last executing test programs: 44m19.30571041s ago: executing program 3 (id=70): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) userfaultfd(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdir(0x0, 0x101) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async, rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x1e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) (async, rerun: 64) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0xc000}}) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (rerun: 64) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/12) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 44m17.349688355s ago: executing program 3 (id=74): socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x5) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) 44m12.777443298s ago: executing program 3 (id=84): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a0101000000000000000000000000000000000020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r6, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}}, 0x800) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r16 = dup(r15) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r16, 0xae41, 0x2) 44m11.796166268s ago: executing program 3 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x2, 0x0, 0x7, 0xffff0000}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x3, 0x5, 0x15, 0x3a}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 44m10.579575609s ago: executing program 3 (id=95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x141800, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x24, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x24, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000000000000) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002000000000000000000007f00ec97630000f1ffffff"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0x5, {0x5, 0xfffffff9, 0x2, 0x2}}) (async) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0x5, {0x5, 0xfffffff9, 0x2, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x48044) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000300000024000180060005004e230000060001000200000008000300ac1414aa080006"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) (async) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f00000000c0)={0x0, 0x0, r10, r11, 0x93, 0x8, 0x9, 0x80, {0x8, 0x0, 0x3, 0x4, 0x4, 0x5, 0xe, 0x3, 0x6, 0x3a, 0x4, 0x7, 0x5, 0xff, "e277757ff8f6376a2bea41916e6b67ed3b8680c42ded88c143ad5fd3d8c7ff15"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 44m10.196048444s ago: executing program 3 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x58, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r10 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r10, 0x0, 0x0, 0x40) sendfile(r4, r10, 0x0, 0x10ffff) getsockname$packet(r3, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="000002000000000008001d00ca0e00000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0x20020041) 43m55.119950772s ago: executing program 32 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c00)={0x58, 0x2, 0x6, 0x301, 0xe4340000, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r10 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r10, 0x0, 0x0, 0x40) sendfile(r4, r10, 0x0, 0x10ffff) getsockname$packet(r3, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r11, @ANYRESHEX=r11, @ANYBLOB="000002000000000008001d00ca0e00000a0001"], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0x20020041) 38m57.237593801s ago: executing program 4 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x1c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_delroute={0x40, 0x19, 0x905, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x14, 0x2, 0xfe, 0x4, 0x36, 0x3, 0x1100}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7}}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x20, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x24000000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) gettid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76df434e4ec536c04816b127eb525176f5737b934b37a9d109ea3aa64d0fb30013becb29f6a39d4cbdbc4e2540996ed75b90498301c99df853d4baac4654e6f1a06cf03a87aa2d2d74199bcafa0dc84a8ea112fba51687b8727bb905c7b42a0c9b26559b4ecc397c6a33731df0fca1aee35968435e8129f8e6d52a0754fcaa693706c4557af6be8821983e702fdd3dac90b6cbe00b1fe59f5bcd890dbb87c0d8d80ba8727e4ff6b89af3ecda43705a9dc113396c950947e85193eabe1364909509babcad37d21392d071480ff4f69dc5db442263d4608ff94e5157c65bb35c3f4a7af6bfb562a317cf13292abdbd5ac3f31d47da6fe5e8be324c78b37e2f351955bbf5f18f86a0cd98d68dca14aea59917ce05e0dc0e3a2033d22a506109db846c49f8c7d575c02349736311e40bc497c9a7da1fe4f94d8e601a5cff4cbd63ed730a01c7f07dd74d603b951557b93e551b0e028232412d568dadc29c2c9e01ca85b83d779cd3b918f9c73ba471ee9079fc42b511b45c3d4f80a46f8e9ad22a05ef5422348ff415b2131e2b2ae0ef5fab9f678bc5ef02d611655d6264e0755e176ade135a971851bd22666ae753ff5135bf14a005cea45a8b163706ea52af786f2b48362ec8619f8f728ab9fee21bcc9e000d1c470a51cec5a510f06de4dc52fc82e0be10fe0ac55f09e086cdb7f5d5f935033e4925a6ca1b1ea42f511dafd63a3cc32bcfe20aca26adb6eded22fc956b96cf2b70b5e78dbf4c2da06438c9be342f44f1dbc9bc4e453bad09f8e7d2b611e9f33f681c4342e31fee49d613b170d9ae6c93c7ece1bf0d8aaf00870b6896b8fee4ee9d705608a044ec3537ae6c46b5345e4c41576911757d4ed5bdee8e14f73df14b88af36b4c303346d88b424fea428c77cabc55198fafbcec9b027f9a9759638d733fe2dec7996ddba717fd7e0f0188f9213701c304a2b01186c72a8cfdcb87dd9c8711ec0c438eb7c229b8dfbec5c14bfeec20810b4be8944f7d6f44e5bb8839b84afe25a8654ac821efb9c850394d452873db8e9f05de381103b1278f3b34ec0b920d3aa111c82fe424588debe04dd75ac991c5f650f0b8e72c1783d975d663fc0d939f32bca98650141b381af26436c6352d98a6e30843d956ad68f998851b8c64c49a59ca6937355ac4412009cd0a2e4cacf5b02063908f7937e7563e6f63703adc5aff159f3628eb64071fc74e4e66e142113a176c2a649d653f55e833a3f184f91995547a79f46c7ca02813136c920fe6f69fe466656518478ccb84c02d751a502dff90558ce066d9be71c8fa800d7a1d56b5ca52be3122aae2cfbfe1b11d454ad72bdf7fd9d450a74734594f5e566ac2a37ca8b648fee012bf7f83f1126743b0f4791592e17dfca010a3dafeac81b88c5a47d948fc772fe4b48146b10aa319a13ca4f4dc05861859929d3c1d69967d18290cc87777a4231a6ce8dc2a4e34450e3a7659c05e5e12239d768ef8394f82278b975a68497571d1e5191ac329a66b5219f3f7f20f21261cdc3028a3662b6c10198bf7d3d513b5b823d4703cb29d89b84da69a6358a269769a8b23712c6291e77fc4da837e0857b4bbc08bba0659c55a1e06fdf1736df13948824a37515f8c49de6d502519077197debfc74709ed564315279ec804c7a0305526b14efcab44364105aa805efd97f0444d6016e35712dba75b038ea63917e6163614a3a6c694d7612e00cddab8bd31f6ba146d08e949d50ed3b0ef8fd3412ffd020bfabbcfbc5c3fa436022de3fd973869066871ec639653f3b4b5f01374adf3b60940d241a5dda6df550662ccb1a4575e2419baf1a76a246c9b7f39a05c03d832aa28293a54c619865fed0fdccd570859ffc7b1844ea8cff1e12389382e39211e665fec9d82faf11fd2300412d24dab176515aff938a6b12b5427b7fa6b42a3042248977b2f4eae9d96534a85b9ed500f62866d39f5301a3b6e60d392248fcfad25c2803c875e00010f40caca1a5932e00765c3b52427a2a8d6875a73ccb3b8e78dd27555994bf4358b2e577efe8886939515be37889e3656a5e0a949619f0f0b9cae7dc59a2415bec72df3439e563cfe69b7952abfad6cb6a979c146355e590ace810017d04075f23a1554a81bcdfb82c2396fd61fe95cd0f9c2e394bdbb0900648675ec09b94b1d4672e613be577cb398bb5d188b7c09865e2edbb273f8d9b0ae836f24b34ae6cd22e37e1ab31c835c23bd8f6deb49402f19406b0c7cddfbe357ab496910a8efa939dd9ab91de3ba67d07103063fbf9ee6fbd7b61c6b65ebe735cfab2c1162b379a3cbcbdb14d82b7f2e707ddd896ac5085ef5b15da85663df079bd5ef6180c775a4b7d645630aa9ea704f69ec8ea052f8f41e62f0e6f78a5a846e9130c53eb29a7bab9b102bf08729243f6ffe0ee6f28e98e4d0c1f49813aa04c2774f1f076310d923e900fe1c609bc5a308421fb82a12b03b9be47ce6d88635bb1722739d1abcdbc28133de131d2151d76f565be56813bb3edcf4d870f4acd0bfe5b30d60ef065158bf7b8401096a1647de88c7b0144eacecabfdf9d48d91573e82f2efecab095339e799e36ab3ee1eb66db9f9c21d96bcb2b7bf4ab01e8e56df8c4bca2bed7732472468a3b447024bc997adff639ba35e2af10f661199c4a8a2b2a8e3e59ff4ed5da468c1c2c41001efc0529636ce4ef9dd6b28deed0ad5a758abd2a3a3f024f56dd17fb4b1af62a6b91f24973071a9982df0047f85280f4a5decece67fc02428f830343e910fef6f3467c9d7776a06c133a50752cff4aa72bcbb9e4dbd8489e2e3698aae45a8753071fb6d803943d171adb60e8fcec9865e46df8fa120b939537a05b63daec7e0ecf9713c491646f04435364de697fbabf3c72d08a24f1bf34212bcdb7d5e038ac28ff76d5243b695e7faa1211a940da618930d79acdc6fdc7c9f2f4a5435d3f748ec68429f5ca2548315801cf73d74816f1ece3dfa6fb557ac105ad28d4532e1c8c6b5ab3526fbe73916dbe123acb4ac89c1b5a0664b81e216453db066e3c4318006ba3e25ed6cfe22c80f17619b7372947013749c7d04f13277f81f4461492d9237c5961be4d30965607a4d5db095070df02230cc87d9ab8633e60de83aedf8814e632bac8566bbfcdf159c9a2a7944be1a61792b8af10dd28d0ebadf7e4f231af099450813c5e27f934112e11124b01106615cee48aee88947f31a1839b83ad5c8326e30f318ae57b56becaec7094c4e7d2a377bfcb0c29ce046623e6ec120ea63c53cef94deb3d813d4b1749009084c3ade1675b55490b9d1faa03d7a2fd34921d62c31d7ef1f181883ac312dbb08b2600edce0ba197d1704485e2f155ec659de742a22628270968905324381f203a1ad7ac30b252d4c3ff9915fe32c16cbf4684a7c517b9a2ecec2433685f4741b6f02f8aa2bd0f6bf370962f38214899129012a0d36ba14c0a3e93742d063f09f0c1e838fc1095b065089c91d02a4b2e1d0a49d2294682a38d578424d1e81ff959b33f746114b795319a047d65f5e3b7a347e6cf8b0fad9eaea3db5eca7e953f77bc6c23de8f938bb505013f5c39173cb69312af98d5ff14715794c729f41490297c2b418eef11841a788eaaa7ebdb77880b64701aee50371f542e79831321833dda60213fa741ec197419d83f61c06397a47a75f50b986c53e6fdf8a6e07008e1a29b1774ceb11429a1ecec05bf80da802239c58f226ab5eb34d522ff62bc0528d87e716793e56c48352648291470bb592981acc06c2ba1547e11babf3f1d22f5e01e1f759c05816cdfe0c986c58ebbd08d8449807cd2579d5b7265930f696f8aff73e247cec12c0d1fdbcc4880245b866c2cab8b6bdf0951c2c6beccab7513ba28545036d164b407e1228a831e3b37f9c56721c347d499c1c29b8a972d2d1cfeb47f20975b4eb0b62e25dfa4ef116e62e415cde22bc039d1ccb9e70a5599881bb8b61f680670b787afc8734ac8c39ca50fbed619e54ac1421bc2584d4f7027593e12f738ba0f2d5fe03fcc7168056332477eb0b26c0579d54d8537f941acc183fdca495a7ffa10f0d3189f8c32742d5564c97e26b659969f7060a7c8864445c252c5b1755a3e8473ef9b0909eb74cabb553c3d6ab58f12ed75703d9139a4f57ef71af90815a5273e64282582623c41c51352d12ce48e0712f50ab3dc528619e1e16b52452204b3c7e1e16556e8fbdf0d623216186ff5ca84ad730ff457b06e766e085d5dee40a308fae8b4e19e18245a3ed02967f07441903c149ae9da5fe238194009ded2a3d80a67e1c3abdfb63fad0155529c48a748ef499252d5d3e912304b1d11ee77dc25427e5e9a115583a692558aef65faba0e1f0bc4aa6b6ac21d4fe4741feac17a7c6b5699384e30f7236f400d9df6d658add13b4f0a4b16a77d1f9e6b4d3045f7ba7ee68ce171008e635496ad631f59846b7895aa329390d2ad9980b6586d383a740f1e1b0883a3fddc4126c2d09fd5815dd892692e1c3b7eb2951b766bd4bca19896f75dbfaf51ad4ca9f97d00049082091e3c6cdf16026b1de4603ac7afde08a7a8ffd110636d3d063c2bb6fa84bfd7fff8ad04d0c812fe14a77bd3a9b9fdcc3e0fbaf5ac2475130987f81ac8c9898f95112aa597f40ec11e04684e45b56d81e11180f59b606886306fbc62c076a12a41238ccd74d3154f312f10f3ad215d64a468cb15eae30a3f7f7e5cf6a87dbd813df8093d2b3586693ddee6a5c1b0caaec1ef419657b89692bbd2a7064767cf5b4c3ef6d120557b4df5e7ee6094f935870edc070ae3e96c850a61356c5d79008fc98728dd87470a98aa1c1ab6056990110c0b3108e50b573d77ad4856c03da8098c8fd176685803db471a642dfb9a9ef2d14e186eea96219ea0fa03cc28d7ea2686e61c3f46f15c23213a6432d77ffea182ec26dbf9118a2fc082bdee517e0974982819a7a996b7a30f5901dd3c44b3344bdf93a61ecc4cddb969d3b94e6f4910a9b38ff886d5c96a820092f112ee6eb0ce094940280a2040862157497b3a3374a4d62c34d1fdf6826811db1ea7f28b64f22304e2246dcee44ca361370c0d1727f951dbdb1a329368a5dd76ba4486ce508a28d0ce2eb95daab36caf101dc2351c4efdf3ec70221888dad522b0d51a0b9765a410ca8cf00baaeb074d310cdd908e76586e59d0c7c27eb5557e474ac54525c237d5b2eedccab12b0f96fa2c00239e2017dfeb645fdd748d5c21684181b81464d32909b4995f274a9717f224c1e34cd41c8d12b9f13daeae3f65510c6ecf94956d630db0478fbf87c7d7c75221046a1a1886696f89e427b94139164b99b88d83b633122b5d9483f4261be27d01d6011cee48b1c24a3aff62c4d04f9dfb00e1a7a1013f97e87306147b7da305a36077cf0a7618563a754e34e65c2ee95932eb2da4b73ca83f3afcce93d8d59357ca7b5d9f37e5ba475be39bb8870af109d95527b44777ff8f55ace0adf84f73ce065371a4ce78b22d7a6bbf1bbae4c57b44262ddff39f4ce8b858f89737f33786445cbaf271959da24"}}}}, 0xfce) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) 38m56.679297353s ago: executing program 4 (id=1064): fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2f6, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be71b608fd0b0e0114e80102030109022400010200100109048a0202e70041a28e09022300020200000905070e0002000000"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socketpair(0x1a, 0x800, 0x7ff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x81}}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) 38m52.290076729s ago: executing program 4 (id=1078): syz_usb_connect(0x5, 0x2d, &(0x7f0000001dc0)={{0x12, 0x1, 0x200, 0xc4, 0xad, 0x6b, 0x40, 0x856, 0xac30, 0xd21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x2, 0x0, 0xf7, [{{0x9, 0x4, 0x6c, 0x9, 0x1, 0x96, 0x79, 0x5c, 0x7, [], [{{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x6, 0xe, 0x7}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 38m50.664028881s ago: executing program 4 (id=1084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a020480) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000402000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r5, 0x0) fadvise64(r0, 0x76, 0x100000001, 0x2) (async) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x99, 0x10, 0x0, 0x0}], 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38m49.228176674s ago: executing program 4 (id=1091): socket$inet6(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f00000001c0)=0x40) 38m48.960303177s ago: executing program 4 (id=1092): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000008800000005000000000000000600000000000000f3ffffffffffffff010000000000000000000000000000000000000000000000000000000000000009000000ff7fffff08000000000000000c000000000000000100000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089ea00"/512]) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r5, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 38m48.169527655s ago: executing program 33 (id=1092): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) sendmsg(r1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000008800000005000000000000000600000000000000f3ffffffffffffff010000000000000000000000000000000000000000000000000000000000000009000000ff7fffff08000000000000000c000000000000000100000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089ea00"/512]) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r5, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 29m38.407028252s ago: executing program 0 (id=3026): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000332000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001080), 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40080, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x4, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x2, 0x3, 0x6c4ba42, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x8, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) (async) write$UHID_INPUT(r3, &(0x7f0000000040)={0xfc, {"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", 0x1000}}, 0x1006) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0xfffffffffffffffe, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="27462ca50d8a01d12571e749ab8befa435c3e788965d0fb88ce8a76366351fac5310c28fb62d023a32f37d0057fd5cfe8f02283d68d77fb46d2ebbfbe6816f4e5462dfd72ec6d5682d92c5a9f90083343f4e23cd1fdc4af9cf3b2ca2937256b97eebea", @ANYRES16=r7, @ANYBLOB="01002ebd7000000000001b000000"], 0x14}}, 0x0) (async) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x1a, 0x28, 0x5b1c90f1fc49f939, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0x5}, {0x7, 0xa}}}, 0x24}}, 0x0) 29m36.037077587s ago: executing program 0 (id=3037): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0xc, {"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", 0xfffffffffffffcf2}}, 0x1006) 29m35.652902441s ago: executing program 0 (id=3038): openat(0xffffffffffffffff, 0x0, 0x0, 0x23) (async) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2891f343c55442b6200000003a00010325bd7000f8ffffff0e0000000c0003000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40548d3}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 29m32.474973909s ago: executing program 0 (id=3046): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x12) (async) r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x12) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="666f9d643deb899dcc810a98fb46d91e29c3fd6266e905f4a5755e87e311afdb62d99810cabd573ca290f7bb82e8355f6b009817f86902532becf879e0392fe8e8b4e5b91b3d268fbe9c3408e89486baf8636c5c489e030008351588f23b4fc609e6e7864ca11dc05910836ff0d330d29e622f035a6446", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_emit_ethernet(0x15, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb}}}}, 0x0) (async) syz_emit_ethernet(0x15, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb}}}}, 0x0) ptrace$setregset(0x4205, r3, 0x2, &(0x7f0000000000)={0x0}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) fcntl$setlease(r0, 0x400, 0x0) (async) fcntl$setlease(r0, 0x400, 0x0) r5 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000002340), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003080)=@delchain={0x3c, 0x64, 0x10, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x6}, {0x7, 0xd}, {0xfff2, 0x1b}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 29m32.092915749s ago: executing program 0 (id=3049): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x6) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0xa, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffe0) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f0000000080)=@nfc_llcp={0x2d, 0x0, 0x10000000, 0x7, 0x4, 0x7, "47af57ce8c8e5af84d109ee7a1488bd8c3df97e87f7e771f69ced4c5de6ddeb44ee59bdfb62866129f1338dba84b5d82a121c369a6837123e849c909c16b53", 0x2d}, 0x80, 0x0}}], 0x1, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000240)={{0xff, 0x1}, 'port0\x00', 0xb1, 0x0, 0x5, 0x8000, 0x7, 0x9, 0x80000000, 0x0, 0x7, 0xd3}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x6, 0x3, 0xd9000000}) prctl$PR_CAPBSET_DROP(0x18, 0x12) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) capset(&(0x7f00000001c0)={0x19980330, r6}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001500010300000003000000000b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 29m31.567170329s ago: executing program 0 (id=3051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000080000000000140012800900010076657468000000000400028024000e00060000000041470004000000000000000100000000000000872b00030000000008002900bc1e0500140003007767320000000000000000000000000008000400cd"], 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009a000040"]) 29m30.835117309s ago: executing program 34 (id=3051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000080000000000140012800900010076657468000000000400028024000e00060000000041470004000000000000000100000000000000872b00030000000008002900bc1e0500140003007767320000000000000000000000000008000400cd"], 0x7c}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009a000040"]) 26m22.548396044s ago: executing program 6 (id=3617): socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}}}}}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000240), 0x84000) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2c}) io_uring_enter(r1, 0x5046, 0xef0a, 0x10, &(0x7f0000000280)={[0x1f2a]}, 0x8) io_uring_enter(r1, 0x5eae, 0x7725, 0x16, 0x0, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 26m21.097844912s ago: executing program 6 (id=3618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970"], 0x44}, 0x1, 0xd}, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x9c8) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) r7 = mq_open(0x0, 0x42, 0x0, 0x0) lseek(r7, 0x3, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) execve(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x563fe1c184547cef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 26m16.938133163s ago: executing program 6 (id=3624): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x80015b1b, 0x0) syz_usb_disconnect(r0) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$tipc(r2, &(0x7f0000001380)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="08c91afa7ef0809bb301d547fd3d937cc39bcd3f8affa76ca13bc33f5e3e22043f321dbb0b62aaa33aa91a85eb855ae67fd5d30199dbad33ee6dd4527157600e4b84774c02164e54bdbb6cff2bea4bd6709251b24f3258a29bca67a4637420f2cb389519ba071223542fbff3b1af83130b5eaea575111833a66f72e43aa241f051076db438c75ab1d313300698efabdfd054a47c7cc595598d53ad50ad8a3a89c8db05b5882d97a881f08870bcfa94a0627080f5e97b", 0xb6}, {&(0x7f00000001c0)="b4598cababc3baf931ddecf66749dce6c8c6db38781f8da5edfa4826c7785c8e44a68f70a04d9013c244183318b838958d0652fd51a40c2588ad56d14493ba342ed55e6d8cfb3a", 0x47}, {&(0x7f0000000240)="c40bb0fc1772ef7d66914e40e0b923154ebaafddf1278193a1ba4b6a6e1cdbe0f3b6a2c20014c78b85fd18c49c18cb9a203254223fc831fe9d0e14ec11aab7feaebfe61acfdf1de0f980d4b38812bf75ec0e5ada85704d0332751c916ffc3c77fda81ab0e585dc5f741277dc12919a9bee924c9de957e043a0b03ab0ff5b3a867cdb65fcb78528a6", 0x88}, {&(0x7f0000000300)="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", 0x1000}], 0x4, &(0x7f0000001300)="530ffd311abfd072ebd254f5259dc9172114359de19b0865cf846e45458e4473b74dbb9a8d8122142b4b59699b65cd8d930e222e8c57d7e7d75dad9ed080c01d69bdd29effee7931e731e618792894a5dc741393024a284e19dcc6fb4663532a247a6057a732b24ddae1b35e86240a8a0d4c446e2b5d", 0x76, 0x40}, 0xc000) 26m15.120061372s ago: executing program 6 (id=3631): socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) move_mount(r1, 0x0, r0, 0x0, 0x46) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000050, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r8, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000510000/0x3000)=nil, 0x3000, 0xd, 0x80010, r7, 0xa4850000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 26m13.728446809s ago: executing program 6 (id=3633): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r5 = socket(0xa, 0x5, 0x0) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x18) 26m12.538558578s ago: executing program 6 (id=3642): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400077001000030400000000000052000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000500)=[r8, r13, r8, r8, r8], &(0x7f0000000540)=[0x335, 0xffffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x1, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r0, 0xffffffffffffffff, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r15, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) 26m11.187286503s ago: executing program 35 (id=3642): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400077001000030400000000000052000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r9, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0xa, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000640)={0x1, 0x5, &(0x7f0000000500)=[r8, r13, r8, r8, r8], &(0x7f0000000540)=[0x335, 0xffffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x1, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r0, 0xffffffffffffffff, 0x0) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r15, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) 40.865872714s ago: executing program 2 (id=8431): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_open_procfs(0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (fail_nth: 4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 40.736093513s ago: executing program 2 (id=8432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x3b}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_usb_connect$uac1(0x5, 0x8d, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x2, 0x80, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x525, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x302, 0x4, 0x3, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x1, 0x5, 0x4, "ca78b2"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x5, 0x4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe, 0xf, 0x7, {0x7, 0x25, 0x1, 0x80, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd4, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0x6, 0x7}}}}}}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x19}) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) waitid(0x0, r3, &(0x7f0000000380), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000c700000000000000950000"], &(0x7f0000000040)='GPL\x00'}, 0x94) 36.69774424s ago: executing program 2 (id=8441): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x7, 0x200) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000100), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4b0201, 0x40) futimesat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0xea60}}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000002c0)={0x1, 0x9, 0x56, &(0x7f0000000240)=""/86}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4a}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@newtclass={0x124, 0x28, 0xc38, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x4}, {0xffe0, 0x3}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x6}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_cbq={{0x8}, {0x6c, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x2, 0x0, 0xe3, 0x7, 0x7ff}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x15, 0x0, 0x19, 0xa, 0x49, 0x8, 0x1, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x7, 0x5, 0x1, 0x9, 0x6, 0x400}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x0, 0x3, 0xb, 0x8000, 0xb}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x0, 0xc}, 0x7, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x81, 0x1, 0x80, 0x0, 0x4, 0x41e}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x6, 0x2, 0x5, 0x6, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0xc0fe, 0x5, 0x8, 0x6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004080}, 0x44000) sendmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="f76dd956cd7842412c805bcb4b1b8106679288b91af88597f28c186feb9f76f9ee95745bd0c1b453745d5acc0c8b8efb66b46b9a8ca7edc2b81f3a48c9decf176cd9cf78da9c2959b744c2aa1ccfc34f434e7095e9e81ee565e146b76be3a1e351837abbd923cf5dc52ead0d7b3e2151deec9a5856aba2be6d367c1dd025e9000ebfe1f1074d1c91d358e0d897d59d939fd8e5f84937bedc98ac85f8b3687e258aca88371589f0debdde5f555c10617e9c989c258b5fb0f5c75a9f6aff69be442b9f4cdd5e2dc0daabddd3aa4e0537174de3cd13262fdcf87328dd63e5a00e89e03bd2fdec9ad3a4dbfc71", 0xeb}, {&(0x7f0000000640)="583964254160d4f7761b5aa34eb2c4cdce85c950ca17ba2273d101a8766e3a012562abaa2cb0d6a8111cc809029289e037a64ad6003fb09d889c2faf24a5cf42126a73cd10d7c03bde7538f2301da9dfb5ac30888a8264753ea0f795c56aff7fb9fcaf0172a42d71b086cf047fc61c6fab162f8b90589fbd611d59a9eef2c89b", 0x80}, {&(0x7f00000006c0)="bd23f5d8b0a5d09447d776d90fc3979c9a114f46f37f3e562f9f39ce7d966c9490c48a75b754910e87fbf79172f7f3cff16b9136154512adaba518faa3cdfcad4f145ee9b42a326628841c9a2c606f6028cf471200a55a56dab3ccb883a1fa9b1d8049098c9dd797b9494bd89df06e71d4d1c37cac5bbd7dc3829f20ea3c31e2209b4b98bad32355b3d34ef148245e9c1f250d34fedc435efe31efeeb733e0e02d3e422cc9aa51168c396c538119992e52e28fd21dee54575a878d6a513873ebbea2996dadbbcc3683dc9fd4b684211860930fc81e1c700e0d7b12d7992cb5555b409a0a78ce", 0xe6}, {&(0x7f00000007c0)="706f08656bb06989573f1d6fb3dc072acfcae29d7612a8b844ab51255453aa7118d9923f94ab085a18f3b78d03192def13e302680b294c08359ef633b6385e907868179d94024564089e269e110cd6d03218c755c13a424086557a54faabf4f36211fc9c861e7f270aee81b912ef601335ff5abb7e3e5bfb8026f2b4bf1290d2f883f1a283b0ba7c0e8797251d70307791e02075318f4656cd1bfa3b88f46902bb36089f0fc7fc6a58b0d588", 0xac}], 0x4, &(0x7f00000008c0)=[{0xf8, 0x103, 0xa68, "f4a39dfd683058acfc5f802c0b9c6feca4562ee93788718a99667dfb6608bfae15617d35be6c2e78db19afbdbb8e33405297c9a797ee202cefe94759c167063e3a76135dbf40e0a61ef6062073fabd7d49cf0d251bab712ec7165b96392de82e8b7be60abd59ab1944c0e9a9f7f448d9c28303ce17e71ba4a907791831d92f95033c0c5e0dbdc2b8143cb1d78a991334d4adcd23fa78e8d1994303b7093510d725e11055974f87726bf1c5d2982613db725354e2e62bacb90f6cdca21de39e2789a736378a0f0f1e531bd96d4ac61a72f316422f0bc601880e18407e06843fecb62cf82b"}, {0x18, 0x1, 0x9, '0?M'}, {0xe0, 0x84, 0x1800000, "4265ffbbffb985d1a35cbfc227e9c68057b2123e4a7d51ca21b4f9a7977c007614290dc43b0f78350f2662f80a3a4ebee3b51b6b9225ffd4df566baabd3a4a0854490763a74b9cf58937448a8c086d67f666e3829974454cadf71386ff2445639fc468ce5f5b46926e2d8ac8f5683d260b4bd683e2d66d9828abe38c2f7e8b4265a204a6f807e06eeb9ea0c6c2680c27faf84b0511498871e456ef6e6a97f1719512e199835a3e9303dd538103cd5bf726a5c3b42d0cdf2079ecfd8414a9097de94c672f1cc56dbb79"}, {0x88, 0x101, 0x3ba78423, "1a47a0230e0b40fad0aa51a6ba982364958a547d481d2d2251f88cfd2b4336781552aa40080862582bea422a0220175261f41be521ff4bfb77ee1c13ee852c5fdbfd1e2269ec730c7125cf1d76d5bbc337a961148b870e39467ef4b3a158568457f13f61086ab91e3d10d595e036dd7e6632a62892fbde"}, {0x110, 0x29, 0x0, "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"}, {0xa8, 0x6, 0x4, "e150ea2ff929139e26ee4845a5d0e619a5057161fd299f018cef07a2430be050a3cd757fa1f466f2d12c94afb2fb0125f45e00ec7330324b443786f58f637d099ce70b952806d3a219927b8320da11bbcc355ebbb7c06412740abaedaab197e1bb0cee3ae5178ffa9bd31ac011d5b6d8121508d0f2e4af1f603df90106a0ca6906f31359c9f377e4d6b1ea57f3c7106f8528d687885fcdb4"}, {0x20, 0x3a, 0x1d77, "d57602a6ea03ac23f1b9753ee8010e67"}, {0x80, 0x1, 0x5, "e845ace08a970e357995c654d77540b43db56f6f2b75af925319e496ad2ad790502e23974da16bce26cd32fe493218f37c70a264593dc2c098977afaab64c6e4ae9eb204c8ea71a735086ab63dd0d8cbb5f53f6f5b590411bc485834b8b1420ce9c37b461cc1614963a17b8eb1"}], 0x4d0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="ced5264b57313334fe68d03911fa893f36c9f29665f26dca82d36c45156df93dd8ea0405d824dee09957fb3598db6311d46011b4d719a0399dc0361a55df059ebd3edfde813f8ca260a6cb36efd82aaae297936aac5b4d781377ac9466d9a692e2e8e18002f2f2dc5e852cfad289", 0x6e}], 0x1, &(0x7f0000000e80)=[{0x68, 0x1, 0x0, "15b0b6fb50a10ed6b63f539cad74e301543054ad0822cda198889bb7521fc0868a6ea0d32201b7a8ab5713a98e951941e91f035359784e7200068ccac78cb522f95608c5cf5618429f455c3253b12c4e7b4bfc5e05"}], 0x68}}], 0x2, 0x4010) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f0000000f80)={0x2c, 0xe99b225668022325, r5, 0x5, r7}, 0x10) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000fc0)=0x5) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$video4linux(&(0x7f0000001000), 0x7, 0x80000) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000001040)={0x2, 0x0, [{0x2b3, 0x0, 0xda6}, {0x3c5, 0x0, 0x1e3d}]}) r9 = syz_open_dev$dri(&(0x7f0000001080), 0x80000000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000001100)={0x3, 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f0000001140)={0x0, r10, 0x1, 0x7, 0x101, 0x9f63, 0x3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x8100, 0x0) r11 = syz_open_dev$mouse(&(0x7f00000011c0), 0xffffffffffffffff, 0x446a00) r12 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r11, 0xc00c620f, &(0x7f0000001200)={r12}) syz_open_dev$vim2m(&(0x7f0000001240), 0xcadc, 0x2) 36.328434134s ago: executing program 2 (id=8444): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x8402, &(0x7f00000021c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000440)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x31, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb0909, {0x3f1, 0x6fd8e84b}, 0x0, 0xed}}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000100)='.\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x2a4) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRESDEC=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 35.120268901s ago: executing program 2 (id=8450): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/if_inet6\x00') fchdir(r0) unshare(0x2c020400) unshare(0x2c020400) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) (async) setns(r2, 0x24020000) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d01622e2b36c2f5f3835090224000100f3100009040002020083ec00091c0602000202000a090582020002000110"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000f80)=ANY=[@ANYBLOB="00301c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x60d3, 0x7}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r6, &(0x7f0000000000)=""/168, 0xa8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_gettime(r5, &(0x7f0000000140)) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$cgroup_netprio_ifpriomap(r8, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fe, 0x2) (async) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000600)={0x1, @pix={0xffffffff, 0xbb46, 0x34324241, 0x9, 0x0, 0x4300, 0x0, 0xa, 0x0, 0x1, 0x0, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 34.187829055s ago: executing program 2 (id=8452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000001c0)={[0x7037da47]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x225e, 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000300)=""/9, 0x9}], 0x2}, 0x0) listen(r10, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bfaaaaaaaaaaaaaaaaaaaa2aad1003f70aa6a400000000069078ac1414bbac1414aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000f704496cf8120a1e32bafc5b597fa95e6e62aa48b82442559eaf6007000000be9a2faaa75e88010300"], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r9, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r11, 0x0, 0x0, 0x0, &(0x7f0000000200)}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r6], 0x10000) madvise(&(0x7f0000775000/0x3000)=nil, 0x3000, 0x4) 33.886569193s ago: executing program 36 (id=8452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f00000001c0)={[0x7037da47]}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r3, 0x48e9, 0x225e, 0x2, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000300)=""/9, 0x9}], 0x2}, 0x0) listen(r10, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000100)=ANY=[@ANYBLOB="bfaaaaaaaaaaaaaaaaaaaa2aad1003f70aa6a400000000069078ac1414bbac1414aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000f704496cf8120a1e32bafc5b597fa95e6e62aa48b82442559eaf6007000000be9a2faaa75e88010300"], 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r12 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r9, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r11, 0x0, 0x0, 0x0, &(0x7f0000000200)}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r6], 0x10000) madvise(&(0x7f0000775000/0x3000)=nil, 0x3000, 0x4) 15.827864613s ago: executing program 7 (id=8496): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) accept4(r0, &(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000140)=0x80, 0x80800) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000200)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000000240)=0xa00) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff80bf00200000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 14.799551744s ago: executing program 9 (id=8453): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x39d, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r5, 0x100) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYRES64=r5, @ANYRESOCT=r1, @ANYRESOCT=r5, @ANYBLOB="4d6e4c4d7a9225ea27706c0a4d6fc8926e84c96ca0b7729ba6342ad4349633546d6b0d1749fd3d9e381be1278fcf168365890e411672f03a77e63a83910410976f06ff34d4397a0de516bafd29f1cd70660b9225dbd24bdd9961248685053e20208a4e593abd6b760fd1d7a28be1a91e59f7269aba13ba935dc20c65a0d0c11a20918716df8e83f20a91a66bd22b6c1c759925ebff44ff15fe8da01b4c162ff229d89fd10083ccf8a4d91d5da3188ca67f54634e06592ff832c0689c4292f27c305929ec48a5743db7a1ba8c7f615e2049c62e3950c119087e5aaae32a6783f11d529326fa", @ANYRES32=r4, @ANYRES64=r0], 0x100}}, 0x4000800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x300, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000000)) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000500)={0xffffffab}, 0x4) sendto$packet(r7, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000080)={0x980903, 0xffffff7c}) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r6, 0x0, r10}) ioctl$SNDCTL_SEQ_TESTMIDI(r6, 0x40045108, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000200)=0x11, 0x4) 10.836320314s ago: executing program 9 (id=8501): syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)='H', 0x1}], 0x2, 0x66, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r2, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='\x00') read$FUSE(r5, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="006558d3", @ANYRES16=r7, @ANYBLOB="0700000000000200000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept(0xffffffffffffffff, 0x0, 0x0) 10.332282519s ago: executing program 8 (id=8502): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xb, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff, 0x0, 0x8}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000120a00"/20], 0x26}}, 0x0) socket(0x10, 0x803, 0x0) r3 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2003025, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x1881, &(0x7f0000000340)={0x0, 0x17ec, 0x400, 0x2, 0x3be}, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000540)=0x5, 0x4) io_uring_register$IORING_UNREGISTER_NAPI(r6, 0x1c, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 8.783943401s ago: executing program 7 (id=8506): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x300, 0x4b0, 0x3c00, 0x20, 0x7, 0x2, 0xf, 0x0, {0x4, 0xeaac}, {0x5d7, 0x40}, {0x1, 0x15a}, {0x4}, 0x3, 0x183, 0x1, 0x2, 0x0, 0xc, 0x1, 0x7ff, 0x3, 0x6, 0x6, 0x0, 0x0, 0x200, 0x2, 0xa}) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000000c7c9d59b5f7277cc1b00b95a98aece0f6129de1a7d67d0da1427ad98edcaa2d6bbd7471c474d5ea4baaa505dc7bf435bc78d8516cd0400800000000000009175fac75db8d781521148184612c6000bbab0f57eca8e9ae3e68df97af67a1c227ac6665380829bfb8dca89e5d08259b46199bce2", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x4c}}, 0x800) 7.866038953s ago: executing program 8 (id=8507): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x80}}], {0x14, 0x11, 0x1, 0xffffffff}}, 0x3c}, 0x1, 0x1200}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.613322081s ago: executing program 7 (id=8508): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0) syz_open_dev$mouse(&(0x7f000000b040), 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r0], 0x0) syz_usb_connect$uac1(0x2, 0xfb, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x80, 0x30, 0xd9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x9}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0x9, "9503b79c598d"}, @selector_unit={0x7, 0x24, 0x5, 0x4, 0x9, "f888"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x0, '-'}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x6, '{]'}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x101, 0x4, "cae7"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x3, "ce456fa4"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x6, 0x62, "241f0f", "b9db"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x6}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfe, 0x4, 0x8, {0x7, 0x25, 0x1, 0x0, 0xa0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xc8, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc06, 0x4, 0x4, '85\nH'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7, "a5006db2f0ac9085"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2, 0x1}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x5, 0x9, "b5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x80, 0xc, {0x7, 0x25, 0x1, 0x0, 0x6, 0x6}}}}}}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0xc0, 0x0, 0x1, 0x10, 0xbd}, 0x8a, &(0x7f0000000100)={0x5, 0xf, 0x8a, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x94, 0x4, 0x8, 0xe, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x6, 0xf000, 0x9, [0xffde, 0xf, 0xf, 0x7fbfff, 0x3f, 0xc0f0]}, @generic={0x48, 0x10, 0xb, "4c449edbc16ff0be22d03e83c0c22d998600305d4c0218ec3d62cd6919155911dfbea642c96558daa8f63c9b5fce8a97fa0cbc64c6b2273d0ce59e064086797040d9f1d6f0"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x4, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x2, 0x8}]}, 0x2, [{0xd, &(0x7f0000000040)=@string={0xd, 0x3, "9339141977a3e3e9651d08"}}, {0x58, &(0x7f0000000340)=@string={0x58, 0x3, "3638f6a7a149881cb9458e38ed8d43e415a3fe0f029e75576e7f89ca6c36e0de4d1b27192f1efffc571ed4cdfe9f65c88876051d99f37b37bb6cbf9ea982ceaf51129e3919acdc374885390379bc54ca0f28fd3c3563"}}]}) 6.119976109s ago: executing program 9 (id=8509): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={@id={0x2, 0x0, @b}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r3, &(0x7f00000003c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000002900)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe254}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002940)='B', 0x1}], 0x1}}], 0x2, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r5}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3800000}, @request_death={0x400c630e, 0x1}], 0x73, 0x0, &(0x7f0000000240)="1b32f6817308acd98795907b261f5e4b155fe8b363593656d6248201c3a481335cb655c9ce3eeec5fa81a495a323dfaa0da98e94c5785bcd3a5bcb51335731f87e28d48061eea15011d01cc3aaf47bce9d268a2763bd0138b9457f127e0202cb72d3ff515aceb33a42f7a8162af1908377811e"}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r11) close(r11) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r13 = fanotify_init(0x200, 0x0) fanotify_mark(r13, 0x641, 0x4800003e, r12, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x0, 0x0}) 5.797763521s ago: executing program 1 (id=8510): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c00178008000180", @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x2000c000) 5.667744357s ago: executing program 8 (id=8511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101100000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1914}}, 0x4048010) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.59586329s ago: executing program 5 (id=8512): syz_io_uring_setup(0x371a, &(0x7f0000000440)={0x0, 0x2a997, 0x2000, 0x1, 0xffffff}, &(0x7f0000000040), &(0x7f0000002500)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x2, 0x408, 0x0, 0x110, 0x110, 0x320, 0x320, 0x110, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="7a22cb490c5b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan0\x00', 'bond0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @loopback, @local}}}, {{@arp={@private, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ipvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fe0262a2c3f61d8b01499b0a06dbe1103006325eb3b9094dcaad5273454"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x130, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff35) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x4040080) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000024c0)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x35, 0x0, &(0x7f0000002580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0xb, 0x1, 0x25}}, &(0x7f0000000280)}}, @request_death, @free_buffer={0x40086303, r7}, @dead_binder_done, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x3}, @enter_looper, @dead_binder_done], 0x50, 0x0, &(0x7f0000000600)="4bb16fc96dcf827965e297e4bcdc4cc27c7f5cce42d3404ebf85cb80c1e0f1800190544fb4577f9c7b137beb432502670dac13efbd760cd34255de3bf80391ae67bfe4a9e6cef0df81e89597f675b813"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000340)=0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) 5.595499s ago: executing program 1 (id=8513): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00141a000000c2ecd25f75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905d657", @ANYRES16=r1], 0x0) 5.395836434s ago: executing program 8 (id=8514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000240)={0xfffffc01}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000082505a1a44000010203010902"], 0xfffffffffffffffc) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) dup2(r4, r2) 4.635886602s ago: executing program 5 (id=8515): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000000)) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3) syz_open_dev$video(&(0x7f0000000100), 0xed24, 0x301080) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) r3 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001"], 0xe0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7, 0x40000) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, 0x0) ptrace$setregset(0x4205, r8, 0x1, &(0x7f00000001c0)={&(0x7f0000000140)="c945b941eb6a3f6dedf11f1508685636", 0x10}) read$FUSE(0xffffffffffffffff, &(0x7f0000001680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) sendmmsg$unix(r5, &(0x7f00000036c0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="2750724fd232a62c43a84b86f6881f54a84ef0d7ca4e9f78a86d568c168c2f062bcf4e4f5d90bd6a10ba39805cccaf65653226d36ae54eb028af4a4b2a7b7d29eeb48f415ad7d7cadb82fae1c99030fb1cb98f752e7333d12422b1aa866452bdc639daf23779fdd3d88c39ae1c4f00f005471c5298cb6eb2cf19701d77bf182d89f56045fa59fc395385eeb50f22276b7f26e1a1782e92d88b8acb9270abfaefdec2476ed391d3aaf9f16c9e8dcb5dec4f3106", 0xb3}, {&(0x7f0000000240)}, {&(0x7f0000000280)="852d756e2d496b2e995c42950be9e81330a516eb82abe98f8274a670dbe4dcc1fb4e49e2168fc0cb6797d262dbc9511a2d688ad9c6b2bf220b260a93e0aa9a10965d6cf15244dfa9888fd963daabaac860018ed32fdcb28b93f6184e052fbc3d35c5e0f72daa17c1a58faaa7528961", 0x6f}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, &(0x7f00000037c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="0000009f42d90678561ebddc622774b4e500"], 0x58, 0x8014}}], 0x2, 0x4008000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xf29, 0x3, 0x5}) pipe2(&(0x7f0000003780), 0x80) 4.355880225s ago: executing program 5 (id=8516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES32=r2, @ANYRES16=r3], 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000"], 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r5) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/224, 0x94) syz_usb_control_io(r4, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$reject(0x13, 0x0, 0xff, 0x200, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000000c0)={0x80fd, 0x3}) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) io_submit(r6, 0x1, &(0x7f00000009c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x8}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b010203010902480001000000", @ANYBLOB="32b683adf11f83220156c5640004000000"], 0x0) syz_usb_control_io(r7, &(0x7f0000000680)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_disconnect(r7) 3.685431654s ago: executing program 7 (id=8517): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x9, 0x4) (async) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='.$x%+,&@^\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x4, 0x400000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r2, 0x8, 0xfffffffffffffff7, 0x287e}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x81) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0x985, 0x8, 0x8, 0x800}, {0x477e, 0x3, 0x0, 0x7ff}, {0x9, 0xc, 0xc1, 0x4}, {0x2, 0x3, 0x7, 0x7}]}) close_range(r3, r0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000380), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x318, r4, 0x4a9664ff07907265, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x24000000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0x278, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdef}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x3, 0x8, 0x7, 0x1}]}) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000940)='-,:\'(*\x00---@{.{$@\x00') (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000980)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000dc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x110, r7, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x6577}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x1}, {0x5}}]}, 0x110}}, 0x4000005) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000e00)={0x0, 0x5, 0x1, 0x8, 0x0}, &(0x7f0000000e40)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000e80)={r8, 0xd}, 0x8) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) syz_open_dev$video(&(0x7f0000000ec0), 0x3, 0x200080) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async) sendmsg(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f00)="917bdd528c087bc501a18c25b8265fb99f271847c9cb77baf1cd56cfae616e707e97f7ab626aea6f6bbaf1dba3634c5ee6ffaa2bea7c90abb6e667838b5880dcd356c14728da37f5d06f164ae1f8c226fb6c7c87464478aecda52295df977ba66dd1ea223ef32f90a8ad341c565dc5e3d74dd85023cedc8e5766fd44d88f571b91b7467458eb", 0x86}, {&(0x7f0000000fc0)="09017c949404", 0x6}, {&(0x7f0000001000)="379c81d85617a3aa93e4fce8e265eaaff1e0a516284e440098acfc0c91d0d98476da5f0533cea35722f0d6d12b4826b2b9110e3660f94e92c7ca27f9d52e560c4db1f14383446dc4cfd6a579e7140945026bc6cd501d2f1bdc3921969c8df61e05f039bc22ada6c7a9c33b66d7468a4874444c6f58ce07c4a58d6d92c8e85a8c64005aefcfe825d04ec5c5a27e72ff37bd992ccecde015c2a393baaae46bb5555b7a245ddbfd5d6151ed1e88c4f5cff9af", 0xb1}], 0x3}, 0x20044080) (async) signalfd4(r0, &(0x7f0000001140)={[0x10]}, 0x8, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000001180)={0xaa, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) signalfd4(r0, &(0x7f00000011c0)={[0x2]}, 0x8, 0x800) 3.450632905s ago: executing program 7 (id=8518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x6) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x6e802, 0x0) shutdown(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x0, 0x0, 0x1004, 0x1}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r6 = socket$kcm(0x11, 0x2, 0x300) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000200), &(0x7f0000000780)=ANY=[@ANYRES16=r0], 0x47, 0x2) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$isdn(0x22, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x5, 0x1, 0x157, 0x26553de0, 0x4, 0x7810, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1002, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x6, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x10001, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60122d9a03803aff00000000000000000000ffff64010100ff0200000000000000000000000000018600907800ff00000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200010000000000000000000000001818fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930916625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000020b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c00000000000000000000145e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c0305d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0) 2.268387963s ago: executing program 9 (id=8519): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000040)={0x0, 0x31, 0x4c, "1327029dcd34974c4f1a7660b3e7a89543e5af40d9a31a66f30943ba1171b00e28ccd08687a48add0b4a0416f6df098312b47a570237c42b0e118435199983e53780acb18e8c72fa743fcd94"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x10}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000500)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) 2.255753984s ago: executing program 1 (id=8520): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = syz_open_procfs(0x0, 0x0) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 1.998258507s ago: executing program 1 (id=8521): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x50d}) writev(r0, &(0x7f00000000c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6, 0x2}}, './file0\x00'}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f0000002200)={0x18, 0x0, r3, {0xfae}}, 0x18) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) unlinkat(r2, &(0x7f0000002240)='./file0\x00', 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000002280)=@attr_pmu_init) syz_open_dev$sndctrl(&(0x7f00000022c0), 0x2342, 0x64840) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x4010, r2, 0x3) mmap$usbfs(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x1010, r2, 0x8) ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20004004) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000024c0)={0x3, &(0x7f0000002480)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000002500)={r6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002580), 0xd0a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000025c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000002600)={0x28, 0x1, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x409}) r9 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$DRM_IOCTL_AGP_INFO(r9, 0x80386433, &(0x7f0000002640)=""/110) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_netfilter(r9, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xc4, 0x3, 0x3, 0x201, 0x70bd26, 0x25dfdbfc, {0x2}, [@typed={0xaf, 0x71, 0x0, 0x0, @binary="4241950ee699520e1902d3717a944447a47b160a7d39ac5c7b1a3e8d7c57dc5e173a83e24d8add2a28da386e39b180929ee32c7f56156f954d71e90ce64fd9c9db17a2e6178cfc2e687bef404165450ca85c9d75d783efdff3901de3ec172449a3ce8ed283d6715a8a96acf42939811140380245d23290df2704f6370f6a350f6b85b3dd0bf1ea92f3c9ffa46c739879cc830cef8acd7863e30410ac0bb0b2f1ba44772090586eaa42937a"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x82}, 0x40000) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000002e80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d00)={0x124, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040041) 1.756224377s ago: executing program 1 (id=8522): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000480)='\xcd\xd7\xfc.\xdf\x14t[\xd7;\xfd\\y\xedT\xcd&\x82\xbb\xf3\x0e\xa5bi\xf5\x05\xd7\x9eL\xfc\x83\xda\xb4E\x05;\xc5\xdcl1\a\xc0\xd7\xe1w~\x19`\xd0?Y\x8f\x8e\xf2\xcf\x9dF\x8d\xb7\f%\x1b\xaa\xd0\xa4\xb7\xa3\x92=\xff8nU\xd8\xe9\xc7\x10\xedL\xa4\xfe\xe7qgm\xa0\xb7', 0x5) splice(r4, 0x0, r5, 0x0, 0x408cd, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_usb_connect(0xfffffffffffffffa, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x25, 0xf8, 0x5e, 0x40, 0xbfd, 0x17, 0x2fa3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x70, 0x31, 0x66, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x8c, 0x2}}]}}]}}]}}, 0x0) 1.499221406s ago: executing program 8 (id=8523): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) (async) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) (async) shmdt(r5) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) (async) capget(0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028000800016e1d7372001c00028005000300f9000000050007000100000006000500040000000000"], 0x48}}, 0x0) (async) poll(0x0, 0x0, 0x7) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.498284795s ago: executing program 5 (id=8524): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000000100)="3cc727000ddf55de4d74f5d8bee44eb2bddd78beeb485cbfaa4a02911879e2274fbbf46bc55c3173b0", 0x29}, {&(0x7f00000002c0)="6c7fc5bfd4e80c435f07b5cb453175134606e19ec639781c5e4a4f0c09b1f76a8a0f1981cc3fe6250655370ac621ee938844ebdd51028fd63fcdf8293887f5eace2dc50304761f931addafe406c5b74ef3a9d525617729f242a51008e3e0bb6d695c49daa5b47589785965761feb8329225c7c2d7a6e72656b306d623d485cb9ee98e85f45519838cd108ffc6268202f78743236e135eaf8b4309547d929c5612ebb09fac567bcc412031d381e52f42b2d89e44e46bbe92f6100bd822365478067f9b72c61da1551c17509", 0xcb}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f00000003c0)="01e25b2e9238cf28caedaec8920f5763f81056ec896b4ccbcb2523e1a546614d11b15e3ebfa8f1ad870f72071f354aece4dc80243e57525ee0", 0x39}, {&(0x7f0000000400)="60ce2823012c5533e212ac96f482b1ee0b0154a0d2b93cd9baf182121e717f634a", 0x21}], 0x6, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x404c801) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xad1c) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x0, 0x15, 0x0, "897530154176b0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcff0f0000000000000900000000000000d0f08e8ad896ba67a00973defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218a0d22915ff6eddb1000080040000db00", [0xc]}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x140f, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000800) 1.352607201s ago: executing program 8 (id=8525): socket$inet(0x10, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000000100"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000800", @ANYRES32, @ANYBLOB="080003000200000008000a00", @ANYRES32=0x0, @ANYBLOB="5fe10536f2cf231774df8cd1135831b8701c0fe1bffec9725deb3b8d69f69d3569617f6f3c603a0791c045e44bcaa06b0cf4d4b2be05f81dd50d6ebadc097097a879914614824389573e4865ea703a5ce3f17d4a689fe773536969a4e4e701b38875d6bb7635c277de492472784ced3ed0cc2e516ddc6255b85b9d8789e57051fa2ef88c6f8eea219d17e0dac416220f62f6dc7246eb"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010094cd49fe704c23ffbf000006000000e0000001e00000010a010100640101"], 0x28) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x4, 0x5, 0x6, 0x3447504d, [0x8000, 0x8], [0xffffffff, 0x1], 0x13a}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) r7 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) 1.135722403s ago: executing program 7 (id=8526): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x1) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(0xffffffffffffffff, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x12) 890.229271ms ago: executing program 1 (id=8527): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x9c, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, 0x0) io_setup(0x5, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="160100008e88052086800095d8b601020301c772b87a1830090212000100000000090401000015cc1c00"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000140)={0x100, r9}, 0x0) openat2(r7, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={0x10100, 0x1, 0x20}, 0x18) landlock_restrict_self(r8, 0x0) 411.359089ms ago: executing program 5 (id=8528): ftruncate(0xffffffffffffffff, 0x2) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@netfilter={0x1, 0x1, 0x1, 0x1}}, 0x20) fstat(r0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x24}}, 0x8000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @loopback, 0x0}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@dev, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x68, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000006c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x9, 0x9, {{0x11, 0x4, 0x0, 0x2d, 0x44, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x2c, 0xb6, 0x0, 0x9, [0x5, 0x8, 0x9, 0x1, 0x5, 0x2, 0x7, 0x4, 0x1, 0x100]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x6, 0x2822, {{0x32, 0x4, 0x1, 0x6, 0xc8, 0x65, 0x0, 0x9e, 0x4, 0x0, @empty, @broadcast, {[@noop, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0xa, [{@rand_addr=0x64010100, 0x510}, {@local, 0xa96}, {@empty, 0x5}, {@local, 0x9}, {@broadcast, 0x9}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x20, 0x3, 0x9, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xab}, {@loopback, 0x5}, {@remote, 0xff}]}, @timestamp_addr={0x44, 0x34, 0x96, 0x1, 0xf, [{@rand_addr=0x64010102}, {@multicast2, 0x657}, {@local, 0x1}, {@local, 0xd}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xd41}, {@empty, 0x1}]}, @rr={0x7, 0xb, 0xbc, [@empty, @multicast2]}, @ssrr={0x89, 0x13, 0x1c, [@broadcast, @multicast1, @local, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000980)={'gretap0\x00', 0x0, 0x8000, 0xc8, 0x8fed, 0x2, {{0x2a, 0x4, 0x1, 0x1c, 0xa8, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x56, 0x1, 0x5, [{@local, 0x5e6}, {@empty, 0xfffffffb}]}, @timestamp={0x44, 0x24, 0x90, 0x0, 0x6, [0x10, 0xe40f, 0x8, 0x3, 0x0, 0x7fffffff, 0x200000, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x8e, 0x3, 0x5, [{@loopback, 0x10000}, {@remote, 0x2}, {@broadcast, 0x8544}, {@private=0xa010100, 0x4}]}, @timestamp_addr={0x44, 0x14, 0xe1, 0x1, 0xc, [{@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x22, 0x0, [{0x7, 0x3, "0f"}, {0x4, 0xc, "272b30de3df0cedf481f"}, {0x6, 0x8, "0cf96e857969"}, {0x1, 0x5, "45a76f"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x4, 0xf9, 0x7, 0x7, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x1, 0x1, 0x8001}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xaf, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0}, &(0x7f0000000f40)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0}, &(0x7f0000000fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001080)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000010c0)={@remote, 0x0}, &(0x7f0000001100)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001140)={'sit0\x00', 0x0, 0x80, 0x700, 0x400, 0xfffffff3, {{0xd, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0xf9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@cipso={0x86, 0x20, 0x3, [{0x3, 0x8, "d5599ae4d52e"}, {0x2, 0x6, "04a96d4d"}, {0x0, 0xa, "410fc354d681ae07"}, {0x1, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001340)={'gre0\x00', &(0x7f0000001200)={'ip_vti0\x00', 0x0, 0x8000, 0x0, 0x8001, 0x5, {{0x41, 0x4, 0x2, 0x3, 0x104, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x2c, 0x75, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x82c}, {@rand_addr=0x64010101, 0x4}]}, @lsrr={0x83, 0x17, 0x70, [@private=0xa010100, @local, @broadcast, @remote, @private=0xa010102]}, @generic={0x94, 0x5, "864df6"}, @cipso={0x86, 0x58, 0x1, [{0x1, 0x7, "6ad2e0846f"}, {0x2, 0x3, "8c"}, {0x2, 0x4, "6f9e"}, {0x1, 0x10, "b9aaf32276129c9b1c506a560aa1"}, {0x7, 0x12, "3e833fcf88ca612f127cf529f84ab1e3"}, {0x2, 0x8, "ccae2f09926a"}, {0x7, 0xa, "1016cc18bfea7f7f"}, {0x1, 0xd, "fc736664bd589676ae0de7"}, {0x5, 0x3, "cd"}]}, @timestamp={0x44, 0x24, 0x59, 0x0, 0xd, [0x0, 0x7, 0x1, 0x2e, 0x2, 0x8e4, 0x8, 0x3]}, @rr={0x7, 0xf, 0x3b, [@loopback, @multicast1, @private=0xa010100]}, @end, @rr={0x7, 0x1b, 0x8a, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001400)={'gretap0\x00', &(0x7f0000001380)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x5, 0x2, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x65, 0x0, 0xff, 0x29, 0x0, @private=0xa010102, @remote, {[@cipso={0x86, 0x13, 0xffffffffffffffff, [{0x1, 0x4, "ba81"}, {0x7, 0x9, "be805d599dce75"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001540)={'erspan0\x00', &(0x7f0000001480)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0xb, 0x80000000, {{0x26, 0x4, 0x2, 0x2, 0x98, 0x64, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x33}, {[@timestamp={0x44, 0x10, 0x4, 0x0, 0x4, [0xffff, 0x10001, 0x5]}, @generic={0x46, 0x2}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x59, [@empty, @multicast1, @local, @remote, @rand_addr=0x64010102, @multicast2]}, @rr={0x7, 0xb, 0xda, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x44, 0x2, [{0x2, 0x5, "320219"}, {0x0, 0x12, "f3e3ee1af42a1c68164f9e997b88dda4"}, {0x2, 0x6, "6778b03c"}, {0x1, 0x10, "391dcf9a7a3fd819f6f39c978190"}, {0x7, 0x11, "aeeef2c6e09fa0154f1145cc85cd4f"}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000002140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002100)={&(0x7f0000001640)={0xa84, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x18c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x3, 0x3, 0x7fff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x3d, 0x8, 0xf973}, {0x1, 0x5, 0x81, 0x101}, {0x8, 0x4, 0x4, 0x1}, {0x101, 0x3, 0x7f, 0x80000000}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe0}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x65a}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x99c}}}]}}, {{0x8, 0x1, r10}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x114, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x2, 0x0, 0x1}, {0x3, 0x9, 0x81, 0x1}, {0x1, 0x1, 0x41, 0x7}, {0x1, 0x63, 0xba, 0x401}, {0x9, 0x3, 0x9, 0x9}]}}}]}}, {{0x8, 0x1, r18}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4000000}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r23}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9f, 0x40, 0x5, 0x9}, {0xd59, 0x40, 0x1, 0xfff}, {0x4, 0xc, 0xa, 0x3}, {0x50, 0x2, 0x5, 0x2a1}, {0x10, 0x0, 0x6, 0x7}, {0x2, 0x44, 0x5, 0xfffff8bd}, {0xbe, 0xff, 0x5, 0x7}, {0xff, 0x4, 0x3, 0x2f3c}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r25}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xa84}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000040) 0s ago: executing program 5 (id=8529): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=""/139, &(0x7f0000000100)=0x8b) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@dev, @in=@loopback}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x9f, 0x600100) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064d1, &(0x7f0000000600)={&(0x7f0000000180), 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r9, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) kernel console output (not intermixed with test programs): 2563.687310][ T5954] usb usb9-port1: unable to enumerate USB device [ 2563.692789][ T5258] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2563.715872][ T5258] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2564.021069][ T5258] usb 6-1: config 255 interface 81 has no altsetting 0 [ 2564.050388][ T5258] usb 6-1: string descriptor 0 read error: -22 [ 2564.303918][ T5258] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 2564.313866][ T5258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2564.361067][ T5258] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input190 [ 2564.542125][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2564.595818][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2564.643502][ T5258] usb 6-1: USB disconnect, device number 51 [ 2564.697005][ T5954] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2564.755437][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2564.866756][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 2564.875735][ T5954] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2564.885470][ T5954] usb 2-1: config 6 has an invalid interface number: 46 but max is 0 [ 2564.904148][ T5954] usb 2-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 2564.923354][ T5954] usb 2-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 2564.963867][ T5954] usb 2-1: config 6 has no interface number 0 [ 2564.970596][ T5954] usb 2-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2564.989199][ T5954] usb 2-1: config 6 interface 46 has no altsetting 0 [ 2565.003292][ T5954] usb 2-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 2565.016085][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.084717][ T5954] usb 2-1: Product: syz [ 2565.091899][ T5954] usb 2-1: Manufacturer: syz [ 2565.100044][ T5954] usb 2-1: SerialNumber: syz [ 2565.218569][T28541] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2565.468973][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2565.482658][T28541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2565.493896][T28541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2565.504325][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2565.524765][T28541] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2565.585224][T28541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.631881][T28541] usb 3-1: config 0 descriptor?? [ 2565.708297][ T5954] usb 2-1: USB disconnect, device number 35 [ 2565.849113][ T5994] netlink: 'syz.5.7938': attribute type 9 has an invalid length. [ 2565.871904][ T5994] netlink: 212160 bytes leftover after parsing attributes in process `syz.5.7938'. [ 2566.260824][ T5954] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2566.318704][T28541] usbhid 3-1:0.0: can't add hid device: -32 [ 2566.324715][T28541] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2566.427042][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 2566.437561][ T5954] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2566.447957][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.463757][ T5954] usb 2-1: config 0 descriptor?? [ 2566.478497][ T5954] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 2566.495097][ T5954] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input191 [ 2566.691954][ T5954] usb 2-1: USB disconnect, device number 36 [ 2568.023066][ T6018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2568.336549][ T5976] usb 3-1: USB disconnect, device number 33 [ 2568.743673][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7949'. [ 2568.765154][ T6039] netlink: 'syz.8.7949': attribute type 10 has an invalid length. [ 2569.146946][ T5976] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2569.278575][ T6053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7954'. [ 2569.298559][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7954'. [ 2569.307085][ T5976] usb 3-1: device descriptor read/64, error -71 [ 2569.427658][ T5954] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2569.557031][ T5976] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2569.567071][T28618] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2569.586710][ T5954] usb 9-1: Using ep0 maxpacket: 16 [ 2569.593639][ T5954] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2569.605564][ T5954] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2569.618536][ T5954] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2569.628416][ T5954] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 2569.639052][ T5954] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2569.654045][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2569.663367][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2569.671469][ T5954] usb 9-1: SerialNumber: syz [ 2569.682658][ T6050] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 2569.687039][ T5976] usb 3-1: device descriptor read/64, error -71 [ 2569.692996][ T5954] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 2569.707796][ T5954] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 2569.728949][T28618] usb 2-1: config 0 has no interfaces? [ 2569.737153][T28618] usb 2-1: New USB device found, idVendor=045e, idProduct=07ab, bcdDevice=e4.fd [ 2569.746209][T28618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2569.754450][T28618] usb 2-1: Product: syz [ 2569.763084][T28618] usb 2-1: Manufacturer: syz [ 2569.770868][T28618] usb 2-1: SerialNumber: syz [ 2569.783861][T28618] r8152-cfgselector 2-1: Unknown version 0x0000 [ 2569.790280][T28618] r8152-cfgselector 2-1: config 0 descriptor?? [ 2569.806998][ T5976] usb usb3-port1: attempt power cycle [ 2569.998570][T28618] r8152-cfgselector 2-1: USB disconnect, device number 37 [ 2570.146812][ T5976] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2570.167538][ T5976] usb 3-1: device descriptor read/8, error -71 [ 2570.417003][ T5976] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2570.450500][ T5976] usb 3-1: device descriptor read/8, error -71 [ 2570.451105][ T6058] netdevsim netdevsim5: Firmware load for '/../file0' refused, path contains '..' component [ 2570.567661][ T6063] fuse: Bad value for 'group_id' [ 2570.571800][ T5976] usb usb3-port1: unable to enumerate USB device [ 2570.572651][ T6063] fuse: Bad value for 'group_id' [ 2571.677084][ T5976] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2571.832933][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 2571.849717][ T5976] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 2571.870507][ T5976] usb 6-1: config 0 has no interface number 0 [ 2571.895614][ T5976] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2571.913421][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2571.945507][T28618] usb 9-1: USB disconnect, device number 102 [ 2571.962455][ T5976] usb 6-1: Product: syz [ 2571.983008][ T5976] usb 6-1: Manufacturer: syz [ 2571.995999][ T5976] usb 6-1: SerialNumber: syz [ 2572.031770][ T5976] usb 6-1: config 0 descriptor?? [ 2572.059628][ T5976] hub 6-1:0.145: bad descriptor, ignoring hub [ 2572.076511][ T5976] hub 6-1:0.145: probe with driver hub failed with error -5 [ 2572.100585][ T5976] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input193 [ 2572.135327][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7963'. [ 2572.144822][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7963'. [ 2572.351771][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2572.379380][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2572.481206][ T6093] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7966'. [ 2572.816501][ T6087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2572.937687][ T6087] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2573.079043][T28618] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 2573.559547][T28618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2573.583602][T28618] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2573.596417][T28618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.600281][ T30] audit: type=1326 audit(1758106952.329:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2573.608179][T28618] usb 2-1: config 0 descriptor?? [ 2573.681717][ T30] audit: type=1326 audit(1758106952.359:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2573.744592][ T30] audit: type=1326 audit(1758106952.359:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2573.772033][ T30] audit: type=1326 audit(1758106952.359:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2573.829844][ T30] audit: type=1326 audit(1758106952.359:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2573.894231][T28618] usbhid 2-1:0.0: can't add hid device: -71 [ 2573.907040][T28618] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2573.950845][T28618] usb 2-1: USB disconnect, device number 38 [ 2573.958487][ T6111] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7970'. [ 2573.964294][ T30] audit: type=1326 audit(1758106952.359:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2574.043987][ T30] audit: type=1326 audit(1758106952.359:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2574.085475][ T30] audit: type=1326 audit(1758106952.369:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.8.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44b7d8eba9 code=0x7ffc0000 [ 2575.406745][ T5258] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2575.411989][ T6121] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 2575.812012][ T5258] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2575.821810][ T5258] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2575.831024][ T5258] usb 9-1: Product: syz [ 2575.855447][ T5258] usb 9-1: Manufacturer: syz [ 2575.886718][ T5258] usb 9-1: SerialNumber: syz [ 2576.252398][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7976'. [ 2576.377162][ T6133] netlink: 'syz.5.7976': attribute type 10 has an invalid length. [ 2576.444484][ T6133] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2576.591854][ T5258] rtl8150 9-1:1.0: eth13: rtl8150 is detected [ 2576.639258][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7979'. [ 2576.769615][ T6117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.815719][ T6117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.876123][ T6144] openvswitch: netlink: Message has 3 unknown bytes. [ 2576.920210][ T5976] usb 6-1: USB disconnect, device number 52 [ 2577.032410][ T5954] usb 9-1: USB disconnect, device number 103 [ 2577.766715][T28618] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2578.177160][T28618] usb 6-1: Using ep0 maxpacket: 16 [ 2578.335717][T28618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.496715][T28618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2578.636807][T28618] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2578.646502][T28618] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2578.852469][T28618] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2578.877418][T28618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.949897][T28618] usb 6-1: Product: syz [ 2578.992210][T28618] usb 6-1: Manufacturer: syz [ 2579.004072][T28618] usb 6-1: SerialNumber: syz [ 2579.027529][T28618] usb 6-1: config 0 descriptor?? [ 2579.053029][T28618] mcba_usb 6-1:0.0: Can't find endpoints [ 2579.567211][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2580.896422][ T6194] netlink: 'syz.8.7986': attribute type 10 has an invalid length. [ 2581.404249][ T366] usb 6-1: USB disconnect, device number 53 [ 2581.484413][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.513709][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.554862][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7989'. [ 2581.634116][ T6209] netlink: 'syz.5.7989': attribute type 10 has an invalid length. [ 2581.666218][ T6207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7988'. [ 2581.707299][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7988'. [ 2581.718103][ T5976] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2581.777163][T29784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2581.817312][T28541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2581.825878][T29784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2581.837189][ T5954] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2581.871751][ T6220] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7992'. [ 2581.890914][ T6220] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7992'. [ 2581.898196][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2581.921579][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7992'. [ 2582.016982][ T5954] usb 3-1: Using ep0 maxpacket: 32 [ 2582.023728][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2582.045768][ T5954] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2582.059789][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2582.095299][ T5954] usb 3-1: Product: syz [ 2582.110112][ T5954] usb 3-1: Manufacturer: syz [ 2582.117087][ T5954] usb 3-1: SerialNumber: syz [ 2582.126128][ T5954] usb 3-1: config 0 descriptor?? [ 2582.132255][ T6210] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2582.137108][ T5976] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2582.377378][T28541] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2582.422464][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2582.539119][ T5976] usb usb2-port1: attempt power cycle [ 2582.563900][ T5258] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2582.718639][T28541] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2582.946732][ T5976] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2583.187579][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2583.234407][T28541] usb 6-1: Using ep0 maxpacket: 16 [ 2583.241841][T28541] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2583.262447][T28541] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2583.297017][T28541] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2583.308577][T28541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.325624][T28541] usb 6-1: Product: syz [ 2583.352887][T28541] usb 6-1: Manufacturer: syz [ 2583.384340][T28541] usb 6-1: SerialNumber: syz [ 2583.437119][ T5976] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2583.471185][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2583.477915][ T5258] usb 3-1: USB disconnect, device number 38 [ 2583.524530][ T6243] veth0_to_bridge: entered promiscuous mode [ 2583.608418][ T5976] usb usb2-port1: unable to enumerate USB device [ 2583.667047][ T6248] support for the xor transformation has been removed. [ 2583.840536][ T6247] veth0_to_bridge: left promiscuous mode [ 2584.041510][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7997'. [ 2584.051475][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7997'. [ 2584.337540][ T5976] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2584.518757][ T5233] Dev loop6: unable to read RDB block 1 [ 2584.544729][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 2584.552974][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2584.576985][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2584.596926][ T5976] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 2584.616884][ T5233] loop6: unable to read partition table [ 2584.623856][ T5233] loop6: partition table beyond EOD, truncated [ 2584.631721][ T5976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.657662][ T5976] usb 3-1: config 0 descriptor?? [ 2584.692665][ T5976] usbhid 3-1:0.0: can't add hid device: -22 [ 2584.742042][ T5976] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 2584.859314][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7998'. [ 2584.887368][ T5976] usb 3-1: USB disconnect, device number 39 [ 2585.091013][T28541] usb 6-1: 0:2 : does not exist [ 2585.359870][T28541] usb 6-1: USB disconnect, device number 54 [ 2585.757249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2585.919277][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2586.147419][T28541] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2586.287573][ T6274] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8001'. [ 2586.305722][ T6274] netlink: 'syz.7.8001': attribute type 10 has an invalid length. [ 2586.475160][T28541] usb 6-1: Using ep0 maxpacket: 16 [ 2586.519358][T28541] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2586.570258][T28541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2586.608472][T28541] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2586.620479][T28541] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2586.640857][T28541] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2586.650202][T28541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.658999][T28541] usb 6-1: Product: syz [ 2586.663271][T28541] usb 6-1: Manufacturer: syz [ 2586.668556][T28541] usb 6-1: SerialNumber: syz [ 2586.700600][T28541] usb 6-1: config 0 descriptor?? [ 2586.710703][T28541] mcba_usb 6-1:0.0: Can't find endpoints [ 2587.352171][ T6292] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 2587.432521][ T6293] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 2589.046876][ T5954] usb 6-1: USB disconnect, device number 55 [ 2589.586993][ T5258] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2589.653253][ T6320] netlink: 'syz.7.8015': attribute type 1 has an invalid length. [ 2589.658675][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8014'. [ 2589.676571][ T6319] netlink: 'syz.5.8014': attribute type 10 has an invalid length. [ 2589.736962][ T5258] usb 3-1: Using ep0 maxpacket: 16 [ 2589.749939][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2589.801344][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2589.842341][ T5258] usb 3-1: New USB device found, idVendor=054c, idProduct=0006, bcdDevice= 0.00 [ 2589.857796][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.926064][ T5258] usb 3-1: config 0 descriptor?? [ 2589.942871][ T5258] usbhid 3-1:0.0: can't add hid device: -22 [ 2589.955281][ T5258] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 2590.636860][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.664186][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.814222][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8019'. [ 2591.075540][T28618] usb 3-1: USB disconnect, device number 40 [ 2592.066954][ T5976] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2592.237019][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 2592.294423][ T5976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2592.336391][ T5976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2592.354510][ T5976] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2592.370069][ T5976] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2592.424307][ T5976] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2592.437153][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.445261][ T5976] usb 2-1: Product: syz [ 2592.454633][ T5976] usb 2-1: Manufacturer: syz [ 2592.462414][ T5976] usb 2-1: SerialNumber: syz [ 2592.477772][ T5976] usb 2-1: config 0 descriptor?? [ 2592.486882][ T5258] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 2592.543402][ T5976] mcba_usb 2-1:0.0: Can't find endpoints [ 2592.651264][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2592.742425][ T5258] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2592.764456][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.978195][ T5258] usb 3-1: config 0 descriptor?? [ 2593.048099][ T5954] hid-generic 0000:0000:0000.006A: unknown main item tag 0x0 [ 2593.137120][ T5954] hid-generic 0000:0000:0000.006A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2593.231337][ T5258] usbhid 3-1:0.0: can't add hid device: -71 [ 2593.240912][ T5258] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2593.311529][ T5258] usb 3-1: USB disconnect, device number 41 [ 2593.583312][ T6372] program syz.8.8028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2593.676954][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2594.147968][ T6380] bridge0: entered promiscuous mode [ 2594.157226][ T6380] macsec2: entered promiscuous mode [ 2594.223894][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8030'. [ 2595.944346][ T6399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2595.980676][ T5976] usb 2-1: USB disconnect, device number 43 [ 2596.056719][ T5954] usb 9-1: new full-speed USB device number 104 using dummy_hcd [ 2596.458546][ T5954] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 2596.466937][ T5954] usb 9-1: config 0 has no interface number 0 [ 2596.480695][ T5954] usb 9-1: config 0 interface 29 has no altsetting 0 [ 2596.513879][ T5954] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2596.525877][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.543175][ T5954] usb 9-1: Product: syz [ 2596.600052][ T5954] usb 9-1: Manufacturer: syz [ 2596.650764][ T5954] usb 9-1: SerialNumber: syz [ 2596.683098][ T5954] usb 9-1: config 0 descriptor?? [ 2597.000445][ T5954] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2598.267473][ T5976] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 2598.418777][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2598.430008][ T5976] usb 6-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2598.439190][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.455100][ T5976] usb 6-1: config 0 descriptor?? [ 2598.767217][ T5976] usbhid 6-1:0.0: can't add hid device: -71 [ 2598.775267][ T5976] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2598.838649][ T5976] usb 6-1: USB disconnect, device number 56 [ 2599.092881][ T5954] peak_usb 9-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 2599.116949][ T5954] peak_usb 9-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 2599.187494][ T5954] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 2599.203016][ T5954] usb 9-1: USB disconnect, device number 104 [ 2600.288997][ T6457] random: crng reseeded on system resumption [ 2600.357575][ T6458] binder: 6447:6458 ioctl 40046205 0 returned -22 [ 2602.310454][ T6498] IPVS: sync thread started: state = MASTER, mcast_ifn = xfrm0, syncid = 1, id = 0 [ 2602.319957][ T30] audit: type=1326 audit(1758106981.039:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.7.8054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f50e2b8eba9 code=0x0 [ 2603.235748][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8060'. [ 2604.123008][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8063'. [ 2604.284839][ T30] audit: type=1326 audit(1758106983.009:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.8063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x0 [ 2604.629786][ T6550] binder: 6540:6550 ioctl 40046205 0 returned -22 [ 2605.375637][ T6558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2606.752047][ T6571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2609.037110][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2611.197016][T28618] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2611.227258][ T6618] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8080'. [ 2611.383130][T28618] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2611.410843][T28618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2611.473836][T28618] usb 6-1: Product: syz [ 2611.491879][T28618] usb 6-1: Manufacturer: syz [ 2611.496505][T28618] usb 6-1: SerialNumber: syz [ 2611.538293][T28618] usb 6-1: config 0 descriptor?? [ 2611.589323][T28618] hso 6-1:0.0: Not our interface [ 2611.594817][T28618] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2611.661046][ T6621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2612.561853][T28618] usb 6-1: USB disconnect, device number 57 [ 2612.567707][ T5258] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2612.839863][ T5258] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 2612.853058][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2612.877532][ T5258] usb 3-1: config 0 descriptor?? [ 2612.914224][ T5258] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input194 [ 2613.087354][ T5954] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2613.292942][ T5954] usb 9-1: Using ep0 maxpacket: 16 [ 2613.335799][ T5218] bcm5974 3-1:0.0: could not write to device [ 2613.364416][ T6640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2613.399420][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2613.437082][ T5218] bcm5974 3-1:0.0: could not read from device [ 2613.444488][ T5218] bcm5974 3-1:0.0: could not read from device [ 2613.461189][ T5258] usb 3-1: USB disconnect, device number 42 [ 2613.471358][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2613.491203][ T6241] udevd[6241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2613.497011][ T5954] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 2613.501166][ T6241] udevd[6241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2613.532965][ T6241] udevd[6241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2613.541320][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.543842][ T6241] udevd[6241]: Unable to EVIOCGABS device "/dev/input/event4" [ 2613.555607][ T5954] usb 9-1: Product: syz [ 2613.564620][ T5954] usb 9-1: Manufacturer: syz [ 2613.581469][ T5954] usb 9-1: SerialNumber: syz [ 2613.636092][ T5954] usb 9-1: config 0 descriptor?? [ 2613.870085][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2613.887954][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2613.928531][ T5954] pegasus_notetaker 9-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 2613.978243][ T5954] usb 9-1: USB disconnect, device number 105 [ 2614.316756][ T5258] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2614.482687][ T5258] usb 3-1: Using ep0 maxpacket: 16 [ 2614.494576][ T5258] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 2614.515919][ T5258] usb 3-1: config 0 has no interface number 0 [ 2614.555980][ T5258] usb 3-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 2614.594780][ T5258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.619949][ T5258] usb 3-1: Product: syz [ 2614.624935][ T5258] usb 3-1: Manufacturer: syz [ 2614.630144][ T5258] usb 3-1: SerialNumber: syz [ 2614.650793][ T5258] usb 3-1: config 0 descriptor?? [ 2614.727917][ T6659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2614.867252][ T6645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2614.877646][ T6645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2614.936875][ T5954] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 2615.086936][ T5954] usb 9-1: Using ep0 maxpacket: 8 [ 2615.098435][ T5954] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2615.107549][ T5954] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2615.123591][ T5954] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2615.143901][ T5954] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2615.168163][ T5954] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2615.205109][ T5954] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2615.209606][ T5258] go7007 3-1:0.41: probe with driver go7007 failed with error -12 [ 2615.216367][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.276792][ T5258] usb 3-1: USB disconnect, device number 43 [ 2615.451797][ T5954] usb 9-1: GET_CAPABILITIES returned 0 [ 2615.820732][ T6656] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.8091'. [ 2615.853870][ T5954] usbtmc 9-1:16.0: can't read capabilities [ 2615.877869][ T6656] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 2615.891738][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2616.029158][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2616.058236][ T5258] usb 9-1: USB disconnect, device number 106 [ 2616.986866][ T5976] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2617.148037][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 2617.156359][ T5976] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 2617.165079][ T5976] usb 6-1: config 179 has no interface number 0 [ 2617.191706][ T5976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2617.225907][ T5976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2617.419319][ T5976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2617.437899][ T5976] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2617.458945][ T5976] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2617.486100][ T5976] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2617.503162][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.530840][ T6673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2617.851247][ T5976] usb 6-1: USB disconnect, device number 58 [ 2617.851334][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2617.851391][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2618.067355][ T5954] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2618.180640][ T6697] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8099'. [ 2618.224460][ T6698] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8100'. [ 2618.307492][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 2618.425738][ T5954] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2618.437980][ T6697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2618.511724][ T5954] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2618.604790][ T5954] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2618.631937][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2618.657678][ T5954] usb 2-1: Product: syz [ 2618.671620][ T5954] usb 2-1: Manufacturer: syz [ 2618.770052][ T6705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2618.788070][ T5954] usb 2-1: SerialNumber: syz [ 2618.859870][ T6698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2619.389990][ T5954] usb 2-1: 0:26 : does not exist [ 2619.412242][ T5954] usb 2-1: USB disconnect, device number 44 [ 2619.501149][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2620.460273][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8104'. [ 2621.754071][ T30] audit: type=1326 audit(1758107000.479:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.7.8107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e2b8eba9 code=0x0 [ 2621.973956][T28541] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 2622.037105][ T5976] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2622.058968][ T6733] sctp: [Deprecated]: syz.2.8109 (pid 6733) Use of int in max_burst socket option deprecated. [ 2622.058968][ T6733] Use struct sctp_assoc_value instead [ 2622.082210][ T6733] tipc: Enabled bearer , priority 0 [ 2622.110141][ T6733] syzkaller0: entered promiscuous mode [ 2622.115675][ T6733] syzkaller0: entered allmulticast mode [ 2622.158700][ T6733] tipc: Resetting bearer [ 2622.169485][T28541] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2622.180820][ T6732] tipc: Resetting bearer [ 2622.191569][T28541] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2622.202668][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 2622.208088][T28541] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2622.232024][ T5976] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2622.255194][T28541] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2622.267509][ T5976] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 2622.279060][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.288222][ T6732] tipc: Disabling bearer [ 2622.302650][T28541] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.312121][ T5976] usb 2-1: Product: syz [ 2622.316382][ T5976] usb 2-1: Manufacturer: syz [ 2622.326256][ T5976] usb 2-1: SerialNumber: syz [ 2622.332118][T28541] usb 9-1: config 0 descriptor?? [ 2622.369815][ T5976] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input196 [ 2622.571506][ T6727] tipc: Started in network mode [ 2622.626818][ T6727] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 2623.035238][ T6727] tipc: Enabling of bearer rejected, failed to enable media [ 2623.220696][ T6745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8111'. [ 2623.311212][T28541] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 2623.357169][ T5954] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2623.506959][ T5954] usb 3-1: Using ep0 maxpacket: 8 [ 2623.525691][ T5954] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2623.552073][ T5954] usb 3-1: config 179 has no interface number 0 [ 2623.558703][T28618] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2623.571373][ T5954] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2623.584219][ T5954] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2623.607024][ T5954] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2623.619815][ T5954] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2623.632413][ T5954] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2623.646483][ T5954] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2623.656204][ T5954] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2623.666323][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.726788][T28618] usb 6-1: Using ep0 maxpacket: 32 [ 2623.770579][T28618] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2623.781801][ T5954] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input197 [ 2623.825030][T28618] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 2623.842268][T28618] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.866121][T28618] usb 6-1: config 255 has no interface number 0 [ 2623.873020][T28618] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2623.899117][T28618] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2623.915492][T28618] usb 6-1: config 255 interface 81 has no altsetting 0 [ 2624.005561][T28618] usb 6-1: string descriptor 0 read error: -22 [ 2624.014540][T28618] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 2624.033365][T28618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.203072][T28618] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input198 [ 2624.694550][ T5218] bcm5974 2-1:1.0: could not read from device [ 2624.720312][ T5976] usb 2-1: USB disconnect, device number 45 [ 2624.730614][ T5218] bcm5974 2-1:1.0: could not read from device [ 2624.763580][ T6738] bcm5974 2-1:1.0: could not read from device [ 2624.785436][ T5218] input input197: unable to receive magic message: -71 [ 2624.864377][ T5218] input input197: unable to receive magic message: -71 [ 2624.912389][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2624.920828][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2624.947854][ T5954] usb 3-1: USB disconnect, device number 44 [ 2625.051611][ C1] usbtouchscreen 6-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 2625.152517][ C1] usbtouchscreen 6-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 2625.308801][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.332184][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.356195][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.376040][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.386145][ T6767] netlink: 'syz.1.8113': attribute type 20 has an invalid length. [ 2625.405084][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.420140][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.549902][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.603752][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.622044][T28541] usb 9-1: reset high-speed USB device number 107 using dummy_hcd [ 2625.635236][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2625.648087][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2625.670314][T28541] usb 9-1: device reset changed ep0 maxpacket size! [ 2625.678373][ T5258] usb 9-1: USB disconnect, device number 107 [ 2625.891568][ T5258] usb 9-1: new high-speed USB device number 108 using dummy_hcd [ 2626.154580][ T5258] usb 9-1: Using ep0 maxpacket: 16 [ 2626.208226][ T5258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2626.219434][ T5258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2626.229692][ T5258] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2626.316944][ T5954] usb 6-1: USB disconnect, device number 59 [ 2626.327921][ T5258] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2626.376714][ T5258] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.457678][ T5258] usb 9-1: config 0 descriptor?? [ 2626.737776][ T5258] usbhid 9-1:0.0: can't add hid device: -71 [ 2626.777620][ T5258] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2626.883634][ T5258] usb 9-1: USB disconnect, device number 108 [ 2627.887795][ T6803] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 2627.937002][ T6803] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1 [ 2628.026671][ T5954] usb 9-1: new high-speed USB device number 109 using dummy_hcd [ 2628.293986][ T5954] usb 9-1: Using ep0 maxpacket: 16 [ 2628.335073][ T5954] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2628.836807][T28618] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2628.852891][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2629.012575][ T5954] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2629.041256][ T5954] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2629.077411][T28618] usb 6-1: Using ep0 maxpacket: 8 [ 2629.092796][ T5954] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2629.118435][T28618] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2629.183556][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2629.192518][T28618] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2629.294915][ T5954] usb 9-1: Product: syz [ 2629.318385][ T5954] usb 9-1: Manufacturer: syz [ 2629.323114][T28618] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2629.334939][ T5954] usb 9-1: SerialNumber: syz [ 2629.341932][T28618] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2629.382557][T28618] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2629.388747][ T6820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8127'. [ 2629.396915][ T5954] usb 9-1: config 0 descriptor?? [ 2629.438761][T28618] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2629.456245][ T5954] mcba_usb 9-1:0.0: Can't find endpoints [ 2629.473409][T28618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.793156][ T6820] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8127'. [ 2629.817431][T28618] usb 6-1: GET_CAPABILITIES returned 0 [ 2629.833846][T28618] usbtmc 6-1:16.0: can't read capabilities [ 2630.171692][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2630.230981][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2630.487022][T28618] usb 6-1: USB disconnect, device number 60 [ 2631.056047][ T6848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8131'. [ 2631.287013][T28618] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2631.466416][T28618] usb 6-1: Using ep0 maxpacket: 8 [ 2631.502144][T28618] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2631.514658][T28618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.526489][ T6852] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2631.555384][T28618] usb 6-1: Product: syz [ 2631.570012][T28618] usb 6-1: Manufacturer: syz [ 2631.605730][T28618] usb 6-1: SerialNumber: syz [ 2631.638858][T28618] usb 6-1: config 0 descriptor?? [ 2631.737193][ T6848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2631.970319][T28618] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2632.038768][T28618] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2632.096709][T28618] usb 6-1: USB disconnect, device number 61 [ 2632.491050][T28541] usb 9-1: USB disconnect, device number 109 [ 2632.676850][ T5258] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2632.832562][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2632.856439][ T5258] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2632.866710][T28618] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2632.885889][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.937512][ T5258] usb 2-1: config 0 descriptor?? [ 2633.016757][T28618] usb 6-1: Using ep0 maxpacket: 8 [ 2633.024173][T28618] usb 6-1: config 0 has an invalid interface number: 85 but max is 1 [ 2633.033584][T28618] usb 6-1: config 0 has an invalid interface number: 89 but max is 1 [ 2633.050067][T28618] usb 6-1: config 0 has no interface number 0 [ 2633.056250][T28618] usb 6-1: config 0 has no interface number 1 [ 2633.072793][T28618] usb 6-1: New USB device found, idVendor=0e96, idProduct=c001, bcdDevice=62.3f [ 2633.082190][T28618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2633.102749][T28618] usb 6-1: Product: syz [ 2633.111526][T28618] usb 6-1: Manufacturer: syz [ 2633.125873][T28618] usb 6-1: SerialNumber: syz [ 2633.146046][T28618] usb 6-1: config 0 descriptor?? [ 2633.170254][ T5258] usbhid 2-1:0.0: can't add hid device: -71 [ 2633.188038][ T5258] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2633.214098][ T5258] usb 2-1: USB disconnect, device number 46 [ 2634.006906][T28618] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2634.169976][T28618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2634.226915][T28618] usb 2-1: config 1 has no interface number 0 [ 2634.233160][T28618] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.258571][T28618] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2634.275926][T28618] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2634.295195][T28618] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2634.381821][T28618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2634.399422][T28618] usb 2-1: Product: syz [ 2634.403766][T28618] usb 2-1: Manufacturer: syz [ 2634.408659][T28618] usb 2-1: SerialNumber: syz [ 2635.254993][ T6888] syzkaller1: entered promiscuous mode [ 2635.260819][ T6888] syzkaller1: entered allmulticast mode [ 2635.272816][T28618] cdc_ncm 2-1:1.1: bind() failure [ 2635.462355][ T6914] tun0: tun_chr_ioctl cmd 2147767517 [ 2635.609503][ T43] usb 2-1: USB disconnect, device number 47 [ 2635.635456][T28541] usb 6-1: USB disconnect, device number 62 [ 2635.973605][ T6925] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8151'. [ 2636.252093][ T6926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2636.292437][ T6926] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2636.704111][ T6938] sctp: [Deprecated]: syz.8.8153 (pid 6938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2636.704111][ T6938] Use struct sctp_sack_info instead [ 2636.869837][ T6945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2637.736906][ T5954] usb 9-1: new full-speed USB device number 110 using dummy_hcd [ 2637.911031][ T5954] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2637.969537][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2637.992254][ T6957] tipc: Enabled bearer , priority 0 [ 2638.000574][ T6957] syzkaller0: entered promiscuous mode [ 2638.000931][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2638.010556][ T6957] syzkaller0: entered allmulticast mode [ 2638.020208][ T5954] usb 9-1: Product: syz [ 2638.024479][ T5954] usb 9-1: Manufacturer: syz [ 2638.036390][ T5954] usb 9-1: SerialNumber: syz [ 2638.051302][ T6958] syzkaller0: entered promiscuous mode [ 2638.070839][ T6958] syzkaller0: entered allmulticast mode [ 2638.085906][ T6959] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2638.124688][ T6963] tipc: Resetting bearer [ 2638.153524][ T6956] tipc: Resetting bearer [ 2638.200321][ T6956] tipc: Disabling bearer [ 2638.279062][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8157'. [ 2638.467192][ T6915] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2638.567123][ T5954] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2639.377556][ T5954] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 2639.588582][ T5954] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 2639.614124][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2639.627797][ T5954] usb 2-1: can't read configurations, error -61 [ 2639.757034][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2639.776993][ T5954] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 2639.972170][ T5954] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 2640.012103][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2640.054943][ T5954] usb 2-1: can't read configurations, error -61 [ 2640.095478][ T5954] usb usb2-port1: attempt power cycle [ 2640.486712][ T5954] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 2640.558427][ T5954] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 2640.592393][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2640.605996][ T5954] usb 2-1: can't read configurations, error -61 [ 2640.765123][ T5954] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 2640.795292][ T7000] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8169'. [ 2640.986859][ T5954] usb 2-1: too many configurations: 39, using maximum allowed: 8 [ 2641.002662][ T5954] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 2641.031788][ T5954] usb 2-1: can't read configurations, error -61 [ 2641.046452][ T5954] usb usb2-port1: unable to enumerate USB device [ 2641.088179][ T7003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2641.221380][ T7000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2641.271376][ T7000] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2642.438185][ T7006] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8172'. [ 2642.982288][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2643.956948][T28541] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2644.109140][T28541] usb 6-1: Using ep0 maxpacket: 32 [ 2644.131853][T28541] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2644.142866][T28541] usb 6-1: config 255 has an invalid interface number: 81 but max is 0 [ 2644.162334][T28541] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 2644.176720][T28618] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2644.179662][T28541] usb 6-1: config 255 has no interface number 0 [ 2644.194579][T28541] usb 6-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 2644.238384][T28541] usb 6-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2644.249830][T28541] usb 6-1: config 255 interface 81 has no altsetting 0 [ 2644.259715][T28541] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 2644.269146][T28541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2644.280145][T28541] usb 6-1: Product: ъ [ 2644.284280][T28541] usb 6-1: Manufacturer: 늚诓ꈕ벰Ḥ貼㿃䢂䮂权ὰ雘赘巩⠹慭ų쭰껃蹓蔚篋瀊뙱ⵥ촩똘릔瘇阞識䁜윞ᡈᪧ緀ꍴì䏺懼괚ǭ๬⎅ީ轟ꡓ褼ᐳ適Ǔᦸꠟ硡෢ [ 2644.305611][T28541] usb 6-1: SerialNumber: 閸᧡䣜뫧舁㤗櫦겁븏흥ꈴ೟誑ʽ퀏㹀䑷ቂ䎬⒅鸤כּ層蛃姦ᡬ麩殦哝미㢀⛵촧膎궫㏋तෳ实䔏툁勷䤸놢哶籏쎄搨罦娞廈ꌻ幚 [ 2644.327388][T28618] usb 3-1: device descriptor read/64, error -71 [ 2644.349702][ T7021] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2644.529011][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8178'. [ 2644.543721][ T7030] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8178'. [ 2644.566944][T28618] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 2644.575914][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2644.595888][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2644.716955][T28618] usb 3-1: device descriptor read/64, error -71 [ 2644.837712][T28618] usb usb3-port1: attempt power cycle [ 2644.983891][T28541] input: 늚诓ꈕ벰Ḥ貼㿃䢂䮂权ὰ雘赘巩⠹慭ų쭰껃蹓蔚篋瀊뙱ⵥ촩똘릔瘇阞識䁜윞ᡈᪧ緀ꍴì䏺 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:255.81/input/input200 [ 2645.003788][ C1] vkms_vblank_simulate: vblank timer overrun [ 2645.151231][T28541] usb 6-1: USB disconnect, device number 63 [ 2645.296895][T28618] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2645.347521][T28618] usb 3-1: device descriptor read/8, error -71 [ 2645.500112][ T366] usb 9-1: USB disconnect, device number 110 [ 2645.520134][ T366] usblp0: removed [ 2645.597135][T28618] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 2645.630830][ C0] raw-gadget.2 gadget.2: ignoring, device is not running [ 2645.646036][T28618] usb 3-1: device descriptor read/8, error -32 [ 2645.789303][T28618] usb usb3-port1: unable to enumerate USB device [ 2646.180724][ T7056] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8184'. [ 2646.398644][T28618] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2646.451823][ T7050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2646.532515][ T7050] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2646.616813][T28618] usb 3-1: device descriptor read/64, error -71 [ 2646.658340][ T366] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 2646.896849][T28618] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2646.974085][ T366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2647.015924][ T366] usb 6-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2647.043017][ T366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.097653][ T366] usb 6-1: config 0 descriptor?? [ 2647.126763][T28618] usb 3-1: device descriptor read/64, error -71 [ 2647.237477][T28618] usb usb3-port1: attempt power cycle [ 2647.351474][ T366] usbhid 6-1:0.0: can't add hid device: -71 [ 2647.358096][ T366] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2647.411023][ T366] usb 6-1: USB disconnect, device number 64 [ 2647.576659][T28618] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2647.617433][T28618] usb 3-1: device descriptor read/8, error -71 [ 2647.887126][T28618] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2647.908048][T28541] usb 9-1: new high-speed USB device number 111 using dummy_hcd [ 2647.927557][T28618] usb 3-1: device descriptor read/8, error -71 [ 2648.047277][T28618] usb usb3-port1: unable to enumerate USB device [ 2648.067093][T28541] usb 9-1: Using ep0 maxpacket: 32 [ 2648.086278][T28541] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2648.123764][T28541] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2648.134821][T28541] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2648.147300][T28541] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2648.163972][T28541] usb 9-1: config 1 interface 1 has no altsetting 0 [ 2648.174970][T28541] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2648.190700][T28541] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.199693][T28541] usb 9-1: Product: syz [ 2648.204072][T28541] usb 9-1: Manufacturer: syz [ 2648.214218][T28541] usb 9-1: SerialNumber: syz [ 2648.296854][T19276] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2648.467099][T19276] usb 6-1: Using ep0 maxpacket: 32 [ 2648.483287][T19276] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 2648.483380][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2648.500210][T19276] usb 6-1: config 0 has no interface number 0 [ 2648.506540][T19276] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2648.520505][T19276] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 2648.553092][T19276] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 2648.571425][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2648.581294][T19276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.593314][T19276] usb 6-1: Product: syz [ 2648.599653][T19276] usb 6-1: Manufacturer: syz [ 2648.613998][T28541] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 2648.614200][T19276] usb 6-1: SerialNumber: syz [ 2648.634016][T28541] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 2648.653949][T19276] usb 6-1: config 0 descriptor?? [ 2648.664479][ T7065] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2648.673922][ T7065] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2648.699755][T19276] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2648.705870][T28541] usb 9-1: USB disconnect, device number 111 [ 2648.777307][T28618] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2648.926655][T28618] usb 2-1: device descriptor read/64, error -71 [ 2649.009906][T19276] usb 6-1: USB disconnect, device number 65 [ 2649.196836][T28618] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2649.343693][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8192'. [ 2649.355772][ T7076] netlink: 'syz.8.8192': attribute type 10 has an invalid length. [ 2649.368185][T28618] usb 2-1: device descriptor read/64, error -71 [ 2649.512314][T28618] usb usb2-port1: attempt power cycle [ 2649.664591][ T7086] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8195'. [ 2649.747806][T19276] usb 9-1: new high-speed USB device number 112 using dummy_hcd [ 2649.876840][T28618] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2649.957107][T28618] usb 2-1: device descriptor read/8, error -71 [ 2649.963703][T19276] usb 9-1: Using ep0 maxpacket: 16 [ 2650.039106][T19276] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 2650.106755][T19276] usb 9-1: config 0 has no interface number 0 [ 2650.146862][T28541] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2650.236943][T28618] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2650.261498][T19276] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2650.281450][T19276] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.295953][T28618] usb 2-1: device descriptor read/8, error -71 [ 2650.360541][T19276] usb 9-1: Product: syz [ 2650.366748][T19276] usb 9-1: Manufacturer: syz [ 2650.377271][T19276] usb 9-1: SerialNumber: syz [ 2650.391698][T28541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2650.392454][T19276] usb 9-1: config 0 descriptor?? [ 2650.408035][T28541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2650.420559][T19276] hub 9-1:0.145: bad descriptor, ignoring hub [ 2650.431814][T19276] hub 9-1:0.145: probe with driver hub failed with error -5 [ 2650.453856][T19276] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input201 [ 2650.456677][T28541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 2650.467011][T28618] usb usb2-port1: unable to enumerate USB device [ 2650.489964][T28541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1938, setting to 1024 [ 2650.545058][T28541] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2650.554640][T28541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.568831][T28541] usb 6-1: Product: syz [ 2650.573033][T28541] usb 6-1: Manufacturer: syz [ 2650.578173][T28541] usb 6-1: SerialNumber: syz [ 2650.597081][T28541] usb 6-1: config 0 descriptor?? [ 2650.614257][ T7089] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2650.741485][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2650.752363][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2650.825111][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8196'. [ 2650.834138][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8196'. [ 2650.877532][ T43] usb 9-1: USB disconnect, device number 112 [ 2650.935606][T28541] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2651.117793][T28541] usb 6-1: USB disconnect, device number 66 [ 2651.296905][ T7099] bridge6: entered promiscuous mode [ 2651.656699][T19276] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 2651.907420][ T7115] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8203'. [ 2651.917725][ T7115] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 2651.967987][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.974337][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.988583][T19276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2652.021810][T19276] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2652.035807][T19276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.083519][T19276] usb 3-1: config 0 descriptor?? [ 2652.209944][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8204'. [ 2652.480215][T19276] usbhid 3-1:0.0: can't add hid device: -71 [ 2652.532655][T19276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2652.647982][T19276] usb 3-1: USB disconnect, device number 53 [ 2653.393085][ T7105] syz.8.8201 (7105): drop_caches: 1 [ 2653.415909][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8206'. [ 2653.439375][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8206'. [ 2653.926740][ T5976] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2654.086975][ T5976] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2654.139497][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.179296][ T5976] usb 6-1: Product: syz [ 2654.192000][ T5976] usb 6-1: Manufacturer: syz [ 2654.205766][ T5976] usb 6-1: SerialNumber: syz [ 2654.221466][ T5976] usb 6-1: config 0 descriptor?? [ 2654.286929][ T5258] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2654.317027][T28618] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2654.426969][ T43] usb 9-1: new high-speed USB device number 113 using dummy_hcd [ 2654.462050][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2654.473244][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2654.477206][T28618] usb 3-1: Using ep0 maxpacket: 8 [ 2654.484208][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 2654.504528][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1938, setting to 1024 [ 2654.518761][T28618] usb 3-1: config 0 has no interfaces? [ 2654.531608][ T5258] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2654.533919][T28618] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2654.541384][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.555713][T28618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.575227][ T5258] usb 2-1: Product: syz [ 2654.589122][T28618] usb 3-1: Product: syz [ 2654.598268][ T5258] usb 2-1: Manufacturer: syz [ 2654.599269][T28618] usb 3-1: Manufacturer: syz [ 2654.602928][ T5258] usb 2-1: SerialNumber: syz [ 2654.612545][T28618] usb 3-1: SerialNumber: syz [ 2654.615187][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 2654.647893][ T7132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2654.665914][ T7132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2654.674963][T28618] usb 3-1: config 0 descriptor?? [ 2654.677084][ T43] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 2654.693983][ T43] usb 9-1: config 0 has no interface number 0 [ 2654.707498][ T5976] usb 6-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 2654.716374][ T5258] usb 2-1: config 0 descriptor?? [ 2654.724865][ T7148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2654.734829][ T5976] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 2654.743265][ T43] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2654.754919][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.764298][ T5976] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 2654.772882][ T43] usb 9-1: Product: syz [ 2654.781350][ T43] usb 9-1: Manufacturer: syz [ 2654.785963][ T43] usb 9-1: SerialNumber: syz [ 2654.793295][ T5976] usb 6-1: USB disconnect, device number 67 [ 2654.843267][ T43] usb 9-1: config 0 descriptor?? [ 2654.853512][ T43] hub 9-1:0.145: bad descriptor, ignoring hub [ 2654.862722][ T43] hub 9-1:0.145: probe with driver hub failed with error -5 [ 2654.876976][ T43] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input202 [ 2654.937379][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2654.947750][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2654.968725][ T43] usb 9-1: USB disconnect, device number 113 [ 2655.019005][ T5258] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2655.052643][ T7150] FAULT_INJECTION: forcing a failure. [ 2655.052643][ T7150] name failslab, interval 1, probability 0, space 0, times 0 [ 2655.089786][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.8.8215 Not tainted syzkaller #0 PREEMPT(full) [ 2655.089815][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2655.089827][ T7150] Call Trace: [ 2655.089836][ T7150] [ 2655.089845][ T7150] dump_stack_lvl+0x189/0x250 [ 2655.089876][ T7150] ? __pfx____ratelimit+0x10/0x10 [ 2655.089898][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2655.089920][ T7150] ? __pfx__printk+0x10/0x10 [ 2655.089949][ T7150] ? __pfx___might_resched+0x10/0x10 [ 2655.089969][ T7150] ? fs_reclaim_acquire+0x7d/0x100 [ 2655.089994][ T7150] should_fail_ex+0x414/0x560 [ 2655.090028][ T7150] should_failslab+0xa8/0x100 [ 2655.090057][ T7150] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2655.090081][ T7150] ? security_file_alloc+0x34/0x330 [ 2655.090112][ T7150] security_file_alloc+0x34/0x330 [ 2655.090140][ T7150] init_file+0x93/0x2f0 [ 2655.090172][ T7150] alloc_empty_file+0x6e/0x1d0 [ 2655.090194][ T7150] path_openat+0x107/0x3830 [ 2655.090215][ T7150] ? arch_stack_walk+0xfc/0x150 [ 2655.090252][ T7150] ? stack_trace_save+0x9c/0xe0 [ 2655.090279][ T7150] ? stack_depot_save_flags+0x40/0x860 [ 2655.090315][ T7150] ? kasan_save_track+0x4f/0x80 [ 2655.090336][ T7150] ? kasan_save_track+0x3e/0x80 [ 2655.090357][ T7150] ? __kasan_slab_alloc+0x6c/0x80 [ 2655.090381][ T7150] ? getname_flags+0xb8/0x540 [ 2655.090399][ T7150] ? __pfx_path_openat+0x10/0x10 [ 2655.090420][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.090463][ T7150] do_filp_open+0x1fa/0x410 [ 2655.090484][ T7150] ? __lock_acquire+0xab9/0xd20 [ 2655.090514][ T7150] ? __pfx_do_filp_open+0x10/0x10 [ 2655.090562][ T7150] ? _raw_spin_unlock+0x28/0x50 [ 2655.090590][ T7150] ? alloc_fd+0x64c/0x6c0 [ 2655.090631][ T7150] do_sys_openat2+0x121/0x1c0 [ 2655.090655][ T7150] ? __pfx_do_sys_openat2+0x10/0x10 [ 2655.090677][ T7150] ? ksys_write+0x22a/0x250 [ 2655.090703][ T7150] ? __pfx_ksys_write+0x10/0x10 [ 2655.090724][ T7150] ? rcu_is_watching+0x15/0xb0 [ 2655.090749][ T7150] __x64_sys_openat+0x138/0x170 [ 2655.090776][ T7150] do_syscall_64+0xfa/0x3b0 [ 2655.090795][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 2655.090815][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.090834][ T7150] ? clear_bhb_loop+0x60/0xb0 [ 2655.090858][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2655.090876][ T7150] RIP: 0033:0x7f44b7d8d510 [ 2655.090894][ T7150] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2655.090911][ T7150] RSP: 002b:00007f44b8cedb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2655.090932][ T7150] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44b7d8d510 [ 2655.090946][ T7150] RDX: 0000000000000000 RSI: 00007f44b8cedc10 RDI: 00000000ffffff9c [ 2655.090960][ T7150] RBP: 00007f44b8cedc10 R08: 0000000000000000 R09: 0000000000000000 [ 2655.090972][ T7150] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 2655.090985][ T7150] R13: 00007f44b7fd6038 R14: 00007f44b7fd5fa0 R15: 00007f44b80ffa28 [ 2655.091018][ T7150] [ 2655.240072][T19276] usb 2-1: USB disconnect, device number 56 [ 2655.241656][ T43] usb 9-1: new high-speed USB device number 114 using dummy_hcd [ 2655.364125][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2655.462867][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2655.685838][ T7160] syz.5.8217 (7160): drop_caches: 1 [ 2656.266991][ T5976] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 2656.397027][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2656.637366][ T5976] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 2656.768312][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2656.843777][ T43] usb 3-1: USB disconnect, device number 54 [ 2656.886906][ T5976] usb usb2-port1: attempt power cycle [ 2656.961056][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 2656.978945][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8224'. [ 2657.065704][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8225'. [ 2657.236857][ T5976] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 2657.262500][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2657.517669][ T5976] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 2657.537544][ T43] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2657.546416][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2657.666743][T28541] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 2657.674554][ T5976] usb usb2-port1: unable to enumerate USB device [ 2657.696663][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 2657.708854][ T43] usb 6-1: config 5 has an invalid interface number: 168 but max is 0 [ 2657.735957][ T43] usb 6-1: config 5 has no interface number 0 [ 2657.756736][ T43] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 2657.796986][ T43] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2657.819273][ T43] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 2657.837538][T28541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2657.856672][ T43] usb 6-1: config 5 interface 168 has no altsetting 0 [ 2657.867827][T28541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2657.887073][T28618] usb 9-1: new high-speed USB device number 115 using dummy_hcd [ 2657.925389][ T43] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 2657.955846][T28541] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2657.973850][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.992944][T28541] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 2658.002774][ T43] usb 6-1: Product: syz [ 2658.023017][ T43] usb 6-1: Manufacturer: syz [ 2658.032445][ T43] usb 6-1: SerialNumber: syz [ 2658.038772][T28541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2658.046975][T28618] usb 9-1: Using ep0 maxpacket: 16 [ 2658.053536][T28618] usb 9-1: config 4 has an invalid interface number: 51 but max is 0 [ 2658.059868][T28541] usb 3-1: config 0 descriptor?? [ 2658.062960][ T7193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2658.073528][T28541] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input203 [ 2658.124811][T28618] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2658.136101][ T7193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2658.157442][T28618] usb 9-1: config 4 has no interface number 0 [ 2658.163592][T28618] usb 9-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2658.207250][T28618] usb 9-1: config 4 interface 51 has no altsetting 0 [ 2658.226777][T28618] usb 9-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 2658.252732][T28618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.267449][T28618] usb 9-1: Product: syz [ 2658.272494][ T5218] bcm5974 3-1:0.0: could not read from device [ 2658.283026][ T5218] bcm5974 3-1:0.0: could not read from device [ 2658.299156][T28618] usb 9-1: Manufacturer: syz [ 2658.305258][ T5218] bcm5974 3-1:0.0: could not read from device [ 2658.312165][T28541] usb 3-1: USB disconnect, device number 55 [ 2658.336217][T28618] usb 9-1: SerialNumber: syz [ 2658.368001][ T6017] udevd[6017]: Unable to EVIOCGABS device "/dev/input/event4" [ 2658.375922][ T6017] udevd[6017]: Unable to EVIOCGABS device "/dev/input/event4" [ 2658.389947][ T6017] udevd[6017]: Unable to EVIOCGABS device "/dev/input/event4" [ 2658.398246][ T6017] udevd[6017]: Unable to EVIOCGABS device "/dev/input/event4" [ 2658.418512][T28618] cdc_eem 9-1:4.51: probe with driver cdc_eem failed with error -22 [ 2658.607821][ C1] usb 6-1: NFC: Urb failure (status -71) [ 2658.634534][ C1] usb 6-1: NFC: Urb failure (status -71) [ 2658.643125][ T43] usb 6-1: NFC: Unable to get FW version [ 2658.656397][ T43] pn533_usb 6-1:5.168: probe with driver pn533_usb failed with error -71 [ 2658.700311][ T43] usb 6-1: USB disconnect, device number 68 [ 2658.837406][ T7211] netlink: 'syz.8.8230': attribute type 2 has an invalid length. [ 2658.906355][ T7211] : entered promiscuous mode [ 2659.426858][T28541] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2659.620140][T28541] usb 2-1: Using ep0 maxpacket: 16 [ 2659.641776][T28541] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2659.655861][T28541] usb 2-1: config 1 has an invalid interface number: 26 but max is 1 [ 2659.706288][T28541] usb 2-1: config 1 has an invalid interface number: 89 but max is 1 [ 2659.774059][T28541] usb 2-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 2659.795325][T28541] usb 2-1: config 1 has no interface number 0 [ 2659.905578][T28541] usb 2-1: config 1 has no interface number 1 [ 2659.945431][T28541] usb 2-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 2659.971305][T28541] usb 2-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 2660.005206][T28541] usb 2-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 2660.674540][ T7236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2660.741601][T28541] usb 2-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 2660.786381][T28541] usb 2-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2660.924304][T28541] usb 2-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2660.955364][T28541] usb 2-1: config 1 interface 26 has no altsetting 0 [ 2661.006640][T28541] usb 2-1: config 1 interface 89 has no altsetting 0 [ 2661.043456][T28541] usb 2-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 2661.055090][T28541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.076456][T28541] usb 2-1: Product: syz [ 2661.094979][T28541] usb 2-1: Manufacturer: syz [ 2661.105111][T28541] usb 2-1: SerialNumber: syz [ 2661.181951][ T7223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2661.213365][ T7223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2661.227004][ T5954] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2661.426821][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 2661.433964][ T5954] usb 3-1: config 0 has an invalid interface number: 145 but max is 0 [ 2661.541385][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2661.554212][ T7244] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14) [ 2661.560842][ T7244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2661.571975][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2661.616487][T28541] usb 2-1: unknown interface protocol 0x7d, assuming v1 [ 2661.653298][T28541] usb 2-1: 26:2 : does not exist [ 2661.656032][ T5954] usb 3-1: config 0 has no interface number 0 [ 2661.688967][ T5954] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2661.698344][ T7244] vhci_hcd vhci_hcd.0: Device attached [ 2661.714094][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.728587][ T5954] usb 3-1: Product: syz [ 2661.732773][ T5954] usb 3-1: Manufacturer: syz [ 2661.754688][ T5954] usb 3-1: SerialNumber: syz [ 2661.756537][T28541] usb 2-1: unknown interface protocol 0x13, assuming v1 [ 2661.785244][T28541] usb 2-1: 89:2 : does not exist [ 2661.799112][ T5954] usb 3-1: config 0 descriptor?? [ 2661.817575][ T5954] hub 3-1:0.145: bad descriptor, ignoring hub [ 2661.835871][ T5954] hub 3-1:0.145: probe with driver hub failed with error -5 [ 2661.875176][T28541] usb 2-1: USB disconnect, device number 61 [ 2661.881704][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.145/input/input204 [ 2661.936732][ T5976] usb 47-1: new high-speed USB device number 4 using vhci_hcd [ 2662.045285][ T1013] udevd[1013]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2662.068606][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2662.105887][ T7245] vhci_hcd: connection reset by peer [ 2662.127525][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2662.136980][ T12] vhci_hcd: stop threads [ 2662.166255][ T12] vhci_hcd: release socket [ 2662.201703][ T12] vhci_hcd: disconnect device [ 2662.301316][ T7250] fuse: Invalid gid '00000000000000000003' [ 2662.425437][ T5258] usb 3-1: USB disconnect, device number 56 [ 2662.704175][ T43] usb 9-1: USB disconnect, device number 115 [ 2662.946782][ T5258] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2662.966858][T28541] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2663.001304][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8244'. [ 2663.127167][ T5258] usb 2-1: Using ep0 maxpacket: 16 [ 2663.165355][T28541] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2663.175137][T28541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.288680][ T5258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2663.335077][T28541] usb 6-1: Product: syz [ 2663.342023][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2663.377287][T28541] usb 6-1: Manufacturer: syz [ 2663.427009][T28541] usb 6-1: SerialNumber: syz [ 2663.492415][ T5258] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2663.558837][ T5258] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2663.626844][ T7268] netlink: 'syz.7.8247': attribute type 3 has an invalid length. [ 2663.664704][ T5258] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2663.747235][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8247'. [ 2663.930597][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.998504][ T5258] usb 2-1: Product: syz [ 2664.040231][ T5258] usb 2-1: Manufacturer: syz [ 2664.061245][ T5258] usb 2-1: SerialNumber: syz [ 2664.097653][ T5258] usb 2-1: config 0 descriptor?? [ 2664.126765][T28541] rtl8150 6-1:1.0: couldn't reset the device [ 2664.155311][ T5258] mcba_usb 2-1:0.0: Can't find endpoints [ 2664.172705][T28541] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 2664.258586][T28541] usb 6-1: USB disconnect, device number 69 [ 2667.257118][ T5976] vhci_hcd: vhci_device speed not set [ 2667.275242][ T5954] usb 2-1: USB disconnect, device number 62 [ 2667.951642][ T5954] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2668.512349][ T5954] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 2668.526707][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2668.561757][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2668.852089][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2668.863921][ T5954] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2668.902422][ T5954] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2668.921689][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2669.008680][ T7308] nvme_fabrics: missing parameter 'transport=%s' [ 2669.026885][ T7308] nvme_fabrics: missing parameter 'nqn=%s' [ 2669.043094][ T5954] usb 6-1: config 0 descriptor?? [ 2669.056031][ T7303] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2669.474129][ T5954] plantronics 0003:047F:FFFF.006C: reserved main item tag 0xd [ 2669.525102][ T5954] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2669.617140][ T5954] usb 6-1: USB disconnect, device number 70 [ 2669.630635][ T7323] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 2669.635504][ T7325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8258'. [ 2669.654903][ T7325] tipc: Enabling of bearer rejected, already enabled [ 2669.664094][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8259'. [ 2669.666726][ T7325] netlink: 'syz.1.8258': attribute type 1 has an invalid length. [ 2669.710246][ T7315] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8257'. [ 2669.892322][ T7335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2670.057225][ T7320] fido_id[7320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2670.586589][ T5976] usb 9-1: new full-speed USB device number 116 using dummy_hcd [ 2670.676735][ T5258] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2670.709610][ T7348] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8264'. [ 2670.756311][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2670.778194][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2670.805602][ T5976] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2670.854476][ T5976] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 2670.900217][ T5976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2670.951098][ T5258] usb 2-1: Using ep0 maxpacket: 16 [ 2671.006838][ T5258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2671.026893][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2671.044083][ T5976] usb 9-1: config 0 descriptor?? [ 2671.097038][ T5258] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2671.107705][ T7342] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2671.117347][ T5258] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2671.236000][ T5258] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2671.250129][ T5954] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2671.354642][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.409769][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2671.419947][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2671.472423][ T5258] usb 2-1: Product: syz [ 2671.476658][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2671.476687][ T5954] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2671.479915][ T5954] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 2671.487556][ T5258] usb 2-1: Manufacturer: syz [ 2671.535542][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2671.558441][ T5976] usb 9-1: string descriptor 0 read error: -71 [ 2671.571679][ T5976] usbhid 9-1:0.0: can't add hid device: -22 [ 2671.578891][ T5976] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 2671.594487][ T5258] usb 2-1: SerialNumber: syz [ 2671.596870][ T5954] usb 6-1: Product: syz [ 2671.603289][ T5954] usb 6-1: Manufacturer: syz [ 2671.617682][ T5976] usb 9-1: USB disconnect, device number 116 [ 2671.639295][ T5258] usb 2-1: config 0 descriptor?? [ 2671.733453][ T5258] mcba_usb 2-1:0.0: Can't find endpoints [ 2671.776829][ T5954] usb 6-1: SerialNumber: syz [ 2671.806943][ T5954] usb 6-1: config 0 descriptor?? [ 2671.819426][ T5954] kvaser_usb 6-1:0.0: error -EMSGSIZE: Cannot get software info [ 2671.827986][ T5954] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2672.023927][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2672.049888][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2672.067830][ T5954] usb 6-1: USB disconnect, device number 71 [ 2672.763624][ T5233] Dev loop6: unable to read RDB block 1 [ 2672.796230][ T5233] loop6: unable to read partition table [ 2672.808904][ T5233] loop6: partition table beyond EOD, truncated [ 2672.824036][ T7367] fuse: Bad value for 'fd' [ 2672.851852][ T7367] netlink: 'syz.7.8270': attribute type 1 has an invalid length. [ 2672.861054][ T5954] usb 9-1: new full-speed USB device number 117 using dummy_hcd [ 2673.141897][ T5954] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 2673.150476][ T5954] usb 9-1: config 0 has no interface number 0 [ 2673.161412][ T5954] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2673.170729][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.182964][ T5954] usb 9-1: Product: syz [ 2673.189711][ T5954] usb 9-1: Manufacturer: syz [ 2673.199061][ T5954] usb 9-1: SerialNumber: syz [ 2673.234001][ T5954] usb 9-1: config 0 descriptor?? [ 2674.146855][ T5954] usb 9-1: Firmware version (0.0) predates our first public release. [ 2674.174848][ T5954] usb 9-1: Please update to version 0.2 or newer [ 2674.454064][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2674.471688][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2675.179460][ T7383] syz.7.8273 (7383): drop_caches: 1 [ 2675.191568][ T7385] syz.7.8273 (7385): drop_caches: 1 [ 2675.218003][T28618] usb 2-1: USB disconnect, device number 63 [ 2675.543561][ T7383] syz.7.8273 (7383): drop_caches: 1 [ 2675.681583][ T5954] usb 9-1: USB disconnect, device number 117 [ 2675.687992][T28618] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2675.865035][T28618] usb 2-1: Using ep0 maxpacket: 16 [ 2675.937619][T28618] usb 2-1: config 0 has an invalid interface number: 145 but max is 0 [ 2675.945863][T28618] usb 2-1: config 0 has no interface number 0 [ 2676.273617][T28618] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2676.294306][T28618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.314270][T28618] usb 2-1: Product: syz [ 2676.324524][T28618] usb 2-1: Manufacturer: syz [ 2676.330263][T28618] usb 2-1: SerialNumber: syz [ 2676.346206][T28618] usb 2-1: config 0 descriptor?? [ 2676.357976][T28618] hub 2-1:0.145: bad descriptor, ignoring hub [ 2676.398348][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.415273][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.422323][T28618] hub 2-1:0.145: probe with driver hub failed with error -5 [ 2676.456741][T28618] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.145/input/input206 [ 2676.646660][ T5258] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2676.653824][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2676.778892][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2676.856864][ T5258] usb 6-1: device descriptor read/64, error -71 [ 2676.919525][T28618] usb 2-1: USB disconnect, device number 64 [ 2677.096760][ T5258] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2677.226994][ T5258] usb 6-1: device descriptor read/64, error -71 [ 2677.347303][ T5258] usb usb6-port1: attempt power cycle [ 2677.406221][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8284'. [ 2677.610736][ T5954] usb 9-1: new full-speed USB device number 118 using dummy_hcd [ 2677.621672][T28618] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2677.716749][ T5258] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2677.737508][ T5258] usb 6-1: device descriptor read/8, error -71 [ 2677.778664][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2677.786847][ T5976] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2677.800790][T28618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2677.816062][ T5954] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 2677.830230][T28618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2677.841116][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2677.851307][T28618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 2677.869089][ T5954] usb 9-1: config 0 descriptor?? [ 2677.878320][T28618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1938, setting to 1024 [ 2677.890093][ T7429] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 2677.905134][T28618] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2677.918601][T28618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.932397][T28618] usb 3-1: Product: syz [ 2677.939786][T28618] usb 3-1: Manufacturer: syz [ 2677.944447][T28618] usb 3-1: SerialNumber: syz [ 2677.946811][ T5976] usb 2-1: Using ep0 maxpacket: 32 [ 2677.956416][T28618] usb 3-1: config 0 descriptor?? [ 2677.969395][ T7427] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2677.990164][ T5258] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2678.022162][ T5976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2678.037211][ T5258] usb 6-1: device descriptor read/8, error -71 [ 2678.051461][ T5976] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2678.060603][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2678.080439][ T5976] usb 2-1: Product: syz [ 2678.089257][ T5976] usb 2-1: Manufacturer: syz [ 2678.093904][ T5976] usb 2-1: SerialNumber: syz [ 2678.119648][ T5976] usb 2-1: config 0 descriptor?? [ 2678.140636][ T5976] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 2678.150430][ T5258] usb usb6-port1: unable to enumerate USB device [ 2678.189645][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8283'. [ 2678.228782][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2678.238805][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8283'. [ 2678.249683][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2678.259668][ T7437] random: crng reseeded on system resumption [ 2678.312079][T28618] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2678.598116][T28618] usb 3-1: USB disconnect, device number 57 [ 2679.263395][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8287'. [ 2679.366786][ T5258] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2679.526622][ T5258] usb 3-1: Using ep0 maxpacket: 32 [ 2679.534065][ T5258] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 2679.543131][ T5258] usb 3-1: config 0 has no interface number 0 [ 2679.550503][ T5258] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2679.573184][ T5258] usb 3-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.605047][ T5258] usb 3-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2679.629604][ T5258] usb 3-1: config 0 interface 2 has no altsetting 0 [ 2679.645537][ T5258] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2679.655840][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.675032][ T5258] usb 3-1: config 0 descriptor?? [ 2679.796692][T28618] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2679.976658][T28618] usb 6-1: Using ep0 maxpacket: 16 [ 2679.984800][T28618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2680.004522][T28618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2680.021608][T28618] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 2680.031952][T28618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2680.075720][T28618] usb 6-1: config 0 descriptor?? [ 2680.102111][ T5258] usbhid 3-1:0.2: can't add hid device: -71 [ 2680.119003][ T5258] usbhid 3-1:0.2: probe with driver usbhid failed with error -71 [ 2680.179791][T28618] usbhid 6-1:0.0: can't add hid device: -22 [ 2680.196171][T28618] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 2680.210725][ T5258] usb 3-1: USB disconnect, device number 58 [ 2680.494394][ T5954] usbhid 9-1:0.0: can't add hid device: -71 [ 2680.520479][ T43] usb 2-1: USB disconnect, device number 65 [ 2680.535520][ T5954] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2680.574438][ T5954] usb 9-1: USB disconnect, device number 118 [ 2681.016932][ T5258] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2681.322023][ T5258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.333806][ T5258] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2681.370237][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.417449][ T5258] usb 2-1: config 0 descriptor?? [ 2681.440945][ T5258] pwc: Askey VC010 type 2 USB webcam detected. [ 2681.550789][ T43] usb 9-1: new full-speed USB device number 119 using dummy_hcd [ 2681.867355][ T7463] netlink: 'syz.2.8292': attribute type 1 has an invalid length. [ 2682.089979][ T43] usb 9-1: config 0 has an invalid interface number: 29 but max is 0 [ 2682.146995][ T43] usb 9-1: config 0 has no interface number 0 [ 2682.446735][ T43] usb 9-1: config 0 interface 29 has no altsetting 0 [ 2682.448108][T28618] usb 6-1: USB disconnect, device number 76 [ 2682.454975][ T5258] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2682.478875][ T5258] pwc: recv_control_msg error -32 req 02 val 2700 [ 2682.490038][ T5258] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2682.497300][ T43] usb 9-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2682.506956][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.521561][ T5258] pwc: recv_control_msg error -32 req 04 val 1000 [ 2682.536725][ T43] usb 9-1: Product: syz [ 2682.551597][ T43] usb 9-1: Manufacturer: syz [ 2682.556317][ T43] usb 9-1: SerialNumber: syz [ 2682.563540][ T5258] pwc: recv_control_msg error -32 req 04 val 1300 [ 2682.572199][ T43] usb 9-1: config 0 descriptor?? [ 2682.577667][ T5258] pwc: recv_control_msg error -32 req 04 val 1400 [ 2682.587988][ T5258] pwc: recv_control_msg error -32 req 02 val 2000 [ 2682.600082][ T5258] pwc: recv_control_msg error -32 req 02 val 2100 [ 2682.612683][ T5258] pwc: recv_control_msg error -32 req 04 val 1500 [ 2682.620828][ T5258] pwc: recv_control_msg error -32 req 02 val 2500 [ 2682.773038][ T5258] pwc: recv_control_msg error -32 req 02 val 2400 [ 2682.841335][ T5258] pwc: recv_control_msg error -32 req 02 val 2600 [ 2682.848999][ T43] peak_usb 9-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 2682.883641][ T5258] pwc: recv_control_msg error -32 req 02 val 2900 [ 2683.035395][ T7473] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2683.087198][ T7473] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2683.102510][ T7473] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2683.116466][ T7473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2683.131408][ T7473] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2683.862432][T15095] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2683.875497][T15095] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.906849][T28541] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2683.999028][T15095] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.015028][T15095] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.022900][ T5258] pwc: recv_control_msg error -71 req 02 val 2800 [ 2684.133563][T28541] usb 3-1: Using ep0 maxpacket: 16 [ 2684.146831][ T5258] pwc: recv_control_msg error -71 req 04 val 1100 [ 2684.159540][T28541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2684.190499][ T5258] pwc: recv_control_msg error -71 req 04 val 1200 [ 2684.193341][T15095] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.228149][T28541] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2684.238075][T28541] usb 3-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 2684.248025][ T5258] pwc: Registered as video103. [ 2684.274481][T28541] usb 3-1: Manufacturer: syz [ 2684.320612][T15095] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.352622][ T5258] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input207 [ 2684.381449][T28541] usb 3-1: config 0 descriptor?? [ 2684.418610][ T5258] usb 2-1: USB disconnect, device number 66 [ 2684.583246][T15095] bond0: (slave ): Releasing backup interface [ 2684.607230][T15095] netdevsim netdevsim7  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2684.617293][T15095] netdevsim netdevsim7  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.877991][ T43] peak_usb 9-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 2684.886905][ T5258] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2684.933666][ T43] peak_usb 9-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 2685.112004][ T5258] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 2685.126621][ T5258] usb 2-1: config 201 has no interface number 0 [ 2685.147820][ T5258] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 2685.160772][ T43] peak_usb 9-1:0.29: probe with driver peak_usb failed with error -71 [ 2685.185097][ T5258] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2685.198063][ T5258] usb 2-1: config 201 interface 249 has no altsetting 0 [ 2685.208336][ T5258] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 2685.217460][ T7473] Bluetooth: hci4: command tx timeout [ 2685.227026][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2685.307212][ T43] usb 9-1: USB disconnect, device number 119 [ 2685.314487][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 2685.370869][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2685.435194][ T5258] usb 2-1: Product: syz [ 2685.481950][ T5258] usb 2-1: Manufacturer: syz [ 2685.541715][ T5258] usb 2-1: SerialNumber: syz [ 2685.547073][T28541] usbhid 3-1:0.0: can't add hid device: -71 [ 2685.576097][T28541] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2685.628423][T28541] usb 3-1: USB disconnect, device number 59 [ 2685.667269][ T43] usb 9-1: new full-speed USB device number 120 using dummy_hcd [ 2685.866781][ T43] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2685.957381][ T5258] ath6kl: Failed to submit usb control message: -71 [ 2685.974486][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2686.003250][ T5258] ath6kl: unable to send the bmi data to the device: -71 [ 2686.037179][ T43] usb 9-1: Product: syz [ 2686.041394][ T43] usb 9-1: Manufacturer: syz [ 2686.060266][ T5258] ath6kl: Unable to send get target info: -71 [ 2686.097779][ T43] usb 9-1: SerialNumber: syz [ 2686.107849][ T5258] ath6kl: Failed to init ath6kl core: -71 [ 2686.151238][ T43] usb 9-1: config 0 descriptor?? [ 2686.170601][ T5258] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 2686.281858][ T5258] usb 2-1: USB disconnect, device number 67 [ 2686.612631][ T43] airspy 9-1:0.0: Board ID: 00 [ 2686.621687][ T43] airspy 9-1:0.0: Firmware version: [ 2686.835838][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2686.875140][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2687.279146][T30597] Bluetooth: hci4: command tx timeout [ 2687.373977][ T43] airspy 9-1:0.0: usb_control_msg() failed -71 request 12 [ 2687.445325][ T43] airspy 9-1:0.0: Registered as swradio24 [ 2687.465357][ T43] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2687.494904][ T7537] delete_channel: no stack [ 2687.548315][ T43] usb 9-1: USB disconnect, device number 120 [ 2687.928366][ T5258] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2688.117651][ T5258] usb 2-1: Using ep0 maxpacket: 8 [ 2688.140376][ T5258] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 2688.186293][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.235440][ T5258] usb 2-1: Product: syz [ 2688.245086][ T5258] usb 2-1: Manufacturer: syz [ 2688.278277][ T5258] usb 2-1: SerialNumber: syz [ 2688.310743][ T5258] usb 2-1: config 0 descriptor?? [ 2688.336197][ T5258] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 2688.346749][ T43] usb 9-1: new full-speed USB device number 121 using dummy_hcd [ 2688.429054][ T7560] fuse: Bad value for 'group_id' [ 2688.435515][ T7560] fuse: Bad value for 'group_id' [ 2688.509141][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2688.520697][ T43] usb 9-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2688.531214][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2688.644150][ T43] usb 9-1: config 0 descriptor?? [ 2688.818371][ T5258] gspca_sonixj: reg_w1 err -71 [ 2688.823333][ T5258] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 2688.856455][ T5258] usb 2-1: USB disconnect, device number 68 [ 2688.960331][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 2688.985272][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2689.014389][ T43] usb 9-1: USB disconnect, device number 121 [ 2689.252923][T15095] bond0 (unregistering): Released all slaves [ 2689.269177][T15095] bond1 (unregistering): Released all slaves [ 2689.357441][T30597] Bluetooth: hci4: command tx timeout [ 2689.499553][T15095] bond2 (unregistering): Released all slaves [ 2689.659335][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2689.969432][T15095] bond3 (unregistering): Released all slaves [ 2689.976657][T13723] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2690.174011][T13723] usb 9-1: Using ep0 maxpacket: 32 [ 2690.196472][T13723] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 2690.220685][T13723] usb 9-1: config 0 has no interface number 0 [ 2690.230956][T13723] usb 9-1: config 0 interface 184 has no altsetting 0 [ 2690.250869][T13723] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2690.262341][T15095] bond4 (unregistering): Released all slaves [ 2690.270619][T13723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2690.367260][T13723] usb 9-1: Product: syz [ 2690.388806][T13723] usb 9-1: Manufacturer: syz [ 2690.393449][T13723] usb 9-1: SerialNumber: syz [ 2690.440186][T13723] usb 9-1: config 0 descriptor?? [ 2690.466634][T13723] smsc75xx v1.0.0 [ 2690.725097][T15095] bond5 (unregistering): (slave veth5): Releasing active interface [ 2690.741430][T15095] bond5 (unregistering): Released all slaves [ 2690.786310][ T7565] geneve2: entered promiscuous mode [ 2690.800014][ T7565] geneve2: entered allmulticast mode [ 2690.996201][T15095] : left promiscuous mode [ 2691.057087][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2691.087857][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2691.110731][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2691.187997][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 2691.205295][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 2691.222263][ T7476] bridge_slave_0: entered allmulticast mode [ 2691.228934][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 2691.231243][ T7476] bridge_slave_0: entered promiscuous mode [ 2691.236263][ T43] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 2691.249477][T15095] tipc: Left network mode [ 2691.273589][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2691.274792][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 2691.284819][ T43] usb 2-1: config 0 has no interface number 0 [ 2691.312217][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 2691.324242][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2691.362965][ T7476] bridge_slave_1: entered allmulticast mode [ 2691.377658][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.387491][T15095] IPVS: stopping master sync thread 6498 ... [ 2691.398827][ T7476] bridge_slave_1: entered promiscuous mode [ 2691.405419][ T43] usb 2-1: Product: syz [ 2691.412111][ T43] usb 2-1: Manufacturer: syz [ 2691.426405][ T43] usb 2-1: SerialNumber: syz [ 2691.437782][T30597] Bluetooth: hci4: command tx timeout [ 2691.450250][ T43] usb 2-1: config 0 descriptor?? [ 2691.592474][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2691.652785][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2691.733006][ T43] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 2691.756759][ T43] usb 2-1: No valid video chain found. [ 2692.232631][ T7582] delete_channel: no stack [ 2692.337370][ T5954] usb 2-1: USB disconnect, device number 69 [ 2692.429994][ T7596] netlink: 'syz.5.8319': attribute type 29 has an invalid length. [ 2692.448463][ T7598] netlink: 'syz.5.8319': attribute type 29 has an invalid length. [ 2692.481654][ T7476] team0: Port device team_slave_0 added [ 2692.505884][ T7476] team0: Port device team_slave_1 added [ 2692.783161][ T7598] tipc: Enabled bearer , priority 0 [ 2692.910724][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 2692.931674][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 2692.953396][ T7596] syzkaller0: entered promiscuous mode [ 2692.961171][ T7596] syzkaller0: entered allmulticast mode [ 2692.984944][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 2693.016922][T13723] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2693.041094][T13723] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 2693.055755][T13723] usb 9-1: USB disconnect, device number 122 [ 2693.142750][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2693.150642][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.187141][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2693.219758][ T7594] tipc: Resetting bearer [ 2693.283965][ T7594] tipc: Disabling bearer [ 2693.299063][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2693.311766][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2693.342746][T19276] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2693.370266][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2693.522208][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8322'. [ 2693.540453][T19276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 2693.581579][T15095] hsr_slave_0: left promiscuous mode [ 2693.586192][T19276] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2693.601100][T15095] hsr_slave_1: left promiscuous mode [ 2693.606906][T19276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.614925][T19276] usb 2-1: Product: syz [ 2693.635521][T19276] usb 2-1: Manufacturer: syz [ 2693.644494][T19276] usb 2-1: SerialNumber: syz [ 2693.660644][T19276] usb 2-1: config 0 descriptor?? [ 2693.681305][T19276] hub 2-1:0.0: bad descriptor, ignoring hub [ 2693.701234][T15095] veth1_macvtap: left promiscuous mode [ 2693.705099][T19276] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2693.713561][T15095] veth0_macvtap: left promiscuous mode [ 2693.721327][T15095] veth1_vlan: left promiscuous mode [ 2693.729251][T19276] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input208 [ 2693.732315][T15095] veth0_vlan: left promiscuous mode [ 2694.256711][ T43] usb 9-1: new full-speed USB device number 123 using dummy_hcd [ 2694.346840][ T5258] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2694.418644][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2694.436302][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2694.466327][ T43] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2694.475998][ T43] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2694.489517][ T43] usb 9-1: Manufacturer: syz [ 2694.508877][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2694.523628][ T43] usb 9-1: config 0 descriptor?? [ 2694.530103][ T5258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2694.548920][ T5258] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2694.584080][ T5258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2694.605727][ T5258] usb 3-1: config 0 descriptor?? [ 2694.978589][ T43] cougar 0003:060B:700A.006D: unknown main item tag 0x0 [ 2694.985757][ T43] cougar 0003:060B:700A.006D: unknown main item tag 0x0 [ 2694.994363][ T43] cougar 0003:060B:700A.006D: unknown main item tag 0x0 [ 2695.002143][ T43] cougar 0003:060B:700A.006D: unknown main item tag 0x0 [ 2695.010951][ T43] cougar 0003:060B:700A.006D: unknown main item tag 0x0 [ 2695.027646][ T43] cougar 0003:060B:700A.006D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2695.181916][ T43] usb 9-1: USB disconnect, device number 123 [ 2695.305652][ T7633] fido_id[7633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2695.454386][ T5258] hid-led 0003:27B8:01ED.006E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 2695.504471][ T5258] hid-led 0003:27B8:01ED.006E: ThingM blink(1) v1 initialized [ 2695.724495][ T7632] vxcan1: entered allmulticast mode [ 2695.744394][ T5258] usb 3-1: USB disconnect, device number 60 [ 2695.893922][ T7476] hsr_slave_0: entered promiscuous mode [ 2695.906196][ T7476] hsr_slave_1: entered promiscuous mode [ 2695.921996][ T7476] debugfs: 'hsr0' already exists in 'hsr' [ 2695.933592][ T7476] Cannot create hsr debugfs directory [ 2696.178282][ T5954] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2696.277524][ T5258] usb 2-1: USB disconnect, device number 70 [ 2696.367760][ T5954] usb 6-1: Using ep0 maxpacket: 8 [ 2696.384948][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2696.434466][ T5954] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2696.464599][ T5954] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2696.491544][T15095] IPVS: stop unused estimator thread 0... [ 2696.495695][ T5954] usb 6-1: Product: syz [ 2696.502703][ T5954] usb 6-1: Manufacturer: syz [ 2696.525211][ T5954] usb 6-1: SerialNumber: syz [ 2696.534240][ T7652] syzkaller0: left promiscuous mode [ 2696.760662][ T5954] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 2696.847297][ T5954] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2696.879354][ T5954] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 2696.913714][ T5954] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2696.960199][ T5954] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 2696.996907][T13723] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2697.012748][ T5954] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2697.063718][ T5954] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2697.199428][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2697.205895][T13723] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2697.236352][ T7659] syz.2.8331 (7659): drop_caches: 1 [ 2697.236397][ T7660] syz.2.8331 (7660): drop_caches: 1 [ 2697.243897][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2697.267085][T13723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.275118][T13723] usb 2-1: Product: syz [ 2697.281246][T19276] usb 9-1: new full-speed USB device number 124 using dummy_hcd [ 2697.307520][T13723] usb 2-1: Manufacturer: syz [ 2697.312165][T13723] usb 2-1: SerialNumber: syz [ 2697.340613][ T5976] usb 6-1: USB disconnect, device number 77 [ 2697.381927][ T5976] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2697.405373][T13723] usb 2-1: config 0 descriptor?? [ 2697.428093][ T5976] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2697.451805][ T5976] visor 6-1:1.0: device disconnected [ 2697.481028][T19276] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2697.501941][T19276] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2697.555030][T19276] usb 9-1: config 0 descriptor?? [ 2697.584256][T19276] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2697.650583][T13723] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2697.709260][ T7659] syz.2.8331 (7659): drop_caches: 1 [ 2698.074468][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2698.076704][T19276] gp8psk: usb in 128 operation failed. [ 2698.094935][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2698.096212][T19276] gp8psk: usb in 137 operation failed. [ 2698.111635][ T7476] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2698.134584][ T7476] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2698.144018][T19276] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2698.167610][ T7476] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2698.170472][T19276] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 2698.194058][ T7476] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2698.206922][ T5976] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2698.216867][T19276] usb 9-1: USB disconnect, device number 124 [ 2698.389044][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2698.402083][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2698.456683][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 2698.535276][ T5976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1938, setting to 1024 [ 2698.569885][ T5976] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2698.579375][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2698.604957][ T5976] usb 3-1: Product: syz [ 2698.626014][ T5976] usb 3-1: Manufacturer: syz [ 2698.635985][ T5976] usb 3-1: SerialNumber: syz [ 2698.855835][ T5976] usb 3-1: config 0 descriptor?? [ 2698.862179][ T7679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2699.095387][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2699.103693][ T5976] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2699.231022][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 2699.350899][ T5976] usb 3-1: USB disconnect, device number 61 [ 2699.358402][T13723] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2699.370328][T13723] usb 2-1: USB disconnect, device number 71 [ 2699.524619][T25567] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.531771][T25567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2699.577285][ T7696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2699.655989][T25567] bridge0: port 2(bridge_slave_1) entered blocking state [ 2699.665702][T25567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2700.078175][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2700.290125][ T7476] veth0_vlan: entered promiscuous mode [ 2700.336365][ T7476] veth1_vlan: entered promiscuous mode [ 2700.465451][ T7476] veth0_macvtap: entered promiscuous mode [ 2700.568246][ T7709] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8338'. [ 2700.620660][ T7476] veth1_macvtap: entered promiscuous mode [ 2701.087825][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2701.261778][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2701.377961][ T1380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.422428][ T1380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.484020][ T1380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.529425][ T1380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2701.776422][ T1380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2701.814767][ T1380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2701.941079][T29562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2701.981027][T29562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2702.329961][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2702.391139][ T7738] CIFS: VFS: Malformed UNC in devname [ 2702.427122][ T43] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2702.447478][ T7737] fuse: Bad value for 'group_id' [ 2702.452435][ T7737] fuse: Bad value for 'group_id' [ 2702.626761][ T7742] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8289'. [ 2702.683601][ T7737] geneve2: entered allmulticast mode [ 2702.689847][ T43] usb 3-1: device descriptor read/64, error -71 [ 2702.952945][ T43] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2702.985760][ T7742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2703.101124][ T43] usb 3-1: device descriptor read/64, error -71 [ 2703.116854][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2703.312941][ T43] usb usb3-port1: attempt power cycle [ 2703.369109][ T7742] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2703.703218][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2703.816221][ T43] usb 3-1: device descriptor read/8, error -71 [ 2704.056780][ T43] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2704.099776][ T43] usb 3-1: device descriptor read/8, error -71 [ 2704.219733][ T43] usb usb3-port1: unable to enumerate USB device [ 2704.268695][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8344'. [ 2704.340303][ T7761] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8344'. [ 2705.171096][ T5976] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2705.247150][ T43] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2705.321812][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8349'. [ 2705.388098][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 2705.417049][ T5976] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 2705.432397][ T5976] usb 6-1: config 0 has no interface number 0 [ 2705.444927][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2705.456023][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8350'. [ 2705.461448][ T43] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2705.489153][ T5976] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2705.508565][ T7787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8350'. [ 2705.544844][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.560063][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2705.573269][ T5976] usb 6-1: Product: syz [ 2705.578173][ T43] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2705.590726][ T5976] usb 6-1: Manufacturer: syz [ 2705.595374][ T5976] usb 6-1: SerialNumber: syz [ 2705.604367][ T43] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 2705.627078][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2705.661921][ T43] usb 9-1: Product: syz [ 2705.667429][ T5976] usb 6-1: config 0 descriptor?? [ 2705.703335][ T5976] hub 6-1:0.145: bad descriptor, ignoring hub [ 2705.711901][ T43] usb 9-1: Manufacturer: syz [ 2705.716903][ T43] usb 9-1: SerialNumber: syz [ 2705.721628][ T5976] hub 6-1:0.145: probe with driver hub failed with error -5 [ 2705.733084][ T43] usb 9-1: config 0 descriptor?? [ 2705.745081][ T5976] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input210 [ 2705.761040][ T43] kvaser_usb 9-1:0.0: error -EMSGSIZE: Cannot get software info [ 2705.788066][ T43] kvaser_usb 9-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2705.985021][ T5976] usb 9-1: USB disconnect, device number 125 [ 2706.001213][ T7803] netlink: 'syz.1.8352': attribute type 4 has an invalid length. [ 2706.037065][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.094067][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.194350][ T7807] netlink: 'syz.1.8352': attribute type 4 has an invalid length. [ 2706.419191][ T7807] block nbd0: Attempted send on invalid socket [ 2706.460422][ T7807] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2706.759072][ T7815] netlink: 'syz.7.8353': attribute type 4 has an invalid length. [ 2707.200734][ T5218] usb 6-1: reset high-speed USB device number 78 using dummy_hcd [ 2707.297299][ T5218] usb 6-1: device reset changed ep0 maxpacket size! [ 2707.310805][T19276] usb 6-1: USB disconnect, device number 78 [ 2707.349322][ T5954] usb 9-1: new low-speed USB device number 126 using dummy_hcd [ 2707.496188][T19276] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2707.536623][ T5954] usb 9-1: device descriptor read/64, error -71 [ 2707.809776][T19276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2707.820380][T19276] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2707.840150][T19276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2707.851006][ T5954] usb 9-1: new low-speed USB device number 127 using dummy_hcd [ 2707.874438][T19276] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2707.889903][T19276] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 2707.899320][T19276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2707.914204][T19276] usb 6-1: Product: syz [ 2707.919384][T19276] usb 6-1: Manufacturer: syz [ 2707.923982][T19276] usb 6-1: SerialNumber: syz [ 2707.937045][T19276] usb 6-1: config 0 descriptor?? [ 2707.955337][T19276] kvaser_usb 6-1:0.0: error -EMSGSIZE: Cannot get software info [ 2708.205290][ T5954] usb 9-1: device descriptor read/64, error -71 [ 2708.255143][T19276] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2708.337980][ T5954] usb usb9-port1: attempt power cycle [ 2708.438593][T19276] usb 6-1: USB disconnect, device number 79 [ 2709.520848][ T5954] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 2709.576683][ T5954] usb 9-1: device descriptor read/8, error -71 [ 2709.675098][ T7833] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2709.685947][ T7833] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2709.818208][ T7833] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2709.870520][ T5954] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 2709.912056][ T5954] usb 9-1: device descriptor read/8, error -71 [ 2710.040678][ T5954] usb usb9-port1: unable to enumerate USB device [ 2710.397194][T30597] Bluetooth: hci4: command 0x0c1a tx timeout [ 2710.883422][ T5976] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2711.073643][ T5976] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2711.113883][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2711.137157][ T5976] usb 9-1: Product: syz [ 2711.164555][ T5976] usb 9-1: Manufacturer: syz [ 2711.173344][ T5976] usb 9-1: SerialNumber: syz [ 2711.225215][ T5976] usb 9-1: config 0 descriptor?? [ 2711.261621][ T5976] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 004 [ 2711.342481][ T7882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2711.662074][ T5976] (null): failure reading functionality [ 2711.675398][ T5976] i2c i2c-1: connected i2c-tiny-usb device [ 2711.877034][ T7862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2711.976950][ T7862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2712.007422][ T5976] usb 9-1: USB disconnect, device number 4 [ 2712.312610][ T7895] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8368'. [ 2712.477133][T30597] Bluetooth: hci4: command 0x0c1a tx timeout [ 2712.806802][ T5976] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2712.979081][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2713.002605][ T5976] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2713.023602][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2713.051794][ T5976] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2713.085647][ T5976] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 2713.226014][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.236120][ T5976] usb 6-1: Product: syz [ 2713.277251][ T5976] usb 6-1: Manufacturer: syz [ 2713.303631][ T5976] usb 6-1: SerialNumber: syz [ 2713.364123][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.371029][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.394542][ T5976] usb 6-1: config 0 descriptor?? [ 2713.474318][ T5976] kvaser_usb 6-1:0.0: error -EMSGSIZE: Cannot get software info [ 2713.576743][ T5258] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2713.593602][ T5976] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2713.766700][ T5258] usb 3-1: Using ep0 maxpacket: 32 [ 2713.778410][ T5976] usb 6-1: USB disconnect, device number 80 [ 2713.799994][ T5258] usb 3-1: config 0 has an invalid interface number: 66 but max is 0 [ 2713.826128][ T5258] usb 3-1: config 0 has no interface number 0 [ 2713.851844][ T5258] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2713.862206][ T5258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2713.875718][ T5258] usb 3-1: Product: syz [ 2713.902432][ T5258] usb 3-1: Manufacturer: syz [ 2713.908932][ T5258] usb 3-1: SerialNumber: syz [ 2713.940743][ T5258] usb 3-1: config 0 descriptor?? [ 2713.966887][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2713.980476][ T5258] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2713.998162][ T5258] dvb-usb: bulk message failed: -22 (2/0) [ 2714.019323][ T5258] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2714.045074][ T5258] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2714.056209][ T5258] usb 3-1: media controller created [ 2714.097050][ T5258] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2714.106758][T28541] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2714.126614][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 2714.140922][ T43] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2714.149393][ T5258] cxusb: set interface failed [ 2714.154067][ T5258] dvb-usb: bulk message failed: -22 (1/0) [ 2714.171920][ T43] usb 2-1: config 0 has no interface number 0 [ 2714.180718][ T43] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2714.194277][ T7924] dvb-usb: bulk message failed: -22 (3/0) [ 2714.204278][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2714.213464][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.232311][ T43] usb 2-1: Product: syz [ 2714.237176][ T43] usb 2-1: Manufacturer: syz [ 2714.253950][ T43] usb 2-1: SerialNumber: syz [ 2714.282154][T28541] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 2714.306757][ T5258] DVB: Unable to find symbol lgdt330x_attach() [ 2714.312950][ T5258] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2714.321321][T28541] usb 9-1: config 0 has no interface number 0 [ 2714.337346][ T43] usb 2-1: config 0 descriptor?? [ 2714.350819][T28541] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2714.372358][T28541] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2714.393827][T28541] usb 9-1: Product: syz [ 2714.416679][T28541] usb 9-1: Manufacturer: syz [ 2714.427761][T28541] usb 9-1: SerialNumber: syz [ 2714.452641][T28541] usb 9-1: config 0 descriptor?? [ 2714.461550][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8376'. [ 2714.493552][T28541] hub 9-1:0.217: bad descriptor, ignoring hub [ 2714.509304][ T5258] rc_core: IR keymap rc-dvico-portable not found [ 2714.522257][T28541] hub 9-1:0.217: probe with driver hub failed with error -5 [ 2714.557353][T30597] Bluetooth: hci4: command 0x0c1a tx timeout [ 2714.569727][ T5258] Registered IR keymap rc-empty [ 2714.602008][ T5258] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2714.656078][ T30] audit: type=1326 audit(1758107093.379:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.7.8377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdaa58eba9 code=0x0 [ 2714.683434][ T5258] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input211 [ 2714.701474][T28541] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2714.795377][ T5258] dvb-usb: schedule remote query interval to 100 msecs. [ 2714.805048][T28541] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2714.841663][ T5258] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2714.855875][T28541] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2714.889066][T28541] usb 9-1: media controller created [ 2714.948405][ T5258] dvb-usb: bulk message failed: -22 (1/0) [ 2715.005538][T28541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2715.066723][ T5976] dvb-usb: bulk message failed: -22 (1/0) [ 2715.097912][ T5954] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2715.144842][T28541] DVB: Unable to find symbol dib7000p_attach() [ 2715.152509][T28541] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2715.168268][ T43] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 2715.178820][ T5258] dvb-usb: bulk message failed: -22 (1/0) [ 2715.190633][ T43] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2715.199588][ T43] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2715.216021][ T43] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2715.258577][ T43] usb 2-1: USB disconnect, device number 72 [ 2715.270801][ T5954] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2715.288342][ T5258] dvb-usb: bulk message failed: -22 (1/0) [ 2715.302682][ T5954] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2715.324378][ T5954] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 2715.342580][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2715.373040][ T5954] usb 6-1: config 0 descriptor?? [ 2715.397549][T28541] rc_core: IR keymap rc-dib0700-rc5 not found [ 2715.403723][T28541] Registered IR keymap rc-empty [ 2715.409338][ T5258] dvb-usb: bulk message failed: -22 (1/0) [ 2715.421675][T28541] dvb-usb: could not initialize remote control. [ 2715.431781][T28541] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2715.526701][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 2715.667409][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 2715.777830][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 2715.886726][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 2715.948285][ T5954] apple 0003:05AC:027A.006F: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 2716.104743][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 2716.144749][ T5954] usb 3-1: USB disconnect, device number 66 [ 2716.185619][T28618] usb 6-1: USB disconnect, device number 81 [ 2716.324905][ T5954] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2716.691245][ T7957] fido_id[7957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2716.930570][ T5954] usb 9-1: USB disconnect, device number 5 [ 2717.012661][ T5954] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2717.436921][ T5954] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 2717.660123][ T5954] usb 9-1: Invalid ep0 maxpacket: 64 [ 2717.716753][T28541] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2717.736715][ T43] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 2717.818039][ T5954] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 2717.873450][T28541] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 2717.883386][T28541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2717.891850][T28541] usb 2-1: Product: syz [ 2717.896404][T28541] usb 2-1: Manufacturer: syz [ 2717.903908][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 2717.930325][ T43] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2717.941298][T28541] usb 2-1: SerialNumber: syz [ 2717.949957][ T43] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2717.965126][T28541] usb 2-1: config 0 descriptor?? [ 2717.984059][T28541] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 2717.997603][ T5954] usb 9-1: Invalid ep0 maxpacket: 64 [ 2717.999740][ T43] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2718.006999][ T5954] usb usb9-port1: attempt power cycle [ 2718.009955][T28541] usb 2-1: bad CDC descriptors [ 2718.023531][ T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2718.033053][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2718.044804][T28541] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 2718.054014][ T43] usb 6-1: Product: ᐄ [ 2718.058345][ T43] usb 6-1: Manufacturer: 㝇觹ݢ绾变ᰆぇ黶昋≏ኝ㢤笉풱匘媾賭룵꧷᨜덴쌙䕼鬣弍ᜪ릫囇索䯸잜느㘡頕ꦶꂟ䰔驮롶⛖ჯ琍횝釘჉ળ头뭊玞μ祉≼㘩뾾嫗줔✈欒➂忢㢄ʢȫ殦藍픠騚 [ 2718.102170][ T43] usb 6-1: SerialNumber: ﲫ皏峮ꭉ釛ᕦ耆떨떏蟊桠䨈㊁뾲䩫렄㿒᧼炑㪬۬蚃矆乪쟮昭鴶錱齊ꀦ녑꾡蒰懢엩퓰굾㿋켤腷臡迒㇝㐸컘 [ 2718.144648][ T7980] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2718.366905][ T5954] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 2718.387867][ T5954] usb 9-1: Invalid ep0 maxpacket: 64 [ 2718.526939][ T5954] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 2718.547473][ T5954] usb 9-1: Invalid ep0 maxpacket: 64 [ 2718.553211][ T5954] usb usb9-port1: unable to enumerate USB device [ 2718.574549][ T43] usb 6-1: USB disconnect, device number 82 [ 2720.086699][ T5258] usb 2-1: USB disconnect, device number 73 [ 2720.635217][ T8002] netlink: 'syz.8.8392': attribute type 8 has an invalid length. [ 2720.753478][ T8002] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8392'. [ 2720.826758][ T5258] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2720.989132][ T5258] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 2721.034969][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2721.081843][ T5258] usb 2-1: config 0 descriptor?? [ 2721.530722][ T5258] hackrf 2-1:0.0: Board ID: 00 [ 2721.539927][ T5258] hackrf 2-1:0.0: Firmware version: [ 2721.569448][ T5258] hackrf 2-1:0.0: Registered as swradio24 [ 2721.593542][ T5258] videodev: could not get a free minor [ 2721.646249][ T5258] hackrf 2-1:0.0: Failed to register as video device (-23) [ 2721.732141][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2721.745714][ T5258] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 2721.777549][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2721.890561][ T8017] syz.8.8397 (8017): drop_caches: 1 [ 2722.031246][ T5258] usb 2-1: USB disconnect, device number 74 [ 2722.776692][T28618] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2722.936840][ T5954] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2722.997099][T28618] usb 6-1: Using ep0 maxpacket: 16 [ 2723.177607][T28618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2723.226253][T28618] usb 6-1: config 0 has no interfaces? [ 2723.236661][ T5954] usb 9-1: Using ep0 maxpacket: 8 [ 2723.252450][ T5954] usb 9-1: config 0 has no interfaces? [ 2723.259540][T28618] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2723.310590][T28618] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2723.532550][T28618] usb 6-1: Manufacturer: syz [ 2723.563651][ T8050] syzkaller1: entered promiscuous mode [ 2723.578834][ T43] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2723.651778][T28618] usb 6-1: config 0 descriptor?? [ 2723.716471][ T8050] syzkaller1: entered allmulticast mode [ 2723.826961][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 2723.845077][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2724.017876][ T5258] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2724.104319][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2724.206187][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2724.216821][ T5258] usb 3-1: Using ep0 maxpacket: 32 [ 2724.262230][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2724.279284][ T5258] usb 3-1: device descriptor read/all, error -61 [ 2724.447732][ T5258] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2724.516997][ T43] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2724.526337][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.542230][ T43] usb 2-1: Product: syz [ 2724.551260][ T43] usb 2-1: Manufacturer: syz [ 2724.573484][ T43] usb 2-1: SerialNumber: syz [ 2724.675219][ T5258] usb 3-1: device descriptor read/64, error -71 [ 2724.727776][ T43] usb 2-1: config 0 descriptor?? [ 2724.755127][ T43] mcba_usb 2-1:0.0: Can't find endpoints [ 2724.787394][ T5258] usb usb3-port1: attempt power cycle [ 2724.954314][ T8052] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8404'. [ 2725.186672][ T5258] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2725.223336][ T5258] usb 3-1: device descriptor read/8, error -71 [ 2725.486754][ T5258] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2725.517514][ T5258] usb 3-1: device descriptor read/8, error -71 [ 2725.677254][ T5258] usb usb3-port1: unable to enumerate USB device [ 2726.391080][ T5954] usb 9-1: string descriptor 0 read error: -71 [ 2726.432532][ T5954] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2726.476910][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2726.537068][ T5954] usb 9-1: config 0 descriptor?? [ 2726.563771][ T5954] usb 9-1: can't set config #0, error -71 [ 2726.575647][T28618] usb 6-1: USB disconnect, device number 83 [ 2726.615900][ T5954] usb 9-1: USB disconnect, device number 10 [ 2726.649294][T13723] IPVS: starting estimator thread 0... [ 2726.766852][ T8059] IPVS: using max 24 ests per chain, 57600 per kthread [ 2727.044303][ T8073] FAULT_INJECTION: forcing a failure. [ 2727.044303][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.061533][ T8073] CPU: 1 UID: 0 PID: 8073 Comm: syz.8.8409 Not tainted syzkaller #0 PREEMPT(full) [ 2727.061561][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2727.061573][ T8073] Call Trace: [ 2727.061582][ T8073] [ 2727.061591][ T8073] dump_stack_lvl+0x189/0x250 [ 2727.061622][ T8073] ? __pfx____ratelimit+0x10/0x10 [ 2727.061644][ T8073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2727.061668][ T8073] ? __pfx__printk+0x10/0x10 [ 2727.061699][ T8073] ? __pfx___might_resched+0x10/0x10 [ 2727.061720][ T8073] ? fs_reclaim_acquire+0x7d/0x100 [ 2727.061745][ T8073] should_fail_ex+0x414/0x560 [ 2727.061780][ T8073] should_failslab+0xa8/0x100 [ 2727.061810][ T8073] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2727.061837][ T8073] ? __alloc_skb+0x112/0x2d0 [ 2727.061866][ T8073] __alloc_skb+0x112/0x2d0 [ 2727.061894][ T8073] alloc_skb_with_frags+0xca/0x890 [ 2727.061936][ T8073] sock_alloc_send_pskb+0x857/0x990 [ 2727.061985][ T8073] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2727.062013][ T8073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2727.062043][ T8073] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2727.062078][ T8073] j1939_sk_sendmsg+0x6f5/0x1350 [ 2727.062126][ T8073] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 2727.062156][ T8073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2727.062179][ T8073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2727.062200][ T8073] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 2727.062226][ T8073] __sock_sendmsg+0x219/0x270 [ 2727.062258][ T8073] ____sys_sendmsg+0x52d/0x830 [ 2727.062289][ T8073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2727.062325][ T8073] ? import_iovec+0x74/0xa0 [ 2727.062354][ T8073] ___sys_sendmsg+0x21f/0x2a0 [ 2727.062382][ T8073] ? __pfx____sys_sendmsg+0x10/0x10 [ 2727.062450][ T8073] ? __fget_files+0x2a/0x420 [ 2727.062468][ T8073] ? __fget_files+0x3a0/0x420 [ 2727.062499][ T8073] __sys_sendmmsg+0x227/0x430 [ 2727.062530][ T8073] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2727.062551][ T8073] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2727.062605][ T8073] ? ksys_write+0x22a/0x250 [ 2727.062634][ T8073] ? __pfx_ksys_write+0x10/0x10 [ 2727.062656][ T8073] ? rcu_is_watching+0x15/0xb0 [ 2727.062684][ T8073] __x64_sys_sendmmsg+0xa0/0xc0 [ 2727.062711][ T8073] do_syscall_64+0xfa/0x3b0 [ 2727.062730][ T8073] ? lockdep_hardirqs_on+0x9c/0x150 [ 2727.062750][ T8073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2727.062770][ T8073] ? clear_bhb_loop+0x60/0xb0 [ 2727.062794][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2727.062812][ T8073] RIP: 0033:0x7f44b7d8eba9 [ 2727.062830][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2727.062847][ T8073] RSP: 002b:00007f44b8cee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2727.062868][ T8073] RAX: ffffffffffffffda RBX: 00007f44b7fd5fa0 RCX: 00007f44b7d8eba9 [ 2727.062883][ T8073] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000003 [ 2727.062896][ T8073] RBP: 00007f44b8cee090 R08: 0000000000000000 R09: 0000000000000000 [ 2727.062908][ T8073] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 2727.062920][ T8073] R13: 00007f44b7fd6038 R14: 00007f44b7fd5fa0 R15: 00007f44b80ffa28 [ 2727.062954][ T8073] [ 2727.459348][ T5954] usb 2-1: USB disconnect, device number 75 [ 2727.648789][ T30] audit: type=1326 audit(1758107106.379:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.2.8413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbf8b8eba9 code=0x0 [ 2727.677136][ T43] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2727.836676][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 2727.844407][ T43] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 2727.855447][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2727.866213][ T43] usb 9-1: config 0 has no interface number 0 [ 2727.873643][ T43] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2727.896303][ T43] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2727.946229][ T43] usb 9-1: config 0 interface 52 has no altsetting 0 [ 2727.967541][ T43] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2727.998357][ T43] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2728.019591][ T43] usb 9-1: Manufacturer: syz [ 2728.044117][ T43] usb 9-1: config 0 descriptor?? [ 2728.067544][ T43] hub 9-1:0.52: bad descriptor, ignoring hub [ 2728.091495][ T43] hub 9-1:0.52: probe with driver hub failed with error -5 [ 2728.274125][ T43] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input215 [ 2728.401709][T28618] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2728.450074][ T8102] syz.1.8417 (8102): drop_caches: 1 [ 2728.486201][ T43] usb 9-1: USB disconnect, device number 11 [ 2728.588952][T28618] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2728.649638][ T8102] syz.1.8417 (8102): drop_caches: 1 [ 2728.655281][T28618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2728.690205][T28618] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2728.733635][T28618] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2728.768477][T28618] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2728.781125][T28618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.810691][T28618] usb 6-1: config 0 descriptor?? [ 2729.243590][T28618] plantronics 0003:047F:FFFF.0070: ignoring exceeding usage max [ 2729.275339][T28618] plantronics 0003:047F:FFFF.0070: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2729.316684][T13723] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2729.441262][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8423'. [ 2729.486674][T13723] usb 9-1: Using ep0 maxpacket: 16 [ 2729.494646][T13723] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 2729.503583][T13723] usb 9-1: config 0 has no interface number 0 [ 2729.525457][T13723] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2729.544178][T13723] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2729.553772][T13723] usb 9-1: Product: syz [ 2729.558484][T13723] usb 9-1: Manufacturer: syz [ 2729.563456][T13723] usb 9-1: SerialNumber: syz [ 2729.584574][T13723] usb 9-1: config 0 descriptor?? [ 2729.606238][T13723] hub 9-1:0.145: bad descriptor, ignoring hub [ 2729.631600][T13723] hub 9-1:0.145: probe with driver hub failed with error -5 [ 2729.707792][T13723] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input216 [ 2729.863344][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2729.879014][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2729.969946][ T8120] syz.5.8416 (8120): drop_caches: 1 [ 2729.977830][ T8121] syz.5.8416 (8121): drop_caches: 1 [ 2730.141850][T13723] usb 9-1: USB disconnect, device number 12 [ 2730.320798][ T8120] syz.5.8416 (8120): drop_caches: 1 [ 2731.298123][ T43] usb 6-1: USB disconnect, device number 84 [ 2731.590851][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8427'. [ 2731.603978][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8427'. [ 2731.877827][ T43] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2732.352067][ T43] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2732.363922][ T43] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2732.376070][ T43] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2732.397149][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.527199][ T8145] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2732.545378][ T43] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2732.758228][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.769537][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.951653][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2732.961056][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2732.990465][ T30] audit: type=1326 audit(1758107111.679:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d078eba9 code=0x7ffc0000 [ 2733.159642][ T30] audit: type=1326 audit(1758107111.679:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d078eba9 code=0x7ffc0000 [ 2733.562378][ T30] audit: type=1326 audit(1758107111.679:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11d078d510 code=0x7ffc0000 [ 2733.585378][ T30] audit: type=1326 audit(1758107111.679:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11d078e7ab code=0x7ffc0000 [ 2733.841058][ T30] audit: type=1326 audit(1758107111.679:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11d078e7ab code=0x7ffc0000 [ 2733.877445][T13723] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 2733.966186][ T30] audit: type=1326 audit(1758107111.699:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d078eba9 code=0x7ffc0000 [ 2734.007732][ T30] audit: type=1326 audit(1758107111.699:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.5.8428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d078eba9 code=0x7ffc0000 [ 2734.077724][T13723] usb 9-1: Invalid ep0 maxpacket: 16 [ 2734.266692][T13723] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 2734.506828][ T5976] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2734.733748][ T5976] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2734.747344][ T5976] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 2734.763822][ T5976] usb 3-1: config 1 interface 1 has no altsetting 0 [ 2734.784779][ T5976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2734.794543][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2734.805747][ T5976] usb 3-1: Product: syz [ 2734.825839][T13723] usb 9-1: Invalid ep0 maxpacket: 16 [ 2734.837270][ T5976] usb 3-1: Manufacturer: syz [ 2734.839239][T13723] usb usb9-port1: attempt power cycle [ 2734.842866][ T5976] usb 3-1: SerialNumber: syz [ 2735.008455][ T5258] usb 6-1: USB disconnect, device number 85 [ 2735.197122][T13723] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 2735.342332][T13723] usb 9-1: Invalid ep0 maxpacket: 16 [ 2735.508198][ T5954] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2735.576885][T13723] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 2735.598088][T13723] usb 9-1: Invalid ep0 maxpacket: 16 [ 2735.603981][T13723] usb usb9-port1: unable to enumerate USB device [ 2735.782212][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2735.822047][ T5954] usb 2-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2735.876665][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.910560][ T5954] usb 2-1: config 0 descriptor?? [ 2736.244063][ T5954] usbhid 2-1:0.0: can't add hid device: -71 [ 2736.263067][ T5954] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2736.287021][ T5954] usb 2-1: USB disconnect, device number 76 [ 2736.519622][ T8171] netlink: 'syz.5.8435': attribute type 1 has an invalid length. [ 2737.071538][ T30] audit: type=1400 audit(1758107115.799:3352): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=8176 comm="syz.1.8437" [ 2737.096784][ T5954] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2737.356908][ T5954] usb 9-1: Using ep0 maxpacket: 16 [ 2737.374508][ T5954] usb 9-1: config 0 has an invalid interface number: 145 but max is 0 [ 2737.399326][ T5954] usb 9-1: config 0 has no interface number 0 [ 2737.455184][ T5954] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2737.502324][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.543100][ T5954] usb 9-1: Product: syz [ 2737.567247][ T5954] usb 9-1: Manufacturer: syz [ 2737.586980][ T5954] usb 9-1: SerialNumber: syz [ 2737.604959][ T5954] usb 9-1: config 0 descriptor?? [ 2737.655909][ T5954] hub 9-1:0.145: bad descriptor, ignoring hub [ 2737.691831][ T5954] hub 9-1:0.145: probe with driver hub failed with error -5 [ 2737.720321][ T5954] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.145/input/input217 [ 2737.876180][ T8175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2737.929082][ T8175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2737.970102][ T5976] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2738.077754][ T5954] usb 9-1: USB disconnect, device number 17 [ 2738.153312][ T5976] usb 3-1: USB disconnect, device number 71 [ 2738.487912][ T8201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8444'. [ 2738.611339][ T8190] syz.7.8440 (8190): drop_caches: 1 [ 2738.714421][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8446'. [ 2738.729390][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8446'. [ 2738.741068][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8446'. [ 2738.793240][ T8190] syz.7.8440 (8190): drop_caches: 1 [ 2739.216680][ T5976] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2739.318630][ T5954] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2739.705589][ T5954] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2739.729542][ T5954] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.740055][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2739.889666][ T5954] usb 6-1: config 220 has no interface number 2 [ 2739.898837][ T5954] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2739.915251][ T5954] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2739.928074][ T5954] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2739.939392][ T5954] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2739.950562][ T5954] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2739.961960][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2739.977484][ T5954] usb 6-1: Product: syz [ 2739.993910][ T5954] usb 6-1: Manufacturer: syz [ 2740.001944][ T5954] usb 6-1: SerialNumber: syz [ 2740.047336][ T5976] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2740.197046][ T5976] usb 2-1: device descriptor read/64, error -71 [ 2740.307343][ T5976] usb usb2-port1: attempt power cycle [ 2740.314607][ T5954] usb 6-1: selecting invalid altsetting 0 [ 2740.321769][ T5954] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 2740.328184][ T5954] usb 6-1: No valid video chain found. [ 2740.343207][ T5954] usb 6-1: selecting invalid altsetting 0 [ 2740.356595][ T5954] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2740.380487][ T5954] usb 6-1: USB disconnect, device number 87 [ 2740.544520][ T6684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.647347][ T5976] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2740.685399][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2740.707819][ T6684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.833706][ T6684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.936790][ T5976] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2740.959596][ T6684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2740.968119][ T5976] usb 2-1: device descriptor read/8, error -71 [ 2741.088507][ T5976] usb usb2-port1: unable to enumerate USB device [ 2741.134637][ T8234] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8455'. [ 2741.370651][ T8234] sit1: entered promiscuous mode [ 2741.487136][ T6684] bridge_slave_1: left allmulticast mode [ 2741.492890][ T6684] bridge_slave_1: left promiscuous mode [ 2741.499706][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 2741.532955][ T6684] bridge_slave_0: left allmulticast mode [ 2741.541085][ T6684] bridge_slave_0: left promiscuous mode [ 2741.555915][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 2742.098752][ T43] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 2742.227600][ T7473] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2742.249606][ T7473] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2742.258621][ T7473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2742.258752][ T43] usb 9-1: not running at top speed; connect to a high speed hub [ 2742.275927][ T7473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2742.287331][ T7473] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2742.367556][ T43] usb 9-1: config 95 has an invalid interface number: 1 but max is 0 [ 2742.378017][ T6684] ip6gretap0 (unregistering): left allmulticast mode [ 2742.401528][ T43] usb 9-1: config 95 has no interface number 0 [ 2742.423303][ T43] usb 9-1: config 95 interface 1 has no altsetting 0 [ 2742.452166][ T43] usb 9-1: New USB device found, idVendor=0763, idProduct=3031, bcdDevice=ad.3f [ 2742.471656][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.510623][ T43] usb 9-1: Product: 葚䖚䎼㺰㎨垬㦇嬈∕촱炎萛㐵㜈 [ 2742.618539][T19276] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 2742.830908][ T43] usb 9-1: USB disconnect, device number 18 [ 2742.881454][T19276] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 2742.888053][ T8245] VFS: Mount too revealing [ 2742.894119][T19276] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 2742.917448][T19276] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2742.931710][T19276] usb 2-1: config 8 has no interface number 0 [ 2742.938627][T19276] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 2742.950097][T19276] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2742.950594][ T6684] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2742.965876][T19276] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2742.982453][T19276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2742.990610][T19276] usb 2-1: Product: syz [ 2742.995056][T19276] usb 2-1: Manufacturer: syz [ 2742.999742][T19276] usb 2-1: SerialNumber: syz [ 2743.230084][T19276] usb 2-1: USB disconnect, device number 81 [ 2743.675261][ T8256] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8463'. [ 2743.685137][ T8255] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8463'. [ 2743.771268][ T6684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2743.802311][ T5954] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 2743.804260][ T6684] bond0 (unregistering): Released all slaves [ 2743.904114][ T6684] bond1 (unregistering): Released all slaves [ 2743.921885][ T8261] usb usb8: usbfs: process 8261 (syz.1.8464) did not claim interface 0 before use [ 2743.977698][ T5954] usb 9-1: device descriptor read/64, error -71 [ 2744.226855][ T5954] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 2744.376870][ T5954] usb 9-1: device descriptor read/64, error -71 [ 2744.385196][ T6684] tipc: Left network mode [ 2744.397652][T30597] Bluetooth: hci1: command tx timeout [ 2744.502850][ T5954] usb usb9-port1: attempt power cycle [ 2744.887070][ T5954] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 2744.953690][ T5954] usb 9-1: device descriptor read/8, error -71 [ 2745.436699][ T5954] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 2745.487833][ T5954] usb 9-1: device descriptor read/8, error -71 [ 2745.496634][T13723] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 2745.647140][ T5954] usb usb9-port1: unable to enumerate USB device [ 2745.746866][T13723] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 2745.754972][T13723] usb 2-1: config 0 has no interface number 0 [ 2745.820699][T13723] usb 2-1: config 0 interface 29 has no altsetting 0 [ 2746.926817][T30597] Bluetooth: hci1: command tx timeout [ 2746.947443][T13723] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 2746.956632][T13723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2746.964767][T13723] usb 2-1: Product: syz [ 2746.969121][T13723] usb 2-1: Manufacturer: syz [ 2746.974262][T13723] usb 2-1: SerialNumber: syz [ 2746.987425][T13723] usb 2-1: config 0 descriptor?? [ 2747.123517][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2747.145965][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2747.155695][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2747.164877][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2747.200959][ T6684] batman_adv: batadv0: Interface deactivated: team0 [ 2747.215516][ T6684] batman_adv: batadv0: Removing interface: team0 [ 2747.459367][ T8308] overlayfs: missing 'lowerdir' [ 2747.671484][ T6684] veth0_macvtap: left promiscuous mode [ 2747.709280][T19276] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2747.762154][ T6684] veth1_vlan: left promiscuous mode [ 2747.790154][ T6684] veth0_vlan: left promiscuous mode [ 2747.877813][T19276] usb 6-1: Using ep0 maxpacket: 32 [ 2747.891475][T19276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2747.925466][T19276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2747.937333][T19276] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2747.947165][T19276] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.962047][T19276] usb 6-1: config 0 descriptor?? [ 2747.970104][T19276] hub 6-1:0.0: USB hub found [ 2748.170625][T19276] hub 6-1:0.0: 1 port detected [ 2748.212875][T19276] usb 6-1: USB disconnect, device number 88 [ 2748.616653][T19276] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2748.794991][T19276] usb 6-1: Using ep0 maxpacket: 16 [ 2748.802889][T19276] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2748.816130][T19276] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2748.826059][T19276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2748.834545][T19276] usb 6-1: Product: syz [ 2748.838951][T19276] usb 6-1: Manufacturer: syz [ 2748.843636][T19276] usb 6-1: SerialNumber: syz [ 2748.855481][T19276] usb 6-1: config 0 descriptor?? [ 2748.939923][T19276] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2748.955648][T19276] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2748.963754][T30597] Bluetooth: hci1: command tx timeout [ 2749.080795][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8475'. [ 2749.141032][ T6684] team0 (unregistering): Port device team_slave_1 removed [ 2749.211866][ T6684] team0 (unregistering): Port device team_slave_0 removed [ 2749.514198][T19276] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2749.884670][T13723] peak_usb 2-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 2749.916983][T13723] peak_usb 2-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 2749.974089][ T8322] (J: renamed from lo (while UP) [ 2750.115642][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 2750.143744][T13723] peak_usb 2-1:0.29: probe with driver peak_usb failed with error -71 [ 2750.180533][T13723] usb 2-1: USB disconnect, device number 82 [ 2750.248773][ T8336] fuse: Bad value for 'fd' [ 2750.623864][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2750.640235][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.657351][ T8241] bridge_slave_0: entered allmulticast mode [ 2750.675119][ T8241] bridge_slave_0: entered promiscuous mode [ 2750.694801][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2750.719340][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2750.742046][ T8241] bridge_slave_1: entered allmulticast mode [ 2750.763772][ T8241] bridge_slave_1: entered promiscuous mode [ 2750.969318][T19276] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2751.013390][T19276] em28xx 6-1:0.0: board has no eeprom [ 2751.033737][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2751.060782][T30597] Bluetooth: hci1: command tx timeout [ 2751.101415][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2751.136695][T19276] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2751.147692][T19276] em28xx 6-1:0.0: dvb set to bulk mode. [ 2751.159716][T13723] em28xx 6-1:0.0: Binding DVB extension [ 2751.440508][T13723] em28xx 6-1:0.0: Registering input extension [ 2751.466829][ T43] usb 6-1: USB disconnect, device number 89 [ 2751.473744][ T43] em28xx 6-1:0.0: Disconnecting em28xx [ 2751.511504][ T8241] team0: Port device team_slave_0 added [ 2751.532627][ T43] em28xx 6-1:0.0: Closing input extension [ 2751.546875][T19276] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 2751.591780][ T8241] team0: Port device team_slave_1 added [ 2751.622128][ T43] em28xx 6-1:0.0: Freeing device [ 2751.823723][T19276] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 2751.887632][T19276] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2751.938028][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2752.235970][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2752.238020][T19276] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2752.262017][ C1] vkms_vblank_simulate: vblank timer overrun [ 2752.332567][ T8241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2752.420644][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2752.438719][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2752.464634][ C1] vkms_vblank_simulate: vblank timer overrun [ 2752.486714][T19276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2752.515803][ T8241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2752.628323][T19276] usb 2-1: config 0 descriptor?? [ 2752.695064][T19276] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2752.736697][ T43] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 2752.811862][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2752.820926][ T8373] team0: Port device batadv1 added [ 2752.936125][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2752.951547][ T8241] hsr_slave_0: entered promiscuous mode [ 2752.959992][ T43] usb 9-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2752.976967][ T8241] hsr_slave_1: entered promiscuous mode [ 2752.985127][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2753.004041][ T8241] debugfs: 'hsr0' already exists in 'hsr' [ 2753.015847][ T8241] Cannot create hsr debugfs directory [ 2753.022922][ T43] usb 9-1: config 0 descriptor?? [ 2753.225039][ T8382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.249516][ T8382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.282234][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 2753.291591][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2753.313607][ T43] usb 9-1: USB disconnect, device number 23 [ 2753.907317][ T8387] pim6reg: entered allmulticast mode [ 2754.173724][ T5976] usb 2-1: USB disconnect, device number 83 [ 2754.318253][ T8389] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2754.359555][ T8392] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 2754.426984][ T43] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2754.606906][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 2754.622515][ T43] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 2754.651977][ T43] usb 6-1: config 0 has no interface number 0 [ 2754.667611][ T43] usb 6-1: config 0 interface 217 has no altsetting 0 [ 2754.699996][ T43] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8 [ 2754.715780][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2754.758203][ T43] usb 6-1: Product: syz [ 2754.762414][ T43] usb 6-1: Manufacturer: syz [ 2754.778472][ T43] usb 6-1: SerialNumber: syz [ 2754.843123][ T43] usb 6-1: config 0 descriptor?? [ 2755.449476][ T8241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2755.625794][ T8241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2755.922552][ T8241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2755.950991][ T8241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2756.647006][T13723] usb 6-1: USB disconnect, device number 90 [ 2756.728651][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2757.186463][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 2757.200444][T15095] bridge0: port 1(bridge_slave_0) entered blocking state [ 2757.207582][T15095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2757.243361][T15095] bridge0: port 2(bridge_slave_1) entered blocking state [ 2757.250503][T15095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2757.774999][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2758.221808][ T8241] veth0_vlan: entered promiscuous mode [ 2758.361453][ T8241] veth1_vlan: entered promiscuous mode [ 2758.376838][ T5954] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 2758.493388][ T8241] veth0_macvtap: entered promiscuous mode [ 2758.529827][ T8241] veth1_macvtap: entered promiscuous mode [ 2758.539912][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2758.595664][ T5954] usb 6-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 2758.612944][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2758.680992][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2758.684121][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2758.730781][T15094] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.752900][T15094] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.791077][T15094] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2758.964068][T15094] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2759.043557][ T5954] usb 6-1: config 0 descriptor?? [ 2759.320407][T15095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.341257][T15095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2759.352601][ T5954] usbhid 6-1:0.0: can't add hid device: -71 [ 2759.414333][ T5954] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2759.456726][T25567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2759.470873][T25567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2759.560457][ T5954] usb 6-1: USB disconnect, device number 91 [ 2760.226762][ T5954] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2760.416682][ T5954] usb 10-1: Using ep0 maxpacket: 32 [ 2760.427065][ T5954] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 2760.435424][ T5954] usb 10-1: config 0 has no interface number 0 [ 2760.444956][ T5954] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2760.455791][ T5954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2760.464608][ T5954] usb 10-1: Product: syz [ 2760.550403][ T5954] usb 10-1: Manufacturer: syz [ 2760.614413][ T5954] usb 10-1: SerialNumber: syz [ 2760.697373][ T8493] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8499'. [ 2760.864335][ T5954] usb 10-1: config 0 descriptor?? [ 2760.914070][ T8475] delete_channel: no stack [ 2760.980275][ T5954] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2761.194014][ T8487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2761.248046][ T5954] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2761.276920][ T43] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2761.315401][ T5954] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2761.541816][ T8487] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2762.772573][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 2762.939350][ T43] usb 2-1: config 0 has no interfaces? [ 2763.798810][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2763.801171][ T5258] usb 10-1: USB disconnect, device number 2 [ 2763.854652][ T5258] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2764.017810][ T5258] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2764.168157][ T5258] quatech2 10-1:0.51: device disconnected [ 2765.546460][ T43] usb 2-1: string descriptor 0 read error: -71 [ 2765.555693][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2765.580559][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2765.607406][ T43] usb 2-1: config 0 descriptor?? [ 2765.617182][ T43] usb 2-1: can't set config #0, error -71 [ 2765.657065][ T43] usb 2-1: USB disconnect, device number 84 [ 2765.686958][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8503'. [ 2765.963205][ T8528] netlink: 'syz.7.8506': attribute type 1 has an invalid length. [ 2766.136804][ T43] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2766.183043][ T8533] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2766.195551][ T8533] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 2766.211332][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8506'. [ 2766.289331][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 2766.297131][ T43] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2766.308821][ T43] usb 2-1: config 0 has no interface number 0 [ 2766.312042][ T8534] gretap1: entered promiscuous mode [ 2766.315470][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2766.331875][ T5258] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2766.353897][ T8534] bond1: (slave gretap1): making interface the new active one [ 2766.366294][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2766.392881][ T8534] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2766.401837][ T43] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2766.436054][ T43] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2766.464344][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2766.477276][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.494733][ T5258] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2766.509054][ T5258] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2766.519350][ T5258] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2766.537995][ T43] usb 2-1: config 0 descriptor?? [ 2766.546716][ T5258] usb 6-1: Product: syz [ 2766.553421][ T5258] usb 6-1: Manufacturer: syz [ 2766.563584][ T5258] usb 6-1: SerialNumber: syz [ 2766.576482][ T43] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2766.637052][ T5258] usb 6-1: config 0 descriptor?? [ 2766.820952][ T30] audit: type=1326 audit(1758107145.539:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2766.866894][ T30] audit: type=1326 audit(1758107145.539:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2766.895859][ T30] audit: type=1326 audit(1758107145.539:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2766.943608][ T30] audit: type=1326 audit(1758107145.539:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.112123][ T30] audit: type=1326 audit(1758107145.539:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.160049][ T30] audit: type=1326 audit(1758107145.539:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.186894][ T30] audit: type=1326 audit(1758107145.539:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.210311][ T30] audit: type=1326 audit(1758107145.539:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.232920][ T30] audit: type=1326 audit(1758107145.539:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2767.288223][ T30] audit: type=1326 audit(1758107145.539:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.1.8504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880058eba9 code=0x7ffc0000 [ 2768.801602][T19276] usb 2-1: USB disconnect, device number 85 [ 2768.813824][T19276] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2768.820995][ T8462] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 2768.929340][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2768.996969][ T8462] usb 10-1: device descriptor read/64, error -71 [ 2769.070574][ T5258] usb 6-1: USB disconnect, device number 92 [ 2769.203905][T21460] udevd[21460]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2769.240337][ T8462] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 2769.420924][ T8462] usb 10-1: device descriptor read/64, error -71 [ 2769.466824][T19756] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 2769.563580][ T8462] usb usb10-port1: attempt power cycle [ 2769.642019][T19756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2769.663694][T19756] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2769.703450][T19756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2769.723302][T19756] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2769.752237][T19756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2769.804180][T19756] usb 2-1: Product: syz [ 2769.813001][T19756] usb 2-1: Manufacturer: syz [ 2769.833757][T19756] usb 2-1: SerialNumber: syz [ 2769.859578][T19756] usb 2-1: config 0 descriptor?? [ 2769.866775][T19276] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2769.881295][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2769.897249][ T8555] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2769.912562][T19756] usb 2-1: ucan: probing device on interface #0 [ 2769.927549][ T8462] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 2769.975862][ T8462] usb 10-1: device descriptor read/8, error -71 [ 2770.026948][T19276] usb 9-1: Using ep0 maxpacket: 8 [ 2770.035322][T19276] usb 9-1: config 0 has no interfaces? [ 2770.266720][ T8462] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 2770.295258][ T8462] usb 10-1: device descriptor read/8, error -71 [ 2770.407370][ T8462] usb usb10-port1: unable to enumerate USB device [ 2770.548843][T19756] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 2770.646734][ T7676] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2770.799421][ T7676] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2770.809732][ T7676] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2770.821176][ T7676] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2770.830861][ T7676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2770.853180][ T7676] usb 6-1: SerialNumber: syz [ 2771.070107][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.084326][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2771.119140][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.149393][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2771.267465][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2771.284762][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2772.395325][ T7676] usb 6-1: 0:2 : does not exist [ 2772.402971][T30913] usb 2-1: USB disconnect, device number 86 [ 2772.549457][ T7676] usb 6-1: USB disconnect, device number 93 [ 2772.786978][ T8462] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 2772.823466][T19276] usb 9-1: string descriptor 0 read error: -71 [ 2772.840565][T19276] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2772.942571][T19276] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2772.976697][ T8462] usb 10-1: Using ep0 maxpacket: 32 [ 2773.018830][T19276] usb 9-1: config 0 descriptor?? [ 2773.061131][ T8462] usb 10-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2773.071291][T19276] usb 9-1: can't set config #0, error -71 [ 2773.096027][ T8462] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2773.119391][T19276] usb 9-1: USB disconnect, device number 24 [ 2773.125518][ T8462] usb 10-1: Product: syz [ 2773.139928][ T8462] usb 10-1: Manufacturer: syz [ 2773.145432][ T8462] usb 10-1: SerialNumber: syz [ 2773.164150][ T8462] usb 10-1: config 0 descriptor?? [ 2773.336147][ T8596] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.8524'. [ 2773.356819][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8524'. [ 2773.534573][ T8606] netlink: 64 bytes leftover after parsing attributes in process `syz.8.8525'. [ 2773.581091][ T8462] airspy 10-1:0.0: Board ID: 13 [ 2773.596697][ T8462] airspy 10-1:0.0: Firmware version:  [ 2773.676825][ T8609] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2774.225518][ T5233] Dev loop6: unable to read RDB block 1 [ 2774.231345][ T5258] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2774.239086][ T5233] loop6: unable to read partition table [ 2774.269688][ T5233] loop6: partition table beyond EOD, truncated [ 2774.618150][ T5258] usb 2-1: Using ep0 maxpacket: 16 [ 2774.627602][ T5258] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2774.688277][ T5258] usb 2-1: config 1 has no interface number 0 [ 2774.726865][ T5258] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2774.852923][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.860549][ T8462] airspy 10-1:0.0: usb_control_msg() failed -71 request 10 [ 2774.867917][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.887634][ T8462] airspy 10-1:0.0: Registered as swradio24 [ 2774.903476][ T8462] airspy 10-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2774.937583][ T8462] usb 10-1: USB disconnect, device number 7 [ 2774.964679][ T5258] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2775.252688][ T5258] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2775.280468][ T5258] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2775.290509][ T5258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2775.301009][ T5258] usb 2-1: Product: syz [ 2775.305175][ T5258] usb 2-1: Manufacturer: syz [ 2775.311135][ T5258] usb 2-1: SerialNumber: syz [ 2775.320875][ T8614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2775.395106][T30913] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2775.724190][ T8614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2776.058823][T30913] usb 6-1: config 0 has no interfaces? [ 2776.105958][T30913] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2776.152073][T30913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2776.208799][T30913] usb 6-1: Product: syz [ 2776.287710][T30913] usb 6-1: Manufacturer: syz [ 2776.329659][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2776.349631][T30913] usb 6-1: SerialNumber: syz [ 2776.378281][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2776.389096][T30913] usb 6-1: config 0 descriptor?? [ 2777.434668][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8530'. [ 2777.474428][ T8626] geneve0: entered promiscuous mode [ 2777.483729][ T8626] geneve0: entered allmulticast mode [ 2777.623128][ T5258] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 2777.672816][ T5258] usb 2-1: USB disconnect, device number 87 [ 2777.909165][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8532'. [ 2777.921570][ T8644] netlink: 'syz.1.8532': attribute type 16 has an invalid length. [ 2778.293386][ T8655] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 2778.318159][ T8658] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 2778.494704][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806017b400: rx timeout, send abort [ 2778.512596][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806017b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 2778.800136][ T5258] usb 6-1: USB disconnect, device number 94 [ 2779.176723][T30913] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2779.348361][T30913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2779.364752][T30913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2779.392747][T30913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 2779.416674][ T5976] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2779.434774][T30913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 1938, setting to 1024 [ 2779.515341][T30913] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2779.524854][T30913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2779.543488][T30913] usb 9-1: Product: syz [ 2779.568927][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2779.592458][T30913] usb 9-1: Manufacturer: syz [ 2779.602604][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2779.612771][T30913] usb 9-1: SerialNumber: syz [ 2779.635229][T30913] usb 9-1: config 0 descriptor?? [ 2779.643130][ T5976] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 2779.673289][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.673823][ T8677] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2779.716286][ T5976] usb 6-1: config 0 descriptor?? [ 2780.053946][T30913] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2780.277356][ T5976] playstation 0003:054C:0DF2.0071: unknown main item tag 0x0 [ 2780.344373][ T5976] playstation 0003:054C:0DF2.0071: unknown main item tag 0x0 [ 2780.367178][ T8462] usb 9-1: USB disconnect, device number 25 [ 2780.423841][ T5976] playstation 0003:054C:0DF2.0071: unknown main item tag 0x0 [ 2780.442701][ T5976] playstation 0003:054C:0DF2.0071: unknown main item tag 0x0 [ 2780.458932][ T5976] playstation 0003:054C:0DF2.0071: unknown main item tag 0x0 [ 2780.480126][ T5976] playstation 0003:054C:0DF2.0071: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 2780.576370][ T5976] playstation 0003:054C:0DF2.0071: Invalid byte count transferred, expected 20 got 0 [ 2780.625232][ T5976] playstation 0003:054C:0DF2.0071: Failed to retrieve DualSense pairing info: -22 [ 2780.728501][ T5976] playstation 0003:054C:0DF2.0071: Failed to get MAC address from DualSense [ 2780.756715][ T5976] playstation 0003:054C:0DF2.0071: Failed to create dualsense. [ 2780.780287][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2780.791021][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2780.888599][ T5976] playstation 0003:054C:0DF2.0071: probe with driver playstation failed with error -22 [ 2781.068786][ T5976] usb 6-1: USB disconnect, device number 95 [ 2781.094805][ T8694] fido_id[8694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 2826.007686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2836.243367][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.250007][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2869.036747][ T7473] Bluetooth: hci1: command 0x0406 tx timeout [ 2897.682377][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.691336][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.120859][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.127357][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.560723][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.567244][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 3076.876672][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!