: unable to read partition table [ 444.355646][T12327] loop7: partition table beyond EOD, truncated [ 444.368171][T12327] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 444.372501][ T29] usb 4-1: USB disconnect, device number 103 [ 444.500703][ T5190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.644693][ T93] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 444.666680][ T93] em28xx 3-1:0.0: dvb set to bulk mode. [ 444.673692][ T10] em28xx 3-1:0.0: Binding DVB extension [ 445.395732][ T93] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 445.530569][ T93] usb 4-1: device descriptor read/64, error -71 [ 445.530904][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.769996][ T93] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 445.863480][T12309] em28xx 3-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 445.883791][ T29] usb 3-1: USB disconnect, device number 94 [ 445.908749][ T29] em28xx 3-1:0.0: Disconnecting em28xx [ 445.909944][ T93] usb 4-1: device descriptor read/64, error -71 [ 445.930721][ T8945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.944122][ T10] em28xx 3-1:0.0: Registering input extension [ 445.958473][ T29] em28xx 3-1:0.0: Closing input extension [ 446.008790][ T29] em28xx 3-1:0.0: Freeing device [ 446.040196][ T93] usb usb4-port1: attempt power cycle [ 446.380039][ T93] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 446.402925][ T93] usb 4-1: device descriptor read/8, error -71 [ 446.575985][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.640051][ T93] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 446.666520][ T93] usb 4-1: device descriptor read/8, error -71 [ 446.790121][ T93] usb usb4-port1: unable to enumerate USB device [ 446.837167][T12357] x_tables: duplicate underflow at hook 2 [ 446.930256][T12357] xt_CT: No such helper "snmp_trap" [ 447.210365][ T8944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.362355][T12370] fuse: Bad value for 'fd' [ 447.391965][T12371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.438310][T12371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.539913][ T5921] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 447.610633][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.711475][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.739956][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.760252][ T5921] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 447.789960][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.810969][ T5921] usb 5-1: config 0 descriptor?? [ 448.064708][T12390] hub 9-0:1.0: USB hub found [ 448.069965][T12390] hub 9-0:1.0: 1 port detected [ 448.333305][ T5921] usbhid 5-1:0.0: can't add hid device: -71 [ 448.339638][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 448.354680][ T5921] usb 5-1: USB disconnect, device number 114 [ 448.399637][T12392] batman_adv: batadv0: Adding interface: macvtap1 [ 448.420425][T12392] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.469911][T12392] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 448.528293][T12392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.650261][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.978868][T12402] netlink: 'syz.4.1797': attribute type 13 has an invalid length. [ 449.699034][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.778971][T12428] usb usb8: usbfs: process 12428 (syz.4.1805) did not claim interface 0 before use [ 449.800025][ T29] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 449.813963][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 449.949962][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 449.956917][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.968694][ T29] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 449.978438][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.987167][ T29] usb 4-1: Product: syz [ 449.992700][ T29] usb 4-1: Manufacturer: syz [ 449.997349][ T29] usb 4-1: SerialNumber: syz [ 450.120002][ T5921] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 450.292590][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 450.300503][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 450.312293][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32768, setting to 1024 [ 450.324334][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 450.338503][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 450.373859][T12438] hub 9-0:1.0: USB hub found [ 450.379956][T12438] hub 9-0:1.0: 1 port detected [ 450.432995][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.457839][ T5921] usb 5-1: config 0 descriptor?? [ 450.514490][ T5921] usbhid 5-1:0.0: can't add hid device: -22 [ 450.527949][ T5921] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 450.730156][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.899281][T12440] tipc: Enabled bearer , priority 0 [ 450.906738][T12440] syzkaller0: entered promiscuous mode [ 450.914835][T12440] syzkaller0: entered allmulticast mode [ 450.947376][T12440] tipc: Resetting bearer [ 450.963396][T12439] tipc: Resetting bearer [ 450.997400][T12439] tipc: Disabling bearer [ 451.690375][ T69] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.709292][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 451.709311][ T30] audit: type=1800 audit(1776156888.746:1373): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1816" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 451.780578][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.982419][T12467] syzkaller0: entered promiscuous mode [ 451.988314][T12467] syzkaller0: entered allmulticast mode [ 452.117922][ T29] usb 4-1: selecting invalid altsetting 1 [ 452.158091][ T29] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 452.170444][ T29] usb 4-1: USB disconnect, device number 108 [ 452.186015][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.330498][ T8944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.810188][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.879979][ T93] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 452.987837][ T10] usb 5-1: USB disconnect, device number 115 [ 453.031171][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 453.047066][ T93] usb 4-1: config 0 has no interfaces? [ 453.056897][ T93] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 453.069090][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.070496][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1823'. [ 453.087690][ T93] usb 4-1: config 0 descriptor?? [ 453.265623][T12478] bond0: entered promiscuous mode [ 453.273621][T12478] bond0: entered allmulticast mode [ 453.284784][T12478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.307300][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.330749][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.352476][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.361470][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.375869][ T5825] usb 4-1: USB disconnect, device number 109 [ 453.819943][ T5825] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 453.850590][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.069902][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 454.081385][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.095661][ T5825] usb 4-1: config index 0 descriptor too short (expected 105, got 36) [ 454.104637][ T5825] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 454.109939][ T93] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 454.130027][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.151537][ T5825] usb 4-1: New USB device found, idVendor=13b1, idProduct=8042, bcdDevice= 0.40 [ 454.161304][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.169389][ T5825] usb 4-1: Product: syz [ 454.180023][ T5825] usb 4-1: Manufacturer: syz [ 454.184684][ T5825] usb 4-1: SerialNumber: syz [ 454.277012][ T93] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.290109][ T93] usb 5-1: config 0 has no interface number 0 [ 454.308515][T12494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.317152][T12494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.325507][T12494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.330371][ T93] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 454.354560][ T93] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 454.376211][ T93] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 454.396311][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.397641][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.422692][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.434645][ T93] usb 5-1: config 0 descriptor?? [ 454.440768][T12489] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 454.462516][ T93] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 454.506973][ T5825] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 454.592358][ T5825] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 454.611040][ T5825] usb 4-1: USB disconnect, device number 110 [ 454.650986][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.880030][ T93] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 454.880917][T12490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.896718][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.918617][T12490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.055203][ T93] usb 3-1: Using ep0 maxpacket: 16 [ 455.063442][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 455.086903][ T93] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 455.098469][ T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.109170][ T93] usb 3-1: Product: syz [ 455.114118][ T93] usb 3-1: Manufacturer: syz [ 455.119715][ T93] usb 3-1: SerialNumber: syz [ 455.170318][ T93] usb 3-1: config 0 descriptor?? [ 455.209876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 455.238234][ T93] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 455.256112][ T93] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 455.283899][T12515] fuse: Bad value for 'group_id' [ 455.293923][T12515] fuse: Bad value for 'group_id' [ 455.323849][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 455.822165][ T93] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 455.930501][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.999904][ T5825] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 456.152596][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 456.178961][ T5825] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.193459][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.206686][ T5825] usb 2-1: Product: syz [ 456.213776][ T5825] usb 2-1: Manufacturer: syz [ 456.221616][ T5825] usb 2-1: SerialNumber: syz [ 456.235868][ T93] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 456.245250][ T93] em28xx 3-1:0.0: board has no eeprom [ 456.261962][ T5825] usb 2-1: config 0 descriptor?? [ 456.349229][ T5825] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 456.412450][ T6851] udevd[6851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.589956][ T93] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 456.601371][ T93] em28xx 3-1:0.0: dvb set to bulk mode. [ 456.615033][ T10] em28xx 3-1:0.0: Binding DVB extension [ 456.828765][ T93] usb 5-1: USB disconnect, device number 116 [ 456.980174][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.450564][ T8945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.460488][ T8941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.783993][T12504] em28xx 3-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 457.797567][ T5921] usb 3-1: USB disconnect, device number 95 [ 457.814195][ T5921] em28xx 3-1:0.0: Disconnecting em28xx [ 457.836721][ T10] em28xx 3-1:0.0: Registering input extension [ 457.844318][ T5921] em28xx 3-1:0.0: Closing input extension [ 457.866120][ T5921] em28xx 3-1:0.0: Freeing device [ 457.914921][T12548] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1843'. [ 458.012876][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.670152][ T10] usb 2-1: USB disconnect, device number 106 [ 459.062425][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.083399][T12554] syz.3.1845 (12554): drop_caches: 2 [ 459.149593][T12554] syz.3.1845 (12554): drop_caches: 2 [ 459.299915][ T30] audit: type=1326 audit(1776156896.326:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12570 comm="syz.2.1851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb19c819 code=0x0 [ 459.343942][T12576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1853'. [ 459.374529][T12573] 8021q: VLANs not supported on ipvlan1 [ 459.720071][ T5825] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 459.825404][T12609] input: syz0 as /devices/virtual/input/input48 [ 459.884070][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.900371][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.911850][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.925094][ T5825] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.935837][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.964317][ T5825] usb 4-1: config 0 descriptor?? [ 460.090471][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.440136][ T5921] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 460.549639][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.562867][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.581380][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.596122][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.609643][T12620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.609993][ T5921] usb 3-1: Using ep0 maxpacket: 16 [ 460.632005][ T5921] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.648302][ T5921] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.659348][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 460.666902][ T5921] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 460.676599][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.689117][ T5921] usb 3-1: config 0 descriptor?? [ 460.770153][ T29] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 460.878951][T12620] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1866'. [ 460.890276][T12623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.922216][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.979779][T12623] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 461.005501][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 461.032927][T12623] ipvlan2: left allmulticast mode [ 461.038711][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.038783][T12623] veth1_to_bond: left allmulticast mode [ 461.063655][ T29] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 461.074573][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.084852][T12623] geneve2: left allmulticast mode [ 461.087418][ T29] usb 5-1: Product: syz [ 461.103400][ T29] usb 5-1: Manufacturer: syz [ 461.109233][T12616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.120760][T12616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.121615][ T29] usb 5-1: SerialNumber: syz [ 461.138669][ T29] usb 5-1: config 0 descriptor?? [ 461.146546][T12623] bond2: left allmulticast mode [ 461.156928][ T5921] hid (null): unknown global tag 0xc [ 461.171703][ T29] uvcvideo 5-1:0.0: Found Unit with invalid ID 0 [ 461.190896][T12623] ipip0: left promiscuous mode [ 461.198504][T12623] ipip0: left allmulticast mode [ 461.214923][T12623] vlan2: left promiscuous mode [ 461.245365][T12623] ip6gre1: left promiscuous mode [ 461.250640][T12623] ip6gre1: left allmulticast mode [ 461.301146][ T8944] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.312875][ T8944] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 461.331071][ T8944] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.342283][ T8944] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 461.352014][ T8944] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.354623][ T29] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 461.370034][ T5884] usb 3-1: USB disconnect, device number 96 [ 461.379913][ T29] uvcvideo 5-1:0.0: No valid video chain found. [ 461.398778][ T8944] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 461.425256][ T8944] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.469061][ T8944] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 461.502824][ T29] usb 5-1: USB disconnect, device number 117 [ 461.860453][ T5891] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 462.014906][ T5891] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.034908][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 462.073721][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.094144][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.129253][ T5891] usb 2-1: Product: syz [ 462.154314][ T5891] usb 2-1: Manufacturer: syz [ 462.161440][ T5891] usb 2-1: SerialNumber: syz [ 462.181379][T12646] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 462.238142][T12656] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1870'. [ 462.619930][ T5825] usbhid 4-1:0.0: can't add hid device: -71 [ 462.627341][ T5825] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 462.648704][ T5825] usb 4-1: USB disconnect, device number 111 [ 463.155763][T12675] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1875'. [ 463.194624][ T5891] cdc_ncm 2-1:1.0: bind() failure [ 463.214995][ T5891] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 463.229907][ T5825] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 463.237806][ T5891] cdc_ncm 2-1:1.1: bind() failure [ 463.274765][ T5891] usb 2-1: USB disconnect, device number 107 [ 463.540261][ T5884] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 463.550889][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 463.559534][ T5825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.621004][ T5825] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 463.639491][ T5825] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 463.689981][ T5825] usb 4-1: config 4 has no interface number 0 [ 463.709905][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 463.896289][ T5825] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 463.906831][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.920073][ T5825] usb 4-1: Product: syz [ 463.924296][ T5825] usb 4-1: Manufacturer: syz [ 463.929030][ T5825] usb 4-1: SerialNumber: syz [ 463.950327][ T5884] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 464.199128][ T5884] usb 5-1: config 0 has no interface number 0 [ 464.216358][ T5884] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.221305][T12674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.246524][ T5884] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 464.270002][ T5884] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 108, changing to 10 [ 464.331432][T12674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.349672][ T5825] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 464.357736][ T5825] uvcvideo 4-1:4.147: No valid video chain found. [ 464.425785][ T5884] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 464.444298][ T5884] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 464.480167][ T5825] usb 4-1: USB disconnect, device number 112 [ 464.502694][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.557972][ T5884] usb 5-1: config 0 descriptor?? [ 464.633166][ T5884] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 464.650240][ T29] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 464.843216][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 464.890225][ T5825] usb 5-1: USB disconnect, device number 118 [ 464.911942][ T5825] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 464.936048][ T29] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.957939][T12692] usb usb7: usbfs: process 12692 (syz.3.1880) did not claim interface 0 before use [ 464.987806][ T29] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.222842][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 465.234647][ T29] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 465.255673][ T29] usb 2-1: Product: syz [ 465.291799][ T29] usb 2-1: Manufacturer: syz [ 465.340013][ T5884] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 465.410838][ T29] hub 2-1:4.0: USB hub found [ 465.491649][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 465.506494][ T5884] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 465.526213][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.552578][ T5884] usb 4-1: Product: syz [ 465.564560][ T5884] usb 4-1: Manufacturer: syz [ 465.578731][ T5884] usb 4-1: SerialNumber: syz [ 465.615771][ T29] hub 2-1:4.0: 7 ports detected [ 465.620628][ T5884] usb 4-1: config 0 descriptor?? [ 465.632672][ T29] hub 2-1:4.0: insufficient power available to use all downstream ports [ 465.639205][ T5884] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 465.927954][T12706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 466.160213][T12706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1879'. [ 466.311648][T12641] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 466.313724][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.333584][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.370302][ T5884] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 466.392215][ T5884] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 466.451914][ T5884] usb 4-1: USB disconnect, device number 113 [ 466.472061][T12641] usb 5-1: Using ep0 maxpacket: 8 [ 466.484551][T12641] usb 5-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 466.497077][T12641] usb 5-1: config 0 has an invalid interface number: 224 but max is 189 [ 466.525263][T12641] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 466.558947][T12641] usb 5-1: config 0 has no interface number 0 [ 466.576040][T12641] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 466.580778][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 466.603962][T12641] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.604090][T12718] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 466.634897][T12718] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 466.645578][T12641] usb 5-1: config 0 descriptor?? [ 466.694858][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 466.696434][T12718] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 466.736123][ T29] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 466.748674][T12718] netlink: 'syz.0.1888': attribute type 5 has an invalid length. [ 466.764292][ T29] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 466.860677][T12723] m>e5n: entered promiscuous mode [ 467.095359][T12732] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1892'. [ 467.489970][ T5884] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 467.593900][ T29] usb 2-1: reset high-speed USB device number 108 using dummy_hcd [ 467.641825][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.653017][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.666710][ T5884] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 467.676449][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.688089][ T5884] usb 4-1: config 0 descriptor?? [ 467.770619][ T29] usb 2-1: device firmware changed [ 467.782112][ T29] usb 2-1: USB disconnect, device number 108 [ 468.080080][ T29] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 468.110749][ T5884] hid_parser_main: 20 callbacks suppressed [ 468.110777][ T5884] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 468.128758][ T5884] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 468.136778][ T5884] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 468.145130][ T5884] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 468.153270][ T5884] playstation 0003:054C:0DF2.002D: unknown main item tag 0x0 [ 468.177279][ T5884] playstation 0003:054C:0DF2.002D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 468.260747][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 468.276548][ T29] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 468.299901][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.307784][T12740] fuse: Unknown parameter 'fb' [ 468.307960][ T29] usb 2-1: Product: syz [ 468.307980][ T29] usb 2-1: Manufacturer: syz [ 468.339893][ T29] usb 2-1: SerialNumber: syz [ 468.341204][T12740] fuse: Unknown parameter 'groux:b^Xe' [ 468.347244][ T29] usb 2-1: config 0 descriptor?? [ 468.363668][ T29] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 468.365660][ T5884] playstation 0003:054C:0DF2.002D: Failed to retrieve feature with reportID 9: -71 [ 468.383368][ T5884] playstation 0003:054C:0DF2.002D: Failed to retrieve DualSense pairing info: -71 [ 468.396206][ T5884] playstation 0003:054C:0DF2.002D: Failed to get MAC address from DualSense [ 468.405986][ T5884] playstation 0003:054C:0DF2.002D: Failed to create dualsense. [ 468.418949][ T5884] playstation 0003:054C:0DF2.002D: probe with driver playstation failed with error -71 [ 468.433550][ T5884] usb 4-1: USB disconnect, device number 114 [ 468.990592][ T29] gspca_ov534_9: reg_r err -32 [ 469.060533][T12641] usb 5-1: USB disconnect, device number 119 [ 469.146404][T12762] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1901'. [ 469.185738][T12762] io-wq is not configured for unbound workers [ 469.251031][ T29] gspca_ov534_9: Unknown sensor 0000 [ 469.268933][ T29] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 469.297312][ T29] usb 2-1: USB disconnect, device number 109 [ 469.328376][T12768] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 469.389653][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 469.427823][T12768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.476041][T12768] veth5: entered promiscuous mode [ 469.489885][T12641] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 469.652831][T12641] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 469.670130][T12641] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 469.697066][T12641] usb 5-1: config 220 has no interface number 2 [ 469.707279][T12641] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 469.721723][T12641] usb 5-1: config 220 interface 0 has no altsetting 0 [ 469.728569][T12641] usb 5-1: config 220 interface 76 has no altsetting 0 [ 469.737387][T12641] usb 5-1: config 220 interface 1 has no altsetting 0 [ 469.771604][T12641] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 469.780882][ T29] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 469.794287][T12641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.815810][T12641] usb 5-1: Product: syz [ 469.827320][T12778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.835857][T12641] usb 5-1: Manufacturer: syz [ 469.842366][T12641] usb 5-1: SerialNumber: syz [ 469.870450][T12778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.944271][ T29] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 469.954477][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.963610][ T29] usb 3-1: Product: syz [ 469.969093][ T29] usb 3-1: Manufacturer: syz [ 469.974351][ T29] usb 3-1: SerialNumber: syz [ 469.986899][ T29] usb 3-1: config 0 descriptor?? [ 470.060046][ T5891] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 470.117396][T12785] hub 9-0:1.0: USB hub found [ 470.122636][T12785] hub 9-0:1.0: 1 port detected [ 470.185461][T12641] usb 5-1: selecting invalid altsetting 0 [ 470.200846][ T29] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 470.209647][T12641] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 470.237708][T12641] uvcvideo 5-1:220.0: No valid video chain found. [ 470.267656][T12641] usb 5-1: selecting invalid altsetting 0 [ 470.276204][T12641] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 470.298949][T12641] usb 5-1: USB disconnect, device number 120 [ 470.438168][ T29] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 470.492188][ T29] usb 3-1: USB disconnect, device number 97 [ 470.568494][T12795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.707092][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.725945][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.752595][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.891584][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.901214][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.911492][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.920273][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.928911][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.938009][T12800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.946774][T12800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.020167][ T29] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 471.180347][ T29] usb 3-1: config 2 has an invalid interface number: 99 but max is 0 [ 471.191611][ T29] usb 3-1: config 2 has no interface number 0 [ 471.197783][ T29] usb 3-1: config 2 interface 99 altsetting 9 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 471.217702][ T29] usb 3-1: config 2 interface 99 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.236146][ T29] usb 3-1: config 2 interface 99 has no altsetting 0 [ 471.255291][ T29] usb 3-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice=52.20 [ 471.270395][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.278541][ T29] usb 3-1: Product: syz [ 471.283312][ T29] usb 3-1: Manufacturer: syz [ 471.287924][ T29] usb 3-1: SerialNumber: syz [ 471.481277][T12820] loop2: detected capacity change from 0 to 7 [ 471.491872][ T6851] Dev loop2: unable to read RDB block 7 [ 471.497519][ T6851] loop2: unable to read partition table [ 471.503958][ T6851] loop2: partition table beyond EOD, truncated [ 471.517543][ T29] mxuport 3-1:2.99: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 471.534130][ T29] mxuport 3-1:2.99: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 471.543753][T12820] Dev loop2: unable to read RDB block 7 [ 471.551921][ T29] mxuport 3-1:2.99: probe with driver mxuport failed with error -71 [ 471.561736][T12820] loop2: unable to read partition table [ 471.569297][T12820] loop2: partition table beyond EOD, truncated [ 471.577844][ T29] usb 3-1: USB disconnect, device number 98 [ 471.589931][T12820] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 471.759950][ T5884] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 471.802485][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 471.826718][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 471.839087][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 471.849516][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 471.882221][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 471.925784][ T5884] usb 5-1: Invalid ep0 maxpacket: 64 [ 472.069948][ T5884] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 472.146104][T12845] syzkaller0: entered promiscuous mode [ 472.152510][T12845] syzkaller0: entered allmulticast mode [ 472.164727][T12845] loop3: detected capacity change from 0 to 7 [ 472.175511][T12845] Dev loop3: unable to read RDB block 7 [ 472.181330][T12845] loop3: unable to read partition table [ 472.187194][T12845] loop3: partition table beyond EOD, truncated [ 472.195955][T12845] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 472.240061][ T5884] usb 5-1: Invalid ep0 maxpacket: 64 [ 472.246514][ T5884] usb usb5-port1: attempt power cycle [ 472.304008][ T30] audit: type=1800 audit(1776156909.346:1375): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1923" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 472.467217][T12853] usb usb8: usbfs: process 12853 (syz.2.1924) did not claim interface 0 before use [ 472.619972][ T5884] usb 5-1: new low-speed USB device number 123 using dummy_hcd [ 472.640681][ T5884] usb 5-1: Invalid ep0 maxpacket: 64 [ 472.839425][ T5884] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 472.881313][ T5884] usb 5-1: Invalid ep0 maxpacket: 64 [ 472.896201][ T5884] usb usb5-port1: unable to enumerate USB device [ 473.406182][T12863] binder: 12862:12863 ioctl c0385868 2000000004c0 returned -22 [ 473.421273][T12863] netlink: 'syz.0.1927': attribute type 10 has an invalid length. [ 473.491427][T12864] binder: 12862:12864 ioctl 5425 7 returned -22 [ 473.552433][T12866] loop2: detected capacity change from 0 to 7 [ 473.561335][T12866] Dev loop2: unable to read RDB block 7 [ 473.566981][T12866] loop2: unable to read partition table [ 473.584163][T12866] loop2: partition table beyond EOD, truncated [ 473.611725][T12866] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 473.652936][T12873] netlink: 'syz.0.1930': attribute type 8 has an invalid length. [ 473.709238][T12875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.786550][T12879] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1930'. [ 473.989949][ T5884] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 474.203921][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 474.211953][ T5884] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 474.220437][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.231060][ T5884] usb 3-1: config 0 has no interface number 0 [ 474.251018][ T5884] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.280008][ T5884] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.303974][ T5884] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 474.318456][ T5884] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.332253][ T5884] usb 3-1: config 0 interface 52 has no altsetting 0 [ 474.340101][ T5884] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 474.351679][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.510558][ T5891] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 474.539756][ T5884] usb 3-1: config 0 descriptor?? [ 474.740115][ T5891] usb 4-1: device descriptor read/64, error -71 [ 474.844072][ T5884] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input49 [ 475.252766][ T5884] usb 3-1: USB disconnect, device number 99 [ 475.252872][ C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 475.260355][ T5891] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 475.288763][ T5180] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 475.310164][ T29] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 475.338562][ T5180] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 475.487423][ T29] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 475.512216][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.532204][ T5891] usb 4-1: device descriptor read/64, error -71 [ 475.539056][ T29] usb 5-1: config 0 has no interfaces? [ 475.560044][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 475.569246][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.591222][ T29] usb 5-1: config 0 descriptor?? [ 475.640346][ T5891] usb usb4-port1: attempt power cycle [ 475.920024][T12644] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 476.009739][T12898] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 476.009901][ T5891] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 476.020964][T12898] tipc: New replicast peer: 255.255.255.255 [ 476.047518][T12898] tipc: Enabled bearer , priority 10 [ 476.060689][ T5891] usb 4-1: device descriptor read/8, error -71 [ 476.070024][T12644] usb 3-1: Using ep0 maxpacket: 32 [ 476.076956][T12644] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.097126][T12644] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 476.105744][T12644] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 476.153680][T12644] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 476.169193][T12644] usb 3-1: config 128 has no interface number 0 [ 476.175999][T12644] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 476.237547][T12644] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.259418][T12644] usb 3-1: config 128 interface 127 has no altsetting 0 [ 476.287810][T12644] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 476.297595][T12644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.307333][T12644] usb 3-1: Product: syz [ 476.311824][T12644] usb 3-1: Manufacturer: syz [ 476.320807][T12644] usb 3-1: SerialNumber: syz [ 476.340044][ T5891] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 476.382571][ T5891] usb 4-1: device descriptor read/8, error -71 [ 476.494541][ T5891] usb usb4-port1: unable to enumerate USB device [ 476.539934][ T5884] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 476.545517][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.556831][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.613054][T12644] usb 3-1: USB disconnect, device number 100 [ 476.643421][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.690072][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 476.697291][ T5884] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 476.706608][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.717691][ T5884] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 476.727006][ T5884] usb 2-1: config 0 has no interface number 0 [ 476.733674][ T5884] usb 2-1: too many endpoints for config 0 interface 1 altsetting 61: 142, using maximum allowed: 30 [ 476.744831][ T5884] usb 2-1: config 0 interface 1 altsetting 61 has 0 endpoint descriptors, different from the interface descriptor's value: 142 [ 476.758230][ T5884] usb 2-1: config 0 interface 1 has no altsetting 0 [ 476.765133][ T5884] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 476.774980][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.786275][ T5884] usb 2-1: config 0 descriptor?? [ 476.796313][ T5884] usb 2-1: selecting invalid altsetting 0 [ 477.000785][T12644] usb 2-1: USB disconnect, device number 111 [ 477.182268][ T5825] tipc: Node number set to 1904302901 [ 477.296059][T12914] loop2: detected capacity change from 0 to 7 [ 477.304261][T12914] Dev loop2: unable to read RDB block 7 [ 477.310709][T12914] loop2: unable to read partition table [ 477.316535][T12914] loop2: partition table beyond EOD, truncated [ 477.324306][T12914] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 477.751744][T12644] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 477.767691][ T29] usb 5-1: string descriptor 0 read error: -71 [ 477.793850][ T29] usb 5-1: USB disconnect, device number 125 [ 477.920302][T12644] usb 4-1: device descriptor read/64, error -71 [ 477.967337][T12942] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1949'. [ 478.104152][T12944] kAFS: unable to lookup cell '' [ 478.160157][T12644] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 478.250578][ T5884] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 478.309982][T12644] usb 4-1: device descriptor read/64, error -71 [ 478.379907][ T5884] usb 2-1: device descriptor read/64, error -71 [ 478.420525][T12644] usb usb4-port1: attempt power cycle [ 478.524585][T12956] loop2: detected capacity change from 0 to 7 [ 478.562055][T12956] Dev loop2: unable to read RDB block 7 [ 478.567697][T12956] loop2: unable to read partition table [ 478.612042][T12956] loop2: partition table beyond EOD, truncated [ 478.618299][T12956] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 478.637991][ T5884] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 478.780592][T12644] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 478.799949][ T5884] usb 2-1: device descriptor read/64, error -71 [ 478.821882][T12644] usb 4-1: device descriptor read/8, error -71 [ 478.910482][ T5884] usb usb2-port1: attempt power cycle [ 479.069912][T12644] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 479.091120][T12644] usb 4-1: device descriptor read/8, error -71 [ 479.215069][T12644] usb usb4-port1: unable to enumerate USB device [ 479.259903][ T5884] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 479.290989][ T5884] usb 2-1: device descriptor read/8, error -71 [ 479.529977][ T5884] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 479.550761][ T5884] usb 2-1: device descriptor read/8, error -71 [ 479.660221][ T5884] usb usb2-port1: unable to enumerate USB device [ 479.787771][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'. [ 479.797752][T12971] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 479.813499][T12971] openvswitch: netlink: Message has 16 unknown bytes. [ 480.459656][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.469205][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.969992][ T5884] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 481.011089][ T5891] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 481.130728][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 481.139701][ T5884] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 481.152319][ T30] audit: type=1326 audit(1776156918.196:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12988 comm="syz.1.1963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b1a79c819 code=0x0 [ 481.169920][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 481.188429][ T5884] usb 4-1: config 179 has no interface number 0 [ 481.202859][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 481.214967][ T5891] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.226393][ T5891] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 481.236538][ T5884] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 481.363060][ T5891] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 481.374096][ T5884] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 481.390151][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.422972][ T5884] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 481.436684][ T5891] usb 5-1: Product: syz [ 481.441154][ T5891] usb 5-1: Manufacturer: syz [ 481.448087][ T5884] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 481.462548][ T5891] usb 5-1: SerialNumber: syz [ 481.474548][ T5884] usb 4-1: config 179 interface 65 has no altsetting 0 [ 481.491084][ T5884] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 481.507485][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.734858][T12995] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1962'. [ 482.031704][T12997] loop2: detected capacity change from 0 to 7 [ 482.039213][T12997] Dev loop2: unable to read RDB block 7 [ 482.046509][T12997] loop2: unable to read partition table [ 482.056519][T12997] loop2: partition table beyond EOD, truncated [ 482.063453][T12997] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 482.337386][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'. [ 482.916765][T13005] netlink: 'syz.2.1967': attribute type 46 has an invalid length. [ 483.556474][ T5884] usb 4-1: USB disconnect, device number 123 [ 483.580526][T12644] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 483.746572][T12644] usb 2-1: config index 0 descriptor too short (expected 55488, got 441) [ 483.762708][T12644] usb 2-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 483.776509][T12644] usb 2-1: config 0 has no interfaces? [ 483.787199][T12644] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 483.796699][T12644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.815844][T12644] usb 2-1: config 0 descriptor?? [ 483.878830][ T5891] usb 5-1: failed waiting for Axe-Fx III to boot: -71 [ 483.890294][ T5891] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 483.949613][ T5891] usb 5-1: USB disconnect, device number 126 [ 484.032544][T12630] usb 2-1: USB disconnect, device number 116 [ 484.225141][T13038] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 484.440661][ T5891] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 484.500297][T12630] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 484.599919][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 484.608566][ T5891] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 484.621208][ T5891] usb 5-1: config 0 has no interface number 0 [ 484.629319][ T5891] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 484.639482][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.657764][ T5891] usb 5-1: config 0 descriptor?? [ 484.665986][T12630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 484.676002][T12630] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 484.689080][T12630] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 484.702417][T13043] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 484.718170][ T5891] usb-storage 5-1:0.99: USB Mass Storage device detected [ 484.728300][T12630] usb 2-1: string descriptor 0 read error: -22 [ 484.738553][ T5891] usb-storage 5-1:0.99: device ignored [ 484.747851][T12630] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 484.761048][T12630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.978295][T12630] usb 2-1: Can't get UAC3 power state for id 10 [ 485.134091][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.144768][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.421993][T12630] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 485.471733][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1979'. [ 485.622279][ T30] audit: type=1326 audit(1776156922.626:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 485.851287][ T30] audit: type=1326 audit(1776156922.626:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 485.904658][ T30] audit: type=1326 audit(1776156922.626:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 485.980055][T13068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.003238][ T30] audit: type=1326 audit(1776156922.626:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.053943][T12630] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 486.094360][ T30] audit: type=1326 audit(1776156922.626:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.223146][ T30] audit: type=1326 audit(1776156922.626:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.314903][ T30] audit: type=1326 audit(1776156922.626:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.369430][T12630] usb 2-1: USB disconnect, device number 117 [ 486.382502][ T30] audit: type=1326 audit(1776156922.626:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.469436][ T30] audit: type=1326 audit(1776156922.626:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.565827][ T30] audit: type=1326 audit(1776156922.626:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.622718][ T30] audit: type=1326 audit(1776156922.626:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.689759][ T30] audit: type=1326 audit(1776156922.626:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.793006][ T30] audit: type=1326 audit(1776156922.626:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.862296][ T30] audit: type=1326 audit(1776156922.626:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 486.897077][ T30] audit: type=1326 audit(1776156922.626:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13056 comm="syz.0.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff80459c819 code=0x7ffc0000 [ 487.000425][T12644] usb 5-1: USB disconnect, device number 127 [ 487.212655][T13084] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'. [ 487.291208][T13079] vivid-007: disconnect [ 487.590042][T12644] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 487.786609][T12644] usb 3-1: Using ep0 maxpacket: 8 [ 487.813626][T13069] vivid-007: reconnect [ 487.872772][T12644] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 487.885873][T12644] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 487.895521][T12644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.903859][T12644] usb 3-1: Product: syz [ 487.908916][T12644] usb 3-1: Manufacturer: syz [ 487.913755][T12644] usb 3-1: SerialNumber: syz [ 487.955057][T12644] usb 3-1: config 0 descriptor?? [ 488.025173][T12644] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 488.361919][T13109] loop5: detected capacity change from 0 to 7 [ 488.549906][T12644] gspca_zc3xx: reg_w_i err -110 [ 488.736456][T13109] Dev loop5: unable to read RDB block 7 [ 488.743076][T13109] loop5: unable to read partition table [ 488.750363][T13109] loop5: partition table beyond EOD, truncated [ 488.756954][T13109] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 489.151811][T12644] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 489.163546][T12644] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 490.250205][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.260267][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.844070][ T5825] usb 3-1: USB disconnect, device number 101 [ 490.873224][T13135] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.1997'. [ 491.640470][T13156] hub 9-0:1.0: USB hub found [ 491.646339][T13156] hub 9-0:1.0: 1 port detected [ 492.159005][T13175] syzkaller0: entered promiscuous mode [ 492.164789][T13175] syzkaller0: entered allmulticast mode [ 492.780042][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 492.932276][ T5825] usb 5-1: device descriptor read/64, error -71 [ 492.940623][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2009'. [ 493.013961][T13186] macsec1: entered promiscuous mode [ 493.033888][T13186] bridge0: port 3(macsec1) entered blocking state [ 493.065007][T13186] bridge0: port 3(macsec1) entered disabled state [ 493.073061][T13186] macsec1: entered allmulticast mode [ 493.085129][T13186] bridge0: entered allmulticast mode [ 493.125573][T13186] macsec1: left allmulticast mode [ 493.176586][T13186] bridge0: left allmulticast mode [ 493.243005][ T5825] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 493.398381][ T5825] usb 5-1: device descriptor read/64, error -71 [ 493.540322][ T5825] usb usb5-port1: attempt power cycle [ 493.700455][T12630] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 493.809569][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2014'. [ 493.829507][T13201] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2014'. [ 493.867849][T12630] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.880035][ T5825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 493.900600][T12630] usb 2-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 493.929643][T12630] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 493.954017][T12630] usb 2-1: Product: syz [ 493.985663][T12630] usb 2-1: Manufacturer: syz [ 493.996862][T12630] usb 2-1: SerialNumber: syz [ 494.027548][T12630] usb 2-1: config 0 descriptor?? [ 494.037951][T12630] gspca_main: conex-2.14.0 probing 0572:0041 [ 494.039278][ T5825] usb 5-1: device descriptor read/8, error -71 [ 494.350177][ T5825] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 494.383034][ T5825] usb 5-1: device descriptor read/8, error -71 [ 494.511879][ T5825] usb usb5-port1: unable to enumerate USB device [ 495.271505][T13220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.519591][T13234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.571374][T13234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.621296][T13234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.686675][T13234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.760493][T13236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.777205][T13236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.060116][ T29] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 496.152959][ T5825] usb 2-1: USB disconnect, device number 119 [ 496.230087][ T29] usb 3-1: device descriptor read/64, error -71 [ 496.379921][ T5891] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 496.479902][ T29] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 496.540476][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.552928][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.578680][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.600869][ T5891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 496.630357][ T29] usb 3-1: device descriptor read/64, error -71 [ 496.651985][ T5891] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 496.670000][ T5825] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 496.671980][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.750492][ T29] usb usb3-port1: attempt power cycle [ 496.752637][ T5891] usb 4-1: config 0 descriptor?? [ 496.840464][ T5825] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 496.855996][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 496.875669][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 496.897490][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 496.915476][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 496.935679][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 496.951198][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 496.959157][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 496.983002][ T5891] usbhid 4-1:0.0: can't add hid device: -71 [ 496.983283][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 496.997028][ T5891] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 497.012828][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.031909][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.046676][ T5891] usb 4-1: USB disconnect, device number 124 [ 497.059012][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.089867][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.111670][ T29] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 497.138960][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.149337][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.177919][ T29] usb 3-1: device descriptor read/8, error -71 [ 497.186586][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.204144][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.224937][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.236246][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.254718][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.265229][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.284680][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.314993][ T5825] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 497.358410][ T5825] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 497.371038][ T5825] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.396949][ T5825] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 497.429892][ T29] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 497.437658][ T5825] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 497.461466][ T5825] usb 2-1: Product: syz [ 497.465972][ T5825] usb 2-1: Manufacturer: syz [ 497.470941][ T29] usb 3-1: device descriptor read/8, error -71 [ 497.477277][ T5825] usb 2-1: SerialNumber: syz [ 497.494547][ T5825] usb 2-1: config 0 descriptor?? [ 497.515857][ T5825] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 497.588564][ T29] usb usb3-port1: unable to enumerate USB device [ 497.744876][ T29] usb 2-1: USB disconnect, device number 120 [ 497.759355][ T29] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 498.187740][T13305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.217681][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 498.382337][T13312] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 498.389459][T13312] PKCS7: Only support pkcs7_signedData type [ 498.630908][T13322] loop2: detected capacity change from 0 to 7 [ 498.670551][T13322] Dev loop2: unable to read RDB block 7 [ 498.676152][T13322] loop2: unable to read partition table [ 498.716655][T13322] loop2: partition table beyond EOD, truncated [ 498.732132][T13322] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 498.884461][T13325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.922070][T13325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.983332][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 499.032149][T13329] netlink: 'syz.2.2033': attribute type 1 has an invalid length. [ 499.046157][T13329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2033'. [ 499.538304][T13352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.559138][T13352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.772999][T13359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.782001][T13359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.346439][T13363] hub 9-0:1.0: USB hub found [ 500.351601][T13363] hub 9-0:1.0: 1 port detected [ 500.648020][T13369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.702104][T13369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.365099][T13374] loop2: detected capacity change from 0 to 7 [ 501.381747][ T5830] Dev loop2: unable to read RDB block 7 [ 501.399226][ T5830] loop2: unable to read partition table [ 501.413520][ T5830] loop2: partition table beyond EOD, truncated [ 501.531578][T13374] Dev loop2: unable to read RDB block 7 [ 501.596308][T13374] loop2: unable to read partition table [ 501.614873][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.621502][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.637207][T13374] loop2: partition table beyond EOD, truncated [ 501.650161][T13374] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 502.110118][ T5884] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 502.139885][ T29] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 502.269915][ T29] usb 3-1: device descriptor read/64, error -71 [ 502.276850][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 502.285278][ T5884] usb 4-1: can't read configurations, error -61 [ 502.449871][ T5884] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 502.509911][ T29] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 502.622032][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 502.629920][ T5884] usb 4-1: can't read configurations, error -61 [ 502.641775][ T29] usb 3-1: device descriptor read/64, error -71 [ 502.644803][ T5884] usb usb4-port1: attempt power cycle [ 502.752774][ T29] usb usb3-port1: attempt power cycle [ 503.010046][ T5884] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 503.054963][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 503.063028][ T5884] usb 4-1: can't read configurations, error -61 [ 503.089945][ T29] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 503.113068][T12641] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 503.124154][ T29] usb 3-1: device descriptor read/8, error -71 [ 503.219951][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 503.243426][ T5884] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 503.251445][ T5884] usb 4-1: can't read configurations, error -61 [ 503.261914][ T5884] usb usb4-port1: unable to enumerate USB device [ 503.281069][T12641] usb 5-1: Using ep0 maxpacket: 16 [ 503.288235][T12641] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 503.304829][T12641] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.315781][T12641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.325353][T12641] usb 5-1: Product: syz [ 503.337230][T12641] usb 5-1: Manufacturer: syz [ 503.343352][T12641] usb 5-1: SerialNumber: syz [ 503.358046][T12641] usb 5-1: config 0 descriptor?? [ 503.363855][T13412] netlink: 'syz.0.2056': attribute type 2 has an invalid length. [ 503.370076][ T29] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 503.382798][T12641] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 503.397875][T12641] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 503.409930][ T5891] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 503.412724][ T29] usb 3-1: device descriptor read/8, error -71 [ 503.504373][T13412] netlink: 11736 bytes leftover after parsing attributes in process `syz.0.2056'. [ 503.531540][ T29] usb usb3-port1: unable to enumerate USB device [ 503.572085][ T5891] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 503.581480][ T5891] usb 2-1: config 1 has no interface number 0 [ 503.587829][ T5891] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 503.599925][ T5891] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 503.610262][ T5891] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.632390][ T5891] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 503.641943][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.652075][ T5891] usb 2-1: Product: syz [ 503.656275][ T5891] usb 2-1: Manufacturer: syz [ 503.661141][ T5891] usb 2-1: SerialNumber: syz [ 503.675072][T13409] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 503.887515][T13409] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 503.997407][T12641] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 504.111266][ T5891] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 504.435710][T12641] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 504.451496][T12641] em28xx 5-1:0.0: board has no eeprom [ 504.799906][T12641] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 504.829933][T12641] em28xx 5-1:0.0: dvb set to bulk mode. [ 504.846457][ T29] em28xx 5-1:0.0: Binding DVB extension [ 505.065778][T13430] loop2: detected capacity change from 0 to 7 [ 505.082236][T13430] Dev loop2: unable to read RDB block 7 [ 505.090394][T13430] loop2: unable to read partition table [ 505.096457][T13430] loop2: partition table beyond EOD, truncated [ 505.114978][T13430] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 505.369958][T12644] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 506.110580][T13403] em28xx 5-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 506.119683][T12644] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 506.153435][ T5891] usb 5-1: USB disconnect, device number 6 [ 506.160244][T12644] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 506.192201][ T5891] em28xx 5-1:0.0: Disconnecting em28xx [ 506.196363][T13453] fuse: Bad value for 'fd' [ 506.204511][T13452] tc_dump_action: action bad kind [ 506.210244][T12644] usb 3-1: config 220 has no interface number 2 [ 506.221001][T12644] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 506.237580][T12644] usb 3-1: config 220 interface 0 has no altsetting 0 [ 506.244907][T12644] usb 3-1: config 220 interface 76 has no altsetting 0 [ 506.253822][T12644] usb 3-1: config 220 interface 1 has no altsetting 0 [ 506.263581][T12644] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 506.276068][T12644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.287311][ T29] em28xx 5-1:0.0: Registering input extension [ 506.293852][T12644] usb 3-1: Product: syz [ 506.298224][T12644] usb 3-1: Manufacturer: syz [ 506.303326][T12644] usb 3-1: SerialNumber: syz [ 506.307069][ T5891] em28xx 5-1:0.0: Closing input extension [ 506.364446][ T5884] usb 2-1: USB disconnect, device number 121 [ 506.385212][ T5891] em28xx 5-1:0.0: Freeing device [ 506.407543][ T5884] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 506.489925][T12630] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 506.521157][ T5884] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 506.550583][T12644] usb 3-1: selecting invalid altsetting 0 [ 506.556705][T12644] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 506.620586][T12644] uvcvideo 3-1:220.0: No valid video chain found. [ 506.649993][T12630] usb 4-1: Using ep0 maxpacket: 32 [ 506.653030][T12644] usb 3-1: selecting invalid altsetting 0 [ 506.659036][T12630] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 506.670151][T12644] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 506.688809][T12630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.691861][T12644] usb 3-1: USB disconnect, device number 110 [ 506.775996][T12630] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.0/input/input51 [ 506.849987][ T5884] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 506.958060][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.987840][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.004201][ T5180] bcm5974 4-1:16.0: could not read from device [ 507.017899][ T5180] bcm5974 4-1:16.0: could not read from device [ 507.030287][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 507.037642][ T5180] bcm5974 4-1:16.0: could not read from device [ 507.045015][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 507.058069][T12630] usb 4-1: USB disconnect, device number 3 [ 507.059703][ T6952] bcm5974 4-1:16.0: could not read from device [ 507.074806][ T5180] bcm5974 4-1:16.0: could not read from device [ 507.084419][ T5884] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 507.103814][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.135484][ T5884] usb 2-1: Product: syz [ 507.135571][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.144485][ T5884] usb 2-1: Manufacturer: syz [ 507.160932][ T5884] usb 2-1: SerialNumber: syz [ 507.168863][ T5884] usb 2-1: config 0 descriptor?? [ 507.203267][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.206038][ T5884] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 507.240067][ T5884] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 507.816973][ T5884] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 507.928366][T13501] loop2: detected capacity change from 0 to 7 [ 507.941312][T13491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2068'. [ 507.956656][T13501] Dev loop2: unable to read RDB block 7 [ 507.962614][T13501] loop2: unable to read partition table [ 507.968519][T13501] loop2: partition table beyond EOD, truncated [ 507.999879][T13501] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 508.239370][ T5884] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 508.268694][ T5884] em28xx 2-1:0.0: board has no eeprom [ 508.475913][T13517] kAFS: unable to lookup cell '' [ 508.482531][T13517] kAFS: unable to lookup cell '(,c' [ 508.582476][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 508.630361][ T5884] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 508.638650][ T5884] em28xx 2-1:0.0: dvb set to bulk mode. [ 508.645376][ T5891] em28xx 2-1:0.0: Binding DVB extension [ 508.751138][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 508.788113][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.822775][ T29] usb 5-1: Product: syz [ 508.835843][ T29] usb 5-1: Manufacturer: syz [ 508.856909][ T29] usb 5-1: SerialNumber: syz [ 508.934641][ T29] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 508.971134][T12644] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 509.260045][ T29] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 509.472064][T13529] input: syz0 as /devices/virtual/input/input52 [ 509.544452][ T29] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 509.576326][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.598611][ T29] usb 4-1: config 0 descriptor?? [ 509.826711][ T29] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 509.851134][T13458] em28xx 2-1:0.0: writing to i2c device at 0x482c failed (error=-5) [ 509.887813][ T5825] usb 2-1: USB disconnect, device number 122 [ 509.899099][ T5825] em28xx 2-1:0.0: Disconnecting em28xx [ 509.908421][ T5891] em28xx 2-1:0.0: Registering input extension [ 509.926479][ T5825] em28xx 2-1:0.0: Closing input extension [ 509.959602][ T5825] em28xx 2-1:0.0: Freeing device [ 510.020116][T12644] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 510.027183][T12644] ath9k_htc: Failed to initialize the device [ 510.068778][T12644] usb 5-1: ath9k_htc: USB layer deinitialized [ 510.079101][ T29] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 510.091466][ T29] [drm] Initialized udl on minor 2 [ 510.105120][T13536] loop2: detected capacity change from 0 to 7 [ 510.112288][T13536] Dev loop2: unable to read RDB block 7 [ 510.118031][T13536] loop2: unable to read partition table [ 510.124676][T13536] loop2: partition table beyond EOD, truncated [ 510.131577][T13536] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 510.244781][T13527] binfmt_misc: register: failed to install interpreter file ./file0 [ 510.291459][T13539] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13539 comm: syz.2.2081) [ 510.306742][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 510.306781][ T30] audit: type=1800 audit(1776156947.346:1460): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2081" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=52437 res=0 errno=0 [ 510.463448][ T29] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 510.491076][ T29] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 510.501652][ T5825] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 510.512422][ T29] usb 4-1: USB disconnect, device number 4 [ 510.518706][ T5825] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 510.866813][T13553] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2084'. [ 511.365175][T12644] usb 5-1: USB disconnect, device number 7 [ 511.402698][T13569] lo: Caught tx_queue_len zero misconfig [ 511.436793][T13572] x_tables: duplicate underflow at hook 1 [ 511.633534][T13574] syzkaller0: entered promiscuous mode [ 511.647100][T13574] syzkaller0: entered allmulticast mode [ 511.667246][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.691193][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.726693][T13574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1692678547 (1692678547 ns) > initial count (310440980 ns). Using initial count to start timer. [ 511.759883][T12644] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 511.778272][T13578] ip6t_REJECT: ECHOREPLY is not supported [ 511.909883][T12644] usb 5-1: Using ep0 maxpacket: 32 [ 511.917931][T12644] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 511.963797][T12644] usb 5-1: config 0 has no interface number 0 [ 511.975458][T12644] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 511.987601][T12644] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 512.020203][ T5891] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 512.020714][T12644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.043725][T12644] usb 5-1: Product: syz [ 512.048142][T12644] usb 5-1: Manufacturer: syz [ 512.052871][T12644] usb 5-1: SerialNumber: syz [ 512.093424][T12644] usb 5-1: config 0 descriptor?? [ 512.110746][T12644] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 512.121285][T12644] em28xx 5-1:0.132: Video interface 132 found: [ 512.183757][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.201880][ T5891] usb 4-1: not running at top speed; connect to a high speed hub [ 512.224809][ T5891] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 512.240068][ T5891] usb 4-1: config 0 has no interface number 0 [ 512.251695][ T5891] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 512.282885][ T5891] usb 4-1: config 0 interface 88 has no altsetting 0 [ 512.316839][ T5891] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 512.335143][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 512.352970][ T5891] usb 4-1: Product: syz [ 512.369867][ T5891] usb 4-1: Manufacturer: syz [ 512.379899][ T5891] usb 4-1: SerialNumber: syz [ 512.397289][ T5891] usb 4-1: config 0 descriptor?? [ 512.518477][T12644] em28xx 5-1:0.132: chip ID is em2874 [ 512.611132][T13586] netlink: 'syz.2.2094': attribute type 33 has an invalid length. [ 512.619045][T13586] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2094'. [ 512.640016][T13586] `: renamed from team0 (while UP) [ 512.661700][ T5891] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input54 [ 512.664142][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.682120][ T5891] usb 4-1: USB disconnect, device number 5 [ 512.682188][ C1] usb_acecad 4-1:0.88: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 512.705723][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.154935][T13599] hub 9-0:1.0: USB hub found [ 513.163342][T13599] hub 9-0:1.0: 1 port detected [ 513.397822][T13603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.414737][T13603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.669889][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 513.840067][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 513.847264][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 513.860120][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 513.869580][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.878035][ T29] usb 4-1: Product: syz [ 513.883879][ T29] usb 4-1: Manufacturer: syz [ 513.889183][ T29] usb 4-1: SerialNumber: syz [ 513.896883][ T29] usb 4-1: config 0 descriptor?? [ 513.908483][ T29] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 513.918094][ T29] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 514.020310][T12644] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 514.029205][T12644] em28xx 5-1:0.132: board has no eeprom [ 514.092498][T12644] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 514.116685][T12644] em28xx 5-1:0.132: analog set to bulk mode. [ 514.124428][ T5921] em28xx 5-1:0.132: Registering V4L2 extension [ 514.219705][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 514.234008][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 514.248536][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 514.259080][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 514.308461][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 514.332169][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 514.359027][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 514.375851][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 514.399905][ T5891] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 514.437533][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 514.465950][T12644] usb 5-1: USB disconnect, device number 8 [ 514.476707][ T5921] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-19) [ 514.487925][T12644] em28xx 5-1:0.132: Disconnecting em28xx [ 514.541205][T12630] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 514.557141][ T29] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 514.574024][ T5891] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 514.590606][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.607890][ T5921] usb 5-1: Decoder not found [ 514.611712][ T5891] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.623829][ T5921] em28xx 5-1:0.132: failed to create media graph [ 514.626478][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 514.692130][ T5891] usb 3-1: Product: syz [ 514.696494][ T5921] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 514.711701][ T5891] usb 3-1: SerialNumber: syz [ 514.730711][ T5921] em28xx 5-1:0.132: Remote control support is not available for this card. [ 514.734998][T13618] ================================================================== [ 514.747968][T12644] em28xx 5-1:0.132: Closing input extension [ 514.749504][T13618] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 514.762755][T13618] Read of size 8 at addr ffff88804ac30790 by task v4l_id/13618 [ 514.770302][T13618] [ 514.772639][T13618] CPU: 0 UID: 0 PID: 13618 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 514.772667][T13618] Tainted: [L]=SOFTLOCKUP [ 514.772676][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 514.772688][T13618] Call Trace: [ 514.772697][T13618] [ 514.772703][T13618] dump_stack_lvl+0xe8/0x150 [ 514.772723][T13618] print_report+0xba/0x230 [ 514.772743][T13618] ? v4l2_fh_open+0xac/0x420 [ 514.772755][T13618] kasan_report+0x117/0x150 [ 514.772781][T13618] ? v4l2_fh_open+0xac/0x420 [ 514.772801][T13618] v4l2_fh_open+0xac/0x420 [ 514.772820][T13618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 514.772847][T13618] em28xx_v4l2_open+0x157/0x9a0 [ 514.772861][T13618] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.772874][T13618] v4l2_open+0x1bf/0x3a0 [ 514.772886][T13618] chrdev_open+0x4cd/0x5e0 [ 514.772900][T13618] ? __pfx_chrdev_open+0x10/0x10 [ 514.772922][T13618] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 514.772946][T13618] ? __pfx_chrdev_open+0x10/0x10 [ 514.772969][T13618] do_dentry_open+0x785/0x14e0 [ 514.772995][T13618] vfs_open+0x3b/0x340 [ 514.773016][T13618] ? path_openat+0x2df0/0x3860 [ 514.773028][T13618] path_openat+0x2e08/0x3860 [ 514.773043][T13618] ? __pfx_stack_trace_save+0x10/0x10 [ 514.773058][T13618] ? stack_depot_save_flags+0x33/0x810 [ 514.773083][T13618] ? __pfx_path_openat+0x10/0x10 [ 514.773102][T13618] ? __x64_sys_openat+0x138/0x170 [ 514.773127][T13618] ? do_syscall_64+0x14d/0xf80 [ 514.773148][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.773160][T13618] ? __lock_acquire+0x6b5/0x2cf0 [ 514.773175][T13618] do_file_open+0x23e/0x4a0 [ 514.773188][T13618] ? __pfx_do_file_open+0x10/0x10 [ 514.773208][T13618] ? _raw_spin_unlock+0x28/0x50 [ 514.773231][T13618] ? alloc_fd+0x64b/0x6c0 [ 514.773261][T13618] do_sys_openat2+0x113/0x200 [ 514.773287][T13618] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.773304][T13618] ? exc_page_fault+0x6a/0xc0 [ 514.773320][T13618] ? do_user_addr_fault+0xc6f/0x1340 [ 514.773335][T13618] __x64_sys_openat+0x138/0x170 [ 514.773355][T13618] do_syscall_64+0x14d/0xf80 [ 514.773381][T13618] ? trace_irq_disable+0x3b/0x150 [ 514.773399][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.773417][T13618] ? clear_bhb_loop+0x40/0x90 [ 514.773437][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.773448][T13618] RIP: 0033:0x7f671aea7407 [ 514.773461][T13618] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 514.773471][T13618] RSP: 002b:00007ffd46b2f450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 514.773484][T13618] RAX: ffffffffffffffda RBX: 00007f671b613880 RCX: 00007f671aea7407 [ 514.773492][T13618] RDX: 0000000000000000 RSI: 00007ffd46b30f1b RDI: ffffffffffffff9c [ 514.773503][T13618] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 514.773515][T13618] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 514.773527][T13618] R13: 00007ffd46b2f6a0 R14: 00007f671b77a000 R15: 00005645437964d8 [ 514.773549][T13618] [ 514.773556][T13618] [ 515.074480][T13618] Allocated by task 5921: [ 515.078814][T13618] kasan_save_track+0x3e/0x80 [ 515.083521][T13618] __kasan_kmalloc+0x93/0xb0 [ 515.088123][T13618] __kmalloc_cache_noprof+0x31c/0x660 [ 515.093504][T13618] em28xx_v4l2_init+0x10b/0x2e70 [ 515.098437][T13618] em28xx_init_extension+0x120/0x1c0 [ 515.103805][T13618] process_scheduled_works+0xb6e/0x18c0 [ 515.109371][T13618] worker_thread+0xa53/0xfc0 [ 515.114007][T13618] kthread+0x388/0x470 [ 515.118117][T13618] ret_from_fork+0x51e/0xb90 [ 515.122754][T13618] ret_from_fork_asm+0x1a/0x30 [ 515.127551][T13618] [ 515.129890][T13618] Freed by task 5921: [ 515.133852][T13618] kasan_save_track+0x3e/0x80 [ 515.138523][T13618] kasan_save_free_info+0x46/0x50 [ 515.143567][T13618] __kasan_slab_free+0x5c/0x80 [ 515.148439][T13618] kfree+0x1c1/0x630 [ 515.152339][T13618] em28xx_v4l2_init+0x1683/0x2e70 [ 515.157532][T13618] em28xx_init_extension+0x120/0x1c0 [ 515.162808][T13618] process_scheduled_works+0xb6e/0x18c0 [ 515.168349][T13618] worker_thread+0xa53/0xfc0 [ 515.172934][T13618] kthread+0x388/0x470 [ 515.176992][T13618] ret_from_fork+0x51e/0xb90 [ 515.181586][T13618] ret_from_fork_asm+0x1a/0x30 [ 515.186371][T13618] [ 515.188687][T13618] The buggy address belongs to the object at ffff88804ac30000 [ 515.188687][T13618] which belongs to the cache kmalloc-8k of size 8192 [ 515.202722][T13618] The buggy address is located 1936 bytes inside of [ 515.202722][T13618] freed 8192-byte region [ffff88804ac30000, ffff88804ac32000) [ 515.216967][T13618] [ 515.219296][T13618] The buggy address belongs to the physical page: [ 515.225717][T13618] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ac30 [ 515.234493][T13618] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 515.242983][T13618] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 515.250557][T13618] page_type: f5(slab) [ 515.254592][T13618] raw: 00fff00000000040 ffff88813feac280 dead000000000100 dead000000000122 [ 515.263183][T13618] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 515.271758][T13618] head: 00fff00000000040 ffff88813feac280 dead000000000100 dead000000000122 [ 515.280445][T13618] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 515.289187][T13618] head: 00fff00000000003 ffffea00012b0c01 00000000ffffffff 00000000ffffffff [ 515.297869][T13618] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 515.306534][T13618] page dumped because: kasan: bad access detected [ 515.312952][T13618] page_owner tracks the page as allocated [ 515.318655][T13618] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13175, tgid 13163 (syz.4.2005), ts 492348961463, free_ts 492330657381 [ 515.340215][T13618] post_alloc_hook+0x231/0x280 [ 515.344971][T13618] get_page_from_freelist+0x24dc/0x2580 [ 515.350504][T13618] __alloc_frozen_pages_noprof+0x18d/0x380 [ 515.356302][T13618] allocate_slab+0x77/0x660 [ 515.360860][T13618] refill_objects+0x331/0x3c0 [ 515.365558][T13618] __pcs_replace_empty_main+0x2e6/0x730 [ 515.371110][T13618] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 515.377544][T13618] kmemdup_noprof+0x2b/0x70 [ 515.382072][T13618] ipv4_sysctl_init_net+0x47/0x3a0 [ 515.387196][T13618] ops_init+0x35c/0x5c0 [ 515.391413][T13618] setup_net+0x118/0x340 [ 515.395710][T13618] copy_net_ns+0x50e/0x730 [ 515.400142][T13618] create_new_namespaces+0x3e7/0x6a0 [ 515.405441][T13618] unshare_nsproxy_namespaces+0x11a/0x160 [ 515.411179][T13618] ksys_unshare+0x51d/0x930 [ 515.415771][T13618] __x64_sys_unshare+0x38/0x50 [ 515.420557][T13618] page last free pid 13175 tgid 13163 stack trace: [ 515.427052][T13618] __free_frozen_pages+0xc2b/0xdb0 [ 515.432167][T13618] __slab_free+0x263/0x2b0 [ 515.436595][T13618] qlist_free_all+0x97/0x100 [ 515.441280][T13618] kasan_quarantine_reduce+0x148/0x160 [ 515.446797][T13618] __kasan_slab_alloc+0x22/0x80 [ 515.451663][T13618] kmem_cache_alloc_node_noprof+0x384/0x690 [ 515.457592][T13618] __alloc_skb+0x1d0/0x7d0 [ 515.462022][T13618] netlink_ack+0x146/0xa50 [ 515.466450][T13618] nfnetlink_rcv+0x2517/0x27b0 [ 515.471229][T13618] netlink_unicast+0x80f/0x9b0 [ 515.476016][T13618] netlink_sendmsg+0x813/0xb40 [ 515.480780][T13618] ____sys_sendmsg+0x972/0x9f0 [ 515.485548][T13618] ___sys_sendmsg+0x2a5/0x360 [ 515.490235][T13618] __x64_sys_sendmsg+0x1bd/0x2a0 [ 515.495184][T13618] do_syscall_64+0x14d/0xf80 [ 515.499771][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.505668][T13618] [ 515.507988][T13618] Memory state around the buggy address: [ 515.513880][T13618] ffff88804ac30680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.521926][T13618] ffff88804ac30700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.529976][T13618] >ffff88804ac30780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.538021][T13618] ^ [ 515.542605][T13618] ffff88804ac30800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.550668][T13618] ffff88804ac30880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.558718][T13618] ================================================================== [ 515.604332][T12630] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.630604][ T5891] usb 3-1: 0:2 : does not exist [ 515.635653][ T5891] usb 3-1: unit 255 not found! [ 515.665122][T12630] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 515.677041][ T5891] usb 3-1: USB disconnect, device number 111 [ 515.691861][T12630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 515.719999][T12630] usb 2-1: Product: syz [ 515.724349][T12630] usb 2-1: Manufacturer: syz [ 515.729065][T12630] usb 2-1: SerialNumber: syz [ 515.734691][T13618] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 515.741928][T13618] CPU: 0 UID: 0 PID: 13618 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 515.752557][T13618] Tainted: [L]=SOFTLOCKUP [ 515.756884][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.766931][T13618] Call Trace: [ 515.770391][T13618] [ 515.773398][T13618] vpanic+0x56c/0xa60 [ 515.777392][T13618] ? __pfx_vpanic+0x10/0x10 [ 515.781929][T13618] ? irqentry_exit+0x59e/0x620 [ 515.786751][T13618] panic+0xc5/0xd0 [ 515.790501][T13618] ? __pfx_panic+0x10/0x10 [ 515.794971][T13618] ? __pfx_panic+0x10/0x10 [ 515.799438][T13618] ? v4l2_fh_open+0xac/0x420 [ 515.804030][T13618] check_panic_on_warn+0x89/0xb0 [ 515.808970][T13618] ? v4l2_fh_open+0xac/0x420 [ 515.813602][T13618] end_report+0x73/0x180 [ 515.817860][T13618] ? v4l2_fh_open+0xac/0x420 [ 515.822450][T13618] kasan_report+0x128/0x150 [ 515.826957][T13618] ? v4l2_fh_open+0xac/0x420 [ 515.831589][T13618] v4l2_fh_open+0xac/0x420 [ 515.836003][T13618] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.842001][T13618] em28xx_v4l2_open+0x157/0x9a0 [ 515.846871][T13618] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.851921][T13618] v4l2_open+0x1bf/0x3a0 [ 515.856164][T13618] chrdev_open+0x4cd/0x5e0 [ 515.860599][T13618] ? __pfx_chrdev_open+0x10/0x10 [ 515.865550][T13618] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 515.871914][T13618] ? __pfx_chrdev_open+0x10/0x10 [ 515.876862][T13618] do_dentry_open+0x785/0x14e0 [ 515.881658][T13618] vfs_open+0x3b/0x340 [ 515.885766][T13618] ? path_openat+0x2df0/0x3860 [ 515.890557][T13618] path_openat+0x2e08/0x3860 [ 515.895302][T13618] ? __pfx_stack_trace_save+0x10/0x10 [ 515.900683][T13618] ? stack_depot_save_flags+0x33/0x810 [ 515.906147][T13618] ? __pfx_path_openat+0x10/0x10 [ 515.911085][T13618] ? __x64_sys_openat+0x138/0x170 [ 515.916137][T13618] ? do_syscall_64+0x14d/0xf80 [ 515.920906][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.926979][T13618] ? __lock_acquire+0x6b5/0x2cf0 [ 515.931944][T13618] do_file_open+0x23e/0x4a0 [ 515.936466][T13618] ? __pfx_do_file_open+0x10/0x10 [ 515.941502][T13618] ? _raw_spin_unlock+0x28/0x50 [ 515.946371][T13618] ? alloc_fd+0x64b/0x6c0 [ 515.950714][T13618] do_sys_openat2+0x113/0x200 [ 515.955490][T13618] ? __pfx_do_sys_openat2+0x10/0x10 [ 515.960704][T13618] ? exc_page_fault+0x6a/0xc0 [ 515.965396][T13618] ? do_user_addr_fault+0xc6f/0x1340 [ 515.970789][T13618] __x64_sys_openat+0x138/0x170 [ 515.975656][T13618] do_syscall_64+0x14d/0xf80 [ 515.980283][T13618] ? trace_irq_disable+0x3b/0x150 [ 515.985320][T13618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.991410][T13618] ? clear_bhb_loop+0x40/0x90 [ 515.996093][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.001982][T13618] RIP: 0033:0x7f671aea7407 [ 516.006387][T13618] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 516.025995][T13618] RSP: 002b:00007ffd46b2f450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 516.034518][T13618] RAX: ffffffffffffffda RBX: 00007f671b613880 RCX: 00007f671aea7407 [ 516.042705][T13618] RDX: 0000000000000000 RSI: 00007ffd46b30f1b RDI: ffffffffffffff9c [ 516.050691][T13618] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 516.058659][T13618] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 516.066629][T13618] R13: 00007ffd46b2f6a0 R14: 00007f671b77a000 R15: 00005645437964d8 [ 516.074630][T13618] [ 516.078049][T13618] Kernel Offset: disabled [ 516.082377][T13618] Rebooting in 86400 seconds..