last executing test programs: 18.405785964s ago: executing program 1 (id=543): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000440)={0x20, 0xd, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000440)={&(0x7f00000001c0)}) r2 = socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x800) 16.510408596s ago: executing program 1 (id=548): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'veth1_vlan\x00', {0x1000}, 0x2}) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000e22dcbc80b47befa0000000900010073797a30000000002c000000030a01020000000000000000010000030900030073797a30000000000900010073797a3000000000540000001a0a010400"], 0xc8}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0xfecc) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0xc, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) socket$inet_icmp_raw(0x2, 0x3, 0x1) 14.45665334s ago: executing program 2 (id=550): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) dup(r1) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[], 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='\xd1S{O', 0x0, 0x0) fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000d00)={[0x0, 0x100000000, 0x200000, 0x0, 0x100000, 0x9, 0x2004c8, 0x208000000, 0x7, 0x3, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x4], 0x0, 0x184104}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r7, &(0x7f00000001c0)='\\', 0x1) r8 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x722d, 0x1000}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x79a5, 0x2, 0x46, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f0000000280)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 13.909325992s ago: executing program 1 (id=555): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYBLOB="05", @ANYRES32], 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1002], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) tkill(r10, 0xa) ptrace$peeksig(0x4209, r10, &(0x7f00000000c0)={0x1, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) fcntl$setownex(r2, 0xf, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 13.326468302s ago: executing program 4 (id=558): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000e3c32000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) write(r1, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x111, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000000)='\x00', 0x0, r4) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) close_range(r3, 0xffffffffffffffff, 0x0) 12.939928565s ago: executing program 4 (id=559): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000080)=0xfca3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sync() sync() sync() connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 12.806256192s ago: executing program 2 (id=560): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) 11.511515986s ago: executing program 4 (id=563): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101288, 0x0) timer_getoverrun(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x121840, 0x0) syz_io_uring_setup(0x4e5b, &(0x7f0000000600)={0x0, 0x0, 0x10100, 0x3, 0x3}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x4) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000080)='lp\x00', 0x3) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) r11 = socket$netlink(0x10, 0x3, 0x4) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r12, 0x4605, &(0x7f00000001c0)={0x4, 0x92, 0x0, 0x0, 0x0, 0x0}) writev(r11, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0xfe0e}], 0x1) r13 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1844, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x100, 0x9c, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "59f1962c"}]}}, 0x0}, 0x0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 11.340210349s ago: executing program 0 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x400000, 0x14b}, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000fff"]) 10.761495647s ago: executing program 0 (id=567): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000002c0)=ANY=[], 0x200002e6) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x5996e415, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) fcntl$setpipe(r1, 0x407, 0x100000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0xfffffffffffffffa, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x16) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20044000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000140)={0x1, 0x1}) r6 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 9.55606859s ago: executing program 3 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0x60}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x5, 0x200, 0x4a, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7c3, 0x1, 0xffffffff}}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000d00)={0x6, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x8, 0x3, {{0x2e, 0x4, 0x2, 0x31, 0xb8, 0x67, 0x0, 0xa6, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xf, 0xbb, [@rand_addr=0x64010101, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x67, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x23}}]}, @cipso={0x86, 0x4e, 0x0, [{0x1, 0x3, "a2"}, {0x5, 0x10, "35c0269705160439ea0fbe17d907"}, {0x7, 0xe, "fd71562168c91967b85ceeb5"}, {0x5, 0x8, "4d4a7fe6e73f"}, {0x6, 0xb, "f712b04aeb321095ff"}, {0x1, 0x8, "d4f236407261"}, {0x6, 0x8, "e412d71a88ed"}, {0x0, 0x4, "1f65"}]}, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x2, [{@multicast1, 0x9}, {@loopback}]}, @timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x7ff}, {@private=0xa010101, 0x3b66}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@private=0xa010100, 0x28f}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={@private2, 0x0}, &(0x7f0000000480)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x700, 0x8020, 0x100, 0x2, {{0x2a, 0x4, 0x3, 0x22, 0xa8, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x2c, 0x3, 0x3, [{@private=0xa010101, 0x2}, {@local, 0x7ff}, {@loopback, 0x2}, {@multicast2, 0xe6f}, {@local, 0x81}, {@empty, 0x8001}, {@loopback, 0x9}, {@loopback, 0x7}, {@loopback, 0xc}, {@multicast2, 0xfffffffd}]}, @timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x3, [{@loopback, 0x9a}, {@broadcast, 0x7fffffff}]}, @lsrr={0x83, 0x23, 0x44, [@loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @multicast1]}, @end, @generic={0x94, 0x4, "8e60"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x7, 0x1, 0xaf, 0x8, {{0xa, 0x4, 0x2, 0x38, 0x28, 0x64, 0x0, 0x97, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@multicast1, 0x3}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @local}, &(0x7f0000000700)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000740)={0x538, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x70c}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x8, 0x26, 0x6}, {0x4, 0xe, 0x6c, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x848}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x1c4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xe, 0x3, 0xf9, 0xfffffff7}, {0x1, 0x6, 0x5, 0x7}, {0x40, 0x1, 0xfc, 0xb}, {0x400, 0x7, 0x30, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x34}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}]}}]}, 0x538}, 0x1, 0x0, 0x0, 0x80}, 0x4055) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 8.987519131s ago: executing program 2 (id=569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="e8300e444d50a96912ee3881913fed00000000000000e48b6772b4b5f0566e7660a2719fea56f1d09c", 0x29}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) 8.663478878s ago: executing program 1 (id=570): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x200, &(0x7f00000000c0)="822959023bff31a1aa1e7e6ac9ab8dc83776de65b33151b1fa9e13d0467f3edcf978c1e33be3ea8ba3e34c711d38118a90a53a7c576258b04915b44fce3d646f3fd91f22c4f1d58c973e31ba0cf43bc8266f9207b56c27065d6b4b6f08a39b142097aeca56b1bfe6b300ae8b2058419154fda6d9ac6ee692ff9c8a41dc5af48ba6767f12c321234ddfa1482cd29e6d9c563bafd219691ee2f6cd827a1ddd62bd052484b442388fcd05b5c2df638aeabc5a64e3cbe1c2addcbd3360eae81b3924aa5f0f164cb61fedb3d3b9fa15f0609425b2606f2237ccb37e073cebd6dbf2115e63f2ac60167425d4594016ee798d97", 0xf0, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000400)="f974198cbd29cbb59e9654fe8b686bf1f63bea49157c482862372cb56d80cd68315b5ebd339161154cfe10d7f4521a1575db98ebd2915399e7eb68d30bdb319d83c0b901800000000000008ad8ba34e1ba7e56d41e30c45601e4063e2573af77306baf2e397f8a23b2e14558d9e96ccb46b01e25ec558a6e840ab4c83e248545e0dd36bc2a329e847c499bf4f071") r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x26, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x1, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 8.508254918s ago: executing program 2 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.412921015s ago: executing program 4 (id=572): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xa, @win={{0x5, 0x6, 0x46, 0x1}, 0x5, 0x5, 0x0, 0xfffffeff, 0x0, 0x5f}}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000000c0)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) 6.391513605s ago: executing program 0 (id=573): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000080)=0xfca3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sync() sync() sync() connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 6.168206735s ago: executing program 3 (id=574): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000300)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x5, 0x9, "789607671442eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "5c80a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x7, 0x6, "7f36c525"}]}]}}, "c1"}}}}}, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x2040600) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200700, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x8, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0xb6ff, 0x2}) 5.770336906s ago: executing program 3 (id=575): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c00000010a1010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r0], 0x7c}}, 0x80) 5.667889018s ago: executing program 1 (id=576): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x3, 0x4, 0x6, 0x200}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000740)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffe5, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES8=r5, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB="00000800bb"], 0x50}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000100)=0x3, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x0, 0xd, 0xb7, {0xb7, 0x22, "499c2d45bebc1361375ad774127c8d5d78501cda4c0d31689d7d1e3cb05abfa183aeb1a90aa6125127baaad931191892c27aff784987ac49080653672d4390cf2c256070d94d40bdcdc4ce4339351ccd08f12e5d2fdd11d39146a32d693a026cad7570205292c357906936c6b99506cbe598a83e3cd8e6e9de0f152276208406ad6fed2f298c48cc60871101257cc05f2eef4708139a785cbe65b8621ff3712a1e0bcac3f3e4d89fb6c7f8f70a7d037a1120c892d4"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x16, 0x56, "49aa9138ff4ba240b3e04971b087e445a632b2a33d67d4893007e85f1870aefded6006146aa3174a63d3cdb57bc62557fba4b348dbcda8798183c57568da0adca0f1430b02688599dd49a1abd0bb79fc41dc94b13353"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x81, 0x1, "b2"}, &(0x7f0000000480)=ANY=[@ANYBLOB="24820100000039"], &(0x7f00000004c0)={0x20, 0x83, 0x2, "b789"}, &(0x7f0000000500)={0x20, 0x84, 0x1, "c3"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "a366d1"}}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x1000000) io_setup(0x7fff, &(0x7f0000000040)) 5.451972729s ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000799b000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff000000800000ddb50d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="44010000", @ANYRES16=r2, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x100) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000480)={0x2, 0x1, 0x2, "ecd400", 0x31324d59}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)={0x24, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x6e}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 5.451277225s ago: executing program 0 (id=578): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000480)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x3, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x10, 0xfc}, {0x1000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x3}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x4000, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x4000, 0xdddd1000, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0x1}, {0x80a0000, 0x4}, {0xeeef0000}, 0xfdfcffc9, 0x0, 0x10000, 0x28, 0xb, 0xf801, 0xdddd0000, [0x0, 0x0, 0x1]}) (async) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000080)={0x5, 0x3, 0x2, 0x0, 0x2}) 5.194189942s ago: executing program 3 (id=579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x7, 0xfa00, @id_tos={&(0x7f0000000300), r6, 0x0, 0x0, 0x1}}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0578z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 5.079368683s ago: executing program 0 (id=580): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYBLOB="05", @ANYRES32], 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1002], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) tkill(r9, 0xa) ptrace$peeksig(0x4209, r9, &(0x7f00000000c0)={0x1, 0x0, 0x1}, &(0x7f00000002c0)=[{}]) fcntl$setownex(r2, 0xf, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 5.021807403s ago: executing program 2 (id=581): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x1800, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 3.024752089s ago: executing program 4 (id=582): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x1, 0x7, 0x2, {0x2, @pix_mp={0x53b9, 0x7fffffff, 0x34325241, 0x0, 0x3, [{0x4, 0x40}, {0x68f, 0x2000003}, {0x5, 0x6}, {0x7d, 0xea}, {0x9, 0x8}, {0x1, 0x4}, {0x2, 0x1bc00000}, {0x10001, 0x3}], 0x10, 0x1, 0x2, 0x3, 0x4}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000440)=@userptr={0x20, 0x2, 0x4, 0x100, 0xd3, {}, {0x0, 0x1, 0x4, 0x0, 0x0, 0x0, "b3365716"}, 0x0, 0x2, {0x0}, 0x5000000}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) close(r0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.484069356s ago: executing program 4 (id=583): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000440)=ANY=[@ANYBLOB="e0a3949a1f94d0fcaaaaaaaaaa28aaaaaaaaaaaa8100330008050005fba2f1ff80114502115efa2edfa5fe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x1ab841) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x1, 0x6, 0xe2c, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x0, 0x9, 0x9, 0x2, 0x5, 0x0, 0xfc}) 873.903809ms ago: executing program 3 (id=584): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x1000c8d5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f000000e640)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="14caf507b276a529bc0427d76a9e8100e8ac9a323138e0c46527f65b67d36e7c731ba634380680d9c4", 0x29}, {&(0x7f0000000140)="bf078aab7daf9ab6e6dd329331f6a0e793c2883d", 0x14}, {&(0x7f0000000380)="ae2969fd92632c6fd9884b42f55879b4562b16e9913ee58352b7dd4b778b90ac7078a53a0f4394b28ee96cfca17150ca23f1f633a44c13bd92799ba7540208e43f6922bad7655f1827becaa1d84738e47cf7dbb4ad9b3db7db85b7296955084df155da67f98fdc73746ffa03b6dcf740ad3395cd142d9f77f8b0b88d89a830571e7fe50b7c6042fde9ee83436d", 0x8d}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000540)="dbdcd7b7fc539214f33096a411f8ff2bca21199f4db1e7ed1ec2f37000b0ae20bc2ac7e141dbded89e9a0bb3e08db0f07a146ce591176582feb6cf835045b61ef9ced028c62eaaed84dac1d600736198c0062f70a8e1efba976727c3af22d5a7a2220303cc21a6cbc356b6fcff089a4db86d32b11a53f0529cd02d420093ca3a29fe8bf39188a78dd907826f35cf012bd8322981c1c19bb03cd6c9dc4f07e4b55aacec1d1fa8193dc00d981b75fef2bcf58ae5d1c08fabc234c736d89dd6ddbe38b446abd627bc10c20ce75fc50ae9d741d646ddb6c013d5781c9364eb8dc631d9a4b47df54e629dd7cd6495daa1184a05dfa4d8", 0xf4}, {&(0x7f0000000640)="b9a331ae91e2c5d1608dffafcec864347b9cfc2ce7c8d5384eef06e14a021146ce425bf4b1dada85d8c11fe6c968e0f46b2328c8202ce93ef2d7025e90f2f2fde7a4f624b360b2e8d2653800", 0x4c}, {&(0x7f00000002c0)="a1c061f1694fc00d30658a65240cbe8df538e8bf47d3c16ab89b3903625b", 0x1e}, {&(0x7f00000006c0)="8c2cd5f4d116ba8e880b84631bc5f63670c1ca082ca228c59f7590d8d0331b3c9decce016623c4f8f13084665f620dfbc2340e3f89f00f94e879edf1300c6d3f4b4bf2bda60fe239db554140afa65cb02aca6f37011808621e2bce123114b5e725778bf34dc22f15c2428a6c23f74eb24dbd33858c99d44e7d8acfbfb2d95732649f9c0e8a978fd9daee6c1d50254a506b811737864fb20677622c9d6e794ce9859d2028894690600f17688567f831ba3dc88d52064fc16514c16376db4eb9ed3d0fef8f8a7eef08254fb9d09f57f18925c342a7ad2ba84980f0c0f1e1d46004f9aef8bafe5ddd9236f9cd3c9dea08d9bdf71b0eef5a35020c42", 0xfa}], 0x4, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x40000}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="3db8721f4243fb21bbceced5bd6529985ed2dcc03fa8958a56843c38bd16084c68f3900f8479ea79239455dc23f22259d33c5713f3fc99b6bc81521e0b0b1d3e677a10b2df95e2a2fbee56600700dec33c2ef75066a92048e5b92e47b57dd39ec981dea22d8e4d3304d2b3f7eaa02b1f17742859fea27ca4715a6c81e07bb2ebbcae0c7b13f16f0b418cb3fa48f9118dcbd9b84d3212", 0x96}, {&(0x7f0000000d80)="00bb136e12e42921208d97b2e5325bc146c7131ae03326c32182520d1646736879650ca73410d5daec6c8af0d748afc1", 0x30}, {&(0x7f0000000dc0)="de218f35a0e1486740f18fe6d6132613d0fbe4e23901a09721865905dcbaf86e96bb5005d5ee3bb1a3f5f29af9c3c8c7654e0e374ebaab7e9e82667490520fdbf7e19644b196512d1c1d9040d999331e26d09da1990a2dd9649ef42bdbfbb3b44252c68752525c55e6bd0a54782b9fd85a32ffe81f06818be93e357212d214f70f1708b5aa74d83daa26c00fe5f7869d8bc5531f45bc369b6a34b2ceb97eec698a648218c7d7136e", 0xa8}, {&(0x7f0000000e80)="7e512464b33d79f19522ca4876f9469e05c4b613b0c23d93", 0x18}], 0x4, &(0x7f0000001240)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2]}}], 0x130, 0x4}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001400)="fc461a033d68adcc55f276cb67b37f5bbaa548f2cb5206c87aa7060f2e9b0ee437c49526709e2cf64fc6cf3c082ace14b629fed2d1420d36f33d671448f8f53ec1b494ff5ad8c47d74aee8a6b4428aaac92a2216b80bde6b24a8f390e1ddb672a82838616f7ad58d13f4f2837538acb3fad6da46d60f3e573fc09abb8e288e32edf56093f2d3af12f3f941be7d2a6bd41437145325f1bf0687f0a5ee0bec127b63a71f0478c10f6915424725f0ec7031c3d135c3ea66b579d5ee8caba54cabe737bd1eceed2360f401ff2828e1ad0e8453340297191505fa56f075be13581a297beb3fd61c2e56c57a1a1d9607d1bdbd8272458a3165cac655", 0xf9}, {&(0x7f0000001500)="bc8ba4c7c569a38d505c504cf8ba05c220d4376bb5fc1bc45d0fed485c3b626ea3a6e52744769193fb5475123f527f9429d1723386e50a024304b9ae9c9742acf0d6", 0x42}, {&(0x7f0000001580)="14dbf0f44db85236b246bb0affa275d2729fa0574070ac9fc6eafb4db5cb300a9ceef491974750fe210479a7b6fd72522424fe50bba3db4e6a0596b5fd29839287ebe6b8a2cec9f09a8aa6474285c0ae267825e9396e467b47892094e97aa4600825d7bb98cfc9f4531c6ff4bb58a769e67d51682821eea6be8f95fca31c6f2e8e2ced21c99392c032100d852ea1e704520c8376e4f5cf2a9c07edfb54ed6f4a674114f0af743c2fabced7b85324a8c5282eb5f9b7a88d4b7d5121014e56ff14a1cbb0766a30c7d3e1", 0xc9}, {&(0x7f000000c400)="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", 0x1000}, {&(0x7f0000001680)="56388f794ab0fd712bf1f289ed6722181204d21111e78b10040ca241b31990da76f12a246baa045ce136de669b099a9cdcfca2eac06755b94461843c34e98e4f8e0c0634cb776fabd5eff29c41e29da5f147460f70db29ca1553d32c004089652ead7431d97d7352689626d1a9eeb65757d1e4ae223b159e317180b641ad3158a42767dca5b06573c8f660e793ec794dca4d33d385999d7a2f68de58cdab3bb49d9c59c0697fd224206caeea6ddbeecd7ae5a50f5035584639bcefeaf7fc7db65ee872d414523f", 0xc7}, {&(0x7f0000001780)="2da2a3864573101e6be79d0b0685160866ef4aa45005b7592f016165f0358a2b2b645f31335a6f192050c7b4706c5e3da3816fdb9b6e78c9be8e9d5a94e223d720f74cba30229fb4676f5a05f3be38dc6bb421eb57bd9194487c27cefb8057bb218e39b02d18b6822d5a9e8d785d0fb5d4bfd1a99570f9d8a11849098361858b7a8b4f453f72caa193bf028efeda7edd5cd4714810a1a8a4318084d060fc7ad59ed640b244", 0xa5}, {&(0x7f0000001840)="520b2659cbaa643b2a33f816cdb5e78989e3f1dafce33a05559d17121f1a33999bd520bd4d50325f4d4df8087821edec706acf81c0dfd36d7dcd6408f0b8762ad798c86614d5cd6f7ebea170e2480fff07ad903182dd9824f93b668bf28b3626e122030ef16889e85404f732fda82e5fa7a438cb4ac2f8cfcfb95cd05352a117ad8aae096175c7f0208c022a01a17b8d5c59d97a27462b871817ee41fc8ee6453e6b247b60ffc04dc2094c9ea2675f1abf0635de9e5e5970e6cbf45cd584ab", 0xbf}, {&(0x7f0000001900)="d5b066bb2face08f7f25b00eaf25e67db9731f23437d346e43b7d4fc4e5f5df53fd4a9d2dd9dcc22d38c", 0x2a}, {&(0x7f0000001940)="5a1bdd6fff002acb71674a3b946123a57bb5426810e065091c1652efd18dbb42a7e3beb62ab5ace042a2c63d92b3a9b28a74494a46934044bf428a87a562ad273ace674d9069224025fc8e2f95ae696933fce045f84cd533a79a7e0eed6d1e66eb5bb1153bb87d6bf44127ac57c7391af4ae29e8a6d0b34f18db3be898e396b29d0287d36982ba5fe9d0e8f07080c7f661322c3ed546792ad7289c659884f0eefbd71609802e82e176db8d", 0xab}, {&(0x7f0000001a00)="7b86209dad8e31c061021a7110146cf75b77581952bd636081a4eef0668f9111b286cb015d123c63b466bf5f307045618ddedba78290c6e6f1e75b113fc1b37f2027d075ad3129df7d61e7ffa44adf264cc50deefa50d4b6cdaafd9518dd04afad4a12c975e362be3806372588359351f2b7edf8dd11639038212aab50021ce9443d7001814b2f88c462b502736fd202ad8253a3be52cda819cbbf4a91d0c6172c4fbbf9d0f54b6ae8009cf96ed64036560e9ab481b1a6f4c7aad27dda31533feaddb8f7820be1e61db99628393e790dafc3a3d79f04e5890ab8a4b6f24e07b317304e73234520bab51aac37c8f069926db466cb02aefeb5", 0xf8}], 0xa, &(0x7f0000001c40)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0, 0x8800}}, {{&(0x7f000000d400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000d480), 0x0, &(0x7f000000d540)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r5, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f000000d600)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000d800)=[{&(0x7f000000d680)="be255cc55803058200c941e3da823288678acb2e2c74587d367795dce24b9df50232ce8a6f8f83fd57d0017c19ab0c87ede353c2e9dc68c22e424ac4bd7641a5abbc115894b7657dc4dcbf9c442938d02ed39700107079c461ea187c42718ef964a7d822", 0x64}, {&(0x7f000000d700)}, {&(0x7f000000d740)="3a1ca12c4cc9250800202305c08c8bc933822f228d1fa5caa5217011d454ca5e1a39957c64dbe2ed79bd97e70927debe1b5ec4b248e748aebb624a252ec4ac26875517eb0edff4b2a774153527e6f6cb808ded54ea6e5c43301367447f9122f8add4b649260fbfa758fdb6092efb567654ccabdb434a3b9e11eac7625ee58e3b9a4698ba1b57511d7f8364091723115877724b361c728e3cdf97e8ae09", 0x9d}], 0x3, 0x0, 0x0, 0x40000}}, {{&(0x7f000000d840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000da40)=[{&(0x7f000000d8c0)="4e34d334d90ddb629d7baba523a8e0bbff1392b3c6717a52588f54a3655688875e5db2fdb45fcb982eae217c38154ce1773fbbfbef7ce2e7dcffcc9ab8a51620a1ebfa88ddf3efcde75ba81a1b3c456e246c680786c798863e2e1bb2db5c664680a661376417b01943319d2ecc2a6c7898137695c56ec6dc3d5ab746", 0x7c}, {&(0x7f000000d940)="3244b7111263467c9c43adb3d5bffec3b39c1bd3d9c79e846eaced3602b2809994d7ec6feae3f3c96a843299b3f8e75d800982c61dd151bbac6e896ad6de9a0fb818ebea677d4bfd15809dbbb9a2caa57b158e5d544b90023c454f96dbce186e95bd4076f261142cee93b855056cec4df45a5882dccaf14dd728d9332caca775ed092ccf457eabb5927e9c4cf1a2d05719dca0a8695ec75ae0ecea800cbee4a580e60e4cbb6e7af4767b9a730effc2c97c22bcd4d24551ded2f34a6e26e1f63ba8a7cf43c17ef04623cbb681fe231f2fe14ecd605205136a", 0xd8}], 0x2, &(0x7f000000da80)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x30, 0x84}}, {{&(0x7f000000dac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000dec0)=[{&(0x7f000000db40)="1224173bbe8b4e1a83cbd8889ab5faf230776fbdfcecb45526d29eb203a279949b719bafd5e50405ceb2c1878876afd2f38e5b091973455004a0ea7860de5fb38b18f8b78a915d3ba4bac2ca160ad2759dd857e0ac7b810d4074c8307d08c29d026dece9fbacdf225a3c6b4fceebc036fe40d522095e29778f3cdd6f6903a302064fed03f42684a49c64100225044a1764df7fd36ce8", 0x96}, {&(0x7f000000dc00)="808effa9130b6bdd606ba79896e5b99e4ae74b408eda906aae62795a51b0543b0cb69c7e1522013960e17608005570caeef0d96e268c47c35d7f30f02957fb3f7ec1509e17bb683729c52b88a9ff7ddff41f595ebd8d29ba58f5712784451c3c952d53b65c2ddd057fc69218efc1a03a7d1393c9083ea01ddabc9e79eca601f6df321e0940173256472789002e89e221", 0x90}, {&(0x7f000000dcc0)="4a17180e590a3778ec2f9d4a0a108af3cb3f88c1363a0a", 0x17}, {&(0x7f000000dd00)="271a1002649e157cb1387b299c676477c75fee255457a1037abc5990a1c164df14350528d2493900cfdf6e532898588417b601f44b2467b9d627b3493deaa2a71ae21a5ae25884f761f74d9651294843bd6072b4d2a6bf657a3c78790b6d67243ecd3c7dcd835a0296e735cead43d071c9116546bfd4546c5e1f0f1564f4f7f79da2f60c63d0791ebe8c6001bac163f281612faf9470bf7c7348b53d52f6ac8b9d65fb02483e735bec8eae8807971fd318265fd630c8002e004ea8aa9e183cde0644405cc50e", 0xc6}, {&(0x7f000000de00)="80e218ea4b3ce39607b058ec278c5c0529a6fa7256a1d1c6ce3abf1fec2774c4e12ce9a2226701d668b69938bde878e2f321e355bcf16eb48e613d25fa2620671398fb6b9f10d3e468e934a80074ae13c45c93655bf2b2924b2bc6aeef0c9cf5ab33c84e9ead19353b07a4dad5ebb2946a500902fe7e5c8ae568c27bd39a178ccab60e53565ee7f71f8204d34337e4aaec10454edcbaa57f621b357ee9b092db1714d059b8e9e9317e4105ad4a8b1c9f985422b8a9efaf94234dd195", 0xbc}], 0x5, &(0x7f000000df40)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{&(0x7f000000df80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000e380)=[{&(0x7f000000e000)="a0315b4e19a3c887262b6280f9cd064cfc10be04e3dcfb0af1152acb677fb65dd6f3967b76a29c4b17557c41378bf0248e91db5653fe6c925f8e838ed1731fe6fdc77109b24e309e1932df4798b3882b5de5b73024ce4cf35b514fcd37fb578c47bb25ec03c1ee748881ef2e1ca794f5f3b6471222d9c304c006a01d85020721e6a3e8bfe81d2616adacb25482056d87708c20ec2b4e34a8b691be98fd1e37a6134ee64a5afb0deb7dba102e0666951799f6fd48963c56a59dcfda146d038987c22d00c434156e5b2d764df3a6480ad198e5711eef460c5133a378e31d4098abb30c5cf4e866fc989c5c0111f716f2fd2f1b76ddb4", 0xf5}, {&(0x7f000000e100)="61fe1bf0088f294db5c77263e251e6f69b86f2e5cdf282108911f1d8c2625906da1cd7ee1d5fc808943b8319f1718a84118834fee38dde8c8d9ef4c57cc44a47ea30915b487ccb4de99d335f13d4e1857caaca6725d82478d32454ce0edcf52a1070d3b10e66ee484a4a0c2bf405fa36957db951a39fb2f1c404a49ecff7e3d2ca", 0x81}, {&(0x7f000000e1c0)="e2aa08d11beedc687a3672be6f5f167302eeec3cc9e61796d2ac7ab97c089f64e6cd3033355f99bce1d682fcf7553fd7ce3826db81e93a98dfc54c17ee7c396cb8eccf58936c9114d560f365f8f42ec20c8c868e5a0564e56f2126b4a909", 0x5e}, {&(0x7f000000e240)="08643f50819603f9065bdcabec8c61149b829e58fd98789381ba1e50454cb1a61a64c492bedb8b801159b2b8cf523c5f356ffdc9829a8f84a72c33fb4b6fda7deab8c1c24385fb6c9a8a8f1798fb4a494b45520a868d01e0ba5fa4b5b1b6398b9afd24aefef4cf84e7c2556be39a7f8d89cd", 0x72}, {&(0x7f000000e2c0)="c1f8e508b5a5146ff65bba86cec4aa2e736e72d6631b5573f0cc7e14b3ea58094fef08ef0fec4bc04920d059fc88", 0x2e}, {&(0x7f000000e300)="1a406b43fa274687aae9d3ce9762f6443066e6c9d14cf3eee8e721d4e9043bf0c9e5034b93eb5b5037186ff98d19ed8fbd8b2dc9dd4e462276d325c56d96a6d63d5ace3ad599deab55134ce2c20eda7fb4ed9864b36c9911b4c514ae6d3142c54c029538d3615c5db4f7df90d4cc706dc2522eae126e698589804c4295ed3e48", 0x80}], 0x6, &(0x7f000000e400)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f000000e480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000e600)=[{&(0x7f000000e500)="ecc0faec49cb65dd764224914023176a058e27ab4acd97bd25b3b211f5af35a996d383f19faef7315082b1e110a33944b5cd770146fa936a732bb82097139a8dd3598ea429144c5b6312f649e1b8efa988b16bd998bb6346fb1c481eb6bf61ae494ee336c7c6e13fb83314b76dbfc64b98edcb1351dc6f3d14c71ff7ce75d9bd6a88c86eff2755548a40556a9de2462c73ed13362563cc9b8f4f2f421fac88b829b6f4dc73f06f7d797e4b3288b8eb2e9c9eca78c555f77cd4fce29e5c94ae7352af90e0bdc6c68ed86dee7a94", 0xcd}], 0x1, 0x0, 0x0, 0x4801}}], 0xa, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r5, r7, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) cachestat(r4, &(0x7f0000000180)={0xe6af}, &(0x7f0000002280), 0x0) unshare(0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') getdents(r8, &(0x7f0000000180)=""/34, 0x22) getdents64(r8, 0x0, 0x43) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) 397.600526ms ago: executing program 2 (id=585): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x4001) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, 0x0, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xfe80, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) 284.823988ms ago: executing program 0 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) dup2(0xffffffffffffffff, r5) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 1 (id=587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200100001600010429bd7000ffdbdf25ac14141d0000000000000020000000006401010200000000020000000000000001040007000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000001010000000032000000ac1414aa0000000000000000000000008abc483c0000000001000000000000000000000000000000090000000000000003000000000000000000000000000000000000000000000002000000000000000000000000000000fcffffffffffffff050000000000000001000000000000000008000000000000960000002bbd70000100000002000200860000000000000008000020ffffffdf28001a00ac1e01010000000000000000000000000000000200000000000000000000000002000007"], 0x120}}, 0x0) (async) fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000180)={0x9, {"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", 0x1000}}, 0x1006) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000002c0)={@hyper}) (rerun: 32) r5 = syz_clone(0x24100000, &(0x7f0000000000)="a553433704985ad5b30ab40ad402f3e7a265ff7f3dd001c0b3cbbabc5fb9f8ebca387ff307e4b367f337f286dbc9620ce8", 0x31, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0xffff, 0x401, 0x0, 0xff, 0x8, r5}) kernel console output (not intermixed with test programs): _fault+0xb0/0x130 [ 437.455250][ T6930] __sys_sendmmsg+0x227/0x430 [ 437.455268][ T6930] ? __pfx___sys_sendmmsg+0x10/0x10 [ 437.455280][ T6930] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 437.455337][ T6930] ? ksys_write+0x22a/0x250 [ 437.455366][ T6930] ? __pfx_ksys_write+0x10/0x10 [ 437.455389][ T6930] ? rcu_is_watching+0x15/0xb0 [ 437.455411][ T6930] __x64_sys_sendmmsg+0xa0/0xc0 [ 437.455426][ T6930] do_syscall_64+0xfa/0x3b0 [ 437.455442][ T6930] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.455463][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.455483][ T6930] ? clear_bhb_loop+0x60/0xb0 [ 437.455506][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.455529][ T6930] RIP: 0033:0x7f31d958e9a9 [ 437.455545][ T6930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.455557][ T6930] RSP: 002b:00007f31da4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.455572][ T6930] RAX: ffffffffffffffda RBX: 00007f31d97b5fa0 RCX: 00007f31d958e9a9 [ 437.455583][ T6930] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 437.455592][ T6930] RBP: 00007f31da4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 437.455604][ T6930] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 437.455616][ T6930] R13: 0000000000000000 R14: 00007f31d97b5fa0 R15: 00007f31d98dfa28 [ 437.455647][ T6930] [ 437.759681][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.946003][ T6028] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 438.122840][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.133695][ T6028] usb 1-1: Product: syz [ 438.137927][ T6028] usb 1-1: Manufacturer: syz [ 438.181751][ T6028] usb 1-1: SerialNumber: syz [ 438.231340][ T6028] usb 1-1: config 0 descriptor?? [ 438.866714][ T6943] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 439.076749][ T6945] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 439.083377][ T6945] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 439.094794][ T6945] vhci_hcd vhci_hcd.0: Device attached [ 439.109820][ T6946] vhci_hcd: connection closed [ 439.110203][ T6217] vhci_hcd: stop threads [ 439.129627][ T6217] vhci_hcd: release socket [ 439.139265][ T6217] vhci_hcd: disconnect device [ 439.182813][ T9] usb 2-1: USB disconnect, device number 6 [ 439.193910][ T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 440.157390][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.167495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.626337][ T6014] usb 1-1: USB disconnect, device number 12 [ 440.828621][ T6970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.848014][ T6970] bridge0: port 3(bond1) entered blocking state [ 440.940792][ T6970] bridge0: port 3(bond1) entered disabled state [ 440.947665][ T6970] bond1: entered allmulticast mode [ 440.960644][ T6970] bond1: entered promiscuous mode [ 440.972502][ T6970] bridge0: port 3(bond1) entered blocking state [ 440.978966][ T6970] bridge0: port 3(bond1) entered forwarding state [ 441.121166][ T5938] bridge0: port 3(bond1) entered disabled state [ 441.992003][ T6986] hsr0: entered promiscuous mode [ 442.011408][ T6986] macvlan0: entered allmulticast mode [ 442.030353][ T6986] hsr0: entered allmulticast mode [ 442.044799][ T6986] hsr_slave_0: entered allmulticast mode [ 442.058670][ T6986] hsr_slave_1: entered allmulticast mode [ 442.137400][ T6986] hsr0: left allmulticast mode [ 442.156769][ T6986] hsr_slave_0: left allmulticast mode [ 442.241428][ T6986] hsr_slave_1: left allmulticast mode [ 443.848498][ T7006] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 443.904410][ T5961] IPVS: starting estimator thread 0... [ 444.002670][ T7007] IPVS: using max 37 ests per chain, 88800 per kthread [ 444.440477][ T6027] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 444.595012][ T6027] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.609038][ T6027] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 444.609104][ T6027] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 444.609127][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.010172][ T6027] usb 2-1: config 0 descriptor?? [ 445.040990][ T6027] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 445.085364][ T6027] dvb-usb: bulk message failed: -22 (3/0) [ 445.122579][ T6027] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 445.177927][ T6027] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 445.210826][ T6027] usb 2-1: media controller created [ 445.351341][ T6027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.405725][ T7024] ptrace attach of "./syz-executor exec"[5904] was attempted by "./syz-executor exec"[7024] [ 445.427865][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.435588][ T7021] bridge0: port 4(bond2) entered blocking state [ 445.442828][ T7021] bridge0: port 4(bond2) entered disabled state [ 445.449292][ T7021] bond2: entered allmulticast mode [ 445.456537][ T7021] bond2: entered promiscuous mode [ 445.462954][ T7021] bridge0: port 4(bond2) entered blocking state [ 445.469419][ T7021] bridge0: port 4(bond2) entered forwarding state [ 445.870983][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.886130][ T6027] dvb-usb: bulk message failed: -22 (6/0) [ 445.892020][ T6027] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 445.893127][ T6228] bridge0: port 4(bond2) entered disabled state [ 445.907679][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.013668][ T6027] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 446.093445][ T6027] dvb-usb: schedule remote query interval to 150 msecs. [ 446.100477][ T6027] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 446.256927][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 446.283109][ T6027] dvb-usb: error while querying for an remote control event. [ 446.472682][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 446.478614][ T6028] dvb-usb: error while querying for an remote control event. [ 446.642710][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 446.651280][ T6027] dvb-usb: error while querying for an remote control event. [ 446.812881][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 446.844313][ T6028] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 446.857079][ T9] dvb-usb: error while querying for an remote control event. [ 446.882647][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 447.024689][ T6028] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 447.319261][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.329570][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 447.366531][ T6027] dvb-usb: error while querying for an remote control event. [ 447.385980][ T6028] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 447.395479][ T6028] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 447.407851][ T6028] usb 1-1: Manufacturer: syz [ 447.440834][ T6028] usb 1-1: config 0 descriptor?? [ 447.543622][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 447.549840][ T6027] dvb-usb: error while querying for an remote control event. [ 447.605657][ T6028] rc_core: IR keymap rc-hauppauge not found [ 447.613876][ T6028] Registered IR keymap rc-empty [ 447.634394][ T6028] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 447.670883][ T6028] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 447.715237][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 447.723676][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 447.730959][ T6027] dvb-usb: error while querying for an remote control event. [ 447.902608][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 447.908483][ T6027] dvb-usb: error while querying for an remote control event. [ 448.162881][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 448.168814][ T6027] dvb-usb: error while querying for an remote control event. [ 448.350246][ T43] usb 2-1: USB disconnect, device number 7 [ 448.437738][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 449.662069][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.239'. [ 449.755890][ T9] usb 1-1: USB disconnect, device number 13 [ 451.232899][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 451.446656][ T43] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 451.460849][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 451.489737][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.616918][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 451.653691][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.692322][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.711775][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.739538][ T43] usb 1-1: config 0 descriptor?? [ 451.802990][ T7074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.270612][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 452.288109][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 452.319983][ T43] usb 1-1: USB disconnect, device number 14 [ 453.657850][ T7102] sctp: [Deprecated]: syz.3.255 (pid 7102) Use of int in max_burst socket option. [ 453.657850][ T7102] Use struct sctp_assoc_value instead [ 455.233171][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 455.251788][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 455.271569][ T7124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 455.278182][ T7124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.286303][ T7124] vhci_hcd vhci_hcd.0: Device attached [ 455.309645][ T7127] netlink: 'syz.3.259': attribute type 20 has an invalid length. [ 455.527946][ T5954] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 455.558909][ T5975] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 455.562691][ T43] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 455.589904][ T976] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 455.681796][ T5954] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 455.730797][ T5975] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 456.023077][ T7125] vhci_hcd: connection reset by peer [ 456.031502][ T6212] vhci_hcd: stop threads [ 456.032555][ T976] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 456.043761][ T6212] vhci_hcd: release socket [ 456.081167][ T5954] usb 5-1: USB disconnect, device number 9 [ 456.106734][ T6212] vhci_hcd: disconnect device [ 456.150258][ T5975] usb 4-1: USB disconnect, device number 9 [ 456.162777][ T5961] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 456.212771][ T7135] netlink: 64 bytes leftover after parsing attributes in process `syz.1.262'. [ 456.222255][ T976] usb 3-1: USB disconnect, device number 12 [ 456.412011][ T5961] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.422227][ T5961] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.509328][ T5961] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.539470][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.951623][ T5961] usb 1-1: GET_CAPABILITIES returned 0 [ 456.964418][ T5961] usbtmc 1-1:16.0: can't read capabilities [ 457.053299][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.074757][ T7138] bridge0: port 4(bond1) entered blocking state [ 457.123520][ T7138] bridge0: port 4(bond1) entered disabled state [ 457.176343][ T6028] usb 1-1: USB disconnect, device number 15 [ 457.263199][ T7138] bond1: entered allmulticast mode [ 457.278814][ T7138] bond1: entered promiscuous mode [ 457.285135][ T7138] bridge0: port 4(bond1) entered blocking state [ 457.291549][ T7138] bridge0: port 4(bond1) entered forwarding state [ 457.499547][ T6228] bridge0: port 4(bond1) entered disabled state [ 458.095518][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.265'. [ 458.773671][ T7161] futex_wake_op: syz.1.268 tries to shift op by 36; fix this program [ 460.275121][ T7185] ptrace attach of "./syz-executor exec"[5904] was attempted by "./syz-executor exec"[7185] [ 460.292568][ T976] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 460.712580][ T43] vhci_hcd: vhci_device speed not set [ 460.782689][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.918287][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.944387][ T976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 460.957418][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.966903][ T976] usb 1-1: SerialNumber: syz [ 461.210444][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.253769][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.681265][ T7190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.704553][ T7190] bridge0: port 5(bond2) entered blocking state [ 461.764209][ T7190] bridge0: port 5(bond2) entered disabled state [ 461.798894][ T7190] bond2: entered allmulticast mode [ 461.831115][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 461.831410][ T7190] bond2: entered promiscuous mode [ 461.849892][ T7190] bridge0: port 5(bond2) entered blocking state [ 461.856563][ T7190] bridge0: port 5(bond2) entered forwarding state [ 461.880694][ T7195] erspan0: entered promiscuous mode [ 461.901228][ T6214] bridge0: port 5(bond2) entered disabled state [ 462.098252][ T7197] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 462.862609][ T6028] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 462.890992][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.281'. [ 463.050607][ T6028] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 463.073077][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.081215][ T6028] usb 5-1: Product: syz [ 463.090290][ T6028] usb 5-1: Manufacturer: syz [ 463.099271][ T6028] usb 5-1: SerialNumber: syz [ 463.139177][ T6028] usb 5-1: config 0 descriptor?? [ 463.176665][ T7210] netlink: 64 bytes leftover after parsing attributes in process `syz.3.278'. [ 463.243179][ T5975] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 463.415985][ T6028] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 463.552664][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 463.571053][ T5975] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 463.605804][ T5975] usb 2-1: config 0 has no interface number 0 [ 463.617474][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.632152][ T5975] usb 2-1: config 0 interface 184 has no altsetting 0 [ 463.646855][ T976] usb 1-1: 0:2 : does not exist [ 463.652939][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.665191][ T976] usb 1-1: unit 5 not found! [ 463.675653][ T5975] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 463.691725][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.709714][ T6028] gspca_sunplus: reg_r err -71 [ 463.714608][ T5975] usb 2-1: Product: syz [ 463.718938][ T6028] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 463.727008][ T5975] usb 2-1: Manufacturer: syz [ 463.733181][ T5975] usb 2-1: SerialNumber: syz [ 463.804131][ T6028] usb 5-1: USB disconnect, device number 10 [ 463.843383][ T5975] usb 2-1: config 0 descriptor?? [ 463.895615][ T5975] smsc75xx v1.0.0 [ 463.901642][ T976] usb 1-1: USB disconnect, device number 16 [ 464.560848][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 464.576273][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 464.576407][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 464.809440][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.818998][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.011800][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 465.051546][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 465.062940][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 465.072769][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 465.083572][ T5975] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 465.107171][ T5975] usb 2-1: USB disconnect, device number 8 [ 465.123033][ T6014] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 465.648164][ T976] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 465.656517][ T6014] usb 5-1: config 0 has no interfaces? [ 465.662232][ T6014] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 465.693218][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.840889][ T976] usb 1-1: Using ep0 maxpacket: 16 [ 465.842083][ T6014] usb 5-1: config 0 descriptor?? [ 465.864732][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.918024][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.959465][ T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 465.989607][ T976] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 466.035864][ T976] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.083415][ T976] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 466.092795][ T976] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 466.100832][ T976] usb 1-1: Manufacturer: syz [ 466.181146][ T976] usb 1-1: config 0 descriptor?? [ 466.387868][ T6028] usb 5-1: USB disconnect, device number 11 [ 466.643873][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.719283][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.863212][ T976] rc_core: IR keymap rc-hauppauge not found [ 466.875232][ T976] Registered IR keymap rc-empty [ 466.931224][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 466.943319][ T5975] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 466.944035][ T30] audit: type=1326 audit(1753628672.671:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377758e9a9 code=0x7ffc0000 [ 466.981710][ T7255] tipc: Started in network mode [ 467.002607][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.012511][ T7255] tipc: Node identity ac14140f, cluster identity 4711 [ 467.024539][ T976] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 467.034781][ T7255] tipc: New replicast peer: 255.255.255.255 [ 467.054315][ T7255] tipc: Enabled bearer , priority 10 [ 467.066932][ T976] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 467.074671][ T30] audit: type=1326 audit(1753628672.681:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377758e9a9 code=0x7ffc0000 [ 467.114398][ T30] audit: type=1326 audit(1753628672.681:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f377758e9a9 code=0x7ffc0000 [ 467.151828][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.165329][ T7259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 467.175760][ T7255] netlink: 'syz.3.295': attribute type 30 has an invalid length. [ 467.188997][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.195404][ T7255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 467.219379][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.261871][ T5975] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 467.273283][ T30] audit: type=1326 audit(1753628672.681:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377758e9a9 code=0x7ffc0000 [ 467.299870][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 467.309718][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.317039][ T6028] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 467.407502][ T30] audit: type=1326 audit(1753628672.681:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377758e9a9 code=0x7ffc0000 [ 467.432507][ T30] audit: type=1326 audit(1753628672.711:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37775908c7 code=0x7ffc0000 [ 467.454723][ T30] audit: type=1326 audit(1753628672.711:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f377759083c code=0x7ffc0000 [ 467.477883][ T30] audit: type=1326 audit(1753628672.711:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3777590774 code=0x7ffc0000 [ 467.501992][ T5975] usb 2-1: SerialNumber: syz [ 467.537514][ T30] audit: type=1326 audit(1753628672.711:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3777590774 code=0x7ffc0000 [ 467.572711][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.612707][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.649575][ T7265] binder: 7263:7265 ioctl c018620c 200000000100 returned -22 [ 467.743924][ T6028] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 467.776937][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 467.782807][ T30] audit: type=1326 audit(1753628672.711:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.3.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f377758d60a code=0x7ffc0000 [ 467.974707][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.983363][ T6028] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.983417][ T6028] usb 3-1: Product: syz [ 468.000916][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.026393][ T6028] usb 3-1: Manufacturer: syz [ 468.042826][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 468.069989][ T6028] usb 3-1: SerialNumber: syz [ 468.091968][ T6028] usb 3-1: config 0 descriptor?? [ 468.102279][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 468.116359][ T6028] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 468.142659][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 468.176398][ T5961] tipc: Node number set to 2886997007 [ 468.183461][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 468.213050][ T976] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 468.278623][ T976] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 468.311683][ T976] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 468.316483][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.347151][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.364066][ T976] usb 1-1: USB disconnect, device number 17 [ 468.391512][ T6028] gspca_sunplus: reg_r err -71 [ 468.404919][ T6028] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 468.680690][ T6028] usb 3-1: USB disconnect, device number 13 [ 468.718959][ T7275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.299'. [ 469.787171][ T5975] usb 2-1: 0:2 : does not exist [ 469.842584][ T5975] usb 2-1: unit 5 not found! [ 469.852574][ T6028] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 469.938616][ T5975] usb 2-1: USB disconnect, device number 9 [ 469.975376][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.302'. [ 469.996014][ T7286] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 470.030859][ T7286] netlink: 'syz.0.303': attribute type 8 has an invalid length. [ 470.098232][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.108463][ T6028] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.174008][ T6028] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 470.190035][ T6028] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 470.214202][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 470.224428][ T6028] usb 3-1: SerialNumber: syz [ 470.313237][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 470.352700][ T5975] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 470.472807][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 470.491536][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.501729][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.588040][ T5975] usb 2-1: Using ep0 maxpacket: 32 [ 470.603822][ T5975] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.634842][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.647242][ T5975] usb 2-1: config 0 has no interface number 0 [ 470.662028][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.681524][ T5975] usb 2-1: config 0 interface 184 has no altsetting 0 [ 470.698409][ T5975] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 470.709435][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.722257][ T9] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.18 [ 470.736667][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.751754][ T9] usb 1-1: Product: syz [ 470.757255][ T5975] usb 2-1: Product: syz [ 470.761650][ T9] usb 1-1: Manufacturer: syz [ 470.769367][ T5975] usb 2-1: Manufacturer: syz [ 470.775558][ T9] usb 1-1: SerialNumber: syz [ 470.780422][ T5975] usb 2-1: SerialNumber: syz [ 470.798245][ T9] usb 1-1: config 0 descriptor?? [ 470.820754][ T5975] usb 2-1: config 0 descriptor?? [ 470.839504][ T5975] smsc75xx v1.0.0 [ 471.064883][ T9] usb 1-1: no audio or video endpoints found [ 471.131562][ T9] usb 1-1: USB disconnect, device number 18 [ 471.509108][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 471.604246][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.860744][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.907504][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.330578][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 472.404890][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 472.452707][ T6014] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 472.551041][ T5975] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 472.562798][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 472.636826][ T6014] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 472.654944][ T6014] usb 1-1: config 0 interface 0 has no altsetting 0 [ 472.665298][ T6014] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 472.678069][ T6014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.704607][ T6014] usb 1-1: config 0 descriptor?? [ 472.710094][ T5975] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 472.712344][ T7301] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 472.752739][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 472.807727][ T5975] usb 2-1: USB disconnect, device number 10 [ 473.063800][ T6014] usb 1-1: string descriptor 0 read error: -71 [ 473.145859][ T6014] usbhid 1-1:0.0: can't add hid device: -71 [ 473.188761][ T6014] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 473.276113][ T6014] usb 1-1: USB disconnect, device number 19 [ 473.752721][ T5961] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 473.927257][ T5961] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 473.937741][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.965544][ T6028] usb 3-1: 0:2 : does not exist [ 474.029914][ T6028] usb 3-1: unit 5 not found! [ 474.045719][ T5961] usb 2-1: Product: syz [ 474.066633][ T5961] usb 2-1: Manufacturer: syz [ 474.071346][ T5961] usb 2-1: SerialNumber: syz [ 474.176237][ T6028] usb 3-1: USB disconnect, device number 14 [ 474.333933][ T5961] usb 2-1: config 0 descriptor?? [ 474.354782][ T5961] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 474.412661][ T5954] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 474.435714][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.577626][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.591516][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.625640][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.636237][ T5954] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.661249][ T5954] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 474.672103][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 474.685887][ T5961] gspca_sunplus: reg_r err -71 [ 474.691731][ T5961] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 474.700938][ T5954] usb 1-1: SerialNumber: syz [ 474.710005][ T5961] usb 2-1: USB disconnect, device number 11 [ 474.967818][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.979073][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.603901][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.629537][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 475.637739][ T6014] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 475.652872][ T43] usb 4-1: can't read configurations, error -71 [ 475.812880][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 475.882557][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 476.132776][ T7337] could not allocate digest TFM handle poly1305-neon [ 476.195325][ T7351] netlink: 64 bytes leftover after parsing attributes in process `syz.3.316'. [ 476.416612][ T7353] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 476.434551][ T7353] netlink: 'syz.4.318': attribute type 8 has an invalid length. [ 476.692844][ T2152] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 476.855313][ T2152] usb 5-1: Using ep0 maxpacket: 32 [ 476.883382][ T2152] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.933318][ T2152] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 477.229995][ T2152] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.18 [ 477.240944][ T2152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.334103][ T2152] usb 5-1: Product: syz [ 477.356131][ T2152] usb 5-1: Manufacturer: syz [ 477.369055][ T2152] usb 5-1: SerialNumber: syz [ 477.397515][ T2152] usb 5-1: config 0 descriptor?? [ 477.641892][ T2152] usb 5-1: no audio or video endpoints found [ 477.670166][ T2152] usb 5-1: USB disconnect, device number 12 [ 478.399640][ T5954] usb 1-1: 0:2 : does not exist [ 478.439335][ T5954] usb 1-1: unit 5 not found! [ 478.516480][ T5954] usb 1-1: USB disconnect, device number 20 [ 478.706899][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.878598][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 479.158186][ T5954] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 479.163604][ T5975] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 479.221389][ T6014] usb 3-1: unable to get BOS descriptor or descriptor too short [ 479.243629][ T6014] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 479.319668][ T6014] usb 3-1: can't read configurations, error -71 [ 479.346446][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 479.396984][ T5954] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 8.05 [ 479.423455][ T5975] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 479.442503][ T5975] usb 5-1: config 0 has no interface number 0 [ 479.458261][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.470253][ T5975] usb 5-1: config 0 interface 184 has no altsetting 0 [ 479.495761][ T5975] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 479.512526][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.532581][ T5954] usb 1-1: Product: syz [ 479.536886][ T5975] usb 5-1: Product: syz [ 479.537802][ T5954] usb 1-1: Manufacturer: syz [ 479.549103][ T5975] usb 5-1: Manufacturer: syz [ 479.569113][ T5954] usb 1-1: SerialNumber: syz [ 479.581386][ T7369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.323'. [ 479.590510][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 479.599812][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 479.833073][ T5975] usb 5-1: SerialNumber: syz [ 479.839210][ T5954] usb 1-1: config 0 descriptor?? [ 479.839908][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 479.854886][ T5975] usb 5-1: config 0 descriptor?? [ 479.873687][ T5975] smsc75xx v1.0.0 [ 480.260082][ T7357] netlink: 'syz.0.320': attribute type 5 has an invalid length. [ 480.294790][ T5954] usb 1-1: USB disconnect, device number 21 [ 480.551076][ T5975] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 480.567747][ T5975] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 480.692655][ T976] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 480.784217][ T7359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.793410][ T7359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.924775][ T976] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 480.945428][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.988873][ T976] usb 3-1: Product: syz [ 481.091136][ T976] usb 3-1: Manufacturer: syz [ 481.143686][ T976] usb 3-1: SerialNumber: syz [ 481.157938][ T5975] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 481.182562][ T5975] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 481.236211][ T5962] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 481.236582][ T976] usb 3-1: config 0 descriptor?? [ 481.249466][ T5975] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 481.267640][ T976] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 481.276420][ T5975] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 481.339401][ T5954] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 481.423480][ T5975] usb 5-1: USB disconnect, device number 13 [ 481.465117][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.477154][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.482660][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 481.554138][ T976] gspca_sunplus: reg_r err -71 [ 481.566614][ T976] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 481.585952][ T976] usb 3-1: USB disconnect, device number 17 [ 481.586660][ T5954] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 481.612818][ T5954] usb 2-1: config 0 has no interface number 0 [ 481.619184][ T5954] usb 2-1: config 0 interface 29 has no altsetting 0 [ 481.971137][ T5954] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 482.022482][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.079721][ T5954] usb 2-1: Product: syz [ 482.090665][ T5954] usb 2-1: Manufacturer: syz [ 482.206264][ T5954] usb 2-1: SerialNumber: syz [ 482.275662][ T5954] usb 2-1: config 0 descriptor?? [ 482.600291][ T5954] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 483.172558][ T976] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 483.617045][ T976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.859141][ T976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.891237][ T976] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.910070][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.936871][ T976] usb 1-1: SerialNumber: syz [ 484.206071][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.215192][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.294692][ T7407] netlink: 64 bytes leftover after parsing attributes in process `syz.2.332'. [ 484.379060][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 484.547963][ T7406] bridge0: entered promiscuous mode [ 484.616922][ T7406] bridge0: left promiscuous mode [ 484.883790][ T5962] usb 4-1: unable to get BOS descriptor or descriptor too short [ 484.993450][ T5962] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 485.001912][ T5962] usb 4-1: can't read configurations, error -71 [ 485.774451][ T5961] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 485.912831][ T5962] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 485.951188][ T5961] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 485.961422][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.972652][ T5954] peak_usb 2-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 485.997349][ T5954] peak_usb 2-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 486.009843][ T5961] usb 5-1: Product: syz [ 486.038549][ T5961] usb 5-1: Manufacturer: syz [ 486.062664][ T5961] usb 5-1: SerialNumber: syz [ 486.083589][ T5961] usb 5-1: config 0 descriptor?? [ 486.099075][ T5961] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 486.109721][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.139404][ T5962] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 486.184467][ T5962] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 486.215790][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.244312][ T5954] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 486.262156][ T5954] usb 2-1: USB disconnect, device number 12 [ 486.284186][ T5962] usb 4-1: config 0 descriptor?? [ 486.296623][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.313317][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.348132][ T5962] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 486.403353][ T5961] gspca_sunplus: reg_r err -71 [ 486.410058][ T5962] dvb-usb: bulk message failed: -22 (3/0) [ 486.423850][ T5961] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 486.464827][ T5962] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 486.500653][ T5961] usb 5-1: USB disconnect, device number 14 [ 486.521506][ T7417] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 486.538787][ T5962] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 486.590014][ T5962] usb 4-1: media controller created [ 486.594623][ T976] usb 1-1: 0:2 : does not exist [ 486.601784][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.620775][ T976] usb 1-1: unit 5 not found! [ 486.621618][ T7417] netlink: 'syz.1.337': attribute type 8 has an invalid length. [ 486.701612][ T976] usb 1-1: USB disconnect, device number 22 [ 486.705519][ T5962] dvb-usb: bulk message failed: -22 (6/0) [ 486.762566][ T5962] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 486.797677][ T5962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 486.821033][ T5962] dvb-usb: schedule remote query interval to 150 msecs. [ 486.829832][ T5962] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 486.855651][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.972868][ T6014] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 486.986365][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 487.000064][ T5962] dvb-usb: error while querying for an remote control event. [ 487.095324][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 487.134301][ T7415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.143294][ T6014] usb 2-1: Using ep0 maxpacket: 32 [ 487.151393][ T6014] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.161982][ T6014] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 487.178050][ T7415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.186531][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 487.192317][ T5962] dvb-usb: error while querying for an remote control event. [ 487.205478][ T6014] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.18 [ 487.214882][ T6014] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.226452][ T6014] usb 2-1: Product: syz [ 487.230647][ T6014] usb 2-1: Manufacturer: syz [ 487.235752][ T6014] usb 2-1: SerialNumber: syz [ 487.247804][ T6014] usb 2-1: config 0 descriptor?? [ 487.352793][ T976] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 487.369690][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 487.391269][ T5962] dvb-usb: error while querying for an remote control event. [ 487.492102][ T6014] usb 2-1: no audio or video endpoints found [ 487.507415][ T6014] usb 2-1: USB disconnect, device number 13 [ 487.532530][ T976] usb 3-1: Using ep0 maxpacket: 32 [ 487.545794][ T976] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 487.572597][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 487.593431][ T976] usb 3-1: config 0 has no interface number 0 [ 487.601105][ T5962] dvb-usb: error while querying for an remote control event. [ 487.618777][ T976] usb 3-1: config 0 interface 184 has no altsetting 0 [ 487.653126][ T976] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 487.663867][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.672096][ T976] usb 3-1: Product: syz [ 487.676579][ T976] usb 3-1: Manufacturer: syz [ 487.681435][ T976] usb 3-1: SerialNumber: syz [ 487.689212][ T976] usb 3-1: config 0 descriptor?? [ 487.697438][ T976] smsc75xx v1.0.0 [ 487.864101][ T6014] dvb-usb: bulk message failed: -22 (1/0) [ 487.889779][ T6014] dvb-usb: error while querying for an remote control event. [ 487.915730][ T6014] usb 4-1: USB disconnect, device number 13 [ 488.008818][ T6014] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 488.212631][ T5962] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 488.227612][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 488.377383][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 488.400625][ T5962] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 488.404263][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 488.410283][ T5962] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.430632][ T5962] usb 1-1: Product: syz [ 488.435170][ T5962] usb 1-1: Manufacturer: syz [ 488.468289][ T5962] usb 1-1: SerialNumber: syz [ 488.494302][ T5962] usb 1-1: config 0 descriptor?? [ 488.523917][ T5962] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 488.806184][ T7436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.822383][ T7436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.830796][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.861406][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.916474][ T5962] gspca_sunplus: reg_r err -71 [ 488.924035][ T5962] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 488.964057][ T5962] usb 1-1: USB disconnect, device number 23 [ 489.109917][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 489.130015][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 489.251607][ T976] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 489.282934][ T976] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 489.341025][ T976] usb 3-1: USB disconnect, device number 18 [ 489.508575][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 490.268615][ T7463] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 490.322607][ T5961] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 490.670892][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.746115][ T7467] netlink: 64 bytes leftover after parsing attributes in process `syz.2.350'. [ 490.758784][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.804812][ T7468] team_slave_0: entered allmulticast mode [ 490.884694][ T5961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 490.918905][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 490.949532][ T5961] usb 5-1: SerialNumber: syz [ 491.117344][ T6014] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 491.194526][ T7460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.204983][ T7460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.402456][ T6014] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 491.411786][ T6014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.443770][ T6014] usb 1-1: Product: syz [ 491.551109][ T6014] usb 1-1: Manufacturer: syz [ 491.587669][ T6014] usb 1-1: SerialNumber: syz [ 491.741406][ T6014] usb 1-1: config 0 descriptor?? [ 492.172000][ T6014] airspy 1-1:0.0: Board ID: 00 [ 492.177271][ T6014] airspy 1-1:0.0: Firmware version: [ 492.627714][ T7479] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 492.681290][ T7480] netlink: 'syz.1.355': attribute type 8 has an invalid length. [ 492.818725][ T6014] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 492.863242][ T6014] airspy 1-1:0.0: Registered as swradio24 [ 492.922724][ T6014] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 492.972580][ T2152] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 492.996808][ T6014] usb 1-1: USB disconnect, device number 24 [ 493.082635][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 493.142636][ T2152] usb 2-1: Using ep0 maxpacket: 32 [ 493.161607][ T2152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.186061][ T2152] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.210873][ T5961] usb 5-1: 0:2 : does not exist [ 493.226411][ T5961] usb 5-1: unit 5 not found! [ 493.243330][ T2152] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.18 [ 493.273430][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.275034][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.299314][ T2152] usb 2-1: Product: syz [ 493.312786][ T5961] usb 5-1: USB disconnect, device number 15 [ 493.322518][ T2152] usb 2-1: Manufacturer: syz [ 493.341682][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 493.365800][ T2152] usb 2-1: SerialNumber: syz [ 493.378033][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 493.394867][ T2152] usb 2-1: config 0 descriptor?? [ 493.418544][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.441695][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.514654][ T9] usb 4-1: config 0 descriptor?? [ 493.542240][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 493.572562][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 493.594806][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 493.621618][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 493.634447][ T2152] usb 2-1: no audio or video endpoints found [ 493.641968][ T9] usb 4-1: media controller created [ 493.652709][ T7497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.660308][ T7497] bridge0: port 4(bond2) entered blocking state [ 493.661283][ T2152] usb 2-1: USB disconnect, device number 14 [ 493.669186][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.682932][ T7497] bridge0: port 4(bond2) entered disabled state [ 493.704757][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 493.710682][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 493.720296][ T7497] bond2: entered allmulticast mode [ 493.735253][ T7497] bond2: entered promiscuous mode [ 493.741062][ T7497] bridge0: port 4(bond2) entered blocking state [ 493.747562][ T7497] bridge0: port 4(bond2) entered forwarding state [ 493.791311][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 493.813801][ T5961] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 493.825628][ T6228] bridge0: port 4(bond2) entered disabled state [ 493.833255][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 493.840293][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 493.993157][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 493.998985][ T9] dvb-usb: error while querying for an remote control event. [ 494.006523][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 494.011339][ T5961] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 494.040350][ T5961] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.071047][ T5961] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.126056][ T5961] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.152798][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.162630][ T5961] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.172060][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.192580][ T976] dvb-usb: bulk message failed: -22 (1/0) [ 494.198727][ T976] dvb-usb: error while querying for an remote control event. [ 494.219359][ T5961] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 494.248558][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.372766][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 494.388887][ T5975] dvb-usb: error while querying for an remote control event. [ 494.422848][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 494.477188][ T5961] usb 5-1: usb_control_msg returned -32 [ 494.497983][ T5961] usbtmc 5-1:16.0: can't read capabilities [ 494.582702][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 494.588822][ T5975] dvb-usb: error while querying for an remote control event. [ 494.598705][ T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 494.607450][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 494.627791][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 494.639942][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 494.655508][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 494.685922][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 494.692583][ T2152] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 494.713142][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.744108][ T9] usb 1-1: config 0 descriptor?? [ 494.751648][ T7508] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 494.759249][ T5975] dvb-usb: bulk message failed: -22 (1/0) [ 494.771401][ T5975] dvb-usb: error while querying for an remote control event. [ 494.782696][ T6028] usb 4-1: USB disconnect, device number 14 [ 494.811632][ T6028] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 494.880195][ T2152] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 494.880255][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.882039][ T2152] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 494.882071][ T2152] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 494.882094][ T2152] usb 2-1: Manufacturer: syz [ 494.886881][ T2152] usb 2-1: config 0 descriptor?? [ 495.082491][ T2152] rc_core: IR keymap rc-hauppauge not found [ 495.082515][ T2152] Registered IR keymap rc-empty [ 495.084014][ T2152] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 495.114135][ T2152] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 495.141609][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 495.423884][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 495.430021][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 495.465993][ T9] usb 1-1: USB disconnect, device number 25 [ 495.728360][ T7524] FAULT_INJECTION: forcing a failure. [ 495.728360][ T7524] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 495.752612][ T7524] CPU: 1 UID: 0 PID: 7524 Comm: syz.3.367 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 495.752642][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.752659][ T7524] Call Trace: [ 495.752668][ T7524] [ 495.752677][ T7524] dump_stack_lvl+0x189/0x250 [ 495.752708][ T7524] ? __pfx____ratelimit+0x10/0x10 [ 495.752730][ T7524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.752754][ T7524] ? __pfx__printk+0x10/0x10 [ 495.752781][ T7524] ? __might_fault+0xb0/0x130 [ 495.752818][ T7524] should_fail_ex+0x414/0x560 [ 495.752845][ T7524] _copy_from_iter+0x1db/0x16f0 [ 495.752874][ T7524] ? rcu_is_watching+0x15/0xb0 [ 495.752899][ T7524] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 495.752940][ T7524] ? __pfx__copy_from_iter+0x10/0x10 [ 495.752967][ T7524] ? __build_skb_around+0x257/0x3e0 [ 495.753000][ T7524] ? netlink_sendmsg+0x642/0xb30 [ 495.753027][ T7524] ? skb_put+0x11b/0x210 [ 495.753060][ T7524] netlink_sendmsg+0x6b2/0xb30 [ 495.753100][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.753133][ T7524] ? aa_sock_msg_perm+0x94/0x160 [ 495.753158][ T7524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.753180][ T7524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.753211][ T7524] __sock_sendmsg+0x21c/0x270 [ 495.753240][ T7524] ____sys_sendmsg+0x505/0x830 [ 495.753266][ T7524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.753296][ T7524] ? import_iovec+0x74/0xa0 [ 495.753327][ T7524] ___sys_sendmsg+0x21f/0x2a0 [ 495.753349][ T7524] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.753407][ T7524] ? __fget_files+0x2a/0x420 [ 495.753425][ T7524] ? __fget_files+0x3a0/0x420 [ 495.753453][ T7524] __x64_sys_sendmsg+0x19b/0x260 [ 495.753476][ T7524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.753506][ T7524] ? __pfx_ksys_write+0x10/0x10 [ 495.753530][ T7524] ? rcu_is_watching+0x15/0xb0 [ 495.753559][ T7524] ? do_syscall_64+0xbe/0x3b0 [ 495.753586][ T7524] do_syscall_64+0xfa/0x3b0 [ 495.753607][ T7524] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.753629][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.753648][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 495.753672][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.753692][ T7524] RIP: 0033:0x7f377758e9a9 [ 495.753710][ T7524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.753727][ T7524] RSP: 002b:00007f37783cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.753749][ T7524] RAX: ffffffffffffffda RBX: 00007f37777b5fa0 RCX: 00007f377758e9a9 [ 495.753764][ T7524] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 495.753776][ T7524] RBP: 00007f37783cf090 R08: 0000000000000000 R09: 0000000000000000 [ 495.753790][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.753801][ T7524] R13: 0000000000000000 R14: 00007f37777b5fa0 R15: 00007f37778dfa28 [ 495.753832][ T7524] [ 496.724370][ T5954] usb 5-1: USB disconnect, device number 16 [ 496.852698][ T2152] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 496.916342][ T976] usb 2-1: USB disconnect, device number 15 [ 497.028240][ T2152] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.057882][ T2152] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.118691][ T2152] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 497.159701][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.190958][ T2152] usb 1-1: SerialNumber: syz [ 497.464951][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.480801][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.002753][ T5961] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 499.255473][ T5961] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 499.264139][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.322482][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 499.431367][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 499.499859][ T5961] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 499.572024][ T5961] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 499.639481][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.817420][ T5961] usb 3-1: config 0 descriptor?? [ 499.838730][ T7563] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 500.930144][ T2152] usb 1-1: 0:2 : does not exist [ 500.990013][ T2152] usb 1-1: unit 5 not found! [ 500.998016][ T5961] usbhid 3-1:0.0: can't add hid device: -71 [ 501.008956][ T5961] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.034082][ T5961] usb 3-1: USB disconnect, device number 19 [ 501.088580][ T2152] usb 1-1: USB disconnect, device number 26 [ 501.203428][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.453325][ T7582] FAULT_INJECTION: forcing a failure. [ 501.453325][ T7582] name failslab, interval 1, probability 0, space 0, times 0 [ 501.453369][ T7582] CPU: 1 UID: 0 PID: 7582 Comm: syz.3.384 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 501.453402][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.453415][ T7582] Call Trace: [ 501.453423][ T7582] [ 501.453432][ T7582] dump_stack_lvl+0x189/0x250 [ 501.453462][ T7582] ? __pfx____ratelimit+0x10/0x10 [ 501.453485][ T7582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.453510][ T7582] ? __pfx__printk+0x10/0x10 [ 501.453541][ T7582] ? trace_fib_table_lookup+0x85/0x200 [ 501.453576][ T7582] ? fib_table_lookup+0x11ba/0x16e0 [ 501.453609][ T7582] should_fail_ex+0x414/0x560 [ 501.453636][ T7582] should_failslab+0xa8/0x100 [ 501.453669][ T7582] kmem_cache_alloc_noprof+0x73/0x3c0 [ 501.453697][ T7582] ? dst_alloc+0x105/0x170 [ 501.453715][ T7582] ? fib_lookup+0x76/0x440 [ 501.453739][ T7582] dst_alloc+0x105/0x170 [ 501.453765][ T7582] ip_route_input_rcu+0x1ed5/0x2ff0 [ 501.453802][ T7582] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 501.453852][ T7582] ? ipt_do_table+0x13dd/0x1640 [ 501.453885][ T7582] ? ip_route_input_noref+0x98/0x250 [ 501.453909][ T7582] ip_route_input_noref+0x167/0x250 [ 501.453935][ T7582] ? __pfx_ip_route_input_noref+0x10/0x10 [ 501.453965][ T7582] ? ipt_do_table+0x2a3/0x1640 [ 501.453991][ T7582] ? __pfx_ipt_do_table+0x10/0x10 [ 501.454022][ T7582] ip_rcv_finish_core+0x5af/0x1c00 [ 501.454069][ T7582] ip_rcv_finish+0x14c/0x2f0 [ 501.454101][ T7582] NF_HOOK+0x30c/0x3a0 [ 501.454132][ T7582] ? __pfx_ip_rcv_finish+0x10/0x10 [ 501.454159][ T7582] ? NF_HOOK+0x9a/0x3a0 [ 501.454185][ T7582] ? __pfx_NF_HOOK+0x10/0x10 [ 501.454210][ T7582] ? ip_rcv_core+0x7f7/0xd00 [ 501.454240][ T7582] ? __pfx_ip_rcv_finish+0x10/0x10 [ 501.454278][ T7582] ? __pfx_ip_rcv+0x10/0x10 [ 501.454304][ T7582] __netif_receive_skb+0x143/0x380 [ 501.454354][ T7582] ? netif_receive_skb+0x115/0x790 [ 501.454378][ T7582] netif_receive_skb+0x1cb/0x790 [ 501.454407][ T7582] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 501.454432][ T7582] ? __pfx_netif_receive_skb+0x10/0x10 [ 501.454463][ T7582] ? tun_rx_batched+0x160/0x730 [ 501.454493][ T7582] tun_rx_batched+0x1b9/0x730 [ 501.454519][ T7582] ? __lock_acquire+0xab9/0xd20 [ 501.454545][ T7582] ? __pfx_tun_rx_batched+0x10/0x10 [ 501.454576][ T7582] ? tun_get_user+0x2549/0x3ce0 [ 501.454618][ T7582] tun_get_user+0x298e/0x3ce0 [ 501.454646][ T7582] ? tun_get_user+0x693/0x3ce0 [ 501.454671][ T7582] ? tun_get_user+0x2549/0x3ce0 [ 501.454710][ T7582] ? aa_file_perm+0x11f/0xed0 [ 501.454734][ T7582] ? __pfx_tun_get_user+0x10/0x10 [ 501.454762][ T7582] ? aa_file_perm+0x3e7/0xed0 [ 501.454800][ T7582] ? ref_tracker_alloc+0x318/0x460 [ 501.454821][ T7582] ? __lock_acquire+0xab9/0xd20 [ 501.454843][ T7582] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 501.454873][ T7582] ? tun_get+0x1c/0x2f0 [ 501.454906][ T7582] ? tun_get+0x1c/0x2f0 [ 501.454931][ T7582] ? tun_get+0x1c/0x2f0 [ 501.454962][ T7582] tun_chr_write_iter+0x113/0x200 [ 501.454992][ T7582] vfs_write+0x54b/0xa90 [ 501.455025][ T7582] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 501.455053][ T7582] ? __pfx_vfs_write+0x10/0x10 [ 501.455092][ T7582] ? __fget_files+0x2a/0x420 [ 501.455121][ T7582] ksys_write+0x145/0x250 [ 501.455150][ T7582] ? __pfx_ksys_write+0x10/0x10 [ 501.455175][ T7582] ? rcu_is_watching+0x15/0xb0 [ 501.455205][ T7582] ? do_syscall_64+0xbe/0x3b0 [ 501.455233][ T7582] do_syscall_64+0xfa/0x3b0 [ 501.455254][ T7582] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.455276][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.455296][ T7582] ? clear_bhb_loop+0x60/0xb0 [ 501.455322][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.455341][ T7582] RIP: 0033:0x7f377758d45f [ 501.455359][ T7582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 501.455377][ T7582] RSP: 002b:00007f37783cf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 501.455404][ T7582] RAX: ffffffffffffffda RBX: 00007f37777b5fa0 RCX: 00007f377758d45f [ 501.455419][ T7582] RDX: 00000000000000be RSI: 0000200000000300 RDI: 00000000000000c8 [ 501.455431][ T7582] RBP: 00007f37783cf090 R08: 0000000000000000 R09: 0000000000000000 [ 501.455444][ T7582] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 501.455455][ T7582] R13: 0000000000000000 R14: 00007f37777b5fa0 R15: 00007f37778dfa28 [ 501.455487][ T7582] [ 501.603818][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.603898][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.487893][ T5961] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 502.644839][ T5961] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 502.644899][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.646552][ T5961] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 502.646574][ T5961] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 502.646590][ T5961] usb 5-1: Manufacturer: syz [ 502.648806][ T5961] usb 5-1: config 0 descriptor?? [ 503.224696][ T5961] rc_core: IR keymap rc-hauppauge not found [ 503.224719][ T5961] Registered IR keymap rc-empty [ 503.226573][ T5961] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 503.228870][ T5961] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 503.266748][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 504.572723][ T5962] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 504.735463][ T5962] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.735495][ T5962] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.738258][ T5962] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 504.738316][ T5962] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 504.738331][ T5962] usb 4-1: SerialNumber: syz [ 504.971265][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.973467][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.428983][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.395'. [ 505.718036][ T7580] tty tty20: ldisc open failed (-12), clearing slot 19 [ 506.185730][ T976] usb 5-1: USB disconnect, device number 17 [ 506.210787][ T7633] syzkaller0: create flow: hash 4195029002 index 1 [ 506.411813][ T7636] syzkaller0: delete flow: hash 4195029002 index 1 [ 506.439437][ T7642] netlink: 260 bytes leftover after parsing attributes in process `syz.1.399'. [ 507.758606][ T7653] process 'syz.4.401' launched './file0' with NULL argv: empty string added [ 507.783753][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.403'. [ 507.798127][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 508.372747][ T6028] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 508.520471][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 508.529643][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'. [ 509.012810][ T6028] usb 2-1: config index 0 descriptor too short (expected 539, got 27) [ 509.021252][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 509.179854][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1023 [ 509.220321][ T6028] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 509.229881][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.241258][ T6028] usb 2-1: Product: syz [ 509.255827][ T6028] usb 2-1: Manufacturer: syz [ 509.264828][ T5962] usb 4-1: 0:2 : does not exist [ 509.277086][ T5962] usb 4-1: unit 5 not found! [ 509.294209][ T6028] usb 2-1: SerialNumber: syz [ 509.307522][ T5962] usb 4-1: USB disconnect, device number 15 [ 509.402109][ T6028] usb 2-1: config 0 descriptor?? [ 509.435262][ T6028] hub 2-1:0.0: bad descriptor, ignoring hub [ 509.460338][ T6028] hub 2-1:0.0: probe with driver hub failed with error -5 [ 509.513425][ T6028] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 509.556859][ T6028] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 509.607223][ T6028] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 509.674969][ T6028] usb 2-1: USB disconnect, device number 16 [ 510.039351][ T7678] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 510.489115][ T6028] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 510.724859][ T6028] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 510.735695][ T6028] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.778867][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.810652][ T6028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 510.822627][ T5962] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 510.830268][ T6028] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.847287][ T6028] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.864285][ T6028] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.883708][ T6028] usb 4-1: config 0 descriptor?? [ 510.896016][ T7681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.018840][ T5962] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 511.033502][ T5962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.052939][ T5962] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 511.062298][ T5962] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 511.076205][ T5962] usb 2-1: Manufacturer: syz [ 511.086665][ T5962] usb 2-1: config 0 descriptor?? [ 511.217458][ T5962] rc_core: IR keymap rc-hauppauge not found [ 511.234311][ T5962] Registered IR keymap rc-empty [ 511.248840][ T5962] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 511.262261][ T5962] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 511.312502][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 511.597494][ T6028] usbhid 4-1:0.0: can't add hid device: -71 [ 511.635101][ T6028] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 511.672259][ T6028] usb 4-1: USB disconnect, device number 16 [ 512.326875][ T5954] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 512.353605][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.392870][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.498719][ T5954] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 512.507968][ T5954] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 512.526221][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 512.542821][ T5954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 512.568149][ T5954] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 512.582715][ T6028] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 512.603970][ T5954] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 512.620010][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 512.647969][ T5954] usb 5-1: Product: syz [ 512.659718][ T5954] usb 5-1: Manufacturer: syz [ 512.690058][ T5954] cdc_wdm 5-1:1.0: skipping garbage [ 512.696173][ T5954] cdc_wdm 5-1:1.0: skipping garbage [ 512.716248][ T5954] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 512.736825][ T5954] cdc_wdm 5-1:1.0: Unknown control protocol [ 512.766889][ T6028] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.790137][ T6028] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 512.806288][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.828881][ T6028] usb 4-1: Product: syz [ 512.837686][ T6028] usb 4-1: Manufacturer: syz [ 512.850345][ T6028] usb 4-1: SerialNumber: syz [ 512.945248][ T5975] usb 2-1: USB disconnect, device number 17 [ 513.285009][ T6028] cdc_ncm 4-1:1.0: bind() failure [ 513.295945][ T6028] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 513.417795][ T7706] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 513.424363][ T7706] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 513.432162][ T6028] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 513.457711][ T7706] vhci_hcd vhci_hcd.0: Device attached [ 513.561447][ T6028] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 513.653090][ T6028] usb 4-1: USB disconnect, device number 17 [ 513.713606][ T5954] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 513.778705][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 514.144416][ T7707] vhci_hcd: connection reset by peer [ 514.172231][ T6210] vhci_hcd: stop threads [ 514.191016][ T6210] vhci_hcd: release socket [ 514.207962][ T6210] vhci_hcd: disconnect device [ 514.752676][ T2152] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 514.922903][ T2152] usb 4-1: Using ep0 maxpacket: 32 [ 514.942946][ T2152] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 514.990834][ T2152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.813175][ T2152] usb 4-1: config 0 descriptor?? [ 516.021352][ T2152] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 516.100089][ T2152] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 516.149956][ T2152] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 516.174919][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 516.184054][ T7730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.422'. [ 517.610594][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 517.993336][ T5962] usb 5-1: USB disconnect, device number 18 [ 518.147833][ T7741] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 518.687046][ T7746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 518.740822][ T7751] warning: `syz.2.427' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 518.883569][ T5954] vhci_hcd: vhci_device speed not set [ 519.782529][ T43] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 519.942520][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 519.958021][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.978910][ T6014] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 519.992700][ T43] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 520.092700][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.183289][ T43] usb 5-1: config 0 descriptor?? [ 520.284942][ T6014] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 520.343083][ T6014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.548383][ T6014] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 520.559585][ T7765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 520.566166][ T7765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.578197][ T7765] vhci_hcd vhci_hcd.0: Device attached [ 520.586113][ T6014] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 520.602506][ T6014] usb 3-1: Manufacturer: syz [ 520.638533][ T6014] usb 3-1: config 0 descriptor?? [ 520.721490][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.433'. [ 520.751857][ T7773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.433'. [ 520.819353][ T7773] netlink: 492 bytes leftover after parsing attributes in process `syz.1.433'. [ 520.832642][ T5975] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 520.852485][ T6014] rc_core: IR keymap rc-hauppauge not found [ 520.858444][ T6014] Registered IR keymap rc-empty [ 520.868872][ T6014] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 520.884569][ T6014] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 520.902757][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 521.545556][ T7749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.586156][ T7749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.594381][ T7766] vhci_hcd: connection reset by peer [ 521.621865][ T5938] vhci_hcd: stop threads [ 521.631014][ T5938] vhci_hcd: release socket [ 521.653858][ T5938] vhci_hcd: disconnect device [ 521.769405][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.780371][ T6028] usb 5-1: USB disconnect, device number 19 [ 522.959938][ T6027] usb 3-1: USB disconnect, device number 20 [ 523.525145][ T6028] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 523.757138][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.795836][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.823425][ T6028] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 523.861304][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.894475][ T6028] usb 5-1: config 0 descriptor?? [ 524.049611][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 524.058548][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.440'. [ 524.732187][ T6028] pyra 0003:1E7D:2CF6.0002: item fetching failed at offset 5/7 [ 524.769515][ T6028] pyra 0003:1E7D:2CF6.0002: parse failed [ 524.790241][ T6028] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -22 [ 524.834938][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.436'. [ 524.923406][ T6028] usb 5-1: USB disconnect, device number 20 [ 524.981322][ T7806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.511754][ T7819] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 526.002841][ T5975] vhci_hcd: vhci_device speed not set [ 526.325746][ T6028] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 526.359307][ T7830] sctp: [Deprecated]: syz.3.444 (pid 7830) Use of int in max_burst socket option deprecated. [ 526.359307][ T7830] Use struct sctp_assoc_value instead [ 526.485486][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.500032][ T6028] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 526.531691][ T6028] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 526.605049][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.661730][ T6028] usb 5-1: config 0 descriptor?? [ 526.690615][ T6028] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 526.702346][ T6028] dvb-usb: bulk message failed: -22 (3/0) [ 526.735084][ T6028] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 526.768952][ T6028] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 526.815272][ T6028] usb 5-1: media controller created [ 526.827853][ T6028] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 526.857724][ T6028] dvb-usb: bulk message failed: -22 (6/0) [ 527.062608][ T6028] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 527.080160][ T6028] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 527.152924][ T6028] dvb-usb: schedule remote query interval to 150 msecs. [ 527.185403][ T6028] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 527.389038][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 527.398119][ T6028] dvb-usb: error while querying for an remote control event. [ 527.433157][ T7840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 527.439764][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.450026][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 527.622732][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 527.628555][ T6028] dvb-usb: error while querying for an remote control event. [ 527.692703][ T9] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 527.813511][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 527.823543][ T6028] dvb-usb: error while querying for an remote control event. [ 527.909990][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.928135][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.002813][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.010010][ T6028] dvb-usb: error while querying for an remote control event. [ 528.072649][ T7841] vhci_hcd: connection reset by peer [ 528.080691][ T6214] vhci_hcd: stop threads [ 528.088605][ T6214] vhci_hcd: release socket [ 528.182883][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.188667][ T6028] dvb-usb: error while querying for an remote control event. [ 528.206464][ T6214] vhci_hcd: disconnect device [ 528.383708][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.392748][ T6028] dvb-usb: error while querying for an remote control event. [ 528.562705][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.568531][ T6028] dvb-usb: error while querying for an remote control event. [ 528.772793][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.790545][ T6028] dvb-usb: error while querying for an remote control event. [ 528.981548][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 528.997715][ T6028] dvb-usb: error while querying for an remote control event. [ 529.162517][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 529.168343][ T6028] dvb-usb: error while querying for an remote control event. [ 529.393094][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 529.471435][ T6028] dvb-usb: error while querying for an remote control event. [ 529.692942][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 529.698962][ T6028] dvb-usb: error while querying for an remote control event. [ 529.862551][ T6028] dvb-usb: bulk message failed: -22 (1/0) [ 529.878653][ T6028] dvb-usb: error while querying for an remote control event. [ 529.995494][ T6027] usb 5-1: USB disconnect, device number 21 [ 530.173002][ T6027] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 530.373918][ T7887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 530.380499][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.561115][ T7893] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 530.572625][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 530.586589][ T7896] ptrace attach of "./syz-executor exec"[5904] was attempted by "./syz-executor exec"[7896] [ 530.992529][ T6028] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 531.180127][ T7890] vhci_hcd: connection reset by peer [ 531.214020][ T6215] vhci_hcd: stop threads [ 531.255536][ T6215] vhci_hcd: release socket [ 531.281678][ T6215] vhci_hcd: disconnect device [ 531.532581][ T6014] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 531.684749][ T6014] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.694525][ T6014] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.722902][ T6014] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.779102][ T6014] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.813918][ T6014] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 531.833475][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 531.853369][ T6014] usb 5-1: Product: syz [ 531.867413][ T6014] usb 5-1: Manufacturer: syz [ 531.885709][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 531.890988][ T6014] cdc_wdm 5-1:1.0: skipping garbage [ 531.917578][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 531.926680][ T6014] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 531.960516][ T7905] pim6reg: entered allmulticast mode [ 531.971854][ T7905] pim6reg: left allmulticast mode [ 532.403607][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 532.695277][ T5975] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 532.797815][ T9] vhci_hcd: vhci_device speed not set [ 532.932527][ T5975] usb 1-1: Using ep0 maxpacket: 8 [ 532.966105][ T5975] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 533.040077][ T5975] usb 1-1: config 2 has no interface number 0 [ 533.245386][ T5975] usb 1-1: config 2 interface 31 has no altsetting 0 [ 533.347410][ T5975] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 533.388091][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.406557][ T5975] usb 1-1: Product: syz [ 533.425581][ T5975] usb 1-1: Manufacturer: syz [ 533.437757][ T5975] usb 1-1: SerialNumber: syz [ 533.467289][ T5975] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 533.556017][ T7927] ptrace attach of "./syz-executor exec"[5903] was attempted by "./syz-executor exec"[7927] [ 536.092194][ T5975] usb 5-1: USB disconnect, device number 22 [ 536.131614][ T6014] usb 1-1: USB disconnect, device number 27 [ 536.222760][ T6028] vhci_hcd: vhci_device speed not set [ 536.602869][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.660241][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.746334][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.282178][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.322574][ T7954] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 537.329172][ T7954] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.339120][ T7954] vhci_hcd vhci_hcd.0: Device attached [ 537.487201][ T7959] vhci_hcd: connection closed [ 537.487561][ T6228] vhci_hcd: stop threads [ 537.499737][ T6228] vhci_hcd: release socket [ 537.512123][ T6228] vhci_hcd: disconnect device [ 538.237531][ T7972] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 539.733218][ T7985] fuse: Bad value for 'fd' [ 539.742583][ T6028] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 539.843932][ T7985] syzkaller0: entered promiscuous mode [ 539.877606][ T7985] syzkaller0: entered allmulticast mode [ 539.904003][ T6028] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 539.923702][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.955852][ T7990] sctp: [Deprecated]: syz.4.477 (pid 7990) Use of int in max_burst socket option deprecated. [ 539.955852][ T7990] Use struct sctp_assoc_value instead [ 539.980325][ T6028] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 540.002044][ T6028] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 540.014738][ T7990] dlm: plock device version mismatch: kernel (1.2.0), user (808464432.808464432.808464432) [ 540.027865][ T6028] usb 1-1: Manufacturer: syz [ 540.050460][ T6028] usb 1-1: config 0 descriptor?? [ 540.122752][ T43] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 540.183276][ T6028] rc_core: IR keymap rc-hauppauge not found [ 540.198334][ T6028] Registered IR keymap rc-empty [ 540.208515][ T6028] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 540.226577][ T6028] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 540.275280][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 540.342634][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 540.351310][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.432598][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 540.512306][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.564261][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 540.592500][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 540.600603][ T43] usb 3-1: Product: syz [ 540.631031][ T43] usb 3-1: Manufacturer: syz [ 540.758390][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 540.788845][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 540.885547][ T43] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 541.116911][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 543.310200][ T43] usb 1-1: USB disconnect, device number 28 [ 543.819620][ T8023] ptrace attach of "./syz-executor exec"[5902] was attempted by "./syz-executor exec"[8023] [ 544.484903][ T5975] usb 3-1: USB disconnect, device number 21 [ 545.048388][ T8030] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 545.054982][ T8030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.092638][ T8030] vhci_hcd vhci_hcd.0: Device attached [ 545.342541][ T5975] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 545.602631][ T8036] vhci_hcd: connection reset by peer [ 545.662477][ T6210] vhci_hcd: stop threads [ 545.674540][ T6210] vhci_hcd: release socket [ 545.688795][ T6210] vhci_hcd: disconnect device [ 545.992029][ T8050] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 546.752611][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 547.005365][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 547.065071][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 547.093774][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 547.130349][ T5954] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 547.140143][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 547.150526][ T5954] usb 2-1: Product: syz [ 547.160661][ T5954] usb 2-1: Manufacturer: syz [ 547.179375][ T5954] usb 2-1: SerialNumber: syz [ 547.244784][ T5954] usb 2-1: config 0 descriptor?? [ 547.293791][ T5954] hub 2-1:0.0: bad descriptor, ignoring hub [ 547.302303][ T5954] hub 2-1:0.0: probe with driver hub failed with error -5 [ 547.552158][ T8067] trusted_key: syz.4.490 sent an empty control message without MSG_MORE. [ 547.598236][ T5954] usb 2-1: USB disconnect, device number 18 [ 547.805642][ T8066] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 548.182510][ T6028] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 548.362592][ T6028] usb 2-1: Using ep0 maxpacket: 32 [ 548.372144][ T6028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 548.382012][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 548.397144][ T6028] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 548.446612][ T6028] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 548.457875][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 548.470974][ T6028] usb 2-1: Product: syz [ 548.495399][ T6028] usb 2-1: config 0 descriptor?? [ 548.508980][ T6028] hub 2-1:0.0: bad descriptor, ignoring hub [ 548.524529][ T6028] hub 2-1:0.0: probe with driver hub failed with error -5 [ 548.566141][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 548.584985][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.609581][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 548.630035][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 548.639190][ T9] usb 3-1: Manufacturer: syz [ 548.666257][ T9] usb 3-1: config 0 descriptor?? [ 548.753302][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.762261][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.812596][ T9] rc_core: IR keymap rc-hauppauge not found [ 548.827453][ T9] Registered IR keymap rc-empty [ 548.842136][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 548.878450][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 548.937603][ T43] usb 2-1: USB disconnect, device number 19 [ 548.938186][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 549.927595][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 550.018703][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 550.654528][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.663636][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.685305][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.703357][ T5975] vhci_hcd: vhci_device speed not set [ 550.735503][ T5946] usb 3-1: USB disconnect, device number 22 [ 550.799426][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.829250][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.838510][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.857534][ T9] usb 1-1: Product: syz [ 550.861929][ T9] usb 1-1: Manufacturer: syz [ 550.927976][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 550.960744][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 550.966375][ T9] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 550.981932][ T8089] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 550.988505][ T8089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 551.005125][ T8089] vhci_hcd vhci_hcd.0: Device attached [ 551.265438][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 551.492504][ T5975] usb 35-1: device descriptor read/64, error -110 [ 551.706699][ T8090] vhci_hcd: connection closed [ 551.732699][ T5975] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 551.882489][ T6210] vhci_hcd: stop threads [ 551.891412][ T6210] vhci_hcd: release socket [ 551.900498][ T6210] vhci_hcd: disconnect device [ 552.119076][ T5975] usb 35-1: enqueue for inactive port 0 [ 552.624171][ T5975] vhci_hcd: vhci_device speed not set [ 553.591008][ T8116] sctp: [Deprecated]: syz.1.505 (pid 8116) Use of int in max_burst socket option deprecated. [ 553.591008][ T8116] Use struct sctp_assoc_value instead [ 553.660937][ T43] usb 1-1: USB disconnect, device number 29 [ 553.672206][ T8117] ptrace attach of "./syz-executor exec"[5904] was attempted by "./syz-executor exec"[8117] [ 554.236460][ T8126] fuse: Bad value for 'fd' [ 554.295962][ T8131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 554.302540][ T8131] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 554.369725][ T8131] vhci_hcd vhci_hcd.0: Device attached [ 554.396777][ T8132] vhci_hcd: connection closed [ 554.397166][ T6232] vhci_hcd: stop threads [ 554.412502][ T6232] vhci_hcd: release socket [ 554.426285][ T6232] vhci_hcd: disconnect device [ 555.682711][ T5975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 555.837462][ T5975] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 555.857806][ T5975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.903049][ T5975] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 555.918962][ T5975] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 555.956561][ T5975] usb 2-1: Manufacturer: syz [ 556.003187][ T5975] usb 2-1: config 0 descriptor?? [ 556.139677][ T5975] rc_core: IR keymap rc-hauppauge not found [ 556.158190][ T5975] Registered IR keymap rc-empty [ 556.184755][ T5975] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 556.292448][ T5975] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 556.359028][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 556.424456][ T8159] PKCS7: Unknown OID: [5] (bad) [ 556.430817][ T8159] PKCS7: Only support pkcs7_signedData type [ 556.652698][ T5954] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 556.843049][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 556.857822][ T5954] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 556.867990][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.882140][ T5954] usb 5-1: config 0 descriptor?? [ 557.199985][ T5954] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 557.257656][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.284025][ T5954] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 557.352940][ T5954] usb 5-1: media controller created [ 557.601997][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.692598][ T5954] az6027: usb out operation failed. (-71) [ 557.708990][ T5954] az6027: usb out operation failed. (-71) [ 557.725467][ T5954] stb0899_attach: Driver disabled by Kconfig [ 557.735582][ T5954] az6027: no front-end attached [ 557.735582][ T5954] [ 557.749592][ T5954] az6027: usb out operation failed. (-71) [ 557.779521][ T5954] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 557.818769][ T5954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 557.904710][ T5954] dvb-usb: schedule remote query interval to 400 msecs. [ 557.954182][ T5954] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 558.052451][ T5954] usb 5-1: USB disconnect, device number 23 [ 558.309286][ T5954] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 558.453514][ T6014] usb 2-1: USB disconnect, device number 20 [ 558.662662][ T5961] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 558.852525][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 558.855559][ T5961] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 558.886885][ T5961] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 558.912758][ T5954] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 558.946412][ T5961] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 558.957952][ T5961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 558.979996][ T5961] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 559.005849][ T5961] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 559.017977][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 559.030321][ T9] usb 1-1: config 0 has no interfaces? [ 559.042826][ T5961] usb 3-1: Product: syz [ 559.049337][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 559.061504][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.071924][ T9] usb 1-1: Product: syz [ 559.076466][ T5961] usb 3-1: Manufacturer: syz [ 559.264322][ T5946] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 559.363752][ T5954] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 559.382473][ T5961] cdc_wdm 3-1:1.0: skipping garbage [ 559.391329][ T5954] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.418123][ T9] usb 1-1: Manufacturer: syz [ 559.423251][ T5961] cdc_wdm 3-1:1.0: skipping garbage [ 559.428802][ T9] usb 1-1: SerialNumber: syz [ 559.439793][ T5961] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 559.452704][ T5954] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.463324][ T9] usb 1-1: config 0 descriptor?? [ 559.471508][ T5961] cdc_wdm 3-1:1.0: Unknown control protocol [ 559.500093][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.512358][ T5946] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 559.512431][ T5954] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 559.560045][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.591436][ T5946] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 559.639294][ T5954] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 559.660697][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.680802][ T5954] usb 5-1: invalid MIDI out EP 0 [ 559.714781][ T5946] usb 2-1: config 0 descriptor?? [ 559.876848][ T5946] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 559.905097][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz.0.518'. [ 559.924586][ T8172] delete_channel: no stack [ 560.060216][ T5946] dvb-usb: bulk message failed: -22 (3/0) [ 560.080207][ T5946] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 560.138993][ T5946] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 560.232819][ T5946] usb 2-1: media controller created [ 560.254826][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.344877][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 560.359007][ T5946] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 560.411362][ T5946] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 560.423214][ T5954] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 560.439551][ T5954] usb 5-1: USB disconnect, device number 24 [ 560.548905][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 560.598765][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.688053][ T5946] dvb-usb: schedule remote query interval to 150 msecs. [ 560.697886][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.716713][ T5946] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 560.874677][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 560.882682][ T5946] dvb-usb: error while querying for an remote control event. [ 561.052609][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 561.059309][ T5946] dvb-usb: error while querying for an remote control event. [ 561.302566][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 561.309216][ T5946] dvb-usb: error while querying for an remote control event. [ 561.498676][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 561.504927][ T9] dvb-usb: error while querying for an remote control event. [ 561.654295][ T9] usb 2-1: USB disconnect, device number 21 [ 561.810615][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 561.929906][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.522'. [ 562.227074][ T5946] usb 1-1: USB disconnect, device number 30 [ 562.687749][ T8194] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 562.698585][ T8195] FAULT_INJECTION: forcing a failure. [ 562.698585][ T8195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.734947][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.0.526 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 562.734974][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.734985][ T8195] Call Trace: [ 562.734991][ T8195] [ 562.734998][ T8195] dump_stack_lvl+0x189/0x250 [ 562.735021][ T8195] ? __pfx____ratelimit+0x10/0x10 [ 562.735038][ T8195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.735055][ T8195] ? __pfx__printk+0x10/0x10 [ 562.735076][ T8195] ? __might_fault+0xb0/0x130 [ 562.735104][ T8195] should_fail_ex+0x414/0x560 [ 562.735124][ T8195] _copy_from_user+0x2d/0xb0 [ 562.735146][ T8195] ___sys_sendmsg+0x158/0x2a0 [ 562.735162][ T8195] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.735201][ T8195] ? __fget_files+0x2a/0x420 [ 562.735214][ T8195] ? __fget_files+0x3a0/0x420 [ 562.735234][ T8195] __x64_sys_sendmsg+0x19b/0x260 [ 562.735250][ T8195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.735271][ T8195] ? __pfx_ksys_write+0x10/0x10 [ 562.735289][ T8195] ? rcu_is_watching+0x15/0xb0 [ 562.735310][ T8195] ? do_syscall_64+0xbe/0x3b0 [ 562.735330][ T8195] do_syscall_64+0xfa/0x3b0 [ 562.735346][ T8195] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.735361][ T8195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.735376][ T8195] ? clear_bhb_loop+0x60/0xb0 [ 562.735394][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.735408][ T8195] RIP: 0033:0x7ff394d8e9a9 [ 562.735422][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.735435][ T8195] RSP: 002b:00007ff395be9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.735451][ T8195] RAX: ffffffffffffffda RBX: 00007ff394fb5fa0 RCX: 00007ff394d8e9a9 [ 562.735461][ T8195] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000c [ 562.735470][ T8195] RBP: 00007ff395be9090 R08: 0000000000000000 R09: 0000000000000000 [ 562.735480][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.735488][ T8195] R13: 0000000000000000 R14: 00007ff394fb5fa0 R15: 00007ff3950dfa28 [ 562.735509][ T8195] [ 562.740929][ T5975] usb 3-1: USB disconnect, device number 23 [ 562.985380][ T8194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.037366][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.045315][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.107769][ T8197] bond2: (slave geneve2): making interface the new active one [ 563.163151][ T8197] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 563.417486][ T5975] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 563.471849][ T8210] wireguard0: entered promiscuous mode [ 563.477511][ T8210] wireguard0: entered allmulticast mode [ 563.626531][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 563.709231][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 563.733915][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 563.758570][ T5975] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 563.878704][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.913635][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 563.958067][ T5975] usb 3-1: config 0 descriptor?? [ 563.963259][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 564.121279][ T9] usb 1-1: config 0 has no interface number 0 [ 564.206905][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 564.216140][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.267720][ T9] usb 1-1: Product: syz [ 564.323823][ T9] usb 1-1: Manufacturer: syz [ 564.328495][ T9] usb 1-1: SerialNumber: syz [ 564.346208][ T5975] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 564.454220][ T5975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 564.466774][ T9] usb 1-1: config 0 descriptor?? [ 564.497058][ T9] smsc95xx v2.0.0 [ 564.503278][ T5975] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 564.511916][ T5975] usb 3-1: media controller created [ 564.596472][ T5975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.670390][ T5975] az6027: usb out operation failed. (-71) [ 564.689690][ T5975] az6027: usb out operation failed. (-71) [ 564.701765][ T5975] stb0899_attach: Driver disabled by Kconfig [ 564.730584][ T5975] az6027: no front-end attached [ 564.730584][ T5975] [ 564.759878][ T5975] az6027: usb out operation failed. (-71) [ 564.773985][ T5975] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 564.804089][ T5975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 564.836140][ T5975] dvb-usb: schedule remote query interval to 400 msecs. [ 564.910664][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 564.921907][ T5975] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 564.992535][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 565.009663][ T5975] usb 3-1: USB disconnect, device number 24 [ 565.149589][ T5975] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 565.274908][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 565.339397][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 565.394013][ T9] usb 1-1: USB disconnect, device number 31 [ 565.598516][ T5962] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 565.826461][ T8241] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 565.886531][ T5962] usb 5-1: config 4 has an invalid interface number: 196 but max is 0 [ 565.897332][ T5962] usb 5-1: config 4 has no interface number 0 [ 565.910997][ T5962] usb 5-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 566.287988][ T5962] usb 5-1: config 4 interface 196 has no altsetting 0 [ 566.297632][ T5962] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 566.319020][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.333685][ T5962] usb 5-1: Product: syz [ 566.337927][ T5962] usb 5-1: Manufacturer: syz [ 566.344254][ T5962] usb 5-1: SerialNumber: syz [ 566.460687][ T8229] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 566.510297][ T5962] keyspan 5-1:4.196: Keyspan 1 port adapter converter detected [ 566.543166][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 84 [ 566.588799][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 81 [ 566.602558][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 1 [ 566.641318][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 2 [ 566.669977][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 83 [ 566.702698][ T5962] keyspan 5-1:4.196: found no endpoint descriptor for endpoint 3 [ 566.712879][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 566.741853][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 566.758692][ T8253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.541'. [ 566.767799][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 566.777742][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 566.797872][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'. [ 566.800981][ T5962] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 566.840861][ T5962] usb 5-1: USB disconnect, device number 25 [ 566.873955][ T5962] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 566.898621][ T5962] keyspan 5-1:4.196: device disconnected [ 567.572565][ T5962] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 567.732523][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 567.835560][ T5962] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 567.918561][ T5954] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 568.019688][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.041523][ T5962] usb 2-1: config 0 descriptor?? [ 568.172490][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 568.267797][ T5962] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 568.363208][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 568.387079][ T5962] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 568.396973][ T5962] usb 2-1: media controller created [ 568.455313][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.541574][ T5962] az6027: usb out operation failed. (-71) [ 568.585154][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 568.585207][ T30] audit: type=1326 audit(1753628774.311:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff394d8e9a9 code=0x7ffc0000 [ 568.623106][ T30] audit: type=1326 audit(1753628774.321:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff394d8e9a9 code=0x7ffc0000 [ 568.646108][ T5962] az6027: usb out operation failed. (-71) [ 568.652565][ T5962] stb0899_attach: Driver disabled by Kconfig [ 568.659039][ T5962] az6027: no front-end attached [ 568.659039][ T5962] [ 568.667554][ T30] audit: type=1326 audit(1753628774.321:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff394d8e9a9 code=0x7ffc0000 [ 568.690417][ T5962] az6027: usb out operation failed. (-71) [ 568.773584][ T5962] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 568.788714][ T5962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 568.806411][ T30] audit: type=1326 audit(1753628774.321:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8271 comm="syz.0.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff394d8e9a9 code=0x7ffc0000 [ 568.848170][ T5962] dvb-usb: schedule remote query interval to 400 msecs. [ 568.863825][ T5962] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 568.888300][ T5962] usb 2-1: USB disconnect, device number 22 [ 569.031547][ T5962] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 569.413979][ T8281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.548'. [ 571.070028][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 571.083435][ T5954] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 571.091048][ T5954] usb 5-1: can't read configurations, error -71 [ 571.880150][ T8308] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 572.452721][ T5975] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 572.629189][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.644414][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.671626][ T5975] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 572.682716][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 572.692886][ T5975] usb 2-1: SerialNumber: syz [ 572.957259][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.969001][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.997751][ T8341] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 574.458906][ T8348] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 575.202483][ T5961] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 575.380962][ T8363] usb usb8: usbfs: process 8363 (syz.0.567) did not claim interface 0 before use [ 576.012773][ T5946] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 576.182983][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 576.299073][ T5946] usb 1-1: Using ep0 maxpacket: 16 [ 576.344531][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.408063][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 576.475041][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.529993][ T5946] usb 1-1: Product: syz [ 576.553567][ T5946] usb 1-1: Manufacturer: syz [ 576.558388][ T5946] usb 1-1: SerialNumber: syz [ 576.634458][ T5946] usb 1-1: config 0 descriptor?? [ 576.670786][ T5961] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.724973][ T5946] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 576.731317][ T5946] gspca_stv06xx: st6422 sensor detected [ 576.862494][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.869380][ T5961] usb 5-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 576.878622][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.889769][ T5961] usb 5-1: config 0 descriptor?? [ 577.289267][ T8372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.347164][ T8372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.455592][ T5961] hid_mf 0003:0079:1844.0003: hidraw0: USB HID v1.00 Device [HID 0079:1844] on usb-dummy_hcd.4-1/input0 [ 577.492591][ T5961] hid_mf 0003:0079:1844.0003: Invalid report, this should never happen! [ 577.512452][ T5961] hid_mf 0003:0079:1844.0003: Force feedback init failed. [ 577.934982][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 577.993380][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 578.031290][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 578.096631][ T5975] usb 2-1: 0:2 : does not exist [ 578.101665][ T5975] usb 2-1: unit 5 not found! [ 578.127174][ T5975] usb 2-1: USB disconnect, device number 23 [ 578.400917][ T2152] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 578.456022][ T6821] udevd[6821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.596301][ T9] usb 5-1: USB disconnect, device number 28 [ 578.678769][ T2152] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 578.680769][ T8377] fido_id[8377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 579.124557][ T5946] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 579.136986][ T2152] usb 4-1: USB disconnect, device number 18 [ 579.221236][ T5946] usb 1-1: USB disconnect, device number 32 [ 579.547091][ T8389] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 580.438219][ T8396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.576'. [ 580.917994][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 580.927115][ T2152] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 581.073193][ T5961] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 581.437942][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.462314][ T2152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.534059][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.571395][ T2152] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 581.603166][ T5961] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.622234][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.637744][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 581.675303][ T5961] usb 1-1: SerialNumber: syz [ 581.697351][ T2152] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 581.778610][ T2152] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 581.971745][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.984502][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.114910][ T2152] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 582.169610][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 582.228304][ T2152] usb 2-1: Product: syz [ 582.242258][ T2152] usb 2-1: Manufacturer: syz [ 582.259428][ T2152] usb 2-1: SerialNumber: syz [ 582.338707][ T2152] usb 2-1: config 0 descriptor?? [ 582.865646][ T2152] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 582.878292][ T2152] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 583.080519][ T2152] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 583.113705][ T2152] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 583.181300][ T2152] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 583.281624][ T2152] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 583.891523][ T8429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.762808][ T2152] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 584.774216][ T2152] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 585.212512][ T6028] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 585.291688][ T5961] usb 1-1: 0:2 : does not exist [ 585.307442][ T9] usb 2-1: USB disconnect, device number 24 [ 585.332299][ T5961] usb 1-1: unit 5 not found! [ 585.372906][ T6028] usb 4-1: Using ep0 maxpacket: 8 [ 585.388529][ T6028] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 585.414329][ T6028] usb 4-1: config 0 has no interface number 0 [ 585.426617][ T5961] usb 1-1: USB disconnect, device number 33 [ 585.452352][ T6028] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 585.496121][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.552009][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.576849][ T6028] usb 4-1: Product: syz [ 585.610306][ T6028] usb 4-1: Manufacturer: syz [ 585.624172][ T6028] usb 4-1: SerialNumber: syz [ 585.647249][ T6028] usb 4-1: config 0 descriptor?? [ 585.867919][ T8428] ------------[ cut here ]------------ [ 585.873763][ T8428] WARNING: CPU: 1 PID: 8428 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 585.882789][ T8428] Modules linked in: [ 585.886956][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.4.583 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 585.898892][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.908999][ T8428] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 585.914787][ T8428] Code: ff 4c 89 ff be 03 00 00 00 e8 52 30 00 03 e9 eb fa ff ff e8 e8 73 ad 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 9e 8c ad 09 89 c0 48 c7 c7 68 57 a0 92 48 03 3c c5 70 [ 585.934458][ T8428] RSP: 0018:ffffc9001c987290 EFLAGS: 00010002 [ 585.940593][ T8428] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 585.948611][ T8428] RDX: 0000000000030000 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 585.956635][ T8428] RBP: ffffc9001c9874f0 R08: ffffc9001c987010 R09: 0000000000000020 [ 585.964653][ T8428] R10: dffffc0000000000 R11: ffffffff819eabf0 R12: ffff8880b8728768 [ 585.972678][ T8428] R13: ffffffff81c03087 R14: ffff888026b50000 R15: 0000000000000000 [ 585.980697][ T8428] FS: 00007f31da4856c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 585.989679][ T8428] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.996305][ T8428] CR2: 00007f256d9cceb8 CR3: 0000000059a04000 CR4: 00000000003526f0 [ 586.004330][ T8428] Call Trace: [ 586.007651][ T8428] [ 586.010628][ T8428] ieee80211_rx_list+0x53a/0x2d80 [ 586.015721][ T8428] ? __d_instantiate+0x197/0x740 [ 586.020732][ T8428] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 586.026247][ T8428] ? __lock_acquire+0xab9/0xd20 [ 586.031154][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.036230][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.041304][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.047258][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.052334][ T8428] ieee80211_rx_napi+0x1a8/0x3d0 [ 586.057328][ T8428] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 586.062846][ T8428] ? skb_dequeue+0x10e/0x150 [ 586.067498][ T8428] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 586.073543][ T8428] ? ieee80211_stop_device+0x29/0xf0 [ 586.078885][ T8428] ieee80211_stop_device+0x3e/0xf0 [ 586.084059][ T8428] ieee80211_do_stop+0x17dd/0x1fa0 [ 586.089235][ T8428] ? __lock_acquire+0xab9/0xd20 [ 586.094159][ T8428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.099590][ T8428] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 586.105106][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.111053][ T8428] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.116311][ T8428] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 586.122663][ T8428] ? wiphy_work_cancel+0x1eb/0x3c0 [ 586.127829][ T8428] ieee80211_stop+0x1b1/0x220 [ 586.132612][ T8428] ? __pfx_ieee80211_stop+0x10/0x10 [ 586.137860][ T8428] __dev_close_many+0x364/0x6f0 [ 586.142744][ T8428] ? __pfx___dev_close_many+0x10/0x10 [ 586.148137][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.154056][ T8428] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.159296][ T8428] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 586.165247][ T8428] dev_close_many+0x225/0x410 [ 586.169968][ T8428] ? __pfx_dev_close_many+0x10/0x10 [ 586.175208][ T8428] ? __mutex_lock+0xa6d/0xe80 [ 586.179918][ T8428] netif_close+0x158/0x210 [ 586.184358][ T8428] ? __pfx_netif_close+0x10/0x10 [ 586.189318][ T8428] ? __pfx___mutex_lock+0x10/0x10 [ 586.194367][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.200278][ T8428] dev_close+0x10a/0x220 [ 586.204554][ T8428] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 586.210731][ T8428] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 586.216914][ T8428] cfg80211_rfkill_set_block+0x2d/0x50 [ 586.222400][ T8428] rfkill_set_block+0x1d2/0x440 [ 586.227289][ T8428] rfkill_fop_write+0x44b/0x570 [ 586.232159][ T8428] ? common_file_perm+0x199/0x200 [ 586.237205][ T8428] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.242597][ T8428] ? security_file_permission+0x40/0x290 [ 586.248261][ T8428] ? rw_verify_area+0x258/0x650 [ 586.253133][ T8428] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.258529][ T8428] vfs_write+0x27b/0xa90 [ 586.262807][ T8428] ? __pfx_vfs_write+0x10/0x10 [ 586.267596][ T8428] ? __fget_files+0x2a/0x420 [ 586.272239][ T8428] ? __fget_files+0x2a/0x420 [ 586.276870][ T8428] ? __fget_files+0x3a0/0x420 [ 586.281583][ T8428] ? __fget_files+0x2a/0x420 [ 586.286206][ T8428] ksys_write+0x145/0x250 [ 586.290575][ T8428] ? __pfx_ksys_write+0x10/0x10 [ 586.295456][ T8428] ? rcu_is_watching+0x15/0xb0 [ 586.300260][ T8428] ? do_syscall_64+0xbe/0x3b0 [ 586.304988][ T8428] do_syscall_64+0xfa/0x3b0 [ 586.309518][ T8428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.315631][ T8428] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.321799][ T8428] ? clear_bhb_loop+0x60/0xb0 [ 586.326505][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.332424][ T8428] RIP: 0033:0x7f31d958e9a9 [ 586.336856][ T8428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.356480][ T8428] RSP: 002b:00007f31da485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.364919][ T8428] RAX: ffffffffffffffda RBX: 00007f31d97b6160 RCX: 00007f31d958e9a9 [ 586.372910][ T8428] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 586.380896][ T8428] RBP: 00007f31d9610d69 R08: 0000000000000000 R09: 0000000000000000 [ 586.388884][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.396877][ T8428] R13: 0000000000000000 R14: 00007f31d97b6160 R15: 00007f31d98dfa28 [ 586.404881][ T8428] [ 586.407931][ T8428] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 586.415251][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.4.583 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 586.427156][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.437224][ T8428] Call Trace: [ 586.440542][ T8428] [ 586.443488][ T8428] dump_stack_lvl+0x99/0x250 [ 586.448101][ T8428] ? __asan_memcpy+0x40/0x70 [ 586.452711][ T8428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.457937][ T8428] ? __pfx__printk+0x10/0x10 [ 586.462563][ T8428] panic+0x2db/0x790 [ 586.466491][ T8428] ? __pfx_panic+0x10/0x10 [ 586.470941][ T8428] __warn+0x31b/0x4b0 [ 586.474940][ T8428] ? kcov_remote_start+0x55a/0x7f0 [ 586.480077][ T8428] ? kcov_remote_start+0x55a/0x7f0 [ 586.485221][ T8428] report_bug+0x2be/0x4f0 [ 586.489569][ T8428] ? kcov_remote_start+0x55a/0x7f0 [ 586.494706][ T8428] ? kcov_remote_start+0x55a/0x7f0 [ 586.499882][ T8428] ? kcov_remote_start+0x55c/0x7f0 [ 586.505020][ T8428] handle_bug+0x84/0x160 [ 586.509288][ T8428] exc_invalid_op+0x1a/0x50 [ 586.513809][ T8428] asm_exc_invalid_op+0x1a/0x20 [ 586.518679][ T8428] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 586.524422][ T8428] Code: ff 4c 89 ff be 03 00 00 00 e8 52 30 00 03 e9 eb fa ff ff e8 e8 73 ad 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 9e 8c ad 09 89 c0 48 c7 c7 68 57 a0 92 48 03 3c c5 70 [ 586.544042][ T8428] RSP: 0018:ffffc9001c987290 EFLAGS: 00010002 [ 586.550130][ T8428] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 586.558114][ T8428] RDX: 0000000000030000 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 586.566098][ T8428] RBP: ffffc9001c9874f0 R08: ffffc9001c987010 R09: 0000000000000020 [ 586.574082][ T8428] R10: dffffc0000000000 R11: ffffffff819eabf0 R12: ffff8880b8728768 [ 586.582070][ T8428] R13: ffffffff81c03087 R14: ffff888026b50000 R15: 0000000000000000 [ 586.590065][ T8428] ? kcov_remote_start+0x97/0x7f0 [ 586.595122][ T8428] ? __pfx_hlock_conflict+0x10/0x10 [ 586.600355][ T8428] ieee80211_rx_list+0x53a/0x2d80 [ 586.605404][ T8428] ? __d_instantiate+0x197/0x740 [ 586.610450][ T8428] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 586.615925][ T8428] ? __lock_acquire+0xab9/0xd20 [ 586.620795][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.625836][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.630878][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.636792][ T8428] ? ieee80211_rx_napi+0xca/0x3d0 [ 586.641829][ T8428] ieee80211_rx_napi+0x1a8/0x3d0 [ 586.646787][ T8428] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 586.652263][ T8428] ? skb_dequeue+0x10e/0x150 [ 586.656880][ T8428] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 586.662892][ T8428] ? ieee80211_stop_device+0x29/0xf0 [ 586.668201][ T8428] ieee80211_stop_device+0x3e/0xf0 [ 586.673339][ T8428] ieee80211_do_stop+0x17dd/0x1fa0 [ 586.678470][ T8428] ? __lock_acquire+0xab9/0xd20 [ 586.683355][ T8428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 586.688756][ T8428] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 586.694238][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.700173][ T8428] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.705390][ T8428] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 586.711753][ T8428] ? wiphy_work_cancel+0x1eb/0x3c0 [ 586.716912][ T8428] ieee80211_stop+0x1b1/0x220 [ 586.721635][ T8428] ? __pfx_ieee80211_stop+0x10/0x10 [ 586.726874][ T8428] __dev_close_many+0x364/0x6f0 [ 586.731760][ T8428] ? __pfx___dev_close_many+0x10/0x10 [ 586.737160][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.743074][ T8428] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.748294][ T8428] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 586.754209][ T8428] dev_close_many+0x225/0x410 [ 586.758917][ T8428] ? __pfx_dev_close_many+0x10/0x10 [ 586.764136][ T8428] ? __mutex_lock+0xa6d/0xe80 [ 586.768837][ T8428] netif_close+0x158/0x210 [ 586.773277][ T8428] ? __pfx_netif_close+0x10/0x10 [ 586.778234][ T8428] ? __pfx___mutex_lock+0x10/0x10 [ 586.783308][ T8428] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 586.789252][ T8428] dev_close+0x10a/0x220 [ 586.793536][ T8428] cfg80211_shutdown_all_interfaces+0xbb/0x1d0 [ 586.799716][ T8428] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 586.805896][ T8428] cfg80211_rfkill_set_block+0x2d/0x50 [ 586.811375][ T8428] rfkill_set_block+0x1d2/0x440 [ 586.816246][ T8428] rfkill_fop_write+0x44b/0x570 [ 586.821114][ T8428] ? common_file_perm+0x199/0x200 [ 586.826158][ T8428] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.831549][ T8428] ? security_file_permission+0x40/0x290 [ 586.837208][ T8428] ? rw_verify_area+0x258/0x650 [ 586.842086][ T8428] ? __pfx_rfkill_fop_write+0x10/0x10 [ 586.847479][ T8428] vfs_write+0x27b/0xa90 [ 586.851754][ T8428] ? __pfx_vfs_write+0x10/0x10 [ 586.856540][ T8428] ? __fget_files+0x2a/0x420 [ 586.861235][ T8428] ? __fget_files+0x2a/0x420 [ 586.865839][ T8428] ? __fget_files+0x3a0/0x420 [ 586.870529][ T8428] ? __fget_files+0x2a/0x420 [ 586.875139][ T8428] ksys_write+0x145/0x250 [ 586.879517][ T8428] ? __pfx_ksys_write+0x10/0x10 [ 586.884418][ T8428] ? rcu_is_watching+0x15/0xb0 [ 586.889227][ T8428] ? do_syscall_64+0xbe/0x3b0 [ 586.893953][ T8428] do_syscall_64+0xfa/0x3b0 [ 586.898544][ T8428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.904643][ T8428] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 586.910835][ T8428] ? clear_bhb_loop+0x60/0xb0 [ 586.915543][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.921462][ T8428] RIP: 0033:0x7f31d958e9a9 [ 586.925908][ T8428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.945549][ T8428] RSP: 002b:00007f31da485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.953997][ T8428] RAX: ffffffffffffffda RBX: 00007f31d97b6160 RCX: 00007f31d958e9a9 [ 586.961990][ T8428] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 586.970005][ T8428] RBP: 00007f31d9610d69 R08: 0000000000000000 R09: 0000000000000000 [ 586.978005][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.985999][ T8428] R13: 0000000000000000 R14: 00007f31d97b6160 R15: 00007f31d98dfa28 [ 586.994052][ T8428] [ 586.997442][ T8428] Kernel Offset: disabled [ 587.001793][ T8428] Rebooting in 86400 seconds..