last executing test programs: 15m21.808152471s ago: executing program 3 (id=1658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 15m20.906993622s ago: executing program 3 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1ff, 0xfffffff9}}]}]}]}, 0x48}}, 0x0) 15m20.826801496s ago: executing program 3 (id=1665): io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x1000, 0x2, 0x26a}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000001b00010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 15m20.703091824s ago: executing program 3 (id=1667): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4, 0x6) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480)={[&(0x7f0000000180)='\xa1\xed9', &(0x7f00000001c0)='\x00']}) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x102) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"bb199d0bee7d12e9e7a392665269711e181c3f0ee334f982e6075ad850862c27", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x20000) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001540)={0x2, 0x0, [{0xdddd0000, 0xe5, &(0x7f0000000340)=""/229}, {0xeeef0000, 0x27, &(0x7f0000000600)=""/39}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r1}) 15m20.551270864s ago: executing program 3 (id=1668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) r1 = syz_usb_connect$cdc_ecm(0x1, 0x91, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0x80, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "fe9c56"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1e6c, 0xfffe, 0x0, 0x40}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x1, 0x2, 0xc, 0x4, 0x9}, @dmm={0x7, 0x24, 0x14, 0x6, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x6, 0x75}, @country_functional={0x12, 0x24, 0x7, 0xf2, 0x800, [0x9, 0x49a, 0x6b86, 0xe4a2, 0x4, 0x4a]}, @ncm={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x1, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9f, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x5, 0xc2}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x300, 0x3, 0x65, 0x4, 0x8, 0x5}, 0xc, &(0x7f0000000ac0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x5, 0xfff1}]}, 0x3, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41b}}, {0xb3, &(0x7f0000000b80)=@string={0xb3, 0x3, "fabdebcfa76f515728a704c0e0f0bafb4587598225dad948fd4516ff2b8a2722a2df962125c3ef0355908911262e1ed2d5545c025a4e756625dc4cbd2d122c6e403e6385b8ce86c27d573063cdf0d89bf133b3d20e85e974bc1d3d4704b134c386a11a816cc4328991ebf7319ab5a9173d5d93846ae0f8d0db91b60a2499f0dfff8d28ccd5368d2cdf03a73f6aa9b3cca9eb05f2c53a13ad713cb5f07406fd858bc3f04d51af7851175567572469aee98e"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000d40)={0x14, &(0x7f0000000c80)={0x20, 0x24, 0x60, {0x60, 0x2, "74aa36a347f99586f1297cf43263b6c2467e8672f0c94800345ef8d946c90d5a387a0720a88eb4026e508cc83ca89bb114573bc1c2d73b4c12842a7014904421783111850fae0173710a969498b733ece96bfeac36c040d1ad7b3c4228b2"}}, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x1c, &(0x7f0000000d80)={0x20, 0x17, 0x40, "91c93a9f83e00978e5ac2c614c12613dd37970c63ad119d9a8e9194b73bbd1a68fcd90b0b66342a3f141b0ff71949e129fe720b542e1667ca3c81d71ea7c8c56"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) r4 = syz_usb_connect$uac1(0x3, 0xd8, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x7, 0x20, 0x4f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x5, 0x2, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0x6, 0x9, "02f7b585972516"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xf, 0x1, 0x80, 0xc2, "fa41c945def46e92"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x20, 0x3, 0x8, 0x0, "d4e3a1", 'lj'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x9, 0xa, {0x7, 0x25, 0x1, 0x81, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x3, 0x3, 0xf, "ba32f16abf46"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x6, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0xb2, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x0, 0x8}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x3, 0x4, 0xf4, "8e6f4063"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x9, 0x92, {0x7, 0x25, 0x1, 0x41, 0x58, 0xae3f}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xd, 0xee, 0xd, 0xf7, 0x7}, 0x8b, &(0x7f0000000ec0)={0x5, 0xf, 0x8b, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x5, 0x2}, @generic={0x4c, 0x10, 0x4, "9ed8401e4b772434bdf521bb02b6a1b9ec1939222f010d5ee488f6fc0c40e33a9c4e71498607b0c875e27e4af44a9b840500000000000000371141a6193fcf3baba12a7538271321d0"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xae, 0x4, 0x5, 0xf000, 0x1548, [0xc0, 0x0, 0xcf, 0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x60, "b8cfb15fcc6beb7b1ac6bd9bbd720bd7"}]}, 0x1, [{0xfc, &(0x7f0000000580)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000680)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x36, {0x36, 0x10, "ae198b7ce501febb4dd9d12ee748d00be3456fe02af92e3b756adbd10c40ed43b59608454aca02ccb21225f06efd826f003bd0dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x35, @string={0x35, 0x3, "996ab0f3951181a8c9616fc31e747f3be0cf1619188e965daac2d90d2e880a48665b8d7f341c73cd533c858d38af892a23c10d"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0x18, 0x7f, "65403053dfa03beeab596ae4fb90a9b0c1bfc42f0258ef8e663353fc0ec942f6db1b20298a010c9b880d26efa226b83cb76a0adfd0972b62f56cd95c7831e8a4b12698875ce5641e5a1847e9e656ccc24fb19a977e2950b8572896500c06955eab04953776bfe0ba78c7286da139ca05becb954bc58a071f5f4e525872f0f1"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x81, 0x2, "5704"}, &(0x7f0000000840)={0x20, 0x82, 0x3, "81b584"}, &(0x7f0000000880)={0x20, 0x83, 0x1, 'n'}, &(0x7f00000008c0)={0x20, 0x84, 0x3, '5l~'}, &(0x7f0000000900)={0x20, 0x85, 0x3, "f56756"}}) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x2000, 0x8000, 0x0, 0x0}], 0x1}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0xa003) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000200)={0x1, 0x3d, 0x2, &(0x7f00000001c0)={0x19, "0fd62f5244b23de763e6acba8d11e6daa6c4ee99000000000000040200"}}) 15m17.169804817s ago: executing program 3 (id=1680): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$qrtr(r1, &(0x7f0000000140)={0x2a, 0x3, 0x8000}, 0xc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x9) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x82040) io_setup(0x886, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) (async, rerun: 32) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd) (async, rerun: 32) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) unshare(0x28000600) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1}) (async) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}], 0x2}, 0x6}], 0x1, 0x10081, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) prctl$PR_SET_DUMPABLE(0x34, 0x1) (async) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1000) 15m2.072425661s ago: executing program 32 (id=1680): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$qrtr(r1, &(0x7f0000000140)={0x2a, 0x3, 0x8000}, 0xc) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x9) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x82040) io_setup(0x886, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, r2}]) (async, rerun: 32) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd) (async, rerun: 32) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) unshare(0x28000600) (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1}) (async) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}], 0x2}, 0x6}], 0x1, 0x10081, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) prctl$PR_SET_DUMPABLE(0x34, 0x1) (async) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x1000) 7.700476459s ago: executing program 0 (id=6431): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x2000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x001\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x1, 0x4, "c282fe49"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) write(r0, &(0x7f0000000480)="213eae6284261871329932e5d82799adc93d1678998aa2398e", 0x19) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) unshare(0x22020400) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000340)={0x40, 0x24, 0xc9, {0xc9, 0x21, "f8400a1ad7823e0f41e126c0501d3e313bf1c36970af0590b10026edbf5c43233e7f32d8350bd56c81e85f4ca8b19f6cd1dd52aef14554f17fbd88dd9cceceaa0b9e3d86c14fcf5bc83352a5b6313bf234bbf497f7424490ced43eaefb5e30620f2cfc90043b41c2ff436f030708fc1a30dad46fb94341ee25d17d25f0cc7a25b66ba270b29a2c30b8f3b529f3e01f00ecbb9aa1e6c284545efab44961101ae8947b692507fd282741f60fef554822aa2b1e6b54f63edd868743b6013dcd1a591d7235d42d701b"}}, 0x0, &(0x7f0000000c40)={0x0, 0xf, 0x7b, {0x5, 0xf, 0x7b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x7, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xdc, "0b4b63ef7f12fd460867550d79173a19"}, @generic={0x51, 0x10, 0x3, "b278156bc16a02c25186ed596dce9e38ee12913d630bc764c4f97e234e4401a2aa665f45d67eaf7d88f99887f5c281e31ddfb6c6d030caa8d78cdbbf436bd4aedd1f22ecfa1f5735845fea4cda14"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x0, 0x2076}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x14, 0x3, 0x9, 0xe, "a79bcc84", "7be4903b"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x1, 0xee, 0x0, 0x4, 0x5, 0x8001}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000d00)={0x20, 0x8, 0x100, "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"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xb7}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x7, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0xe0, 0x20}}, 0x0, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0xb, 0x2, "1cce"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @random="647905364e28"}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, '>U'}, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x4e}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000680)={0x1, 0x40, 0x1, &(0x7f0000000240)={0x14, "0fd62f1944b23de763cfb137449ccf18ea4ee9f23bc4e6acba8d11e8daa6c4ee99"}}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000980)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x330) 7.656705693s ago: executing program 1 (id=6432): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x844101) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0x5421, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140200001000ffff26bd7000fbdbdf2500000080", @ANYRES32=0x0, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000080)="10", 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xb}, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.256617555s ago: executing program 4 (id=6436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000034000100f6ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9c}, 0x94) 6.256006195s ago: executing program 4 (id=6437): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="a8", 0x0, 0x8, 0x0, 0x1, 0x0}) (async) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x314e, 0x10, 0x8, 0x3bd}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) (async) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x6) close(0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7, 0x0, {0x0, r6}}) (async, rerun: 64) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd, 0x5, 0x0, 0xb, 0x7}) (async) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0x19) (async, rerun: 32) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async, rerun: 32) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8918, &(0x7f0000000140)={'lo\x00', @random="02001c80eaff"}) syz_usb_control_io$hid(r9, 0x0, 0x0) (async) syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.636406708s ago: executing program 4 (id=6440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x6, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, "0095595915303d6000"}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCFLSH(r3, 0x540b, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000500)={r7}, &(0x7f0000000280)=0x8) ioctl$TIOCGICOUNT(r3, 0x80045440, 0x0) 4.760325503s ago: executing program 4 (id=6441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a4000000000090002007379"], 0xd0}}, 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="380acf0d769bdd6128038cee2af1307b757d75cc153a21511ae8bf421f4d41c194efa5ab8cb7533cf29a8afb45053c1bbbd379c477f625d7086c06fbebf2c3af928a0f43f80362da8a43b5e48985e359e895d2df2c4edbe7e2b2c0320a7c92d9e2000dd2df2ba2a56d3470cbf3c7f84c19ef4ecfb66ea919d0a2a64608f4ab2ab1e4d7e44da4032c4b37dc0c5dfc57f827e5b7ef498d2b1650a1a9aa8ee209b458e089a77793d28a02debf4a45174671d94b4899a77f26d4e893784653dff7e6ba51ba4ce43652524c628da9c63d21c304f104aad5db1f79adfbfff434dd1591bfc3463c8961301835b7230ee97852cd3f504835217d19d6579f68c3c3c9a48d") syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x80, 0x4008, 0x0, 0x0, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x8, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000000000f2000000000080000000000000", 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x90) unshare(0x28040600) 4.629349103s ago: executing program 0 (id=6442): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x1db5, &(0x7f0000000240)={0x0, 0xcd79, 0x800, 0x0, 0x321}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r6, 0x1e, &(0x7f0000000340)={r4}, 0x1) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 4.504437831s ago: executing program 0 (id=6443): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x7a, 0x1b, &(0x7f0000000340)="aff7e821d2de66af3712c7b96f73d76d6cedcbed7a7f37eb21e282128c79aa81ca3cd71547378befb546f49c9395f1ed30d1dffac0108681f1691ca2c7e30cc97fb2f1db55811d614f4f36bb2b331ebd3c4eb7ec1237f6d3ed2d781416c7824cfc4e0e8270b7876bc0253147316df6624511e10652213fd16b4b", &(0x7f0000000240)=""/27, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x7600) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_pgetevents(0x0, 0x5, 0x0, 0x0, &(0x7f0000002580), 0x0) r5 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x15) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.235023002s ago: executing program 1 (id=6445): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde88a8170081001e000800402e00700068000007069078ac1414aaac1e0101440c2f81e000000100000009071715ac141435e0000001e00000010a010102ac1414aa008307e000000000000000000000000000000000000004000400004e2000004e23000000010000000000000003000000010000000200000000509d041dce5dced5ef"], 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r1 = socket(0x2d, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x5c02, &(0x7f00000005c0)={0x0, 0x1c02, 0x10100, 0x4007ff, 0x287}, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x801868, &(0x7f00000003c0)={0x0, 0x8aae, 0x2, 0x0, 0x59, 0x0, r3}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x8184b, 0x1, 0x20, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0x4b) write$binfmt_misc(r2, &(0x7f0000000800)="2f50088ae9490d0231bae4631507d41963b2c2df73e76de80ab8c9b6523906ea9c25b889257e41b686dbf7412a5d16f1e6f669b443c9059a", 0x38) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x4000}, 0xc) connect$qrtr(r1, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x7ffe}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000206000000000000000000000100000205000400020000000c000300686173683a791e7a2300020073797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x4) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000008c000380880000800c000180060001001e1c000078000a8073000100d76272ae656bfe7d3a46989006c69239a557ebdacf45a271c9e579860b9ba0a93fb34bc96fca7c36d995982af8a74aa34668149f25fb3bd1dbceebb4e62409000000d881e619f221db4b13eca9ae8257892b2a2f35e45e71e4ad48ccfc351b5a287c737ba180f6e0cc53f6d3997100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000200)=0x1b) r8 = ioctl$TIOCGPTPEER(r7, 0x5441, 0x3) ioctl$TCXONC(r8, 0x540a, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.064357019s ago: executing program 1 (id=6446): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa6c81, 0xc0) 3.606660851s ago: executing program 0 (id=6447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.480477134s ago: executing program 0 (id=6448): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}, {0x95, 0x0, 0x4000}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000002840)=""/4086, 0x41100, 0x20}, 0x94) 3.364222753s ago: executing program 0 (id=6449): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="002251000000a45b4550182195f5816eb39e3ce003"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x43) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x40, 0xc52bcc57068f69b2, 0xa, {0xa, 0x1, "3feb5a68fe9bbd96"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000300)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xb, "90"}, @main=@item_4={0x3, 0x0, 0xb, "17b0a23e"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x425}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x20, 0xe, 0x61, "d19b6719c5773b501fa06c79f82048c1543f711f4a825214a871397f97e6641b8ff4e4143cc56993d20685042d9d53d5410596e50544f0904f190df754f822085de35589388ddfa0500eb4eda8209e04292f03c770c253c2ba1f68897d7944c1bf"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0xcf, "77044307d2dbd005ffe7052ed0c12b9a40f2cae9f5b40ea693069140b3f8a111a048ae3211f8c707e6628bd9f2a4488d5f77fc1108faa1d0391ef51dd56362600b5bfb4a87de3c23535dc54406cb9830f1a8bd348bd452394cd9adf96bec4296a95cbe839d5b59114149400c43136acdab3b2aff5374429e5e0e8e8806b6d9c2f7996ed70865e65c77fbcc8893e2036efc86936c227d9ed807553fc35eef7a2408bd310c22fb535ea6afbb6d44b6c419aa25a7342396f426a640a411f9278c0f01890a675d56e7b31803618333a6d5"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x9}}) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x1, 0x6, 0x4, 0x1, 0x28}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x0, 0x0, 0x32315842}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="640100001000130700000000fcdbdf25000000000000000000000000200100000000000000000000000000010000fffe4e210022020000203b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000001000000fe32000000ffffffff000000000000000000000000000000000000000000000000000080000000000000000000080000000000000000000000000000000000000000000000fdffffffffffffff4305000000000000050000000000000009000000000000000000000000000000000000000000000000000000000000000000000028bd70000035000002"], 0x164}, 0x1, 0x0, 0x0, 0x488d4}, 0x0) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x1, {0x0, 0x1}, 0x2}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) getsockname$qrtr(r9, &(0x7f0000000080), &(0x7f0000000180)=0xc) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b19, &(0x7f00000001c0)={'wlan1\x00', @random="0100"}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.27690519s ago: executing program 2 (id=6451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2404d85e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x200, 0x8, 0xcf, 0x10100, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4}, 0x50) fcntl$setflags(r2, 0x2, 0x1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 3.215858639s ago: executing program 1 (id=6452): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x505c4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000e5000000000000003c980000000000005608000002000000c500000007000000b70000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f00000000c0)={0x143052980, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 3.123587852s ago: executing program 2 (id=6453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x6, 0x2, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000340)={r2, 0x3, 0x8c6e, 0x0, &(0x7f0000000300)}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x200088d0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000001000), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r9, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0xffffffffffffffda, 0x97f, {0x7, 0x2b, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) syz_fuse_handle_req(r9, &(0x7f00000040c0)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x90, 0x0, 0x4, {0x3, 0x0, 0x100, 0x4, 0xb, 0x10000, {0x4, 0x401, 0x9, 0x40b, 0x5a, 0x4, 0x401, 0xfffffff8, 0x7fc, 0x6000, 0x2, 0x0, 0x0, 0x802, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xe}, {0xb, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 3.024512968s ago: executing program 5 (id=6454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000002b00000000000000000000000000000000000000008a0db1410800000000000000000000000000000002000000000000000001020000000004010500ac1414aa0000000000000000000000000000000033"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.974469015s ago: executing program 5 (id=6455): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) r8 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r8, 0x20000c, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x6fd, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 1.529351762s ago: executing program 4 (id=6456): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @llc={0x1a, 0x324, 0x6, 0x4, 0x73, 0xfb, @multicast}, @isdn={0x22, 0xc, 0x17, 0x8, 0x40}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='syz_tun\x00', 0x7, 0xffffffff, 0x7ff}) r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x40800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7800, 0x7, 0x7, 0x4, {{0x2d, 0x4, 0x1, 0x5, 0xb4, 0x67, 0x0, 0xf2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @private=0xa010100, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x86, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @local]}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x3, [0xd190, 0x40, 0xfffffff4]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xc9, 0x1, 0x8, [{@loopback, 0x9}]}, @lsrr={0x83, 0xf, 0xe, [@empty, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x54, 0x6d, 0x1, 0x9, [{@multicast1, 0x4da}, {@private=0xa010102, 0x3}, {@local, 0x9b}, {@empty, 0xffffffff}, {@multicast1, 0xc}, {@loopback, 0x1000}, {@private=0xa010102, 0xb3}, {@empty, 0x1}, {@broadcast, 0x7}, {@loopback, 0xe7b}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newtclass={0x88, 0x28, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0x4, 0xc}, {0xffe0, 0xa}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0xd5}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040040}, 0x8040) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x9) r2 = fcntl$getown(r0, 0x9) process_vm_readv(r2, &(0x7f0000000540)=[{&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000000500)=""/48, 0x30}], 0x2, &(0x7f0000000600)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000005c0)=""/54, 0x36}], 0x2, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x384, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xec20, @local, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "c3e6bcf12919c4ecb6d9fa309f308f4035227e87d27cd3494529fc"}}, @TIPC_NLA_NODE_ID={0xab, 0x3, "b2e8cdd8ac844c7257f9f6e4cbe78ba44acb860603c1635853f89b008052518847bb6d53e704d3c5f219698670b8c8209696f9f5ba8fc1fc253f6f07dddfef28c1657bf2c12d7956dbc7ddfcbf0ddace7edcbcd0dc1bfde006ef53d42821cbb086512cc631bb38d76d057364815479bb6ab854673baafc820550ecd26fe2c5e8bf9e71a4a4ca4d49c449ad3474e3a07396b2cd389dadcbd5684d4c8414cfb37bb580858738308b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "287194fae339d6a5ef41c9c3efe860febc8da7026e6746543c01f318719898050877"}}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7142feaa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @local, 0x5f0}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20000840) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x11e6, &(0x7f0000000c40)={0x0, 0x876f, 0x80, 0x3, 0x23, 0x0, r4}, &(0x7f0000000cc0), &(0x7f0000000d00)) setsockopt$inet6_int(r5, 0x29, 0x18, &(0x7f0000000d40)=0xd6, 0x4) timer_create(0x7, &(0x7f0000000e40)={0x0, 0x29, 0x4, @thr={&(0x7f0000000d80)="d82d7f24e5b38d2eb4b7fa19c04a936bc3b0a82a23b7be59d243e60c13cfe1", &(0x7f0000000dc0)="a85466efd34940e030323204d7e0e6a4318fc9deb304c4a67024d569480bbf7dd4e8941dc46ba3034d1485a04af99016b4bb132f509a5a33fa63b27b61b95fe7e4044f2a5e8acbeccf0977b799ae903d9d7a0e2532156b683f551758b25471835684e368d1c00c057232bb1a24c5b8f9f8e8dd1c0a7369bc44"}}, &(0x7f0000000e80)) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f00), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000001000)) syz_emit_ethernet(0xf3, &(0x7f0000001040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @generic={{0x2d, 0x4, 0x2, 0x5, 0xe5, 0x65, 0x0, 0x10, 0x73, 0x0, @multicast2, @rand_addr=0x64010100, {[@rr={0x7, 0xf, 0xcd, [@rand_addr=0x64010100, @local, @loopback]}, @generic={0x89, 0xf, "1c906be17e7b762de757a07bcb"}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x9, [{@multicast1, 0x4}, {@broadcast, 0x3}, {@private=0xa010102, 0xe}]}, @timestamp_addr={0x44, 0x2c, 0xef, 0x1, 0xd, [{@local, 0x2}, {@loopback, 0xb}, {@dev={0xac, 0x14, 0x14, 0x17}}, {@empty, 0x7}, {@remote, 0xbefb}]}, @rr={0x7, 0x7, 0x84, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x16, 0x3, 0xb, [{@broadcast, 0x4}, {@private=0xa010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@rand_addr=0x64010101, 0xd0}, {@broadcast, 0x9}]}]}}, "f68ca369316b3b86ca622ceb79919aaf1ba1ad8fa8b69d4f251b7714c64a496fe5cf97d67b529e0549dfac9bbaaccd5786"}}}}, &(0x7f0000001140)={0x1, 0x2, [0x387, 0x535, 0x502, 0x287]}) mmap$snddsp(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3, 0x40010, r4, 0x3000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001200)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000001300)=0xe8) lsetxattr$security_capability(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0), &(0x7f0000001340)=@v3={0x3000000, [{0x2, 0xa}, {0x5, 0x3}], r8}, 0x18, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000014c0)=0x7) ioctl$VHOST_VDPA_SET_GROUP_ASID(r4, 0x4008af7c, &(0x7f0000001500)={0x0, 0x6}) close_range(r6, r9, 0x0) 1.348487892s ago: executing program 4 (id=6457): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000403014bb070000000000010902240001000000890904000101eeffffff09210600000122030009058103080080400a06aee29e24517c5f38644101e6d41186e73d749bc6726ae9e80be1ad99c71e60a521efbcccce8422ce5a0b087f483af456c80943017cbfe7debcbe5994197777bd65d3307660ae0629692d9a51bd27330bba4ca48312304866b744169f98271c37b7e90107e01352f6a5a57ebc00873fe5bb77fdde40abe72ba2037c2d8806920c5d1352c24060bf648801cb371a7cdc11fa0cb2c82a73531af53e169f4698454017ccfebf54f8fb1bb497614612eac5379cab698eab069de250b420bdc1ef69"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0xbb, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x3, 0x1, 0xf8, 0x30, 0xc1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x40, 0x2, "4a1215d89cff"}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x9, 'v\aI'}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0x7f}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x301, 0x2, 0x6, 0xf}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x9, "f74c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0xd, "54b8"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x2, 0x0, 0x2, '\n', "ab"}]}, {{0x9, 0x5, 0x1, 0x9, 0x59f, 0x0, 0x7, 0x6, {0x7, 0x25, 0x1, 0x0, 0xd8, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7, 0x3, 0x6, {0x7, 0x25, 0x1, 0x104, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0xf5, 0x80, 0x5, 0xff, 0x9}, 0x47, &(0x7f0000000280)={0x5, 0xf, 0x47, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x4, 0x2, 0x6}, @generic={0x3b, 0x10, 0xb, "708284cc17070120a14e9e212ebdf49e903805728ba59c265aed1d7291f7ee0a194e17c49e00e177cbb51b7d147385f4ee9eb3a5720ac1cb"}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x500a}}]}) getitimer(0xe, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40026600"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.307522365s ago: executing program 2 (id=6458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x6000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.237800122s ago: executing program 5 (id=6459): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffe, 0xfd, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0xffffffff, 0x30, 0x2, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x2, &(0x7f0000006680)) lgetxattr(0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006d00)={0x2020}, 0x2020) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x2}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x60e0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.16038354s ago: executing program 1 (id=6460): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 1.159810787s ago: executing program 2 (id=6461): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.064053558s ago: executing program 2 (id=6462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x2, 0x0, &(0x7f0000000200)="63ec", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='sessionid\x00') bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x4, {0x1, 0x1}, 0x2}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmmsg(r2, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="e975d8eefd8080c240c585efeca6bfcba7085deca608af3ca079", 0x1a}, {&(0x7f0000000240)="ec3f7c522f4b76af2cf60c9de6686d2d608251c9cdd8491202ad7d0b5a318a392dbee67f7fc9d2f6c1a7ed30b6442d2dd285db1d36859a720f6868143d44cc4b7e6352ee68421ba1b4b35dcbec5a729ea80a06fb35", 0x55}], 0x2}}], 0x1, 0x80010) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001500)=""/111, 0x6f}, {0x0}], 0x2}, 0x1}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @private=0xa010101, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x2, 0x1, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 988.848245ms ago: executing program 1 (id=6463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.numa_stat\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="00f525000000062c", @ANYRES64=0x3], 0x10) mmap(&(0x7f00000f6000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYRES64=r6], 0xa0}, 0x1, 0x0, 0x0, 0x4008080}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200027bd7000fedbdf25670000000800c300ffffff7f0800c300ff0100004d00c5008f7f5d15b479a278863da3a767ffffeb1add4a04e83ea3b4940d9da83e2a45d06308295a3e7d716469e122b782af5a069841a0718f06c8d18cd9277f4a663d4c31c1c5d9e4b521612e000000"], 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/243}, {&(0x7f0000000740)=""/12}, {&(0x7f00000006c0)}], 0x41, 0x55, 0xfffffffc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$loop(&(0x7f0000000580), 0x20007, 0x142ba3) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r12, 0x0, {0x0, 0x0, 0x0, 0x40000007, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7beb55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54c0a09db54afbaf67da79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) r13 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r13) ioctl$TIOCSLCKTRMIOS(r11, 0x5457, &(0x7f0000000000)) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000f80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000bd7000ffdbdf25050000001c000600", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40010010}, 0x4004000) 656.502774ms ago: executing program 5 (id=6464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000034000100f6ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x94) 646.402911ms ago: executing program 5 (id=6465): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000003200000000000000000000000000000000000000008a0db1410800000000000000000000000000000002000000000000000001020000000004010500ac1414aa0000000000000000000000000000000033"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 588.078524ms ago: executing program 5 (id=6466): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x40000000, 0x5}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000100)=0x7552, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r5, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ce4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r9, 0x402, 0x20) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') fchdir(r10) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x42000, 0x0) getdents64(r11, &(0x7f0000000140)=""/40, 0x28) 0s ago: executing program 2 (id=6467): r0 = socket$packet(0x11, 0x3, 0x300) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x414000, 0x40) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x0, 0x7, 0x4, 0x8, 0x8, {r2, r3/1000+60000}, {0x3, 0x1, 0x3e, 0x22, 0x8, 0x8, "7f15ef9e"}, 0xd, 0x2, {&(0x7f0000000100)=[{0xffff, 0x6, {&(0x7f0000000040)}, 0x7f5}, {0x7f, 0x2, {&(0x7f0000000240)}, 0x8}]}, 0x4, 0x0, r4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB="09efbaddab6f7813c1d64eaa4aff6f6a"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) creat(&(0x7f0000000140)='./file0\x00', 0x18a) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x414000, 0x40) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@multiplanar_userptr={0x0, 0x7, 0x4, 0x8, 0x8, {r2, r3/1000+60000}, {0x3, 0x1, 0x3e, 0x22, 0x8, 0x8, "7f15ef9e"}, 0xd, 0x2, {&(0x7f0000000100)=[{0xffff, 0x6, {&(0x7f0000000040)}, 0x7f5}, {0x7f, 0x2, {&(0x7f0000000240)}, 0x8}]}, 0x4, 0x0, r4}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB="09efbaddab6f7813c1d64eaa4aff6f6a"], 0x0) (async) kernel console output (not intermixed with test programs): eed USB device number 117 using dummy_hcd [ 1251.954626][ T5892] comedi comedi5: could not set alternate setting 3 in high speed [ 1251.995020][ T5892] usbduxsigma 1-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 1252.020470][ T5892] usbduxsigma 1-1:4.146: probe with driver usbduxsigma failed with error -71 [ 1252.037050][ T5892] usb 1-1: USB disconnect, device number 84 [ 1252.060558][T21331] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1252.071513][T21331] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1252.081046][T21331] usb 6-1: can't read configurations, error -61 [ 1252.220168][T21331] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1252.410719][T21331] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1252.421372][T21331] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1252.429920][T21331] usb 6-1: can't read configurations, error -61 [ 1252.436669][T21331] usb usb6-port1: attempt power cycle [ 1252.574001][T26803] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6050'. [ 1252.583551][T26803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1252.838543][T21338] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1252.839485][T21331] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1252.869544][T21331] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1252.879500][T21331] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1252.887162][T21331] usb 6-1: can't read configurations, error -61 [ 1252.998516][T21338] usb 1-1: Using ep0 maxpacket: 32 [ 1252.998604][T21326] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1253.005646][T21338] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.021589][T21338] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1253.028543][T21331] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1253.030833][T21338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.048314][T21338] usb 1-1: config 0 descriptor?? [ 1253.060070][T21338] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1253.067176][T21331] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1253.077061][T21331] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1253.085728][T21331] usb 6-1: can't read configurations, error -61 [ 1253.093115][T21331] usb usb6-port1: unable to enumerate USB device [ 1253.159190][T21326] usb 2-1: Using ep0 maxpacket: 8 [ 1253.165903][T21326] usb 2-1: config 0 has no interfaces? [ 1253.189539][T21326] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1253.199349][T21326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.207397][T21326] usb 2-1: Product: syz [ 1253.211793][T21326] usb 2-1: Manufacturer: syz [ 1253.216407][T21326] usb 2-1: SerialNumber: syz [ 1253.229062][T21326] usb 2-1: config 0 descriptor?? [ 1253.287833][T26807] netlink: 'syz.2.6052': attribute type 1 has an invalid length. [ 1253.341581][T26808] bond1: entered promiscuous mode [ 1253.346685][T26808] bond1: entered allmulticast mode [ 1253.359228][T26808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1253.467405][T26805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.476644][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.541339][T26805] vlan0: entered promiscuous mode [ 1253.568709][T21338] gspca_spca501: reg write: error -110 [ 1253.582226][T21338] spca501 1-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1253.602835][T21338] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 1253.643892][T21331] usb 2-1: USB disconnect, device number 7 [ 1253.723013][T26812] netlink: 'syz.0.6050': attribute type 16 has an invalid length. [ 1253.730968][T26812] netlink: 'syz.0.6050': attribute type 17 has an invalid length. [ 1253.739479][T26812] netlink: 'syz.0.6050': attribute type 27 has an invalid length. [ 1253.908576][T21338] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1254.038516][T21338] usb 3-1: device descriptor read/64, error -71 [ 1254.279014][T21338] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1254.461903][T21338] usb 3-1: device descriptor read/64, error -71 [ 1255.142200][T21338] usb usb3-port1: attempt power cycle [ 1255.486233][T26839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1255.495837][T21338] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1255.639335][T21338] usb 3-1: device descriptor read/8, error -71 [ 1255.657253][T26839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6059'. [ 1255.725835][T12891] usb 1-1: USB disconnect, device number 85 [ 1255.888650][T21338] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1255.909731][T21338] usb 3-1: device descriptor read/8, error -71 [ 1256.018859][T21338] usb usb3-port1: unable to enumerate USB device [ 1256.672785][T26850] cgroup: fork rejected by pids controller in /syz1 [ 1257.182754][T27116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.409020][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1257.409041][ T30] audit: type=1326 audit(1764249018.491:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.4.6061" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f140ef8f749 code=0x0 [ 1257.518629][T12891] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1257.687672][T12891] usb 6-1: Using ep0 maxpacket: 8 [ 1257.851795][T12891] usb 6-1: config 0 has no interfaces? [ 1257.899751][T12891] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1257.928570][T12891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.938519][T12891] usb 6-1: Product: syz [ 1257.948673][T12891] usb 6-1: Manufacturer: syz [ 1257.953300][T12891] usb 6-1: SerialNumber: syz [ 1257.999328][T12891] usb 6-1: config 0 descriptor?? [ 1258.111754][T27129] loop9: detected capacity change from 0 to 7 [ 1258.117965][ T30] audit: type=1326 audit(1764249019.311:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.150103][T27129] Dev loop9: unable to read RDB block 7 [ 1258.155700][T27129] loop9: AHDI p4 [ 1258.173506][T27129] loop9: partition table partially beyond EOD, truncated [ 1258.182139][ T30] audit: type=1326 audit(1764249019.311:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.262817][T27114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.271934][T27114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.309864][ T30] audit: type=1326 audit(1764249019.311:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.357573][T27114] vlan2: entered promiscuous mode [ 1258.418914][ T30] audit: type=1326 audit(1764249019.321:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.477876][ T30] audit: type=1326 audit(1764249019.321:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.502654][ T30] audit: type=1326 audit(1764249019.321:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.549507][T21331] usb 6-1: USB disconnect, device number 121 [ 1258.558837][ T30] audit: type=1326 audit(1764249019.321:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.598585][ T30] audit: type=1326 audit(1764249019.321:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.630482][ T30] audit: type=1326 audit(1764249019.321:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27125 comm="syz.0.6069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf3478f749 code=0x7ffc0000 [ 1258.684488][T27141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1258.722433][T21338] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1258.970314][T21338] usb 3-1: Using ep0 maxpacket: 8 [ 1258.981040][T21338] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1258.990296][T21338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.998277][T21338] usb 3-1: Product: syz [ 1259.003276][T21338] usb 3-1: Manufacturer: syz [ 1259.007858][T21338] usb 3-1: SerialNumber: syz [ 1259.011623][T27145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1259.044188][T21338] usb 3-1: config 0 descriptor?? [ 1259.059775][T21338] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1259.146340][T27146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1259.478686][T21326] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1259.629579][T21326] usb 6-1: Using ep0 maxpacket: 16 [ 1259.674858][T27135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.690973][T27135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.710822][T21326] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1259.720347][T21326] usb 6-1: config 0 has no interface number 0 [ 1259.739800][T21326] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1259.765724][T21326] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.780594][T21338] gspca_vc032x: reg_w err -71 [ 1259.786403][T21326] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1259.795419][T21338] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1259.798539][T21326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.843291][T21326] usb 6-1: config 0 descriptor?? [ 1259.852760][T21338] usb 3-1: USB disconnect, device number 58 [ 1259.897390][T27161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1260.155884][T27167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6082'. [ 1260.178475][T21337] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1260.181596][T27167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.212732][T27167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.228652][T21338] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1260.333509][T21337] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1260.343336][T21337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.359549][T21337] usb 1-1: Product: syz [ 1260.367151][T21337] usb 1-1: Manufacturer: syz [ 1260.376146][T21337] usb 1-1: SerialNumber: syz [ 1260.400788][T21338] usb 3-1: config 10 has an invalid interface number: 169 but max is 2 [ 1260.409381][T21338] usb 3-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 1260.418188][T21338] usb 3-1: config 10 has an invalid interface number: 212 but max is 2 [ 1260.446993][T21338] usb 3-1: config 10 has an invalid interface number: 87 but max is 2 [ 1260.465685][T21338] usb 3-1: config 10 contains an unexpected descriptor of type 0x2, skipping [ 1260.474982][T21338] usb 3-1: config 10 has an invalid interface number: 46 but max is 2 [ 1260.482558][T21326] uclogic 0003:28BD:0071.003B: failed retrieving string descriptor #100: -71 [ 1260.492744][T21338] usb 3-1: config 10 has an invalid interface number: 14 but max is 2 [ 1260.493837][T21326] uclogic 0003:28BD:0071.003B: failed retrieving pen parameters: -71 [ 1260.512742][T21338] usb 3-1: config 10 has 5 interfaces, different from the descriptor's value: 3 [ 1260.527428][T21326] uclogic 0003:28BD:0071.003B: pen probing failed: -71 [ 1260.532614][T21338] usb 3-1: config 10 has no interface number 0 [ 1260.540754][T21326] uclogic 0003:28BD:0071.003B: failed probing parameters: -71 [ 1260.540868][T21326] uclogic 0003:28BD:0071.003B: probe with driver uclogic failed with error -71 [ 1260.569166][T21338] usb 3-1: config 10 has no interface number 1 [ 1260.582993][T21326] usb 6-1: USB disconnect, device number 122 [ 1260.585678][T21338] usb 3-1: config 10 has no interface number 2 [ 1260.612009][T21338] usb 3-1: config 10 has no interface number 3 [ 1260.628548][T21338] usb 3-1: config 10 has no interface number 4 [ 1260.638921][T21338] usb 3-1: config 10 interface 169 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1260.668954][T21338] usb 3-1: config 10 interface 169 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1260.688525][T21338] usb 3-1: too many endpoints for config 10 interface 212 altsetting 209: 54, using maximum allowed: 30 [ 1260.718488][T21338] usb 3-1: config 10 interface 212 altsetting 209 endpoint 0x5 has invalid maxpacket 1552, setting to 64 [ 1260.738517][T21338] usb 3-1: config 10 interface 212 altsetting 209 has an invalid descriptor for endpoint zero, skipping [ 1260.758542][T21338] usb 3-1: config 10 interface 212 altsetting 209 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1260.770467][T21338] usb 3-1: config 10 interface 212 altsetting 209 has an invalid descriptor for endpoint zero, skipping [ 1260.788513][T21338] usb 3-1: config 10 interface 212 altsetting 209 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1260.804725][T21338] usb 3-1: config 10 interface 212 altsetting 209 has a duplicate endpoint with address 0x1, skipping [ 1260.817655][T21338] usb 3-1: config 10 interface 212 altsetting 209 has an invalid descriptor for endpoint zero, skipping [ 1260.831863][T21337] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1260.845832][T21337] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1260.856172][T21338] usb 3-1: config 10 interface 212 altsetting 209 has a duplicate endpoint with address 0xC, skipping [ 1260.868276][T21337] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1260.877736][T21338] usb 3-1: config 10 interface 212 altsetting 209 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1260.890448][T21338] usb 3-1: config 10 interface 212 altsetting 209 has an invalid descriptor for endpoint zero, skipping [ 1260.904388][T21337] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1260.924115][T21337] usb 1-1: USB disconnect, device number 86 [ 1260.931896][T21338] usb 3-1: config 10 interface 212 altsetting 209 has an invalid descriptor for endpoint zero, skipping [ 1260.960436][T21338] usb 3-1: config 10 interface 212 altsetting 209 has 14 endpoint descriptors, different from the interface descriptor's value: 54 [ 1260.985917][T21338] usb 3-1: config 10 interface 87 altsetting 3 endpoint 0x7 has invalid maxpacket 1072, setting to 64 [ 1260.997381][T21338] usb 3-1: config 10 interface 87 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1261.011650][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1261.024040][T21338] usb 3-1: config 10 interface 87 altsetting 3 has an endpoint descriptor with address 0x34, changing to 0x4 [ 1261.036167][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1261.101211][T21338] usb 3-1: config 10 interface 87 altsetting 3 endpoint 0x6 has invalid maxpacket 80, setting to 64 [ 1261.121078][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1261.145076][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1261.159042][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1261.172966][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1261.198473][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1261.212655][T21338] usb 3-1: config 10 interface 87 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 1261.228495][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 1261.248761][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 1261.296721][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1261.396563][T21338] usb 3-1: config 10 interface 87 altsetting 3 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1261.444948][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x87, skipping [ 1261.494952][T21338] usb 3-1: config 10 interface 87 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1261.527559][T21338] usb 3-1: config 10 interface 87 altsetting 3 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 1261.559242][T21338] usb 3-1: config 10 interface 46 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1261.584548][T21338] usb 3-1: config 10 interface 46 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 1261.635555][T21338] usb 3-1: config 10 interface 46 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1261.705208][T21338] usb 3-1: config 10 interface 46 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 1261.737877][T21338] usb 3-1: config 10 interface 46 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 1261.778483][T21338] usb 3-1: config 10 interface 46 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1261.824758][T21338] usb 3-1: too many endpoints for config 10 interface 14 altsetting 134: 99, using maximum allowed: 30 [ 1261.869814][T21338] usb 3-1: config 10 interface 14 altsetting 134 has an invalid descriptor for endpoint zero, skipping [ 1261.921148][T21338] usb 3-1: config 10 interface 14 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 99 [ 1262.015458][T27181] netlink: 408 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1262.025008][T21338] usb 3-1: config 10 interface 169 has no altsetting 0 [ 1262.037488][T21338] usb 3-1: config 10 interface 212 has no altsetting 0 [ 1262.058460][T21338] usb 3-1: config 10 interface 87 has no altsetting 0 [ 1262.065284][T21338] usb 3-1: config 10 interface 46 has no altsetting 0 [ 1262.072633][T21338] usb 3-1: config 10 interface 14 has no altsetting 0 [ 1262.095337][T21338] usb 3-1: New USB device found, idVendor=0489, idProduct=e03d, bcdDevice= 2.88 [ 1262.114716][T21338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.144381][T21338] usb 3-1: Product: syz [ 1262.160675][T21338] usb 3-1: Manufacturer: 贇卜ꎳ⑈፶⹰꟩㄂瘒鎌깴䟮暠ౢ꓉⫥盍韕핔䷗䜴脒Ὃ㢥촤ꔔ䫘퀕栱⛓딿퓝ꖕ饖 [ 1262.182845][T21338] usb 3-1: SerialNumber: syz [ 1262.240319][T27186] netlink: 'syz.1.6087': attribute type 11 has an invalid length. [ 1262.447370][T21338] usb 3-1: USB disconnect, device number 59 [ 1263.050712][T27202] fuse: Unknown parameter 'grut_id}00000000000000000000' [ 1263.605209][T27238] netlink: 996 bytes leftover after parsing attributes in process `syz.2.6104'. [ 1263.616000][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6101'. [ 1263.641031][T27230] xt_CT: No such helper "snmp" [ 1263.681990][T27240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6106'. [ 1263.735320][T21326] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1263.903767][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1263.922568][T21326] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1263.939304][T21326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.994020][T21326] usb 6-1: Product: syz [ 1264.030894][T21326] usb 6-1: Manufacturer: syz [ 1264.041690][T21326] usb 6-1: SerialNumber: syz [ 1264.085148][T21326] usb 6-1: config 0 descriptor?? [ 1264.101136][T21326] hub 6-1:0.0: bad descriptor, ignoring hub [ 1264.107422][T21326] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1264.127985][T21326] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input104 [ 1264.321277][T27228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.359165][T27228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.472874][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 1264.489975][T21326] usb 6-1: USB disconnect, device number 123 [ 1264.543832][T27267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1264.698315][T27274] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1264.868582][ T5892] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1265.020969][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 1265.052975][ T5892] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1265.066181][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1265.075971][ T5892] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1265.090334][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.103828][ T5892] usb 3-1: config 0 descriptor?? [ 1265.319048][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1265.333024][T27306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6128'. [ 1265.443762][T27308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6126'. [ 1265.510842][ T5892] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1265.520507][ T5892] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1265.709121][T21338] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1265.768460][T12891] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1265.858480][T21338] usb 1-1: Using ep0 maxpacket: 32 [ 1265.866009][T21338] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1265.879340][T21338] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1265.894980][T21338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.907346][T21338] usb 1-1: Product: syz [ 1265.911637][T21338] usb 1-1: Manufacturer: syz [ 1265.916800][T21338] usb 1-1: SerialNumber: syz [ 1265.921473][T12891] usb 2-1: Using ep0 maxpacket: 16 [ 1265.928228][T12891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.939792][T12891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.950301][T21338] usb 1-1: config 0 descriptor?? [ 1265.955907][T27311] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1265.961681][T12891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1265.978761][T21338] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1265.985986][T12891] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1265.998763][T12891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.024118][T12891] usb 2-1: config 0 descriptor?? [ 1266.154370][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6131'. [ 1266.181507][T27311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.190437][T27311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.200340][T21327] usb 1-1: USB disconnect, device number 87 [ 1266.411419][T27311] input: syz0 as /devices/virtual/input/input105 [ 1266.445723][T27311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1266.481193][T12891] ryos 0003:1E7D:31CE.003C: unknown main item tag 0x0 [ 1266.500266][T12891] ryos 0003:1E7D:31CE.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 1266.650352][T27323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1267.578544][T21326] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1267.740033][T21326] usb 6-1: Using ep0 maxpacket: 32 [ 1267.748052][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.759489][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.769627][T21326] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1267.778991][T21326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.789926][T21326] usb 6-1: config 0 descriptor?? [ 1267.813902][T21326] hub 6-1:0.0: USB hub found [ 1267.975165][T27344] fuse: Invalid rootmode [ 1267.998947][T21326] hub 6-1:0.0: 2 ports detected [ 1268.033847][T27346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.051571][T27346] vlan0: entered promiscuous mode [ 1268.056818][T27346] vlan0: entered allmulticast mode [ 1268.112534][T27346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1268.204714][T21326] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1268.216354][T21326] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1268.229491][T21326] usbhid 6-1:0.0: can't add hid device: -71 [ 1268.235471][T21326] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1268.269341][T21326] usb 6-1: USB disconnect, device number 124 [ 1268.536895][T21338] usb 2-1: USB disconnect, device number 8 [ 1268.686140][ T30] kauditd_printk_skb: 7168 callbacks suppressed [ 1268.686158][ T30] audit: type=1326 audit(1764249029.881:10306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb69758f749 code=0x7ffc0000 [ 1268.715990][ T30] audit: type=1326 audit(1764249029.881:10307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb69758df90 code=0x7ffc0000 [ 1268.749044][ T30] audit: type=1326 audit(1764249029.881:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1268.813598][T27359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.015331][ T30] audit: type=1326 audit(1764249029.881:10309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.065175][T27363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.075093][ T30] audit: type=1326 audit(1764249029.891:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.111553][T27363] vlan2: entered promiscuous mode [ 1269.117016][T27363] vlan2: entered allmulticast mode [ 1269.122659][ T30] audit: type=1326 audit(1764249029.891:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.145788][T21338] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1269.158090][T27363] hsr_slave_1: entered allmulticast mode [ 1269.171141][ T30] audit: type=1326 audit(1764249030.201:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.204435][ T30] audit: type=1326 audit(1764249030.271:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.235060][T27363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6148'. [ 1269.244928][ T30] audit: type=1326 audit(1764249030.351:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.311632][ T30] audit: type=1326 audit(1764249030.351:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.1.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb69758f34b code=0x7ffc0000 [ 1269.316223][T21338] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.369201][T21338] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.449996][T21338] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.460847][T21338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1269.490858][T21338] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1269.514617][T21338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.618103][T21338] usb 2-1: config 0 descriptor?? [ 1269.858676][T12891] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1270.018253][T27381] fuse: Bad value for 'group_id' [ 1270.023526][T27381] fuse: Bad value for 'group_id' [ 1270.030780][T27381] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1270.047272][T21338] kye 0003:0458:5015.003D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1270.061174][T21338] kye 0003:0458:5015.003D: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 1270.075354][T21338] kye 0003:0458:5015.003D: tablet-enabling feature report not found [ 1270.083589][T21338] kye 0003:0458:5015.003D: tablet enabling failed [ 1270.230770][T12891] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1270.240343][T12891] usb 1-1: config 0 has no interface number 0 [ 1270.275556][T21326] usb 2-1: USB disconnect, device number 9 [ 1270.302007][T12891] usb 1-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 1270.324285][T12891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.395451][T12891] usb 1-1: Product: syz [ 1270.420179][T12891] usb 1-1: Manufacturer: syz [ 1270.437612][T12891] usb 1-1: SerialNumber: syz [ 1270.461363][T12891] usb 1-1: config 0 descriptor?? [ 1270.480404][T12891] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 1270.488147][T12891] dvb-usb: bulk message failed: -22 (4/0) [ 1270.502317][T12891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1270.529742][T12891] dvb-usb: bulk message failed: -22 (5/0) [ 1270.719028][T12891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1270.732441][T12891] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1270.745802][T12891] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 1270.772700][T12891] usb 1-1: USB disconnect, device number 88 [ 1271.259939][T27407] netlink: 'syz.5.6160': attribute type 6 has an invalid length. [ 1271.328543][T21326] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1271.673042][T21326] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1271.684697][T21326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1271.698464][T21326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1271.713499][T21326] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a55, bcdDevice= 0.00 [ 1271.723202][T21326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.741949][T21326] usb 2-1: config 0 descriptor?? [ 1271.748930][T27403] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1272.033575][T27420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer. [ 1272.180295][T21326] hid-corsair-void 0003:1B1C:0A55.003E: hidraw0: USB HID v0.00 Device [HID 1b1c:0a55] on usb-dummy_hcd.1-1/input0 [ 1272.415014][T27403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.425177][T27403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1272.481300][T21331] usb 2-1: USB disconnect, device number 10 [ 1272.748655][T21338] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1272.911466][T21338] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1272.938827][T21338] usb 6-1: config 1 has no interface number 0 [ 1272.948497][T21338] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1272.958128][T21338] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1272.968530][T21338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.976515][T21338] usb 6-1: Product: syz [ 1272.989437][T21338] usb 6-1: Manufacturer: syz [ 1272.994240][T21338] usb 6-1: SerialNumber: syz [ 1273.078597][T12891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1273.230985][T12891] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1273.242751][T12891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.255291][T12891] usb 2-1: config 0 descriptor?? [ 1273.465329][T12891] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1273.736455][T21338] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22 [ 1273.777412][T21338] usb 6-1: USB disconnect, device number 125 [ 1273.906206][T27448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.920479][T27448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.959224][T21331] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1274.019385][T12891] [drm:udl_init] *ERROR* Selecting channel failed [ 1274.048108][T12891] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1274.067167][T12891] [drm] Initialized udl on minor 2 [ 1274.074102][T12891] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1274.126791][T12891] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1274.135997][T21338] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1274.155920][T21331] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1274.198576][T21331] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.208530][T21331] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1274.254863][T21338] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1274.263856][T12891] usb 2-1: USB disconnect, device number 11 [ 1274.267828][T21331] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1274.279739][T21338] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1274.291687][T21331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.408821][T27469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6162'. [ 1274.419820][T27469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.485223][T27469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.497069][T21331] usb 1-1: config 0 descriptor?? [ 1274.848568][T21326] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1274.935047][T21331] holtek_kbd 0003:04D9:A055.003F: bogus close delimiter [ 1274.944606][T21331] holtek_kbd 0003:04D9:A055.003F: item 0 4 2 10 parsing failed [ 1274.971394][T21331] holtek_kbd 0003:04D9:A055.003F: probe with driver holtek_kbd failed with error -22 [ 1274.981636][T21326] usb 2-1: device descriptor read/64, error -71 [ 1275.074984][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6181'. [ 1275.099481][T27474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6181'. [ 1275.136662][T21338] usb 1-1: USB disconnect, device number 89 [ 1275.219054][T21326] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1275.350203][T21326] usb 2-1: device descriptor read/64, error -71 [ 1275.438549][T12891] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1275.458803][T21326] usb usb2-port1: attempt power cycle [ 1275.607565][T12891] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1275.616649][T12891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.628325][T12891] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1275.648580][T12891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.668057][T12891] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1275.706189][T12891] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1275.748425][T12891] usb 6-1: Product: syz [ 1275.752642][T12891] usb 6-1: Manufacturer: syz [ 1275.775206][T27480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1275.801104][T27480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1275.813002][T27480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1275.814986][T12891] cdc_wdm 6-1:1.0: skipping garbage [ 1275.831357][T27480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1275.837376][T12891] cdc_wdm 6-1:1.0: skipping garbage [ 1275.838512][T21326] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1275.853552][T27480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1275.855293][T12891] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1275.884438][T12891] cdc_wdm 6-1:1.0: Unknown control protocol [ 1275.893326][T27484] loop9: detected capacity change from 0 to 7 [ 1275.898852][T21326] usb 2-1: device descriptor read/8, error -71 [ 1275.920261][T27484] Dev loop9: unable to read RDB block 7 [ 1275.938592][T27484] loop9: AHDI p4 [ 1275.942294][T27484] loop9: partition table partially beyond EOD, truncated [ 1276.030759][T12891] usb 6-1: USB disconnect, device number 126 [ 1276.162810][T21326] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1276.179521][T27491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.210813][T21326] usb 2-1: device descriptor read/8, error -71 [ 1276.227666][T27493] netlink: 408 bytes leftover after parsing attributes in process `syz.4.6188'. [ 1276.253949][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6189'. [ 1276.318986][T13909] bond0: (slave netdevsim0): Releasing backup interface [ 1276.338895][T21326] usb usb2-port1: unable to enumerate USB device [ 1276.661571][T27499] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1276.669309][T27499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1276.676088][T27499] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1276.692185][T27499] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1276.699005][T27499] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1276.729437][T27503] bridge0: entered allmulticast mode [ 1276.745684][T13909] vlan2: left allmulticast mode [ 1276.754114][T13909] vlan2: left promiscuous mode [ 1276.760810][T13909] bridge0: port 3(vlan2) entered disabled state [ 1276.772233][T13909] bridge_slave_1: left allmulticast mode [ 1276.778753][T13909] bridge_slave_1: left promiscuous mode [ 1276.792886][T27499] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1276.810849][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.833469][T13909] bridge_slave_0: left allmulticast mode [ 1276.851042][T13909] bridge_slave_0: left promiscuous mode [ 1276.856834][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.977206][T13909] vlan3: left allmulticast mode [ 1276.986855][T13909] veth0_to_bond: left allmulticast mode [ 1276.997212][T13909] vlan3: left promiscuous mode [ 1277.201071][T13909] veth0_to_bond: left promiscuous mode [ 1277.217806][T13909] bridge2: port 2(vlan3) entered disabled state [ 1277.237059][T13909] veth3: left allmulticast mode [ 1277.245698][T13909] veth3: left promiscuous mode [ 1277.254087][T13909] bridge2: port 1(veth3) entered disabled state [ 1277.383815][T27516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.543603][T27520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1277.673803][T27525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6195'. [ 1278.588558][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1278.673951][T13909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.685437][T13909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.692835][T27536] loop9: detected capacity change from 0 to 7 [ 1278.702058][T13909] bond0 (unregistering): Released all slaves [ 1278.702576][ T6106] Dev loop9: unable to read RDB block 7 [ 1278.716806][ T6106] loop9: AHDI p4 [ 1278.720902][ T6106] loop9: partition table partially beyond EOD, truncated [ 1278.735195][T27536] Dev loop9: unable to read RDB block 7 [ 1278.740965][T27536] loop9: AHDI p4 [ 1278.744827][T27536] loop9: partition table partially beyond EOD, truncated [ 1278.748653][ T5838] Bluetooth: hci0: command 0x041b tx timeout [ 1278.752090][T27480] Bluetooth: hci5: command 0x0c1a tx timeout [ 1278.764456][T27480] Bluetooth: hci3: command 0x0406 tx timeout [ 1278.880300][T27539] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6197'. [ 1278.948748][T13909] bond1 (unregistering): Released all slaves [ 1278.966511][T27508] netlink: 'syz.0.6193': attribute type 6 has an invalid length. [ 1278.983231][T27520] vlan0: entered promiscuous mode [ 1278.993196][T27520] vlan0: entered allmulticast mode [ 1279.003085][T27520] hsr_slave_1: entered allmulticast mode [ 1279.247691][T27485] chnl_net:caif_netlink_parms(): no params data found [ 1279.345237][T13909] : left promiscuous mode [ 1279.462601][T13909] tipc: Left network mode [ 1279.530900][T21338] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1279.715112][T21338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1279.752130][T21338] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1279.761783][T21338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.781106][T21338] usb 6-1: config 0 descriptor?? [ 1280.240457][T27485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.249016][T27485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.266546][T27485] bridge_slave_0: entered allmulticast mode [ 1280.326660][T27485] bridge_slave_0: entered promiscuous mode [ 1280.401631][T27485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.411232][T27547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.420553][T27547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.441134][T21338] usbhid 6-1:0.0: can't add hid device: -71 [ 1280.447100][T21338] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1280.466023][T21338] usb 6-1: USB disconnect, device number 127 [ 1280.507226][T27485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.565088][T27485] bridge_slave_1: entered allmulticast mode [ 1280.602864][T27485] bridge_slave_1: entered promiscuous mode [ 1280.829557][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1281.066781][T27485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.152324][T27485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.234941][T13909] hsr_slave_0: left promiscuous mode [ 1281.242715][T13909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1281.256565][T13909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1281.379921][T21338] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1281.555149][T21338] usb 2-1: Using ep0 maxpacket: 8 [ 1281.563475][T21338] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.579691][T21338] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.589894][T21338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1281.596631][T21338] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1281.606526][T21338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.622224][T21338] usb 2-1: config 0 descriptor?? [ 1281.963268][T13909] team0 (unregistering): Port device team_slave_1 removed [ 1282.025282][T13909] team0 (unregistering): Port device team_slave_0 removed [ 1282.057876][T21338] input: HID 28bd:0905 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0905.0040/input/input106 [ 1282.141289][T21338] uclogic 0003:28BD:0905.0040: input,hidraw0: USB HID v8.15 Mouse [HID 28bd:0905] on usb-dummy_hcd.1-1/input0 [ 1282.275499][T21326] usb 2-1: USB disconnect, device number 16 [ 1282.484711][T27600] fido_id[27600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1282.584111][ T30] kauditd_printk_skb: 109 callbacks suppressed [ 1282.584128][ T30] audit: type=1326 audit(1764249043.771:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.614086][ T30] audit: type=1326 audit(1764249043.791:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.641855][ T30] audit: type=1326 audit(1764249043.791:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.684429][ T30] audit: type=1326 audit(1764249043.791:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.707437][ T30] audit: type=1326 audit(1764249043.791:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.730429][ T30] audit: type=1326 audit(1764249043.791:10430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.753275][T21327] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1282.761510][ T30] audit: type=1326 audit(1764249043.791:10431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.819367][ T30] audit: type=1326 audit(1764249043.791:10432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.850267][ T30] audit: type=1326 audit(1764249043.791:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.875023][ T30] audit: type=1326 audit(1764249043.791:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27605 comm="syz.4.6212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f140ef8f749 code=0x7ffc0000 [ 1282.908553][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1282.956748][T21327] usb 6-1: Using ep0 maxpacket: 16 [ 1282.965267][T21327] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1282.980399][T21327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1282.994115][T21327] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1283.003391][T21327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.011528][T21327] usb 6-1: Product: syz [ 1283.016735][T21327] usb 6-1: Manufacturer: syz [ 1283.021806][T21327] usb 6-1: SerialNumber: syz [ 1283.030124][T21327] usb 6-1: config 0 descriptor?? [ 1283.038797][T21327] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1283.048137][T21327] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1283.088454][T21331] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1283.197635][T27580] netlink: 566 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1283.207306][T27581] netlink: 566 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1283.251064][T21331] usb 2-1: Using ep0 maxpacket: 16 [ 1283.264190][T21331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.298403][T21331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.308225][T21331] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1283.336680][T27485] team0: Port device team_slave_0 added [ 1283.362012][T21331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.383514][T21331] usb 2-1: config 0 descriptor?? [ 1283.395573][T27485] team0: Port device team_slave_1 added [ 1283.437446][T27612] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6214'. [ 1283.452134][T27485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.460430][T27485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.509332][T27485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.522784][T27485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1283.529877][T27485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.556602][T27485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1283.658184][T27485] hsr_slave_0: entered promiscuous mode [ 1283.663496][T21327] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1283.672589][T27485] hsr_slave_1: entered promiscuous mode [ 1283.681117][T21327] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1283.740604][T13909] IPVS: stop unused estimator thread 0... [ 1283.815379][T21331] kye 0003:0458:5016.0041: control desc unexpectedly large [ 1283.855986][T21331] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0041/input/input107 [ 1283.974846][T21331] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0041/input/input108 [ 1284.074828][T21331] kye 0003:0458:5016.0041: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 1284.299585][T21327] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1284.323223][T21327] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1284.415985][T27626] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1284.435245][T27626] bond3 (unregistering): Released all slaves [ 1284.989978][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1284.997787][ C0] kye 0003:0458:5016.0041: usb_submit_urb(ctrl) failed: -1 [ 1285.023327][T27485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1285.049565][T27485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1285.076239][T27485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1285.113689][T27485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1285.128880][T21338] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 1285.163793][T21327] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1285.177099][T21327] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1285.200987][T21327] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1285.244074][T21327] usb 6-1: USB disconnect, device number 2 [ 1285.278491][T21338] usb 2-1: device descriptor read/64, error -32 [ 1285.499195][T27485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.518503][T21338] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 1285.539387][T27485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.554664][T23407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.561888][T23407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.642386][T23407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.649611][T23407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.738448][T21338] usb 2-1: device descriptor read/64, error -32 [ 1285.873107][T27670] netlink: 408 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1285.885668][T27485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.980737][T21338] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 1286.019562][T21338] usb 2-1: device descriptor read/8, error -32 [ 1286.037702][T27485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1286.291105][T27485] veth0_vlan: entered promiscuous mode [ 1286.329303][T27485] veth1_vlan: entered promiscuous mode [ 1286.336640][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6227'. [ 1286.388534][T21327] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1286.441430][T27696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1286.465353][T27688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1286.513266][T27689] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1286.528718][T21337] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1286.544245][T27690] bond7: entered promiscuous mode [ 1286.552083][T27690] geneve2: entered promiscuous mode [ 1286.558568][T21327] usb 1-1: Using ep0 maxpacket: 8 [ 1286.574893][T24555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.594269][T24555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.675681][T24555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.698086][T21327] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1286.709584][T21337] usb 6-1: Using ep0 maxpacket: 32 [ 1286.724256][T21327] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1286.739978][T24555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.754470][T21337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.778553][T21327] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1286.788740][T21337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.791626][T27485] veth0_macvtap: entered promiscuous mode [ 1286.821499][T21327] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1286.828720][T21337] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1286.878166][T21327] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1286.892383][T21337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.897780][T27485] veth1_macvtap: entered promiscuous mode [ 1286.923181][T27708] binder: binder_mmap: 27702 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 1286.939470][ T5276] usb 2-1: USB disconnect, device number 17 [ 1286.951630][T21337] usb 6-1: config 0 descriptor?? [ 1287.004483][T21327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.019864][T27485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1287.065469][T27485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.095743][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1287.198667][T13907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.325254][T21327] usb 1-1: GET_CAPABILITIES returned 0 [ 1287.328987][T13907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.340320][T21327] usbtmc 1-1:16.0: can't read capabilities [ 1287.426524][T13907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.450160][T21337] koneplus 0003:1E7D:2D51.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 1287.504373][T13907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.549871][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1287.838962][T27726] usb 6-1: USB disconnect, device number 3 [ 1287.933806][T13909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.964406][T13909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.120349][T13908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.128870][T13908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.547071][T27742] netlink: 408 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1288.737896][T27747] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1289.148506][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1289.258752][T21331] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1289.452285][T21331] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1289.479172][T21331] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.506321][T21331] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1289.527274][T21331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.544252][T21331] usb 6-1: config 0 descriptor?? [ 1289.573633][T27756] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1289.733702][T27726] usb 1-1: USB disconnect, device number 90 [ 1289.860437][T13771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1289.876280][T13771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1289.886882][T13771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1289.897183][T13771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1289.906015][T27773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.918816][T13771] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1290.022180][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6243'. [ 1290.062808][T21331] konepure 0003:1E7D:2DBE.0043: unknown main item tag 0x0 [ 1290.070218][T21331] konepure 0003:1E7D:2DBE.0043: unknown main item tag 0x0 [ 1290.088693][T21331] konepure 0003:1E7D:2DBE.0043: hidraw0: USB HID v80.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.5-1/input0 [ 1290.320292][ T5276] usb 6-1: USB disconnect, device number 4 [ 1290.451108][T27781] fido_id[27781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1291.160337][T27775] chnl_net:caif_netlink_parms(): no params data found [ 1291.310615][T27807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1291.337084][T27808] x_tables: duplicate underflow at hook 2 [ 1291.598596][ T5276] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1291.663574][T27775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.679926][T27775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.690039][T27775] bridge_slave_0: entered allmulticast mode [ 1291.707770][T27775] bridge_slave_0: entered promiscuous mode [ 1291.758546][ T5276] usb 6-1: Using ep0 maxpacket: 32 [ 1291.775993][ T5276] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1291.776451][T27775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.795408][T27775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.803129][T27775] bridge_slave_1: entered allmulticast mode [ 1291.815142][T27775] bridge_slave_1: entered promiscuous mode [ 1291.818879][ T5276] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=fa.e4 [ 1291.848540][ T5276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.867870][ T5276] usb 6-1: Product: syz [ 1291.884191][ T5276] usb 6-1: Manufacturer: syz [ 1291.897401][ T5276] usb 6-1: SerialNumber: syz [ 1291.926249][ T5276] usb 6-1: config 0 descriptor?? [ 1292.015362][T27775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.028623][T13771] Bluetooth: hci1: command tx timeout [ 1292.061019][T27775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.073556][T13907] veth0_to_bridge: left allmulticast mode [ 1292.082123][T13907] veth0_to_bridge: left promiscuous mode [ 1292.088038][T13907] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1292.434209][ T5276] usb 6-1: USB disconnect, device number 5 [ 1292.531339][T27822] netlink: 408 bytes leftover after parsing attributes in process `syz.5.6253'. [ 1292.639711][T13907] dvmrp0 (unregistering): left allmulticast mode [ 1293.399872][T13907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.474116][T13907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.497494][T13907] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1293.524279][T13907] bond0 (unregistering): Released all slaves [ 1293.576959][T13907] bond1 (unregistering): Released all slaves [ 1293.717626][T13907] : left promiscuous mode [ 1293.779147][T27775] team0: Port device team_slave_0 added [ 1293.830085][T27775] team0: Port device team_slave_1 added [ 1293.993063][T13907] tipc: Disabling bearer [ 1294.002711][T13907] tipc: Disabling bearer [ 1294.038699][T13907] tipc: Left network mode [ 1294.051645][T27855] netlink: 408 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1294.108505][T13771] Bluetooth: hci1: command tx timeout [ 1294.230448][T27775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.254686][T27775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.302817][T27775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.395620][T27775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.413587][T27775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.468538][T27775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.479460][T21331] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1294.651244][T21331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.680134][T21331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1294.697889][T21331] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1294.708550][T21331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.719786][T27775] hsr_slave_0: entered promiscuous mode [ 1294.726493][T27775] hsr_slave_1: entered promiscuous mode [ 1294.733475][T21331] usb 6-1: config 0 descriptor?? [ 1294.769799][T27775] debugfs: 'hsr0' already exists in 'hsr' [ 1294.785811][T27775] Cannot create hsr debugfs directory [ 1294.858645][T27879] hsr0: left allmulticast mode [ 1294.863557][T27879] hsr_slave_0: left allmulticast mode [ 1295.015474][T13907] hsr_slave_0: left promiscuous mode [ 1295.022096][T13907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.042595][T13907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.230408][T21331] cypress 0003:04B4:DE64.0044: unknown main item tag 0x0 [ 1295.246484][T21331] cypress 0003:04B4:DE64.0044: unknown main item tag 0x0 [ 1295.263242][T21331] cypress 0003:04B4:DE64.0044: unknown main item tag 0x0 [ 1295.279719][T21331] cypress 0003:04B4:DE64.0044: unknown main item tag 0x0 [ 1295.299568][T21331] cypress 0003:04B4:DE64.0044: unknown main item tag 0x0 [ 1295.346386][T21331] cypress 0003:04B4:DE64.0044: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 1296.150567][T27891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1296.188566][T13771] Bluetooth: hci1: command tx timeout [ 1296.459943][T13907] team0 (unregistering): Port device team_slave_1 removed [ 1296.571696][T13907] team0 (unregistering): Port device team_slave_0 removed [ 1297.193808][T27726] usb 6-1: USB disconnect, device number 6 [ 1297.678641][T27726] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1297.859149][T27726] usb 6-1: Using ep0 maxpacket: 32 [ 1297.865635][T27726] usb 6-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 16 [ 1297.892134][T27726] usb 6-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.958994][T27726] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1297.971572][T27726] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1297.985772][T27726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.994963][T27726] usb 6-1: Product: ఇ [ 1298.002225][T27902] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1298.014777][T27726] usb 6-1: Manufacturer: ﮸훆䴅ﯻ层穇譛娧籪ᄞ㾣斅騸ꛏ悪ﳻ˭쁍餺赅ꮼ㉺쪂ࡇ钞⬭勭咽缓㠖뉎ꃪ覀␪뤢瞄⾑漛껔頸发骞ﰆ芬 [ 1298.058598][T27726] usb 6-1: SerialNumber: 듹ꮠ颐괽㺳㍳껅ᤥ潖火趮椒᫯털ዙ癖↡ [ 1298.133778][T27900] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1298.177001][T27900] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1298.259238][T27907] netlink: 408 bytes leftover after parsing attributes in process `syz.0.6275'. [ 1298.270765][T13771] Bluetooth: hci1: command tx timeout [ 1298.548144][T27912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.671191][T27726] usb 6-1: USB disconnect, device number 7 [ 1298.868597][T21331] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1298.945017][T13907] IPVS: stop unused estimator thread 0... [ 1299.019644][T21331] usb 1-1: Using ep0 maxpacket: 16 [ 1299.050331][T21331] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 1299.124458][T21331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.198379][T21331] usb 1-1: config 0 has no interface number 0 [ 1299.219908][T21331] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 1299.231973][T21331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.263327][T21331] usb 1-1: Product: syz [ 1299.267528][T21331] usb 1-1: Manufacturer: syz [ 1299.312946][T21331] usb 1-1: SerialNumber: syz [ 1299.359762][T21331] usb 1-1: config 0 descriptor?? [ 1299.597770][T27914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.616946][T27914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.643091][T21331] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 1299.664665][T21331] usb 1-1: bad CDC descriptors [ 1299.673952][T27775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1299.683865][T21331] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 1299.696841][T21331] usb 1-1: USB disconnect, device number 91 [ 1299.708164][T27775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1299.748918][T27937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6281'. [ 1299.780407][T27775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1299.835322][T27775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1300.147075][T27775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.206069][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.212412][T27775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.218413][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.289871][T24555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.297098][T24555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.357280][T27952] fuse: Unknown parameter 'rootcontext' [ 1300.450706][T13909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.457889][T13909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.691851][T27775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.817790][T27775] veth0_vlan: entered promiscuous mode [ 1300.836887][T27775] veth1_vlan: entered promiscuous mode [ 1300.903613][T27775] veth0_macvtap: entered promiscuous mode [ 1300.927500][T27775] veth1_macvtap: entered promiscuous mode [ 1300.964404][T27775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.014821][T27775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.046441][T13907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.064668][T13907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.127650][T13907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.195049][T13907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.238712][T23405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.283897][T13910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.296875][T13910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.325225][T23405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.938583][T27983] netlink: 408 bytes leftover after parsing attributes in process `syz.5.6286'. [ 1302.007931][T27986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.043127][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1302.328732][T21327] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1302.500197][T21327] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.528518][T21327] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1302.557493][T21327] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1302.616405][T21327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.645436][T21327] usb 6-1: Product: syz [ 1302.659372][T21327] usb 6-1: Manufacturer: syz [ 1302.679001][T21327] usb 6-1: SerialNumber: syz [ 1302.742412][T21327] cdc_mbim 6-1:1.0: skipping garbage [ 1302.941736][T27990] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1303.323454][T28029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1303.386106][T28029] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1303.465356][T28032] fuse: Bad value for 'fd' [ 1303.504110][T27537] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1303.515481][T27537] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1303.524697][T27537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1303.533381][T27537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1303.541477][T27537] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1303.599952][T27990] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1303.607567][T21327] cdc_mbim 6-1:1.0: setting tx_max = 32 [ 1303.614677][T21327] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1303.628528][T21327] wwan wwan0: port wwan0mbim0 attached [ 1303.645260][T21327] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, f6:b1:59:87:35:3f [ 1303.818710][T21327] usb 6-1: USB disconnect, device number 8 [ 1303.834519][T21327] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1304.063335][T28038] netlink: zone id is out of range [ 1304.073783][T21327] wwan wwan0: port wwan0mbim0 disconnected [ 1304.379920][T21331] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1304.387642][T21326] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1304.558843][T21326] usb 2-1: Using ep0 maxpacket: 16 [ 1304.564109][T21331] usb 1-1: Using ep0 maxpacket: 16 [ 1304.587840][T21326] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.603571][T21331] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1304.612116][T21326] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1304.632953][T21331] usb 1-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1304.652066][T21326] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1304.660752][T21331] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1304.667422][T21326] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1304.688110][T21326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.688268][T23405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1304.719849][T21331] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1304.738954][T21331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.758309][T21326] usb 2-1: config 0 descriptor?? [ 1304.761434][T23405] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.768099][T21331] usb 1-1: Product: syz [ 1304.819559][T21331] usb 1-1: Manufacturer: syz [ 1304.824224][T21331] usb 1-1: SerialNumber: syz [ 1304.863695][T28036] chnl_net:caif_netlink_parms(): no params data found [ 1304.994971][T23405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.012043][T23405] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.043398][T28038] netlink: zone id is out of range [ 1305.060337][T28074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1305.104571][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6302'. [ 1305.108959][T21331] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input109 [ 1305.172931][ T5185] bcm5974 1-1:1.0: could not read from device [ 1305.208108][ T5185] bcm5974 1-1:1.0: could not read from device [ 1305.264339][T21331] usb 1-1: USB disconnect, device number 92 [ 1305.271055][ T5185] bcm5974 1-1:1.0: could not read from device [ 1305.331679][T23405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.371791][T23405] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.377286][T21326] usbhid 2-1:0.0: can't add hid device: -71 [ 1305.410479][T21326] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1305.499970][T21326] usb 2-1: USB disconnect, device number 18 [ 1305.582101][T23405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1305.618428][T23405] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.633216][T27537] Bluetooth: hci4: command tx timeout [ 1305.861042][T28036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.898576][T28036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.941347][T28036] bridge_slave_0: entered allmulticast mode [ 1305.969867][T28036] bridge_slave_0: entered promiscuous mode [ 1305.991942][T28036] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.020600][T28036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.058255][T28036] bridge_slave_1: entered allmulticast mode [ 1306.095843][T28036] bridge_slave_1: entered promiscuous mode [ 1306.353054][T28036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.375820][T28121] FAULT_INJECTION: forcing a failure. [ 1306.375820][T28121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1306.386990][T28036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.408216][T28121] CPU: 0 UID: 0 PID: 28121 Comm: syz.5.6309 Not tainted syzkaller #0 PREEMPT(full) [ 1306.408242][T28121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1306.408254][T28121] Call Trace: [ 1306.408263][T28121] [ 1306.408272][T28121] dump_stack_lvl+0x189/0x250 [ 1306.408301][T28121] ? __pfx____ratelimit+0x10/0x10 [ 1306.408328][T28121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.408348][T28121] ? __pfx__printk+0x10/0x10 [ 1306.408364][T28121] ? __might_fault+0xb0/0x130 [ 1306.408396][T28121] should_fail_ex+0x414/0x560 [ 1306.408427][T28121] _copy_from_user+0x2d/0xb0 [ 1306.408450][T28121] ___sys_sendmsg+0x158/0x2a0 [ 1306.408474][T28121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.408530][T28121] ? __fget_files+0x2a/0x420 [ 1306.408547][T28121] ? __fget_files+0x3a0/0x420 [ 1306.408576][T28121] __x64_sys_sendmsg+0x19b/0x260 [ 1306.408605][T28121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.408635][T28121] ? __pfx_ksys_write+0x10/0x10 [ 1306.408662][T28121] ? do_syscall_64+0xbe/0xfa0 [ 1306.408690][T28121] do_syscall_64+0xfa/0xfa0 [ 1306.408712][T28121] ? lockdep_hardirqs_on+0x9c/0x150 [ 1306.408736][T28121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.408753][T28121] ? clear_bhb_loop+0x60/0xb0 [ 1306.408776][T28121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.408794][T28121] RIP: 0033:0x7f1bf9d8f749 [ 1306.408811][T28121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.408828][T28121] RSP: 002b:00007f1bf7fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.408848][T28121] RAX: ffffffffffffffda RBX: 00007f1bf9fe6090 RCX: 00007f1bf9d8f749 [ 1306.408862][T28121] RDX: 0000000000000800 RSI: 0000200000000580 RDI: 0000000000000005 [ 1306.408875][T28121] RBP: 00007f1bf7fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.408887][T28121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.408898][T28121] R13: 00007f1bf9fe6128 R14: 00007f1bf9fe6090 R15: 00007f1bfa10fa28 [ 1306.408929][T28121] [ 1306.776217][T28036] team0: Port device team_slave_0 added [ 1306.793799][T28036] team0: Port device team_slave_1 added [ 1307.006102][T28036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.013441][T28036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.096603][T28036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.111563][T28036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.119050][T28036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1307.156902][T28036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.170828][T23405] bridge_slave_1: left allmulticast mode [ 1307.221624][T23405] bridge_slave_1: left promiscuous mode [ 1307.315099][T23405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.348499][T21337] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1307.364569][T23405] bridge_slave_0: left allmulticast mode [ 1307.396736][T23405] bridge_slave_0: left promiscuous mode [ 1307.436659][T23405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.517404][T21337] usb 2-1: Using ep0 maxpacket: 8 [ 1307.528764][T21337] usb 2-1: config 0 has no interfaces? [ 1307.536377][T21337] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1307.548384][T21337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.579775][T21337] usb 2-1: Product: syz [ 1307.593614][T21337] usb 2-1: Manufacturer: syz [ 1307.598254][T21337] usb 2-1: SerialNumber: syz [ 1307.633240][T21337] usb 2-1: config 0 descriptor?? [ 1307.717601][T27537] Bluetooth: hci4: command tx timeout [ 1307.910672][T28133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.933467][T28133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.318274][T28151] loop8: detected capacity change from 0 to 8 [ 1308.366649][T28151] Dev loop8: unable to read RDB block 8 [ 1308.372997][T28151] loop8: unable to read partition table [ 1308.408753][T28151] loop8: partition table beyond EOD, truncated [ 1308.427346][T28151] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1308.590601][T23405] bond7 (unregistering): (slave geneve2): Releasing backup interface [ 1308.601590][T23405] geneve2 (unregistering): left promiscuous mode [ 1309.010460][T23405] bond6 (unregistering): (slave bridge3): Releasing active interface [ 1309.021996][T23405] bond6 (unregistering): (slave bridge3): the permanent HWaddr of slave - aa:e5:c9:18:a3:5c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1309.048470][T27726] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1309.114230][T23405] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1309.230370][T27726] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1309.240899][T27726] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1309.258444][T27726] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1309.260561][T21337] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1309.270927][T27726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1309.287638][T27726] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1309.302882][T27726] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1309.322107][T27726] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1309.336078][T27726] usb 6-1: Product: syz [ 1309.343695][T27726] usb 6-1: Manufacturer: syz [ 1309.372640][T27726] cdc_wdm 6-1:1.0: skipping garbage [ 1309.381963][T27726] cdc_wdm 6-1:1.0: skipping garbage [ 1309.404529][T27726] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1309.431108][T27726] cdc_wdm 6-1:1.0: Unknown control protocol [ 1309.478969][T23405] bond0 (unregistering): left promiscuous mode [ 1309.485174][T23405] bond_slave_0: left promiscuous mode [ 1309.494213][T23405] bond_slave_1: left promiscuous mode [ 1309.504538][T23405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.515842][T23405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.534025][T23405] bond0 (unregistering): Released all slaves [ 1309.774942][T23405] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1309.790730][T23405] bond1 (unregistering): Released all slaves [ 1309.798880][T27537] Bluetooth: hci4: command tx timeout [ 1309.821938][T23405] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1309.839253][T23405] bond2 (unregistering): Released all slaves [ 1310.116974][T23405] bond3 (unregistering): Released all slaves [ 1310.143193][T23405] bond4 (unregistering): Released all slaves [ 1310.373633][T23405] bond5 (unregistering): Released all slaves [ 1310.391091][T23405] bond6 (unregistering): Released all slaves [ 1310.733253][T23405] bond7 (unregistering): Released all slaves [ 1310.809675][T28133] batadv0: entered promiscuous mode [ 1310.819407][T28133] vlan2: entered promiscuous mode [ 1310.931074][T23405] tipc: Left network mode [ 1310.936636][T28163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6319'. [ 1311.078842][T21326] usb 2-1: USB disconnect, device number 19 [ 1311.171071][T21331] usb 6-1: USB disconnect, device number 9 [ 1311.354012][T28036] hsr_slave_0: entered promiscuous mode [ 1311.373532][T28036] hsr_slave_1: entered promiscuous mode [ 1311.399474][T28036] debugfs: 'hsr0' already exists in 'hsr' [ 1311.424748][T28036] Cannot create hsr debugfs directory [ 1311.920208][T13771] Bluetooth: hci4: command tx timeout [ 1311.952291][T28186] loop8: detected capacity change from 0 to 8 [ 1311.960561][ T6106] Dev loop8: unable to read RDB block 8 [ 1311.969679][ T6106] loop8: unable to read partition table [ 1312.149430][ T6106] loop8: partition table beyond EOD, truncated [ 1312.200514][T28186] Dev loop8: unable to read RDB block 8 [ 1312.206108][T28186] loop8: unable to read partition table [ 1312.230598][T28186] loop8: partition table beyond EOD, truncated [ 1312.236998][T28186] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1312.588530][T21337] usb 1-1: device descriptor read/64, error -71 [ 1312.688837][ T5276] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1312.748551][T12891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1312.839423][T21337] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1312.871197][ T5276] usb 6-1: Using ep0 maxpacket: 16 [ 1312.895900][ T5276] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1312.904579][ T5276] usb 6-1: config 8 has no interface number 0 [ 1312.929892][T12891] usb 2-1: Using ep0 maxpacket: 8 [ 1312.935059][T23405] batadv0: left promiscuous mode [ 1312.938516][ T5276] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1312.959199][T12891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1312.978571][ T5276] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1312.978601][ T5276] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1312.978626][ T5276] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1312.979150][T12891] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1312.979177][T12891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.981099][ T5276] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1312.981126][ T5276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.981146][ T5276] usb 6-1: Product: syz [ 1312.981160][ T5276] usb 6-1: Manufacturer: syz [ 1312.981175][ T5276] usb 6-1: SerialNumber: syz [ 1312.982210][T23405] hsr_slave_0: left promiscuous mode [ 1312.983237][T23405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1312.984817][T23405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.018561][T21337] usb 1-1: Using ep0 maxpacket: 8 [ 1313.020358][T21337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.020408][T21337] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1313.020431][T21337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.044522][T23405] pim6reg (unregistering): left allmulticast mode [ 1313.045192][T12891] usb 2-1: config 0 descriptor?? [ 1313.092184][T21337] usb 1-1: config 0 descriptor?? [ 1313.205617][T23405] team0 (unregistering): Port device batadv1 removed [ 1313.271560][T12891] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1313.306041][T21337] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 1313.667144][ T5276] ipheth 6-1:8.39: ipheth_enable_ncm: usb_control_msg: -71 [ 1313.680818][T21331] usb 2-1: USB disconnect, device number 20 [ 1313.796801][T23405] team0 (unregistering): Port device team_slave_1 removed [ 1313.842575][T23405] team0 (unregistering): Port device team_slave_0 removed [ 1314.557671][ T5276] ipheth 6-1:8.39: Apple iPhone USB Ethernet device attached [ 1314.583026][ T5276] usb 6-1: USB disconnect, device number 10 [ 1314.723841][ T5276] ipheth 6-1:8.39: Apple iPhone USB Ethernet now disconnected [ 1314.845544][T28233] loop8: detected capacity change from 0 to 8 [ 1314.894654][T28233] Dev loop8: unable to read RDB block 8 [ 1314.936417][T28233] loop8: unable to read partition table [ 1314.954061][T28233] loop8: partition table beyond EOD, truncated [ 1314.960451][T28233] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1314.984778][T28238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.154161][T23405] IPVS: stop unused estimator thread 0... [ 1315.311330][T28243] loop9: detected capacity change from 0 to 7 [ 1315.328793][T28243] Dev loop9: unable to read RDB block 7 [ 1315.337631][T21331] usb 1-1: USB disconnect, device number 94 [ 1315.344953][T28243] loop9: AHDI p4 [ 1315.372309][T28243] loop9: partition table partially beyond EOD, truncated [ 1315.594453][T28036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1315.625677][T28036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1315.659780][T28036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1315.683548][T28036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1315.966967][T28267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.076228][T28272] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.6343'. [ 1316.086446][T28267] vlan2: entered promiscuous mode [ 1316.092381][T28267] vlan2: entered allmulticast mode [ 1316.103354][T28267] hsr_slave_1: entered allmulticast mode [ 1316.136997][T28267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6342'. [ 1316.207518][T21326] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1316.295685][T28276] netlink: 'syz.1.6344': attribute type 1 has an invalid length. [ 1316.381947][T21326] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1316.413309][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1316.424906][T21326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1316.450956][T21326] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1316.467850][T21326] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1316.474522][T28280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6344'. [ 1316.483614][T21326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.503159][T21326] usb 6-1: config 0 descriptor?? [ 1316.597000][T28278] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1316.607546][T28278] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1316.628990][T28278] bond1: (slave vcan1): making interface the new active one [ 1316.638730][T28278] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1316.647278][T28279] bond1: entered allmulticast mode [ 1316.657993][T28279] vcan1: entered allmulticast mode [ 1316.876752][T28036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.912757][T28036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.939398][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.946576][T23405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.965662][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.972873][T13910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.073063][T21326] usbhid 6-1:0.0: can't add hid device: -71 [ 1317.081365][T21326] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1317.158996][T28290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1317.178505][T21331] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1317.205861][T21326] usb 6-1: USB disconnect, device number 11 [ 1317.249955][T28036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.349690][T21331] usb 2-1: Using ep0 maxpacket: 16 [ 1317.353232][T28036] veth0_vlan: entered promiscuous mode [ 1317.356723][T21331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.374692][T21331] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1317.389981][T21331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1317.396922][T21331] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1317.409755][T21331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.409985][T28036] veth1_vlan: entered promiscuous mode [ 1317.421121][T21331] usb 2-1: config 0 descriptor?? [ 1317.908923][T28299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1317.917288][T28299] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1317.924366][T28299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1317.938769][T28299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1317.945274][T28299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1317.982765][T28299] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1318.031175][T28299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1318.037766][T28299] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1318.069721][T28299] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1318.110454][T28036] veth0_macvtap: entered promiscuous mode [ 1318.120523][T28036] veth1_macvtap: entered promiscuous mode [ 1318.137585][T28036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.151139][T28036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.244342][T24555] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.288193][T24555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.330425][T24555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.476673][T24555] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.591997][T28308] program syz.5.6348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1318.781755][T28313] loop9: detected capacity change from 0 to 7 [ 1318.943585][T28313] Dev loop9: unable to read RDB block 7 [ 1318.950058][T28313] loop9: AHDI p4 [ 1318.968070][T28313] loop9: partition table partially beyond EOD, truncated [ 1319.317234][T13905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.385038][T23407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.418107][T13905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.423095][T23407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.598495][T21326] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1319.768840][T21326] usb 6-1: Using ep0 maxpacket: 32 [ 1319.776654][T21326] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1319.798207][T21326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.866562][T21326] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1319.962771][T21331] usb 2-1: string descriptor 0 read error: -71 [ 1320.000579][T21331] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1320.028744][T27537] Bluetooth: hci1: command 0x0c1a tx timeout [ 1320.037719][T27537] Bluetooth: hci0: command 0x041b tx timeout [ 1320.044024][T27537] Bluetooth: hci5: command 0x0c1a tx timeout [ 1320.052527][T27537] Bluetooth: hci3: command 0x0406 tx timeout [ 1320.073413][T28315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.099404][T21331] usb 2-1: USB disconnect, device number 21 [ 1320.108604][T13771] Bluetooth: hci4: command 0x0c1a tx timeout [ 1320.111607][T28315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.162906][T28328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1320.561597][T21326] gspca_nw80x: reg_r err -71 [ 1320.566243][T21326] nw80x 6-1:3.0: probe with driver nw80x failed with error -71 [ 1320.575441][T21326] usb 6-1: USB disconnect, device number 12 [ 1320.581892][T28339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6354'. [ 1320.594968][T28339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6354'. [ 1320.650049][T12891] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1320.686492][T28340] vxcan1: entered promiscuous mode [ 1320.811586][T12891] usb 2-1: Using ep0 maxpacket: 8 [ 1320.823476][T12891] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1320.843018][T12891] usb 2-1: config 179 has no interface number 0 [ 1320.856928][T12891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1320.880359][T12891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1320.911300][T12891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1320.934214][T12891] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1320.948534][T12891] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1321.006868][T12891] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1321.068009][T12891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.107609][T28335] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1321.270530][T28364] sctp: [Deprecated]: syz.5.6358 (pid 28364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1321.270530][T28364] Use struct sctp_sack_info instead [ 1321.428544][T12891] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input110 [ 1321.741571][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1321.741575][T21326] usb 2-1: USB disconnect, device number 22 [ 1321.741707][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1322.108704][T13771] Bluetooth: hci1: command 0x0c1a tx timeout [ 1322.199583][T13771] Bluetooth: hci4: command 0x0c1a tx timeout [ 1322.351470][T28375] loop8: detected capacity change from 0 to 8 [ 1322.397639][ T6106] Dev loop8: unable to read RDB block 8 [ 1322.438520][ T6106] loop8: unable to read partition table [ 1322.463738][ T6106] loop8: partition table beyond EOD, truncated [ 1322.512323][T28375] Dev loop8: unable to read RDB block 8 [ 1322.517954][T28375] loop8: unable to read partition table [ 1322.538941][T28375] loop8: partition table beyond EOD, truncated [ 1322.565541][T28375] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1322.711837][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1322.849671][T28398] veth0_to_hsr: entered promiscuous mode [ 1322.856078][T28398] veth0_to_hsr: entered allmulticast mode [ 1322.891039][T28398] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 1323.803701][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6373'. [ 1323.920310][T28048] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1323.999907][T28438] loop8: detected capacity change from 0 to 8 [ 1324.017343][T28438] Dev loop8: unable to read RDB block 8 [ 1324.024862][T28438] loop8: unable to read partition table [ 1324.040998][T28438] loop8: partition table beyond EOD, truncated [ 1324.051643][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1324.051659][ T30] audit: type=1326 audit(1764249085.251:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28442 comm="syz.5.6377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x0 [ 1324.082360][T28438] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1324.108544][T28048] usb 1-1: Using ep0 maxpacket: 16 [ 1324.114626][T28048] usb 1-1: no configurations [ 1324.123984][T28048] usb 1-1: can't read configurations, error -22 [ 1324.194622][T13771] Bluetooth: hci1: command 0x0c1a tx timeout [ 1324.268468][T13771] Bluetooth: hci4: command 0x0c1a tx timeout [ 1324.288510][T28048] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1324.398703][T21326] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1324.468514][T28048] usb 1-1: Using ep0 maxpacket: 16 [ 1324.476645][T28048] usb 1-1: no configurations [ 1324.482640][T28048] usb 1-1: can't read configurations, error -22 [ 1324.499045][T28048] usb usb1-port1: attempt power cycle [ 1324.870328][T28048] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1324.930511][T28048] usb 1-1: Using ep0 maxpacket: 16 [ 1324.938135][T28048] usb 1-1: no configurations [ 1324.945495][T28048] usb 1-1: can't read configurations, error -22 [ 1325.091411][T28048] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1325.129263][T28048] usb 1-1: Using ep0 maxpacket: 16 [ 1325.135392][T28048] usb 1-1: no configurations [ 1325.140110][T28048] usb 1-1: can't read configurations, error -22 [ 1325.168060][T28048] usb usb1-port1: unable to enumerate USB device [ 1325.794806][ T5892] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1325.828693][ T5892] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1325.930501][ T5892] usb 3-1: USB disconnect, device number 60 [ 1326.238543][ T5892] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1326.412011][ T5892] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1326.428615][ T5892] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 1326.448842][ T5892] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1326.465035][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1326.474611][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1326.508608][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.516697][ T5892] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 1326.568431][ T5892] usb 3-1: SerialNumber: syz [ 1326.806690][ T5892] cdc_ether 3-1:1.0: skipping garbage [ 1326.815306][T28486] FAULT_INJECTION: forcing a failure. [ 1326.815306][T28486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.829562][ T5892] cdc_ether 3-1:1.0: skipping garbage [ 1326.835585][T28486] CPU: 1 UID: 0 PID: 28486 Comm: syz.0.6382 Not tainted syzkaller #0 PREEMPT(full) [ 1326.835610][T28486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1326.835621][T28486] Call Trace: [ 1326.835630][T28486] [ 1326.835639][T28486] dump_stack_lvl+0x189/0x250 [ 1326.835669][T28486] ? __pfx____ratelimit+0x10/0x10 [ 1326.835694][T28486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1326.835717][T28486] ? __pfx__printk+0x10/0x10 [ 1326.835747][T28486] should_fail_ex+0x414/0x560 [ 1326.835779][T28486] _copy_to_user+0x31/0xb0 [ 1326.835803][T28486] simple_read_from_buffer+0xe1/0x170 [ 1326.835834][T28486] proc_fail_nth_read+0x1b3/0x220 [ 1326.835865][T28486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.835890][T28486] ? rw_verify_area+0x2a6/0x4d0 [ 1326.835913][T28486] ? __lock_acquire+0xab9/0xd20 [ 1326.835930][T28486] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1326.835954][T28486] vfs_read+0x200/0xa30 [ 1326.835976][T28486] ? fdget_pos+0x247/0x320 [ 1326.835998][T28486] ? __pfx___mutex_lock+0x10/0x10 [ 1326.836024][T28486] ? __pfx_vfs_read+0x10/0x10 [ 1326.836049][T28486] ? __fget_files+0x2a/0x420 [ 1326.836071][T28486] ? __fget_files+0x3a0/0x420 [ 1326.836086][T28486] ? __fget_files+0x2a/0x420 [ 1326.836113][T28486] ksys_read+0x145/0x250 [ 1326.836139][T28486] ? __pfx_ksys_read+0x10/0x10 [ 1326.836165][T28486] ? do_syscall_64+0xbe/0xfa0 [ 1326.836194][T28486] do_syscall_64+0xfa/0xfa0 [ 1326.836216][T28486] ? lockdep_hardirqs_on+0x9c/0x150 [ 1326.836239][T28486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.836257][T28486] ? clear_bhb_loop+0x60/0xb0 [ 1326.836278][T28486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.836296][T28486] RIP: 0033:0x7fbf3478e15c [ 1326.836314][T28486] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1326.836330][T28486] RSP: 002b:00007fbf355ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1326.836351][T28486] RAX: ffffffffffffffda RBX: 00007fbf349e5fa0 RCX: 00007fbf3478e15c [ 1326.836364][T28486] RDX: 000000000000000f RSI: 00007fbf355ee0a0 RDI: 0000000000000007 [ 1326.836376][T28486] RBP: 00007fbf355ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.836388][T28486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.836399][T28486] R13: 00007fbf349e6038 R14: 00007fbf349e5fa0 R15: 00007fbf34b0fa28 [ 1326.836430][T28486] [ 1326.848461][ T5892] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1327.116592][ T5892] usb 3-1: USB disconnect, device number 61 [ 1327.383727][T28498] fuse: Bad value for 'fd' [ 1327.402213][T28498] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1327.492064][T28498] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1327.607215][T28509] loop8: detected capacity change from 0 to 8 [ 1327.627326][ T6106] Dev loop8: unable to read RDB block 8 [ 1327.668638][ T6106] loop8: unable to read partition table [ 1327.677395][T28512] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1327.687259][ T6106] loop8: partition table beyond EOD, truncated [ 1327.698482][T28509] Dev loop8: unable to read RDB block 8 [ 1327.712229][T28509] loop8: unable to read partition table [ 1327.766966][T28509] loop8: partition table beyond EOD, truncated [ 1327.775128][T28509] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1328.049059][T28519] loop9: detected capacity change from 0 to 7 [ 1328.062899][T28519] Dev loop9: unable to read RDB block 7 [ 1328.080534][T28519] loop9: AHDI p4 [ 1328.088461][T28519] loop9: partition table partially beyond EOD, truncated [ 1328.152929][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 1329.646694][T28543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1329.668996][T21326] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1329.818508][T21326] usb 1-1: Using ep0 maxpacket: 16 [ 1329.825386][T21326] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1329.834417][T21326] usb 1-1: config 1 has no interface number 1 [ 1329.840565][T21326] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1329.855695][T21326] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1329.865711][T21326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.873802][T21326] usb 1-1: Product: syz [ 1329.877962][T21326] usb 1-1: Manufacturer: syz [ 1329.882754][T21326] usb 1-1: SerialNumber: syz [ 1329.938478][T12891] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1329.968441][ T5276] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1330.088655][T12891] usb 2-1: Using ep0 maxpacket: 16 [ 1330.102124][T12891] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1330.107586][T21326] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1330.116959][T12891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.125654][ T5276] usb 6-1: Using ep0 maxpacket: 16 [ 1330.135645][T12891] usb 2-1: Product: syz [ 1330.136489][T21326] usb 1-1: USB disconnect, device number 99 [ 1330.142942][T12891] usb 2-1: Manufacturer: syz [ 1330.161670][ T5276] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1330.174433][T12891] usb 2-1: SerialNumber: syz [ 1330.179467][ T5276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.187990][ T5276] usb 6-1: Product: syz [ 1330.192934][ T5276] usb 6-1: Manufacturer: syz [ 1330.196447][ T6106] udevd[6106]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1330.197599][ T5276] usb 6-1: SerialNumber: syz [ 1330.225830][T12891] usb 2-1: config 0 descriptor?? [ 1330.242915][ T5276] usb 6-1: config 0 descriptor?? [ 1330.252458][ T5276] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1330.447608][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6400'. [ 1330.467604][T21326] usb 6-1: USB disconnect, device number 14 [ 1330.678598][T12891] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1330.712324][T12891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1330.731212][T12891] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1330.742624][T12891] usb 2-1: media controller created [ 1330.743843][T28556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.768121][T12891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1330.923220][T28556] binder: 28555:28556 ioctl c018620c 2000000002c0 returned -22 [ 1330.939615][T12891] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1330.951469][T12891] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1331.133649][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6403'. [ 1331.188755][T28561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6403'. [ 1331.368445][ T5892] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1331.412452][T28559] loop5: detected capacity change from 0 to 7 [ 1331.420029][T28559] Dev loop5: unable to read RDB block 7 [ 1331.425627][T28559] loop5: unable to read partition table [ 1331.431784][T28559] loop5: partition table beyond EOD, truncated [ 1331.437979][T28559] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1331.508469][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1331.528981][T21326] usb 2-1: USB disconnect, device number 23 [ 1331.600866][T21326] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1331.616315][T28568] loop9: detected capacity change from 0 to 7 [ 1331.628964][ T6106] Dev loop9: unable to read RDB block 7 [ 1331.634704][ T6106] loop9: AHDI p4 [ 1331.639397][ T6106] loop9: partition table partially beyond EOD, truncated [ 1331.652221][T28568] Dev loop9: unable to read RDB block 7 [ 1331.659760][T28568] loop9: AHDI p4 [ 1331.663448][T28568] loop9: partition table partially beyond EOD, truncated [ 1331.768463][ T5892] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1331.816772][ T30] audit: type=1326 audit(1764249093.001:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.846726][ T30] audit: type=1326 audit(1764249093.011:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.870687][ T30] audit: type=1326 audit(1764249093.011:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.893894][ T30] audit: type=1326 audit(1764249093.011:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.923260][ T30] audit: type=1326 audit(1764249093.011:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.946045][ T5892] usb 1-1: device descriptor read/64, error -71 [ 1331.953809][ T30] audit: type=1326 audit(1764249093.011:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1331.976735][ T30] audit: type=1326 audit(1764249093.011:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1332.005380][ T30] audit: type=1326 audit(1764249093.011:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1332.035906][ T30] audit: type=1326 audit(1764249093.011:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1332.059833][ T5892] usb usb1-port1: attempt power cycle [ 1332.085556][ T30] audit: type=1326 audit(1764249093.011:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28569 comm="syz.5.6406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1bf9d8f749 code=0x7ffc0000 [ 1332.418452][ T5892] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1332.459946][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1332.706928][T28580] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6411'. [ 1332.719675][ T5892] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1332.770436][ T5892] usb 1-1: device descriptor read/8, error -71 [ 1332.878785][ T5892] usb usb1-port1: unable to enumerate USB device [ 1332.962823][T28592] loop9: detected capacity change from 0 to 7 [ 1332.969934][T28592] Dev loop9: unable to read RDB block 7 [ 1332.975691][T28592] loop9: AHDI p4 [ 1332.979948][T28592] loop9: partition table partially beyond EOD, truncated [ 1333.058290][T28594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 1333.070043][T28594] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1333.429303][T12891] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1333.445611][T28607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6422'. [ 1333.455444][T28607] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6422'. [ 1333.510226][T21337] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1333.599214][T12891] usb 3-1: Using ep0 maxpacket: 32 [ 1333.615404][T12891] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1333.624679][T12891] usb 3-1: config 0 has no interface number 0 [ 1333.643128][T12891] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1333.662745][T12891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.672131][T12891] usb 3-1: Product: syz [ 1333.676421][T12891] usb 3-1: Manufacturer: syz [ 1333.681454][T21337] usb 2-1: Using ep0 maxpacket: 8 [ 1333.686614][T12891] usb 3-1: SerialNumber: syz [ 1333.695525][T21337] usb 2-1: config 0 has no interfaces? [ 1333.706841][T21337] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1333.717687][T12891] usb 3-1: config 0 descriptor?? [ 1333.722790][T21337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.731359][T21337] usb 2-1: Product: syz [ 1333.735583][T21337] usb 2-1: Manufacturer: syz [ 1333.741628][T12891] smsc95xx v2.0.0 [ 1333.745368][T21337] usb 2-1: SerialNumber: syz [ 1333.752490][T21337] usb 2-1: config 0 descriptor?? [ 1333.938448][ T5892] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1333.969772][T28605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.978933][T28605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.993577][T28605] vlan2: entered promiscuous mode [ 1334.047320][T21326] usb 2-1: USB disconnect, device number 24 [ 1334.090704][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 1334.099738][ T5892] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1334.110209][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.118231][ T5892] usb 6-1: Product: syz [ 1334.122520][ T5892] usb 6-1: Manufacturer: syz [ 1334.127118][ T5892] usb 6-1: SerialNumber: syz [ 1334.134758][ T5892] usb 6-1: config 0 descriptor?? [ 1334.303067][T28622] loop9: detected capacity change from 0 to 7 [ 1334.311449][T28622] Dev loop9: unable to read RDB block 7 [ 1334.317170][T28622] loop9: AHDI p4 [ 1334.321056][T28622] loop9: partition table partially beyond EOD, truncated [ 1334.347764][ T5892] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 1334.368470][ T5892] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1334.388692][ T5892] usb 6-1: USB disconnect, device number 15 [ 1334.615410][T12891] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1334.828617][ T5892] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1334.848433][T28048] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1334.990217][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.001392][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.011648][T28048] usb 2-1: Using ep0 maxpacket: 32 [ 1335.016860][ T5892] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1335.026092][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.037815][T28048] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.049253][ T5892] usb 1-1: config 0 descriptor?? [ 1335.054946][T28048] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1335.066783][T28048] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.082475][T28048] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1335.099326][T28048] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1335.108489][T28048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.116508][T28048] usb 2-1: Product: syz [ 1335.120888][T28048] usb 2-1: Manufacturer: syz [ 1335.125518][T28048] usb 2-1: SerialNumber: syz [ 1335.142436][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1335.152331][T28048] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input111 [ 1335.358522][T28048] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1335.366886][T28048] (id 0x00) [ 1335.539621][T28048] rc_core: IR keymap rc-imon-pad not found [ 1335.547040][T28048] Registered IR keymap rc-empty [ 1335.552657][T28048] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1335.563198][T28048] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1335.589704][T28048] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1335.603729][T28048] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input112 [ 1335.620974][T28048] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:25> initialized [ 1335.692637][ T5892] usbhid 1-1:0.0: can't add hid device: -32 [ 1335.711366][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1335.780401][T28633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6432'. [ 1336.158460][ T5276] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1336.266114][T12891] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1336.278817][T12891] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1336.291372][T12891] usb 3-1: USB disconnect, device number 62 [ 1336.317744][ T5276] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1336.329670][ T5276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.345291][ T5276] usb 6-1: Product: syz [ 1336.350714][ T5276] usb 6-1: Manufacturer: syz [ 1336.355414][ T5276] usb 6-1: SerialNumber: syz [ 1336.369752][ T5276] usb 6-1: config 0 descriptor?? [ 1336.584678][ T5276] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1336.718486][T12891] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1336.878447][T12891] usb 3-1: Using ep0 maxpacket: 32 [ 1336.885930][T12891] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.896953][T12891] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.909049][T12891] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1336.918235][T12891] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1336.926697][T12891] usb 3-1: Product: syz [ 1336.931978][T12891] usb 3-1: Manufacturer: syz [ 1336.944967][T12891] hub 3-1:4.0: USB hub found [ 1337.149279][T12891] hub 3-1:4.0: 7 ports detected [ 1337.155103][T12891] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1337.357856][T12891] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1337.366390][T12891] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1337.386499][T21338] usb 2-1: USB disconnect, device number 25 [ 1337.405235][T12891] usb 3-1: USB disconnect, device number 63 [ 1337.508052][T28663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6441'. [ 1337.592503][T12891] usb 1-1: USB disconnect, device number 104 [ 1337.658214][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6442'. [ 1338.637197][ T5276] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1338.665888][ T5276] usb 6-1: USB disconnect, device number 16 [ 1339.003329][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1339.028028][T13910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.037245][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6451'. [ 1339.038999][T13910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.058183][T13910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.069190][T13910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1339.108513][ T5892] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1339.288812][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.317085][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.346830][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1339.368392][ T5892] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.395141][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.406373][ T5892] usb 1-1: config 0 descriptor?? [ 1340.634632][ T5892] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1341.098148][T28720] loop9: detected capacity change from 0 to 7 [ 1341.114807][ T6106] Dev loop9: unable to read RDB block 7 [ 1341.122158][ T6106] loop9: AHDI p4 [ 1341.126023][ T6106] loop9: partition table partially beyond EOD, truncated [ 1341.159254][T28720] Dev loop9: unable to read RDB block 7 [ 1341.164855][T28720] loop9: AHDI p4 [ 1341.176381][T28720] loop9: partition table partially beyond EOD, truncated [ 1341.234415][T28725] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1341.278575][T28725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1341.658633][ T5892] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1341.821474][ T5892] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1341.832770][ T5892] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1341.897735][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1341.911968][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.924082][T28733] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1341.932851][T28733] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1341.944560][ T5892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.149313][ T5892] usb 2-1: USB disconnect, device number 26 [ 1342.408669][T28733] [ 1342.411037][T28733] ====================================================== [ 1342.418057][T28733] WARNING: possible circular locking dependency detected [ 1342.425104][T28733] syzkaller #0 Not tainted [ 1342.429518][T28733] ------------------------------------------------------ [ 1342.436530][T28733] syz.1.6463/28733 is trying to acquire lock: [ 1342.442584][T28733] ffff88801c6a8220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1342.452848][T28733] [ 1342.452848][T28733] but task is already holding lock: [ 1342.460206][T28733] ffff8880244fd8f8 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1342.469970][T28733] [ 1342.469970][T28733] which lock already depends on the new lock. [ 1342.469970][T28733] [ 1342.480363][T28733] [ 1342.480363][T28733] the existing dependency chain (in reverse order) is: [ 1342.489364][T28733] [ 1342.489364][T28733] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 1342.497977][T28733] lock_acquire+0x120/0x360 [ 1342.502993][T28733] blk_alloc_queue+0x538/0x620 [ 1342.508271][T28733] __blk_mq_alloc_disk+0x15c/0x340 [ 1342.513890][T28733] loop_add+0x411/0xad0 [ 1342.518556][T28733] loop_init+0xd9/0x170 [ 1342.523219][T28733] do_one_initcall+0x236/0x820 [ 1342.528498][T28733] do_initcall_level+0x104/0x190 [ 1342.533946][T28733] do_initcalls+0x59/0xa0 [ 1342.538794][T28733] kernel_init_freeable+0x334/0x4b0 [ 1342.544506][T28733] kernel_init+0x1d/0x1d0 [ 1342.549345][T28733] ret_from_fork+0x4bc/0x870 [ 1342.554446][T28733] ret_from_fork_asm+0x1a/0x30 [ 1342.559715][T28733] [ 1342.559715][T28733] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1342.566914][T28733] lock_acquire+0x120/0x360 [ 1342.571928][T28733] fs_reclaim_acquire+0x72/0x100 [ 1342.577375][T28733] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1342.583297][T28733] __kernfs_iattrs+0xd9/0x320 [ 1342.588485][T28733] kernfs_iop_setattr+0xea/0x3f0 [ 1342.593930][T28733] notify_change+0xc1a/0xf40 [ 1342.599030][T28733] do_truncate+0x1a4/0x220 [ 1342.603954][T28733] path_openat+0x306c/0x3830 [ 1342.609052][T28733] do_filp_open+0x1fa/0x410 [ 1342.614064][T28733] do_sys_openat2+0x121/0x1c0 [ 1342.619255][T28733] __x64_sys_openat+0x138/0x170 [ 1342.624613][T28733] do_syscall_64+0xfa/0xfa0 [ 1342.629629][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.636036][T28733] [ 1342.636036][T28733] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1342.644884][T28733] validate_chain+0xb9b/0x2140 [ 1342.650160][T28733] __lock_acquire+0xab9/0xd20 [ 1342.655343][T28733] lock_acquire+0x120/0x360 [ 1342.660353][T28733] down_read+0x46/0x2e0 [ 1342.665012][T28733] kernfs_iop_getattr+0x9e/0x450 [ 1342.670468][T28733] vfs_getattr_nosec+0x2e1/0x430 [ 1342.675917][T28733] loop_assign_backing_file+0x222/0x400 [ 1342.681980][T28733] lo_ioctl+0x167f/0x1c50 [ 1342.686832][T28733] blkdev_ioctl+0x5af/0x6d0 [ 1342.691844][T28733] __se_sys_ioctl+0xfc/0x170 [ 1342.696952][T28733] do_syscall_64+0xfa/0xfa0 [ 1342.701973][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.708374][T28733] [ 1342.708374][T28733] other info that might help us debug this: [ 1342.708374][T28733] [ 1342.718589][T28733] Chain exists of: [ 1342.718589][T28733] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 1342.718589][T28733] [ 1342.733011][T28733] Possible unsafe locking scenario: [ 1342.733011][T28733] [ 1342.740444][T28733] CPU0 CPU1 [ 1342.745795][T28733] ---- ---- [ 1342.751139][T28733] lock(&q->q_usage_counter(io)#26); [ 1342.756504][T28733] lock(fs_reclaim); [ 1342.762989][T28733] lock(&q->q_usage_counter(io)#26); [ 1342.770875][T28733] rlock(&root->kernfs_iattr_rwsem); [ 1342.776236][T28733] [ 1342.776236][T28733] *** DEADLOCK *** [ 1342.776236][T28733] [ 1342.784360][T28733] 3 locks held by syz.1.6463/28733: [ 1342.789538][T28733] #0: ffff888143705440 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 1342.798587][T28733] #1: ffff8880244fd8f8 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1342.808760][T28733] #2: ffff8880244fd930 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1342.819193][T28733] [ 1342.819193][T28733] stack backtrace: [ 1342.825068][T28733] CPU: 1 UID: 0 PID: 28733 Comm: syz.1.6463 Not tainted syzkaller #0 PREEMPT(full) [ 1342.825085][T28733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1342.825095][T28733] Call Trace: [ 1342.825104][T28733] [ 1342.825112][T28733] dump_stack_lvl+0x189/0x250 [ 1342.825136][T28733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.825154][T28733] ? __pfx__printk+0x10/0x10 [ 1342.825172][T28733] print_circular_bug+0x2ee/0x310 [ 1342.825192][T28733] check_noncircular+0x134/0x160 [ 1342.825212][T28733] validate_chain+0xb9b/0x2140 [ 1342.825230][T28733] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1342.825255][T28733] __lock_acquire+0xab9/0xd20 [ 1342.825271][T28733] ? kernfs_iop_getattr+0x9e/0x450 [ 1342.825288][T28733] lock_acquire+0x120/0x360 [ 1342.825302][T28733] ? kernfs_iop_getattr+0x9e/0x450 [ 1342.825323][T28733] down_read+0x46/0x2e0 [ 1342.825337][T28733] ? kernfs_iop_getattr+0x9e/0x450 [ 1342.825355][T28733] kernfs_iop_getattr+0x9e/0x450 [ 1342.825374][T28733] vfs_getattr_nosec+0x2e1/0x430 [ 1342.825393][T28733] loop_assign_backing_file+0x222/0x400 [ 1342.825416][T28733] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1342.825436][T28733] ? schedule+0x91/0x360 [ 1342.825459][T28733] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1342.825485][T28733] lo_ioctl+0x167f/0x1c50 [ 1342.825507][T28733] ? __pfx_lo_ioctl+0x10/0x10 [ 1342.825526][T28733] ? ima_match_policy+0x10b/0x2150 [ 1342.825543][T28733] ? look_up_lock_class+0x74/0x170 [ 1342.825564][T28733] ? register_lock_class+0x51/0x320 [ 1342.825579][T28733] ? __lock_acquire+0xab9/0xd20 [ 1342.825596][T28733] ? process_measurement+0x3d8/0x1a40 [ 1342.825615][T28733] ? __lock_acquire+0xab9/0xd20 [ 1342.825630][T28733] ? __lock_acquire+0xab9/0xd20 [ 1342.825648][T28733] ? __lock_acquire+0xab9/0xd20 [ 1342.825665][T28733] ? __lock_acquire+0xab9/0xd20 [ 1342.825685][T28733] ? is_bpf_text_address+0x26/0x2b0 [ 1342.825703][T28733] ? is_bpf_text_address+0x292/0x2b0 [ 1342.825718][T28733] ? is_bpf_text_address+0x26/0x2b0 [ 1342.825735][T28733] ? kernel_text_address+0xa5/0xe0 [ 1342.825756][T28733] ? __kernel_text_address+0xd/0x40 [ 1342.825776][T28733] ? unwind_get_return_address+0x4d/0x90 [ 1342.825793][T28733] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1342.825812][T28733] ? arch_stack_walk+0xfc/0x150 [ 1342.825833][T28733] ? stack_trace_save+0x9c/0xe0 [ 1342.825850][T28733] ? __pfx_stack_trace_save+0x10/0x10 [ 1342.825869][T28733] ? stack_depot_save_flags+0x40/0x860 [ 1342.825893][T28733] ? kasan_save_track+0x4f/0x80 [ 1342.825912][T28733] ? kasan_save_track+0x3e/0x80 [ 1342.825930][T28733] ? __kasan_save_free_info+0x46/0x50 [ 1342.825947][T28733] ? __kasan_slab_free+0x5c/0x80 [ 1342.825966][T28733] ? kfree+0x19a/0x6d0 [ 1342.825983][T28733] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1342.826000][T28733] ? security_file_ioctl+0xcb/0x2d0 [ 1342.826017][T28733] ? __se_sys_ioctl+0x47/0x170 [ 1342.826033][T28733] ? do_syscall_64+0xfa/0xfa0 [ 1342.826053][T28733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.826076][T28733] ? __asan_memset+0x22/0x50 [ 1342.826093][T28733] ? blk_get_meta_cap+0x18c/0x750 [ 1342.826115][T28733] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1342.826136][T28733] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.826157][T28733] ? blkdev_common_ioctl+0xff7/0x2550 [ 1342.826173][T28733] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1342.826190][T28733] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1342.826205][T28733] ? do_vfs_ioctl+0xbe8/0x1430 [ 1342.826223][T28733] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1342.826241][T28733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1342.826270][T28733] ? __pfx_lo_ioctl+0x10/0x10 [ 1342.826289][T28733] blkdev_ioctl+0x5af/0x6d0 [ 1342.826304][T28733] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1342.826317][T28733] ? __fget_files+0x3a0/0x420 [ 1342.826331][T28733] ? __fget_files+0x2a/0x420 [ 1342.826345][T28733] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1342.826362][T28733] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1342.826375][T28733] __se_sys_ioctl+0xfc/0x170 [ 1342.826393][T28733] do_syscall_64+0xfa/0xfa0 [ 1342.826413][T28733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.826427][T28733] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1342.826442][T28733] ? clear_bhb_loop+0x60/0xb0 [ 1342.826457][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.826476][T28733] RIP: 0033:0x7fa3b438f749 [ 1342.826491][T28733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1342.826505][T28733] RSP: 002b:00007fa3b52e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.826521][T28733] RAX: ffffffffffffffda RBX: 00007fa3b45e5fa0 RCX: 00007fa3b438f749 [ 1342.826533][T28733] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000009 [ 1342.826543][T28733] RBP: 00007fa3b4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1342.826553][T28733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.826563][T28733] R13: 00007fa3b45e6038 R14: 00007fa3b45e5fa0 R15: 00007fa3b470fa28 [ 1342.826580][T28733] [ 1343.358389][T28048] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1343.569849][T28048] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.586793][T28048] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1343.606478][T28048] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1343.619747][T28048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1343.627955][T28048] usb 3-1: SerialNumber: syz [ 1343.699582][T21331] usb 1-1: USB disconnect, device number 105 [ 1343.836579][T28743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.845372][T28743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.855525][T28743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.864278][T28743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.883290][T28048] usb 3-1: 0:2 : does not exist [ 1343.901385][T28048] usb 3-1: USB disconnect, device number 64