last executing test programs: 11.488589572s ago: executing program 0 (id=542): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfffffc01, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getxattr(0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r1, 0xffffffffffffffff, 0x0) 11.405203582s ago: executing program 1 (id=543): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20040400) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r2, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xd) r4 = open(0x0, 0x143142, 0xc0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000480)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000004c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) sendfile(r3, r4, 0x0, 0x81) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000002100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8d}, 0x1c) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) tee(r6, 0xffffffffffffffff, 0x8001, 0x0) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 10.394287715s ago: executing program 1 (id=546): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x800}, 0x0) syz_open_dev$video(0x0, 0x1, 0x1) recvmmsg(r0, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000500)=""/122, 0x7a}], 0x3, &(0x7f00000005c0)=""/251, 0xfb}, 0x200}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/238, 0xee}, 0x47}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1, &(0x7f0000002c00)=""/4096, 0x1000}, 0x6}], 0x3, 0x10000, &(0x7f0000001580)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001780)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_ublk_setup_io_uring(0x4fcd, 0x0, &(0x7f0000000c40)=0x0, &(0x7f0000001980)=0x0, &(0x7f00000019c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000001a00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000001ac0)=0x0) r9 = dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1, 0xe, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000002680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000026c0), 0x0, 0x10, &(0x7f0000002700), 0x1e}, 0x48) r10 = openat(0xffffffffffffff9c, &(0x7f0000002740)='./file1\x00', 0x103a42, 0x32) syz_ublk_setup_queues(r10, r8, &(0x7f0000002780)={0x0, 0x1, 0x0, 0x3, 0x3ab, 0x0, r4}, &(0x7f0000002800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x20000, 0x2000, 0x10000004, 0x0, r9}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x9, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000002a80)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r11], 0x48) chmod(&(0x7f0000002b40)='./file1\x00', 0x100) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f000072c000/0x1000)=nil, 0x1000, 0x300000b, 0x100010, r12, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x65) 9.800434574s ago: executing program 1 (id=547): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xd) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r2, 0x2007ffb) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x69}) sendfile(r1, r2, 0x0, 0x1000000201002) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x100, 0x1}) 9.732708472s ago: executing program 3 (id=548): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4400c0) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r0, 0x7, 0x0, 0x8}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r9, &(0x7f0000000000), 0x0, 0x100004, 0x81) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r8, 0x0, r7}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0xff06, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0xdcd1, 0xc8, 0x40}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x2f, 0x6, 0x40000, 0x4, 0x2, 0x81}}) 9.538249334s ago: executing program 2 (id=549): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r2, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)}, {&(0x7f00000006c0)="fe2ff97f1b06dd569a05502020378f3a814f6616341156eef71523bd011b606714cbba7a0aa06f89c5a01e8530dbc114bb08c2b28831f155abeba7fcbae372122aeb3ed3c1799a8ec83ae6836a1b5ef139267e2b24f559bd46dc99d44aa1d0d749069e22812db3328a1f33e56b52fd4b614098bf163be6d7e709417e839b784a6aac9210c06c69f06fdba22c6d88fdbf364d20786a3f455b3d4d6007bbdf936ce45df15b7ac3a51ec755d30d09226fd4999a3695bb8638", 0xb7}], 0x2, &(0x7f0000000800)}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r4, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.839420648s ago: executing program 4 (id=550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x8, 0x4, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket(0x28, 0x1, 0x7) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008002000000000000800060000020000080007"], 0x44}}, 0x0) r4 = syz_io_uring_setup(0xd3a, &(0x7f0000000b00)={0x0, 0x2, 0x3010, 0x2, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x21, &(0x7f00000001c0), 0x1, 0x40}) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x1000000, 0x55, 0x0, r4}, &(0x7f0000000380)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_ublk_add_dev(r4, r9, r6, r7, &(0x7f0000000540)={0x2e, 0x8, 0x300, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x8003, 0x3b4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x10}}}, &(0x7f0000000340)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000440)={0x4, 0x7}) getrlimit(0xf, &(0x7f0000000000)) r11 = fsmount(0xffffffffffffffff, 0x0, 0xfc) ioctl$SNDRV_PCM_IOCTL_UNLINK(r11, 0x4161, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) 8.693210779s ago: executing program 3 (id=551): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xfffffffa, 0x400, 0x3, 0x259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @remote, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r12, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(r10, &(0x7f0000000300), 0xf) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r13 = eventfd(0x800) fgetxattr(r13, &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f0000001fc0)=""/4096, 0x1000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 8.38520732s ago: executing program 2 (id=552): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x55) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80580, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x1c, 0x3d, 0x301, 0x70bd25, 0x25dfdbfd, {0xd}, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d7}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000500)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f00000002c0)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000340)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r12, 0xffffffffffffffff}) close_range(r0, r10, 0x0) ioctl$SYNC_IOC_FILE_INFO(r13, 0xc0383e04, &(0x7f0000000380)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) 8.327743578s ago: executing program 0 (id=553): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0xfffffff5}) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004400)="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", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0x0, 0x8000000000000001, {0x7, 0x2d, 0x6, 0x495a802, 0x6, 0x7fc, 0x87aa8, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 7.266137642s ago: executing program 3 (id=554): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffa, 0x400, 0x3, 0x259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @remote, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(r11, &(0x7f0000000300), 0xf) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r14 = eventfd(0x800) fgetxattr(r14, &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f0000001fc0)=""/4096, 0x1000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r15, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 6.955185974s ago: executing program 2 (id=555): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xd) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r2, 0x2007ffb) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x69}) sendfile(r1, r2, 0x0, 0x1000000201002) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x100, 0x1}) 6.485283956s ago: executing program 0 (id=556): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xd) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r2, 0x2007ffb) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x69}) sendfile(r1, r2, 0x0, 0x1000000201002) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x100, 0x1}) 6.419615677s ago: executing program 1 (id=557): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) syz_usb_connect(0x0, 0x45, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000002f953e18f9f6343c4021428b0f31826478da48b0d83e82df978f4ed072b75dd0efcd2cf3469c0914f01bfd4a0abbc31d9fe3abfd"], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)='hello', 0x5}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000010010000010000000101000000000000140000000000000010010000020000000100000000"], 0x2c}, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r2, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0xd) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) unshare(0x4e000400) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) dup(0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000500)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000540)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26}) 6.219277225s ago: executing program 4 (id=558): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x800}, 0x0) syz_open_dev$video(0x0, 0x1, 0x1) recvmmsg(r0, &(0x7f0000003c00)=[{{&(0x7f0000000200)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000300)=""/238, 0xee}, {&(0x7f0000000500)=""/122, 0x7a}], 0x3, &(0x7f00000005c0)=""/251, 0xfb}, 0x200}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/238, 0xee}, 0x47}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1, &(0x7f0000002c00)=""/4096, 0x1000}, 0x6}], 0x3, 0x10000, &(0x7f0000001580)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000000"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001780)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000017c0), 0x0, 0x0, 0x0, 0x0) 6.042093079s ago: executing program 3 (id=559): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0xfffffff5}) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004400)="6074800be6a663e55421e35b2d43c491fcb92e5276791368f7ac2306753e5c7f43fa1b328eeff3ade5036fa9a59965b7df04f04f394c4cdfa8154858a9b5c5e05dcbb6c6da75b7a0cb7d0ffa4f38aad2817157bebff12aadd611f82c34b5a46a36986ae839bacb8fbd6d5b683cffb6a6deac9a40e90d498ce1c6a8d40923128d548f72af5df610254e7c7694126b8b7494136c9be79639605b6ced224b4a90169ac56ee14947ab15a77c56af89e73b0cf83a771af79d268d57db9c16b4752b205844fcf27e9a584dbc110728c484f0509c190bd94befea72c78d2c1539a2314f95183804234d66727c337deb23f16352880071a4a7234250c6cdd977668ecd4b18ec46f19f49ab9be757a3db22f6390d34d4e6b3535689feb7d63d08a8927aa90e627aae135c154df05403fc33fcb6a409a5ec3d729d1f647da6043660e0260a359cd65cb016ddaf275ba215b10f7a144a94b7dd57a8a754a119683e716c9fe7219d2be8d006e7e309b81140664240dd372168cc05932f05c8aaa9f8772456062f01270c099da18a451f7618e2ea324db80e2d47dcacfd030ee12e88f48e5aae2e3297f748d5832e74a777cbc4cf26a8733963ddef4a2f62696345c81b8b79dabf2d010ee6318ee3928d6a9c8f6b28db6a4c590a3a5dc0bc10770a879d05976dc75af7448e9f9506c72d79b7bd1bc829472706686382a12c8b6fae13094269588782d12694da6565f0bbbb4f0f707307f36285ee491f0c8a2942107651bab4639a6000fec0590896120f97813a3a8f0c8b5beb5e5e113ebeeb4404567230ce492c1398ed1bf07353c2f49e6703d0c41a59588bd6e1acc133291947b9088c6ada89caa09d83bb8dfc768574968235fe9ba04fefa161e36fde8f2cbf877ec3c284d85253f6bcf941150937544e92dcdc360a20516158557d4aa08e781fcda8cb90186ed407bd934cc8801edb7dc19e60dc1f86f056e9728359406dd4ac81683a5d41de219d97bbd9edcfc5cc81c8d23157865a6eeb1c30bd6fa93b6174c0a2f97d6bddfbb6014a820f39870c1df328792b8133f6dedac7fff173b54fc5024e3163eeb6094fb00e9848a9e11e37fa454f6192fe9cc9c3bb68bc418cd170c43a90cb4cf0540489a26cc89b316bd5fa410b517ca63a4ceeaacbd0243f25d0236b8a2424c45f0eabc584bbf268302747d68257499db740115d413a209c6b05f6d01cdd069f4a2b208d48a98bccf569af42999eae6f7ef3f40dba45d3b38e1c28fddf0cfe1bfe02fe77315f329329f3843467cb29c490c694dc5ebebb0e6eb42fb9e611d2e07c01773605a4a542a32a2f47bd1524cf4c2bb064e8eee2e95c4dea608581794b6ec05cd0558d1251ad3aeec246717ea9ab2730c7c1a29879bd44a61fd86058ae677789bdba038f2054445ef2efb18b9924d863fe4e91f0670f00ac4dd7a75e182b3eb45df57499ea81149529f6a59c5293f89ae07001acefaa3ac2731f0f8f940d83fa529efb49ab2960dbed16fb18a5fa8e624a5e7d40a6b909da91aed2ac73ebc9eb83b093fd9ef6e2ecec94d24c2a2dc2914df20f2aa07b396ab02e0ad91ac44b1a76c331f5dceb7b7569d8103f8c8e944a2c1772ec9b42462463a534ffaf6d3e4dfca3cc556a34c857b7096a67e9795c133d351ca436e99b23537e93dec2b2abb6082f20b25a767185f4d33f6a5eb65eae396a2ebeecfbacb6992246e0c56dd0e73d615e73567fde83e8fc26d168edd0a4cbafe5b9d1d92bfdb0461ec4d1a0672072ddcadaecc750208355e281aa0fc0cd06085a91083f21ec2a8307205fa0e26bafc7ceafcbe5d19e0c29f62d4e6e14b037b735e26d97037dcf863784beef2bb374ce40c67971730cf4cba66afd802ab3b8c24836ab1fe903d46b82d8145cfcd9e45997044cc4ac3154bd3006a252c590eb7523494d64f8301e4f8388557aded12a969bf149d8767eb912c10976e48806823304bec64db0b50635240093911736b6f5b3a358713d882fb522da3afc5ce818ccc80b7a3a5834e2dc2d2fc6f8252198f82885d45e3171a6abc7319602c309f74250bc1e5f6c42a1d1dadfb589d6ebf6e2f5fab456abee5038d0b55eb961dda18334110173a8db62f4fa41cf6aeb47d62ae179e2c45d60657c70e3549734437e3098d948a1f709079427c3fdab87f6d2abad9d35326f69aa40a8d76c8b5147539ea9b80c18cf32248ea2429c0fcbe506c4c98790a885c5c34104e130e520f2741666b984be1892e5552454d1750ae76dbb52688bef7edcf286f61bfdecbffb277549fe144c71f908fc1b4831e0062386600e0ecb61fa2227c4ecd51b4e14bf412b438b9c839bea9ec8a15616fadedba57e7cb0e727289ecc014dc9fb21f3619533355a5c614cce36016196c503e7df99acca67025d2744c8b428575c89897314a822c8010ec8e2a0b085e2f6e11d3acd29382da799d5d51ab110666d49d3030268cf903d08000000000000009d065e806ed89f46cacb5fe4cd5be3bb2c7e287df2ce18637ee8b0def95a3395004e3d739fe3f34fba26ecdd47ff86795b59c06101699a99e1e8098bf0206d453c738fa8b2110037ea9bb72e4a600b2f6cb49695ec7e9b61bba6360ce105d681970592cf3ff05381d5df9be8c7d6ce64914211f0c84d5aa8addca85ffaa656bcdf576fc2f52514e3e5ea7d23ff296ab746913ddabc437ca5cedec9a85f48aac54601888d82f2bdfc0f908fb544329fd740ae969dedb427cfd12bfd094eda6126f7fad7ba2c38811f0893a08c670804e88b94d355bcf517cbfb8e45934b3c7ed13b5ab309b0996ba1778c82f462b9fbc67ee8a06dd1e7ff7a584fdb0a3eb1a4f7857f8af8b60c27027a83a9c4b65f727c7f861e2a497a53da9efead3c11fc22dce14e1621a678a37794f08e5ca62bf036590a4680c45b0152bbfcc8bdb727b40f504750a356fc1ef044d038415ca57f26a6191512dcc31373dfc6feab298c2f761bb48ac177656160be1c0bb37dc45a6eb6db84c3681939f479dee630108ad479eb8815bd9e65838c171686e907d212e10d26ab0d6cae312db3180e0cc642c67a822c9702a344d3242b94a20aad40788fe539769ff33b777b14a175e5d9980414e2281c52f05540174eae1d83006ad74ee5f2214d032b4cce90029b9ca8af3ae4eeae1b3463cbc078c51db509802158cce5fa9cdf4c3b35ee3c622b4b96b9d0f6a5598e1eea82cf27a3f61bdd5808acc5eae715be2e1068884e49baab264c2575645f1fcaf5b07cb001e3c661656959ab665462be436f79b14076903fe18921d25393d770b8f2039b2791167ace1d95fee3534ab872e639196a5364bd79ddc91d2c049a83eb7c0add3e3fabcb070d475bf544327d908fc8df486ffb040db05a5bbcf34f23a65b69f31b65bb2e2f960430d3abe9172738fe647521a2760975174f549cce5d1f6ce51cc96a47596cd171322e18c183813fa58fca62a1841083c210957709b68f46bd4c5aaf893dbba8fc9556f419e49f4afeedf3f70d182a5626b7a655b41773180f32b80e259bc6136680752c88d877df708e578fc515522ae69fce6e871ed20a38457fcc176f7e359011a43bf67cd31251a152a1ff6ab7ba2ea4c0c2a142f6b02f711befd521b32a35b00a38b4dbc00c7c773e4677129ee43a94061a5d1258ae10f13ec26bf3f9dd509fbbf401a957b76c5bea039c552b72151a7e6d4c00c599e9b39c13171b1ceb5949a34b2fe3fd3e56a9dbeb7cbdc82ae928a90b65d9f533075dd0d7cba12ffee7b3650373137fa8ae25f0e4237355e4a65577234f3f1345294234ae62ff1c899bbe6869afab2132dfc5e3c71670e59c488de7b8da39e9e29f64abd5151e486bf178ec193b72cfc93b362b41e099c78f22e81e6cb1b74922d715037ae015ea3c3834dd516221c5a446c34ac71aebdd8d8de9ad0d2e2c1d4a039c23f99a7256cbb9ccd8450d7a5a49854ce6f4b1f108824a7339c08ee6d21329a04f7024ffd48f081496e210a56e437ec073b78c7ed0ed0e235f256c18a680854195f450f733f6b0208fa2f9aa4d8d9d4c53690d02acc9d3f5f84a12eb2b27de105106e1f45ed8380001932b7b112d2137fc57be3d684260bea8c216249479ee578ca14de22622d54f7c0ccaa9486fe447d36116ad2b51d13a473c732c068244d6b6065ef191eae289a8c1dcc1264c5e9395996bdbdce6a6c8c303ed9a272c0f1e058e921e7d2cf83dd21a356ac9b1c2e8d4a6da22cfa3c6ae6c3b3ce3ce38bd569be66f0f30ccbff5930783d8f048874c36a6f1ea8b028c8cd1acaf828dabc10f2d912087bd4fc0bb016f90b06cc2d9cefec47daaf618dc4e44e2fb9dc11796dffc70316c990418a16752a42d31d0001d975d884e55fb46ae694bfa83be7d7537ce98525391376e844fe8fee3f7170fdcd05b09a2211a957f8e16c1ccb485d21c186bd88c383dda7731efc6e6fd7dc931b1517199af8d7cf8c3a3d5222c419e3c27d27872689df26bf65c9dd63110f12c9d03b4ebc661b7dc69da1e22575860220a3f54108a7bf08d2f48e5cbe473de2fda525c8a64a60561f6f5c1a15a0ffffba7adb488c6362f4914f2e6ead87dd5ea0a824b5b486755a24838f32b9dd00e92bfa0480a21b6562cb2e04fbb8a7c5dad3bbe5ac5f4d6213719e347961d198bbcfb99a50d7327c0f4f68058d0b46d71a4d64402062405dda774dca879920b2785a313e3c616e791c8687f54cb66fc4dc121dc0af9fcbbed360d180aee5008e604977873738b8d2f2400cc6cc0270541c0fee88430e01e201b917e151b2efbb332d66ace606edbe66ec49b911c1639d2b911c95ce00e82b01438bfd698fa271d18a1d6504529b7a113dbd3494365aa0112f4b350495f76c1529063744457b6518721eefbe8e27781467f63846cb0f4a5b48c184201d95d70e9d7423311f3c3833035bb47ba629ca707f42271d3cf7c47fc5266eb1dca27f5d70b2a177b64c6d5628c5764717d1db6d2ae13e13b9a8217e2f3d64d735bf2f19d68250d553ece5214b499b0ebb0d75fcaf8f6a46de37bac2155677582f419ef84f7e41a80fdc48c773269627f331c42afc2aa46712b55f3fc2c7e36b26add96fe03a56122042453e9a890ec3bc6bbb1813d90f0fa37d8551cab8862fe75171a01d1af4efa6be9146e521f704180a0da228b222e81de07c9b1f65415c4794a2a2a50c0385233ac19cf2a4236f5e526231867dded0869fb44b5762925a6416f660b5ed55608c1dbe1cfaa4706e181cdfb103a8e466c5c679322e22b911d0278f6105c402f39f28311bd1f64a47b3eb4d5a2d99e28308ebcf43581a654f647df956aabca459d146eb96ececad853babd92eb34a901488b56f3726641432ad334fa20accd363894fba5212247e6d8ef4c7f20e54ef1f1c81dfe2c6610231491b53856c0ba97ff7de37754ce0af03cb823630477decef2fdd2ae96f97dc5aae788be8be7b5d5e44239e7b39c75885869c00948de5261ec9e62d18ea80256e111e7f2ca6484270d13c29451b65096d526360c118129800367dd8debb2542594465e484eff349cc18c058d6dc5d91b2cac0b1293aaa58c9f4f816d3aac353c32b1d25d313072cc3e114fffdc2dea9cb133719467d8cb957e0d029ce0b82e77e7ffa2e98c8f4fa975680f996a8db08bfff8e9e7bbabed5d4572c43d22877b45b3fdefc90d61b0362258acd5950bd1ec7eaee8f2703ef50eab471580ad221e1437ca7b10234fa9ee59ffdddd1461612926a1557b79833039e72d39af31396448c03560355762195fe4b44c4d33e8aeca85b039bd2d79318d677bc4dfc9bbba27bb63adfb6e2f8e5933b9d2353bee5def42c89d5a6d9fc9f17066591cda89eae9e44a5b5e716eeba79fbbf176852758ed06b970b2ebc108f20a89c0e3eab82bd38aef15ba04f59ba97dc7f354bf5515d459b0890e0af945a5c7168001b9ecfc8c8509420916380bc790c3a26b16cb997002ee62539bc2216c0316676cab658fe812c94e72651627c501672271ef002870f887d9c574afbdd0887c32c190bea374044a2314377ce44090f18c946864be712bda210731eb4fb8a01e9c614bbe30772dee15f4504595fecf8729e52bf428ff9505c58c4ab296164ac092ffbf40f27e2c9f9865d7bab3692b6b3ef7ce96dedf87750b020ef58b4aeea1a881ceda3da5126545a468f7becea1d53533ad94930ee278f699301830d7e58aac459b7c3288c377c2be063ad501856b0b7b3e2270c2d830ca7c44c060dd70bdb91edd964b6c7fbcf1c772a559076fed0014b2f5a8678cae521a31e2c48ea75076894e3d1abfbbe16f14f6c0ce29e701fd339e2e7554f646128ae86999f766f294311318227a81eae02db71fe92f80c6aab822fcfb650e49d55ff38f972a2cdef50d244326bdb756cf28c4a84b7f5d8d0aa0876adacf20105db6bedc08838f125fc7409ea1f023fd375237a3b78dc9ef1e788e355be1ab9f827ccc1bdb140bd2230a9d5a6c0fff37ee521b9a5c0b7e5a5afc8d70cbf27715865411c517f8dcf0a8607f49db91dd763f1964be2caea29a763d8ca0c7bb53fb57b5e25d056916b756e255cca8cbd85d891ae9d9068ad6c267c1a7fca6582918f23c423773bc2fbf1a3db5a36b30f8386621de5d204591bc0aed068b60d11db8791f40a432c08334cdcacf6d1c63cb39a9c149c03cf7477a85b178ab2d5d87593cdcb4bfb13f90411dd8bd8917599e51a484f9d41139b257691a586c062933f29dcbefc012f4b940a995704ecf86542404da548f3915f21f33b56239177f6e4064d921094e1295de8fc30900000000000000eec9a49947327d7693da0ea4de8551d2145910baa3305bc9dd1e1e6eabf911e893f3e0dc7b2e44120ac6ca6497d8fc6301d96be488b01ceabb30e4d03c9b29bed0f506a8ea698411c53dbb066bff7e7104b377cccc3efcc2fcbd17f5a969efa8fb785cd5f1409c81d77ecc3dd09ee9d3cc7fef504a69c22701997bd2f8c27dcaf7f5a19e276db7e8d39383f3a6033b74176aa70fe6393dd9c743317336635ce216ff72d495b8687b5e637bffdcc2d3d9d97a982281f4c0212eaa34f0d54a17431689c037aa9cbd5cfb2d4bf08a69cde84459b181f66b7547b0a4d885e525ba107148c882e2ba555c8a19b55b34a73f36bd191ee16668a981f27df9d360dd555a99f033361493112ef201d7eda6ebee01dc87c10a8cdc63918eb554908fbfb309f2fe8890814ee97ec5d9832db8805805782a1e0dba713c6856308381bb6601c00b4c58c8729251a35595ff05e09951e89bd97996bb4a30c5af662ede04a252b514bb4040bceab78af8579fc2942ce5bcc4d68c68a8144a3adb438ecb74bff0056d298a6eaaa4654f97cd8bf3e87e168e900fee7e8ed0cd3632af256169e51c9f33431849a95d77c9798ffe846e8e193f401c69898ceb9bbd47062f545c65dcbdb3df046ee4e9b6671ed5035e09c886597a8a46eff7c4d972ff675e4428f08bac45659e423d00587cd31175f63e5f44fbb4a4084cb6af8425c9a77d8195de6888f7f911665cec1a222d20da812c9cba09194b2fc377326ccfb70a5b763f4a6fe7d6eec17362f5f6bcfd95de88832c8ba2ca04f241d02ae35acc945fd752bc5aad95b140102dee269fa26eaff2c2204022ca5a5feea60155dd274cf5d869fa0d40b13f72c0c839c1c39fbd0b0d645675670f2576e47118b395a916c64abca51478afa5b30796ec275501a6a826a47122f2ded90d121fc78f21807c9ec78e113de68496b7d9e713e19374edb69060e8562153aa10e587a61f73879084a8ed5e3614b79cf25ac9296d723c1344fff24639a93ca3304fd8a710b80199a7fb2086927e4f1c296e5daeadad06825a04476365a317ed74847c7bda20c00484ab599a415bfa26799d041e2ae28844a65a4469b842038f1b935b1c0d49cc6111afcb44e0d193da83d95f358e68fc03fae5e00d33b440876fb7dfd83ca760d61ac4ae3e3cfdea9286d4fb26876d7382ef947f91f318c6b393a678d66f191c9c4110cf177ada12fd907382b83047defe3a9bc357fceac8724afe9c2cca4f79f44e9acd1860676597b5f7325b96786e2c437ecb15ab8ca3cdb26d79d2557e858528638ca5322e3e37a180a4706ae5b780827f61e0f9d8bffe2d732418d891faa2cbbb33b29e6bdc93ebcccf3f3017cb265318d4d31afbeb43049a6f136448b5cbdeb9bfe34ca7d3c612dbf43df6a8868c8d8f7a3615238d3e9ab83e2be4df5d2be3c4ea640399e62f361ee1f34553afbf88f33972da827864af0589a0dc71e9b79802c021266b2107fe007c12842b1ed0bf1a77529e5a5bd9ca7a9e39a78dcf5b4723d66bb9791adecaadb8375410b8d5cc5823f339f0a1f3de3d84804b5014f1048473e719ea12d81aef9292f99c39f71d6ead8921942641c008a5ef87e752397579e6333ed2d889e6acf393e8c8e4577cd2c659ba2a6c58d8862215b5630dce04953b26c2403ee3dde05c9f71f8ec3577ea83cdc7fc889e264882fa4d9131ad58eb796f20ab1832bef5ace5db774f05b02f11a81aad9153785de483d4da2e917010bee84cc9a09e4b9a87966965ef5df1832ae1d52b80e1d931a2835f772524541ba1b71d9aba451782cb20be59cd13bc44ac41855643f614bec40167cce4336776517087921e6abe792ef61219852db78b49facb620f5157d6a78dca85c5c5ccdfa10ad0ed77844727294be6ae102a608e863b0ed0668e634729925714143d8126f3654f34171a91e35cae62d495ba4c48ed2b291c792d6b750c9fdbc5fd4ba7e8b28d5ab46fa91a1f3d345784eb4c1f558619e77f5a4840c584303a499eff1c2b100356a5bdf32dd4ada98329e6fc6383272e3e89f4d18a56b7cbb88e942d464702fea7d9f91912a901b2422c906c481c427659e91e62305b227635556b9d9f7d4771108044464aaab87bfc430671103b256975f097530cc46ddd14eeea17c17e285c10146322617ea20d6816f7a7a4b6fc9b90dd98e7b83c9aa3b1b8fc98cef0f74aad62ea2fc3e4fdf51832f3384b3b4a6b6b72d523052d8d933fc8e464e6766f95a19e29212d4b149e36501252554616b72e5d2c113c86530d2a43daf4ef4af38ad4f5009cac453a6ee507d39d30ba98cde7c798c7201a83391f4c8c2dbd0c6914974b24782ee78790cafa96bc661f3b51e8b68d3a24b859e5c127e0326ff5c14093015e24f5f8fdd940f31f6b583f1e4af4f7999b30b154f8f9971aea81d66b401850610ec11ce9b067f285b19cf3d12393ce1bb922b898899a946605e52f4f81493172050f24ee0b3e1aace86f66d7029c7cd91dcd6dc06dde09110a074b61e7a9b4d475336863dfd501246202454bef5898b3896ae378f09f9ac34f921d251c46a80f57dd6421751b00beacc8e09911f73eb5628da767d1cf46c46348092496350b1021be8dc4f6f82f26d6e7115845c1227f0252cfcf73155b75676ef6fe3451e8a2439408a71167f75796399b8c78e018ec155b7146a23bca3a3b13822a1f60063257404f119652a57a44b907063476a69d7b4ed675521690bf629c07290b3f5f3bd5624d043f94d25140c1f631d011f990c26b1f8b55ee5430a0914ba56d7e0b122a7f8c60b7cd8e5267336f01945d927ecc84cdbcc576643d2d9a4f812cd7027735d95fecf00e85e1865a6c493600a37ab3ca94542954dd19c91380692da8596f06f17a164396c505748e2e7a9f719d865ecbea331c6e6a2f6aa90443f3c952b2c5326b96ba1c2f060c6bd5947e06650b40b2ffda56ca869e5d2a1052a9923c85000d45226315d5b8d49f6d729a87cc5f1de62c6ad9e5e347e8540f6d685a2444e180f5dc388a0c02191d6a918e12e9cf5a802eac59ca6390258730e639daca48affa58665fd42e0286775eed9592352a3785cde2515f370960bb289ca8d3a0c7cac66274aba329e215a9b2be57696b71775cb55b2f836ec7408bb48006c512963d07a68d705cc2f1615a2a198d3517d3324502c67f035abc0f739d8398e0820aacb40b5e86bf0c21a34cd5a069e2653c9cee3245ae17eeb7517c1caddc385fc870acc86d951c7348710832ca5d2542f5a0b8467310dbb1b0874af96f92f0d3ab477ab49b9b0ef41ccb5e7a27d6c1e40cd47ecbf5304e8334ec3cbb56ddb0796a1a64a10b1971776f0ec30113ee266b59526dcdb3016d26e0c02001551c4f5b4293854a0b40da0945492da0ffc6010dadafc5f9e57bd24d5c95374387d8362240adbfa1a4c75a891059062042de77902dd557612a35a699924a909bf522a1a357e8c44ac3da80850ef071146d5dca52a21a9996d68a061891500ba7e60f400baf058004c7c226da0500dc172d611fb227f1ae4e49c93b97fd05e3854a7994676e1481579918257d9e76167ad1fa3e7dfd5982295e75177f6fbdab76e1dfc91d3b9fe9f272d981692e7947adecbfd5c821348f371d5cea4d13dabdaea04869376c742d18fd419f2d18e3f74b8ecd256ea02f15377a11004c21b61adfa6fed9391ae5336abb03b62f098f5985f257812a2c35aeb9ca5ff68a40838e2d2fbc4896724bcd84114ac6739b6fef9aa1c7b9d5ba0e7eb96679aa0974ee4d7093c818b3d3e01b5bb301abd95ac86acbc18d3e4162f3ac99f86f4df9e63b6a58c9d41afc903a1a7ac53f0b5f6e31b802367cef00c03d142f23a8bec76d62ffdf7cc8810e34230f76ce60970932aebb9d35f9f90f662f332c5e9226b7008c31c250082c6762214a14ae1ef73d1d7464d11adcafbe9ff4e163a8f8502ede5a9fb322a59a0647c4bbf7d5019ef994187069cd4a4a3a9598544521f64848a9b92dc8b4b1d16c0528db1da87a1edcae6e05d63bd6603c6ab177f398019b5c3c8c807ae46e4f301a553b73be391e21f06d8cba49886416d508187918d2f16d8085ab07612ab6499bd9fd1c4ee6d33ffc49b5588a54fe3d362a914094ecfc76fae5685f2d919a651c35c31954756dc6d5d369754755ac248851ab108c0284e0c69683c1a97206a85cc694b7b369e7bd07aa3c7d47f03f744ffe08ce7c3366ec1f8e320d1f85d832934688206ffeb203119a03fea67ed52fbdf91df4f2a1aef49e69f242766c1b3abd25d0d8f3b91b361107ac74a0c898593cba83754a55b78988ad1059f4bc8007a6643ea53e297e5e1e506e0d11ecf73d21e15a9182db19304aa0c057790e56f940159d1b0748d14e4986d15b2ad364f85db37724e6e3111ce291f35050cf3dcf50ec09100cbd7f3ad25306527423eb4d899d7f99e8d5b88ddf9be36d9a12a69fb5bffb8b539a3c20e7c83398c637f3d77d2a101b783833e71ab9f856a1f48c6ab164438f823419145af131f62c53ff3b95316c3d2a55c18e7df0b30f74208ec60abcbc671342328e70201c76192a9d33de0a7f5e17aaf4284096d86c3a8f86b1bf1c82191842a6015b0f29d3d4d85b92401200ee99190827f25e0b96c7be32a910d955d0f69d7b08bc0935b4cfb4ae7d2d6abfc94741b202717b5f7648bbc52993573449b455b425bb40b047d6e4bd4044ba93614efcf1ecc11e30ebd593fb", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0x0, 0x8000000000000001, {0x7, 0x2d, 0x6, 0x495a802, 0x6, 0x7fc, 0x87aa8, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 5.854618112s ago: executing program 4 (id=560): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) dup(r2) r9 = dup(r0) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) 5.100369504s ago: executing program 4 (id=561): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4400c0) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000300)={r0, 0x7, 0x0, 0x8}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7, 0x0, 0x0}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r9, &(0x7f0000000000), 0x0, 0x100004, 0x81) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r8, 0x0, r7}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0xff06, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0xdcd1, 0xc8, 0x40}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x33, 0x8, 0x2f, 0x6, 0x40000, 0x4, 0x2, 0x81}}) 4.779496475s ago: executing program 0 (id=562): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)}, {&(0x7f00000006c0)="fe2ff97f1b06dd569a05502020378f3a814f6616341156eef71523bd011b606714cbba7a0aa06f89c5a01e8530dbc114bb08c2b28831f155abeba7fcbae372122aeb3ed3c1799a8ec83ae6836a1b5ef139267e2b24f559bd46dc99d44aa1d0d749069e22812db3328a1f33e56b52fd4b614098bf163be6d7e709417e839b784a6aac9210c06c69f06fdba22c6d88fdbf364d20786a3f455b3d4d6007bbdf936ce45df15b7ac3a51ec755d30d09226fd4999a3695bb8638", 0xb7}], 0x2, &(0x7f0000000800)}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.452577037s ago: executing program 2 (id=563): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfffffc01, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getxattr(0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000240)={0x1, 0x1, 0x1, 0xfffe}) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r1, 0xffffffffffffffff, 0x0) 4.048377211s ago: executing program 4 (id=564): socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x800003}, 0x0) sched_getattr(0x0, &(0x7f0000000180)={0x38}, 0x38, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8000000000000006) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) write$UHID_INPUT(r6, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x80a0000, 0x8fff, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x9, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x49, 0xe, 0xd7, '\x00', 0x86}, {0xc, 0x2, 0x2, '\x00', 0x2}, {0xd, 0x81, 0xf9, '\x00', 0x4}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x9c, 0x1, 0xa, '\x00', 0xfe}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0xb}, {0x2, 0x0, 0x1, '\x00', 0x7f}, {0x45, 0x51, 0x6, '\x00', 0x8}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x3, '\x00', 0x7}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd2, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x8, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x0, '\x00', 0x2}, {0xf9, 0x61, 0x4, '\x00', 0x7}, {0x8, 0xf, 0x0, '\x00', 0x6}]}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e19, 0x1, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="c8000000420001000200000000000000030100004242000050000100aabbccddeee1aabbccddeee286dd600000000014064020010db800000000000000000000000120010db800000000000000000000000204d20050000000000000000050021000000000000000040002005c00030058000b005400080020010db8000000000000000000000099000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffff"], 0xc8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) 3.963983133s ago: executing program 3 (id=565): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000580)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)=""/60, 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/143, 0x8f}, {&(0x7f0000000800)=""/104, 0x68}, {&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/129, 0x81}, {&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f0000000d00)=""/117, 0x75}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/169, 0xa9}, {&(0x7f0000001e40)=""/239, 0xef}], 0x9, &(0x7f0000001f40)=""/54, 0x36}, 0x6}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002e780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80140001800c000100636f756e746572000400f780140001800c000100636f756e7465720004000280100001800c0001006e6f747261636b001400000010000100"/249], 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000002100), 0x50400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000002380)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xa) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xa}, 0x8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 3.824623442s ago: executing program 0 (id=566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x1, 0x3, 0x9, 0x0, 0x0}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f0000000600), 0x10) sendto$l2tp(r3, &(0x7f0000000640)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000680)={0x2, 0x0, @loopback}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000700)=@x86={0x7b, 0x40, 0x5, 0x0, 0x2, 0x5, 0x7, 0x7, 0x8, 0x9, 0x8, 0x7, 0x0, 0x96a3, 0x8, 0x48, 0x26, 0xfa, 0x3, '\x00', 0xa, 0x8}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000740)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000780)={0x1, 0x0, [{0x1b, 0x0, 0xc00}]}) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000007c0)=0xfffffffd, 0x4) syz_usb_connect(0x0, 0x51, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0xd2, 0x1d, 0xf4, 0x40, 0x867, 0x9812, 0xb082, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x5, 0x0, 0x30, 0x4, "", [{{0x9, 0x4, 0x58, 0xb, 0x5, 0x4, 0xa3, 0xc5, 0x10, [], [{{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x3, 0x1b, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x448, 0x1, 0xa, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x48, 0x2, 0x8, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x4, 0x5, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x7, 0x5f}}]}}]}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x22) r7 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000400)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000480)={0x4, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000004c0)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000500)={0xc7, 0x100008, 0x3}) r9 = syz_open_dev$dri(&(0x7f0000000540), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000580)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)={r2}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x2, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x3}, {0x0, 0x9, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x3, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.784121916s ago: executing program 1 (id=567): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x1, 0xfffffff5}) r3 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000100)="900100"/64) syz_usb_ep_write(r3, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004400)="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", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0x50, 0x0, 0x8000000000000001, {0x7, 0x2d, 0x6, 0x495a802, 0x6, 0x7fc, 0x87aa8, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0x1, 0x0, 0x0) 1.509728716s ago: executing program 0 (id=568): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x5, 0xfffffffffffffec7, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0xd) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x143142, 0xc0) ftruncate(r2, 0x2007ffb) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88800, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x69}) sendfile(r1, r2, 0x0, 0x1000000201002) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000700)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0x100, 0x1}) 1.202084851s ago: executing program 2 (id=569): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20040084) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x9, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xfffffffa, 0x400, 0x3, 0x259, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x61eb, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r8, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(r11, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @remote, 0x0}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(r11, &(0x7f0000000300), 0xf) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r14 = eventfd(0x800) fgetxattr(r14, &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f0000001fc0)=""/4096, 0x1000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r15 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r15, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) 462.08113ms ago: executing program 4 (id=570): syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x3, 0x0, [{@empty}, {@private=0x200000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @ssrr={0x89, 0x3, 0xc5}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0xfffd}}}}}}, 0x0) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='!\'})\x00', 0xfffffffffffffffc) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00030400"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000240)=ANY=[]) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0200007fa4900e2cdca409000000000000009c6e8272da36f421e9bf4bdf4293db60186079d927ccf9456148571748cfb2875900"/66, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0xfffffffb) add_key(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000c40)={0x0, 0x9, 0x5a}, &(0x7f0000000c80)=ANY=[@ANYBLOB], &(0x7f0000000cc0)="c0f9de2cbe1bdeac7e", &(0x7f0000000d00)=""/90) syz_clone3(&(0x7f0000000d80)={0x2041000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r4, &(0x7f0000000e00)=[{&(0x7f0000000e40)=""/112, 0x70}], 0x1) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000ec0)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000f80), 0x40, 0x8302) socket$tipc(0x1e, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r6, 0x0, 0x0) io_setup(0x6, &(0x7f0000002000)=0x0) io_submit(r7, 0x1, &(0x7f0000002040)=[0x0]) 211.022991ms ago: executing program 1 (id=571): r0 = socket$kcm(0x10, 0x2, 0x4) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munlockall() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x9}}, 0x1e) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e0400008100000000", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000540001002bbd70000200000007000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="0101010064010101150000000000000000000086dd000000"], 0x38}, 0x1, 0x0, 0x0, 0x2004804}, 0x80c0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0xc0046209, 0x100000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000380)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x60, 0xffffffff80000000, 0x83, 0xffff, 0x1, 0xabe6, 0x0, 0x0, 0x80, 0x5}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000002bc0)=[{{&(0x7f0000002900)={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe255}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)="b5", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @local, 0x4}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000001c0)="d7", 0x1}], 0x1}}], 0x3, 0x20044040) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x5, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34f0a87871305eb2}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x2, @empty}}}, &(0x7f0000000540)=0x9c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) signalfd4(r5, &(0x7f0000000200)={[0x1]}, 0x8, 0x80000) 87.200505ms ago: executing program 3 (id=572): syz_usb_connect(0x0, 0x45, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000780)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000800)="9c", 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f00000008c0)="2ea8", 0x2}], 0x1}}], 0x2, 0x48000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000a80)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000b40)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x1, 0x2, 0xb}, 0x20) r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000900)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000080)={0x0, 0x3291, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x1, 0xb12, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x8}}}, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000b80)={0x1, 0x0, 0x0, &(0x7f0000000bc0)=""/74, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000c80)={0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/182, &(0x7f0000000d80)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000e00)=0x206) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000e40)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x40110) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000f80)={@id={0x2, 0x0, @auto="b97966be023d208b8964152778594a1c"}}) connect$vsock_stream(r7, &(0x7f0000000fc0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 0s ago: executing program 2 (id=573): socket(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0xd, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4000000) r2 = syz_open_dev$cec(&(0x7f0000000300), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) r3 = syz_io_uring_setup(0xf00, &(0x7f00000003c0)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f0000000080)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500), 0x40000000040201, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000540)) syz_usb_connect(0x2, 0x38, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000580)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000005c0)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) syz_io_uring_submit(r4, r5, r6, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000840)={0x6, 0x6, 0x5, 0x6, 0xf0b7}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000880)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) kernel console output (not intermixed with test programs): ap rc-empty [ 166.856784][ T5686] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 166.862255][ T5686] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input28 [ 166.928287][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 166.928327][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 166.929634][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 166.929658][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 166.929673][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 166.929689][ T6576] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 166.929988][ T6576] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 167.108867][ T6909] fuse: Unknown parameter 'group_id00000000000000000000' [ 167.128936][ T5686] usb 5-1: USB disconnect, device number 21 [ 167.152085][ T6581] cxacru_cm: 3 callbacks suppressed [ 167.152098][ T6581] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 167.152110][ T6581] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 167.152706][ T6581] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 167.152736][ T6581] ATM dev 0: poll status: error -71 [ 167.152743][ T6581] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 167.152752][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d52c200 submission failed (-8)! [ 167.152766][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d52c100 submission failed (-8)! [ 167.152775][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d52c000 submission failed (-8)! [ 167.152784][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d52c900 submission failed (-8)! [ 167.238990][ T6581] usb 4-1: USB disconnect, device number 13 [ 167.413766][ T6928] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 167.543070][ T6570] usb 3-1: USB disconnect, device number 16 [ 168.054117][ T6570] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 168.366775][ T1018] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 168.516860][ T1018] usb 4-1: Using ep0 maxpacket: 32 [ 168.520964][ T1018] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.522581][ T1018] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 168.522596][ T1018] usb 4-1: config 0 has no interface number 0 [ 168.522619][ T1018] usb 4-1: config 0 interface 184 has no altsetting 0 [ 168.533648][ T1018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.533692][ T1018] usb 4-1: Product: syz [ 168.533712][ T1018] usb 4-1: Manufacturer: syz [ 168.533725][ T1018] usb 4-1: SerialNumber: syz [ 168.577482][ T1018] usb 4-1: config 0 descriptor?? [ 168.914513][ T29] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.065013][ T29] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 169.066339][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.066388][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 169.066402][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 169.066423][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.095723][ T6571] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.206720][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 169.206738][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.266335][ T6571] usb 2-1: device descriptor read/64, error -71 [ 169.412432][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 169.412451][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 169.412460][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 169.412469][ T1018] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 169.412622][ T1018] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 169.534416][ T6571] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 169.665860][ T6571] usb 2-1: device descriptor read/64, error -71 [ 169.775879][ T6571] usb usb2-port1: attempt power cycle [ 169.789081][ T29] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 169.789104][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 169.789391][ T29] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 169.789435][ T29] ATM dev 0: poll status: error -71 [ 169.789446][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 169.789459][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff88803603e700 submission failed (-8)! [ 169.789481][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff88803603e900 submission failed (-8)! [ 169.876937][ T29] usb 1-1: USB disconnect, device number 15 [ 170.022266][ T6590] usb 4-1: USB disconnect, device number 14 [ 170.115263][ T6571] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 170.135482][ T6571] usb 2-1: device descriptor read/8, error -71 [ 170.217208][ T6965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.252'. [ 170.374939][ T6571] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 170.398352][ T6571] usb 2-1: device descriptor read/8, error -71 [ 170.506508][ T6571] usb usb2-port1: unable to enumerate USB device [ 171.908499][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.275110][ T5686] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 172.355096][ T6581] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 172.371775][ T6571] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 172.430532][ T5686] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 172.451785][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 172.451800][ T5686] usb 4-1: Product: syz [ 172.451807][ T5686] usb 4-1: SerialNumber: syz [ 172.476004][ T5686] usb 4-1: config 0 descriptor?? [ 172.504875][ T6581] usb 5-1: Using ep0 maxpacket: 32 [ 172.505720][ T6581] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.509851][ T6581] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.509872][ T6581] usb 5-1: config 0 has no interface number 0 [ 172.509933][ T6581] usb 5-1: config 0 interface 184 has no altsetting 0 [ 172.539267][ T6571] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 172.557490][ T6571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.557538][ T6571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 172.557561][ T6571] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 172.557596][ T6571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.563749][ T6581] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.563763][ T6581] usb 5-1: Product: syz [ 172.563771][ T6581] usb 5-1: Manufacturer: syz [ 172.563778][ T6581] usb 5-1: SerialNumber: syz [ 172.646083][ T6581] usb 5-1: config 0 descriptor?? [ 172.821293][ T12] IPVS: starting estimator thread 0... [ 172.854131][ T6981] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 172.907250][ T6995] IPVS: using max 48 ests per chain, 115200 per kthread [ 173.048657][ T5686] usb 4-1: USB disconnect, device number 15 [ 173.269689][ T6991] fuse: Unknown parameter 'group_id00000000000000000000' [ 173.293847][ T6571] cxacru_cm: 3 callbacks suppressed [ 173.293864][ T6571] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 173.293876][ T6571] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 173.299921][ T6571] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 173.299968][ T6571] ATM dev 0: poll status: error -71 [ 173.299980][ T6571] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 173.299994][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff88803655af00 submission failed (-8)! [ 173.300016][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff88803655ae00 submission failed (-8)! [ 173.300033][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff88803655a700 submission failed (-8)! [ 173.300050][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff888021f26f00 submission failed (-8)! [ 173.381537][ T6571] usb 2-1: USB disconnect, device number 18 [ 173.384944][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 173.384969][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 173.411765][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888021f26f00 submission failed (-19)! [ 173.427022][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 173.427039][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 173.427049][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 173.427058][ T6581] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 173.427257][ T6581] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 174.132754][ T6590] usb 5-1: USB disconnect, device number 22 [ 174.369664][ T7006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.434237][ T6581] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 174.875000][ T6570] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 174.949793][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.265'. [ 175.044512][ T6570] usb 5-1: Using ep0 maxpacket: 8 [ 175.048379][ T6570] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.053364][ T6570] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.053378][ T6570] usb 5-1: config 0 has no interface number 0 [ 175.053405][ T6570] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.053444][ T6570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.113311][ T6570] usb 5-1: config 0 descriptor?? [ 175.145173][ T6570] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 175.726749][ T30] audit: type=1326 audit(1792881906.430:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.267" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7fd9f559 code=0x7ffc0000 [ 175.728805][ T30] audit: type=1326 audit(1792881906.430:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.267" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7fd9f559 code=0x7ffc0000 [ 175.797339][ T30] audit: type=1326 audit(1792881906.500:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.2.267" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7fd9f559 code=0x7ffc0000 [ 177.231820][ T7043] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.616355][ T6581] usb 5-1: USB disconnect, device number 23 [ 178.314113][ T6571] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 178.465225][ T6571] usb 5-1: Using ep0 maxpacket: 32 [ 178.465799][ T6571] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.466746][ T6571] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.466768][ T6571] usb 5-1: config 0 has no interface number 0 [ 178.466807][ T6571] usb 5-1: config 0 interface 184 has no altsetting 0 [ 178.470711][ T6571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.470733][ T6571] usb 5-1: Product: syz [ 178.470746][ T6571] usb 5-1: Manufacturer: syz [ 178.470758][ T6571] usb 5-1: SerialNumber: syz [ 178.537834][ T6571] usb 5-1: config 0 descriptor?? [ 178.669788][ T6570] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 178.834814][ T6570] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 178.838358][ T6570] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.838408][ T6570] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 178.838449][ T6570] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 178.838473][ T6570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.193552][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.193573][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.215047][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 179.215065][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 179.215075][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.215084][ T6571] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 179.215242][ T6571] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 179.640314][ T7057] fuse: Unknown parameter 'group_id00000000000000000000' [ 179.660876][ T6570] cxacru_cm: 139 callbacks suppressed [ 179.660897][ T6570] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 179.660914][ T6570] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 179.661204][ T6570] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 179.661264][ T6570] ATM dev 0: poll status: error -71 [ 179.661276][ T6570] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 179.661290][ T6570] ATM dev 0: usbatm_submit_urb: urb 0xffff8880582e0500 submission failed (-8)! [ 179.661313][ T6570] ATM dev 0: usbatm_submit_urb: urb 0xffff8880582e0d00 submission failed (-8)! [ 179.661325][ T6570] ATM dev 0: usbatm_submit_urb: urb 0xffff8880582e0c00 submission failed (-8)! [ 179.661334][ T6570] ATM dev 0: usbatm_submit_urb: urb 0xffff8880582e0800 submission failed (-8)! [ 179.744898][ T6570] usb 4-1: USB disconnect, device number 16 [ 179.764094][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff8880582e0800 submission failed (-19)! [ 179.837301][ T6581] usb 5-1: USB disconnect, device number 24 [ 180.301100][ T7070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.358571][ T7074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.278'. [ 181.632328][ T7098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.064991][ T6576] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 182.225241][ T6576] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 182.227092][ T6576] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.227122][ T6576] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 182.227135][ T6576] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 182.227157][ T6576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.925034][ T6571] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 182.928757][ T7101] fuse: Unknown parameter 'grou00000000000000000000' [ 182.972218][ T6576] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 182.972239][ T6576] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 182.973055][ T6576] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 182.973093][ T6576] ATM dev 0: poll status: error -71 [ 182.973105][ T6576] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 182.973119][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888026a34800 submission failed (-8)! [ 183.040656][ T6576] usb 1-1: USB disconnect, device number 17 [ 183.094874][ T6571] usb 4-1: Using ep0 maxpacket: 32 [ 183.098249][ T6571] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.100287][ T6571] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 183.100308][ T6571] usb 4-1: config 0 has no interface number 0 [ 183.100354][ T6571] usb 4-1: config 0 interface 184 has no altsetting 0 [ 183.103722][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.103743][ T6571] usb 4-1: Product: syz [ 183.103756][ T6571] usb 4-1: Manufacturer: syz [ 183.103770][ T6571] usb 4-1: SerialNumber: syz [ 183.166472][ T6571] usb 4-1: config 0 descriptor?? [ 183.828164][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 183.828183][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 183.828711][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 183.828726][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 183.828735][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 183.828745][ T6571] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 183.828886][ T6571] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61 [ 183.964501][ T7119] fuse: Bad value for 'fd' [ 184.268570][ T6576] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 184.375608][ T6571] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 184.416544][ T6576] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 184.417344][ T6576] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 184.417357][ T6576] usb 1-1: config 0 has no interface number 0 [ 184.417378][ T6576] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 184.417391][ T6576] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 184.417404][ T6576] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.433988][ T6576] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 184.434050][ T6576] usb 1-1: Product: syz [ 184.434063][ T6576] usb 1-1: SerialNumber: syz [ 184.506535][ T6576] usb 1-1: config 0 descriptor?? [ 184.521855][ T6576] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 184.534139][ T6571] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.536594][ T6571] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.536622][ T6571] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.536657][ T6571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.538845][ T6576] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input29 [ 184.600408][ T7115] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 184.615924][ T6571] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.636758][ T6576] usb 4-1: USB disconnect, device number 17 [ 184.881816][ T6571] usb 3-1: USB disconnect, device number 18 [ 184.972434][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 184.985011][ T6590] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 185.137171][ T6590] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 185.139313][ T6590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.139361][ T6590] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 185.139385][ T6590] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 185.139423][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.164086][ T6576] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 185.293111][ C0] cm109_urb_ctl_callback: 10 callbacks suppressed [ 185.293142][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.293372][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.293533][ T6570] usb 1-1: USB disconnect, device number 18 [ 185.293591][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 185.293611][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 185.334137][ T6576] usb 4-1: Using ep0 maxpacket: 16 [ 185.349742][ T6570] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 185.363600][ T6576] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 185.365285][ T6576] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 185.365307][ T6576] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.365349][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.433305][ T6576] usb 4-1: config 0 descriptor?? [ 185.459089][ T6576] pxrc 4-1:0.0: Could not find endpoint [ 185.672061][ T7128] netlink: 41 bytes leftover after parsing attributes in process `syz.3.288'. [ 185.830328][ T7125] fuse: Bad value for 'user_id' [ 185.830342][ T7125] fuse: Bad value for 'user_id' [ 185.849963][ T6590] cxacru_cm: 4 callbacks suppressed [ 185.849983][ T6590] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 185.850003][ T6590] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 185.850297][ T6590] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 185.850339][ T6590] ATM dev 0: poll status: error -71 [ 185.850347][ T6590] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 185.850355][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88803580af00 submission failed (-8)! [ 185.850369][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88803580a300 submission failed (-8)! [ 185.850379][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88803580a800 submission failed (-8)! [ 185.850388][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff888075b94f00 submission failed (-8)! [ 185.936217][ T6590] usb 5-1: USB disconnect, device number 25 [ 185.954129][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888075b94f00 submission failed (-19)! [ 186.274231][ T6572] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 186.429243][ T6572] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 186.447322][ T6572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.447346][ T6572] usb 3-1: Product: syz [ 186.447360][ T6572] usb 3-1: Manufacturer: syz [ 186.447373][ T6572] usb 3-1: SerialNumber: syz [ 186.471279][ T6572] usb 3-1: config 0 descriptor?? [ 186.505822][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 186.505843][ T7141] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.291'. [ 186.505857][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 186.505873][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 187.280149][ T7150] netlink: 'syz.2.290': attribute type 39 has an invalid length. [ 187.338150][ T6640] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 187.338280][ T7135] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 187.680591][ T6572] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 187.680609][ T6572] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 187.680625][ T6572] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 187.725885][ T6572] usb 3-1: USB disconnect, device number 19 [ 187.969725][ T7153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.293'. [ 189.021496][ T6572] usb 4-1: USB disconnect, device number 18 [ 189.139532][ T7168] nftables ruleset with unbound set [ 189.174863][ T7168] logitech-hidpp-device 0003:046D:C082.0001: hid_field_extract() called with n (221) > 32! (syz.3.297) [ 189.197016][ T7172] mmap: syz.4.296 (7172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.222351][ T6590] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 189.351152][ T7174] fido_id[7174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.357862][ T30] audit: type=1326 audit(1792881921.060:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.2.303" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d7fd9f559 code=0x0 [ 191.875832][ T7221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.053875][ T7224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.307'. [ 192.177910][ T7229] xt_cgroup: path and classid specified [ 192.201665][ T7229] input: syz1 as /devices/virtual/input/input30 [ 192.503941][ T6639] nvmet: connect request for invalid subsystem t! [ 192.504545][ T7229] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 193.126266][ T6639] IPVS: starting estimator thread 0... [ 193.214775][ T7243] IPVS: using max 52 ests per chain, 124800 per kthread [ 193.244083][ T6572] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 193.395183][ T6572] usb 1-1: Using ep0 maxpacket: 16 [ 193.395990][ T6572] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 193.397033][ T6572] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 193.397055][ T6572] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.397097][ T6572] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.455546][ T6572] usb 1-1: config 0 descriptor?? [ 193.483459][ T6572] pxrc 1-1:0.0: Could not find endpoint [ 193.685918][ T7240] netlink: 41 bytes leftover after parsing attributes in process `syz.0.311'. [ 194.045383][ T6590] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.186801][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186847][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.228629][ T6590] usb 3-1: Using ep0 maxpacket: 32 [ 194.230076][ T6590] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 194.251294][ T6590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.251308][ T6590] usb 3-1: Product: syz [ 194.251316][ T6590] usb 3-1: Manufacturer: syz [ 194.251323][ T6590] usb 3-1: SerialNumber: syz [ 194.252908][ T6590] usb 3-1: config 0 descriptor?? [ 194.289196][ T6590] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 194.356842][ T6572] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 195.567572][ T7245] sg_write: data in/out 614412/136 bytes for SCSI command 0x0-- guessing data in; [ 195.567572][ T7245] program syz.2.322 not setting count and/or reply_len properly [ 195.689753][ T6590] gspca_stk1135: reg_w 0xd err -71 [ 195.690806][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690814][ T6590] gspca_stk1135: Sensor write failed [ 195.690828][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690833][ T6590] gspca_stk1135: Sensor write failed [ 195.690847][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690852][ T6590] gspca_stk1135: Sensor read failed [ 195.690865][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690870][ T6590] gspca_stk1135: Sensor read failed [ 195.690873][ T6590] gspca_stk1135: Detected sensor type unknown (0x0) [ 195.690891][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690896][ T6590] gspca_stk1135: Sensor read failed [ 195.690909][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690913][ T6590] gspca_stk1135: Sensor read failed [ 195.690926][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690930][ T6590] gspca_stk1135: Sensor write failed [ 195.690943][ T6590] gspca_stk1135: serial bus timeout: status=0x00 [ 195.690947][ T6590] gspca_stk1135: Sensor write failed [ 195.690993][ T6590] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 195.817116][ T6590] usb 3-1: USB disconnect, device number 20 [ 196.262599][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 196.262640][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 196.262661][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 196.262916][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 196.262955][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 196.663553][ T7286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.686383][ T7284] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 196.704645][ T6579] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 196.871638][ T6576] usb 1-1: USB disconnect, device number 19 [ 197.605779][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.4.321'. [ 198.384203][ T6572] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 198.416130][ T7299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'. [ 198.534146][ T6572] usb 2-1: Using ep0 maxpacket: 32 [ 198.535013][ T6572] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 198.536982][ T6572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.541876][ T6572] usb 2-1: config 0 descriptor?? [ 198.594423][ T6572] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 199.332369][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.651966][ T7338] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 200.165462][ T6590] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 200.294592][ T6590] usb 4-1: device descriptor read/64, error -71 [ 200.418763][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 200.428480][ T7346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.534098][ T6590] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 200.664685][ T6590] usb 4-1: device descriptor read/64, error -71 [ 200.774576][ T6590] usb usb4-port1: attempt power cycle [ 201.087303][ T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 201.115514][ T6590] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 201.135879][ T6590] usb 4-1: device descriptor read/8, error -71 [ 201.155738][ T6572] gspca_vc032x: reg_w err -71 [ 201.155774][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155784][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155792][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155800][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155811][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155815][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155820][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155824][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155828][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155832][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155837][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155841][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155845][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155850][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155854][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155858][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155863][ T6572] gspca_vc032x: I2c Bus Busy Wait 00 [ 201.155867][ T6572] gspca_vc032x: Unknown sensor... [ 201.155926][ T6572] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 201.157244][ T6572] usb 2-1: USB disconnect, device number 20 [ 201.374334][ T6590] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 201.395286][ T6590] usb 4-1: device descriptor read/8, error -71 [ 201.504635][ T6590] usb usb4-port1: unable to enumerate USB device [ 201.604902][ T6576] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.765209][ T6576] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 201.768169][ T6576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.768215][ T6576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 201.768230][ T6576] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 201.768258][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.194461][ T6590] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 202.344077][ T6590] usb 5-1: Using ep0 maxpacket: 8 [ 202.345387][ T6590] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 202.353076][ T6590] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.353098][ T6590] usb 5-1: config 0 has no interface number 0 [ 202.353136][ T6590] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.353159][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.410243][ T6590] usb 5-1: config 0 descriptor?? [ 202.440183][ T6590] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 202.465071][ T7355] fuse: Unknown parameter 'group_i00000000000000000000' [ 202.487818][ T6576] cxacru 3-1:1.0: send of cm 0x84 failed (-71) [ 202.487834][ T6576] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 202.489723][ T6576] cxacru 3-1:1.0: send of cm 0x88 failed (-71) [ 202.489753][ T6576] ATM dev 0: poll status: error -71 [ 202.489761][ T6576] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 202.489770][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888075ae3200 submission failed (-8)! [ 202.489784][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888075ae3e00 submission failed (-8)! [ 202.489794][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888075ae3600 submission failed (-8)! [ 202.489803][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888075ae3500 submission failed (-8)! [ 202.594092][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888075ae3500 submission failed (-8)! [ 202.598480][ T6576] usb 3-1: USB disconnect, device number 21 [ 202.835775][ T6581] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 203.014360][ T6581] usb 2-1: Using ep0 maxpacket: 16 [ 203.019075][ T6581] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 203.044473][ T6581] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 203.044491][ T6581] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.044505][ T6581] usb 2-1: config 1 interface 0 has no altsetting 0 [ 203.087811][ T6581] usb 2-1: string descriptor 0 read error: -22 [ 203.087902][ T6581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.123822][ T7366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.091761][ T6590] usb 5-1: USB disconnect, device number 26 [ 204.564554][ T7384] futex_wake_op: syz.2.340 tries to shift op by 144; fix this program [ 204.901590][ T7392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.052139][ T6576] usb 2-1: USB disconnect, device number 21 [ 205.244153][ T6579] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 205.428510][ T6579] usb 4-1: Using ep0 maxpacket: 32 [ 205.430428][ T6579] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 205.431475][ T6579] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 205.431489][ T6579] usb 4-1: config 0 has no interface number 0 [ 205.431512][ T6579] usb 4-1: config 0 interface 184 has no altsetting 0 [ 205.475364][ T6579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.475383][ T6579] usb 4-1: Product: syz [ 205.475391][ T6579] usb 4-1: Manufacturer: syz [ 205.475398][ T6579] usb 4-1: SerialNumber: syz [ 205.491459][ T6579] usb 4-1: config 0 descriptor?? [ 205.911192][ T7404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.922929][ T6579] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 205.922946][ T6579] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 205.922956][ T6579] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 205.923095][ T6579] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 206.084178][ T6590] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 206.238899][ T6590] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 206.243915][ T6590] usb 1-1: config 0 interface 0 has no altsetting 0 [ 206.243938][ T6590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.271791][ T6590] usb 1-1: config 0 descriptor?? [ 206.374487][ T6576] usb 4-1: USB disconnect, device number 24 [ 206.521658][ T7413] netlink: 184 bytes leftover after parsing attributes in process `syz.3.347'. [ 206.749275][ T6590] acrux 0003:1A34:F705.0002: unknown main item tag 0x6 [ 206.774265][ T6590] acrux 0003:1A34:F705.0002: Force Feedback for ACRUX game controllers by Sergei Kolzun [ 206.802264][ T6590] input: HID 1a34:f705 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1A34:F705.0002/input/input31 [ 206.934018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 206.960031][ T6590] acrux 0003:1A34:F705.0002: input,hidraw0: USB HID v0.00 Joystick [HID 1a34:f705] on usb-dummy_hcd.0-1/input0 [ 206.984386][ T6576] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 207.135589][ T6576] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 207.136883][ T6576] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.136928][ T6576] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.136947][ T6576] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.136968][ T6576] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.137004][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.241844][ T6579] usb 1-1: USB disconnect, device number 21 [ 207.284135][ T7416] fido_id[7416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 207.411086][ T6576] usb 4-1: USB disconnect, device number 25 [ 208.209542][ T6581] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 208.364317][ T6581] usb 1-1: Using ep0 maxpacket: 8 [ 208.365086][ T6581] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 208.366205][ T6581] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.366219][ T6581] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.366243][ T6581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 208.366256][ T6581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 208.366278][ T6581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.372346][ T6581] hub 1-1:1.0: bad descriptor, ignoring hub [ 208.372360][ T6581] hub 1-1:1.0: probe with driver hub failed with error -5 [ 208.372666][ T6581] cdc_wdm 1-1:1.0: skipping garbage [ 208.372674][ T6581] cdc_wdm 1-1:1.0: skipping garbage [ 208.443197][ T6581] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 208.443228][ T6581] cdc_wdm 1-1:1.0: Unknown control protocol [ 208.903577][ T6581] usb 1-1: USB disconnect, device number 22 [ 209.397658][ T6581] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 209.546326][ T6581] usb 1-1: Using ep0 maxpacket: 8 [ 209.561184][ T6581] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 209.563166][ T6581] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.563179][ T6581] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 209.563209][ T6581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 209.563223][ T6581] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 209.563245][ T6581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.631559][ T6581] hub 1-1:1.0: bad descriptor, ignoring hub [ 209.631575][ T6581] hub 1-1:1.0: probe with driver hub failed with error -5 [ 209.631882][ T6581] cdc_wdm 1-1:1.0: skipping garbage [ 209.631890][ T6581] cdc_wdm 1-1:1.0: skipping garbage [ 209.662426][ T6581] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 209.662438][ T6581] cdc_wdm 1-1:1.0: Unknown control protocol [ 209.924937][ T7425] kvm: apic: phys broadcast and lowest prio [ 210.055339][ T6572] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 210.104520][ T6581] usb 1-1: USB disconnect, device number 23 [ 210.191952][ T7448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.207368][ T6572] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.207886][ T6572] usb 2-1: not running at top speed; connect to a high speed hub [ 210.207904][ T6572] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.44 [ 210.209101][ T6572] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.253900][ T6572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.253922][ T6572] usb 2-1: Product: syz [ 210.253936][ T6572] usb 2-1: Manufacturer: syz [ 210.253948][ T6572] usb 2-1: SerialNumber: syz [ 210.516108][ T6590] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 210.528001][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.531290][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.551050][ T7443] ip_tables: iptables: counters copy to user failed while replacing table [ 210.671932][ T7453] tipc: Can't bind to reserved service type 0 [ 210.676991][ T6590] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 210.692804][ T6590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.692834][ T6590] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 210.692848][ T6590] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 210.692871][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.154400][ T6581] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 211.313355][ T7460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.320915][ T6581] usb 1-1: Using ep0 maxpacket: 32 [ 211.328476][ T6581] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.343773][ T6581] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 211.343796][ T6581] usb 1-1: config 0 has no interface number 0 [ 211.352376][ T6581] usb 1-1: config 0 interface 184 has no altsetting 0 [ 211.371636][ T6581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.371657][ T6581] usb 1-1: Product: syz [ 211.371670][ T6581] usb 1-1: Manufacturer: syz [ 211.371679][ T6581] usb 1-1: SerialNumber: syz [ 211.400833][ T6581] usb 1-1: config 0 descriptor?? [ 211.452520][ T6590] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 211.452565][ T6590] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 211.453701][ T6590] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 211.453777][ T6590] ATM dev 0: poll status: error -71 [ 211.453789][ T6590] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 211.453803][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d07ec00 submission failed (-8)! [ 211.453817][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d07ee00 submission failed (-8)! [ 211.453827][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88803388de00 submission failed (-8)! [ 211.453837][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff88803388d400 submission failed (-8)! [ 211.554071][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88803388d400 submission failed (-8)! [ 211.580204][ T6590] usb 5-1: USB disconnect, device number 27 [ 211.839393][ T6581] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 211.839424][ T6581] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 211.839442][ T6581] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 211.839648][ T6581] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 212.267364][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 212.306703][ T6590] usb 1-1: USB disconnect, device number 24 [ 212.485045][ T6581] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 212.567384][ T6572] usb 2-1: USB disconnect, device number 22 [ 212.634731][ T6581] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.635698][ T6581] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.635727][ T6581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.638279][ T6581] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.638300][ T6581] usb 4-1: Manufacturer: syz [ 212.643062][ T6581] usb 4-1: config 0 descriptor?? [ 212.944572][ T6581] rc_core: IR keymap rc-hauppauge not found [ 212.944591][ T6581] Registered IR keymap rc-empty [ 212.950677][ T6581] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 212.981138][ T6581] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 212.984760][ T7480] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 212.984775][ T7480] PKCS7: Only support pkcs7_signedData type [ 213.020114][ T6581] usb 4-1: USB disconnect, device number 26 [ 214.394349][ T6581] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 214.568519][ T6581] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.573769][ T6581] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.573800][ T6581] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.611496][ T6581] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.611511][ T6581] usb 2-1: Manufacturer: syz [ 214.627653][ T7503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.368'. [ 214.640925][ T6581] usb 2-1: config 0 descriptor?? [ 214.856022][ T6581] rc_core: IR keymap rc-hauppauge not found [ 214.856035][ T6581] Registered IR keymap rc-empty [ 214.860018][ T6581] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 214.885573][ T6581] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 215.046392][ T29] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 215.098893][ T6581] usb 2-1: USB disconnect, device number 23 [ 215.203767][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 215.239893][ T29] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 215.239920][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 215.239941][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.325132][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 215.325150][ T29] usb 5-1: Product: syz [ 215.325157][ T29] usb 5-1: Manufacturer: syz [ 215.325165][ T29] usb 5-1: SerialNumber: syz [ 215.968734][ T7516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.137556][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.137903][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.304350][ T6572] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 216.800368][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 216.818573][ T7531] openvswitch: netlink: Invalid VLAN frame [ 216.965755][ T7528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.116696][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 217.174677][ T7535] veth1_to_bond: entered promiscuous mode [ 217.266692][ T7535] veth1_to_bond: entered allmulticast mode [ 217.409824][ T4949] Bluetooth: hci4: Malformed LE Event: 0x02 [ 217.876989][ T7534] veth1_to_bond: left allmulticast mode [ 217.877072][ T7534] veth1_to_bond: left promiscuous mode [ 218.637957][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 218.646740][ T29] usb 5-1: USB disconnect, device number 28 [ 218.668431][ T29] usblp0: removed [ 218.934140][ T6572] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 219.084115][ T6576] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 219.103405][ T6572] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 219.126177][ T6572] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.132484][ T6572] usb 3-1: config 0 descriptor?? [ 219.234789][ T6576] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.235934][ T6576] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 219.235982][ T6576] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.236998][ T6576] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.237014][ T6576] usb 1-1: Manufacturer: syz [ 219.292668][ T6576] usb 1-1: config 0 descriptor?? [ 219.363476][ T6572] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 219.474070][ T6576] rc_core: IR keymap rc-hauppauge not found [ 219.474088][ T6576] Registered IR keymap rc-empty [ 219.477333][ T6576] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 219.509413][ T6576] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 219.738587][ T6572] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 219.738613][ T6572] [drm] Initialized udl on minor 1 [ 219.744183][ T6576] usb 1-1: USB disconnect, device number 25 [ 220.024579][ T29] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 220.115379][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.115800][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.159972][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.382'. [ 220.169621][ T29] usb 4-1: device descriptor read/64, error -71 [ 220.360269][ T7571] syz_tun: entered allmulticast mode [ 220.404447][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 220.554138][ T29] usb 4-1: device descriptor read/64, error -71 [ 220.664503][ T29] usb usb4-port1: attempt power cycle [ 220.714426][ T6592] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 220.874363][ T6592] usb 5-1: Using ep0 maxpacket: 8 [ 220.875070][ T6592] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 220.879637][ T6592] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 220.879652][ T6592] usb 5-1: config 0 has no interface number 0 [ 220.905040][ T6592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.905083][ T6592] usb 5-1: Product: syz [ 220.905096][ T6592] usb 5-1: Manufacturer: syz [ 220.905109][ T6592] usb 5-1: SerialNumber: syz [ 220.962088][ T6592] usb 5-1: config 0 descriptor?? [ 221.025162][ T29] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 221.060319][ T29] usb 4-1: device descriptor read/8, error -71 [ 221.284131][ T7571] nfs: Unknown parameter '@' [ 221.314800][ T29] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 221.335320][ T29] usb 4-1: device descriptor read/8, error -71 [ 221.364116][ T5686] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 221.457681][ T29] usb usb4-port1: unable to enumerate USB device [ 221.519579][ T5686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.539286][ T5686] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.575055][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.575071][ T5686] usb 1-1: Product: syz [ 221.575079][ T5686] usb 1-1: Manufacturer: syz [ 221.575090][ T5686] usb 1-1: SerialNumber: syz [ 221.765206][ T7580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.867364][ T5686] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 222.001612][ T5686] usb 1-1: USB disconnect, device number 26 [ 222.020217][ T5686] usblp0: removed [ 223.166004][ T29] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 223.381637][ T6592] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22 [ 223.419132][ T6592] usb 5-1: USB disconnect, device number 29 [ 224.297686][ T7598] libceph: resolve 'c' (ret=-3): failed [ 224.313902][ T7597] ªªªªªª: renamed from vlan0 [ 224.330287][ T7599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.936060][ T6572] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 224.958568][ T6572] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 225.028610][ T6592] usb 3-1: USB disconnect, device number 22 [ 225.284671][ T6576] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 225.444590][ T6576] usb 2-1: Using ep0 maxpacket: 8 [ 225.448018][ T6576] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.452967][ T6576] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.452982][ T6576] usb 2-1: config 0 has no interface number 0 [ 225.453004][ T6576] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.453028][ T6576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.507487][ T6576] usb 2-1: config 0 descriptor?? [ 225.560418][ T6576] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 226.164279][ T6592] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 226.315960][ T6592] usb 3-1: Using ep0 maxpacket: 16 [ 226.316827][ T6592] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 226.319005][ T6592] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 226.319029][ T6592] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.319071][ T6592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.372208][ T6592] usb 3-1: config 0 descriptor?? [ 226.397618][ T6592] pxrc 3-1:0.0: Could not find endpoint [ 226.680081][ T7610] netlink: 41 bytes leftover after parsing attributes in process `syz.2.392'. [ 227.045764][ T7615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.395'. [ 227.444081][ T29] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 227.597381][ T29] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 227.599372][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.600228][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 227.600245][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 227.600271][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.724067][ T6571] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 227.854202][ T6571] usb 5-1: device descriptor read/64, error -71 [ 228.040430][ T6576] usb 2-1: USB disconnect, device number 24 [ 228.094208][ T6571] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 228.230551][ T6571] usb 5-1: device descriptor read/64, error -71 [ 228.334742][ T6571] usb usb5-port1: attempt power cycle [ 228.351286][ T7616] fuse: Unknown parameter 'group_id00000000000000000000' [ 228.410044][ T29] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 228.410062][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 228.410323][ T29] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 228.410350][ T29] ATM dev 0: poll status: error -71 [ 228.410357][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 228.410365][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff8880778d7800 submission failed (-8)! [ 228.410379][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff8880778d7e00 submission failed (-8)! [ 228.410390][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff8880753f9700 submission failed (-8)! [ 228.410402][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff8880356db700 submission failed (-8)! [ 228.499475][ T29] usb 1-1: USB disconnect, device number 27 [ 228.612048][ T7628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.675469][ T6571] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 228.694611][ T6571] usb 5-1: device descriptor read/8, error -71 [ 228.934228][ T6571] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 228.955339][ T6571] usb 5-1: device descriptor read/8, error -71 [ 229.066936][ T6571] usb usb5-port1: unable to enumerate USB device [ 229.334163][ T6576] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 229.516798][ T6576] usb 4-1: Using ep0 maxpacket: 8 [ 229.518873][ T6576] usb 4-1: unable to get BOS descriptor or descriptor too short [ 229.518901][ T6576] usb 4-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd [ 229.519980][ T6576] usb 4-1: config 2 has an invalid interface number: 232 but max is 0 [ 229.519994][ T6576] usb 4-1: config 2 has no interface number 0 [ 229.520017][ T6576] usb 4-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024 [ 229.520031][ T6576] usb 4-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.520043][ T6576] usb 4-1: config 2 interface 232 has no altsetting 0 [ 229.597856][ T6576] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.597878][ T6576] usb 4-1: Product: syz [ 229.597886][ T6576] usb 4-1: Manufacturer: syz [ 229.597894][ T6576] usb 4-1: SerialNumber: syz [ 229.619874][ T7631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 229.892619][ T7631] xt_hashlimit: max too large, truncated to 1048576 [ 229.914909][ T5686] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 230.064378][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 230.065118][ T5686] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.066968][ T5686] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.066989][ T5686] usb 2-1: config 0 has no interface number 0 [ 230.067024][ T5686] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.067065][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.123154][ T5686] usb 2-1: config 0 descriptor?? [ 230.176510][ T5686] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 230.611672][ T6576] usb 4-1: USB disconnect, device number 33 [ 230.735075][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.818575][ T5686] usb 3-1: USB disconnect, device number 23 [ 231.478592][ T7644] ªªªªªª: renamed from vlan0 (while UP) [ 231.559960][ T7649] netlink: 164 bytes leftover after parsing attributes in process `syz.3.402'. [ 231.897521][ T29] usb 2-1: USB disconnect, device number 25 [ 232.197420][ T7652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.197442][ T7652] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 232.488900][ T7652] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.491595][ T7652] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 232.544967][ T7652] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.545872][ T7652] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 232.619462][ T7652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.619477][ T7652] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 232.676909][ T7652] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.676925][ T7652] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 233.117794][ T7670] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 233.117812][ T7670] PKCS7: Only support pkcs7_signedData type [ 233.140469][ T29] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 233.301074][ T29] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 233.303449][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.303486][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 233.303500][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 233.303522][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.018674][ T7663] fuse: Unknown parameter 'grou00000000000000000000' [ 234.073421][ T29] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 234.073446][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 234.083588][ T29] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 234.083641][ T29] ATM dev 0: poll status: error -71 [ 234.083654][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 234.083669][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff888036de1400 submission failed (-8)! [ 234.083692][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff888036de1000 submission failed (-8)! [ 234.083709][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff888036de1a00 submission failed (-8)! [ 234.083726][ T29] ATM dev 0: usbatm_submit_urb: urb 0xffff88802b2ac500 submission failed (-8)! [ 234.172191][ T29] usb 2-1: USB disconnect, device number 26 [ 234.184232][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88802b2ac500 submission failed (-19)! [ 234.964093][ T6571] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 235.116590][ T6571] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 235.120205][ T6571] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.120242][ T6571] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 235.120256][ T6571] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 235.120278][ T6571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.554258][ T5686] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 235.706424][ T5686] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 235.711966][ T5686] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.711989][ T5686] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.712022][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.762883][ T5686] usb 2-1: config 0 descriptor?? [ 235.820733][ T7687] fuse: Bad value for 'fd' [ 235.843383][ T6571] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 235.843403][ T6571] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 235.843661][ T6571] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 235.843688][ T6571] ATM dev 0: poll status: error -71 [ 235.843695][ T6571] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 235.843703][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff888074d4fd00 submission failed (-8)! [ 235.926594][ T6571] usb 4-1: USB disconnect, device number 34 [ 238.045063][ T6571] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 238.247961][ T6571] usb 4-1: Using ep0 maxpacket: 8 [ 238.249427][ T6571] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.265076][ T6571] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.265098][ T6571] usb 4-1: config 0 has no interface number 0 [ 238.265142][ T6571] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.265180][ T6571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.318431][ T6571] usb 4-1: config 0 descriptor?? [ 238.349538][ T6571] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 238.508294][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.957902][ T6576] usb 2-1: USB disconnect, device number 27 [ 240.144010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 240.535422][ T6590] usb 4-1: USB disconnect, device number 35 [ 241.767576][ T7746] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 241.767595][ T7746] PKCS7: Only support pkcs7_signedData type [ 242.420877][ T6576] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 242.595139][ T6576] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 242.597894][ T6576] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.597925][ T6576] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 242.597938][ T6576] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 242.597960][ T6576] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.956423][ T6579] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 243.125850][ T6579] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 243.145891][ T6579] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.145946][ T6579] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 243.145970][ T6579] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 243.146020][ T6579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.287743][ T7748] fuse: Unknown parameter 'grou00000000000000000000' [ 243.342387][ T6576] cxacru_cm: 4 callbacks suppressed [ 243.342402][ T6576] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 243.342419][ T6576] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 243.342799][ T6576] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 243.342867][ T6576] ATM dev 0: poll status: error -71 [ 243.342881][ T6576] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 243.342894][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888057491000 submission failed (-8)! [ 243.342917][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c05e00 submission failed (-8)! [ 243.342934][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888023353e00 submission failed (-8)! [ 243.342945][ T6576] ATM dev 0: usbatm_submit_urb: urb 0xffff888023353600 submission failed (-8)! [ 243.439905][ T6576] usb 5-1: USB disconnect, device number 34 [ 243.444042][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888023353600 submission failed (-19)! [ 243.946535][ T7754] fuse: Bad value for 'fd' [ 243.964339][ T6579] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 243.964363][ T6579] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 243.965383][ T6579] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 243.965423][ T6579] ATM dev 0: poll status: error -71 [ 243.965431][ T6579] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 243.965440][ T6579] ATM dev 0: usbatm_submit_urb: urb 0xffff88807772a900 submission failed (-8)! [ 244.031194][ T6579] usb 2-1: USB disconnect, device number 28 [ 244.679357][ T7775] netlink: 'syz.4.427': attribute type 10 has an invalid length. [ 244.768587][ T7775] team0 (unregistering): Port device team_slave_0 removed [ 244.796464][ T7775] team0 (unregistering): Port device team_slave_1 removed [ 245.695300][ T7774] ªªªªªª: renamed from vlan0 (while UP) [ 245.718151][ T6590] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 245.874267][ T6590] usb 5-1: Using ep0 maxpacket: 8 [ 245.878181][ T6590] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.881069][ T6590] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.881083][ T6590] usb 5-1: config 0 has no interface number 0 [ 245.881105][ T6590] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.881128][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.944321][ T6590] usb 5-1: config 0 descriptor?? [ 245.976207][ T6590] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 246.454187][ T6590] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 247.568021][ T6571] usb 5-1: USB disconnect, device number 35 [ 247.580910][ T7791] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 248.023999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 248.640911][ T7791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.433'. [ 249.114412][ T6576] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 249.285381][ T6576] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.297085][ T5686] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 249.299821][ T6576] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.299843][ T6576] usb 5-1: config 0 has no interface number 0 [ 249.299865][ T6576] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 249.299878][ T6576] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.299894][ T6576] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.338119][ T6576] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.338133][ T6576] usb 5-1: Product: syz [ 249.338141][ T6576] usb 5-1: SerialNumber: syz [ 249.381553][ T6576] usb 5-1: config 0 descriptor?? [ 249.410109][ T6576] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 249.412921][ T6576] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input35 [ 249.464751][ T5686] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 249.465994][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.466047][ T5686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 249.466097][ T5686] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 249.466135][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.800125][ T6590] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 249.823598][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 249.945968][ T6590] usb 3-1: Using ep0 maxpacket: 32 [ 249.947932][ T6590] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 249.965690][ T6590] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 249.965709][ T6590] usb 3-1: config 0 has no interface number 0 [ 250.000307][ T6590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.000329][ T6590] usb 3-1: Product: syz [ 250.000337][ T6590] usb 3-1: Manufacturer: syz [ 250.000344][ T6590] usb 3-1: SerialNumber: syz [ 250.028298][ T6590] usb 3-1: config 0 descriptor?? [ 250.050865][ T6590] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 250.050885][ T6590] usb 3-1: selecting invalid altsetting 1 [ 250.050894][ T6590] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 250.093538][ T6590] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 250.093907][ T6590] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 250.121417][ T6590] usb 3-1: media controller created [ 250.149755][ T7810] fuse: Unknown parameter 'grou00000000000000000000' [ 250.161266][ T5686] cxacru_cm: 3 callbacks suppressed [ 250.161285][ T5686] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 250.161303][ T5686] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 250.161715][ T5686] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 250.161760][ T5686] ATM dev 0: poll status: error -71 [ 250.161772][ T5686] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 250.161786][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff888077a22b00 submission failed (-8)! [ 250.161832][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff888026a34100 submission failed (-8)! [ 250.161851][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff888026a34700 submission failed (-8)! [ 250.161868][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff888026a34000 submission failed (-8)! [ 250.259259][ T5686] usb 1-1: USB disconnect, device number 28 [ 250.274402][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff888026a34000 submission failed (-19)! [ 250.282574][ T6590] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.331005][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.331229][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.331375][ T29] usb 5-1: USB disconnect, device number 36 [ 250.331451][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 250.331472][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 250.388033][ T29] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 251.264448][ T5686] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 251.424084][ T6576] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 251.424522][ T5686] usb 4-1: Using ep0 maxpacket: 8 [ 251.430369][ T5686] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 251.433713][ T5686] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 251.433730][ T5686] usb 4-1: config 0 has no interface number 0 [ 251.433753][ T5686] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.433776][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.499156][ T5686] usb 4-1: config 0 descriptor?? [ 251.556307][ T5686] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 251.604658][ T6576] usb 2-1: Using ep0 maxpacket: 16 [ 251.626679][ T6590] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 251.629080][ T6590] zl10353_read_register: readreg error (reg=127, ret==-110) [ 251.652002][ T6576] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 251.670157][ T6576] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 251.670184][ T6576] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.670208][ T6576] usb 2-1: config 1 interface 0 has no altsetting 0 [ 251.744195][ T6576] usb 2-1: string descriptor 0 read error: -22 [ 251.744274][ T6576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.772665][ T7832] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 251.792804][ T7820] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 252.353696][ T6590] usb 3-1: USB disconnect, device number 25 [ 253.184715][ T6590] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 253.336595][ T6590] usb 3-1: Using ep0 maxpacket: 8 [ 253.338689][ T6590] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.340521][ T6590] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.340544][ T6590] usb 3-1: config 0 has no interface number 0 [ 253.340581][ T6590] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.340615][ T6590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.399270][ T6590] usb 3-1: config 0 descriptor?? [ 253.439892][ T6590] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 253.829639][ T5686] usb 2-1: USB disconnect, device number 29 [ 254.174706][ T5686] usb 4-1: USB disconnect, device number 36 [ 254.807532][ T6571] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 254.901753][ T29] usb 3-1: USB disconnect, device number 26 [ 254.958663][ T6571] usb 1-1: Using ep0 maxpacket: 16 [ 254.968530][ T6571] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 254.990559][ T6571] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 255.005397][ T6590] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 255.014180][ T6571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.014202][ T6571] usb 1-1: Product: syz [ 255.014215][ T6571] usb 1-1: Manufacturer: syz [ 255.014228][ T6571] usb 1-1: SerialNumber: syz [ 255.062272][ T6571] r8152-cfgselector 1-1: Unknown version 0x0000 [ 255.062294][ T6571] r8152-cfgselector 1-1: config 0 descriptor?? [ 255.615398][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.615449][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.915460][ T30] audit: type=1800 audit(1792881986.600:247): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.451" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 256.284894][ T6590] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 256.440218][ T6590] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 256.462699][ T6590] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.462730][ T6590] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 256.462745][ T6590] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 256.462766][ T6590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.173602][ T7877] fuse: Unknown parameter 'group_i00000000000000000000' [ 257.225065][ T6590] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 257.225083][ T6590] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 257.227596][ T6590] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 257.227631][ T6590] ATM dev 0: poll status: error -71 [ 257.227639][ T6590] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 257.227648][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff888074cc4c00 submission failed (-8)! [ 257.227661][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff888074cc4b00 submission failed (-8)! [ 257.227671][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff8880774b1500 submission failed (-8)! [ 257.227681][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff888057491800 submission failed (-8)! [ 257.330150][ T6590] usb 2-1: USB disconnect, device number 30 [ 257.334691][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888057491800 submission failed (-19)! [ 257.422654][ T6592] r8152-cfgselector 1-1: USB disconnect, device number 29 [ 257.625617][ T6576] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 257.777322][ T6576] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 257.778222][ T6576] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 257.778236][ T6576] usb 3-1: config 0 has no interface number 0 [ 257.778267][ T6576] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 257.778280][ T6576] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 257.778294][ T6576] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 257.779732][ T6576] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 257.779748][ T6576] usb 3-1: Product: syz [ 257.779757][ T6576] usb 3-1: SerialNumber: syz [ 257.860856][ T6576] usb 3-1: config 0 descriptor?? [ 257.872725][ T6576] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 257.891114][ T6576] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input36 [ 258.147019][ T7884] ªªªªªª: renamed from vlan0 (while UP) [ 258.288244][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 258.525804][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 258.525987][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 258.526157][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 258.526212][ T6576] usb 3-1: USB disconnect, device number 27 [ 258.526334][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 258.526344][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 258.580659][ T6576] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 258.597112][ T6592] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 258.710326][ T7900] netlink: 164 bytes leftover after parsing attributes in process `syz.1.457'. [ 258.738224][ T6579] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 258.769030][ T6592] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 258.806690][ T6592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.806739][ T6592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 258.806755][ T6592] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 258.806778][ T6592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.885516][ T6579] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 258.907337][ T6579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.907360][ T6579] usb 5-1: Product: syz [ 258.907370][ T6579] usb 5-1: Manufacturer: syz [ 258.907377][ T6579] usb 5-1: SerialNumber: syz [ 258.939091][ T6579] usb 5-1: config 0 descriptor?? [ 258.956904][ T6579] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 258.977254][ T6579] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.980699][ T6579] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 258.980733][ T6579] usb 5-1: media controller created [ 259.030623][ T6579] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.254955][ T6579] DVB: Unable to find symbol mt352_attach() [ 259.287433][ T7899] fuse: Bad value for 'fd' [ 259.486516][ T6579] DVB: Unable to find symbol nxt6000_attach() [ 259.486532][ T6579] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 259.513123][ T6579] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 259.526563][ T6579] dvb-usb: schedule remote query interval to 1000 msecs. [ 259.526577][ T6579] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 259.526639][ T6579] dvb-usb: bulk message failed: -22 (7/0) [ 259.526653][ T6579] dvb-usb: bulk message failed: -22 (7/0) [ 259.566088][ T7887] fuse: Unknown parameter 'group_i00000000000000000000' [ 259.597109][ T6592] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 259.597130][ T6592] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 259.597518][ T6592] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 259.597546][ T6592] ATM dev 0: poll status: error -71 [ 259.597553][ T6592] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 259.726041][ T6592] usb 1-1: USB disconnect, device number 30 [ 259.791872][ T7899] netlink: 116 bytes leftover after parsing attributes in process `syz.4.459'. [ 259.881412][ T7899] dvb-usb: bulk message failed: -22 (7/0) [ 259.894321][ T6579] usb 5-1: USB disconnect, device number 37 [ 260.029338][ T6579] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 261.414052][ T6571] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 261.576326][ T6571] usb 5-1: Using ep0 maxpacket: 8 [ 261.604511][ T6571] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 261.621281][ T6571] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.621304][ T6571] usb 5-1: config 0 has no interfaces? [ 261.621332][ T6571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.659557][ T6571] usb 5-1: config 0 descriptor?? [ 262.164067][ T6571] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 262.304303][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 262.346550][ T6571] usb 1-1: Using ep0 maxpacket: 8 [ 262.351631][ T6571] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.370991][ T6571] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.371006][ T6571] usb 1-1: config 0 has no interface number 0 [ 262.371028][ T6571] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.371050][ T6571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.404836][ T6571] usb 1-1: config 0 descriptor?? [ 262.442464][ T6571] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 262.858919][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 262.859039][ T7930] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.464'. [ 262.860152][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 262.860190][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 264.171476][ T6592] usb 5-1: USB disconnect, device number 38 [ 264.458926][ T7956] netlink: 76 bytes leftover after parsing attributes in process `syz.4.470'. [ 264.632766][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 264.632784][ T30] audit: type=1326 audit(1792881995.330:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.3.469" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86ed99f559 code=0x0 [ 264.843104][ T6592] usb 1-1: USB disconnect, device number 31 [ 265.535171][ T6592] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 265.684187][ T6592] usb 1-1: Using ep0 maxpacket: 8 [ 265.688612][ T6592] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 265.690651][ T6592] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.690674][ T6592] usb 1-1: config 0 has no interface number 0 [ 265.690698][ T6592] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.690720][ T6592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.707949][ T6592] usb 1-1: config 0 descriptor?? [ 265.767925][ T6592] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 265.856023][ T6571] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 266.007400][ T6571] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 266.012512][ T6571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.012558][ T6571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 266.012581][ T6571] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 266.012640][ T6571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.654142][ T6590] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 266.749101][ T7969] fuse: Unknown parameter 'group_i00000000000000000000' [ 266.783723][ T6571] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 266.783740][ T6571] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 266.788205][ T6571] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 266.788282][ T6571] ATM dev 0: poll status: error -71 [ 266.788294][ T6571] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 266.788309][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff88802c75fa00 submission failed (-8)! [ 266.788332][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff8880355c9b00 submission failed (-8)! [ 266.788350][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff8880355c9500 submission failed (-8)! [ 266.788367][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff8880355c9800 submission failed (-8)! [ 266.804627][ T6590] usb 3-1: device descriptor read/64, error -71 [ 266.894282][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff8880355c9800 submission failed (-8)! [ 266.902327][ T6571] usb 2-1: USB disconnect, device number 31 [ 267.044114][ T6590] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 267.174961][ T6590] usb 3-1: device descriptor read/64, error -71 [ 267.284285][ T6590] usb usb3-port1: attempt power cycle [ 267.644841][ T6590] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 267.664909][ T6590] usb 3-1: device descriptor read/8, error -71 [ 267.904139][ T6590] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 267.925861][ T6590] usb 3-1: device descriptor read/8, error -71 [ 268.035202][ T6590] usb usb3-port1: unable to enumerate USB device [ 268.192169][ T7982] ALSA: mixer_oss: invalid OSS volume 'tunl0' [ 268.275841][ T5686] usb 1-1: USB disconnect, device number 32 [ 269.166660][ T6590] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 271.537252][ T8019] xt_CT: No such helper "netbios-ns" [ 271.620046][ T30] audit: type=1326 audit(1792882002.320:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.2.481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d7fd9f559 code=0x0 [ 271.964072][ T29] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 272.139088][ T29] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 272.142096][ T29] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.186119][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 272.186136][ T29] usb 3-1: Product: syz [ 272.186144][ T29] usb 3-1: Manufacturer: syz [ 272.186151][ T29] usb 3-1: SerialNumber: syz [ 272.304200][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 272.525177][ T29] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 272.538286][ T29] usb 3-1: USB disconnect, device number 32 [ 272.558755][ T29] usblp0: removed [ 272.607550][ T6592] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 272.756454][ T6592] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 272.760007][ T6592] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.760055][ T6592] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 272.760079][ T6592] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 272.760105][ T6592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.821573][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 272.821593][ T8033] netlink: 1932 bytes leftover after parsing attributes in process `syz.4.484'. [ 272.821761][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 273.417763][ T8031] fuse: Unknown parameter 'group_id00000000000000000000' [ 273.450598][ T6592] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 273.450613][ T6592] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 273.452586][ T6592] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 273.452621][ T6592] ATM dev 0: poll status: error -71 [ 273.452628][ T6592] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 273.452637][ T6592] ATM dev 0: usbatm_submit_urb: urb 0xffff888077047b00 submission failed (-8)! [ 273.452651][ T6592] ATM dev 0: usbatm_submit_urb: urb 0xffff888077047700 submission failed (-8)! [ 273.452660][ T6592] ATM dev 0: usbatm_submit_urb: urb 0xffff888077047800 submission failed (-8)! [ 273.452670][ T6592] ATM dev 0: usbatm_submit_urb: urb 0xffff888077047f00 submission failed (-8)! [ 273.540499][ T6592] usb 1-1: USB disconnect, device number 34 [ 273.554026][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888077047f00 submission failed (-19)! [ 275.826772][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 276.644071][ T6579] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 277.254278][ T5686] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 277.404737][ T5686] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 277.405751][ T5686] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.405783][ T5686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 277.405796][ T5686] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 277.405818][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.025514][ T8074] fuse: Bad value for 'fd' [ 278.046348][ T5686] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 278.046365][ T5686] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 278.049954][ T5686] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 278.050002][ T5686] ATM dev 0: poll status: error -71 [ 278.050016][ T5686] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 278.050030][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880759d3d00 submission failed (-8)! [ 278.050052][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880759d3b00 submission failed (-8)! [ 278.050070][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880759d3900 submission failed (-8)! [ 278.050088][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880759d3000 submission failed (-8)! [ 278.135972][ T5686] usb 5-1: USB disconnect, device number 39 [ 278.154115][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff8880759d3000 submission failed (-19)! [ 278.203797][ T8082] netlink: 292 bytes leftover after parsing attributes in process `syz.1.496'. [ 278.591769][ T8089] loop6: detected capacity change from 0 to 524288000 [ 278.678297][ T8088] ======================================================= [ 278.678297][ T8088] WARNING: The mand mount option has been deprecated and [ 278.678297][ T8088] and is ignored by this kernel. Remove the mand [ 278.678297][ T8088] option from the mount to silence this warning. [ 278.678297][ T8088] ======================================================= [ 278.744597][ T8089] loop6: detected capacity change from 524288000 to 1 [ 278.785165][ T8089] Dev loop6: unable to read RDB block 1 [ 278.785193][ T8089] loop6: unable to read partition table [ 278.785316][ T8089] loop6: partition table beyond EOD, truncated [ 278.785326][ T8089] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 278.817996][ T6581] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 278.975024][ T6581] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 278.975994][ T6581] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 278.976032][ T6581] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.976969][ T6581] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 278.976991][ T6581] usb 1-1: Manufacturer: syz [ 278.980523][ T6581] usb 1-1: config 0 descriptor?? [ 279.144526][ T6581] rc_core: IR keymap rc-hauppauge not found [ 279.144544][ T6581] Registered IR keymap rc-empty [ 279.147644][ T6581] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 279.150067][ T6581] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 279.200595][ T6581] usb 1-1: USB disconnect, device number 35 [ 279.314579][ T6590] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 279.466782][ T6590] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 279.480256][ T6590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.480286][ T6590] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 279.480300][ T6590] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 279.480321][ T6590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.213407][ T8092] fuse: Unknown parameter 'group_id00000000000000000000' [ 280.233686][ T6590] cxacru 5-1:1.0: send of cm 0x84 failed (-71) [ 280.233705][ T6590] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 280.240842][ T6590] cxacru 5-1:1.0: send of cm 0x88 failed (-71) [ 280.240897][ T6590] ATM dev 0: poll status: error -71 [ 280.240910][ T6590] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 280.240924][ T6590] ATM dev 0: usbatm_submit_urb: urb 0xffff888029f8d800 submission failed (-8)! [ 280.296323][ T6590] usb 5-1: USB disconnect, device number 40 [ 280.412276][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 280.584067][ T6592] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 280.686507][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 280.686637][ T8110] netlink: 1932 bytes leftover after parsing attributes in process `syz.0.503'. [ 280.686651][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 280.686776][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 280.738118][ T6592] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 280.751577][ T6592] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.751623][ T6592] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 280.751638][ T6592] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 280.751660][ T6592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.308386][ T8122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.459995][ T8109] fuse: Bad value for 'fd' [ 281.477543][ T6592] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 281.478012][ T6592] ATM dev 0: poll status: error -71 [ 281.478028][ T6592] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 281.528261][ T6592] usb 2-1: USB disconnect, device number 32 [ 281.992673][ T8135] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 282.596733][ T6592] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 282.664081][ T6579] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 282.764217][ T6592] usb 1-1: Using ep0 maxpacket: 8 [ 282.766820][ T6592] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 282.770663][ T6592] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 282.770685][ T6592] usb 1-1: config 0 has no interface number 0 [ 282.770723][ T6592] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.770748][ T6592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.790533][ T6592] usb 1-1: config 0 descriptor?? [ 282.870366][ T6592] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 283.054351][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 283.054368][ T30] audit: type=1326 audit(1792882013.750:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.054395][ T30] audit: type=1326 audit(1792882013.750:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.054415][ T30] audit: type=1326 audit(1792882013.750:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.059141][ T30] audit: type=1326 audit(1792882013.760:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.059187][ T30] audit: type=1326 audit(1792882013.760:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.059225][ T30] audit: type=1326 audit(1792882013.760:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.094475][ T30] audit: type=1326 audit(1792882013.790:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0db5fd8e code=0x7ffc0000 [ 283.094545][ T30] audit: type=1326 audit(1792882013.790:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0db5fd8e code=0x7ffc0000 [ 283.094582][ T30] audit: type=1326 audit(1792882013.790:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.094619][ T30] audit: type=1326 audit(1792882013.790:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.512" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 283.627682][ T8154] futex_wake_op: syz.4.512 tries to shift op by 144; fix this program [ 284.363994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 285.214517][ T5686] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 285.216403][ T6581] usb 1-1: USB disconnect, device number 36 [ 285.388684][ T5686] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 285.389822][ T5686] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.389849][ T5686] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 285.389863][ T5686] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 285.389886][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.862474][ T7996] syz.4.477 (7996) used greatest stack depth: 17640 bytes left [ 286.064158][ T8162] fuse: Unknown parameter 'group_id00000000000000000000' [ 286.070099][ T5686] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 286.070424][ T5686] ATM dev 0: poll status: error -71 [ 286.070439][ T5686] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 286.128044][ T5686] usb 3-1: USB disconnect, device number 33 [ 287.204253][ T6571] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 287.245547][ T8192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.354896][ T6571] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 287.357523][ T6571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.357558][ T6571] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 287.357572][ T6571] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 287.357593][ T6571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.035818][ T8187] fuse: Bad value for 'fd' [ 288.074273][ T6571] cxacru_cm: 36 callbacks suppressed [ 288.074295][ T6571] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 288.074314][ T6571] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 288.074625][ T6571] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 288.074668][ T6571] ATM dev 0: poll status: error -71 [ 288.074680][ T6571] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 288.074694][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c04400 submission failed (-8)! [ 288.074716][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff888034c04d00 submission failed (-8)! [ 288.074734][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff8880356f7000 submission failed (-8)! [ 288.074751][ T6571] ATM dev 0: usbatm_submit_urb: urb 0xffff88805930a100 submission failed (-8)! [ 288.170746][ T6571] usb 2-1: USB disconnect, device number 34 [ 288.184505][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff88805930a100 submission failed (-19)! [ 288.946394][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'. [ 288.984311][ T6579] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 289.098418][ T7991] syz.4.477 (7991) used greatest stack depth: 17336 bytes left [ 289.114049][ T6579] usb 4-1: device descriptor read/64, error -71 [ 289.354150][ T6579] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 289.487107][ T6579] usb 4-1: device descriptor read/64, error -71 [ 289.494116][ T6592] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 289.598234][ T6579] usb usb4-port1: attempt power cycle [ 289.784943][ T8222] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 289.954085][ T6579] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 289.975467][ T6579] usb 4-1: device descriptor read/8, error -71 [ 290.214115][ T6579] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 290.235296][ T6579] usb 4-1: device descriptor read/8, error -71 [ 290.264046][ T6581] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 290.346607][ T6579] usb usb4-port1: unable to enumerate USB device [ 290.416935][ T6581] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 290.417978][ T6581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.418024][ T6581] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 290.418048][ T6581] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 290.418085][ T6581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.112318][ T8225] fuse: Bad value for 'user_id' [ 291.112331][ T8225] fuse: Bad value for 'user_id' [ 291.138644][ T6581] cxacru 3-1:1.0: send of cm 0x84 failed (-71) [ 291.138661][ T6581] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 291.138974][ T6581] cxacru 3-1:1.0: send of cm 0x88 failed (-71) [ 291.139030][ T6581] ATM dev 0: poll status: error -71 [ 291.139043][ T6581] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 291.139056][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff888032694900 submission failed (-8)! [ 291.206678][ T6581] usb 3-1: USB disconnect, device number 34 [ 292.062525][ T8248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.122234][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'. [ 292.140793][ T8249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.535'. [ 292.178844][ T8245] vimc link validate: Sensor B:src:640x16 (0x33424752, 1, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 292.238395][ T8249] kAFS: unable to lookup cell 'ÿ' [ 292.288510][ T8249] kAFS: unable to lookup cell '(,c¾Ì' [ 292.642696][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 292.644849][ T5686] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 292.799186][ T5686] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 292.803193][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.803238][ T5686] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 292.803260][ T5686] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 292.803297][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.427273][ T8254] fuse: Bad value for 'fd' [ 293.448001][ T5686] cxacru_cm: 4 callbacks suppressed [ 293.448017][ T5686] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 293.448029][ T5686] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 293.448893][ T5686] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 293.448932][ T5686] ATM dev 0: poll status: error -71 [ 293.448940][ T5686] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 293.448949][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880356a1a00 submission failed (-8)! [ 293.448963][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff8880356c9100 submission failed (-8)! [ 293.448973][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff88802c395800 submission failed (-8)! [ 293.448982][ T5686] ATM dev 0: usbatm_submit_urb: urb 0xffff88802c395c00 submission failed (-8)! [ 293.541560][ T5686] usb 2-1: USB disconnect, device number 36 [ 293.564286][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802c395c00 submission failed (-19)! [ 294.375548][ T6579] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 294.454265][ T5686] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 294.526382][ T6579] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 294.527212][ T6579] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.527240][ T6579] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 294.527254][ T6579] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 294.527276][ T6579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.554126][ T6581] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 294.584063][ T5686] usb 1-1: device descriptor read/64, error -71 [ 294.704800][ T6581] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 294.718782][ T6581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.718830][ T6581] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 294.718854][ T6581] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 294.718918][ T6581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.825291][ T5686] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 294.954072][ T5686] usb 1-1: device descriptor read/64, error -71 [ 295.068433][ T5686] usb usb1-port1: attempt power cycle [ 295.142034][ T8272] fuse: Bad value for 'fd' [ 295.150859][ T6579] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 295.150881][ T6579] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 295.151139][ T6579] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 295.151167][ T6579] ATM dev 0: poll status: error -71 [ 295.151174][ T6579] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 295.151211][ T6579] ATM dev 0: usbatm_submit_urb: urb 0xffff88807b8ff200 submission failed (-8)! [ 295.218095][ T6579] usb 4-1: USB disconnect, device number 43 [ 295.338620][ T8280] fuse: Bad value for 'user_id' [ 295.338632][ T8280] fuse: Bad value for 'user_id' [ 295.358001][ T6581] ATM dev 1: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 295.358289][ T6581] ATM dev 1: poll status: error -71 [ 295.358299][ T6581] ATM dev 1: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 295.399187][ T6581] usb 3-1: USB disconnect, device number 35 [ 295.414128][ T5686] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 295.437572][ T5686] usb 1-1: device descriptor read/8, error -71 [ 295.674894][ T5686] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 295.696102][ T5686] usb 1-1: device descriptor read/8, error -71 [ 295.804409][ T5686] usb usb1-port1: unable to enumerate USB device [ 296.095968][ T8300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.244141][ T5686] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 296.262316][ T8302] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 296.394778][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 296.401956][ T5686] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.404385][ T5686] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.404400][ T5686] usb 2-1: config 0 has no interface number 0 [ 296.404423][ T5686] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.404444][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.463599][ T5686] usb 2-1: config 0 descriptor?? [ 296.480921][ T5686] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 297.514049][ T6592] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 297.574132][ T29] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 297.667849][ T6592] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.689498][ T6592] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.689544][ T6592] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.690724][ T6592] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.690745][ T6592] usb 3-1: Manufacturer: syz [ 297.729416][ T6592] usb 3-1: config 0 descriptor?? [ 297.758889][ T29] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 297.762661][ T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.762698][ T29] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 297.762711][ T29] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 297.762733][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.965143][ T6592] rc_core: IR keymap rc-hauppauge not found [ 297.965162][ T6592] Registered IR keymap rc-empty [ 297.968135][ T6592] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 298.002484][ T6592] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 298.033983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 298.036026][ T6592] usb 3-1: USB disconnect, device number 36 [ 298.390598][ T6592] usb 2-1: USB disconnect, device number 37 [ 298.428219][ T8314] fuse: Bad value for 'fd' [ 298.433818][ T29] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 298.448329][ T29] ATM dev 0: poll status: error -71 [ 298.448345][ T29] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 298.471953][ T29] usb 1-1: USB disconnect, device number 41 [ 298.974115][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 299.125952][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 299.126898][ T29] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.128265][ T29] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.128289][ T29] usb 3-1: config 0 has no interface number 0 [ 299.128346][ T29] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.128372][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.164727][ T29] usb 3-1: config 0 descriptor?? [ 299.210604][ T29] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 299.614338][ T5686] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 299.769288][ T5686] usb 1-1: Using ep0 maxpacket: 8 [ 299.771276][ T5686] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 299.789743][ T5686] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.789774][ T5686] usb 1-1: config 0 has no interface number 0 [ 299.789812][ T5686] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.789850][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.819900][ T5686] usb 1-1: config 0 descriptor?? [ 299.860824][ T5686] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 299.866942][ T8337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.955673][ T8345] tipc: Started in network mode [ 299.958042][ T8345] tipc: Node identity 7f000001, cluster identity 4711 [ 299.964451][ T6581] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 300.019271][ T8345] tipc: Enabling of bearer rejected, failed to enable media [ 300.098308][ T29] usb 1-1: USB disconnect, device number 42 [ 300.121568][ T8345] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 300.138053][ T6581] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 300.146864][ T6581] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.146911][ T6581] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 300.146934][ T6581] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 300.146971][ T6581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.211781][ T8345] tipc: Enabled bearer , priority 10 [ 300.413598][ T6579] usb 3-1: USB disconnect, device number 37 [ 300.749612][ T8351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.862428][ T8342] fuse: Invalid rootmode [ 300.877188][ T6581] cxacru_cm: 15 callbacks suppressed [ 300.877201][ T6581] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 300.877213][ T6581] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 300.878895][ T6581] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 300.878938][ T6581] ATM dev 0: poll status: error -71 [ 300.878946][ T6581] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 300.878955][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff8880776f5a00 submission failed (-8)! [ 300.878969][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff8880776f5900 submission failed (-8)! [ 300.878979][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff8880776f5b00 submission failed (-8)! [ 300.878988][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff8880776f5c00 submission failed (-8)! [ 300.983756][ T6581] usb 4-1: USB disconnect, device number 44 [ 300.984039][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff8880776f5c00 submission failed (-19)! [ 301.109951][ T8353] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 301.245996][ T29] tipc: Node number set to 2130706433 [ 301.554079][ T6590] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 301.696909][ T6590] usb 3-1: device descriptor read/64, error -71 [ 301.946448][ T6590] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 302.074067][ T6590] usb 3-1: device descriptor read/64, error -71 [ 302.185640][ T6590] usb usb3-port1: attempt power cycle [ 302.242129][ T8368] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 302.251714][ T29] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 302.425901][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.425934][ T29] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 302.430567][ T29] usb 1-1: config 5 has an invalid interface number: 88 but max is 0 [ 302.430584][ T29] usb 1-1: config 5 has no interface number 0 [ 302.430607][ T29] usb 1-1: config 5 interface 88 altsetting 11 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 302.430622][ T29] usb 1-1: config 5 interface 88 altsetting 11 endpoint 0xE has invalid maxpacket 1096, setting to 64 [ 302.430635][ T29] usb 1-1: config 5 interface 88 altsetting 11 endpoint 0xC has invalid maxpacket 72, setting to 64 [ 302.430648][ T29] usb 1-1: config 5 interface 88 has no altsetting 0 [ 302.535865][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.535890][ T29] usb 1-1: Product: syz [ 302.535904][ T29] usb 1-1: Manufacturer: syz [ 302.535916][ T29] usb 1-1: SerialNumber: syz [ 302.574210][ T6590] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 302.606425][ T6590] usb 3-1: device descriptor read/8, error -71 [ 302.859886][ T6590] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 302.889182][ T6590] usb 3-1: device descriptor read/8, error -71 [ 302.929500][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 302.999152][ T6590] usb usb3-port1: unable to enumerate USB device [ 303.215290][ T29] comedi comedi5: Endpoint has wrong direction [ 303.215312][ T29] dt9812 1-1:5.88: driver 'dt9812' failed to auto-configure device. [ 303.290199][ T29] usb 1-1: USB disconnect, device number 43 [ 303.584058][ T6581] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 303.775943][ T6581] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 303.784809][ T6581] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.784856][ T6581] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 303.784885][ T6581] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 303.784923][ T6581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.470723][ T8371] fuse: Invalid rootmode [ 304.486268][ T6581] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 304.486284][ T6581] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 304.487481][ T6581] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 304.487514][ T6581] ATM dev 0: poll status: error -71 [ 304.487522][ T6581] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 304.487530][ T6581] ATM dev 0: usbatm_submit_urb: urb 0xffff888036de1e00 submission failed (-8)! [ 304.566344][ T6581] usb 2-1: USB disconnect, device number 38 [ 304.884970][ T6578] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 305.044499][ T6578] usb 1-1: Using ep0 maxpacket: 8 [ 305.046418][ T6578] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.052274][ T6578] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.052299][ T6578] usb 1-1: config 0 has no interface number 0 [ 305.052322][ T6578] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.052343][ T6578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.111572][ T6578] usb 1-1: config 0 descriptor?? [ 305.129716][ T6578] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 305.545786][ T6592] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 305.622766][ T8393] fuse: Unknown parameter './cgroup.cpu/memory.limit_in_bytes' [ 305.704136][ T6592] usb 5-1: Using ep0 maxpacket: 16 [ 305.705189][ T6592] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 305.707248][ T6592] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.707293][ T6592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.707318][ T6592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 305.707335][ T6592] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 305.707346][ T6592] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.710661][ T6592] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 305.710677][ T6592] usb 5-1: Manufacturer: syz [ 305.788056][ T6592] usb 5-1: config 0 descriptor?? [ 305.843712][ T8400] BUG: Bad page state in process syz.2.573 pfn:95e00 [ 305.843743][ T8400] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x95e00 [ 305.843762][ T8400] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 305.843772][ T8400] flags: 0xfff00000000059(locked|uptodate|dirty|head|node=0|zone=1|lastcpupid=0x7ff) [ 305.843792][ T8400] raw: 00fff00000000059 dead000000000100 dead000000000122 0000000000000000 [ 305.843801][ T8400] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 305.843809][ T8400] head: 00fff00000000059 dead000000000100 dead000000000122 0000000000000000 [ 305.843818][ T8400] head: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 305.843830][ T8400] head: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 305.843846][ T8400] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 305.843857][ T8400] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 305.843872][ T8400] page_owner tracks the page as allocated [ 305.843879][ T8400] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 8395, tgid 8394 (syz.2.573), ts 305839789940 [ 305.843908][ T8400] post_alloc_hook+0x1f9/0x250 [ 305.926744][ T8400] get_page_from_freelist+0x220f/0x2280 [ 305.926777][ T8400] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 305.926798][ T8400] only_alloc_fresh_hugetlb_folio+0x135/0x450 [ 305.926824][ T8400] alloc_surplus_hugetlb_folio+0xb9/0x350 [ 305.926851][ T8400] hugetlb_alloc_folio+0x568/0xb00 [ 305.926871][ T8400] alloc_hugetlb_folio+0x57c/0x900 [ 305.926892][ T8400] hugetlb_no_page+0xea5/0x16f0 [ 305.926914][ T8400] hugetlb_fault+0x776/0x1440 [ 305.926934][ T8400] handle_mm_fault+0x24fc/0x3750 [ 305.926958][ T8400] do_user_addr_fault+0x7f6/0x1480 [ 305.926977][ T8400] exc_page_fault+0x6a/0xc0 [ 305.926994][ T8400] asm_exc_page_fault+0x26/0x30 [ 305.927011][ T8400] page last free pid 8344 tgid 8344 ts 300406488241 stack trace: [ 305.927025][ T8400] __free_frozen_pages+0xc97/0xd90 [ 305.927041][ T8400] update_and_free_hugetlb_folio+0x17c/0x280 [ 305.927060][ T8400] folios_put_refs+0x73d/0xb30 [ 305.927084][ T8400] remove_inode_hugepages+0xea0/0x10f0 [ 305.927106][ T8400] hugetlbfs_evict_inode+0xaf/0x230 [ 305.927128][ T8400] evict+0x624/0xb50 [ 305.927148][ T8400] dentry_kill+0x1b9/0x910 [ 305.927168][ T8400] finish_dput+0x1a/0x260 [ 305.927192][ T8400] __fput+0x65b/0xa40 [ 305.927215][ T8400] task_work_run+0x1d9/0x260 [ 305.927234][ T8400] do_exit+0x705/0x2360 [ 305.927248][ T8400] do_group_exit+0x22d/0x2f0 [ 305.927264][ T8400] __x64_sys_exit_group+0x3f/0x40 [ 305.927281][ T8400] x64_sys_call+0x18c6/0x18d0 [ 305.927300][ T8400] do_syscall_64+0x166/0x520 [ 305.927317][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.927409][ T8400] Modules linked in: [ 305.927439][ T8400] CPU: 0 UID: 0 PID: 8400 Comm: syz.2.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.927464][ T8400] Tainted: [L]=SOFTLOCKUP [ 305.927471][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 305.927495][ T8400] Call Trace: [ 305.927503][ T8400] [ 305.927513][ T8400] dump_stack_lvl+0xe8/0x150 [ 305.927542][ T8400] bad_page+0xdc/0x120 [ 305.927568][ T8400] __free_frozen_pages+0xd3b/0xd90 [ 305.927597][ T8400] update_and_free_hugetlb_folio+0x17c/0x280 [ 305.927622][ T8400] ? __pfx_update_and_free_hugetlb_folio+0x10/0x10 [ 305.927642][ T8400] ? free_huge_folio+0xc6b/0xf20 [ 305.927671][ T8400] folios_put_refs+0x73d/0xb30 [ 305.927705][ T8400] ? _raw_spin_unlock+0x28/0x50 [ 305.927741][ T8400] ? __pfx_folios_put_refs+0x10/0x10 [ 305.927772][ T8400] ? free_swap_cache+0x9b/0x300 [ 305.927802][ T8400] free_pages_and_swap_cache+0x41e/0x490 [ 305.927836][ T8400] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 305.927886][ T8400] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 305.927923][ T8400] ? __pfx___zap_vma_range+0x10/0x10 [ 305.927948][ T8400] tlb_flush_mmu+0x6d3/0xa30 [ 305.927974][ T8400] tlb_finish_mmu+0xf4/0x220 [ 305.927997][ T8400] zap_vma_range_batched+0x4b0/0x5a0 [ 305.928028][ T8400] ? __pfx_zap_vma_range_batched+0x10/0x10 [ 305.928059][ T8400] ? madvise_vma_behavior+0x22d5/0x43b0 [ 305.928087][ T8400] madvise_vma_behavior+0x2361/0x43b0 [ 305.928120][ T8400] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 305.928146][ T8400] ? __lock_acquire+0x747/0x2de0 [ 305.928182][ T8400] ? do_raw_spin_lock+0x12b/0x2f0 [ 305.928218][ T8400] ? look_up_lock_class+0x57/0x110 [ 305.928238][ T8400] ? register_lock_class+0x31/0x2e0 [ 305.928265][ T8400] ? __lock_acquire+0x747/0x2de0 [ 305.928298][ T8400] ? finish_task_switch+0x40e/0xc60 [ 305.928327][ T8400] ? __lock_acquire+0x747/0x2de0 [ 305.928373][ T8400] ? reacquire_held_locks+0x117/0x1a0 [ 305.928396][ T8400] ? lock_vma_under_rcu+0x1d1/0x500 [ 305.928430][ T8400] ? lock_vma_under_rcu+0x116/0x500 [ 305.928459][ T8400] ? lock_vma_under_rcu+0x116/0x500 [ 305.928483][ T8400] ? lock_vma_under_rcu+0x45a/0x500 [ 305.928511][ T8400] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 305.928535][ T8400] ? futex_unqueue+0x22/0x240 [ 305.928568][ T8400] ? __futex_wait+0x3c7/0x470 [ 305.928599][ T8400] madvise_walk_vmas+0x924/0xb00 [ 305.928632][ T8400] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 305.928660][ T8400] ? blk_start_plug+0x6e/0x1b0 [ 305.928698][ T8400] madvise_do_behavior+0x385/0x540 [ 305.928726][ T8400] ? __pfx_madvise_do_behavior+0x10/0x10 [ 305.928757][ T8400] ? __fget_files+0x2a/0x420 [ 305.928780][ T8400] ? tlb_gather_mmu+0x22e/0x2f0 [ 305.928803][ T8400] do_madvise+0x327/0x3a0 [ 305.928827][ T8400] ? __pfx_do_madvise+0x10/0x10 [ 305.928860][ T8400] ? __se_sys_futex+0x3a8/0x450 [ 305.928887][ T8400] ? rcu_is_watching+0x16/0xb0 [ 305.928920][ T8400] __x64_sys_madvise+0xa6/0xc0 [ 305.928944][ T8400] do_syscall_64+0x166/0x520 [ 305.928963][ T8400] ? trace_irq_disable+0x3b/0x140 [ 305.928985][ T8400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.929004][ T8400] ? clear_bhb_loop+0x70/0xc0 [ 305.929026][ T8400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.929045][ T8400] RIP: 0033:0x7f8d7fd9f559 [ 305.929070][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.929086][ T8400] RSP: 002b:00007f8d80c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 305.929107][ T8400] RAX: ffffffffffffffda RBX: 00007f8d80026090 RCX: 00007f8d7fd9f559 [ 305.929121][ T8400] RDX: 0000000000000004 RSI: 0000000000c00000 RDI: 0000200000000000 [ 305.929133][ T8400] RBP: 00007f8d7fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 305.929145][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.929156][ T8400] R13: 00007f8d80026128 R14: 00007f8d80026090 R15: 00007f8d8014fa48 [ 305.929187][ T8400] [ 306.381516][ T8400] Disabling lock debugging due to kernel taint [ 306.916484][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 306.916501][ T30] audit: type=1326 audit(1792882037.620:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.917602][ T30] audit: type=1326 audit(1792882037.620:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.921582][ T30] audit: type=1326 audit(1792882037.620:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.922120][ T30] audit: type=1326 audit(1792882037.620:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.954054][ T30] audit: type=1326 audit(1792882037.630:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.954094][ T30] audit: type=1326 audit(1792882037.640:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.960815][ T30] audit: type=1326 audit(1792882037.660:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.963321][ T30] audit: type=1326 audit(1792882037.660:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.967216][ T30] audit: type=1326 audit(1792882037.670:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 306.976091][ T30] audit: type=1326 audit(1792882037.680:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8386 comm="syz.4.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0db9f559 code=0x7ffc0000 [ 307.210019][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.224035][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.370977][ T6578] usb 1-1: USB disconnect, device number 44 [ 308.595643][ T6592] rc_core: IR keymap rc-hauppauge not found [ 308.595655][ T6592] Registered IR keymap rc-empty [ 308.596256][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.617207][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.634404][ T6592] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 308.634984][ T6592] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input40 [ 308.665906][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.684133][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.704647][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.724904][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.745400][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.764088][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.784945][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.804072][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.824083][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.844260][ T6592] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.866834][ T6592] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 308.866853][ T6592] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.891058][ T6592] usb 5-1: USB disconnect, device number 41 [ 313.623549][ T8297] syz.1.547 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 313.624859][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.547 Tainted: G B L syzkaller #0 PREEMPT(full) [ 313.624878][ T8297] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 313.624882][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 313.624889][ T8297] Call Trace: [ 313.624893][ T8297] [ 313.624897][ T8297] dump_stack_lvl+0xe8/0x150 [ 313.624916][ T8297] dump_header+0xd3/0x4b0 [ 313.624930][ T8297] oom_kill_process+0x3ab/0x9e0 [ 313.624943][ T8297] out_of_memory+0xfb1/0x13b0 [ 313.624958][ T8297] ? try_charge_memcg+0xc16/0x15f0 [ 313.624973][ T8297] ? __pfx_out_of_memory+0x10/0x10 [ 313.624983][ T8297] ? do_raw_spin_unlock+0xf5/0x200 [ 313.624994][ T8297] try_charge_memcg+0xccc/0x15f0 [ 313.625009][ T8297] ? __pfx_try_charge_memcg+0x10/0x10 [ 313.625022][ T8297] ? percpu_ref_tryget+0x15/0x180 [ 313.625034][ T8297] ? lock_release+0x4b/0x3c0 [ 313.625045][ T8297] ? rcu_is_watching+0x1/0xb0 [ 313.625059][ T8297] ? lock_release+0x4b/0x3c0 [ 313.625070][ T8297] charge_memcg+0x1dd/0x310 [ 313.625082][ T8297] __mem_cgroup_charge+0x25/0x80 [ 313.625093][ T8297] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 313.625107][ T8297] ? do_raw_spin_unlock+0xf5/0x200 [ 313.625115][ T8297] ? __pfx_filemap_get_entry+0x10/0x10 [ 313.625127][ T8297] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 313.625141][ T8297] shmem_get_folio_gfp+0x594/0x1330 [ 313.625155][ T8297] shmem_fault+0x179/0x390 [ 313.625168][ T8297] __do_fault+0x138/0x2a0 [ 313.625177][ T8297] ? do_pte_missing+0x140c/0x34b0 [ 313.625187][ T8297] do_pte_missing+0x2215/0x34b0 [ 313.625196][ T8297] ? rcu_is_watching+0x16/0xb0 [ 313.625209][ T8297] ? lock_release+0x4b/0x3c0 [ 313.625220][ T8297] handle_mm_fault+0x1a53/0x3750 [ 313.625236][ T8297] ? handle_mm_fault+0xf1/0x3750 [ 313.625250][ T8297] ? __pfx_handle_mm_fault+0x10/0x10 [ 313.625262][ T8297] ? follow_page_pte+0x73b/0xf10 [ 313.625276][ T8297] ? __pfx_follow_page_pte+0x10/0x10 [ 313.625288][ T8297] ? generic_perform_write+0x800/0x8e0 [ 313.625302][ T8297] __get_user_pages+0x1670/0x2750 [ 313.625319][ T8297] get_dump_page+0x1b5/0x410 [ 313.625330][ T8297] ? __pfx_get_dump_page+0x10/0x10 [ 313.625341][ T8297] ? dump_user_range+0x1be/0xca0 [ 313.625349][ T8297] ? down_read_killable+0x1b6/0x3b0 [ 313.625361][ T8297] ? iov_iter_bvec+0xb8/0x180 [ 313.625373][ T8297] dump_user_range+0x208/0xca0 [ 313.625384][ T8297] ? __pfx_dump_user_range+0x10/0x10 [ 313.625401][ T8297] ? __pfx_writenote+0x10/0x10 [ 313.625410][ T8297] ? elf_core_dump+0x28d0/0x3a70 [ 313.625420][ T8297] elf_core_dump+0x346a/0x3a70 [ 313.625433][ T8297] ? __pfx_elf_core_dump+0x10/0x10 [ 313.625441][ T8297] ? kasan_save_track+0x4f/0x80 [ 313.625457][ T8297] ? do_coredump+0x4ef0/0x69b0 [ 313.625470][ T8297] ? vfs_coredump+0xac3/0x10c0 [ 313.625482][ T8297] ? get_signal+0x108f/0x12c0 [ 313.625494][ T8297] ? arch_do_signal_or_restart+0xbb/0x860 [ 313.625508][ T8297] ? irqentry_exit+0x348/0x9b0 [ 313.625519][ T8297] ? irqentry_exit+0x2a0/0x9b0 [ 313.625535][ T8297] ? lock_acquire+0x115/0x350 [ 313.625545][ T8297] ? 0xffffffffff600000 [ 313.625556][ T8297] do_coredump+0x5e46/0x69b0 [ 313.625575][ T8297] ? __pfx_do_coredump+0x10/0x10 [ 313.625588][ T8297] ? lock_acquire+0x115/0x350 [ 313.625600][ T8297] ? __lock_acquire+0x747/0x2de0 [ 313.625613][ T8297] ? __lock_acquire+0x747/0x2de0 [ 313.625626][ T8297] ? lock_acquire+0x115/0x350 [ 313.625637][ T8297] ? lock_acquire+0x115/0x350 [ 313.625649][ T8297] ? is_bpf_text_address+0x26/0x2b0 [ 313.625664][ T8297] ? is_bpf_text_address+0x292/0x2b0 [ 313.625677][ T8297] ? is_bpf_text_address+0x26/0x2b0 [ 313.625691][ T8297] ? kernel_text_address+0xa5/0xe0 [ 313.625703][ T8297] ? __kernel_text_address+0xd/0x30 [ 313.625713][ T8297] ? unwind_get_return_address+0x4d/0x90 [ 313.625725][ T8297] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.625737][ T8297] ? arch_stack_walk+0xfb/0x150 [ 313.625751][ T8297] ? stack_trace_save+0xa9/0x100 [ 313.625761][ T8297] ? __pfx_stack_trace_save+0x10/0x10 [ 313.625771][ T8297] ? __lock_acquire+0x747/0x2de0 [ 313.625782][ T8297] ? stack_depot_save_flags+0x33/0x7f0 [ 313.625795][ T8297] ? kasan_save_track+0x4f/0x80 [ 313.625804][ T8297] ? kasan_save_track+0x3e/0x80 [ 313.625814][ T8297] ? __kasan_kmalloc+0x93/0xb0 [ 313.625824][ T8297] ? __kmalloc_noprof+0x366/0x710 [ 313.625833][ T8297] ? security_prepare_creds+0x52/0x360 [ 313.625847][ T8297] ? prepare_creds+0x57d/0x820 [ 313.625858][ T8297] ? vfs_coredump+0x28a/0x10c0 [ 313.625871][ T8297] ? get_signal+0x108f/0x12c0 [ 313.625881][ T8297] ? arch_do_signal_or_restart+0xbb/0x860 [ 313.625894][ T8297] ? irqentry_exit+0x348/0x9b0 [ 313.625903][ T8297] ? asm_exc_page_fault+0x26/0x30 [ 313.625917][ T8297] ? __lock_acquire+0x747/0x2de0 [ 313.625933][ T8297] ? do_raw_spin_lock+0x12b/0x2f0 [ 313.625952][ T8297] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.625966][ T8297] vfs_coredump+0xac3/0x10c0 [ 313.625982][ T8297] ? __pfx_vfs_coredump+0x10/0x10 [ 313.626001][ T8297] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.626020][ T8297] get_signal+0x108f/0x12c0 [ 313.626048][ T8297] arch_do_signal_or_restart+0xbb/0x860 [ 313.626074][ T8297] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 313.626103][ T8297] irqentry_exit+0x348/0x9b0 [ 313.626113][ T8297] ? trace_irq_disable+0x3b/0x140 [ 313.626126][ T8297] asm_exc_page_fault+0x26/0x30 [ 313.626135][ T8297] RIP: 0033:0x0 [ 313.626143][ T8297] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 313.626148][ T8297] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 313.626158][ T8297] RAX: 0000000000000000 RBX: 00007ff9ab425fa0 RCX: 00007ff9ab19f559 [ 313.626165][ T8297] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 313.626172][ T8297] RBP: 00007ff9ab236b20 R08: 0000000000000000 R09: 0000000000000000 [ 313.626178][ T8297] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.626183][ T8297] R13: 00007ff9ab426038 R14: 00007ff9ab425fa0 R15: 00007ff9ab54fa48 [ 313.626194][ T8297] [ 313.677582][ T8297] memory: usage 307200kB, limit 307200kB, failcnt 22204 [ 313.677599][ T8297] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 313.677611][ T8297] kmem: usage 3352kB, limit 9007199254740988kB, failcnt 0 [ 313.677621][ T8297] Memory cgroup stats for /syz1: [ 313.682300][ T8297] cache 311087104 [ 313.682310][ T8297] rss 53248 [ 313.690926][ T8297] rss_huge 0 [ 313.690934][ T8297] shmem 311087104 [ 313.690940][ T8297] mapped_file 166047744 [ 313.690946][ T8297] dirty 0 [ 313.690952][ T8297] writeback 0 [ 313.690957][ T8297] workingset_refault_anon 20 [ 313.690962][ T8297] workingset_refault_file 0 [ 313.690965][ T8297] swap 127750144 [ 313.690968][ T8297] swapcached 0 [ 313.690971][ T8297] pgpgin 363561 [ 313.690975][ T8297] pgpgout 287599 [ 313.690977][ T8297] pgfault 208769 [ 313.690981][ T8297] pgmajfault 9 [ 313.690983][ T8297] inactive_anon 145694720 [ 313.690986][ T8297] active_anon 165445632 [ 313.690990][ T8297] inactive_file 0 [ 313.690993][ T8297] active_file 0 [ 313.690996][ T8297] unevictable 0 [ 313.690999][ T8297] hierarchical_memory_limit 314572800 [ 313.691002][ T8297] hierarchical_memsw_limit 9223372036854771712 [ 313.691006][ T8297] total_cache 311087104 [ 313.691009][ T8297] total_rss 53248 [ 313.691014][ T8297] total_rss_huge 0 [ 313.691017][ T8297] total_shmem 311087104 [ 313.696473][ T8297] total_mapped_file 166047744 [ 313.696479][ T8297] total_dirty 0 [ 313.696483][ T8297] total_writeback 0 [ 313.696486][ T8297] total_workingset_refault_anon 20 [ 313.696489][ T8297] total_workingset_refault_file 0 [ 313.696493][ T8297] total_swap 127750144 [ 313.696496][ T8297] total_swapcached 0 [ 313.696499][ T8297] total_pgpgin 363561 [ 313.696502][ T8297] total_pgpgout 287599 [ 313.696505][ T8297] total_pgfault 208769 [ 313.696508][ T8297] total_pgmajfault 9 [ 313.696516][ T8297] total_inactive_anon 145694720 [ 313.696519][ T8297] total_active_anon 165445632 [ 313.696523][ T8297] total_inactive_file 0 [ 313.696526][ T8297] total_active_file 0 [ 313.696529][ T8297] total_unevictable 0 [ 313.696532][ T8297] anon_cost 0 [ 313.696535][ T8297] file_cost 0 [ 313.696547][ T8297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.543,pid=8283,uid=0 [ 313.705287][ T8297] Memory cgroup out of memory: Killed process 8283 (syz.1.543) total-vm:202636kB, anon-rss:1280kB, file-rss:20548kB, shmem-rss:55756kB, UID:0 pgtables:320kB oom_score_adj:1000 [ 314.459959][ T8297] syz.1.547 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 314.459983][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.547 Tainted: G B L syzkaller #0 PREEMPT(full) [ 314.460000][ T8297] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 314.460004][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 314.460010][ T8297] Call Trace: [ 314.460014][ T8297] [ 314.460018][ T8297] dump_stack_lvl+0xe8/0x150 [ 314.460036][ T8297] dump_header+0xd3/0x4b0 [ 314.460049][ T8297] oom_kill_process+0x3ab/0x9e0 [ 314.460062][ T8297] out_of_memory+0xfb1/0x13b0 [ 314.460073][ T8297] ? try_charge_memcg+0xc16/0x15f0 [ 314.460088][ T8297] ? __pfx_out_of_memory+0x10/0x10 [ 314.460098][ T8297] ? do_raw_spin_unlock+0xf5/0x200 [ 314.460109][ T8297] try_charge_memcg+0xccc/0x15f0 [ 314.460124][ T8297] ? __pfx_try_charge_memcg+0x10/0x10 [ 314.460137][ T8297] ? percpu_ref_tryget+0x15/0x180 [ 314.460149][ T8297] ? lock_release+0x4b/0x3c0 [ 314.460160][ T8297] ? rcu_is_watching+0x1/0xb0 [ 314.460174][ T8297] ? lock_release+0x4b/0x3c0 [ 314.460185][ T8297] charge_memcg+0x1dd/0x310 [ 314.460197][ T8297] __mem_cgroup_charge+0x25/0x80 [ 314.460207][ T8297] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 314.460221][ T8297] ? do_raw_spin_unlock+0xf5/0x200 [ 314.460230][ T8297] ? __pfx_filemap_get_entry+0x10/0x10 [ 314.460241][ T8297] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 314.460256][ T8297] shmem_get_folio_gfp+0x594/0x1330 [ 314.460269][ T8297] shmem_fault+0x179/0x390 [ 314.460282][ T8297] __do_fault+0x138/0x2a0 [ 314.460291][ T8297] ? do_pte_missing+0x140c/0x34b0 [ 314.460300][ T8297] do_pte_missing+0x2215/0x34b0 [ 314.460310][ T8297] ? rcu_is_watching+0x16/0xb0 [ 314.460322][ T8297] ? lock_release+0x4b/0x3c0 [ 314.460334][ T8297] handle_mm_fault+0x1a53/0x3750 [ 314.460348][ T8297] ? handle_mm_fault+0xf1/0x3750 [ 314.460363][ T8297] ? __pfx_handle_mm_fault+0x10/0x10 [ 314.460375][ T8297] ? follow_page_pte+0x73b/0xf10 [ 314.460389][ T8297] ? __pfx_follow_page_pte+0x10/0x10 [ 314.460400][ T8297] ? generic_perform_write+0x800/0x8e0 [ 314.460420][ T8297] __get_user_pages+0x1670/0x2750 [ 314.460437][ T8297] get_dump_page+0x1b5/0x410 [ 314.460449][ T8297] ? __pfx_get_dump_page+0x10/0x10 [ 314.460459][ T8297] ? dump_user_range+0x1be/0xca0 [ 314.460468][ T8297] ? down_read_killable+0x1b6/0x3b0 [ 314.460481][ T8297] ? iov_iter_bvec+0xb8/0x180 [ 314.460492][ T8297] dump_user_range+0x208/0xca0 [ 314.460503][ T8297] ? __pfx_dump_user_range+0x10/0x10 [ 314.460520][ T8297] ? __pfx_writenote+0x10/0x10 [ 314.460529][ T8297] ? elf_core_dump+0x28d0/0x3a70 [ 314.460539][ T8297] elf_core_dump+0x346a/0x3a70 [ 314.460551][ T8297] ? __pfx_elf_core_dump+0x10/0x10 [ 314.460559][ T8297] ? kasan_save_track+0x4f/0x80 [ 314.460569][ T8297] ? do_coredump+0x4ef0/0x69b0 [ 314.460582][ T8297] ? vfs_coredump+0xac3/0x10c0 [ 314.460594][ T8297] ? get_signal+0x108f/0x12c0 [ 314.460606][ T8297] ? arch_do_signal_or_restart+0xbb/0x860 [ 314.460620][ T8297] ? irqentry_exit+0x348/0x9b0 [ 314.460630][ T8297] ? irqentry_exit+0x2a0/0x9b0 [ 314.460647][ T8297] ? lock_acquire+0x115/0x350 [ 314.460657][ T8297] ? 0xffffffffff600000 [ 314.460668][ T8297] do_coredump+0x5e46/0x69b0 [ 314.460687][ T8297] ? __pfx_do_coredump+0x10/0x10 [ 314.460700][ T8297] ? lock_acquire+0x115/0x350 [ 314.460712][ T8297] ? __lock_acquire+0x747/0x2de0 [ 314.460725][ T8297] ? __lock_acquire+0x747/0x2de0 [ 314.460738][ T8297] ? lock_acquire+0x115/0x350 [ 314.460749][ T8297] ? lock_acquire+0x115/0x350 [ 314.460761][ T8297] ? is_bpf_text_address+0x26/0x2b0 [ 314.460776][ T8297] ? is_bpf_text_address+0x292/0x2b0 [ 314.460789][ T8297] ? is_bpf_text_address+0x26/0x2b0 [ 314.460803][ T8297] ? kernel_text_address+0xa5/0xe0 [ 314.460814][ T8297] ? __kernel_text_address+0xd/0x30 [ 314.460825][ T8297] ? unwind_get_return_address+0x4d/0x90 [ 314.460840][ T8297] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 314.460859][ T8297] ? arch_stack_walk+0xfb/0x150 [ 314.460883][ T8297] ? stack_trace_save+0xa9/0x100 [ 314.460900][ T8297] ? __pfx_stack_trace_save+0x10/0x10 [ 314.460917][ T8297] ? __lock_acquire+0x747/0x2de0 [ 314.460936][ T8297] ? stack_depot_save_flags+0x33/0x7f0 [ 314.460951][ T8297] ? kasan_save_track+0x4f/0x80 [ 314.460960][ T8297] ? kasan_save_track+0x3e/0x80 [ 314.460969][ T8297] ? __kasan_kmalloc+0x93/0xb0 [ 314.460980][ T8297] ? __kmalloc_noprof+0x366/0x710 [ 314.460989][ T8297] ? security_prepare_creds+0x52/0x360 [ 314.461003][ T8297] ? prepare_creds+0x57d/0x820 [ 314.461013][ T8297] ? vfs_coredump+0x28a/0x10c0 [ 314.461026][ T8297] ? get_signal+0x108f/0x12c0 [ 314.461037][ T8297] ? arch_do_signal_or_restart+0xbb/0x860 [ 314.461050][ T8297] ? irqentry_exit+0x348/0x9b0 [ 314.461059][ T8297] ? asm_exc_page_fault+0x26/0x30 [ 314.461074][ T8297] ? __lock_acquire+0x747/0x2de0 [ 314.461090][ T8297] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.461105][ T8297] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.461119][ T8297] vfs_coredump+0xac3/0x10c0 [ 314.461135][ T8297] ? __pfx_vfs_coredump+0x10/0x10 [ 314.461154][ T8297] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.461167][ T8297] get_signal+0x108f/0x12c0 [ 314.461183][ T8297] arch_do_signal_or_restart+0xbb/0x860 [ 314.461197][ T8297] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 314.461215][ T8297] irqentry_exit+0x348/0x9b0 [ 314.461224][ T8297] ? trace_irq_disable+0x3b/0x140 [ 314.461237][ T8297] asm_exc_page_fault+0x26/0x30 [ 314.461247][ T8297] RIP: 0033:0x0 [ 314.461254][ T8297] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 314.461259][ T8297] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 314.461269][ T8297] RAX: 0000000000000000 RBX: 00007ff9ab425fa0 RCX: 00007ff9ab19f559 [ 314.461276][ T8297] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 314.461283][ T8297] RBP: 00007ff9ab236b20 R08: 0000000000000000 R09: 0000000000000000 [ 314.461289][ T8297] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.461294][ T8297] R13: 00007ff9ab426038 R14: 00007ff9ab425fa0 R15: 00007ff9ab54fa48 [ 314.461305][ T8297] [ 314.679291][ T8297] memory: usage 307200kB, limit 307200kB, failcnt 22261 [ 314.679308][ T8297] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 314.679318][ T8297] kmem: usage 3352kB, limit 9007199254740988kB, failcnt 0 [ 314.679326][ T8297] Memory cgroup stats for /syz1: [ 314.684796][ T8297] cache 311087104 [ 314.684803][ T8297] rss 53248 [ 314.684806][ T8297] rss_huge 0 [ 314.684810][ T8297] shmem 311087104 [ 314.684813][ T8297] mapped_file 160899072 [ 314.684816][ T8297] dirty 0 [ 314.684819][ T8297] writeback 0 [ 314.684822][ T8297] workingset_refault_anon 20 [ 314.684825][ T8297] workingset_refault_file 0 [ 314.684828][ T8297] swap 127750144 [ 314.684831][ T8297] swapcached 0 [ 314.684834][ T8297] pgpgin 363561 [ 314.684837][ T8297] pgpgout 287599 [ 314.684840][ T8297] pgfault 208770 [ 314.684843][ T8297] pgmajfault 9 [ 314.684846][ T8297] inactive_anon 145694720 [ 314.684849][ T8297] active_anon 165445632 [ 314.684853][ T8297] inactive_file 0 [ 314.684856][ T8297] active_file 0 [ 314.684859][ T8297] unevictable 0 [ 314.684862][ T8297] hierarchical_memory_limit 314572800 [ 314.684865][ T8297] hierarchical_memsw_limit 9223372036854771712 [ 314.684869][ T8297] total_cache 311087104 [ 314.684872][ T8297] total_rss 53248 [ 314.696300][ T8297] total_rss_huge 0 [ 314.696309][ T8297] total_shmem 311087104 [ 314.696315][ T8297] total_mapped_file 160899072 [ 314.696322][ T8297] total_dirty 0 [ 314.696328][ T8297] total_writeback 0 [ 314.696333][ T8297] total_workingset_refault_anon 20 [ 314.696340][ T8297] total_workingset_refault_file 0 [ 314.696346][ T8297] total_swap 127750144 [ 314.696352][ T8297] total_swapcached 0 [ 314.696358][ T8297] total_pgpgin 363561 [ 314.696364][ T8297] total_pgpgout 287599 [ 314.696369][ T8297] total_pgfault 208770 [ 314.696374][ T8297] total_pgmajfault 9 [ 314.696380][ T8297] total_inactive_anon 145694720 [ 314.696386][ T8297] total_active_anon 165445632 [ 314.706551][ T8297] total_inactive_file 0 [ 314.706560][ T8297] total_active_file 0 [ 314.706566][ T8297] total_unevictable 0 [ 314.706572][ T8297] anon_cost 0 [ 314.706577][ T8297] file_cost 0 [ 314.706583][ T8297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.547,pid=8297,uid=0 [ 314.710916][ T8297] Memory cgroup out of memory: Killed process 8297 (syz.1.547) total-vm:200588kB, anon-rss:1280kB, file-rss:20548kB, shmem-rss:53516kB, UID:0 pgtables:288kB oom_score_adj:1000 [ 315.306664][ T8338] syz.1.557 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 315.306688][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.1.557 Tainted: G B L syzkaller #0 PREEMPT(full) [ 315.306703][ T8338] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 315.306707][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 315.306713][ T8338] Call Trace: [ 315.306717][ T8338] [ 315.306721][ T8338] dump_stack_lvl+0xe8/0x150 [ 315.306739][ T8338] dump_header+0xd3/0x4b0 [ 315.306762][ T8338] oom_kill_process+0x3ab/0x9e0 [ 315.306783][ T8338] out_of_memory+0xfb1/0x13b0 [ 315.306802][ T8338] ? try_charge_memcg+0xc16/0x15f0 [ 315.306820][ T8338] ? __pfx_out_of_memory+0x10/0x10 [ 315.306830][ T8338] ? do_raw_spin_unlock+0xf5/0x200 [ 315.306841][ T8338] try_charge_memcg+0xccc/0x15f0 [ 315.306856][ T8338] ? __pfx_try_charge_memcg+0x10/0x10 [ 315.306869][ T8338] ? percpu_ref_tryget+0x15/0x180 [ 315.306881][ T8338] ? lock_release+0x4b/0x3c0 [ 315.306891][ T8338] ? rcu_is_watching+0x1/0xb0 [ 315.306905][ T8338] ? lock_release+0x4b/0x3c0 [ 315.306916][ T8338] charge_memcg+0x1dd/0x310 [ 315.306928][ T8338] __mem_cgroup_charge+0x25/0x80 [ 315.306939][ T8338] shmem_alloc_and_add_folio+0x7bb/0xf60 [ 315.306953][ T8338] ? __pfx_filemap_get_entry+0x10/0x10 [ 315.306965][ T8338] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 315.306980][ T8338] shmem_get_folio_gfp+0x594/0x1330 [ 315.306993][ T8338] shmem_write_begin+0x16c/0x330 [ 315.307006][ T8338] generic_perform_write+0x2d5/0x8e0 [ 315.307021][ T8338] ? __pfx_generic_perform_write+0x10/0x10 [ 315.307033][ T8338] ? down_write+0x166/0x200 [ 315.307044][ T8338] ? generic_write_checks_count+0x41a/0x520 [ 315.307058][ T8338] ? file_update_time_flags+0x2d5/0x440 [ 315.307069][ T8338] shmem_file_write_iter+0xf8/0x120 [ 315.307081][ T8338] __kernel_write_iter+0x44a/0x8f0 [ 315.307092][ T8338] ? __pfx___kernel_write_iter+0x10/0x10 [ 315.307101][ T8338] ? get_dump_page+0x1e6/0x410 [ 315.307113][ T8338] ? __asan_memset+0x22/0x50 [ 315.307123][ T8338] ? iov_iter_bvec+0xb8/0x180 [ 315.307134][ T8338] dump_user_range+0x715/0xca0 [ 315.307146][ T8338] ? __pfx_dump_user_range+0x10/0x10 [ 315.307162][ T8338] ? __pfx_writenote+0x10/0x10 [ 315.307171][ T8338] ? elf_core_dump+0x28d0/0x3a70 [ 315.307182][ T8338] elf_core_dump+0x346a/0x3a70 [ 315.307194][ T8338] ? __pfx_elf_core_dump+0x10/0x10 [ 315.307203][ T8338] ? kasan_save_track+0x4f/0x80 [ 315.307213][ T8338] ? do_coredump+0x4ef0/0x69b0 [ 315.307225][ T8338] ? vfs_coredump+0xac3/0x10c0 [ 315.307238][ T8338] ? get_signal+0x108f/0x12c0 [ 315.307250][ T8338] ? arch_do_signal_or_restart+0xbb/0x860 [ 315.307264][ T8338] ? irqentry_exit+0x348/0x9b0 [ 315.307275][ T8338] ? irqentry_exit+0x2a0/0x9b0 [ 315.307291][ T8338] ? lock_acquire+0x115/0x350 [ 315.307301][ T8338] ? 0xffffffffff600000 [ 315.307318][ T8338] do_coredump+0x5e46/0x69b0 [ 315.307337][ T8338] ? __pfx_do_coredump+0x10/0x10 [ 315.307351][ T8338] ? lock_acquire+0x115/0x350 [ 315.307362][ T8338] ? __lock_acquire+0x747/0x2de0 [ 315.307376][ T8338] ? __lock_acquire+0x747/0x2de0 [ 315.307389][ T8338] ? lock_acquire+0x115/0x350 [ 315.307400][ T8338] ? lock_acquire+0x115/0x350 [ 315.307412][ T8338] ? is_bpf_text_address+0x26/0x2b0 [ 315.307427][ T8338] ? is_bpf_text_address+0x292/0x2b0 [ 315.307440][ T8338] ? is_bpf_text_address+0x26/0x2b0 [ 315.307454][ T8338] ? kernel_text_address+0xa5/0xe0 [ 315.307465][ T8338] ? __kernel_text_address+0xd/0x30 [ 315.307476][ T8338] ? unwind_get_return_address+0x4d/0x90 [ 315.307488][ T8338] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.307500][ T8338] ? arch_stack_walk+0xfb/0x150 [ 315.307514][ T8338] ? stack_trace_save+0xa9/0x100 [ 315.307524][ T8338] ? __pfx_stack_trace_save+0x10/0x10 [ 315.307534][ T8338] ? __lock_acquire+0x747/0x2de0 [ 315.307544][ T8338] ? stack_depot_save_flags+0x33/0x7f0 [ 315.307557][ T8338] ? kasan_save_track+0x4f/0x80 [ 315.307567][ T8338] ? kasan_save_track+0x3e/0x80 [ 315.307576][ T8338] ? __kasan_kmalloc+0x93/0xb0 [ 315.307586][ T8338] ? __kmalloc_noprof+0x366/0x710 [ 315.307595][ T8338] ? security_prepare_creds+0x52/0x360 [ 315.307609][ T8338] ? prepare_creds+0x57d/0x820 [ 315.307620][ T8338] ? vfs_coredump+0x28a/0x10c0 [ 315.307632][ T8338] ? get_signal+0x108f/0x12c0 [ 315.307642][ T8338] ? arch_do_signal_or_restart+0xbb/0x860 [ 315.307656][ T8338] ? irqentry_exit+0x348/0x9b0 [ 315.307664][ T8338] ? asm_exc_page_fault+0x26/0x30 [ 315.307679][ T8338] ? __lock_acquire+0x747/0x2de0 [ 315.307694][ T8338] ? do_raw_spin_lock+0x12b/0x2f0 [ 315.307710][ T8338] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.307724][ T8338] vfs_coredump+0xac3/0x10c0 [ 315.307740][ T8338] ? __pfx_vfs_coredump+0x10/0x10 [ 315.307759][ T8338] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.307773][ T8338] get_signal+0x108f/0x12c0 [ 315.307803][ T8338] arch_do_signal_or_restart+0xbb/0x860 [ 315.307820][ T8338] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 315.307838][ T8338] irqentry_exit+0x348/0x9b0 [ 315.307847][ T8338] ? trace_irq_disable+0x3b/0x140 [ 315.307860][ T8338] asm_exc_page_fault+0x26/0x30 [ 315.307869][ T8338] RIP: 0033:0x2000000000c0 [ 315.307883][ T8338] Code: Unable to access opcode bytes at 0x200000000096. [ 315.307888][ T8338] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 315.307898][ T8338] RAX: 0000000000000000 RBX: 00007ff9ab425fa0 RCX: 00007ff9ab19f559 [ 315.307905][ T8338] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000020000 [ 315.307912][ T8338] RBP: 00007ff9ab236b20 R08: 0000000000000000 R09: 0000000000000000 [ 315.307918][ T8338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000