last executing test programs: 5m39.663755468s ago: executing program 2 (id=1351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x20, 0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 5m35.879806857s ago: executing program 2 (id=1363): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0xfffc, 0x0, @local}}}, 0x3a) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @private1, 0xd8}}}, 0x32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="0b118f", 0x3, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7fff, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) r8 = socket$inet6(0xa, 0x5, 0x0) sendmmsg(r6, &(0x7f0000004640)=[{{&(0x7f0000000200)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)="4bd7d14a89ed0fea564c7269317e72f740af00a729be954b7fbb02c9113966095bf86bd6e55698d4d2a69753c57f72ec0aa822e43a255d4575f62cacd1e592ee2a5b544913fc92850a319702c095ff249a95adc02ac9c4bf146e553781470bf92b5a4ae93d80fd88f82bc3bf469a2747c9d4abfb1da10a5ec9c4c682118e", 0x7e}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="ae7d268d9c933ae95289fc3759e4f37cfd48044cacc65b364fec2c8083bed99073c8c2c63603670aeb1f73bbf39d563cfd18981dff4f97f996b192a35cb50f20eb818ac376fe0f04c0033381dc415097e289a5fe91c11238ab0af9b0dd37211797c6489fab47386f2b427b5c6b79edf625cb007a392f3138845407eec1ea4b69191af62b82d65747a980b372727017d8132101074a6dd10f1de752ba136303694fb8b445004ae856b3c6226ffde4f214966f98462d2293bdbc594cc964af", 0xbe}, {&(0x7f0000001500)="e3337dff9371707c92b2117e3d3474ab67a41e0645396df69df791527b367b97a23d8bc5138c3a5ba9c2c3673f52b32971001b7f6657f9f2a17fd527f5418d25cd501f1243ace2e4c829caef1b41d5a2e77182a576b7446550a7f11b6031aa101a0ebf4a81e5b61b218d117e9a08c8cd18f6ec7ef50b2089f7b3ba8ff909acdacbe36d5f8604cf1e54baed5a61a3324e66144312424c9d0f6f384a302c829f297a1dab76a1f9ab5727768f81481084d949f0f11ce1ceccf2a2a589085240", 0xbe}, {&(0x7f0000000080)='z', 0x1}, {&(0x7f0000000300)="66144a0df4ff2c8bbd9799e2a25f7dec29a08b995547c151fe8e24305d1694acee0c204d21b19db89a96ebd00ede6bd1570101ec5585e0156eed2e1281b46824fb97c3f3201dc0bb724382b1593e223f850ec1bfa78b16478cecc58edc518fac56eabdb93108381794", 0x69}, {&(0x7f00000015c0)="388da3fbbad5161f6adee9a003d58a166d465b0017763c40602e045cc8907e1af8e737d88ee2f6ed795109e1d3c7b892a02992dafe3f7a461abcc089ba5f61c32b996901a02009a6812aeee5d71926898c828aa4b2ccc7092e37e25a378e91bdadea8fc791f33c3ea91f71831f51af75f4b0d74c2c9f260ca6922e24a97fe72ec6ca72d1d7499784a7f94e5ad9844d9c0f26f483ebb9ec665e98275f8e3d8dbe1e7afa6163fdc6ddb150b53baba81924a6195e8cf0eaa4bf1b328912e9e117c92feed7a6e59a161afeffe9bfcf315c3370ba26a44183437d49c0ffce0c93b92f8dbae39a5d7febcbe1e2080c258b5d78dddb1579872e8f75", 0xf8}, {&(0x7f00000016c0)="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", 0xfc}], 0x8, &(0x7f0000001800)=[{0x20, 0x111, 0x2e, "c8e5bdf26bfabc43d06add2ad3ae6cdcc1f3c1"}, {0x18, 0x84, 0x0, "2f8d535af0be6f7d31c9"}, {0x100, 0x88, 0xfffffff7, "a6ca81508a4039cdefb93700b70ac91d3415401b2a1a0d0baf4054c5b605af0e7a1084cc987f4a392bf3ec67cb521a33aa538a6d172217f76c010c0058dbe4cf75e2b2f5b4667654c91498bc1fa06236b7127a0e7a1155d94a8a7426ce0cd80a8abe4cacbf307cc68f5713ec779199ec4f840b6c704a2f29c61332cecd6b7fdfd70348cabe9d26b65bbb4592f26dbffba03b8fd1aa1d6f03df3f058849500cff6f3870088b98412200e776681ae9c16987f8da217d90448a74190f87ae5d9a83822eb0a17ecff0b4aed4b8884776843f317f4a186ebde4141936e6b928bfd2e317460454dbd40dff59b4d1b84883f7c0f3"}, {0x90, 0x8, 0x3, "123b80bb601ce4724ca9d3aed7a6dce8b916a90433bf2f4780fb3731435fbb37e1a4336ea0103988142354e74c06b0f1ae8871047f3dd5668ba99b6e2e3f075c457492d5f0c9d42863ee955329707c29180e4c44bde0c69449612f4750cf8da96f0681b956bc1bab7eaf77c2b650fec1ceccb73c4d4ee8415d03d6b8c6a36dfa70d5"}, {0x14, 0x115, 0xf5, "afd3c894dbeee794"}, {0xa4, 0x0, 0x507c, "3ec1268e30344d3ffe5b850d57901b4ffec71ad4cd179019b4fd60fcbb71145ebc0a87401c32afd3e90999f74f4be3d8b7137dec4ccd76e110b9829cdc307652b567370a82a4e98623f50a10a13f3aa41575b47cc5b0be29bf7fd8bad7f4c3fe80bc5ab6ec92a50510c4725317b740747b664ae8927071434dd3f82c3deea32b00a38ba1becf061c0dedfb7cd63552ef1f736559bc337b33"}, {0x30, 0x1, 0x0, "b5221c3a5139774a9b1909b916a3b3b0b5f608c8844575eb90b27e766f627aea9bb5"}, {0xcc, 0x3a, 0x9, "fc8e4ed048fbfabfa3a418a1037507566026ddc584f2ddd641af4cab570b2740e8fadd989d6e48170f45178f6be68bda0eea68f9e9bd88f2112c9da3f244a9c90e0e586f3eed1d884739b790f5725cdc9b87bf48f7439ae04a5ee71f7c40d4bfbadf1c59303e9bd77742c656c994978bdab582d58280cb8cd2fe2b60c6820b14a07edd4ea95a0b6a1b51a00cb77397991a5c22a6ba3ff0dec046d81c195c3d05a5657d4fad0e64c04b2d4d8648b184960159e3394a5e02c9572a6c0ca5dc4483"}, {0xcc, 0x0, 0x0, "6590e4bc6f80061f294e13897bf181c7e6df61d2070857a3657b35f0a2d79b6d1de99744ecb890bd809c6acc9f0dfb4374bc6b8ce9afb9ce1eb2cb40e88ce7e5b995d6ed0ee00d023f407ed16dfe3fe1797e2cad1175859f2d390bf985b2c60b84740f46a07a6a597706b0abbb8dd5f00bacd8cc15d32bde781268f03e4248ce484921a2bb6c7f5f0d1a3d0aa45ad59622f8edf84815a23ff5bab9cc794ad51bd123d1da76d8e7eb0537d933b524d0664a752a92287379c24a6513ea1dd15b"}], 0x448}}, {{&(0x7f0000001c80)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d00)="8e58aa1aad251a0e04b3e818233c7a885781f874433819d4cd5264616f0490c94114933437e67d98fd686fb96c6125962b78aa67e4eea8810cbad5a8603edf3330e4f9c4b56fa185fbaa251b94ddcbd83a3a1a4046bf9a39c7cb07d860bf31218348ddab328f3caefc2d2d0c23ca84fc3c115049176de9a87a8cdaba72aa548a0fefa9f4d3b412ad2261cf2c75a4993b04e9324d72a8d576c62b157dc2e35b2733d6ec3e561f8e19ffb71e1e092cfcb8733fd24adb9c5e56428435a6c914c8873713c1559012031a62b7face2f561538ca48feee37256ef54fa9", 0xda}, {&(0x7f0000001e00)="79ac96a2bb", 0x5}], 0x2}}, {{&(0x7f0000001e80)=@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x41}, 0x400}, 0x80, &(0x7f0000003140)=[{&(0x7f0000001f00)="7b054e7ef2f962d69261aaa29777ea9f3ba8611b801568a1dfdf94c078ed94873180bb9f432ba1b8565a8b007a1523d71ef18eefe2f023fe77d6c8aa70b495ac39b3f60998ea9e4b359ad16ce3391f160647c2", 0x53}, {&(0x7f0000001f80)}, {&(0x7f0000001fc0)="f35c5f1bd73f6c3084270dce96e2ce752a317b41c145fe8611456d2987c5943cbd56bc492d2c6d84e18f23354ffeb0af0f85b770812e2980f87b892e152d86b0192cd47add7e1ecf7af8f7d3fefece440928ed647bd28f749eba74f99cc56f83460747284805fc5354589454b1141ef97beb66ff12fa6fba3a0eae2882370929", 0x80}, {&(0x7f0000002040)="d27f6bd44869ba1072324969c67e96d66fce7386b84aca344f61ae21b57594ce8171899816d6f5242361de25fd46422fad65961ab2891f8c899653376db45a989be08c8ddf30621ae8f9603dbcb102669beec67b7337b795d3f850711ea0cfb693a388", 0x63}, {&(0x7f00000020c0)="57a2d900c27e68903b487bb521428b7ab8d3e327434866e3c0ec7be7ec082f2a843dd7743caf6fc42b7534e829a3ce9f88b8d70faa7603ad10af133e29b4b7f3726b04550070fb20abff3e55e80115e4206e566633f875657e263d6c2b534515d64661684f48c6f6", 0x68}, {&(0x7f0000002140)="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", 0x1000}], 0x6, &(0x7f0000003180)=[{0xd8, 0x10c, 0x200, "2806f18bf37aa29e85622b90df4ccb2723ac8b021fe846c800b585809c7ec7ff06205faaf30abe28944df980632b987649bc9bb06bcf30464847536ba1f2d2bd39298cc43b75e796b232c65a80b317a54a70b66edb5909f6b1fcc4e90f2e68b0faa4a4da25a4cf6d54b700d7b31ec999f4cc638126e2e521054128ba84ab8762dfbfad6ce77817768602f420e8eea341c9a8883136141f05eed20315645427e7a3e32baf3c59bb8da2a9d6fbd5fb220a6608237548a0f2d422652cfd033ad6b5bef14e1d5849b4aa244f70b4"}, {0x108, 0xb0, 0x4, "799196de1b177ba98395a5cd6f84c094a922fde3dd5bc94ad0289accbb7a33bac049df44212e47899c87d67d572b62c0adea038c9296f63fead00fbbfcc140891c2470f8c891a770beafd6d1722c72db165ed699b0422f54edf0895af86fc420f080e7689e73960b8e3a5b534474a0303d8a922f35cb5442d1ae4ec5e86c6195efdb72134f9b2075df6ff4594e6a9c2198758b826d46f227564a810f6ed3db44c7bf9d3808b11ef795c504a2926bf4cc9327c9790c5374a73cd88f401a1782e572aa726dd9a9b7684e35a62583d50b241e86383ab37a46b1e833939c231391b87fbafd68f057e846fd561a900d33e759014075e45afa9e174d"}, {0x100c, 0x10f, 0x9, "515fdd5ed4a5ff9d92bf6c2b387551e7f5d05cef11141cd3bb329f1262b98cf428d12fccf3a0f03d3a27c7e52b381a08c2da43e117b86a24b98217728203ec6a3b55519203f0c4c2992e0084558bf08f16e3b0655cb2039bcfed9cf0ec1986d9f391ed38aa139c87e324c16b5761371e3254b49b0bd263d34584ea2995f6fcd1be43a6de9d73bcedd9b2953498e2312733d815226e9e91d47b0fc6ae0100e92afc4426058e48f7cafc121e0b71de9780e8e7ad7e9deed4542a2a45ea956c4f1747ff4e87d5a2eca6fc36f3d4bd12529cbbd95d2bd3ed74bc56a7bf181a5e79abd4d8cfffbc83580fb1f6218b9bcbe8fe16900ebd1d3c8e7f7fbbdbb499bf186513606721dd56177e1e4b699a5d7f656fc79a00d033f60b2b9b95fa43e1f7669f044d19119935638d889d16b5f2b5750b532cda887325ea899a17e1a74a4e51709298e9a2704cd639793b7c910319e20782b6ffd427a9bd334659c2aaa6536ecdeae02e818ef77fbf1503a75d39cc5ea7073a1b8ac08090f3b246e46e555aeec9b528949e6b1a8d5f94850d074d06eec46365b3648e73452e1a4c8dac936e7be169622c0212f7f98a433f30b72ee969879d934fb43fe99c3c3f9d425c96040dcc4b3d2a7e2cebb3bdc08bc035c608809eb367742ef6cafc3a1098578c4a4995c0e2ae01b37654fde28f32eb86d7b896825cf3d065c5c025ea7aa5c2b5b36445f4528a384b95ad7da99601a04e5e0c2cf20fcbc9b656837c9a542a6f882196b919e90d4ce803c7932e3f2c4e7afdde6057f6ed931767b4c671c070f718f5689acf05f1432844f08f421027c9fddd83b1767ff7e89d11196f4ba7f18e95ee4f6a34676015d37a27464ff3b384fa1ff73a639e47cf3f95abca3bf1b5150a16c5c1877937070f2ab0becb1b7a2b10a77063b1a4f80aab56d63e46e2acf8900b39702a1ab4f7b7555236de5c1bd0e23783fe91c419c889b51692c877df2f1cd1b4c35d198bccf9c8dc718060000899becd233f21ffd835508fbff942abb5552bc2da3ee1594612a1b2b7d5eca6cdf06e7b70c898f7d06f52072878f256e1ed87c1e293c683f85eadbc8b22fd99b134934be42edcff09d63a6a01a7d4dcec36baae2374f25d529e59422978d147ff2d9a743275f247391fd67783ead6ff4469d87689342fc5ed4f9bbfc37768e2fc93e4de66b16014ae6164d36f0ffeebdb63bcf6e8c4d7e619c5f328988e97118ceb1454be31ce673049ca8553e1e5eef666f285973fb0b7586975f83853d8086a08bf8cd014b354c07b35153959e2fd22755ef9e0f5498d9a7bf72c0fb8815f3dfca9ed40f3e119891f6012867d381fc57735a651e872f29a568034d6a8cb1f3d68e92f5ccb9835158c7a58d023c6456f5ef4ac97d868b69d4450deef537e50b3025b19873da395bed486e7e1d2227a53605fe95dd92ac4fae3664b926cb8220e0fd7f04880271638384849f9cbc03ff54739a0182f6b067e36c2ee28c2339412b23e3b4cd6dc678b4968557d3a1129d3497630341423f3faaf73d45a131dc2851c216ff9e628ff2ab210c1aa3d1d2a97aff72ad3b93c9960440ee27d06119f3a3a6fe9e8f88fa09d6f486fc3ecb80699ad81ce6da83e1a4f33105eb4920d3368f34452dd8e2c44cfc01d3b6af8c4d02160705a5bd606f77d056bc4584980acfafff90f705fed312bab946778b7aa10f42b4b1321a753f6ed0347a6627930bc1ae56f700aef3041322f014b6fc85de129532eaab7d6039f44403d3923eb9ef15517ce585d3bd07361f41a8e25d2ff77e0be3bcc44a2f19b4c1327bcc53eedf35c8be35d7b22f3f24eaffaf914094ce73fdfc49b4d620cf30f0014b9c959ccc8d9b3145ddf392f443ccec581e76a6ee8e93d7419792e2f22792dfc202b6ae1de1942c5e6f8cc0cf4634db79c4c4c69feaf0ddd0402bf69205dd86f9be3a7d6ce5f2afadc58afb8456f9aaf108a51e3fdd6f5e8925dda55e23ff6b272e89433b7333421b44460ef773a25ab93488a91529c416ace870c541a946a80e0b3d2dbc063063ed70bbcebb458e2d8dbd456355b10b6f5e2d4474606f71ed42df50fc836fb09800944f00f8340b8899a88476826230c6a06afbba789aaa728399e48d0c8eae9dffebf6b2bc31a7956779206e8c067b411af4da7c96bee59212a47a6313c7389ac7bc025bc7abaac26ad3afd5eb36a92313546ed148d48cee3d0a2e0298950290f2166e697217f8a58e4dd909f3b27cd60ac3647f0cd888cadb5d466ba21ea4557fc561dc3eef7ff14def24de4343e782b22bf229106d8c9994908056f780d87fd268529d5a159a6226866a3e6cc1699cb120cc3b6367b3289d7d2bde5f5af153035693a41e12ca74b2facf9be0701aa6455c96754ea27adf906a6654c176fbeb063b4af0c7ecca42b2a1ed0fd726f5b30129047564bf966c456e2e5f670957fa0deda64e7e3763f8e9819ae1662e47dd7eeb1830b5eb750163d2d967bd01a675f4894dcff7649c8e292326218f2295a443bd5c562a8c8863eaec112b3e2bf60c3810e3bd9f41783c099e1f1b72568be9ccd23131ba97e025288276bba7898d9023b24762f47bd4a195399ffc152dc7ed4c7f86985dc62bdc37cd07b82f553f625bee706bb51c1a21bd287d4dd9ae026119b9e47b80f011ebcda1de04041bf22d6a744b215dfb6d2c2ad5354edae58d2224b89911de5a26e5fecc2336cbf802bf6aa4c3b07f20541b3704141a6cf33242ea964995cbb0f28c876998dd8d74ac6905c22d55cb737de4946531063fc244dc3b3221ed06a573c400fd2f59f5c9d6a3788c1488dc6e6a8774ea7c5e3cc657d12feb8304627da28b1772c4d65499606321b4ea1fb458463e45fc8bfe817128436e654e8f693e1c9a895650d237bf867324ff8c07abb8aa1611205f66ec399b54398c85541d013ecb0b6a9aa27b32ee9c8e1bd33975c62079cdbcf8f92dd8503e0b2f6cc00daeee684b89b69c8ab3cbc7d9332232ca055b8345583b83be9a964a57366b072a9abe3cd6279b91150248ca2d1c05ac273bc27ccf7d87b93aad3f1581c9459405ead99a3658d7cdd3dd767f3893121b39d70fa533c7c626e948de1d72cf23c08907eb2f787d7fc6391158b2084c7278754ba2307bbc47ec2175075e8507fb3dc3481d027524cc2887184227348ddf8c029107aa4a7b3b8c2b5f5687c434c777f08f870804a0c8dbb92e195b37b38fa1172cf25585e71eb5566f3fa5cfb83a38b22f27e698ac515d758d6c3e7eb966067c3380cf4c766628092d6287ac2974e0c74224ff744f8fb67034339931dfcb039b810a284ca64bf0d0c3006d77a64c8924fac7945ca714a60ac45e44b748ef64349a2d179b71bb45cf10680f7525994ccf5279367f568369bfb4a6de5b3ae3fa58a2d6c7daf5330de790fc059c6e5dc0441750eaff46293f42c84d62d7c93c3a0fea8c7ed3c654fcfbabcac2eecf2b7fd155a337723b7fe57c28ab39fbe33ad8eca329a847e5cb49743b72726bfcc7f37897377fe249b04bf8239261c2c0294939207437e7ba63971e043a66efdd9fbde62986f6667da207842e0ec13c87e546a8549abe1c28bb25defb60f3f171494b6209b979cf2ec49c39f2d84577ed1df5ac2013cc5bc9b2812fba599770a0a66cbbfff781cc6bc05bf1efc0eb13b0b2415f21d999d9e0adbc7cc8155374c4d43d713e1c219b118ca09a3126222261b600d16b290d80e895a6273307ccaa05d858a24134b67dec43e2f545938d0f012d450579689a66cecd6fa34b08e05ad09f010b876de22265a7be30d63d7a217f97d38664912e97f84f470792f64892449939e8ee52c8088a62dfb0b76393f60101f5853ce8f89fadcf3e800262f26066fa55739ae00fcfd386d05bbd05af9e71a8ff2f4b03f6ed6a02faf93739143b18543f2412caba90cf7847749483730a01e8c984e5debabe3c949b40624b718050587e4e8374033b8beee44727ad793063e9ce97144a3526070ae60131515d4d632ad13db93288e117f239a961e19e25403ca8fdb39a41fcf7f7ebab4867951fdb38b2d0d629de3a92cc56ea86234d170465fb6a63939208a9c6d31fd9e6e5ea5c9a68200941c1b9d2360b2383618676001c549c2300712cd4145d0067dd3fb673f1e4872a68dcd9f6753da3d6e44ab025e42a8205afaa887e5678713133a5106e08bcce5df8fdc5bc9e5a1b65d7bd9181a8cdc40605fe49b3c031e018b6e8c99f5dc157fe73585f13177ee336d0ce3d545152f84a52baf4f2e16e7147c2a20dec41ed068026034d069945b3469a00ed67526429b081ae80e5bc73e33f5772422571ca2f381d40e63e1200b3eb9c4764bb393521782bcbf8f6d5632fc9aa1965f8676255ce843c7ee652f309a3a3242d76ac5401b1f12a4354af004de3d8d16bb4fe12c274a9f0cf9eff8c19ba19942d0511d1077b9435f6e5c89b424b7a14be605fd80523dd52c0dd45f0d5e81f5ed2f852469833d59d9b6c6355c57d2ad2372c6cc84493a4ccdced30063cd152e0f068c5411650b432cd77a2f205b93a690f946355589e374abc051ee0a9a7635616c67eea27f76b89d65b52c58d233281b379da4b0ef8bc73ea8d96c57783a5c5f9f6d4534ab088da271c82bac9fc173baecc556cda662c85109cb11244aeb1e41195bfd85197aece0b8c5da0d8b98f3c4586913b527c889a28f3b57d3b56d35d83442af6f70820bcfeb56ca21326ee0cae6f10bcd00177fbaf8fd721202569389b0ef786ad69c561a681e14c2a42c7ee3c81a5d066dc6c81e9cbac13a4d166d2d3548e82f8913f682d543a4fee552b99f4757360648b8ecfc1e5da0fc2ffc4ba88a82ee6ec5f590369cbc3473227355cb1fdd98fffcaccc6b58da60cc7b70b402263c56a7bded591c4c4d8db5ea47662cc291b9627403eeed589de8d782906416d758fcdb8ec304fe472e82eba909d5db2a13e9ee369b9155c1c667658fea9b881cfce666e1f69d957feeaa73d54b35c39ebeb5b8da39d52c0ac5a2691ae36c75182e6e7728a00b4f3670532538853d2522a528e265a85648aa9e67916a07720bdfe446531586ac24df925a595e24f9cece11582f56a607fd006245fd8f3f51b50ffb218f732bc6cfe80fe4868e2c76724dcfbfe16d37d02784fc7a482c443b5459ee5cf80f87aed67a63f8f42fc43a908551eadbb15e225964f64ee2b8aac80553dbaa4d8904787c69758f9d96d093ab2e01a74a5608bd7f9bcbeccfae54b62c36e51eb41f0e5101b549df3e090886705207687ef15dfa530c440e28568389377ee0a2301bb8625d49e2510d8f23dc4a1bd4d94f1964ef11d3a73be06d9ef604604e7c6d2c9074481cf722be383c0d0d4fe88030a02ec46c687f527888035a3c50f2cf1bc31e66ada73ae5fefcc17366bc4e83f75a9d4ccca1247bed9c6ee6a98c1047a7591d46bbfdd6f639c49222a9a9839536dfdcc455fe4cead293ba83993b14450337e44979c52c0ee4be02f93e7a66c9c7f23b7ccf9af9332f72ad6e90ce4a54d95b5a1789ed5f0906e11f0993be6ca383c1982a3d12d136ae62649d6fd235c15a5ebc2d0db02f1881519874aef65ea8aa6408bf7079db8792f32a59439aa76c7de6ad22259db08e91fc2c387e4793ec8b7ae72dedbb76832c557635bcb83a36f292e8e0d097b042f47b0f23d08fb4e6eae907b481bbeadf8009dacc66cc0a429e44aa9b8bcd081b5e54c26a16e2f94e781af8fccc227cc39d2fec3e3349a6903e1dfa4b10b9f5343cbfef2f1dce0955"}, {0xe4, 0x113, 0xee, "4abfb82a12bb5e9c94fa231024f6714911bd76ff7e42ea730781643b8524601b3fa690ea762c7c724343a9c0bf1ec97e2157f1cc203d0d10533e679529c82b78126ce9ddf167fe8bb340ed1f6bb4afd39035f62dba82b1a2c12754f0740d542be87704c0b80a6dbd09cf6c2a95d25c336b802b64170165ba2e6ff52ca7c0a24d84aa17ee1bd62bd7a77f5e6215be6a9ca7135988dab4b7d5a62117f9bbd53781916ca48cfc1328bea751b46bb2f18f06bb0ea216e851b44244c6e693fa9e441577ab39016fef61841df64a8776519c86fa68735499a6022a"}, {0x108, 0x10c, 0x4, "00ad6d876bfab11501bbcda6b65d913bb225829b184e5754c81e8bc04826aefd703a70fc811055a19c9da18b6aabf31f98084477aa6f6f3b36047dc3ed75aa6039e42b0eb63290ffa42373c2326d6b2827c08ba5f0e9dac3952148c27905ce14260c8f3fa3bbb88e246591ea3c913460f0e1378fb3cb2cd8bbdbbbd99b5960a07c9e86d8c86da0981d8eb50730fed46b0d3a9f95cec2bc56b93fbd5056f56e7fc62e9cfb4adf7f5b7ddaeba9bae1c8ea73dfe15652fb72a1b28dd4c32dfa6bf26833e335cb40c2052b1edbdbdeca3ffe0f284d953d66d0788763cd178effd9f0cffd74a57fc1f273df67e49312f30bd553e46678aed1fef97ddd7a"}, {0xd4, 0x10a, 0x9, "27c8e7e64bd4f6eb883734e88c2855b458b627992e1143dc7215cb72a4b76a7be8e50797bd9a9be419b562e35b2478b002cb40811da77c57d178fe61364cef12363c77569459402d0357a3aeb2ff240b83550dc24252600166b611b865de86f001a2d0f8d2e138f297d3d8696a2b424b620548a08bf3f3c28650ed8b039c962b47c650e8e0d22c23ac16d7a0fae0714cd0ee05d4a3b215226fa4645684671c0712066516785e87cf774c604be76ca90c9e1de6f0a7a31622cd4db1c76546dfe2063b60c01e428396"}], 0x14ac}}], 0x3, 0x8801) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffff, 0x40083) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, '\x00', @raw_data=[0x375e6cf6, 0x1, 0x2, 0x8, 0x1, 0x3, 0x1, 0x80000000, 0x101, 0x5, 0x5, 0xa5ac1c3, 0x6, 0x9, 0x5, 0x1b, 0x9, 0x80000001, 0x9, 0x80000001, 0x103, 0x1, 0x3, 0x4, 0x1000, 0x1, 0xfffffffe, 0x6, 0x95, 0x6, 0x1, 0x9]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, &(0x7f0000005280)) 5m35.532403166s ago: executing program 2 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x3800, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}, 0x1, 0x0, 0x0, 0x4004840}, 0x80c0) 5m35.270059277s ago: executing program 2 (id=1366): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000140)={0x0, 0xd8, 0x7d, 0x80000000, 0x18, 0x19, 0x3}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 5m31.107605038s ago: executing program 2 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2400) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(r0, 0x406, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = epoll_create1(0x80000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)={0x2004}) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40000004) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) shutdown(r0, 0x1) 5m30.843673885s ago: executing program 2 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYBLOB="61d90100000000001800128008000100736974000c000280080002000a01010008001f0007000000"], 0x40}}, 0x4080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x3, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0xfffffffb]}) 5m30.331394941s ago: executing program 32 (id=1375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000001000"/20, @ANYRES32=0x0, @ANYBLOB="61d90100000000001800128008000100736974000c000280080002000a01010008001f0007000000"], 0x40}}, 0x4080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000340)={{0x8, 0x6, 0x0, 0x0, '\x00', 0xfffffffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x100001, 0x7, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000004, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x5, 0x0, 0x0, 0xe4, 0x0, 0x9, 0x3, 0x800, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, 0xcdc, 0x0, 0xffffffff, 0x600000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1559, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x80000000, 0x400000, 0x3, 0xc13, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x80000000, 0xfffffffd, 0x0, 0x3, 0x800001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40000000, 0x2cbb, 0x2, 0x7b1ae8f, 0x3, 0x0, 0x80000005, 0x0, 0x3, 0x2d6, 0x0, 0x6, 0x100000, 0x0, 0x0, 0x4, 0x1, 0x2002001, 0x0, 0x0, 0xd686, 0x0, 0x8, 0x40000000, 0xfffffffb]}) 9.647454749s ago: executing program 1 (id=2370): syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000f2303920422c021240850502030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0) r0 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x200000a, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0x2) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r4, &(0x7f00000001c0)={0xa0a02, 0x45, 0x20}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r8 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x10000011}) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x4c) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r9, 0x10000000000001) keyctl$setperm(0x5, r0, 0x6200204) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000000100c0"]) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x68, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108, 0x4802}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x8}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2d, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x68, 0x1d, 0x2, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x4, 0x2, 0xa}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xb8}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x80}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000405}, 0x40) 9.103795117s ago: executing program 0 (id=2372): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8.648241569s ago: executing program 0 (id=2373): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x20, 0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 7.718080981s ago: executing program 1 (id=2377): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1f, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x100b, &(0x7f0000001e40)=""/4107, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x5b) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x110) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0xd, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.287455165s ago: executing program 3 (id=2384): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x17a4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfc}, @filter_kind_options=@f_u32={{0x8}, {0x1750, 0x2, [@TCA_U32_POLICE={0x8d0, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x5, 0x81, 0x5, 0x3, 0x3, 0x5, 0x8, 0x7, 0x1, 0x9e24, 0x7ff, 0x1, 0x5, 0xc83, 0x4, 0xef2e, 0x151, 0xffff, 0x2, 0x81, 0x4, 0xb04, 0x8, 0xffffffff, 0xff, 0xd595, 0x7, 0x80, 0x7, 0xfffffff8, 0x6, 0x40, 0xffffffff, 0x3, 0x5e14, 0x800, 0x9, 0x6, 0x8, 0x7, 0x4a, 0x44, 0x0, 0x206, 0x496, 0x6, 0xfffffffc, 0x0, 0x4, 0x45, 0x0, 0x448, 0x3, 0xfffffffb, 0x4, 0x9, 0x2, 0x40, 0x4, 0x80000001, 0x0, 0x6e, 0x1ab0, 0x1b, 0x8, 0x6, 0x1, 0x2, 0x3d7, 0x6, 0x5, 0xfffffffa, 0x4, 0xb1, 0x7, 0x4, 0x5, 0x2e, 0x3, 0x5, 0x8, 0x400, 0x9, 0x9, 0xd, 0x4, 0x1, 0x100, 0x27, 0x9, 0x7f, 0x7fff, 0x1, 0x10000, 0x38b, 0x0, 0x6, 0x3, 0x7, 0x0, 0x7ff, 0x6f, 0x1000, 0x9, 0x1000, 0x1, 0x6, 0xd4f, 0xda, 0x1000, 0xffff7fff, 0x7fffffff, 0x0, 0x80000001, 0x5, 0x0, 0x4, 0x40, 0x80000001, 0x0, 0x8001, 0x9, 0x87b, 0xac8a, 0xfff, 0x6, 0x2, 0x1, 0x9, 0x1, 0x1, 0x5, 0x200, 0xf, 0x3, 0x4, 0x9, 0x8, 0x3, 0x3, 0x2, 0x7, 0x8000, 0x1e, 0x0, 0x3, 0x8, 0xa, 0x0, 0xffff1fe1, 0x8, 0x6, 0x0, 0x3, 0x7aa, 0x3ff, 0x78a8, 0x5, 0x1ff, 0x1400000, 0x81, 0x101, 0x7, 0x6, 0x4, 0x5e, 0x1, 0x1ff, 0x655, 0x2, 0x5, 0x3, 0x9, 0x101, 0x9, 0x9, 0x2, 0x8000, 0x7, 0x8, 0x641, 0x4, 0x5, 0x9, 0x8, 0x5, 0x1, 0x7, 0x1, 0x1, 0x0, 0xfffffff7, 0x80000001, 0x6, 0x3, 0xac41, 0x2, 0x1, 0xb7, 0x3, 0x4000000, 0x41, 0x101, 0x3, 0x5, 0x9, 0x1000, 0x5, 0x8001, 0x5, 0xfff, 0x0, 0x5, 0x55, 0x8, 0xe7, 0x39, 0x3, 0x4, 0xb7d, 0x259b, 0xfff, 0x1, 0x2, 0x4, 0x0, 0x9, 0x7ff, 0x9, 0x4, 0x33, 0x3, 0x2, 0x0, 0x2, 0x7, 0x5, 0x6, 0x8, 0x1000, 0x9, 0x87, 0xffffff01, 0x67a, 0x8, 0xffff, 0x5, 0x9, 0x7, 0xd, 0xe, 0xfffffffb, 0x9, 0x93d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x5, 0x5, 0x0, {0x81, 0x2, 0x71, 0x9, 0x1, 0x7}, {0x1, 0x1, 0x5, 0x1ff, 0x3, 0x6}, 0x4, 0x5, 0x4}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0x10001, 0xa0, 0x4561, {0x6, 0x0, 0x8, 0x7, 0xfe00, 0x6}, {0x4, 0x0, 0x7, 0x7, 0x3, 0x1ff}, 0x9, 0x0, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x8, 0x9, 0x6, 0x5, 0xb, 0x7, 0x1, 0x7, 0x5, 0x80, 0x80000000, 0x5, 0x800, 0xff, 0x0, 0x40, 0x7, 0x9, 0x2, 0x3, 0x101, 0x5, 0x9, 0x401, 0x6, 0xf2, 0x2, 0x7, 0x7, 0x3, 0x10, 0x5, 0xffff8000, 0x3c6, 0x8, 0x2e, 0x5, 0x5, 0x8, 0x0, 0x5, 0x0, 0xd, 0x6, 0x1, 0xffff9dcb, 0x0, 0x2, 0x39b, 0x8, 0xc, 0x2, 0x7, 0x0, 0x1da, 0x2, 0x48, 0x1c29, 0xb, 0x698, 0x5, 0x1, 0x1d0d, 0x300, 0xf, 0x6, 0x10, 0x8, 0x80000000, 0x2, 0xad4, 0xf8, 0x7ff, 0x1ff, 0x7, 0x6, 0x8, 0x9, 0x10000, 0x7e1, 0x5f, 0x40e8bc4e, 0x75, 0x9, 0x4, 0x8, 0x3, 0x8, 0x2, 0x1ff, 0x14118449, 0xf348, 0x7fffffff, 0x1, 0xfffffff7, 0x4, 0x0, 0x8c9, 0x81, 0xd, 0x4, 0x7, 0x40, 0x1, 0x48, 0x7, 0x14a3, 0x9, 0x1, 0x7, 0x7, 0x7f, 0x6d, 0x3, 0xa, 0x100, 0x1, 0x6, 0x1, 0x5, 0x101, 0x2, 0x8, 0x9, 0x6, 0xa824, 0x7fff, 0x5, 0xe, 0x3, 0xfffffff8, 0x100, 0xc0000000, 0x8, 0x2, 0xfffffff0, 0x1, 0x0, 0x3ff, 0x9, 0x3, 0x1f32, 0xd, 0x3c5, 0xe6, 0x2, 0xfffffff9, 0x9, 0x9da, 0x7fffffff, 0x1, 0xff, 0x1, 0x80000000, 0x0, 0x4, 0x8, 0x0, 0x6, 0x7fff, 0x6, 0x9, 0xfff, 0x9, 0x9, 0x80, 0x54, 0x7c, 0x8, 0x1, 0x1, 0xe, 0x1, 0x5, 0x254, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x8, 0x6, 0x0, 0x10001, 0x6, 0xd, 0x6, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3, 0x1, 0x9, 0x40, 0x9, 0x1, 0x9a6, 0x81, 0x3, 0x100, 0xc07, 0x7, 0x0, 0xe, 0x7ff, 0xc1, 0x1, 0x4, 0x5, 0x7fff, 0x1, 0x5, 0x8, 0x3ff, 0x80000001, 0x7, 0xffffffff, 0x3ff, 0x6, 0xc, 0x65d, 0xd, 0x3, 0xc04, 0x10001, 0x2, 0xda6, 0xbed6, 0x6, 0x4, 0x6, 0x5, 0x5, 0x264, 0x98, 0x101, 0x3, 0x9, 0xf, 0xcc, 0x8, 0xeab0, 0x9, 0xd, 0x69b3, 0x4, 0x8, 0x8, 0x80000001, 0x7, 0x2e244449, 0x81, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x7fff, 0x5, 0x1, {0x2, 0x2, 0x6, 0x6, 0x2, 0x1}, {0x7, 0x2, 0x7, 0xe, 0x5, 0x9}, 0xffff, 0xfffffff2, 0x7f}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}, @TCA_U32_SEL={0x614, 0x5, {0x1, 0x0, 0x8, 0x4, 0x1d, 0xc0, 0x2, 0x10040, [{0x4, 0x1a, 0x7fff, 0x9}, {0x5, 0x7, 0x3, 0x10000}, {0x634a, 0x1, 0x400, 0x3}, {0x5, 0xff, 0x7, 0x5}, {0xfffffff7, 0x2, 0xfffffff8, 0x84}, {0x38, 0x6, 0x7, 0x6dfc074c}, {0x40, 0x8, 0x101, 0x40}, {0x7ff, 0xff, 0x1, 0xba6}, {0x1, 0xff, 0x0, 0x5}, {0x5, 0x1, 0x34f8, 0xd}, {0x8000, 0x5, 0x2, 0x81b3}, {0x101, 0x8000, 0x6, 0x10000}, {0x0, 0x8, 0x0, 0x7}, {0x727, 0xfffffffd, 0x4, 0x8}, {0x3, 0x4, 0x2df, 0xabc}, {0x3, 0x100, 0x3b50222b, 0x80000001}, {0xd, 0x1800, 0x5, 0x3}, {0x7, 0x80000000, 0x5, 0x6}, {0x8, 0x5, 0x5}, {0x3, 0xfffffd5f, 0x1ff, 0x100}, {0x2, 0x400, 0x1, 0x1e}, {0x6, 0x5, 0x9, 0x96aa}, {0x7fffffff, 0x2, 0x7ff, 0xd}, {0x4, 0xf57, 0x458, 0x8}, {0x2b4, 0xfffffffd, 0xf92, 0x1}, {0x8, 0x0, 0x9, 0x4}, {0x10, 0x7, 0x5, 0x4}, {0x9, 0xffffffff, 0xa0b}, {0x6, 0x59ad, 0x8, 0x6}, {0x2f0, 0x2, 0x7ff, 0x1}, {0x1, 0x0, 0x4}, {0xff, 0x3, 0x1, 0xc}, {0x7, 0x0, 0xff, 0xfffffff7}, {0x4, 0x8, 0x5, 0x40}, {0x5, 0x1, 0xa4, 0xffffffff}, {0x419, 0x0, 0x0, 0x46a0}, {0x9, 0x6, 0x0, 0x9ddf}, {0x5, 0x1, 0x3, 0x1ff}, {0x1b, 0x9724, 0x1ff, 0x7f}, {0x8000, 0xf75, 0x6, 0x10001}, {0x9d, 0x0, 0xfffffffb, 0x946}, {0x0, 0x7, 0x8, 0x10}, {0x9, 0x4, 0xfffffffb, 0x9}, {0x8, 0x7, 0x10, 0x6}, {0x2, 0x10001, 0x8, 0x5}, {0xb5c1, 0x4e79, 0x56f, 0xbdc}, {0x9, 0xfff, 0x9, 0x9}, {0x4, 0x6, 0xa5, 0xe}, {0x3, 0x9, 0x7, 0x9}, {0xd8, 0x437, 0x4, 0x8001}, {0x0, 0x5a0, 0x2, 0x5}, {0x7, 0x7, 0x7ff, 0x3e91}, {0xac2f, 0x1, 0x4, 0x8}, {0x3, 0xff, 0x8000, 0x731b}, {0x1ff, 0xa, 0x8, 0x2}, {0x8, 0x80, 0x7, 0x1}, {0x9, 0x303, 0x7, 0x5}, {0x0, 0xa, 0x4, 0x5}, {0x0, 0x5, 0x1, 0x7fffffff}, {0x3, 0x7, 0xfffffff9, 0x5}, {0x0, 0x5, 0x2, 0x8}, {0x6, 0xf, 0x6, 0x2}, {0x3, 0xffff0000, 0xf22, 0x2}, {0x4, 0x3, 0x4, 0x1ff}, {0x3, 0x4, 0x8, 0x5}, {0xffffff7e, 0x80000001, 0x7, 0x80000001}, {0x2, 0x3188, 0x7000, 0x4}, {0x8, 0x5, 0x4, 0x8001}, {0x7, 0x800, 0xffff03ed, 0x400}, {0x3, 0x200, 0x4, 0x6}, {0x7, 0x4, 0xbc32, 0x4}, {0x8, 0xc45, 0x7639, 0x9}, {0x2, 0x8, 0x2400000, 0x3}, {0xe, 0x5a, 0x34fc, 0x7f}, {0x94c0, 0x0, 0x8, 0x6}, {0x9, 0x6, 0x7, 0x1}, {0x2, 0x7, 0xd73}, {0xffff, 0xc9, 0x1b, 0xe5}, {0x4, 0x0, 0x80, 0x2}, {0x6, 0x0, 0x8871}, {0xc, 0x0, 0x63b8, 0x3}, {0x80, 0x6904c235, 0x401, 0xd7f}, {0x35792f16, 0x30, 0x1, 0x6}, {0x8, 0x1, 0xd0}, {0x20000000, 0x8, 0x6c, 0x1}, {0x101, 0x2086c4a2, 0xa, 0x1}, {0x8, 0x7, 0xffa, 0x400}, {0x40b77, 0x1, 0x5d2, 0x2}, {0x2, 0x2, 0x8, 0x5}, {0x918, 0x9, 0xfffffff8, 0x5}, {0xa16, 0x18c, 0x1, 0xd9fc}, {0x24, 0x9, 0xaf3, 0x4}, {0x1, 0x401, 0x2, 0x8}, {0x9, 0x0, 0x2, 0x1cb8}, {0xa460, 0x7, 0x9, 0x3ff}, {0x5419e79a, 0x2, 0x0, 0x4}]}}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_INDEV={0x14, 0x8, 'syz_tun\x00'}, @TCA_U32_POLICE={0x820, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x62, 0x5, 0x5, 0x7, 0x73b, 0xff, 0x4e43b74b, 0x1a, 0x800, 0x0, 0x100, 0x401, 0x5, 0x8000, 0x7ff, 0x7, 0x0, 0x8000, 0x80000000, 0x400, 0x80000000, 0x7fffffff, 0x7c, 0xb, 0x8, 0x6, 0x7f, 0x4, 0x10000, 0x0, 0xc875, 0x6, 0x7fffffff, 0xaff, 0x6, 0x14, 0x8, 0xe7b, 0x0, 0x0, 0x1, 0x67c, 0x9, 0x50d406ac, 0x22a, 0x8, 0x80000000, 0x3, 0x47d0, 0x5, 0x3, 0x40, 0x100, 0x4, 0x2c, 0x21, 0x1, 0x0, 0x3, 0x0, 0xdd9, 0x80, 0x95f5, 0xe304, 0x8, 0x2, 0xed, 0x7, 0x2, 0x2, 0x7868, 0x3, 0x200, 0x8, 0x4, 0x80, 0x5, 0x20000, 0xfffffffd, 0x80000001, 0x4, 0x9, 0x5, 0x4, 0xfffffffd, 0x88da, 0x6, 0x2, 0x7, 0x1, 0x6, 0x0, 0x9, 0x4, 0x4, 0x3, 0x8, 0x7fff, 0x4, 0x8, 0xe61f, 0x5d0b, 0xf6a, 0x4, 0x100010, 0x0, 0x81, 0x6, 0x1d6e, 0x8, 0x4, 0xa, 0x7, 0x4, 0xffffffff, 0x8, 0x1, 0x4, 0xfffffff0, 0x2869e7b5, 0x1, 0x5, 0x80, 0x3, 0x5, 0x1, 0x4, 0x4, 0xfffffff9, 0x2, 0x3ff, 0x7, 0x8000, 0x4, 0x6012, 0x8, 0x6, 0xc6f6, 0x3, 0xfffffffc, 0x3, 0x81, 0xfffffffb, 0x1, 0x21, 0x4, 0x9, 0x6, 0x9, 0x5, 0xb0fb, 0x5, 0xfff, 0xf1b9, 0x0, 0x4, 0x401, 0x1, 0x8, 0x9, 0x2, 0x0, 0x8, 0x7, 0x100, 0x4, 0x7ff, 0xfff, 0x80000001, 0x9, 0x2, 0x1, 0x81, 0x1, 0x8, 0x8, 0x6, 0x7, 0xbd79, 0x7ff, 0xffffffff, 0xb, 0xffff, 0xae1c, 0x3, 0x1, 0x0, 0x200, 0x5, 0x48, 0x6, 0x4, 0x0, 0x5, 0x5e, 0x0, 0x7fffffff, 0x7, 0x8, 0x100, 0x0, 0xd1be, 0x8, 0x3f4, 0xffffffff, 0x10000, 0x0, 0x0, 0x10000, 0x2, 0x136, 0x2, 0x6, 0x4, 0x3, 0x8, 0x7fff800, 0x3b, 0x4, 0x80000000, 0x7, 0x6, 0x6, 0x4, 0x6, 0x5, 0x6, 0x9, 0xc6e, 0x0, 0x800, 0x400, 0x302e, 0x0, 0x100, 0x1, 0x10000, 0x2, 0x4, 0x0, 0xbd, 0x0, 0x80000000, 0x2, 0x800, 0x8, 0xfffffffb, 0x3, 0x472, 0x4, 0x200, 0x8, 0x11, 0x7, 0x82ca]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xad0}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x9, 0xf024, 0x1, 0x2, 0xfffffffd, 0x23, 0x8, 0x35, 0x10001, 0x2, 0x2, 0x3, 0x200, 0xf2340606, 0x0, 0xc44, 0x2, 0xc, 0x5, 0x7, 0x3, 0x7, 0x10, 0x6, 0x0, 0x7fffffff, 0x5, 0xace, 0x54, 0x7, 0x3, 0x8, 0xfff, 0xd076, 0x7, 0xffff6b30, 0xc1, 0x7, 0xffffffd2, 0x7fffffff, 0x1, 0xfffffff8, 0xfffffffd, 0x1000, 0x5, 0x0, 0x10, 0x80, 0x10001, 0x301, 0xd5a4, 0x43, 0x5, 0x0, 0xfff, 0x1, 0x8, 0x1cf, 0xb, 0x0, 0x2, 0x5, 0xa303, 0x1, 0x8, 0x0, 0x2, 0xf07, 0x7, 0x5, 0x48, 0x101, 0xf75, 0x8, 0xe, 0x6, 0x4, 0x66, 0x80000000, 0x6, 0x4, 0x0, 0x800, 0x7f, 0x2, 0x9, 0x0, 0x5, 0x4, 0x2, 0x0, 0x0, 0x2800, 0xae00000, 0x1, 0x2, 0x66fc, 0xc, 0x1, 0x0, 0x4, 0x81, 0x7fff, 0x401, 0x2, 0x5, 0x8001, 0x1b3, 0x1, 0x7, 0x2, 0x3ff, 0x7, 0xa, 0x7, 0x8, 0x5, 0x56, 0x7, 0x101, 0x80000000, 0xffffff81, 0x101, 0x100, 0x4, 0x9, 0x5, 0x401, 0x10000, 0x3, 0x68d8, 0xfb, 0x4, 0x80000000, 0xc6bf, 0x1, 0x9, 0x80000000, 0xff, 0x8, 0x101, 0x3, 0x5, 0x1, 0x8, 0x7fffffff, 0x4, 0x8, 0x80000000, 0x6, 0x81, 0x3, 0x1ff, 0x8, 0x3, 0x1, 0x5, 0x8, 0x4, 0xfffffc00, 0x9, 0xc, 0x8000000, 0x200, 0x1, 0xc, 0x0, 0x3ff, 0x5, 0x8, 0x0, 0x9, 0x2, 0x8000, 0x60, 0x0, 0x8, 0x3, 0x401, 0x7, 0x0, 0x7, 0x1, 0xfffffffa, 0x7, 0xa4, 0x6, 0x7fff, 0x10001, 0xff5, 0x3, 0x10001, 0x5, 0x3, 0x1, 0x1, 0x6, 0x7, 0x101, 0x9d, 0xffffffff, 0x3, 0x0, 0x3e, 0x3, 0x8, 0x4, 0x1000, 0x5d, 0x89, 0x10001, 0x40, 0x9, 0x2, 0x1, 0x7, 0xa39, 0xe, 0x3, 0x9, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x200, 0xe6aa, 0x5, 0x100, 0x7fff, 0x3, 0x5, 0xf, 0x0, 0xfff, 0x1, 0xfffffff8, 0xfffffffe, 0x8, 0x9, 0x4, 0x2, 0xfff, 0x5, 0x1000, 0x9, 0x9, 0x1, 0x5, 0x200, 0x7, 0x156, 0xf0, 0x5, 0x2]}]}, @TCA_U32_MARK={0x10, 0xa, {0x7fff, 0xa35}}, @TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x48}]}}]}, 0x17a4}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0xfffffffe, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$packet(0x11, 0xa, 0x300) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast}}}}}}, 0x0) io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0) r12 = syz_open_dev$ptys(0xc, 0x3, 0x1) dup(r12) 4.497366531s ago: executing program 3 (id=2385): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000200004005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff0c000300686173683a697000"], 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x0) 4.443862999s ago: executing program 3 (id=2386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x2e, 0x2, 0x2, 0x5, 0x0, [@mcast2]}, 0x18) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/56, 0x38, 0x0, &(0x7f00000004c0)=""/155, 0x9b}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x8}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x51, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r7 = openat$vsock(0xffffff9c, &(0x7f00000004c0), 0x101, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x7000001) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r10 = dup(r9) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f00000000c0)={0xc00, 0x80600}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x10, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@generic={0x9, 0x7, 0x4, 0x7ff, 0x7fff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @cgroup_device=0x6, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x3, 0x2, 0x2}, 0x10, r3, r4, 0x3, &(0x7f0000000580)=[r5, r6, r7, r8, r10, r11], &(0x7f00000005c0)=[{0x0, 0x1, 0x5, 0x9}, {0x5, 0x1, 0xb}, {0xb9c4, 0x1, 0x10, 0x8}], 0x10, 0x8}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r14 = dup(r13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r14, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r15}, 0x38) r16 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r17 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r18 = dup3(r17, r16, 0x0) ioctl$BINDER_WRITE_READ(r18, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r19 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x40802, 0x0) write$tcp_mem(r19, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x691, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x19, &(0x7f0000000100)=@raw=[@tail_call, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @call={0x85, 0x0, 0x0, 0x98}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000200)='GPL\x00', 0xb, 0xc6, &(0x7f0000000240)=""/198, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2e, r1, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x7, 0x9}, 0x10, r3, r12, 0x0, &(0x7f0000000480)=[r14, r15, r18, r19, r20, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) 4.347912961s ago: executing program 0 (id=2387): socket$kcm(0x10, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000140)={'pim6reg0\x00', 0x5}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@multicast1, 0x4e23}, {@in=@broadcast, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x134}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) inotify_init1(0x800) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) 4.219586898s ago: executing program 3 (id=2389): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./bus\x00', 0x0, 0x18}, 0x14) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.121513796s ago: executing program 1 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x406, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 4.103864665s ago: executing program 5 (id=2391): socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() socket(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0xffffffff, 0x62}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x2583, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="cb3d9748a5ad64d5ae26785afab94d0972dc876d9f5ac0ed98e40a6cf82ba9984a59e2669f64f275311b177dcce642068816839670c5c4a8f8e43fd9f08137af4a1981cdecb86ec0aa24208d43de8d31344eee23c017f0d2ff28ddd5ba60aa512d2287a4cecf7cd907484a8a8473a307c1a73470"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.959160062s ago: executing program 4 (id=2392): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x440) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80800) write$UHID_CREATE2(r3, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xa0, 0x5, 0x6, 0x3, 0x8, 0xeea, "07f1ca3279721917f674cee30acbc23c9266acd64a694c6642d3358c038acca13be9a1015e8bdd7cf84e8d7cf621249d98f66dfa2d60e63ee3ec1bf8c3612965a987f400efda2a9f333e6d0ab2a11c744b5d7c2f1c44306b1aceee2635250c93ed48cbb0e72625f76f95facd2f094edb4dd08032d78c38f67125fecdf4adb0207dcfe0fb51a1ec8bb206919e8d11b602e54804f203fffbac52466ae755c3aab9"}}, 0x1b8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002580)={0x0, 0xfffffffffffffffc, 0x1000, 0xb, @scatter={0x4, 0x0, &(0x7f0000001480)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/11, 0xb}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000480)=""/4096, 0x1000}]}, &(0x7f00000014c0)="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", &(0x7f00000024c0)=""/84, 0x7, 0x24, 0x3, &(0x7f0000002540)}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002600), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000002740)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002700)={&(0x7f0000002640)={0x88, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) fstat(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r7, 0x3, &(0x7f0000002800)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000002980)={'gretap0\x00', &(0x7f0000002880)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x3, 0x3, {{0x34, 0x4, 0x0, 0x2, 0xd0, 0x68, 0x0, 0x9, 0x2d, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x18, 0x77, 0x0, 0x4, [0x9, 0xea1, 0x8, 0x4, 0x9]}, @rr={0x7, 0x7, 0xe4, [@loopback]}, @rr={0x7, 0x27, 0x7, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010102, @loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x7, 0x6d, [@private=0xa010101]}, @generic={0x83, 0x9, "cf0dfef0472250"}, @generic={0x89, 0x3, '9'}, @timestamp_addr={0x44, 0x3c, 0x87, 0x1, 0xc, [{@loopback, 0xfffffffe}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x100}, {@loopback, 0x101}, {@dev={0xac, 0x14, 0x14, 0x44}}, {@remote, 0x80000000}, {@multicast2, 0xaaa0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ssrr={0x89, 0x17, 0x3a, [@multicast2, @empty, @remote, @private=0xa010102, @multicast2]}, @end, @generic={0x94, 0xf, "adb30a218a1205c684f27c440f"}]}}}}}) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000029c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={r3, 0xe0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000002ac0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000002b80)}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000002f40)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002d00)=@ipv6_newroute={0x1d4, 0x18, 0x600, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x3, 0xff, 0x3, 0xfd, 0x5, 0x100}, [@RTA_UID={0x8, 0x19, r6}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0xb, 0xd4, r8}}, @RTA_METRICS={0xac, 0x8, 0x0, 0x1, "c98bbb5a60f0b0b5fbcc6383f29f84df58c401c093e12c624cf86ed15ff7f7d2de3f2810a272045f2f0d9f666bf1c8a71611236e4a638ad4e5af8bf16b2a0d258902a1305573e892e0d7808d672c35c903b4c1f48504073d524c19b38e37a8d9de1b15619d7bd106c20c1c712c50bddbe7565d100fabd4c4156ec53529cf4ec54e39b983972b831cfe7a8123329ebb1689d6453bc466b0afe4d14c6fc16901717bb8cad7dca14d54"}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8, 0x1, r9}}}, @RTA_METRICS={0xac, 0x8, 0x0, 0x1, "a61f5888d20378ce21bc140c4e2389234de98c0cfa98c95be7794f346a2acc495e07dcff19955d721dc4199c21faa3668b79855f34e77fc7bd57267e57854f8109fde248a57ceab5fab1883802770f4128eeb55efc93daecf51b9fb92a2e02960cc4adf0d12ba423db3e9ed849768e36ea7fb89b936a4f4ea0f4d90a087bdd5d837d488819480547ca3491215795cef866b3f3de8dcd013a78f645d73ecdea3c4977e6ed3e0bb8e0"}, @RTA_PRIORITY={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TTL={0x5, 0x4, 0x3}}, @RTA_IIF={0x8, 0x3, r10}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x28}}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2000c804}, 0x5) fsetxattr$security_capability(r4, &(0x7f0000002f80), &(0x7f0000002fc0)=@v3={0x3000000, [{0x5, 0xfffffff0}, {0xb, 0x800}], r6}, 0x18, 0x7) openat$tun(0xffffff9c, &(0x7f0000003000), 0x40040, 0x0) r11 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000003040), 0x0) connect$unix(r11, &(0x7f0000003080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000031c0)={&(0x7f0000003100)="1b80ae47f39007a491bdd10b3ecad18d1f1a50efcd94d95b33f63fc5e7bbfb5c5e030f61f2e4e9e4516f9cd92e740ffd1feaf53be19d6623595fa4d628c0aeec321af9f2400ea94c0c27c672870bb96e14df782f8a70f6a980625f7db4341b5117eeef6dcf297de292c28ddf9775e1ec158381fcfdebedb636b8b554edf01ddd4814b2a9a019c758ff", 0x89, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000003300)={r12, 0xdf, &(0x7f0000003200)=""/223}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x16fa) syz_genetlink_get_family_id$wireguard(&(0x7f0000003340), r3) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000033c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000003380), 0x111, 0x5}}, 0x20) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000003400)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000035c0)={0xffffffffffffffff, &(0x7f0000003480)="3e1a8d57de1a56324ec76e4445854623abe11810293ef7fb7745875ad32fedcf42506d7442586cf421f110bc06ec00556addd3972cec80cf60a212019fd02966c1b52f89c4778858ff05377f3f377ca6ea2bb8c1c9c4a601c48566088a89a03ccd60fb280f", &(0x7f0000003500)=""/144}, 0x1c) 3.743911951s ago: executing program 1 (id=2393): socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x1) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 3.731216487s ago: executing program 4 (id=2394): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r2, 0x8008b705, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="c8ec10ee6f39c22d1ce3da0612c181df8af2f74e65f14ad8fadbf411429e731861ab7de2866baac1244e1690ea90dd8fccaa164a94adc87fb0aebe46305c5a72a8ba2e0bdbdabbe6349347d1bca484dfb34c44b9789bccf0bf", 0x59}, {&(0x7f00000004c0)="446f7f0f57716177e41a39c42f6abebe6d0046efc0f54c3e3f69ee7e84fa5745141c013957ccd5053e87b7fe1284cde20babc2e115f98dbc24f11afba70fb10d8df28f13fd", 0x45}, {&(0x7f0000000540)="a013097cfd0f33a2bbf812eee73353bc5ca8726c6e112484ba4a93351d96c8c64f6db5fff21aed55bab1c9d2974f734b41a67383ba5277f738354ea6566bf34135a08a2ba3b5b8cf3e370388e4711d6a2830f98a60682ff1", 0x58}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="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", 0x11b}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f241ada2af539d28694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}], 0x4, 0x44008090) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{&(0x7f0000000640)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/131, 0x83}], 0x4, &(0x7f0000000b40)=""/194, 0xc2}, 0x3}, {{&(0x7f0000000c40)=@pptp, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/85, 0x55}], 0x3, &(0x7f0000000f00)=""/238, 0xee}, 0x7ff}], 0x3, 0x12101, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.535577632s ago: executing program 5 (id=2395): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x700, 0x7800, 0x7, 0x7, {{0x15, 0x4, 0x1, 0x20, 0x54, 0x64, 0x0, 0x6, 0x4, 0x0, @broadcast, @remote, {[@end, @rr={0x7, 0x1f, 0xc4, [@loopback, @broadcast, @broadcast, @multicast1, @broadcast, @remote, @multicast2]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xb, [0x6, 0x6, 0x0, 0x4, 0x8001, 0x3, 0x5]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@getqdisc={0x34, 0x26, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff, 0x6}, {0xfff3, 0x1}, {0x5, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 3.353718406s ago: executing program 3 (id=2396): r0 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x1) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$netlink(0x10, 0x3, 0xc) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x2, 0x388b}) setsockopt$sock_attach_bpf(r6, 0x84, 0x11, &(0x7f0000000000), 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x73, &(0x7f0000000200)={@local, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x9, 0xffffffff, "4e1baee8bfcfb76a429b95545f92220c69a041ed67948576d31a8c0bd4e690f919f0d80bd992c1c887fe835a0779d6114d8919d079"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000002680)=""/4096, 0x1000}], 0x1}, 0xfffffff1}], 0x1, 0x10061, 0x0) 2.512409304s ago: executing program 5 (id=2397): r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x501c4814, &(0x7f0000000100)={0x4, 0xffffffff, 0x0, 0x80000002, 0x0, 0x7ff}) 2.107919064s ago: executing program 4 (id=2398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000001c0)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x20, 0x1d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 2.041277774s ago: executing program 3 (id=2399): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) gettid() r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) writev(r5, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r4, r5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r7 = socket$key(0xf, 0x3, 0x2) sendfile(r7, r6, 0x0, 0x1000) 1.974042964s ago: executing program 5 (id=2400): r0 = socket(0x840000000002, 0x3, 0xfa) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000000c0)=""/53, &(0x7f0000000100)=0x35) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r1, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x26, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x20000071, 0x40101) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x2, 0x1, @raw_data=[0x0, 0x0, 0x101c, 0xfa9, 0x3, 0x9, 0xf, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) 1.919856157s ago: executing program 0 (id=2401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) rename(0x0, &(0x7f0000002140)='./file0\x00') setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88], [0x4, 0x10000004, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) 1.776192935s ago: executing program 1 (id=2402): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250f007464657673696d0000000f0002006e657464657673696d30000008000b00090000000600110040000000080001007063690011000200303030303a30303a31302e300000000008000b00a2fb0000060011000500a6de947c1c47180000080001007063690011000200303030303a30303a31302e300000000008000b000200000006001100ffff000048ac37637063690011000200303030303a30303a31302e300000000008000b000080000006"], 0xc8}, 0x1, 0x0, 0x0, 0x24000004}, 0x40010) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="dbc078bee20b207e8e19f37577c880969213e234ef77a8143ce3780b72e9ca426f5365", 0x23, 0xfffffffffffffffa) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x40000008}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) readv(r7, &(0x7f0000000d40)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) request_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000580)=',+%\x00', 0xfffffffffffffffb) 1.579786913s ago: executing program 5 (id=2403): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 1.548251472s ago: executing program 5 (id=2404): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)={0x40, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0xc) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_restrict_self(r2, 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000040)=[{0x101, 0x1201, 0x1, &(0x7f0000000240)='3'}], 0x1}) 1.319988224s ago: executing program 4 (id=2405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010100000000000000000200004005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff0c000300686173683a697000"], 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000000400000000000000883d36cb3070"]) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x1, 0x40, 0x1, 0x4, 0x0, 0x9, 0x0, 0x0, 0x81, 0x6, 0x3, 0x6}, {0xe2c, 0x800, 0x11, 0x7, 0x8, 0xe, 0x5, 0x5, 0xf1, 0x15, 0x3, 0x2, 0x7}, {0x0, 0x3ff, 0x7, 0xff, 0x22, 0x4, 0x6, 0x9, 0x0, 0x55, 0x40, 0x5, 0x93b}], 0xf}) r4 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x4) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 996.913379ms ago: executing program 4 (id=2406): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./bus\x00', 0x0, 0x18}, 0x14) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'gretap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 875.79119ms ago: executing program 0 (id=2407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="70000000100003040000800fff00000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00", @ANYBLOB="4ccef139dcc06e5f85736a3ba8d6d47ee83c"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 551.411724ms ago: executing program 0 (id=2408): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$NS_GET_USERNS(r2, 0x8008b705, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="c8ec10ee6f39c22d1ce3da0612c181df8af2f74e65f14ad8fadbf411429e731861ab7de2866baac1244e1690ea90dd8fccaa164a94adc87fb0aebe46305c5a72a8ba2e0bdbdabbe6349347d1bca484dfb34c44b9789bccf0bf", 0x59}, {&(0x7f00000004c0)="446f7f0f57716177e41a39c42f6abebe6d0046efc0f54c3e3f69ee7e84fa5745141c013957ccd5053e87b7fe1284cde20babc2e115f98dbc24f11afba70fb10d8df28f13fd", 0x45}, {&(0x7f0000000540)="a013097cfd0f33a2bbf812eee73353bc5ca8726c6e112484ba4a93351d96c8c64f6db5fff21aed55bab1c9d2974f734b41a67383ba5277f738354ea6566bf34135a08a2ba3b5b8cf3e370388e4711d6a2830f98a60682ff1", 0x58}], 0x3}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="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", 0x11b}], 0x1}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f241ada2af539d28694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}], 0x4, 0x44008090) recvmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{&(0x7f0000000640)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000440)}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f00000006c0)=""/254, 0xfe}, {&(0x7f00000007c0)=""/131, 0x83}], 0x4, &(0x7f0000000b40)=""/194, 0xc2}, 0x3}, {{&(0x7f0000000c40)=@pptp, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/78, 0x4e}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/85, 0x55}], 0x3, &(0x7f0000000f00)=""/238, 0xee}, 0x7ff}], 0x3, 0x12101, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, 0x0) 520.629396ms ago: executing program 1 (id=2409): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0aea000000614a7abba93f88f346fac238faf05abe2992ae6f2eddb1788a000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2410): syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x9, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x6, "00008000"}]}}, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f0000000100)={0x4, 0xffffffff, 0x0, 0x80000002, 0x0, 0x7ff}) kernel console output (not intermixed with test programs): ch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 992.364506][ T9375] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 992.413931][ T30] audit: type=1326 audit(1752750865.917:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.442909][ T30] audit: type=1326 audit(1752750865.917:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.442955][ T30] audit: type=1326 audit(1752750865.917:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.442997][ T30] audit: type=1326 audit(1752750865.917:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.443042][ T30] audit: type=1326 audit(1752750865.917:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.443082][ T30] audit: type=1326 audit(1752750865.917:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.443121][ T30] audit: type=1326 audit(1752750865.917:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.443160][ T30] audit: type=1326 audit(1752750865.917:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17372 comm="syz.4.2129" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 992.598398][ T9375] usb 1-1: Using ep0 maxpacket: 16 [ 992.614094][ T9375] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.614141][ T9375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.614168][ T9375] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.614189][ T9375] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.614211][ T9375] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.626718][ T9375] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.626747][ T9375] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.626768][ T9375] usb 1-1: Manufacturer: syz [ 992.636496][ T9375] usb 1-1: config 0 descriptor?? [ 992.810540][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.810602][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.966999][ T5950] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 993.060920][ T9375] rc_core: IR keymap rc-hauppauge not found [ 993.069452][ T9375] Registered IR keymap rc-empty [ 993.077750][T17399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.089596][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.097981][T17399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.113922][T17399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.130446][T17399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.155706][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.175676][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 993.185128][ T5950] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 993.193495][ T9375] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 993.202008][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.215457][ T5950] usb 2-1: Product: syz [ 993.221270][ T5950] usb 2-1: Manufacturer: syz [ 993.230630][ T5950] usb 2-1: SerialNumber: syz [ 993.239263][ T9375] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input260 [ 993.261487][ T5950] usb 2-1: config 0 descriptor?? [ 993.267745][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.278142][ T5950] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 993.296044][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.315977][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.346568][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.375704][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.414722][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.455757][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.475730][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.485409][ T5950] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 993.495149][ T5950] visor 2-1:0.0: probe with driver visor failed with error -5 [ 993.519913][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.576447][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.597845][ T9375] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 993.628929][ T9375] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 993.640987][ T9375] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 993.675218][ T9375] usb 1-1: USB disconnect, device number 38 [ 993.930339][T17424] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 994.126094][T17426] netlink: 'syz.5.2142': attribute type 1 has an invalid length. [ 994.152322][T17426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.175760][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 994.308470][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2142'. [ 994.329887][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 994.336803][ T9] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 994.349214][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 994.358446][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.367797][ T9] usb 4-1: Product: syz [ 994.377196][ T9] usb 4-1: Manufacturer: syz [ 994.384848][ T9] usb 4-1: SerialNumber: syz [ 994.397333][ T9] usb 4-1: config 0 descriptor?? [ 994.406432][T17426] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2142'. [ 994.427465][ T9] usb 4-1: bad CDC descriptors [ 994.442716][ T9] usb 4-1: unsupported MDLM descriptors [ 994.631837][ T9] usb 4-1: USB disconnect, device number 20 [ 994.665628][T16735] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 994.848370][T16735] usb 6-1: config index 0 descriptor too short (expected 4900, got 36) [ 994.857192][T16735] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 994.955700][T16735] usb 6-1: config 16 interface 0 has no altsetting 0 [ 994.984395][T16735] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 995.003772][T16735] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 995.028353][T16735] usb 6-1: Manufacturer: syz [ 995.153135][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 995.285204][T16735] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 995.293811][T16735] imon 6-1:16.0: unable to initialize intf0, err -19 [ 995.302220][T16735] imon:imon_probe: failed to initialize context! [ 995.308951][T16735] imon 6-1:16.0: unable to register, err -19 [ 995.406702][T16735] usb 6-1: USB disconnect, device number 63 [ 995.445629][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 995.627168][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 995.639360][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 995.650444][T17446] binder: 17444:17446 ioctl c0306201 80000180 returned -14 [ 995.658102][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.671039][ T9] usb 1-1: Product: syz [ 995.683947][ T9] usb 1-1: Manufacturer: syz [ 995.693524][ T9] usb 1-1: SerialNumber: syz [ 995.713556][ T5860] Bluetooth: hci2: failed to read key size for handle 201 [ 995.725709][ T5860] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 995.734961][T17448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2147'. [ 995.746370][ T9] usb 1-1: config 0 descriptor?? [ 995.937379][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 996.956560][ T5917] usb 2-1: USB disconnect, device number 40 [ 997.062451][T17461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.092211][T17461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.159879][T17461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.201842][T17461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.242912][T17461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.314332][T17461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.409064][ T9] gspca_stk1135: reg_w 0x200 err -71 [ 997.416994][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.426403][ T9] gspca_stk1135: Sensor write failed [ 997.431803][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.445064][ T9] gspca_stk1135: Sensor write failed [ 997.455230][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.473774][ T9] gspca_stk1135: Sensor read failed [ 997.500739][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.539611][ T9] gspca_stk1135: Sensor read failed [ 997.546900][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 997.575680][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.582067][ T9] gspca_stk1135: Sensor read failed [ 997.612880][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.624970][ T9] gspca_stk1135: Sensor read failed [ 997.635036][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.648761][ T9] gspca_stk1135: Sensor write failed [ 997.654088][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 997.677580][ T9] gspca_stk1135: Sensor write failed [ 997.697363][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 997.722382][ T9] usb 1-1: USB disconnect, device number 39 [ 998.682721][T17477] netlink: 'syz.5.2159': attribute type 1 has an invalid length. [ 998.721012][T17477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.753164][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2159'. [ 998.768687][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2159'. [ 998.828009][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 998.988487][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 999.001636][ T9] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75 [ 999.016919][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.025012][ T9] usb 4-1: Product: syz [ 999.031392][ T9] usb 4-1: Manufacturer: syz [ 999.036807][ T9] usb 4-1: SerialNumber: syz [ 999.043551][ T9] usb 4-1: config 0 descriptor?? [ 999.049003][ T5917] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 999.060193][ T9] usb 4-1: bad CDC descriptors [ 999.115715][ T5847] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 999.208869][ T5917] usb 6-1: config index 0 descriptor too short (expected 4900, got 36) [ 999.217377][ T5917] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 999.231482][ T5917] usb 6-1: config 16 interface 0 has no altsetting 0 [ 999.239876][ T5917] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 999.249217][ T5917] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.257430][ T5917] usb 6-1: Manufacturer: syz [ 999.268802][ T5950] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 999.280113][ T5847] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 999.283929][T16735] usb 4-1: USB disconnect, device number 21 [ 999.290095][ T5847] usb 2-1: config 0 has no interface number 0 [ 999.303928][ T5847] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 999.315258][ T5847] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 999.328584][ T5847] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 999.338141][ T5847] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 999.346406][ T5847] usb 2-1: Product: syz [ 999.350615][ T5847] usb 2-1: Manufacturer: syz [ 999.355267][ T5847] usb 2-1: SerialNumber: syz [ 999.364507][ T5847] usb 2-1: config 0 descriptor?? [ 999.372998][ T5847] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 999.381092][ T5847] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 999.392565][ T5847] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 999.402035][ T5847] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 999.411811][ T5847] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 999.421035][ T5847] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 999.430612][ T5847] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 999.446155][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 999.446385][ T5847] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 999.462988][ T5847] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 999.470814][ T5950] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 999.470838][ T5950] usb 1-1: config 0 has no interface number 0 [ 999.495866][ T5950] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 999.508957][ T5847] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 999.511358][ T5950] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 999.519995][ T5917] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 999.538518][ T5950] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 999.551493][ T5917] imon 6-1:16.0: unable to initialize intf0, err -19 [ 999.558841][ T5917] imon:imon_probe: failed to initialize context! [ 999.559770][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.566297][ T5917] imon 6-1:16.0: unable to register, err -19 [ 999.601934][ T5950] usb 1-1: Product: syz [ 999.618573][ T5950] usb 1-1: Manufacturer: syz [ 999.623210][ T5950] usb 1-1: SerialNumber: syz [ 999.626413][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.641788][T17493] FAULT_INJECTION: forcing a failure. [ 999.641788][T17493] name failslab, interval 1, probability 0, space 0, times 0 [ 999.658535][ T5917] usb 6-1: USB disconnect, device number 64 [ 999.666458][T17493] CPU: 1 UID: 0 PID: 17493 Comm: syz.4.2165 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 999.666484][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 999.666497][T17493] Call Trace: [ 999.666505][T17493] [ 999.666514][T17493] dump_stack_lvl+0x189/0x250 [ 999.666544][T17493] ? __pfx____ratelimit+0x10/0x10 [ 999.666574][T17493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.666598][T17493] ? __pfx__printk+0x10/0x10 [ 999.666629][T17493] ? __pfx___might_resched+0x10/0x10 [ 999.666651][T17493] ? fs_reclaim_acquire+0x7d/0x100 [ 999.666681][T17493] should_fail_ex+0x414/0x560 [ 999.666714][T17493] should_failslab+0xa8/0x100 [ 999.666740][T17493] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 999.666764][T17493] ? __alloc_skb+0x112/0x2d0 [ 999.666798][T17493] __alloc_skb+0x112/0x2d0 [ 999.666822][T17493] netlink_ack+0x146/0xa50 [ 999.666861][T17493] netlink_rcv_skb+0x28c/0x470 [ 999.666885][T17493] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 999.666918][T17493] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 999.666951][T17493] ? bpf_lsm_capable+0x9/0x20 [ 999.666973][T17493] ? security_capable+0x7e/0x2e0 [ 999.667013][T17493] nfnetlink_rcv+0x26a/0x2520 [ 999.667046][T17493] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 999.667077][T17493] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 999.667102][T17493] ? __dev_queue_xmit+0x27e/0x3a70 [ 999.667129][T17493] ? do_fast_syscall_32+0x34/0x80 [ 999.667157][T17493] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 999.667186][T17493] ? __pfx___dev_queue_xmit+0x10/0x10 [ 999.667225][T17493] ? ref_tracker_free+0x63a/0x7d0 [ 999.667252][T17493] ? __copy_skb_header+0xa7/0x550 [ 999.667279][T17493] ? __pfx_ref_tracker_free+0x10/0x10 [ 999.667324][T17493] ? skb_clone+0x246/0x3a0 [ 999.667353][T17493] ? __netlink_deliver_tap+0x807/0x850 [ 999.667375][T17493] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.667404][T17493] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.667426][T17493] ? netlink_deliver_tap+0x2e/0x1b0 [ 999.667453][T17493] netlink_unicast+0x75c/0x8e0 [ 999.667484][T17493] netlink_sendmsg+0x805/0xb30 [ 999.667517][T17493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.667544][T17493] ? __import_iovec+0x5d4/0x7f0 [ 999.667563][T17493] ? aa_sock_msg_perm+0x94/0x160 [ 999.667593][T17493] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 999.667622][T17493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.667646][T17493] __sock_sendmsg+0x219/0x270 [ 999.667668][T17493] ____sys_sendmsg+0x505/0x830 [ 999.667698][T17493] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.667738][T17493] ___sys_sendmsg+0x21f/0x2a0 [ 999.667766][T17493] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.667833][T17493] ? __fget_files+0x2a/0x420 [ 999.667858][T17493] ? __fget_files+0x3a0/0x420 [ 999.667893][T17493] __sys_sendmsg+0x164/0x220 [ 999.667920][T17493] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.667970][T17493] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 999.667991][T17493] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.668022][T17493] __do_fast_syscall_32+0xb6/0x2b0 [ 999.668042][T17493] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.668075][T17493] do_fast_syscall_32+0x34/0x80 [ 999.668095][T17493] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 999.668117][T17493] RIP: 0023:0xf7f71539 [ 999.668134][T17493] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 999.668151][T17493] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 999.668170][T17493] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 999.668183][T17493] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 999.668195][T17493] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 999.668205][T17493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 999.668217][T17493] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 999.668243][T17493] [ 999.759249][ T5860] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 999.768449][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.776201][ T5860] Bluetooth: hci2: Injecting HCI hardware error event [ 999.782115][T17484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.786136][ T5860] Bluetooth: hci2: hardware error 0x00 [ 999.788299][T17484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.126331][ T5950] usb 1-1: config 0 descriptor?? [ 1000.135051][T17491] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1000.155475][T17491] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1000.237086][T17496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.250129][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'. [ 1000.270502][T17495] netlink: 'syz.4.2166': attribute type 3 has an invalid length. [ 1000.286624][T17496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.394639][T17491] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1000.415977][T17491] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1000.441882][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.462242][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.505675][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.578532][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.181961][T17512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.192905][T17512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.440585][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1001.440606][ T30] audit: type=1326 audit(1752750875.227:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.478339][ T30] audit: type=1326 audit(1752750875.227:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.506177][ T30] audit: type=1326 audit(1752750875.227:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.597471][ T30] audit: type=1326 audit(1752750875.237:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.681094][ T30] audit: type=1326 audit(1752750875.237:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.711493][ T30] audit: type=1326 audit(1752750875.237:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.735319][ T30] audit: type=1326 audit(1752750875.247:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.761087][ T5847] usb 2-1: USB disconnect, device number 41 [ 1001.789941][ T30] audit: type=1326 audit(1752750875.247:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.818087][T17521] cgroup: fork rejected by pids controller in /syz3 [ 1001.818171][ T30] audit: type=1326 audit(1752750875.247:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.849835][ T5847] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1001.864414][ T5847] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1001.882415][ T5847] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1001.919222][ T5847] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1001.948718][ T30] audit: type=1326 audit(1752750875.247:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17515 comm="syz.3.2172" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1001.977867][ T5847] keyspan 2-1:0.107: device disconnected [ 1002.112710][ T5950] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1002.235596][ T5860] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1002.315640][ T5847] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1002.402179][ T5950] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1002.415824][ T5917] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1002.469126][ T5847] usb 2-1: config 0 has an invalid interface number: 160 but max is 0 [ 1002.489223][ T5847] usb 2-1: config 0 has no interface number 0 [ 1002.496304][ T5847] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1002.512133][ T5847] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 1002.522234][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.532444][ T5847] usb 2-1: Product: syz [ 1002.540285][ T5847] usb 2-1: Manufacturer: syz [ 1002.545261][ T5847] usb 2-1: SerialNumber: syz [ 1002.563510][ T5847] usb 2-1: config 0 descriptor?? [ 1002.574735][ T5917] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1002.589029][ T5917] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1002.599055][ T5917] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1002.613468][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.622603][ T5847] usb 2-1: Found UVC 0.00 device syz (05ac:8501) [ 1002.655267][ T5847] usb 2-1: No valid video chain found. [ 1002.672438][T17634] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1002.693781][ T5917] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.782307][ T5847] usb 2-1: USB disconnect, device number 42 [ 1002.902327][T17638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.931299][T17638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.003087][T17639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.012463][T17639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.032181][T17639] fuse: Bad value for 'fd' [ 1003.049721][ T5950] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1003.068326][T17639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.080754][ T5950] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1003.095412][T17639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.116675][T17639] netlink: 'syz.4.2178': attribute type 12 has an invalid length. [ 1003.119238][ T5950] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1003.134292][ T5950] asix 1-1:0.251: probe with driver asix failed with error -5 [ 1003.146933][ T5950] usb 1-1: USB disconnect, device number 40 [ 1003.207102][T17639] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1003.647049][ T5950] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1003.739376][T17395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.808378][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1003.835277][ T5950] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1003.851761][T17395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.862604][ T5950] usb 2-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 1003.878450][ T5950] usb 2-1: Manufacturer: syz [ 1003.888998][ T5950] usb 2-1: config 0 descriptor?? [ 1003.904562][ T5950] hub 2-1:0.0: USB hub found [ 1003.937826][T17395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.012008][T17395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.211258][T17395] bridge_slave_0: left allmulticast mode [ 1004.223567][T17395] bridge_slave_0: left promiscuous mode [ 1004.230585][T17395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.316959][ T5950] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1004.386693][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1004.395411][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1004.415382][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1004.425320][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1004.434711][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1005.719481][T17395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.740603][T17395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.759683][T17395] bond0 (unregistering): Released all slaves [ 1005.780452][ T5950] usbhid 2-1:0.0: can't add hid device: -71 [ 1005.792070][ T24] usb 6-1: USB disconnect, device number 65 [ 1005.802682][ T5950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1005.871858][ T5950] usb 2-1: USB disconnect, device number 43 [ 1005.987705][T17395] tipc: Left network mode [ 1005.996190][ T5847] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1006.207404][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 1006.241889][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.273149][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1006.297825][ T24] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1006.320280][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1006.362930][ T5847] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1006.405141][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.469823][ T5847] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1006.471735][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.491943][ T5852] Bluetooth: hci1: command tx timeout [ 1006.518335][ T5847] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1006.530836][ T24] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1006.550099][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.557178][ T5847] usb 1-1: Manufacturer: syz [ 1006.574791][ T24] usb 6-1: config 0 descriptor?? [ 1006.577904][ T5847] usb 1-1: config 0 descriptor?? [ 1006.631666][T17395] hsr_slave_0: left promiscuous mode [ 1006.844393][T17395] hsr_slave_1: left promiscuous mode [ 1006.872355][T17395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.887148][T17395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.901268][T17395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.925742][ T5917] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1007.071807][ T24] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor [ 1007.079208][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.082230][T17395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.096369][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.117607][T17657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.142640][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1007.144266][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0036/input/input263 [ 1007.160400][T17657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.182919][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1007.225137][T17395] veth1_macvtap: left promiscuous mode [ 1007.226064][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.245138][T17395] veth0_macvtap: left promiscuous mode [ 1007.250760][ T5847] rc_core: IR keymap rc-hauppauge not found [ 1007.269665][ T5847] Registered IR keymap rc-empty [ 1007.269889][T17395] veth1_vlan: left promiscuous mode [ 1007.287516][ T5917] usb 2-1: Product: syz [ 1007.305699][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.319037][ T5917] usb 2-1: Manufacturer: syz [ 1007.339256][T17395] veth0_vlan: left promiscuous mode [ 1007.341974][ T5917] usb 2-1: SerialNumber: syz [ 1007.373634][ T24] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1007.376079][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.406574][ T5917] usb 2-1: config 0 descriptor?? [ 1007.457059][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1007.490260][ T24] usb 6-1: USB disconnect, device number 66 [ 1007.519785][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input262 [ 1007.607924][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.662185][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.672087][ T5917] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1007.708663][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.728787][T17682] fido_id[17682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1007.740611][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.785912][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.817229][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.856251][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.907344][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.945723][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1007.990896][T17689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.005956][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1008.036119][ T5847] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1008.132750][T17692] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1008.217518][ T5847] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1008.232562][ T5847] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1008.242396][T17689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.259689][ T5847] usb 1-1: USB disconnect, device number 41 [ 1008.381270][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1008.547163][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1008.555269][ T9] usb 6-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1008.567251][ T5852] Bluetooth: hci1: command tx timeout [ 1008.581472][ T9] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1008.592974][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.614657][ T9] usb 6-1: Product: syz [ 1008.619565][ T9] usb 6-1: Manufacturer: syz [ 1008.624419][ T9] usb 6-1: SerialNumber: syz [ 1008.651800][ T9] usb 6-1: config 0 descriptor?? [ 1008.674114][ T9] usb 6-1: bad CDC descriptors [ 1008.682226][ T9] usb 6-1: unsupported MDLM descriptors [ 1008.829655][ T5847] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1008.856383][T17395] team0 (unregistering): Port device team_slave_1 removed [ 1008.867503][ T9] usb 6-1: USB disconnect, device number 67 [ 1008.968559][T17395] team0 (unregistering): Port device team_slave_0 removed [ 1008.988887][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 1008.999135][ T5847] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1009.057612][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.095713][ T5847] usb 1-1: Product: syz [ 1009.130996][ T5847] usb 1-1: Manufacturer: syz [ 1009.136563][ T5917] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1009.152984][ T5847] usb 1-1: SerialNumber: syz [ 1009.179281][ T5847] usb 1-1: config 0 descriptor?? [ 1009.193119][ T5847] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1009.727617][T17648] chnl_net:caif_netlink_parms(): no params data found [ 1010.032755][T17648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.042713][T17648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.050138][T17648] bridge_slave_0: entered allmulticast mode [ 1010.077858][T17648] bridge_slave_0: entered promiscuous mode [ 1010.095599][ T5917] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1010.108845][T17648] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.116444][T17648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.123907][T17648] bridge_slave_1: entered allmulticast mode [ 1010.131951][T17648] bridge_slave_1: entered promiscuous mode [ 1010.164971][ T24] usb 2-1: USB disconnect, device number 44 [ 1010.260745][ T5917] usb 6-1: config 0 has no interfaces? [ 1010.269879][ T5917] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1010.289270][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.309433][ T5917] usb 6-1: Product: syz [ 1010.319405][ T5917] usb 6-1: Manufacturer: syz [ 1010.339902][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.350935][ T5917] usb 6-1: SerialNumber: syz [ 1010.372589][ T5917] usb 6-1: config 0 descriptor?? [ 1010.400572][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.632571][T17648] team0: Port device team_slave_0 added [ 1010.641938][ T5852] Bluetooth: hci1: command tx timeout [ 1010.663552][T17648] team0: Port device team_slave_1 added [ 1010.791897][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.835591][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.861563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.876252][T17721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.890514][T17702] fuse: Bad value for 'fd' [ 1010.904551][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.952731][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.971537][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.045119][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.062312][T17726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2195'. [ 1011.079561][T17702] netlink: 'syz.5.2191': attribute type 12 has an invalid length. [ 1011.107578][T17702] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1011.118425][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1011.118439][ T30] audit: type=1326 audit(1752750884.897:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.5.2191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1011.158144][ T30] audit: type=1326 audit(1752750884.897:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.5.2191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1011.192192][ T9] usb 1-1: USB disconnect, device number 42 [ 1011.285745][ T30] audit: type=1326 audit(1752750884.997:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.5.2191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1011.385644][ T30] audit: type=1326 audit(1752750884.997:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17697 comm="syz.5.2191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 1011.658384][T17648] hsr_slave_0: entered promiscuous mode [ 1011.665009][T17648] hsr_slave_1: entered promiscuous mode [ 1011.725083][T17738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2196'. [ 1011.765012][T17738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2196'. [ 1012.123119][ T5917] usb 6-1: USB disconnect, device number 68 [ 1012.186776][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1012.400936][ T9] usb 1-1: config index 0 descriptor too short (expected 4900, got 36) [ 1012.412985][ T9] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1012.444888][ T9] usb 1-1: config 16 interface 0 has no altsetting 0 [ 1012.646730][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1012.682210][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1012.715977][ T5852] Bluetooth: hci1: command tx timeout [ 1012.721427][ T9] usb 1-1: Manufacturer: syz [ 1012.977222][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1013.000179][ T9] imon 1-1:16.0: unable to initialize intf0, err -19 [ 1013.011810][ T9] imon:imon_probe: failed to initialize context! [ 1013.025584][ T9] imon 1-1:16.0: unable to register, err -19 [ 1013.069937][ T9] usb 1-1: USB disconnect, device number 43 [ 1013.311826][ T5917] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1013.498493][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1013.507234][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.525452][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1013.614926][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1013.650854][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1013.677678][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.694832][ T5917] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1013.735462][ T5917] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1013.758673][ T5917] usb 6-1: Manufacturer: syz [ 1013.774537][ T5917] usb 6-1: config 0 descriptor?? [ 1013.791169][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 1013.945785][T17648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1013.992572][T17648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1014.082884][T17648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1014.097021][T17773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.164679][T17648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1014.176425][T17773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.220781][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.245578][ T5917] rc_core: IR keymap rc-hauppauge not found [ 1014.255979][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.286080][ T5917] Registered IR keymap rc-empty [ 1014.306132][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.315305][T17751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.345617][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.353197][T17751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.400820][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1014.448146][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input264 [ 1014.491772][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.535161][T17648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.549104][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.583996][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.590936][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.615688][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1014.615743][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.646168][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.653349][T17395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.667289][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.688971][T17395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.696179][T17395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.716593][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.761539][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.805654][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1014.805774][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.840322][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.845990][ T24] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 1014.864881][ T24] usb 2-1: config 4 has no interface number 0 [ 1014.876327][ T24] usb 2-1: config 4 interface 51 has no altsetting 0 [ 1014.883139][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.886223][ T24] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1014.921912][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.925661][ T5917] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1014.934116][ T24] usb 2-1: Product: syz [ 1014.949242][ T24] usb 2-1: Manufacturer: syz [ 1014.976091][ T24] usb 2-1: SerialNumber: syz [ 1014.977903][T17648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.007383][ T24] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 1015.007702][ T5917] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1015.073690][ T5917] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1015.110986][T17648] veth0_vlan: entered promiscuous mode [ 1015.119444][ T5917] usb 6-1: USB disconnect, device number 69 [ 1015.170952][T17648] veth1_vlan: entered promiscuous mode [ 1015.231359][T17648] veth0_macvtap: entered promiscuous mode [ 1015.264635][T17648] veth1_macvtap: entered promiscuous mode [ 1015.315368][T17648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.372436][T17648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.392713][T17648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.415620][T17648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.436818][T17648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.464176][T17648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.623566][T17815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.634924][T17815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.664427][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.701285][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.861806][T17395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1015.933379][T17395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.616243][T17835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1016.625632][T17835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2213'. [ 1016.655641][ T5950] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1016.816183][ T5950] usb 6-1: Using ep0 maxpacket: 32 [ 1016.847281][ T5950] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1016.866609][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.896016][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1016.919154][ T5950] usb 6-1: Product: syz [ 1016.939250][ T5950] usb 6-1: Manufacturer: syz [ 1016.952472][ T5950] usb 6-1: SerialNumber: syz [ 1016.985783][ T5950] usb 6-1: config 0 descriptor?? [ 1017.005151][ T5950] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1017.072091][ T9] usb 1-1: config index 0 descriptor too short (expected 4900, got 36) [ 1017.081305][ T9] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1017.100400][ T9] usb 1-1: config 16 interface 0 has no altsetting 0 [ 1017.117380][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1017.129978][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1017.138887][ T9] usb 1-1: Manufacturer: syz [ 1017.345299][ T5917] usb 2-1: USB disconnect, device number 45 [ 1017.391598][ T9] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1017.425782][ T9] imon 1-1:16.0: unable to initialize intf0, err -19 [ 1017.451188][ T9] imon:imon_probe: failed to initialize context! [ 1017.461645][ T9] imon 1-1:16.0: unable to register, err -19 [ 1017.498317][ T9] usb 1-1: USB disconnect, device number 44 [ 1017.871973][T17858] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2216'. [ 1018.563435][T17869] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2217'. [ 1018.733507][ T5950] gspca_stk1135: reg_w 0x200 err -71 [ 1018.741465][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.755109][ T5950] gspca_stk1135: Sensor write failed [ 1018.775287][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.806113][ T5950] gspca_stk1135: Sensor write failed [ 1018.818670][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.828748][ T5950] gspca_stk1135: Sensor read failed [ 1018.834158][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.849636][T17874] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1018.890189][ T5950] gspca_stk1135: Sensor read failed [ 1018.897848][ T5950] gspca_stk1135: Detected sensor type unknown (0x0) [ 1018.904478][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.914276][ T5950] gspca_stk1135: Sensor read failed [ 1018.923889][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.937079][ T5950] gspca_stk1135: Sensor read failed [ 1018.952616][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1018.978818][ T5950] gspca_stk1135: Sensor write failed [ 1019.021878][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1019.039705][ T5950] gspca_stk1135: Sensor write failed [ 1019.055084][ T5950] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1019.101187][ T5950] usb 6-1: USB disconnect, device number 70 [ 1019.115673][ T5958] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1019.356413][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 1019.377967][ T5958] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1019.438005][ T5958] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1019.466806][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.525669][ T5958] usb 2-1: Product: syz [ 1019.549629][ T5958] usb 2-1: Manufacturer: syz [ 1019.594815][ T5958] usb 2-1: SerialNumber: syz [ 1019.639856][ T5958] usb 2-1: config 0 descriptor?? [ 1019.668026][ T5958] usb 2-1: bad CDC descriptors [ 1019.681563][ T5958] usb 2-1: unsupported MDLM descriptors [ 1019.875022][ T5958] usb 2-1: USB disconnect, device number 46 [ 1019.949919][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2220'. [ 1020.215866][ T9] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 1020.286082][ T5917] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1020.391886][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1020.445688][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 1020.454298][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1020.466752][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.476971][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.495845][ T5917] usb 1-1: Product: syz [ 1020.504016][ T9] usb 4-1: config 0 has no interface number 0 [ 1020.513014][ T5917] usb 1-1: Manufacturer: syz [ 1020.521163][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1020.552617][ T5917] usb 1-1: SerialNumber: syz [ 1020.620424][ T5917] usb 1-1: config 0 descriptor?? [ 1020.629970][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.654690][ T9] usb 4-1: config 0 descriptor?? [ 1020.677817][ T9] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1020.848096][ T5917] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1021.054435][T17889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2222'. [ 1021.088440][T17889] netlink: 'syz.4.2222': attribute type 10 has an invalid length. [ 1021.126640][T17889] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1021.175604][ T5958] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1021.195659][ T5950] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1021.337580][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.356588][ T5958] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1021.370165][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.388282][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.401901][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.424224][ T5958] usb 2-1: config 0 descriptor?? [ 1021.430894][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.448275][ T5950] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.469898][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.563418][T17923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.572469][T17923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.589661][T17923] fuse: Bad value for 'fd' [ 1021.610255][T17923] netlink: 'syz.4.2227': attribute type 12 has an invalid length. [ 1021.636753][ T30] audit: type=1326 audit(1752750895.427:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1021.650122][ T5950] usb 6-1: config 0 descriptor?? [ 1021.798889][ T30] audit: type=1326 audit(1752750895.487:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1021.832608][ T30] audit: type=1326 audit(1752750895.497:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1021.868191][ T30] audit: type=1326 audit(1752750895.497:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1021.930528][ T5958] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 1021.981125][ T5958] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0037/input/input265 [ 1022.004278][ T30] audit: type=1326 audit(1752750895.497:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1022.063574][ T30] audit: type=1326 audit(1752750895.497:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1022.134601][ T5950] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x6 [ 1022.172253][ T5958] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1022.214396][ T30] audit: type=1326 audit(1752750895.507:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1022.257962][ T5950] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1022.280391][ T30] audit: type=1326 audit(1752750895.507:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17918 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1022.355394][ T5958] usb 2-1: USB disconnect, device number 47 [ 1022.389229][ T5950] usb 6-1: USB disconnect, device number 71 [ 1022.464923][T17930] fido_id[17930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1022.672221][T17932] fido_id[17932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1022.848386][ T5958] usb 4-1: USB disconnect, device number 22 [ 1023.202334][ T30] audit: type=1326 audit(1752750896.997:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1023.270504][ T30] audit: type=1326 audit(1752750897.017:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17940 comm="syz.1.2228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1023.535757][ T5958] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1023.557413][ T5917] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1023.587576][T17950] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1023.598655][T17951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.626753][ T5917] usb 1-1: USB disconnect, device number 45 [ 1023.653620][T17951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.786402][ T5958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1023.824703][T17955] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2235'. [ 1023.838514][ T5958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1023.889235][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1023.925851][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.956279][T17946] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1024.007494][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.287508][T17977] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.297183][T17977] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.306470][T17977] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.315175][T17977] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.324026][ T5958] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1025.481453][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.499846][ T5958] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1025.512002][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.540219][ T5958] usb 2-1: config 0 descriptor?? [ 1025.705641][ T5950] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1025.835757][ T5950] usb 6-1: device descriptor read/64, error -71 [ 1025.905759][ T5917] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1025.961225][ T5958] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 1026.006961][ T5958] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0039/input/input266 [ 1026.088720][ T5950] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1026.093788][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.116495][ T5917] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1026.158414][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.167448][ T5958] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1026.184307][ T5917] usb 1-1: config 0 descriptor?? [ 1026.231390][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 1026.259221][ T5950] usb 6-1: device descriptor read/64, error -71 [ 1026.339921][ T5958] usb 4-1: USB disconnect, device number 23 [ 1026.378849][ T5950] usb usb6-port1: attempt power cycle [ 1026.426097][ T10] usb 2-1: USB disconnect, device number 48 [ 1026.474058][T17989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.501214][T17989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.591914][T17992] FAULT_INJECTION: forcing a failure. [ 1026.591914][T17992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.605212][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.3.2246 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1026.605244][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1026.605258][T17992] Call Trace: [ 1026.605268][T17992] [ 1026.605278][T17992] dump_stack_lvl+0x189/0x250 [ 1026.605308][T17992] ? __pfx____ratelimit+0x10/0x10 [ 1026.605332][T17992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.605351][T17992] ? __pfx__printk+0x10/0x10 [ 1026.605395][T17992] should_fail_ex+0x414/0x560 [ 1026.605433][T17992] _copy_to_user+0x31/0xb0 [ 1026.605459][T17992] simple_read_from_buffer+0xe1/0x170 [ 1026.605490][T17992] proc_fail_nth_read+0x1df/0x250 [ 1026.605527][T17992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.605562][T17992] ? rw_verify_area+0x258/0x650 [ 1026.605587][T17992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.605620][T17992] vfs_read+0x1fd/0x980 [ 1026.605652][T17992] ? __pfx___mutex_lock+0x10/0x10 [ 1026.605675][T17992] ? __pfx_vfs_read+0x10/0x10 [ 1026.605702][T17992] ? __fget_files+0x2a/0x420 [ 1026.605745][T17992] ? __fget_files+0x3a0/0x420 [ 1026.605773][T17992] ? __fget_files+0x2a/0x420 [ 1026.605813][T17992] ksys_read+0x145/0x250 [ 1026.605840][T17992] ? __pfx_ksys_read+0x10/0x10 [ 1026.605879][T17992] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1026.605900][T17992] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.605943][T17992] __do_fast_syscall_32+0xb6/0x2b0 [ 1026.605963][T17992] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.605996][T17992] do_fast_syscall_32+0x34/0x80 [ 1026.606017][T17992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1026.606039][T17992] RIP: 0023:0xf707e539 [ 1026.606055][T17992] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1026.606069][T17992] RSP: 002b:00000000f506e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1026.606084][T17992] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f506e620 [ 1026.606093][T17992] RDX: 000000000000000f RSI: 00000000f73e4ff4 RDI: 0000000000000000 [ 1026.606101][T17992] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1026.606109][T17992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1026.606117][T17992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1026.606142][T17992] [ 1026.615222][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1026.749881][T17995] binder: 17987:17995 ioctl c018937c 80000080 returned -22 [ 1026.857301][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 1026.864524][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1026.871025][ T5950] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1026.879741][ T5917] pwc: recv_control_msg error -32 req 04 val 1000 [ 1026.886493][T17993] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1026.893860][ T5950] usb 6-1: device descriptor read/8, error -71 [ 1027.100587][ T5917] pwc: recv_control_msg error -32 req 04 val 1400 [ 1027.135592][ T5950] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1027.156628][ T5950] usb 6-1: device descriptor read/8, error -71 [ 1027.268347][ T5950] usb usb6-port1: unable to enumerate USB device [ 1027.285656][ T5958] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1027.311153][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 1027.320093][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 1027.327366][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 1027.334217][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 1027.343294][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 1027.350195][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 1027.360215][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 1027.367201][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 1027.373918][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 1027.381653][ T5917] pwc: Registered as video103. [ 1027.388614][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input267 [ 1027.410989][ T5917] usb 1-1: USB disconnect, device number 46 [ 1027.447703][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.471297][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.482839][ T5958] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1027.494135][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.507431][ T5958] usb 2-1: config 0 descriptor?? [ 1027.987876][ T5958] usbhid 2-1:0.0: can't add hid device: -71 [ 1028.013748][ T5958] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1028.130377][ T5958] usb 2-1: USB disconnect, device number 49 [ 1029.115202][T18018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1029.906031][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1029.989872][T18033] FAULT_INJECTION: forcing a failure. [ 1029.989872][T18033] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.989898][T18033] CPU: 0 UID: 0 PID: 18033 Comm: syz.5.2257 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1029.989914][T18033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.989923][T18033] Call Trace: [ 1029.989928][T18033] [ 1029.989935][T18033] dump_stack_lvl+0x189/0x250 [ 1029.989955][T18033] ? __pfx____ratelimit+0x10/0x10 [ 1029.989976][T18033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.989992][T18033] ? __pfx__printk+0x10/0x10 [ 1029.990014][T18033] ? __pfx___might_resched+0x10/0x10 [ 1029.990029][T18033] ? fs_reclaim_acquire+0x7d/0x100 [ 1029.990051][T18033] should_fail_ex+0x414/0x560 [ 1029.990074][T18033] should_failslab+0xa8/0x100 [ 1029.990093][T18033] __kmalloc_cache_noprof+0x70/0x3d0 [ 1029.990109][T18033] ? nft_flush_table+0xb0a/0xea0 [ 1029.990133][T18033] nft_flush_table+0xb0a/0xea0 [ 1029.990158][T18033] nf_tables_deltable+0x5cc/0xe10 [ 1029.990180][T18033] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1029.990197][T18033] ? nfnl_pernet+0x23/0x240 [ 1029.990223][T18033] ? __nla_parse+0x40/0x60 [ 1029.990240][T18033] nfnetlink_rcv+0x112f/0x2520 [ 1029.990279][T18033] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1029.990310][T18033] ? ref_tracker_free+0x63a/0x7d0 [ 1029.990349][T18033] ? __netlink_deliver_tap+0x807/0x850 [ 1029.990371][T18033] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.990386][T18033] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.990406][T18033] netlink_unicast+0x75c/0x8e0 [ 1029.990427][T18033] netlink_sendmsg+0x805/0xb30 [ 1029.990449][T18033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.990467][T18033] ? __import_iovec+0x5d4/0x7f0 [ 1029.990481][T18033] ? aa_sock_msg_perm+0x94/0x160 [ 1029.990503][T18033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.990523][T18033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.990540][T18033] __sock_sendmsg+0x219/0x270 [ 1029.990555][T18033] ____sys_sendmsg+0x505/0x830 [ 1029.990576][T18033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.990603][T18033] ___sys_sendmsg+0x21f/0x2a0 [ 1029.990627][T18033] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.990667][T18033] ? __fget_files+0x2a/0x420 [ 1029.990684][T18033] ? __fget_files+0x3a0/0x420 [ 1029.990708][T18033] __sys_sendmsg+0x164/0x220 [ 1029.990727][T18033] ? __pfx___sys_sendmsg+0x10/0x10 [ 1029.990754][T18033] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1029.990767][T18033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.990790][T18033] __do_fast_syscall_32+0xb6/0x2b0 [ 1029.990804][T18033] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.990826][T18033] do_fast_syscall_32+0x34/0x80 [ 1029.990840][T18033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1029.990856][T18033] RIP: 0023:0xf7f84539 [ 1029.990867][T18033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1029.990879][T18033] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1029.990893][T18033] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1029.990902][T18033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1029.990910][T18033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1029.990918][T18033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1029.990926][T18033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1029.990944][T18033] [ 1030.123919][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1030.132080][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1030.132114][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.132129][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.307044][T18025] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1030.368750][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.555261][ T5917] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1030.732118][ T5917] usb 2-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 1030.970123][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.970173][ T5917] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1030.970197][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.980432][ T5917] usb 2-1: config 0 descriptor?? [ 1031.675745][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1031.869887][ T24] usb 4-1: config 0 has no interfaces? [ 1031.889623][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1031.901160][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.909810][ T24] usb 4-1: Product: syz [ 1031.914057][ T24] usb 4-1: Manufacturer: syz [ 1031.933221][ T24] usb 4-1: SerialNumber: syz [ 1031.963630][ T24] usb 4-1: config 0 descriptor?? [ 1032.138088][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2256'. [ 1032.290414][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 1032.290432][ T30] audit: type=1326 audit(1752750906.087:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 1032.351737][ T30] audit: type=1326 audit(1752750906.087:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 1032.528345][ T30] audit: type=1326 audit(1752750906.087:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1032.585685][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1032.598965][ T30] audit: type=1326 audit(1752750906.087:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1032.655284][ T30] audit: type=1326 audit(1752750906.177:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 1032.691744][ T30] audit: type=1326 audit(1752750906.177:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f71558 code=0x7ffc0000 [ 1032.715215][ T30] audit: type=1326 audit(1752750906.177:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2256" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000 [ 1032.815582][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1032.823527][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1032.834946][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1032.860767][ T5958] usb 1-1: USB disconnect, device number 47 [ 1032.924073][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1033.051846][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1033.061492][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.073415][T18052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2263'. [ 1033.090427][ T24] usb 6-1: Product: syz [ 1033.102524][ T24] usb 6-1: Manufacturer: syz [ 1033.107540][ T24] usb 6-1: SerialNumber: syz [ 1033.129174][ T24] usb 6-1: config 0 descriptor?? [ 1033.179696][T18042] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 1033.209436][ T24] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1033.220936][ T24] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1033.233621][ T24] mcba_usb 6-1:0.0 can0: failed tx_urb -90 [ 1033.242227][ T24] mcba_usb 6-1:0.0 can0: Failed to send cmd (169) [ 1033.248891][ T24] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 1033.386248][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 1033.394570][ T5917] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1033.433500][ T5917] usb 2-1: USB disconnect, device number 50 [ 1033.646630][ T24] usb 6-1: USB disconnect, device number 76 [ 1033.655844][ T24] mcba_usb 6-1:0.0 can0: device disconnected [ 1034.151447][ T5958] usb 4-1: USB disconnect, device number 24 [ 1034.184360][T18069] IPVS: length: 24 != 792 [ 1034.394413][T18069] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1034.486186][ T5950] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1034.700496][T18085] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2268'. [ 1034.779084][ T5950] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.855743][ T5950] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.858448][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1034.932965][ T5950] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.983818][ T5950] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1035.065866][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.085236][ T5950] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1035.132868][ T5950] usb 1-1: invalid MIDI out EP 0 [ 1035.255690][ T5917] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1035.570908][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1035.619295][ T5950] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1035.625695][ T5917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1035.656859][ T5917] usb 6-1: config 5 has an invalid interface number: 215 but max is 0 [ 1035.704539][ T5917] usb 6-1: config 5 has no interface number 0 [ 1035.874808][ T5917] usb 6-1: config 5 interface 215 has no altsetting 0 [ 1035.901880][ T5917] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 1035.923846][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.953924][ T5917] usb 6-1: Product: syz [ 1035.966177][ T5917] usb 6-1: Manufacturer: syz [ 1035.983194][ T5917] usb 6-1: SerialNumber: syz [ 1036.344242][ T5917] cypress_m8 6-1:5.215: DeLorme Earthmate USB converter detected [ 1036.419505][ T5917] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1036.473324][ T5917] usb 6-1: USB disconnect, device number 77 [ 1036.524718][ T5917] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1036.585027][ T5917] cypress_m8 6-1:5.215: device disconnected [ 1036.984155][T18119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.006280][T18119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.170344][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 1038.006306][ T9] usb 1-1: USB disconnect, device number 48 [ 1038.745743][ T10] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1038.905756][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1038.929702][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1038.939092][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.971992][ T10] usb 6-1: Product: syz [ 1039.112318][ T10] usb 6-1: Manufacturer: syz [ 1039.120885][ T10] usb 6-1: SerialNumber: syz [ 1039.135022][ T10] usb 6-1: config 0 descriptor?? [ 1039.226683][T18145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2279'. [ 1039.359141][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1039.691543][T18161] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 1039.771876][T18161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1039.781498][T18161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2284'. [ 1040.029020][ T5958] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1040.090905][ T5847] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1040.195676][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 1040.202353][ T5958] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1040.210986][ T5958] usb 4-1: config 0 has no interface number 0 [ 1040.222558][ T5958] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1040.239735][ T5958] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1040.258168][ T5958] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1040.261620][ T5847] usb 2-1: config index 0 descriptor too short (expected 4900, got 36) [ 1040.268180][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.283863][ T5847] usb 2-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1040.299202][ T5847] usb 2-1: config 16 interface 0 has no altsetting 0 [ 1040.309178][ T5958] usb 4-1: Product: syz [ 1040.313885][ T5847] usb 2-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1040.314737][ T5958] usb 4-1: Manufacturer: syz [ 1040.327942][ T5847] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1040.336368][ T5847] usb 2-1: Manufacturer: syz [ 1040.344706][ T5958] usb 4-1: SerialNumber: syz [ 1040.374915][ T5958] usb 4-1: config 0 descriptor?? [ 1040.474072][T18164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1040.482324][T18164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1040.557343][ T5847] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1040.565439][ T5847] imon 2-1:16.0: unable to initialize intf0, err -19 [ 1040.572277][ T5847] imon:imon_probe: failed to initialize context! [ 1040.591033][T18171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.632443][T18171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.644976][ T5847] imon 2-1:16.0: unable to register, err -19 [ 1040.704926][ T5847] usb 2-1: USB disconnect, device number 51 [ 1040.721132][T18164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1040.761952][T18164] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1041.303699][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.432771][T18184] fuse: Bad value for 'user_id' [ 1041.452336][T18184] fuse: Bad value for 'user_id' [ 1041.815689][ T5950] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1041.965575][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 1041.972396][ T5950] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1041.980056][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1041.991975][ T5950] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1042.009894][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1042.025059][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1042.064296][ T5950] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1042.073939][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1042.085990][ T5950] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1042.103740][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1042.106191][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1042.134520][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1042.134974][ T10] usb 6-1: USB disconnect, device number 78 [ 1042.148226][ T5950] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1042.163428][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1042.174907][ T5950] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1042.189642][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1042.201532][ T5950] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1042.259025][ T5950] usb 2-1: string descriptor 0 read error: -22 [ 1042.277507][ T5950] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1042.289597][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.326614][ T5950] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1042.452558][ T5958] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1042.580005][ T5950] usb 2-1: USB disconnect, device number 52 [ 1042.671004][ T5958] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1042.691900][T18195] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 1043.337749][ T5958] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1043.725289][ T5958] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1043.799301][ T5958] asix 4-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 1043.888964][ T5958] asix 4-1:0.251: probe with driver asix failed with error -5 [ 1043.919475][ T5958] usb 4-1: USB disconnect, device number 25 [ 1044.302145][T18216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2301'. [ 1044.355783][ T5847] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1044.888451][ T10] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1044.977265][ T5847] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1044.990337][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.022947][ T5847] usb 1-1: config 0 has no interface number 0 [ 1045.040873][ T5847] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1045.083009][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1045.103239][ T5847] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.122410][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.217147][ T10] usb 6-1: Product: syz [ 1045.225700][ T10] usb 6-1: Manufacturer: syz [ 1045.241388][ T5847] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1045.255704][ T10] usb 6-1: SerialNumber: syz [ 1045.266035][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.294393][ T5847] usb 1-1: Product: syz [ 1045.299407][ T10] usb 6-1: config 0 descriptor?? [ 1045.329265][ T5847] usb 1-1: Manufacturer: syz [ 1045.397654][ T5847] usb 1-1: SerialNumber: syz [ 1045.423648][ T5847] usb 1-1: config 0 descriptor?? [ 1045.550178][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1045.929158][T18229] vlan2: entered allmulticast mode [ 1045.934409][T18229] veth1: entered allmulticast mode [ 1046.016727][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 1046.038424][T18235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1046.305800][ T5958] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1046.455757][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1046.464978][ T5958] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1046.479760][ T5958] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1046.488918][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.499719][ T5958] usb 4-1: Product: syz [ 1046.503899][ T5958] usb 4-1: Manufacturer: syz [ 1046.509149][ T5958] usb 4-1: SerialNumber: syz [ 1046.516580][ T5958] usb 4-1: config 0 descriptor?? [ 1046.525671][ T5958] usb 4-1: bad CDC descriptors [ 1046.531032][ T5958] usb 4-1: unsupported MDLM descriptors [ 1046.565616][ T980] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1046.715768][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1046.729851][ T980] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1046.732458][ T5847] usb 4-1: USB disconnect, device number 26 [ 1046.741499][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.763415][ T980] usb 2-1: Product: syz [ 1046.772405][ T980] usb 2-1: Manufacturer: syz [ 1046.783317][ T980] usb 2-1: SerialNumber: syz [ 1046.799808][ T980] usb 2-1: config 0 descriptor?? [ 1046.810308][ T980] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 1046.814237][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.829746][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.978791][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1047.005310][ T10] usb 6-1: USB disconnect, device number 79 [ 1047.016714][ T980] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 1047.029591][ T980] visor 2-1:0.0: probe with driver visor failed with error -5 [ 1047.399666][ T10] usb 1-1: USB disconnect, device number 49 [ 1047.599402][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1048.290903][T18263] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.299926][T18263] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.308688][T18263] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.317419][T18263] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.466277][T18266] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2314'. [ 1049.831867][ T5958] usb 2-1: USB disconnect, device number 53 [ 1050.107823][T18293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1050.260902][T18299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.269986][T18299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.433967][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2321'. [ 1050.495724][ T5958] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1050.655629][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1050.655697][ T5958] usb 1-1: Using ep0 maxpacket: 32 [ 1050.678098][ T5958] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1050.705923][ T5847] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1050.717362][ T5958] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1050.728112][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.736526][ T5958] usb 1-1: Product: syz [ 1050.794243][ T5958] usb 1-1: Manufacturer: syz [ 1050.803912][ T5958] usb 1-1: SerialNumber: syz [ 1050.817575][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1050.819480][ T5958] usb 1-1: config 0 descriptor?? [ 1051.006113][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 1051.013776][ T5958] usb 1-1: bad CDC descriptors [ 1051.013839][ T5847] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 1051.023809][ T5958] usb 1-1: unsupported MDLM descriptors [ 1051.027863][ T5847] usb 4-1: config 0 has no interface number 0 [ 1051.043764][ T10] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1051.058960][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.073934][ T5847] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1051.089690][ T10] usb 2-1: Product: syz [ 1051.094015][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.103547][ T10] usb 2-1: Manufacturer: syz [ 1051.108360][ T10] usb 2-1: SerialNumber: syz [ 1051.114663][ T5847] usb 4-1: Product: syz [ 1051.120763][ T10] usb 2-1: config 0 descriptor?? [ 1051.130749][ T5847] usb 4-1: Manufacturer: syz [ 1051.136371][ T5847] usb 4-1: SerialNumber: syz [ 1051.143434][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1051.153027][ T5847] usb 4-1: config 0 descriptor?? [ 1051.168240][ T5847] as10x_usb: device has been detected [ 1051.174832][ T5847] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1051.207127][ T5847] usb 4-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 1051.230842][ T9] usb 1-1: USB disconnect, device number 50 [ 1051.312141][ T5847] as10x_usb: error during firmware upload part1 [ 1051.319167][ T5847] Registered device PCTV Systems picoStick (74e) [ 1051.401984][ T5847] usb 4-1: USB disconnect, device number 27 [ 1051.461065][ T5847] Unregistered device PCTV Systems picoStick (74e) [ 1051.464232][ T5847] as10x_usb: device has been disconnected [ 1051.565453][T18308] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2327'. [ 1052.372847][T18322] xt_TCPMSS: Only works on TCP SYN packets [ 1052.700753][T18333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.756109][T18333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.784179][ T10] gspca_stk1135: reg_w 0x200 err -71 [ 1052.792691][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1052.816844][ T10] gspca_stk1135: Sensor write failed [ 1052.826706][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1052.833551][ T10] gspca_stk1135: Sensor write failed [ 1053.322322][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.342559][ T10] gspca_stk1135: Sensor read failed [ 1053.373561][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.385692][ T5958] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1053.391651][ T10] gspca_stk1135: Sensor read failed [ 1053.421541][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 1053.431688][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.445635][ T10] gspca_stk1135: Sensor read failed [ 1053.451317][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.464630][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2337'. [ 1053.470011][T18340] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1053.481461][ T10] gspca_stk1135: Sensor read failed [ 1053.483889][T18338] futex_wake_op: syz.5.2337 tries to shift op by -1; fix this program [ 1053.487221][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.509348][ T10] gspca_stk1135: Sensor write failed [ 1053.519019][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1053.528475][ T10] gspca_stk1135: Sensor write failed [ 1053.534276][ T10] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1053.551737][ T5958] usb 1-1: Using ep0 maxpacket: 16 [ 1053.553575][ T10] usb 2-1: USB disconnect, device number 54 [ 1053.562435][ T5958] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1053.583351][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.600031][ T5958] usb 1-1: Product: syz [ 1053.604233][ T5958] usb 1-1: Manufacturer: syz [ 1053.612121][T18342] netlink: 'syz.5.2339': attribute type 1 has an invalid length. [ 1053.613853][ T5958] usb 1-1: SerialNumber: syz [ 1053.625969][T18342] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2339'. [ 1053.630714][ T5958] usb 1-1: config 0 descriptor?? [ 1053.640194][T18342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2339'. [ 1053.666963][ T5958] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 1053.746045][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1053.869305][ T5958] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 1053.880321][ T5958] visor 1-1:0.0: probe with driver visor failed with error -5 [ 1053.885738][ T5847] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1053.895600][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1053.907596][ T9] usb 4-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1053.938573][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1053.959629][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.987592][ T9] usb 4-1: Product: syz [ 1053.995861][ T9] usb 4-1: Manufacturer: syz [ 1054.000542][ T9] usb 4-1: SerialNumber: syz [ 1054.026557][ T9] usb 4-1: config 0 descriptor?? [ 1054.038287][ T9] usb 4-1: bad CDC descriptors [ 1054.043726][ T9] usb 4-1: unsupported MDLM descriptors [ 1054.055816][ T980] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1054.059540][ T5847] usb 6-1: config index 0 descriptor too short (expected 4900, got 36) [ 1054.085165][ T5847] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1054.096549][ T5847] usb 6-1: config 16 interface 0 has no altsetting 0 [ 1054.117100][ T5847] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1054.136622][ T5847] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1054.144649][ T5847] usb 6-1: Manufacturer: syz [ 1054.226832][ T980] usb 2-1: Using ep0 maxpacket: 8 [ 1054.240856][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.244390][ T10] usb 4-1: USB disconnect, device number 28 [ 1054.247362][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.286258][ T980] usb 2-1: config 0 has an invalid interface number: 237 but max is 0 [ 1054.303523][ T980] usb 2-1: config 0 has no interface number 0 [ 1054.326913][ T980] usb 2-1: config 0 interface 237 altsetting 92 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1054.378317][ T980] usb 2-1: config 0 interface 237 has no altsetting 0 [ 1054.416124][ T5847] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1054.439599][ T980] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 1054.468772][ T5847] imon 6-1:16.0: unable to initialize intf0, err -19 [ 1054.485014][ T5847] imon:imon_probe: failed to initialize context! [ 1054.494924][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.515652][ T5847] imon 6-1:16.0: unable to register, err -19 [ 1054.523108][ T980] usb 2-1: Product: syz [ 1054.537670][ T980] usb 2-1: Manufacturer: syz [ 1054.547578][ T980] usb 2-1: SerialNumber: syz [ 1054.558745][ T5847] usb 6-1: USB disconnect, device number 80 [ 1054.616138][ T980] usb 2-1: config 0 descriptor?? [ 1054.660620][T18355] FAULT_INJECTION: forcing a failure. [ 1054.660620][T18355] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.674924][T18355] CPU: 0 UID: 0 PID: 18355 Comm: syz.4.2343 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1054.674956][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1054.674971][T18355] Call Trace: [ 1054.674980][T18355] [ 1054.674990][T18355] dump_stack_lvl+0x189/0x250 [ 1054.675024][T18355] ? __pfx____ratelimit+0x10/0x10 [ 1054.675061][T18355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.675090][T18355] ? __pfx__printk+0x10/0x10 [ 1054.675128][T18355] ? __pfx___might_resched+0x10/0x10 [ 1054.675154][T18355] ? fs_reclaim_acquire+0x7d/0x100 [ 1054.675190][T18355] should_fail_ex+0x414/0x560 [ 1054.675230][T18355] should_failslab+0xa8/0x100 [ 1054.675261][T18355] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1054.675289][T18355] ? __alloc_skb+0x112/0x2d0 [ 1054.675321][T18355] __alloc_skb+0x112/0x2d0 [ 1054.675352][T18355] tcp_stream_alloc_skb+0x3d/0x340 [ 1054.675382][T18355] tcp_connect+0x1ceb/0x46f0 [ 1054.675454][T18355] tcp_v4_connect+0x10e7/0x19d0 [ 1054.675504][T18355] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1054.675540][T18355] __inet_stream_connect+0x295/0xf10 [ 1054.675577][T18355] ? __pfx___inet_stream_connect+0x10/0x10 [ 1054.675604][T18355] ? __kasan_kmalloc+0x93/0xb0 [ 1054.675634][T18355] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 1054.675663][T18355] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 1054.675694][T18355] tcp_sendmsg_locked+0x4df6/0x5710 [ 1054.675723][T18355] ? tcp_sendmsg_locked+0x551/0x5710 [ 1054.675749][T18355] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1054.675807][T18355] ? post_alloc_hook+0x253/0x2a0 [ 1054.675844][T18355] ? __lock_acquire+0xab9/0xd20 [ 1054.675892][T18355] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1054.675912][T18355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1054.675950][T18355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1054.675984][T18355] tcp_sendmsg+0x2f/0x50 [ 1054.676004][T18355] __sock_sendmsg+0x19c/0x270 [ 1054.676026][T18355] ____sys_sendmsg+0x52d/0x830 [ 1054.676055][T18355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1054.676097][T18355] ___sys_sendmsg+0x21f/0x2a0 [ 1054.676125][T18355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.676183][T18355] ? __fget_files+0x2a/0x420 [ 1054.676209][T18355] ? __fget_files+0x3a0/0x420 [ 1054.676245][T18355] __sys_sendmmsg+0x28e/0x430 [ 1054.676276][T18355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1054.676310][T18355] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1054.676348][T18355] ? ksys_write+0x22a/0x250 [ 1054.676381][T18355] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1054.676412][T18355] __do_fast_syscall_32+0xb6/0x2b0 [ 1054.676433][T18355] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.676466][T18355] do_fast_syscall_32+0x34/0x80 [ 1054.676487][T18355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1054.676510][T18355] RIP: 0023:0xf7f71539 [ 1054.676527][T18355] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1054.676544][T18355] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1054.676565][T18355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 1054.676578][T18355] RDX: 0000000000000001 RSI: 000000002400c042 RDI: 0000000000000000 [ 1054.676590][T18355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1054.676602][T18355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1054.676614][T18355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1054.676641][T18355] [ 1055.008057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.082177][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'. [ 1055.725063][T18364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.757551][T18364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.810319][T18364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.837566][ T5847] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1055.870667][T18364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.061115][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 1056.094754][ T5847] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1056.113993][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.155727][ T5847] usb 6-1: Product: syz [ 1056.161687][ T5847] usb 6-1: Manufacturer: syz [ 1056.262408][ T5847] usb 6-1: SerialNumber: syz [ 1056.282110][ T5847] usb 6-1: config 0 descriptor?? [ 1056.323578][ T5847] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1056.353337][ T5950] usb 1-1: USB disconnect, device number 51 [ 1056.538850][ T5847] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 1056.588735][ T5847] visor 6-1:0.0: probe with driver visor failed with error -5 [ 1057.212255][ T980] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1057.285636][ T980] gspca_sn9c2028: read1 error -71 [ 1057.325647][ T980] gspca_sn9c2028: read1 error -71 [ 1057.351612][ T980] gspca_sn9c2028: read1 error -71 [ 1057.365668][ T980] sn9c2028 2-1:0.237: probe with driver sn9c2028 failed with error -71 [ 1057.437515][ T980] usb 2-1: USB disconnect, device number 55 [ 1057.540993][T18375] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1057.730565][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2344'. [ 1057.743122][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2350'. [ 1057.786639][T18379] fuse: Unknown parameter '&d§0x0000000000000005' [ 1058.421555][T18388] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2353'. [ 1058.521048][T18390] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 1058.547307][T18392] FAULT_INJECTION: forcing a failure. [ 1058.547307][T18392] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.564597][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1058.586570][T18390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1058.603588][T18392] CPU: 1 UID: 0 PID: 18392 Comm: syz.1.2348 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1058.603614][T18392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1058.603627][T18392] Call Trace: [ 1058.603636][T18392] [ 1058.603651][T18392] dump_stack_lvl+0x189/0x250 [ 1058.603677][T18392] ? __pfx____ratelimit+0x10/0x10 [ 1058.603708][T18392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.603732][T18392] ? __pfx__printk+0x10/0x10 [ 1058.603765][T18392] ? __pfx___might_resched+0x10/0x10 [ 1058.603788][T18392] ? fs_reclaim_acquire+0x7d/0x100 [ 1058.603820][T18392] should_fail_ex+0x414/0x560 [ 1058.603854][T18392] should_failslab+0xa8/0x100 [ 1058.603881][T18392] __kmalloc_noprof+0xcb/0x4f0 [ 1058.603902][T18392] ? kfree+0x4d/0x440 [ 1058.603919][T18392] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.603942][T18392] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.603964][T18392] ? tomoyo_domain+0xd9/0x130 [ 1058.603988][T18392] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1058.604015][T18392] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1058.604037][T18392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1058.604067][T18392] ? __lock_acquire+0xab9/0xd20 [ 1058.604094][T18392] ? __fget_files+0x2a/0x420 [ 1058.604115][T18392] ? __fget_files+0x3a0/0x420 [ 1058.604131][T18392] ? __fget_files+0x2a/0x420 [ 1058.604151][T18392] security_file_ioctl_compat+0xcb/0x2d0 [ 1058.604171][T18392] __ia32_compat_sys_ioctl+0x128/0x840 [ 1058.604188][T18392] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1058.604203][T18392] ? __fget_files+0x3a0/0x420 [ 1058.604225][T18392] ? fput+0xa0/0xd0 [ 1058.604244][T18392] ? ksys_write+0x22a/0x250 [ 1058.604264][T18392] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1058.604279][T18392] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.604301][T18392] __do_fast_syscall_32+0xb6/0x2b0 [ 1058.604315][T18392] ? lockdep_hardirqs_on+0x9c/0x150 [ 1058.604337][T18392] do_fast_syscall_32+0x34/0x80 [ 1058.604351][T18392] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1058.604367][T18392] RIP: 0023:0xf707e539 [ 1058.604379][T18392] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1058.604391][T18392] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1058.604407][T18392] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c048aec8 [ 1058.604416][T18392] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 1058.604425][T18392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1058.604433][T18392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1058.604441][T18392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1058.604459][T18392] [ 1058.604465][T18392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.985825][ T5958] usb 6-1: USB disconnect, device number 81 [ 1059.244632][T18396] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1059.357531][ T24] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1059.432583][T18403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.443468][T18403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.467868][T18403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2356'. [ 1059.505675][ T5847] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1059.510142][T18407] netlink: 'syz.5.2358': attribute type 21 has an invalid length. [ 1059.525402][T18407] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1059.538837][T18407] netlink: 'syz.5.2358': attribute type 4 has an invalid length. [ 1059.547960][ T24] usb 1-1: config index 0 descriptor too short (expected 4900, got 36) [ 1059.549885][T18407] netlink: 'syz.5.2358': attribute type 5 has an invalid length. [ 1059.556973][ T24] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1059.566262][T18407] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1059.592071][ T24] usb 1-1: config 16 interface 0 has no altsetting 0 [ 1059.609034][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1059.620006][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1059.635692][ T5950] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1059.645786][ T24] usb 1-1: Manufacturer: syz [ 1059.656169][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 1059.673247][ T5847] usb 2-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 1059.703342][ T5847] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1059.733299][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.753687][ T5847] usb 2-1: Product: syz [ 1059.763031][ T5847] usb 2-1: Manufacturer: syz [ 1059.770505][ T5847] usb 2-1: SerialNumber: syz [ 1059.787148][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 1059.788231][ T5847] usb 2-1: config 0 descriptor?? [ 1059.808425][ T5950] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1059.808467][ T5847] usb 2-1: bad CDC descriptors [ 1059.826486][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.836250][ T5847] usb 2-1: unsupported MDLM descriptors [ 1059.844718][ T5950] usb 4-1: Product: syz [ 1059.855825][ T5950] usb 4-1: Manufacturer: syz [ 1059.874932][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1059.885238][ T5950] usb 4-1: SerialNumber: syz [ 1059.894305][ T24] imon 1-1:16.0: unable to initialize intf0, err -19 [ 1059.904604][ T5950] usb 4-1: config 0 descriptor?? [ 1059.910906][ T24] imon:imon_probe: failed to initialize context! [ 1059.923233][ T24] imon 1-1:16.0: unable to register, err -19 [ 1059.931685][ T5950] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 1059.949134][ T24] usb 1-1: USB disconnect, device number 52 [ 1060.016119][ T5958] usb 2-1: USB disconnect, device number 56 [ 1060.131613][ T5950] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 1060.139837][ T5950] visor 4-1:0.0: probe with driver visor failed with error -5 [ 1060.175621][ T5847] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1060.345610][ T5847] usb 6-1: Using ep0 maxpacket: 8 [ 1060.368455][ T5847] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1060.377179][ T5847] usb 6-1: config 179 has no interface number 0 [ 1060.429819][ T5847] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1060.465734][ T5847] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1060.477288][ T5847] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1060.505653][ T5847] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1060.543489][ T5847] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1060.585575][ T5847] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1060.605831][ T5847] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1060.653900][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.673511][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.727344][ T5847] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input271 [ 1060.742416][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.805700][ T5204] input input271: unable to receive magic message: -110 [ 1060.819750][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'. [ 1060.849357][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 1060.878888][ T5204] input input271: unable to receive magic message: -32 [ 1060.900387][ T5204] input input271: unable to receive magic message: -32 [ 1060.992523][ T5847] usb 6-1: USB disconnect, device number 82 [ 1060.998684][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1061.135235][T18428] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1061.620393][T18437] loop4: detected capacity change from 0 to 524255232 [ 1062.183927][T18448] tipc: Started in network mode [ 1062.192027][T18448] tipc: Node identity ce1f94b03f4b, cluster identity 4711 [ 1062.230976][T18448] tipc: Enabled bearer , priority 0 [ 1062.264647][T18448] syzkaller0: entered promiscuous mode [ 1062.271881][T18448] syzkaller0: entered allmulticast mode [ 1062.319267][ T5958] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1062.355686][ T5847] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1062.369148][T18448] tipc: Resetting bearer [ 1062.377683][T18447] tipc: Resetting bearer [ 1062.402722][T18447] tipc: Disabling bearer [ 1062.508162][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 1062.515585][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 1062.525004][ T5958] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1062.556937][ T5847] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1062.557271][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.575333][ T5847] usb 2-1: config 0 has no interface number 0 [ 1062.607593][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.625683][ T5847] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1062.637916][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1062.659311][ T5847] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1062.671659][ T5958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1062.700701][ T5958] usb 6-1: config 0 has no interface number 0 [ 1062.710859][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1062.746051][ T5847] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1062.763149][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1062.785096][ T5847] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1062.797122][ T10] usb 4-1: USB disconnect, device number 29 [ 1062.834163][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1062.865391][ T5958] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1062.878745][ T5847] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1062.878770][ T5847] usb 2-1: Product: syz [ 1062.878785][ T5847] usb 2-1: Manufacturer: syz [ 1062.878800][ T5847] usb 2-1: SerialNumber: syz [ 1062.887197][ T5847] usb 2-1: config 0 descriptor?? [ 1062.955279][ T5847] f81534 2-1:0.12: unsupported endpoint max packet size [ 1063.033397][ T5958] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1063.060826][ T5958] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1063.070161][ T5958] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1063.085886][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.104322][ T5958] usb 6-1: Product: syz [ 1063.108830][ T5958] usb 6-1: Manufacturer: syz [ 1063.116126][ T5958] usb 6-1: SerialNumber: syz [ 1063.138820][ T5958] usb 6-1: config 0 descriptor?? [ 1063.159068][ T5958] usb 6-1: selecting invalid altsetting 2 [ 1063.217139][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.229001][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.307159][T16735] usb 2-1: USB disconnect, device number 57 [ 1063.315764][ T5847] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1063.347057][ T5950] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1063.475761][ T5847] usb 1-1: Using ep0 maxpacket: 8 [ 1063.494791][ T5847] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1063.505661][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 1063.505721][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.519139][ T5847] usb 1-1: Product: syz [ 1063.524247][ T5847] usb 1-1: Manufacturer: syz [ 1063.529029][ T5847] usb 1-1: SerialNumber: syz [ 1063.539738][ T5847] usb 1-1: config 0 descriptor?? [ 1063.550596][ T5950] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1063.560413][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.576615][ T5950] usb 4-1: Product: syz [ 1063.589102][ T5950] usb 4-1: Manufacturer: syz [ 1063.604185][ T5950] usb 4-1: SerialNumber: syz [ 1063.628552][ T5950] usb 4-1: config 0 descriptor?? [ 1063.668205][ T5950] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1063.756339][ T5847] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1063.847141][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.860105][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.873845][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.896165][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.920915][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.933579][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.187893][ T5958] usb 6-1: USB disconnect, device number 83 [ 1064.195761][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1064.361903][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.372275][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1064.381701][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.393312][ T10] usb 2-1: config 0 descriptor?? [ 1064.414805][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1064.540527][T18465] __nla_validate_parse: 1 callbacks suppressed [ 1064.540547][T18465] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2378'. [ 1064.562673][T18465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.571731][T18465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.609264][ T10] pwc: send_video_command error -71 [ 1064.625779][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1064.627062][ T30] audit: type=1326 audit(1752750938.427:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.2378" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f71539 code=0x0 [ 1064.645749][ T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1064.688543][ T10] usb 2-1: USB disconnect, device number 58 [ 1065.135676][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1065.313317][ T5950] gspca_stk1135: reg_w 0x200 err -71 [ 1065.315712][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1065.327725][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.336653][ T5950] gspca_stk1135: Sensor write failed [ 1065.342912][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.353318][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1065.361589][ T5950] gspca_stk1135: Sensor write failed [ 1065.369661][ T10] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1065.381210][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.390460][ T10] usb 2-1: Product: syz [ 1065.394950][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.394975][ T10] usb 2-1: Manufacturer: syz [ 1065.439096][ T5950] gspca_stk1135: Sensor read failed [ 1065.446990][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.455062][ T5950] gspca_stk1135: Sensor read failed [ 1065.461120][ T5950] gspca_stk1135: Detected sensor type unknown (0x0) [ 1065.468192][ T10] usb 2-1: SerialNumber: syz [ 1065.468503][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.479544][ T5950] gspca_stk1135: Sensor read failed [ 1065.489355][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.490019][ T10] usb 2-1: config 0 descriptor?? [ 1065.561401][ T5950] gspca_stk1135: Sensor read failed [ 1065.569314][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.591386][ T5950] gspca_stk1135: Sensor write failed [ 1065.597456][ T5950] gspca_stk1135: serial bus timeout: status=0x00 [ 1065.674830][ T5950] gspca_stk1135: Sensor write failed [ 1065.684391][ T10] gs_usb 2-1:0.0: Required endpoints not found [ 1065.685702][ T5950] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1065.756827][ T5950] usb 4-1: USB disconnect, device number 30 [ 1066.611723][T18489] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2383'. [ 1066.699564][ T5847] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1066.711279][ T5847] usb 1-1: USB disconnect, device number 53 [ 1067.410596][T18502] fuse: Bad value for 'rootmode' [ 1067.448955][ T10] usb 2-1: USB disconnect, device number 59 [ 1067.578667][T18508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 1067.718895][T18512] netlink: 'syz.5.2391': attribute type 1 has an invalid length. [ 1067.756361][T18512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1067.820264][T18512] vlan2: entered allmulticast mode [ 1067.825413][T18512] geneve1: entered allmulticast mode [ 1067.903122][T18512] bond3: (slave vlan2): making interface the new active one [ 1067.957840][T18512] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 1067.990912][T18520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.030823][T18520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.129721][T18523] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1069.593192][T18538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.636834][T18538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.886163][T18548] input: syz1 as /devices/virtual/input/input272 [ 1069.995826][ T5847] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1070.151524][ T5847] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1070.169365][T18557] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2402'. [ 1070.218514][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.229225][ T5847] usb 4-1: Product: syz [ 1070.237420][ T5847] usb 4-1: Manufacturer: syz [ 1070.245048][ T5847] usb 4-1: SerialNumber: syz [ 1070.274581][ T5847] usb 4-1: config 0 descriptor?? [ 1070.298696][ T5847] usb 4-1: selecting invalid altsetting 3 [ 1070.314254][ T5847] comedi comedi5: could not set alternate setting 3 in high speed [ 1070.327042][ T5847] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1070.340655][ T5847] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1070.355894][ T10] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1070.440732][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2405'. [ 1070.521336][ T30] audit: type=1326 audit(1752750944.317:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18539 comm="syz.3.2399" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707e539 code=0x0 [ 1070.583737][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.662236][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.739531][ T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1070.752585][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.773203][ T10] usb 6-1: config 0 descriptor?? [ 1070.954008][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 1071.187225][ T10] cp2112 0003:10C4:EA90.003A: unknown main item tag 0x0 [ 1071.197802][ T10] cp2112 0003:10C4:EA90.003A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1071.356559][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1071.375660][T16735] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1071.384955][ T10] cp2112 0003:10C4:EA90.003A: Part Number: 0x00 Device Version: 0x00 [ 1071.505698][T16735] usb 2-1: device descriptor read/64, error -71 [ 1071.517367][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1071.528778][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1071.538022][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.546255][ T9] usb 1-1: Product: syz [ 1071.550479][ T9] usb 1-1: Manufacturer: syz [ 1071.555106][ T9] usb 1-1: SerialNumber: syz [ 1071.562631][ T9] usb 1-1: config 0 descriptor?? [ 1071.571010][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1071.658433][T18574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.667343][T18574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.758478][T16735] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1071.895807][T16735] usb 2-1: device descriptor read/64, error -71 [ 1072.005991][T16735] usb usb2-port1: attempt power cycle [ 1072.017755][T18556] ------------[ cut here ]------------ [ 1072.023272][T18556] usb 5-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0 [ 1072.033671][T18556] WARNING: CPU: 1 PID: 18556 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 1072.043590][T18556] Modules linked in: [ 1072.047891][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.5.2404 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1072.060044][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.070204][T18556] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1072.076142][T18556] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 42 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 34 d3 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1072.096128][T18556] RSP: 0018:ffffc90004d27670 EFLAGS: 00010246 [ 1072.102238][T18556] RAX: 23e010b3b46bed00 RBX: ffff8880552d9300 RCX: 0000000000080000 [ 1072.110466][T18556] RDX: ffffc9001ab89000 RSI: 000000000000405a RDI: 000000000000405b [ 1072.118530][T18556] RBP: 1ffff1100aa55a94 R08: 0000000000000003 R09: 0000000000000004 [ 1072.126715][T18556] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff8880552ad4a0 [ 1072.134771][T18556] R13: dffffc0000000000 R14: 0000000080000980 R15: ffff88806daaddc0 [ 1072.142913][T18556] FS: 0000000000000000(0000) GS:ffff888125d1b000(0063) knlGS:00000000f50a6b40 [ 1072.151944][T18556] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1072.158702][T18556] CR2: 000000003111fffc CR3: 000000005832c000 CR4: 00000000003526f0 [ 1072.166755][T18556] Call Trace: [ 1072.170073][T18556] [ 1072.173046][T18556] usb_start_wait_urb+0x114/0x4c0 [ 1072.178203][T18556] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1072.183809][T18556] usb_control_msg+0x232/0x3e0 [ 1072.188645][T18556] dtv5100_i2c_msg+0x250/0x330 [ 1072.193665][T18556] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1072.198783][T18556] __i2c_transfer+0x871/0x2170 [ 1072.203626][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.208936][T18556] ? __pfx___i2c_transfer+0x10/0x10 [ 1072.214188][T18556] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1072.219673][T18556] ? i2c_transfer+0x120/0x3a0 [ 1072.224400][T18556] i2c_transfer+0x25b/0x3a0 [ 1072.229022][T18556] ? __pfx_i2c_transfer+0x10/0x10 [ 1072.234097][T18556] ? _copy_from_user+0x94/0xb0 [ 1072.238995][T18556] i2cdev_ioctl_rdwr+0x460/0x740 [ 1072.243993][T18556] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1072.249196][T18556] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1072.254884][T18556] ? __fget_files+0x3a0/0x420 [ 1072.259693][T18556] ? __fget_files+0x2a/0x420 [ 1072.264326][T18556] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1072.270038][T18556] __ia32_compat_sys_ioctl+0x543/0x840 [ 1072.275636][T18556] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1072.281675][T18556] ? __se_sys_futex_time32+0x360/0x3e0 [ 1072.287252][T18556] ? rcu_is_watching+0x15/0xb0 [ 1072.292061][T18556] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1072.298916][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.304172][T18556] __do_fast_syscall_32+0xb6/0x2b0 [ 1072.309557][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.314817][T18556] do_fast_syscall_32+0x34/0x80 [ 1072.319808][T18556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.326216][T18556] RIP: 0023:0xf7f84539 [ 1072.330311][T18556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1072.350072][T18556] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1072.358588][T18556] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1072.366647][T18556] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.374651][T18556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.382792][T18556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1072.390839][T18556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.399242][T18556] [ 1072.402325][T18556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1072.409644][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.5.2404 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1072.421731][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.431807][T18556] Call Trace: [ 1072.435123][T18556] [ 1072.438101][T18556] dump_stack_lvl+0x99/0x250 [ 1072.442827][T18556] ? __asan_memcpy+0x40/0x70 [ 1072.447445][T18556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1072.452665][T18556] ? __pfx__printk+0x10/0x10 [ 1072.457306][T18556] panic+0x2db/0x790 [ 1072.461246][T18556] ? __pfx_panic+0x10/0x10 [ 1072.465720][T18556] __warn+0x31b/0x4b0 [ 1072.469742][T18556] ? usb_submit_urb+0x115d/0x1890 [ 1072.474805][T18556] ? usb_submit_urb+0x115d/0x1890 [ 1072.479874][T18556] report_bug+0x2be/0x4f0 [ 1072.484268][T18556] ? usb_submit_urb+0x115d/0x1890 [ 1072.489330][T18556] ? usb_submit_urb+0x115d/0x1890 [ 1072.494396][T18556] ? usb_submit_urb+0x115f/0x1890 [ 1072.499458][T18556] handle_bug+0x84/0x160 [ 1072.503826][T18556] exc_invalid_op+0x1a/0x50 [ 1072.508365][T18556] asm_exc_invalid_op+0x1a/0x20 [ 1072.513253][T18556] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 1072.518931][T18556] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 80 42 34 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 34 d3 62 fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 1072.538554][T18556] RSP: 0018:ffffc90004d27670 EFLAGS: 00010246 [ 1072.544643][T18556] RAX: 23e010b3b46bed00 RBX: ffff8880552d9300 RCX: 0000000000080000 [ 1072.552643][T18556] RDX: ffffc9001ab89000 RSI: 000000000000405a RDI: 000000000000405b [ 1072.560627][T18556] RBP: 1ffff1100aa55a94 R08: 0000000000000003 R09: 0000000000000004 [ 1072.568614][T18556] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffff8880552ad4a0 [ 1072.576593][T18556] R13: dffffc0000000000 R14: 0000000080000980 R15: ffff88806daaddc0 [ 1072.584618][T18556] usb_start_wait_urb+0x114/0x4c0 [ 1072.589671][T18556] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1072.595254][T18556] usb_control_msg+0x232/0x3e0 [ 1072.600038][T18556] dtv5100_i2c_msg+0x250/0x330 [ 1072.604930][T18556] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 1072.609829][T18556] __i2c_transfer+0x871/0x2170 [ 1072.614620][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.619847][T18556] ? __pfx___i2c_transfer+0x10/0x10 [ 1072.625067][T18556] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 1072.630465][T18556] ? i2c_transfer+0x120/0x3a0 [ 1072.635177][T18556] i2c_transfer+0x25b/0x3a0 [ 1072.639708][T18556] ? __pfx_i2c_transfer+0x10/0x10 [ 1072.644772][T18556] ? _copy_from_user+0x94/0xb0 [ 1072.649558][T18556] i2cdev_ioctl_rdwr+0x460/0x740 [ 1072.654520][T18556] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 1072.659663][T18556] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1072.665325][T18556] ? __fget_files+0x3a0/0x420 [ 1072.670035][T18556] ? __fget_files+0x2a/0x420 [ 1072.674657][T18556] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1072.680237][T18556] __ia32_compat_sys_ioctl+0x543/0x840 [ 1072.685723][T18556] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1072.691740][T18556] ? __se_sys_futex_time32+0x360/0x3e0 [ 1072.697265][T18556] ? rcu_is_watching+0x15/0xb0 [ 1072.702044][T18556] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1072.708648][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.713893][T18556] __do_fast_syscall_32+0xb6/0x2b0 [ 1072.719033][T18556] ? lockdep_hardirqs_on+0x9c/0x150 [ 1072.724272][T18556] do_fast_syscall_32+0x34/0x80 [ 1072.729135][T18556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.735493][T18556] RIP: 0023:0xf7f84539 [ 1072.739586][T18556] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1072.759197][T18556] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1072.767626][T18556] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 1072.775612][T18556] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.783606][T18556] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.791590][T18556] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1072.799575][T18556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.807573][T18556] [ 1072.811035][T18556] Kernel Offset: disabled [ 1072.815393][T18556] Rebooting in 86400 seconds..